last executing test programs:

3m59.558567479s ago: executing program 2 (id=1150):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)

3m59.510097815s ago: executing program 1 (id=1151):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x1000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000008000000010000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f", 0xa}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x1f33b2a5dbee4960, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x122)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
socket$kcm(0x29, 0x2, 0x0)
r3 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)

3m59.509450589s ago: executing program 2 (id=1153):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0xa, &(0x7f0000000300)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2}}}], 0x20}, 0x0)

3m59.509270933s ago: executing program 2 (id=1154):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000))

3m59.388528478s ago: executing program 2 (id=1155):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)

3m59.319731995s ago: executing program 1 (id=1156):
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)

3m59.24820591s ago: executing program 1 (id=1158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m59.247863942s ago: executing program 2 (id=1159):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

3m59.109734052s ago: executing program 1 (id=1162):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

3m58.945871928s ago: executing program 2 (id=1164):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000001100), 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7351}, 0x100c, 0x0, 0x0, 0x0, 0x20000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

3m58.94565082s ago: executing program 0 (id=1165):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

3m58.945518488s ago: executing program 1 (id=1166):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

3m58.94539515s ago: executing program 1 (id=1167):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89ef, &(0x7f0000000000)={r3})

3m58.945266291s ago: executing program 0 (id=1168):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0xa}, {0x1, 0x1, 0xffffffff}, {0x0, 0x80004, 0x810104, 0x4}], 0x10, 0x1}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

3m58.899885177s ago: executing program 0 (id=1169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20)

3m58.354730129s ago: executing program 0 (id=1170):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

3m58.354485974s ago: executing program 0 (id=1171):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080005000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m58.354231277s ago: executing program 0 (id=1172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270121406"], 0xffdd)

3m43.79323128s ago: executing program 32 (id=1167):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89ef, &(0x7f0000000000)={r3})

3m43.698335783s ago: executing program 33 (id=1164):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000001100), 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7351}, 0x100c, 0x0, 0x0, 0x0, 0x20000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

3m42.794694688s ago: executing program 34 (id=1172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270121406"], 0xffdd)

3m25.232722842s ago: executing program 5 (id=1358):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

3m25.164354828s ago: executing program 5 (id=1361):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x42)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x2)

3m25.161667884s ago: executing program 5 (id=1363):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28)

3m25.035870737s ago: executing program 5 (id=1367):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x4}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000600)="3766fc2cc62fce57376fe0e2ec1f8dd3e24369b5ac033ef10cd5f8a5c4cf0749ce370f356defacf9ef1c180f1e1038ef5dbcf7c7595f158ee9408802d37c2127308a1049affa771800e2a5bb335bca8bee7725d58631181af23eb73ca5f32f0c0d81c69873c1d3aed4f425f563b1e5068fee5e1790aadf6ca46540f95674b76d49434e9f24b29da772655e1889246e9327cea4127e8d2486e60eadbaf490a8912dd7ec9d945b3a54eaa9844d0feb8b6df669821300b91e440ef32b87d815d050740282550f73cebe15e38c8781e0a19730bda2d489e50366b168eee55a84cc", 0xdf}, {&(0x7f0000000740)="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", 0xff}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000180)="e79d271dd28cec93b09dad", 0xb}, {&(0x7f00000001c0)="e6962154c2c39a8414ad81748ca799e5e9aa037cb2", 0x15}, {&(0x7f0000000240)="e6f614f1844215eeb00b5d0d3b3e62eb2799c1bf416f24796898b341705c16d3a28978b31a8106b773cb864cb475cc7e0bd04af6b3e6669c4ccc80e1205b882187c2b66e61ab35c6273d8e8a1cc75b4ae20aad5c68572ec4bb1f817feea68f054720bff140df240c22754d9769fd2ff44fa5af1f", 0x74}, {&(0x7f0000000840)="00e0df5fb7f7f14139de8a12df1e2b42505cd22c00aa83e7f35915a7a641aefe024089ee170b9d40e08e834306493c2f6762dcc2d2112a8fdc89bc4c18625e277a041c8f0a31deb8bee3b753173df8dc4c1228394339cd5aabfe41724d10145d100c9f41c34aa75dbe9a98a9f42b887eefff634666fbc6516b862faffcb20deebfe80e1a2b722817423de357e095b37098d28b3622832f77dff5540c280273370c8679f027aff672583b48146ca21abedbe9da607f53f2cbc23dbd04b7c1dc82", 0xc0}, {&(0x7f0000000900)="e107c2086f23ed25a72b0d4710c1689379cf512de370f45de700042f51b2f6cafe6eaf5daa0c1e49d52fb54fe07e548b08f8062f8b6c0522c3fe4096c0bcdefbf874f6c2c7297d8f236cfb5078c33563f83f7bdcbd637562", 0x58}], 0x8, &(0x7f0000000380)="0dd144020082c0db99809267c7c18551c05d4973a40b66efb5ba42d66d7e166262eef0e64ace8d5fca2a977e", 0x2c, 0x4000040}, 0x4004004)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020040040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
recvmsg$unix(r1, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e030800d3ff"], 0xffdd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4)

3m25.035592683s ago: executing program 4 (id=1368):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xcb}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m25.029819116s ago: executing program 4 (id=1369):
socket$kcm(0x2d, 0x7, 0x0)

3m24.9759856s ago: executing program 4 (id=1370):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x13}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

3m24.975693009s ago: executing program 4 (id=1371):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="110000e2ff00000000", @ANYRES32, @ANYRES64=0x0], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x9, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

3m24.827875183s ago: executing program 4 (id=1373):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1d, &(0x7f0000000100), 0x120)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(0x3)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x10)

3m24.643128768s ago: executing program 5 (id=1374):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001d0081cb2bfffaecdb4cb9f207c804a00d0000006a4e99", 0x1b}], 0x1, 0x0, 0x0, 0x5865}, 0x800)

3m24.518047172s ago: executing program 4 (id=1375):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x9, 0x0, 0x28)

3m24.461152904s ago: executing program 35 (id=1375):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x9, 0x0, 0x28)

3m24.264820467s ago: executing program 5 (id=1377):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

3m24.264690464s ago: executing program 36 (id=1377):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

1.890949802s ago: executing program 3 (id=4984):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x39, 0x0, 0x6}, 0x28)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.792898063s ago: executing program 3 (id=4985):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x2b, 0x2028}, 0x20)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x10, 0x8, 0x0, 0x0, 0x0, 0x7ff, 0x53510, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x18709a8f, 0x6}, 0x2480, 0x800, 0x4c1, 0x9, 0xa7f, 0x4, 0xef5, 0x0, 0x2c, 0x0, 0xeb}, 0x0, 0x9, r0, 0x2)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f0000000440)="df6a6d2e4c6f96edefb9a86ed04b6a530ae089006510500e78713b830784fa18a149260ea854a46b6f2544bdf2cf763587c694ab2606d7727d23f3507dfb14b07a4b578b056a8768b03a3c5635de437880791014051f33aed5698c36a52300d516f0ad90a967b3a9dd005f4888dc1bec7e51208e1d8ee8136fb2ed6c19ba76d997b19eaf016f3a29a65708355d8f932f16c7753b3e68f64fe1e8905d0e613a291deb5ab5bd3fe59fec57378eabc83d994bc7a818bd748fa777448fcfdf774bb3cbb3b6952070305a30a9c59c839e492d5d26dbbcb3671b69040ec27ca7c12f8f7ab6e94471d5fbf8f5c1dfca3dc0", &(0x7f0000000540)=""/16, &(0x7f0000001980), 0x0, 0x2, r2}, 0x38)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x118fa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)

892.957712ms ago: executing program 3 (id=4990):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x97}}}, 0x62, 0x0, 0x0, 0x0, 0x5c8}, 0x2000f765)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

892.715749ms ago: executing program 7 (id=4991):
r0 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4)

843.1455ms ago: executing program 7 (id=4992):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

842.947892ms ago: executing program 7 (id=4993):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)

752.041386ms ago: executing program 6 (id=4994):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="140000002b000b6cacff00f90429fc60010fc569", 0x14}], 0x1}, 0x0)

751.768646ms ago: executing program 3 (id=4995):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)

750.986732ms ago: executing program 6 (id=4996):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000180), 0x0}, 0x20)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB="000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32], 0x66)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000015b33b3f900464bdcbdd60ca170b1dc03ec4f89f6771c6f649174c847790ecab5e26ba0d36367fe9b6719284ebfb95b8f89902bfed906f3f58620000560200000000000000dd580dee3730eee7439a21074e6a07c469", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), 0x0, 0xffffffff, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x11, 0xa, 0x300, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x72d2e1e835a54c04, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000000086000000d5e0d55be6d571aa7a0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)

657.168006ms ago: executing program 7 (id=4997):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, 0x0, 0x0)

655.396314ms ago: executing program 7 (id=4998):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x53}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum64={0x6}, @fwd={0xb}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x5f, 0x5f]}}, &(0x7f0000000500)=""/190, 0x4d, 0xbe, 0x0, 0x3}, 0x28)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

244.423958ms ago: executing program 3 (id=4999):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x480c0)

191.420133ms ago: executing program 6 (id=5000):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="41fc", 0x2}], 0x1}, 0x4040)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1)

191.018792ms ago: executing program 3 (id=5001):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001340), 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5e"], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xae, 0x80, 0x0, 0x0, 0x0, 0x2, 0x2705, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x220200, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000fcffffff00000000000000009500000000000000fc58cb06c5494ac953c48a6192761ef5be8d3da6fcc8bde50b150ece8b6fb1f08b4936c29caf70e81e56678b3f53529f1a2e0dc0cca5888dc745a590357b2632f7a531d0931fbcfbc8f09d7c245dc26dbbf36768392628e9e87a21bdecb76430aa56790adc0528094dec1c65946c00e8cdced518cbce23f4cae3295704d9b56937196dcab09d4d208cbf3ffbfe0dc357da26f48259cb36686018bd7f142324a57b8ca5d3496dc2a5d7945f"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000f40)=r2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x3, 0xaea}, 0xd68a, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0xe)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={r0, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x2, 0x10, 0xfffffffa, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r0], 0x0, 0x10, 0x1}, 0x94)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000500)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091be"], 0xfe33)

190.748187ms ago: executing program 6 (id=5002):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

163.245334ms ago: executing program 7 (id=5003):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x0, 0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000080)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x18, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$kcm(0x2, 0x922000000001, 0x106)

596.251µs ago: executing program 6 (id=5004):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

0s ago: executing program 6 (id=5005):
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc98, 0x0, @perf_config_ext={0x3, 0x8001}, 0x28e4dcf2182c8c55, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
mkdir(0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)

kernel console output (not intermixed with test programs):

(1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.700407][ T8492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.704458][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.706819][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.709110][ T8485] bridge_slave_1: entered allmulticast mode
[  137.711815][ T8485] bridge_slave_1: entered promiscuous mode
[  137.731109][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.734681][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.742349][ T8492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.772716][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.774911][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.783733][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.788803][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.791003][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.800674][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.812273][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.824733][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.875019][   T13] ip6gretap0: left allmulticast mode
[  137.876861][   T13] ip6gretap0: left promiscuous mode
[  137.879374][   T13] bridge0: port 3(ip6gretap0) entered disabled state
[  137.884433][   T13] bridge_slave_1: left allmulticast mode
[  137.886239][   T13] bridge_slave_1: left promiscuous mode
[  137.888067][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.894365][   T13] bridge_slave_0: left allmulticast mode
[  137.896136][   T13] bridge_slave_0: left promiscuous mode
[  137.897942][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.139986][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.145550][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.149444][   T13] bond0 (unregistering): Released all slaves
[  138.177171][ T8492] hsr_slave_0: entered promiscuous mode
[  138.179509][ T8492] hsr_slave_1: entered promiscuous mode
[  138.181617][ T8492] debugfs: 'hsr0' already exists in 'hsr'
[  138.183530][ T8492] Cannot create hsr debugfs directory
[  138.200271][ T8485] team0: Port device team_slave_0 added
[  138.211292][ T8489] hsr_slave_0: entered promiscuous mode
[  138.214497][ T8489] hsr_slave_1: entered promiscuous mode
[  138.216776][ T8489] debugfs: 'hsr0' already exists in 'hsr'
[  138.218621][ T8489] Cannot create hsr debugfs directory
[  138.233664][ T8485] team0: Port device team_slave_1 added
[  138.304280][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.306469][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.316447][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.340685][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.347984][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.357147][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.392886][ T5209] Bluetooth: hci5: command tx timeout
[  138.493372][ T8485] hsr_slave_0: entered promiscuous mode
[  138.495636][ T8485] hsr_slave_1: entered promiscuous mode
[  138.497699][ T8485] debugfs: 'hsr0' already exists in 'hsr'
[  138.499501][ T8485] Cannot create hsr debugfs directory
[  138.530048][   T13] hsr_slave_0: left promiscuous mode
[  138.532156][   T13] hsr_slave_1: left promiscuous mode
[  138.534834][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.537142][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.540375][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.542871][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.552121][   T13] veth1_macvtap: left promiscuous mode
[  138.554073][   T13] veth0_macvtap: left promiscuous mode
[  138.555878][   T13] veth1_vlan: left promiscuous mode
[  138.557555][   T13] veth0_vlan: left promiscuous mode
[  138.780136][   T13] team0 (unregistering): Port device team_slave_1 removed
[  138.801188][   T13] team0 (unregistering): Port device team_slave_0 removed
[  139.179375][ T8492] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  139.189380][ T8492] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  139.199856][ T8492] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  139.230993][ T8492] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  139.270725][ T8489] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  139.290164][ T8489] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  139.306071][ T8489] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  139.320522][ T8489] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.416921][ T8485] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  139.427206][ T8485] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  139.436875][ T8485] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  139.443129][ T8485] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  139.468405][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.496551][ T8492] 8021q: adding VLAN 0 to HW filter on device team0
[  139.509179][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.511428][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.525849][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.528145][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.566114][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.593042][ T5209] Bluetooth: hci3: command tx timeout
[  139.599875][ T8489] 8021q: adding VLAN 0 to HW filter on device team0
[  139.606844][ T8492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.629235][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.631534][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.648121][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.667984][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.670222][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.672758][ T5209] Bluetooth: hci4: command tx timeout
[  139.716244][ T8485] 8021q: adding VLAN 0 to HW filter on device team0
[  139.738692][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.740965][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.756193][ T8489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.766446][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.769014][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.789520][ T8492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.824688][ T8485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.962842][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.987998][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.021086][ T8492] veth0_vlan: entered promiscuous mode
[  140.069324][ T8492] veth1_vlan: entered promiscuous mode
[  140.076420][ T8485] veth0_vlan: entered promiscuous mode
[  140.081493][ T8485] veth1_vlan: entered promiscuous mode
[  140.129943][ T8485] veth0_macvtap: entered promiscuous mode
[  140.146957][ T8492] veth0_macvtap: entered promiscuous mode
[  140.155936][ T8492] veth1_macvtap: entered promiscuous mode
[  140.158601][ T8485] veth1_macvtap: entered promiscuous mode
[  140.180160][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.189225][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.212054][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.220322][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.255265][ T8516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.261518][ T8489] veth0_vlan: entered promiscuous mode
[  140.276460][ T8516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.279122][ T8516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.285216][ T8489] veth1_vlan: entered promiscuous mode
[  140.306265][ T8516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.309045][ T8516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.333100][ T8516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.351176][ T8516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.361462][ T8516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.381685][ T8489] veth0_macvtap: entered promiscuous mode
[  140.406995][ T8489] veth1_macvtap: entered promiscuous mode
[  140.419432][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.422020][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.458825][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.468898][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.472972][ T5209] Bluetooth: hci5: command tx timeout
[  140.483156][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.485760][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.495093][ T8516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.504071][ T8516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.506779][ T8516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.511469][ T8516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.521242][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.526174][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.575384][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.582495][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.622974][ T3068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.625474][ T3068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.672134][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.678297][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.737752][ T8591] syzkaller0: entered promiscuous mode
[  140.739519][ T8591] syzkaller0: entered allmulticast mode
[  141.672776][ T5209] Bluetooth: hci3: command tx timeout
[  141.755743][ T5209] Bluetooth: hci4: command tx timeout
[  142.072355][ T8636] netlink: 'syz.5.1188': attribute type 21 has an invalid length.
[  142.451009][ T8667] sctp: [Deprecated]: syz.3.1199 (pid 8667) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.451009][ T8667] Use struct sctp_sack_info instead
[  142.553099][ T5209] Bluetooth: hci5: command tx timeout
[  143.239222][ T8685] netlink: 'syz.4.1203': attribute type 12 has an invalid length.
[  143.241703][ T8685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1203'.
[  143.359352][ T8688] veth1_macvtap: left promiscuous mode
[  143.395528][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'.
[  145.061110][ T8735] netlink: 'syz.5.1223': attribute type 1 has an invalid length.
[  145.065781][ T8735] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1223'.
[  145.190890][ T8745] syzkaller0: entered promiscuous mode
[  145.194426][ T8745] syzkaller0: entered allmulticast mode
[  145.272052][ T8753] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1232'.
[  145.281971][ T8753] team_slave_0: entered allmulticast mode
[  145.287131][ T8753] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  145.456477][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1241'.
[  145.459720][ T8771] netlink: 'syz.5.1241': attribute type 2 has an invalid length.
[  145.462111][ T8771] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1241'.
[  145.609540][ T8783] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1247'.
[  145.621799][ T8783] netlink: 'syz.4.1247': attribute type 2 has an invalid length.
[  145.626167][ T8783] netlink: 'syz.4.1247': attribute type 8 has an invalid length.
[  145.639830][ T8783] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1247'.
[  145.839014][ T8801] netlink: 'syz.4.1255': attribute type 21 has an invalid length.
[  145.848871][ T8801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1255'.
[  145.851682][ T8801] netlink: 'syz.4.1255': attribute type 1 has an invalid length.
[  146.038382][ T8828] netlink: 'syz.3.1268': attribute type 21 has an invalid length.
[  146.041572][ T8828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'.
[  146.623630][ T8850] !: renamed from bond_slave_0 (while UP)
[  146.704087][ T8852] netlink: 'syz.4.1277': attribute type 21 has an invalid length.
[  146.882131][ T5209] Bluetooth: hci4: adv larger than maximum supported
[  147.008985][ T8873] batman_adv: batadv0: Adding interface: netdevsim0
[  147.014624][ T8873] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.022673][ T8873] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  147.174021][ T8886] validate_nla: 1 callbacks suppressed
[  147.174034][ T8886] netlink: 'syz.3.1292': attribute type 23 has an invalid length.
[  147.278337][ T8895] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  147.278911][ T8895] netlink: 'syz.3.1297': attribute type 17 has an invalid length.
[  147.379027][ T8901] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.381722][ T8901] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  148.516555][ T8919] sit0: entered allmulticast mode
[  149.770220][ T8954] netlink: 'syz.5.1318': attribute type 10 has an invalid length.
[  149.776673][ T8954] __nla_validate_parse: 5 callbacks suppressed
[  149.776718][ T8954] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1318'.
[  149.784237][ T8954] bond0: entered promiscuous mode
[  149.785955][ T8954] !: entered promiscuous mode
[  149.788349][ T8954] bond_slave_1: entered promiscuous mode
[  149.795938][ T8954] bridge0: port 3(bond0) entered blocking state
[  149.799398][ T8954] bridge0: port 3(bond0) entered disabled state
[  149.802285][ T8954] bond0: entered allmulticast mode
[  149.805059][ T8954] !: entered allmulticast mode
[  149.806686][ T8954] bond_slave_1: entered allmulticast mode
[  149.818051][ T8960] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1322'.
[  149.823075][ T8954] bridge0: port 3(bond0) entered blocking state
[  149.824443][ T8961] netlink: 'syz.5.1318': attribute type 4 has an invalid length.
[  149.825556][ T8954] bridge0: port 3(bond0) entered forwarding state
[  149.827900][ T8961] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1318'.
[  149.876717][ T8965] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1324'.
[  149.960077][ T5209] Bluetooth: hci3: unexpected event 0x3d length: 151 > 14
[  150.146386][ T8987] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1334'.
[  150.221807][ T8992] netlink: 'syz.4.1337': attribute type 21 has an invalid length.
[  150.228669][ T8992] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1337'.
[  150.401670][ T9002] syzkaller0: entered promiscuous mode
[  150.405235][ T9002] syzkaller0: entered allmulticast mode
[  150.525651][ T9018] netlink: 'syz.3.1350': attribute type 49 has an invalid length.
[  151.400294][ T9016] netlink: 'syz.4.1348': attribute type 29 has an invalid length.
[  151.450573][ T9025] netlink: 'syz.4.1352': attribute type 3 has an invalid length.
[  151.460263][ T9025] netlink: 'syz.4.1352': attribute type 6 has an invalid length.
[  151.478260][ T9025] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.1352'.
[  151.559284][ T9033] netlink: 'syz.4.1356': attribute type 10 has an invalid length.
[  151.650736][ T5209] Bluetooth: hci5: SCO packet too small
[  151.821709][ T9061] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1370'.
[  151.860728][ T9064] netlink: 137592 bytes leftover after parsing attributes in process `syz.5.1367'.
[  152.252403][ T5714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.315352][ T5714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.386184][ T5714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.452735][ T5714] batman_adv: batadv0: Removing interface: netdevsim0
[  152.455686][ T5714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.556358][ T5714] bridge_slave_1: left allmulticast mode
[  152.558953][ T5714] bridge_slave_1: left promiscuous mode
[  152.561206][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.571255][ T5714] bridge_slave_0: left allmulticast mode
[  152.575278][ T5714] bridge_slave_0: left promiscuous mode
[  152.577210][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.794597][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.798859][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.802402][ T5714] bond0 (unregistering): Released all slaves
[  153.078431][ T5714] hsr_slave_0: left promiscuous mode
[  153.080542][ T5714] hsr_slave_1: left promiscuous mode
[  153.082617][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.084930][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.087595][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.089882][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.101176][ T5714] veth0_macvtap: left promiscuous mode
[  153.104534][ T5714] veth1_vlan: left promiscuous mode
[  153.106237][ T5714] veth0_vlan: left promiscuous mode
[  153.396494][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.400063][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.405945][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.409235][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.412102][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.541748][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  153.576733][ T5714] team0 (unregistering): Port device team_slave_0 removed
[  154.005875][ T9093] delete_channel: no stack
[  154.062381][ T9095] validate_nla: 2 callbacks suppressed
[  154.062394][ T9095] netlink: 'syz.3.1380': attribute type 2 has an invalid length.
[  154.083504][ T9095] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1380'.
[  154.115015][ T5209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.118042][ T5209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.122160][ T5209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.127517][ T5209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.142543][ T5209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.310204][ T9089] chnl_net:caif_netlink_parms(): no params data found
[  154.421826][ T9089] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.424375][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.426698][ T9089] bridge_slave_0: entered allmulticast mode
[  154.429509][ T9089] bridge_slave_0: entered promiscuous mode
[  154.442051][ T9089] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.444594][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.446917][ T9089] bridge_slave_1: entered allmulticast mode
[  154.451158][ T9089] bridge_slave_1: entered promiscuous mode
[  155.260269][ T9096] chnl_net:caif_netlink_parms(): no params data found
[  155.284981][ T9089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.307085][ T9089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.325094][ T5714] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.332020][ T9117] veth0_vlan: entered allmulticast mode
[  155.432725][   T54] Bluetooth: hci0: command tx timeout
[  155.438036][ T5714] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.445672][ T9089] team0: Port device team_slave_0 added
[  155.451509][ T9118] veth0_vlan: left promiscuous mode
[  155.456675][ T9118] veth0_vlan: entered promiscuous mode
[  155.463690][ T9089] team0: Port device team_slave_1 added
[  155.538253][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.540436][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.548624][ T9089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.566864][ T5714] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.573622][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.575854][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.578176][ T9096] bridge_slave_0: entered allmulticast mode
[  155.581978][ T9096] bridge_slave_0: entered promiscuous mode
[  155.587113][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.589812][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.592069][ T9096] bridge_slave_1: entered allmulticast mode
[  155.595865][ T9096] bridge_slave_1: entered promiscuous mode
[  155.598612][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.600897][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.611750][ T9089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.636768][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.641369][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.670168][ T5714] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.689560][ T9096] team0: Port device team_slave_0 added
[  155.700909][ T9096] team0: Port device team_slave_1 added
[  155.714958][ T9089] hsr_slave_0: entered promiscuous mode
[  155.717345][ T9089] hsr_slave_1: entered promiscuous mode
[  155.719582][ T9089] debugfs: 'hsr0' already exists in 'hsr'
[  155.721439][ T9089] Cannot create hsr debugfs directory
[  155.742259][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.748402][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.756450][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.764626][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.766777][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.775121][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.861713][ T9096] hsr_slave_0: entered promiscuous mode
[  155.864184][ T9096] hsr_slave_1: entered promiscuous mode
[  155.866411][ T9096] debugfs: 'hsr0' already exists in 'hsr'
[  155.868295][ T9096] Cannot create hsr debugfs directory
[  155.903496][ T5714] bond0: left allmulticast mode
[  155.905187][ T5714] !: left allmulticast mode
[  155.906686][ T5714] bond_slave_1: left allmulticast mode
[  155.908660][ T5714] bridge0: port 3(bond0) entered disabled state
[  155.913435][ T5714] bridge_slave_1: left allmulticast mode
[  155.915351][ T5714] bridge_slave_1: left promiscuous mode
[  155.917302][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.921314][ T5714] bridge_slave_0: left promiscuous mode
[  155.923892][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.158341][ T5714] bond0 (unregistering): (slave 1!): Releasing backup interface
[  156.161065][ T5714] !: left promiscuous mode
[  156.164678][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.167609][ T5714] bond_slave_1: left promiscuous mode
[  156.170018][ T5714] bond0 (unregistering): Released all slaves
[  156.243847][   T54] Bluetooth: hci1: command tx timeout
[  156.307525][ T9089] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  156.314474][ T9089] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  156.319699][ T9089] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  156.339399][ T9089] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  156.391956][ T9096] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  156.397404][ T9096] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  156.410639][ T5714] hsr_slave_0: left promiscuous mode
[  156.414847][ T5714] hsr_slave_1: left promiscuous mode
[  156.416879][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.419124][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.421864][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.424956][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.437021][ T5714] veth1_macvtap: left promiscuous mode
[  156.438770][ T5714] veth0_macvtap: left promiscuous mode
[  156.440528][ T5714] veth1_vlan: left promiscuous mode
[  156.442296][ T5714] veth0_vlan: left promiscuous mode
[  156.686319][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  156.706315][ T5714] team0 (unregistering): Port device team_slave_0 removed
[  156.925987][ T9096] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  156.931936][ T9096] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  157.018809][ T9089] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.042284][ T9089] 8021q: adding VLAN 0 to HW filter on device team0
[  157.055317][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.057672][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.075564][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.077871][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.088112][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.107768][ T9096] 8021q: adding VLAN 0 to HW filter on device team0
[  157.129322][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.131852][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.159046][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.161478][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.273917][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.334771][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.495171][ T9089] veth0_vlan: entered promiscuous mode
[  157.513693][   T54] Bluetooth: hci0: command tx timeout
[  157.518548][ T9089] veth1_vlan: entered promiscuous mode
[  157.545929][ T9096] veth0_vlan: entered promiscuous mode
[  157.560295][ T9096] veth1_vlan: entered promiscuous mode
[  157.565743][ T9089] veth0_macvtap: entered promiscuous mode
[  157.569612][ T9089] veth1_macvtap: entered promiscuous mode
[  157.603660][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.611367][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.616333][ T9096] veth0_macvtap: entered promiscuous mode
[  157.624604][ T9096] veth1_macvtap: entered promiscuous mode
[  157.630143][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.641620][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.649465][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.891940][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.895183][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.910636][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.928575][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.971676][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.980740][ T5848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.986525][ T5848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.027360][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.029837][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.072636][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.075107][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.103647][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.106307][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.123560][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.133391][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.277607][ T9185] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1397'.
[  158.281039][ T9185] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1397'.
[  158.286178][ T9182] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1397'.
[  158.313188][   T54] Bluetooth: hci1: command tx timeout
[  159.048148][ T9225] netlink: 'syz.6.1416': attribute type 12 has an invalid length.
[  159.059339][ T9225] netlink: 14585 bytes leftover after parsing attributes in process `syz.6.1416'.
[  159.137539][ T9231] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1421'.
[  159.569855][ T9261] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.1432'.
[  159.582705][ T9261] netlink: 6320 bytes leftover after parsing attributes in process `syz.6.1432'.
[  160.069630][   T54] Bluetooth: hci0: command tx timeout
[  161.066295][   T54] Bluetooth: hci1: command tx timeout
[  162.073648][   T54] Bluetooth: hci0: command tx timeout
[  163.113926][   T54] Bluetooth: hci1: command tx timeout
[  167.672867][ T9275] netlink: 'syz.7.1438': attribute type 10 has an invalid length.
[  167.682118][ T9275] veth0_vlan: left promiscuous mode
[  167.698968][ T9275] veth0_vlan: entered promiscuous mode
[  167.705219][ T9275] team0: Device veth0_vlan failed to register rx_handler
[  168.030828][ T9289] netlink: 'syz.6.1444': attribute type 10 has an invalid length.
[  168.036448][ T9289] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1444'.
[  168.402331][ T9306] netlink: 'syz.6.1451': attribute type 3 has an invalid length.
[  168.429933][ T9306] netlink: 'syz.6.1451': attribute type 2 has an invalid length.
[  168.432319][ T9306] netlink: 198112 bytes leftover after parsing attributes in process `syz.6.1451'.
[  168.771869][ T5714] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.210425][ T9356] netlink: 'syz.7.1474': attribute type 10 has an invalid length.
[  169.214490][ T9356] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.1474'.
[  170.460208][ T9408] netlink: 'syz.3.1498': attribute type 51 has an invalid length.
[  170.599367][ T9418] netlink: 'syz.6.1503': attribute type 2 has an invalid length.
[  170.868949][ T9440] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1513'.
[  171.899563][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1528'.
[  173.225027][ T9527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.567673][ T9549] sctp: [Deprecated]: syz.7.1560 (pid 9549) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.567673][ T9549] Use struct sctp_sack_info instead
[  173.996672][   T54] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  173.998312][ T9552] netlink: 'syz.3.1562': attribute type 10 has an invalid length.
[  174.002858][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.005801][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.015820][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.018157][ T9552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.020619][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.022958][ T9552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.028524][ T9552] team0: Port device bridge0 added
[  174.643742][ T9584] netlink: 'syz.7.1577': attribute type 25 has an invalid length.
[  174.649500][ T9584] netlink: 'syz.7.1577': attribute type 28 has an invalid length.
[  175.533317][ T9599] netlink: 'syz.7.1584': attribute type 10 has an invalid length.
[  175.550072][ T9599] team0: Port device wlan1 added
[  175.678823][ T9609] syzkaller0: create flow: hash 1969110046 index 1
[  175.739889][ T9609] syzkaller0: delete flow: hash 1969110046 index 1
[  175.814314][ T9623] netlink: 'syz.7.1595': attribute type 4 has an invalid length.
[  175.817748][ T9623] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1595'.
[  176.686148][ T9636] netlink: 'syz.6.1600': attribute type 5 has an invalid length.
[  176.948610][ T9640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.958807][ T5209] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  177.399365][ T9673] netlink: 'syz.7.1617': attribute type 4 has an invalid length.
[  177.402290][ T9673] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1617'.
[  177.668180][ T9696] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1629'.
[  177.726587][ T9700] netlink: 'syz.7.1631': attribute type 9 has an invalid length.
[  177.728921][ T9700] netlink: 204732 bytes leftover after parsing attributes in process `syz.7.1631'.
[  178.529187][ T9750] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  178.539294][ T9750] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  179.033168][   T54] Bluetooth: hci0: command tx timeout
[  179.859249][ T9776] netlink: 'syz.7.1668': attribute type 2 has an invalid length.
[  179.917245][ T9783] netlink: 'syz.3.1672': attribute type 21 has an invalid length.
[  179.933219][ T9783] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1672'.
[  179.938353][ T9783] netlink: 'syz.3.1672': attribute type 3 has an invalid length.
[  179.941298][ T9783] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1672'.
[  181.016653][ T9839] netlink: 'syz.7.1696': attribute type 10 has an invalid length.
[  181.033477][ T9839] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1696'.
[  181.044866][ T9839] team0: entered promiscuous mode
[  181.046613][ T9839] team_slave_0: entered promiscuous mode
[  181.049083][ T9839] team_slave_1: entered promiscuous mode
[  181.051883][ T9839] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  181.073986][ T9839] team0: entered allmulticast mode
[  181.076958][ T9839] team_slave_0: entered allmulticast mode
[  181.082177][ T9839] team_slave_1: entered allmulticast mode
[  181.087322][ T9839] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  181.106227][ T9839] bridge0: port 3(team0) entered blocking state
[  181.108590][ T9839] bridge0: port 3(team0) entered disabled state
[  181.123665][ T9839] bridge0: port 3(team0) entered blocking state
[  181.125947][ T9839] bridge0: port 3(team0) entered forwarding state
[  181.526483][ T9873] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.1715'.
[  181.618007][   T54] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  181.780725][   T54] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  181.786537][   T54] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  181.924760][ T9900] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1726'.
[  181.927773][ T9900] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  182.344313][ T9923] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1737'.
[  182.443152][ T9930] macvtap0: refused to change device tx_queue_len
[  182.745277][ T9948] syzkaller0: entered promiscuous mode
[  182.747389][ T9948] syzkaller0: entered allmulticast mode
[  183.811386][ T9971] netlink: 'syz.7.1760': attribute type 10 has an invalid length.
[  183.815580][ T9971] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1760'.
[  184.122833][ T9985] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.1766'.
[  184.126892][ T9985] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.1766'.
[  184.453025][T10005] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1776'.
[  184.697172][T10016] netlink: 'syz.7.1780': attribute type 21 has an invalid length.
[  184.700166][T10016] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1780'.
[  184.866183][T10024] tc_dump_action: action bad kind
[  184.907033][ T5209] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  185.496753][T10062] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1801'.
[  185.896310][T10086] netlink: 'syz.7.1812': attribute type 22 has an invalid length.
[  186.177801][T10093] __nla_validate_parse: 3 callbacks suppressed
[  186.177813][T10093] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1815'.
[  186.188115][T10093] tc_dump_action: action bad kind
[  186.466316][T10101] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1819'.
[  186.607320][T10107] netlink: 'syz.3.1821': attribute type 10 has an invalid length.
[  186.609732][T10107] netlink: 'syz.3.1821': attribute type 19 has an invalid length.
[  186.612282][T10107] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1821'.
[  186.737312][T10114] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.1824'.
[  186.740212][T10114] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  186.743449][T10114] openvswitch: netlink: Message has 6324 unknown bytes.
[  187.752755][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  187.767563][T10132] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1831'.
[  188.488997][T10148] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1837'.
[  188.818892][T10173] netlink: 'syz.6.1849': attribute type 21 has an invalid length.
[  188.821253][T10173] netlink: 'syz.6.1849': attribute type 5 has an invalid length.
[  188.906236][T10181] netlink: 'syz.3.1853': attribute type 1 has an invalid length.
[  189.303171][T10220] netlink: 'syz.7.1872': attribute type 2 has an invalid length.
[  189.307721][T10220] netlink: 51 bytes leftover after parsing attributes in process `syz.7.1872'.
[  189.314401][T10222] delete_channel: no stack
[  190.902880][T10242] netlink: 'syz.3.1887': attribute type 10 has an invalid length.
[  190.905681][T10242] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1887'.
[  190.908645][T10242] bond0: entered promiscuous mode
[  190.910655][T10242] bond_slave_0: entered promiscuous mode
[  190.914997][T10242] bond_slave_1: entered promiscuous mode
[  190.918099][T10242] bridge0: port 3(bond0) entered blocking state
[  190.920962][T10242] bridge0: port 3(bond0) entered disabled state
[  190.923704][T10242] bond0: entered allmulticast mode
[  190.925655][T10242] bond_slave_0: entered allmulticast mode
[  190.927729][T10242] bond_slave_1: entered allmulticast mode
[  190.951325][T10242] bridge0: port 3(bond0) entered blocking state
[  190.953686][T10242] bridge0: port 3(bond0) entered forwarding state
[  190.967647][T10242] netlink: 'syz.3.1887': attribute type 4 has an invalid length.
[  190.971514][T10242] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1887'.
[  191.656782][T10273] netlink: 'syz.3.1895': attribute type 10 has an invalid length.
[  191.736214][T10273] macvlan0: entered promiscuous mode
[  191.739956][T10273] macvlan0: entered allmulticast mode
[  191.755201][T10273] veth1_vlan: entered allmulticast mode
[  191.760557][T10273] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  192.001727][T10302] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1909'.
[  192.008127][T10301] netlink: 40227 bytes leftover after parsing attributes in process `syz.7.1908'.
[  192.426310][T10336] syzkaller0: entered promiscuous mode
[  192.428040][T10336] syzkaller0: entered allmulticast mode
[  193.077313][T10367] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1939'.
[  193.197308][T10371] syzkaller0: entered promiscuous mode
[  193.198968][T10371] syzkaller0: entered allmulticast mode
[  193.755373][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.757553][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.128954][T10374] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.131969][T10374] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.571158][T10395] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1951'.
[  194.720905][T10403] netlink: 'syz.7.1954': attribute type 10 has an invalid length.
[  194.726125][T10403] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1954'.
[  194.729204][T10403] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  194.944110][T10415] netlink: 'syz.7.1961': attribute type 4 has an invalid length.
[  194.956230][T10415] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1961'.
[  194.998619][T10424] netlink: 1057 bytes leftover after parsing attributes in process `syz.6.1960'.
[  195.100751][T10415] .`: renamed from bond0 (while UP)
[  195.192202][T10432] netlink: 'syz.6.1964': attribute type 29 has an invalid length.
[  195.203060][T10432] netlink: 'syz.6.1964': attribute type 29 has an invalid length.
[  195.230607][T10432] netlink: 'syz.6.1964': attribute type 29 has an invalid length.
[  195.261141][T10432] netlink: 'syz.6.1964': attribute type 29 has an invalid length.
[  195.334415][T10436] netlink: 'syz.6.1965': attribute type 10 has an invalid length.
[  195.337894][T10436] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1965'.
[  195.342711][T10436] batman_adv: batadv0: Adding interface: vlan1
[  195.345773][T10436] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.372565][T10436] batman_adv: batadv0: Interface activated: vlan1
[  195.476979][T10442] netlink: 1057 bytes leftover after parsing attributes in process `syz.7.1968'.
[  195.752091][T10456] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1980'.
[  195.760589][T10456] .`: renamed from bond0 (while UP)
[  195.906430][T10459] syzkaller0: entered promiscuous mode
[  195.908242][T10459] syzkaller0: entered allmulticast mode
[  195.912183][T10461] batman_adv: batadv0: Adding interface: vlan1
[  195.916058][T10461] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.923744][T10461] batman_adv: batadv0: Interface activated: vlan1
[  196.108371][T10467] validate_nla: 2 callbacks suppressed
[  196.108382][T10467] netlink: 'syz.7.1977': attribute type 10 has an invalid length.
[  196.838803][T10467] bridge0: port 3(team0) entered disabled state
[  196.841686][T10467] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.844943][T10467] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.866513][T10467] bridge0: port 3(team0) entered blocking state
[  196.868868][T10467] bridge0: port 3(team0) entered forwarding state
[  196.871493][T10467] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.874024][T10467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.876777][T10467] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.879113][T10467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.892427][T10467] .`: (slave bridge0): Enslaving as an active interface with an up link
[  196.968927][T10482] netlink: 'syz.3.1983': attribute type 4 has an invalid length.
[  197.005843][T10482] .`: renamed from bond0 (while UP)
[  197.012343][T10482] bridge0: port 3(.`) entered disabled state
[  197.051248][T10488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  197.053632][T10488] IPv6: NLM_F_CREATE should be set when creating new route
[  197.055886][T10488] IPv6: NLM_F_CREATE should be set when creating new route
[  197.116610][T10492] netlink: 'syz.6.1993': attribute type 10 has an invalid length.
[  197.120144][T10492] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.123389][T10492] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.140094][T10492] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.142734][T10492] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.145951][T10492] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.148353][T10492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.177688][T10492] .`: (slave bridge0): Enslaving as an active interface with an up link
[  197.209461][T10496] syzkaller0: entered promiscuous mode
[  197.211218][T10496] syzkaller0: entered allmulticast mode
[  198.076689][T10503] netlink: 'syz.3.1995': attribute type 2 has an invalid length.
[  198.079281][T10503] __nla_validate_parse: 4 callbacks suppressed
[  198.079290][T10503] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1995'.
[  198.127608][T10503] netlink: 'syz.3.1995': attribute type 2 has an invalid length.
[  198.130063][T10503] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1995'.
[  198.475258][T10517] netlink: 'syz.3.2006': attribute type 21 has an invalid length.
[  199.272192][T10537] netlink: 'syz.6.2010': attribute type 21 has an invalid length.
[  199.274703][T10537] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2010'.
[  199.652192][T10562] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.2022'.
[  200.120320][T10578] netlink: 'syz.3.2030': attribute type 10 has an invalid length.
[  200.142775][T10578] veth0_vlan: left allmulticast mode
[  200.159234][T10578] batman_adv: batadv0: Interface deactivated: vlan1
[  200.199343][T10578] veth0_vlan: left promiscuous mode
[  200.211675][T10578] veth0_vlan: entered promiscuous mode
[  200.224341][T10578] batman_adv: batadv0: Interface activated: vlan1
[  200.233783][T10578] team0: Device veth0_vlan failed to register rx_handler
[  200.251643][T10578] batman_adv: batadv0: Interface deactivated: vlan1
[  200.876088][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2031'.
[  200.906392][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2031'.
[  200.910013][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2031'.
[  204.098849][T10673] netlink: 'syz.7.2070': attribute type 4 has an invalid length.
[  204.101329][T10673] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2070'.
[  204.108649][T10673] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  206.257146][T10710] netlink: 'syz.6.2094': attribute type 4 has an invalid length.
[  206.259553][T10710] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2094'.
[  206.266799][T10710] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  207.117273][T10728] netlink: 'syz.3.2097': attribute type 21 has an invalid length.
[  207.302186][T10733] .`: left allmulticast mode
[  207.311082][T10733] bond_slave_0: left allmulticast mode
[  207.319221][T10733] bond_slave_1: left allmulticast mode
[  207.331353][T10733] bridge0: port 3(.`) entered disabled state
[  207.356390][T10733] bridge_slave_1: left allmulticast mode
[  207.362105][T10733] bridge_slave_1: left promiscuous mode
[  207.365709][T10733] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.372222][T10733] bridge_slave_0: left allmulticast mode
[  207.374047][T10733] bridge_slave_0: left promiscuous mode
[  207.375989][T10733] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.408640][T10733] team0: Port device bridge0 removed
[  209.165492][ T5848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.248742][ T5848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.336075][ T5848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.400235][ T5848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.599210][ T5209] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  209.604757][T10800] netlink: 'syz.6.2130': attribute type 10 has an invalid length.
[  209.607397][T10800] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.609767][T10800] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.766304][T10800] .`: (slave bridge0): Releasing backup interface
[  209.770297][T10800] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.772672][T10800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.775124][T10800] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.777372][T10800] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.787467][T10800] team0: Port device bridge0 added
[  209.789687][T10803] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2131'.
[  209.793736][T10805] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2131'.
[  209.796833][ T5848] bridge_slave_1: left allmulticast mode
[  209.798628][ T5848] bridge_slave_1: left promiscuous mode
[  209.800469][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.810207][ T5848] bridge_slave_0: left allmulticast mode
[  209.812101][ T5848] bridge_slave_0: left promiscuous mode
[  209.814903][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.085877][ T5848]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.090184][ T5848]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.095529][ T5848]  (unregistering): Released all slaves
[  210.105338][T10806] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2131'.
[  210.230606][T10810] bridge_slave_1: left allmulticast mode
[  210.240395][T10810] bridge_slave_1: left promiscuous mode
[  210.255787][T10810] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.358932][T10810] bridge_slave_0: left allmulticast mode
[  210.361803][T10810] bridge_slave_0: left promiscuous mode
[  210.369618][T10810] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.868589][T10810] team0: Port device bridge0 removed
[  211.199355][T10823] netlink: 'syz.3.2140': attribute type 10 has an invalid length.
[  211.201786][T10823] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2140'.
[  211.231194][ T5848] hsr_slave_0: left promiscuous mode
[  211.255072][ T5848] hsr_slave_1: left promiscuous mode
[  211.259766][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.262118][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.276627][T10831] netlink: 'syz.3.2143': attribute type 3 has an invalid length.
[  211.279003][T10831] netlink: 'syz.3.2143': attribute type 2 has an invalid length.
[  211.281429][T10831] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.2143'.
[  211.281939][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.286618][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.310916][ T5848] veth0_macvtap: left promiscuous mode
[  211.313099][ T5848] veth1_vlan: left promiscuous mode
[  211.777721][T10832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.195296][T10847] netlink: 'syz.3.2153': attribute type 4 has an invalid length.
[  212.202575][T10847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2153'.
[  212.247176][T10853] netlink: 'syz.6.2149': attribute type 10 has an invalid length.
[  212.253860][T10853] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2149'.
[  212.448484][T10871] netlink: 'syz.6.2159': attribute type 4 has an invalid length.
[  212.450909][T10871] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2159'.
[  214.008359][T10960] netlink: 'syz.7.2206': attribute type 5 has an invalid length.
[  214.280461][ T5848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.310990][T10973] bridge0: port 3(team0) entered disabled state
[  214.442006][T10973] bridge_slave_1: left allmulticast mode
[  214.448948][T10973] bridge_slave_1: left promiscuous mode
[  214.457827][T10973] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.580805][T10973] bridge_slave_0: left allmulticast mode
[  214.589568][T10973] bridge_slave_0: left promiscuous mode
[  214.600421][T10973] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.911252][T10973] .`: (slave bridge0): Releasing backup interface
[  215.065708][ T5848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.127456][ T5848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.183674][ T5848] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.280551][T10991] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2221'.
[  215.336838][ T5848] bridge_slave_1: left allmulticast mode
[  215.338748][ T5848] bridge_slave_1: left promiscuous mode
[  215.340631][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.346513][ T5848] bridge_slave_0: left allmulticast mode
[  215.348306][ T5848] bridge_slave_0: left promiscuous mode
[  215.350810][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.619777][ T5848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.626881][ T5848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.630551][ T5848] bond0 (unregistering): Released all slaves
[  215.707202][T11018] netlink: 'syz.7.2230': attribute type 10 has an invalid length.
[  216.613756][T11018] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  216.615968][T11018] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  216.619255][T11018] team0: Port device wlan1 removed
[  216.621298][T11018] wlan1: mtu less than device minimum
[  216.623158][T11018] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  216.824072][ T5848] hsr_slave_0: left promiscuous mode
[  216.827317][ T5848] hsr_slave_1: left promiscuous mode
[  216.831541][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.834135][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.836933][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.840077][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.858690][ T5848] veth1_macvtap: left promiscuous mode
[  216.860481][ T5848] veth0_macvtap: left promiscuous mode
[  216.988468][T11043] netlink: 'syz.3.2242': attribute type 2 has an invalid length.
[  218.878445][T11112] netlink: 160 bytes leftover after parsing attributes in process `syz.7.2275'.
[  218.950606][T11110] netlink: 'syz.3.2273': attribute type 10 has an invalid length.
[  218.953927][T11110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2273'.
[  218.956770][T11110] team0: entered promiscuous mode
[  218.958508][T11110] team_slave_0: entered promiscuous mode
[  218.960720][T11110] team_slave_1: entered promiscuous mode
[  218.964733][T11110] team0: entered allmulticast mode
[  218.966383][T11110] team_slave_0: entered allmulticast mode
[  218.968256][T11110] team_slave_1: entered allmulticast mode
[  218.972040][T11110] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  219.358093][T11155] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2294'.
[  219.380529][T11146] netlink: 'syz.6.2291': attribute type 10 has an invalid length.
[  219.383465][T11146] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2291'.
[  219.386516][T11146] team0: entered promiscuous mode
[  219.388342][T11146] team_slave_0: entered promiscuous mode
[  219.390869][T11146] team_slave_1: entered promiscuous mode
[  219.394185][T11146] team0: entered allmulticast mode
[  219.396231][T11146] team_slave_0: entered allmulticast mode
[  219.398054][T11146] team_slave_1: entered allmulticast mode
[  219.403609][T11146] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  219.525564][T11162] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2295'.
[  219.646684][T11172] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.2303'.
[  219.730212][T11186] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2308'.
[  219.734532][T11187] netlink: 'syz.7.2306': attribute type 13 has an invalid length.
[  219.736921][T11187] netlink: 14581 bytes leftover after parsing attributes in process `syz.7.2306'.
[  219.837142][ T5848] syzkaller0: tun_net_xmit 76
[  219.838892][ T5848] syzkaller0: tun_net_xmit 48
[  219.843311][T11194] syzkaller0: create flow: hash 1969110046 index 1
[  219.878345][T11194] syzkaller0: delete flow: hash 1969110046 index 1
[  220.968094][   T54] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[  221.089314][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2331'.
[  222.132318][T11248] macvtap0: refused to change device tx_queue_len
[  222.322186][T11274] netlink: 'syz.3.2353': attribute type 10 has an invalid length.
[  222.334513][T11274] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2353'.
[  222.387936][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  222.391114][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  222.395065][   T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  222.395078][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.395084][   T54] Workqueue: hci1 hci_rx_work
[  222.395106][   T54] Call Trace:
[  222.395112][   T54]  <TASK>
[  222.395119][   T54]  dump_stack_lvl+0x189/0x250
[  222.395135][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  222.395151][   T54]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.395164][   T54]  ? __pfx__printk+0x10/0x10
[  222.395184][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  222.395192][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  222.395208][   T54]  ? kernfs_path_from_node+0x22c/0x260
[  222.395217][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  222.395235][   T54]  sysfs_create_dir_ns+0x259/0x280
[  222.395255][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  222.395273][   T54]  ? do_raw_spin_unlock+0x4d/0x240
[  222.395294][   T54]  kobject_add_internal+0x59f/0xb40
[  222.395323][   T54]  kobject_add+0x155/0x220
[  222.395350][   T54]  ? __pfx_kobject_add+0x10/0x10
[  222.395369][   T54]  ? _raw_spin_unlock+0x28/0x50
[  222.395390][   T54]  ? get_device_parent+0x366/0x3a0
[  222.395413][   T54]  device_add+0x408/0xb50
[  222.395436][   T54]  hci_conn_add_sysfs+0xd5/0x1e0
[  222.395457][   T54]  le_conn_complete_evt+0xc3a/0x1220
[  222.395490][   T54]  ? bt_warn+0x10b/0x160
[  222.395512][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  222.395527][   T54]  ? __pfx_bt_warn+0x10/0x10
[  222.395538][   T54]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  222.395566][   T54]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  222.395601][   T54]  ? skb_pull_data+0xfb/0x200
[  222.395628][   T54]  hci_le_conn_complete_evt+0x187/0x450
[  222.395659][   T54]  hci_event_packet+0x78f/0x1200
[  222.395686][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  222.395708][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[  222.395728][   T54]  ? kcov_remote_start+0x4d3/0x7f0
[  222.395743][   T54]  ? lockdep_hardirqs_on+0x90/0x150
[  222.395764][   T54]  ? hci_send_to_monitor+0xe2/0x570
[  222.395787][   T54]  hci_rx_work+0x46a/0xe80
[  222.395817][   T54]  ? process_scheduled_works+0x9ef/0x17b0
[  222.395836][   T54]  process_scheduled_works+0xae1/0x17b0
[  222.395909][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  222.395958][   T54]  worker_thread+0x8a0/0xda0
[  222.396026][   T54]  kthread+0x711/0x8a0
[  222.396047][   T54]  ? __pfx_worker_thread+0x10/0x10
[  222.396061][   T54]  ? __pfx_kthread+0x10/0x10
[  222.396078][   T54]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.396090][   T54]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.396100][   T54]  ? __pfx_kthread+0x10/0x10
[  222.396116][   T54]  ret_from_fork+0x3fc/0x770
[  222.396138][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  222.396166][   T54]  ? __switch_to_asm+0x39/0x70
[  222.396175][   T54]  ? __switch_to_asm+0x33/0x70
[  222.396183][   T54]  ? __pfx_kthread+0x10/0x10
[  222.396198][   T54]  ret_from_fork_asm+0x1a/0x30
[  222.396241][   T54]  </TASK>
[  222.396274][   T54] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  222.488925][   T54] Bluetooth: hci1: failed to register connection device
[  223.286109][T11300] netlink: 'syz.6.2363': attribute type 10 has an invalid length.
[  223.288578][T11300] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2363'.
[  223.360028][   T54] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  223.363422][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  223.366280][   T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  223.366293][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.366300][   T54] Workqueue: hci3 hci_rx_work
[  223.366318][   T54] Call Trace:
[  223.366322][   T54]  <TASK>
[  223.366327][   T54]  dump_stack_lvl+0x189/0x250
[  223.366340][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  223.366353][   T54]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.366362][   T54]  ? __pfx__printk+0x10/0x10
[  223.366374][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  223.366383][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  223.366394][   T54]  ? kernfs_path_from_node+0x22c/0x260
[  223.366402][   T54]  ? kernfs_path_from_node+0x2c/0x260
[  223.366413][   T54]  sysfs_create_dir_ns+0x259/0x280
[  223.366424][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  223.366435][   T54]  ? do_raw_spin_unlock+0x4d/0x240
[  223.366448][   T54]  kobject_add_internal+0x59f/0xb40
[  223.366461][   T54]  kobject_add+0x155/0x220
[  223.366477][   T54]  ? __pfx_kobject_add+0x10/0x10
[  223.366490][   T54]  ? _raw_spin_unlock+0x28/0x50
[  223.366502][   T54]  ? get_device_parent+0x366/0x3a0
[  223.366539][   T54]  device_add+0x408/0xb50
[  223.366551][   T54]  hci_conn_add_sysfs+0xd5/0x1e0
[  223.366563][   T54]  le_conn_complete_evt+0xc3a/0x1220
[  223.366581][   T54]  ? bt_warn+0x10b/0x160
[  223.366600][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  223.366612][   T54]  ? __pfx_bt_warn+0x10/0x10
[  223.366623][   T54]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  223.366640][   T54]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  223.366651][   T54]  ? skb_pull_data+0xfb/0x200
[  223.366664][   T54]  hci_le_conn_complete_evt+0x187/0x450
[  223.366678][   T54]  hci_event_packet+0x78f/0x1200
[  223.366690][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  223.366703][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[  223.366713][   T54]  ? kcov_remote_start+0x4d3/0x7f0
[  223.366724][   T54]  ? lockdep_hardirqs_on+0x90/0x150
[  223.366737][   T54]  ? hci_send_to_monitor+0xe2/0x570
[  223.366750][   T54]  hci_rx_work+0x46a/0xe80
[  223.366764][   T54]  ? process_scheduled_works+0x9ef/0x17b0
[  223.366777][   T54]  process_scheduled_works+0xae1/0x17b0
[  223.366802][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  223.366822][   T54]  worker_thread+0x8a0/0xda0
[  223.366846][   T54]  kthread+0x711/0x8a0
[  223.366865][   T54]  ? __pfx_worker_thread+0x10/0x10
[  223.366876][   T54]  ? __pfx_kthread+0x10/0x10
[  223.366886][   T54]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.366896][   T54]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.366906][   T54]  ? __pfx_kthread+0x10/0x10
[  223.366916][   T54]  ret_from_fork+0x3fc/0x770
[  223.366933][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  223.366948][   T54]  ? __switch_to_asm+0x39/0x70
[  223.366956][   T54]  ? __switch_to_asm+0x33/0x70
[  223.366964][   T54]  ? __pfx_kthread+0x10/0x10
[  223.366973][   T54]  ret_from_fork_asm+0x1a/0x30
[  223.366990][   T54]  </TASK>
[  223.367004][   T54] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  223.464050][   T54] Bluetooth: hci3: failed to register connection device
[  223.897620][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2369'.
[  224.034640][T11323] syzkaller0: entered promiscuous mode
[  224.036550][T11323] syzkaller0: entered allmulticast mode
[  224.562672][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  224.974755][T11338] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2380'.
[  224.981464][T11340] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2380'.
[  225.059693][T11344] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2388'.
[  225.064769][T11344] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2388'.
[  225.217648][   T54] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  225.456124][T11364] netlink: 'syz.6.2393': attribute type 8 has an invalid length.
[  225.460966][T11364] netlink: 'syz.6.2393': attribute type 6 has an invalid length.
[  225.464117][T11364] netlink: 144448 bytes leftover after parsing attributes in process `syz.6.2393'.
[  225.505757][T11366] tc_dump_action: action bad kind
[  225.514540][   T54] Bluetooth: hci3: command tx timeout
[  225.979607][   T54] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  226.159188][T11401] netlink: 'syz.3.2408': attribute type 22 has an invalid length.
[  226.427919][T11418] netlink: 'syz.6.2421': attribute type 22 has an invalid length.
[  227.201428][T11433] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.2430'.
[  227.212656][T11433] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  227.217933][T11433] openvswitch: netlink: Message has 6324 unknown bytes.
[  227.269941][T11440] netlink: 763 bytes leftover after parsing attributes in process `syz.7.2425'.
[  227.340461][T11448] netlink: 'syz.6.2432': attribute type 10 has an invalid length.
[  227.342901][T11448] netlink: 'syz.6.2432': attribute type 19 has an invalid length.
[  227.345312][T11448] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2432'.
[  227.559050][T11465] sock: sock_set_timeout: `syz.6.2439' (pid 11465) tries to set negative timeout
[  227.622964][T11466] netlink: 809 bytes leftover after parsing attributes in process `syz.3.2438'.
[  227.625798][T11466] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.2438'.
[  227.628645][T11466] netlink: 809 bytes leftover after parsing attributes in process `syz.3.2438'.
[  228.219249][T11500] netlink: 'syz.6.2455': attribute type 29 has an invalid length.
[  228.222186][T11500] netlink: 'syz.6.2455': attribute type 29 has an invalid length.
[  228.544230][T11526] netlink: 'syz.3.2467': attribute type 17 has an invalid length.
[  228.546603][T11526] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2467'.
[  228.550834][T11526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.585124][T11529] netlink: 'syz.6.2469': attribute type 10 has an invalid length.
[  228.587574][T11529] netlink: 'syz.6.2469': attribute type 16 has an invalid length.
[  228.590071][T11529] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2469'.
[  228.640897][T11534] netlink: 'syz.6.2471': attribute type 27 has an invalid length.
[  228.644397][T11534] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.2471'.
[  228.809753][T11542] syzkaller0: entered promiscuous mode
[  228.811558][T11542] syzkaller0: entered allmulticast mode
[  229.898008][T11565] netlink: 'syz.6.2485': attribute type 10 has an invalid length.
[  229.905522][T11565] macvlan0: entered promiscuous mode
[  229.907307][T11565] macvlan0: entered allmulticast mode
[  230.026529][T11565] veth1_vlan: entered allmulticast mode
[  230.044111][T11565] .`: (slave macvlan0): Enslaving as an active interface with an up link
[  230.211103][T11580] syzkaller0: entered promiscuous mode
[  230.214747][T11580] syzkaller0: entered allmulticast mode
[  230.289434][T11586] netlink: 'syz.3.2490': attribute type 21 has an invalid length.
[  230.291281][T11585] raw_sendmsg: syz.6.2491 forgot to set AF_INET. Fix it!
[  230.761497][T11602] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2503'.
[  230.993558][T11620] sock: sock_set_timeout: `syz.3.2512' (pid 11620) tries to set negative timeout
[  231.616649][T11658] dummy0: entered promiscuous mode
[  231.618452][T11658] dummy0: entered allmulticast mode
[  233.276876][T11710] __nla_validate_parse: 4 callbacks suppressed
[  233.276888][T11710] netlink: 809 bytes leftover after parsing attributes in process `syz.6.2552'.
[  233.281821][T11710] netlink: 130160 bytes leftover after parsing attributes in process `syz.6.2552'.
[  233.285235][T11710] netlink: 809 bytes leftover after parsing attributes in process `syz.6.2552'.
[  233.911965][T11720] dummy0: entered promiscuous mode
[  233.914801][T11720] dummy0: entered allmulticast mode
[  234.827844][T11745] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2571'.
[  234.892032][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2571'.
[  234.920396][T11747] validate_nla: 3 callbacks suppressed
[  234.920407][T11747] netlink: 'syz.3.2565': attribute type 10 has an invalid length.
[  234.924741][T11747] netlink: 'syz.3.2565': attribute type 16 has an invalid length.
[  234.927171][T11747] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2565'.
[  234.961023][T11744] netlink: 'syz.6.2571': attribute type 3 has an invalid length.
[  234.965852][T11744] netlink: 'syz.6.2571': attribute type 3 has an invalid length.
[  234.968299][T11744] netlink: 'syz.6.2571': attribute type 2 has an invalid length.
[  234.970837][T11744] netlink: 127848 bytes leftover after parsing attributes in process `syz.6.2571'.
[  235.520208][T11755] syzkaller0: entered promiscuous mode
[  235.521975][T11755] syzkaller0: entered allmulticast mode
[  236.559039][T11774] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2580'.
[  236.734832][T11802] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2593'.
[  236.745043][T11802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2593'.
[  237.990438][T11839] netlink: 'syz.7.2610': attribute type 4 has an invalid length.
[  238.085172][T11852] netlink: 'syz.6.2612': attribute type 39 has an invalid length.
[  238.089281][T11852] veth0_macvtap: left promiscuous mode
[  238.169810][T11854] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  238.177568][T11854] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.039302][   T54] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4
[  240.022349][T11901] __nla_validate_parse: 3 callbacks suppressed
[  240.022363][T11901] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2637'.
[  240.170484][T11922] delete_channel: no stack
[  240.171982][T11922] delete_channel: no stack
[  240.836357][T11979] netlink: 'syz.7.2672': attribute type 29 has an invalid length.
[  240.839867][T11979] netlink: 'syz.7.2672': attribute type 29 has an invalid length.
[  240.924519][T11983] netlink: 'syz.3.2674': attribute type 2 has an invalid length.
[  240.927039][T11983] netlink: 'syz.3.2674': attribute type 8 has an invalid length.
[  240.929526][T11983] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2674'.
[  241.087394][T11995] netlink: 'syz.3.2680': attribute type 21 has an invalid length.
[  241.089853][T11995] netlink: 'syz.3.2680': attribute type 6 has an invalid length.
[  241.092328][T11995] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2680'.
[  241.459778][T12007] netlink: 'syz.3.2686': attribute type 10 has an invalid length.
[  241.462250][T12007] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2686'.
[  241.507182][T12009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  241.509688][T12009] IPv6: NLM_F_CREATE should be set when creating new route
[  241.512049][T12009] IPv6: NLM_F_CREATE should be set when creating new route
[  241.514424][T12009] IPv6: NLM_F_CREATE should be set when creating new route
[  241.658439][T12021] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2693'.
[  242.030646][T12044] netlink: 'syz.3.2702': attribute type 1 has an invalid length.
[  242.034684][T12044] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2702'.
[  242.202672][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2705'.
[  242.266361][T12054] netlink: 'syz.3.2704': attribute type 39 has an invalid length.
[  242.784640][T12078] netlink: 'syz.6.2715': attribute type 10 has an invalid length.
[  242.787241][T12078] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2715'.
[  243.988992][T12106] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2727'.
[  244.158681][T12117] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2732'.
[  244.565992][   T54] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  244.568355][   T54] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  244.798293][   T54] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  245.497319][T12177] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2761'.
[  245.500204][T12177] netlink: zone id is out of range
[  245.501881][T12177] netlink: zone id is out of range
[  245.504289][T12177] netlink: zone id is out of range
[  245.506010][T12177] netlink: zone id is out of range
[  245.507701][T12177] netlink: zone id is out of range
[  245.509413][T12177] netlink: zone id is out of range
[  245.511065][T12177] netlink: zone id is out of range
[  245.516816][T12177] netlink: zone id is out of range
[  245.518532][T12177] netlink: zone id is out of range
[  245.520224][T12177] netlink: zone id is out of range
[  245.609688][T12179] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2762'.
[  245.637270][T12181] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.2763'.
[  245.640284][T12181] netlink: 61827 bytes leftover after parsing attributes in process `syz.3.2763'.
[  245.704560][T12185] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2765'.
[  245.708991][T12185] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2765'.
[  245.789348][T12192] delete_channel: no stack
[  245.823646][T12198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2771'.
[  246.912114][T12242] tun1: tun_chr_ioctl cmd 1074025677
[  246.916332][T12242] tun1: linktype set to 270
[  247.170460][T12272] validate_nla: 8 callbacks suppressed
[  247.170474][T12272] netlink: 'syz.3.2807': attribute type 29 has an invalid length.
[  247.192163][T12272] netlink: 'syz.3.2807': attribute type 29 has an invalid length.
[  247.342955][T12290] pim6reg1: entered allmulticast mode
[  247.495574][T12302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2821'.
[  247.662415][T12321] netlink: 'syz.3.2827': attribute type 1 has an invalid length.
[  247.665994][T12321] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2827'.
[  247.715194][T12325] netlink: 'syz.6.2829': attribute type 21 has an invalid length.
[  247.717652][T12325] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2829'.
[  247.971809][T12345] syz_tun: refused to change device tx_queue_len
[  248.873853][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  248.876559][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  248.879914][ T5209] Bluetooth: hci1: hardware error 0x00
[  248.893627][T12386] team_slave_0: left promiscuous mode
[  248.896814][T12386] team_slave_0: left allmulticast mode
[  248.906070][T12386] team0: Port device team_slave_0 removed
[  249.355205][T12412] netlink: 'syz.7.2868': attribute type 3 has an invalid length.
[  249.995402][T12424] vxcan1: entered allmulticast mode
[  250.751363][T12475] netlink: 'syz.7.2897': attribute type 2 has an invalid length.
[  250.755239][T12475] netlink: 'syz.7.2897': attribute type 8 has an invalid length.
[  250.761355][T12475] __nla_validate_parse: 3 callbacks suppressed
[  250.761365][T12475] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2897'.
[  250.836976][T12483] netlink: 18187 bytes leftover after parsing attributes in process `syz.6.2901'.
[  250.952646][ T5209] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  251.021395][T12507] netlink: 'syz.6.2913': attribute type 46 has an invalid length.
[  251.077113][T12515] netlink: 'syz.6.2916': attribute type 2 has an invalid length.
[  251.129060][T12518] syzkaller0: entered promiscuous mode
[  251.130918][T12518] syzkaller0: entered allmulticast mode
[  251.329240][T12538] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2927'.
[  251.829479][T12561] delete_channel: no stack
[  251.836242][T12561] delete_channel: no stack
[  251.874738][T12561] netlink: 'syz.3.2936': attribute type 6 has an invalid length.
[  251.877291][T12561] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2936'.
[  252.319792][T12589] netlink: 'syz.3.2948': attribute type 2 has an invalid length.
[  252.322291][T12589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2948'.
[  252.456465][T12607] netlink: 'syz.7.2962': attribute type 2 has an invalid length.
[  252.458972][T12607] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2962'.
[  252.571457][T12615] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2961'.
[  252.587251][T12615] net_ratelimit: 75 callbacks suppressed
[  252.587305][T12615] netlink: zone id is out of range
[  252.591084][T12615] netlink: get zone limit has 8 unknown bytes
[  252.610301][T12615] netlink: 'syz.6.2961': attribute type 10 has an invalid length.
[  252.640230][T12615] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2961'.
[  252.653700][T12615] .`: entered promiscuous mode
[  252.655507][T12615] bond_slave_0: entered promiscuous mode
[  252.658454][T12615] bond_slave_1: entered promiscuous mode
[  252.668776][T12615] 8021q: adding VLAN 0 to HW filter on device .`
[  252.740965][T12624] netlink: 'syz.6.2965': attribute type 2 has an invalid length.
[  252.744454][T12624] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2965'.
[  253.099694][T12656] netlink: 40227 bytes leftover after parsing attributes in process `syz.7.2982'.
[  253.212300][T12668] netlink: 'syz.3.2988': attribute type 11 has an invalid length.
[  253.260836][T12668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.195847][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.198640][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  256.912314][ T2074] page_pool_release_retry() stalled pool shutdown: id 79, 1 inflight 61 sec
[  257.918143][ T5209] Bluetooth: hci3: command 0x0406 tx timeout
[  258.257937][T12787] syzkaller0: entered promiscuous mode
[  258.259708][T12787] syzkaller0: entered allmulticast mode
[  259.204758][T12789] __nla_validate_parse: 3 callbacks suppressed
[  259.204773][T12789] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3041'.
[  259.514842][T12823] netlink: 'syz.6.3056': attribute type 10 has an invalid length.
[  259.518986][T12823] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.3056'.
[  259.657633][T12835] netlink: 'syz.7.3063': attribute type 10 has an invalid length.
[  259.661958][T12835] team0: left promiscuous mode
[  259.664261][T12835] team_slave_1: left promiscuous mode
[  259.666486][T12835] team0: left allmulticast mode
[  259.668052][T12835] team_slave_1: left allmulticast mode
[  259.673558][T12835] team0: Cannot enslave team device to itself
[  260.021326][T12864] netlink: 2451 bytes leftover after parsing attributes in process `syz.7.3077'.
[  261.734644][T12939] netlink: 'syz.7.3112': attribute type 13 has an invalid length.
[  261.765046][T12941] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3113'.
[  262.782374][T12961] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3122'.
[  263.033080][T12979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3131'.
[  263.038731][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'.
[  263.273324][T12988] netlink: 'syz.6.3134': attribute type 3 has an invalid length.
[  263.275733][T12988] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3134'.
[  263.375388][T12994] netlink: 'syz.3.3137': attribute type 10 has an invalid length.
[  263.377958][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3137'.
[  263.381378][T12994] batman_adv: batadv0: Adding interface: hsr_slave_1
[  263.384075][T12994] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.392068][T12994] batman_adv: batadv0: Interface activated: hsr_slave_1
[  263.585569][T13016] netlink: 'syz.3.3147': attribute type 2 has an invalid length.
[  263.588250][T13016] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.3147'.
[  263.766265][T13035] tun0: tun_chr_ioctl cmd 1074025677
[  263.768048][T13035] tun0: linktype set to 270
[  263.924928][T13046] netlink: 'syz.7.3162': attribute type 21 has an invalid length.
[  263.949858][T13042] pim6reg1: entered allmulticast mode
[  264.110334][T13055] netlink: 'syz.6.3166': attribute type 10 has an invalid length.
[  264.131894][T13055] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.137947][T13055] batadv0: entered promiscuous mode
[  264.145896][T13063] netlink: 'syz.3.3169': attribute type 21 has an invalid length.
[  264.151304][T13055] .`: (slave batadv0): Enslaving as an active interface with an up link
[  264.341995][T13083] delete_channel: no stack
[  264.368247][T13086] netlink: 'syz.6.3180': attribute type 27 has an invalid length.
[  264.370695][T13086] __nla_validate_parse: 4 callbacks suppressed
[  264.370707][T13086] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3180'.
[  264.891433][T13136] validate_nla: 1 callbacks suppressed
[  264.891446][T13136] netlink: 'syz.7.3204': attribute type 29 has an invalid length.
[  264.897008][T13136] netlink: 'syz.7.3204': attribute type 29 has an invalid length.
[  265.459624][T13160] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3216'.
[  265.463775][T13160] syzkaller0: tun_chr_ioctl cmd 2147767506
[  266.395205][T13177] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[  266.607216][T13181] netlink: 'syz.6.3226': attribute type 21 has an invalid length.
[  266.609814][T13181] netlink: 14045 bytes leftover after parsing attributes in process `syz.6.3226'.
[  266.679665][T13187] netlink: 'syz.6.3230': attribute type 6 has an invalid length.
[  266.682084][T13187] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3230'.
[  267.641972][T13231] delete_channel: no stack
[  267.786743][T13241] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  267.789921][T13241] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  268.590812][T13256] netlink: 'syz.7.3258': attribute type 9 has an invalid length.
[  268.593688][T13256] netlink: 204732 bytes leftover after parsing attributes in process `syz.7.3258'.
[  269.081824][T13284] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.3272'.
[  269.139827][T13284] netlink: 'syz.7.3272': attribute type 6 has an invalid length.
[  269.142372][T13284] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3272'.
[  269.264536][T13292] netlink: 'syz.6.3277': attribute type 3 has an invalid length.
[  269.266999][T13292] netlink: 'syz.6.3277': attribute type 1 has an invalid length.
[  269.270122][T13292] netlink: 201352 bytes leftover after parsing attributes in process `syz.6.3277'.
[  269.329979][T13297] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3278'.
[  269.333248][T13297] batadv_slave_1: entered promiscuous mode
[  270.144727][T13337] netlink: 'syz.6.3297': attribute type 29 has an invalid length.
[  270.152592][T13337] netlink: 'syz.6.3297': attribute type 3 has an invalid length.
[  270.159580][T13337] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3297'.
[  271.332256][T13389] netlink: 'syz.7.3322': attribute type 39 has an invalid length.
[  271.608686][T13408] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3330'.
[  272.214779][T13421] syzkaller0: entered allmulticast mode
[  272.815441][T13472] netlink: 'syz.6.3361': attribute type 3 has an invalid length.
[  272.817831][T13472] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3361'.
[  272.825440][T13474] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3362'.
[  272.914501][T13486] delete_channel: no stack
[  272.916460][T13486] delete_channel: no stack
[  272.942816][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3370'.
[  273.039523][T13500] Dead loop on virtual device ip6_vti0, fix it urgently!
[  273.217946][T13519] netlink: 'syz.3.3384': attribute type 29 has an invalid length.
[  273.223230][T13519] netlink: 'syz.3.3384': attribute type 10 has an invalid length.
[  273.226677][T13519] .`: left promiscuous mode
[  273.228815][T13519] bond_slave_0: left promiscuous mode
[  273.231802][T13519] bond_slave_1: left promiscuous mode
[  273.345484][T13519] 8021q: adding VLAN 0 to HW filter on device .`
[  273.353919][T13519] .`: entered promiscuous mode
[  273.355516][T13519] bond_slave_0: entered promiscuous mode
[  273.358577][T13519] bond_slave_1: entered promiscuous mode
[  273.391617][T13519] .`: entered allmulticast mode
[  273.394034][T13519] bond_slave_0: entered allmulticast mode
[  273.395852][T13519] bond_slave_1: entered allmulticast mode
[  273.404331][T13519] team0: Port device .` added
[  273.424082][T13519] syz.3.3384 (13519) used greatest stack depth: 18080 bytes left
[  273.470533][T13535] netlink: 'syz.7.3391': attribute type 10 has an invalid length.
[  274.497009][T13535] .`: (slave bond_slave_0): Releasing backup interface
[  274.506435][T13540] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3393'.
[  274.674463][T13555] netlink: 'syz.3.3394': attribute type 10 has an invalid length.
[  275.519876][T13568] netlink: 14560 bytes leftover after parsing attributes in process `syz.7.3405'.
[  275.680990][T13585] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.3413'.
[  275.697301][T13585] tc_dump_action: action bad kind
[  275.773552][T13593] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3415'.
[  275.776727][T13590] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3415'.
[  275.786093][T13593] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3415'.
[  275.891912][T13605] netlink: 'syz.7.3422': attribute type 19 has an invalid length.
[  275.896919][T13605] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3422'.
[  275.946072][T13607] netlink: 'syz.7.3423': attribute type 21 has an invalid length.
[  275.948611][T13607] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3423'.
[  276.014376][T13613] netlink: 'syz.3.3426': attribute type 21 has an invalid length.
[  276.017042][T13613] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3426'.
[  276.149311][T13627] netlink: 'syz.3.3433': attribute type 21 has an invalid length.
[  276.151897][T13627] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3433'.
[  276.156447][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'.
[  276.865725][T13665] veth1_vlan: left allmulticast mode
[  276.875976][T13665] .`: (slave macvlan0): Releasing backup interface
[  276.986734][T13671] netlink: 'syz.7.3454': attribute type 4 has an invalid length.
[  276.989674][T13671] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  277.007280][T13669] netlink: 'syz.3.3453': attribute type 13 has an invalid length.
[  277.015368][T13669] erspan0: refused to change device tx_queue_len
[  277.017530][T13669] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  277.407470][T13711] netlink: 'syz.7.3472': attribute type 10 has an invalid length.
[  277.442869][T13718] netlink: 'syz.7.3476': attribute type 4 has an invalid length.
[  277.649180][T13744] netlink: 'syz.6.3487': attribute type 10 has an invalid length.
[  277.651939][T13744] ipvlan1: entered promiscuous mode
[  277.657885][T13744] ipvlan1: entered allmulticast mode
[  277.659526][T13744] veth0_vlan: entered allmulticast mode
[  277.664941][T13744] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  277.675007][T13746] netlink: 'syz.3.3488': attribute type 5 has an invalid length.
[  277.752648][ T5209] Bluetooth: hci0: command 0x0406 tx timeout
[  278.306372][T13775] team0 (unregistering): Port device team_slave_1 removed
[  278.881454][T13838] veth0_vlan: entered allmulticast mode
[  279.416309][T13877] sit0: entered promiscuous mode
[  279.418590][T13877] sit0: entered allmulticast mode
[  281.353627][T13941] __nla_validate_parse: 9 callbacks suppressed
[  281.353641][T13941] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3572'.
[  281.490721][T13950] netlink: 2451 bytes leftover after parsing attributes in process `syz.3.3580'.
[  281.928132][T13990] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3600'.
[  282.126318][T14000] validate_nla: 3 callbacks suppressed
[  282.126377][T14000] netlink: 'syz.7.3604': attribute type 3 has an invalid length.
[  282.130585][T14000] netlink: 201372 bytes leftover after parsing attributes in process `syz.7.3604'.
[  283.738746][T14041] netlink: 'syz.7.3621': attribute type 21 has an invalid length.
[  283.741374][T14041] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3621'.
[  283.878256][T14051] netlink: 'syz.6.3626': attribute type 10 has an invalid length.
[  283.880707][T14051] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3626'.
[  283.886212][T14051] batman_adv: batadv0: Adding interface: hsr_slave_1
[  283.888431][T14051] batman_adv: batadv0: Interface activated: hsr_slave_1
[  284.050903][T14055] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3628'.
[  284.316576][T14073] syzkaller0: tun_chr_ioctl cmd 1074025677
[  284.320141][T14073] syzkaller0: linktype set to 801
[  284.532206][T14088] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3643'.
[  284.616716][T14095] netlink: 'syz.3.3646': attribute type 21 has an invalid length.
[  284.619651][T14095] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3646'.
[  285.802001][T14119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.864922][T14126] netlink: 'syz.6.3661': attribute type 10 has an invalid length.
[  286.426812][T14160] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3675'.
[  286.707634][T14180] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3685'.
[  286.936135][T14204] netlink: 763 bytes leftover after parsing attributes in process `syz.7.3694'.
[  286.993573][T14213] netlink: 'syz.7.3697': attribute type 39 has an invalid length.
[  286.999846][T14212] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3700'.
[  287.352267][T14231] team_slave_0: left promiscuous mode
[  287.357071][T14231] team_slave_0: left allmulticast mode
[  287.363329][T14231] team0: Port device team_slave_0 removed
[  287.365413][T14231] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  287.457468][T14242] netlink: 'syz.6.3714': attribute type 39 has an invalid length.
[  287.507354][T14244] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3721'.
[  287.719062][T14249] netlink: 'syz.7.3723': attribute type 10 has an invalid length.
[  288.358325][T14259] team_slave_0: left promiscuous mode
[  288.360307][T14259] team_slave_0: left allmulticast mode
[  288.375534][T14259] team0: Port device team_slave_0 removed
[  288.378418][T14259] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  289.213630][T14263] netlink: 'syz.3.3724': attribute type 39 has an invalid length.
[  289.248118][T14269] netlink: 'syz.7.3725': attribute type 6 has an invalid length.
[  289.250494][T14269] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3725'.
[  290.721232][T14295] netlink: 'syz.3.3739': attribute type 6 has an invalid length.
[  290.723845][T14295] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3739'.
[  291.300961][T14330] delete_channel: no stack
[  292.000471][T14375] netlink: 'syz.3.3777': attribute type 3 has an invalid length.
[  292.003190][T14375] netlink: 'syz.3.3777': attribute type 1 has an invalid length.
[  292.004499][T14377] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3778'.
[  292.005705][T14375] netlink: 201352 bytes leftover after parsing attributes in process `syz.3.3777'.
[  292.008746][T14377] batadv_slave_1: entered promiscuous mode
[  292.045736][T14381] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.3780'.
[  292.422251][T14395] netlink: 'syz.7.3785': attribute type 3 has an invalid length.
[  292.428938][T14395] netlink: 'syz.7.3785': attribute type 1 has an invalid length.
[  292.431926][T14395] netlink: 201352 bytes leftover after parsing attributes in process `syz.7.3785'.
[  292.575492][T14403] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  292.579456][T14403] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  293.865216][T14425] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3799'.
[  293.868039][T14425] netlink: zone id is out of range
[  293.869665][T14425] netlink: zone id is out of range
[  293.871201][T14425] netlink: zone id is out of range
[  293.874186][T14425] netlink: zone id is out of range
[  293.876015][T14425] netlink: zone id is out of range
[  293.877701][T14425] netlink: zone id is out of range
[  293.879458][T14425] netlink: zone id is out of range
[  293.881261][T14425] netlink: zone id is out of range
[  293.883323][T14425] netlink: zone id is out of range
[  293.885475][T14426] netlink: 61211 bytes leftover after parsing attributes in process `syz.7.3798'.
[  293.888924][T14425] netlink: zone id is out of range
[  294.008966][T14438] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  294.155498][T14452] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  294.158606][T14452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  295.282816][T14480] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.3822'.
[  296.329988][T14504] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3834'.
[  296.617615][T14540] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3852'.
[  297.229803][T14573] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3872'.
[  297.349857][T14587] delete_channel: no stack
[  297.351598][T14587] delete_channel: no stack
[  297.419753][T14595] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3878'.
[  297.426340][T14597] netlink: 'syz.6.3883': attribute type 3 has an invalid length.
[  297.429005][T14597] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3883'.
[  298.116717][T14651] netlink: 'syz.7.3906': attribute type 29 has an invalid length.
[  298.121538][T14651] netlink: 'syz.7.3906': attribute type 10 has an invalid length.
[  298.124114][T14655] syzkaller0: entered allmulticast mode
[  298.328187][T14674] netlink: 'syz.6.3918': attribute type 10 has an invalid length.
[  298.383704][T14674] .`: (slave bond_slave_0): Releasing backup interface
[  298.387336][T14674] bond_slave_0 (unregistering): left promiscuous mode
[  298.626251][T14678] netlink: 'syz.6.3919': attribute type 29 has an invalid length.
[  298.631670][T14678] netlink: 'syz.6.3919': attribute type 10 has an invalid length.
[  298.635357][T14678] .`: left promiscuous mode
[  298.636902][T14678] bond_slave_1: left promiscuous mode
[  298.640415][T14678] batadv0: left promiscuous mode
[  298.689407][T14678] 8021q: adding VLAN 0 to HW filter on device .`
[  298.697313][T14678] .`: entered promiscuous mode
[  298.698920][T14678] bond_slave_1: entered promiscuous mode
[  298.702077][T14678] batadv0: entered promiscuous mode
[  298.706127][T14678] .`: entered allmulticast mode
[  298.707709][T14678] bond_slave_1: entered allmulticast mode
[  298.709590][T14678] batadv0: entered allmulticast mode
[  298.719154][T14678] team0: Port device .` added
[  299.280217][T14693] netlink: 'syz.3.3925': attribute type 21 has an invalid length.
[  299.282783][T14693] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3925'.
[  299.455663][T14706] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.3932'.
[  299.458798][T14705] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.3932'.
[  299.462822][T14706] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.3932'.
[  299.573930][T14718] syzkaller0: entered allmulticast mode
[  300.524492][T14739] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3941'.
[  300.527780][T14730] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3941'.
[  300.531665][T14730] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3941'.
[  300.603070][T14747] netlink: 'syz.3.3951': attribute type 21 has an invalid length.
[  300.673332][T14758] netlink: 'syz.7.3955': attribute type 21 has an invalid length.
[  300.831461][T14774] netlink: 'syz.6.3961': attribute type 21 has an invalid length.
[  301.056267][T14802] net_ratelimit: 75 callbacks suppressed
[  301.056279][T14802] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  301.066605][T14801] erspan0: refused to change device tx_queue_len
[  301.068612][T14801] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  301.321324][T14831] veth1_vlan: left allmulticast mode
[  301.331279][T14831] .`: (slave macvlan0): Releasing backup interface
[  301.741444][T14863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  301.744070][T14863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  302.330496][T14909] netlink: 'syz.3.4026': attribute type 11 has an invalid length.
[  302.333958][T14909] netlink: 'syz.3.4026': attribute type 11 has an invalid length.
[  302.338598][T14909] __nla_validate_parse: 16 callbacks suppressed
[  302.338608][T14909] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4026'.
[  302.400116][T14915] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4033'.
[  302.617002][T14937] validate_nla: 7 callbacks suppressed
[  302.617014][T14937] netlink: 'syz.6.4038': attribute type 11 has an invalid length.
[  302.621025][T14937] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4038'.
[  302.653021][T14941] netlink: 'syz.7.4044': attribute type 21 has an invalid length.
[  303.060081][T14976] netlink: 'syz.7.4054': attribute type 10 has an invalid length.
[  303.075256][T14976] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4054'.
[  303.084990][T14978] delete_channel: no stack
[  303.141106][T14985] netlink: 'syz.7.4057': attribute type 11 has an invalid length.
[  303.146956][T14985] netlink: 'syz.7.4057': attribute type 11 has an invalid length.
[  303.149689][T14985] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.4057'.
[  304.141162][T14993] syzkaller0: entered promiscuous mode
[  304.144318][T14993] syzkaller0: entered allmulticast mode
[  305.317351][T15026] delete_channel: no stack
[  305.650744][T15049] veth0_vlan: entered allmulticast mode
[  306.608959][T15080] batman_adv: batadv0: Interface deactivated: vlan1
[  309.102125][T15152] netlink: 199848 bytes leftover after parsing attributes in process `syz.7.4134'.
[  309.140336][T15158] netlink: 'syz.7.4135': attribute type 3 has an invalid length.
[  309.143077][T15158] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4135'.
[  309.273168][T15172] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.4144'.
[  309.426475][T15183] syzkaller0: tun_chr_ioctl cmd 1074025677
[  309.428360][T15183] syzkaller0: linktype set to 801
[  309.481403][T15185] netlink: 'syz.7.4148': attribute type 10 has an invalid length.
[  309.504121][T15185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.512349][T15185] .`: (slave batadv0): Enslaving as an active interface with an up link
[  309.542394][T15190] netlink: 'syz.3.4150': attribute type 3 has an invalid length.
[  309.547145][T15190] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4150'.
[  309.590572][T15185] .`: entered promiscuous mode
[  309.592742][T15185] bond_slave_1: entered promiscuous mode
[  309.594935][T15185] batadv0: entered promiscuous mode
[  309.721913][T15199] netlink: 199848 bytes leftover after parsing attributes in process `syz.6.4156'.
[  310.697695][T15216] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4163'.
[  310.728406][T15219] syzkaller0: tun_chr_ioctl cmd 1074025677
[  310.730241][T15219] syzkaller0: linktype set to 801
[  310.906434][T15233] netlink: 'syz.6.4171': attribute type 28 has an invalid length.
[  310.908839][T15233] netlink: 'syz.6.4171': attribute type 4 has an invalid length.
[  310.911271][T15233] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4171'.
[  310.964539][T15239] netlink: 61211 bytes leftover after parsing attributes in process `syz.7.4173'.
[  311.036410][T15248] netlink: 127868 bytes leftover after parsing attributes in process `syz.7.4178'.
[  311.142903][T15259] netlink: 'syz.7.4182': attribute type 28 has an invalid length.
[  311.145383][T15259] netlink: 'syz.7.4182': attribute type 4 has an invalid length.
[  311.147901][T15259] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4182'.
[  311.201322][   T54] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11
[  311.204705][   T54] Bluetooth: hci3: unexpected event for opcode 0x1004
[  311.264791][T15267] netlink: 'syz.6.4187': attribute type 10 has an invalid length.
[  311.275000][T15267] .`: left allmulticast mode
[  311.276537][T15267] bond_slave_1: left allmulticast mode
[  311.278416][T15267] batadv0: left allmulticast mode
[  311.488485][T15267] team0: Port device .` removed
[  311.602755][T15279] netlink: 'syz.3.4192': attribute type 28 has an invalid length.
[  311.605535][T15279] netlink: 'syz.3.4192': attribute type 4 has an invalid length.
[  311.981093][   T54] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  311.984081][   T54] Bluetooth: hci0: unexpected event for opcode 0x1004
[  312.343178][   T54] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10
[  312.703449][T15390] : renamed from hsr_slave_0 (while UP)
[  313.619885][T15401] hsr_slave_0: left promiscuous mode
[  313.622271][T15401] hsr_slave_1: left promiscuous mode
[  314.124675][   T54] Bluetooth: hci0: Malformed Event: 0x02
[  315.285718][   T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  315.288487][   T54] Bluetooth: hci3: Injecting HCI hardware error event
[  315.292146][   T54] Bluetooth: hci3: hardware error 0x00
[  315.732054][T15530] __nla_validate_parse: 11 callbacks suppressed
[  315.732097][T15530] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4312'.
[  316.289958][ T5209] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  316.295230][ T5209] Bluetooth: hci0: Injecting HCI hardware error event
[  316.298241][ T5209] Bluetooth: hci0: hardware error 0x00
[  316.657421][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  316.659524][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  317.592953][   T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  318.552657][ T5209] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  319.791521][T15561] validate_nla: 2 callbacks suppressed
[  319.791533][T15561] netlink: 'syz.6.4324': attribute type 1 has an invalid length.
[  319.798919][T15561] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.4324'.
[  320.121071][T15593] netlink: 'syz.3.4339': attribute type 1 has an invalid length.
[  320.463518][T15610] delete_channel: no stack
[  320.465124][T15610] delete_channel: no stack
[  320.867841][T15627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  320.871139][T15627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  321.799283][T15643] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4362'.
[  321.803864][T15643] hsr_slave_0: left promiscuous mode
[  321.806201][T15643] hsr_slave_1: left promiscuous mode
[  321.840057][T15645] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  321.844323][T15645] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  322.628139][T15654] netlink: 'syz.3.4365': attribute type 3 has an invalid length.
[  322.630612][T15654] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4365'.
[  322.749125][T15659] IPv6: NLM_F_CREATE should be specified when creating new route
[  322.831964][T15664] IPv6: NLM_F_REPLACE set, but no existing node found!
[  323.900175][T15686] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.4378'.
[  324.114426][T15710] netlink: 'syz.6.4391': attribute type 46 has an invalid length.
[  324.252114][T15723] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.4396'.
[  324.264389][T15723] netlink: 'syz.7.4396': attribute type 1 has an invalid length.
[  324.456864][T15738] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.4402'.
[  324.595182][T15746] netlink: 'syz.7.4406': attribute type 22 has an invalid length.
[  324.597736][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4406'.
[  324.658513][T15749] netlink: 'syz.3.4407': attribute type 4 has an invalid length.
[  328.715444][T15781] pim6reg1: entered allmulticast mode
[  328.718427][T15781] pim6reg1: left allmulticast mode
[  328.946799][T15808] netlink: 'syz.3.4433': attribute type 1 has an invalid length.
[  328.949168][T15808] netlink: 'syz.3.4433': attribute type 4 has an invalid length.
[  328.951451][T15808] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4433'.
[  328.995014][T15812] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4435'.
[  328.999451][T15812] netlink: zone id is out of range
[  329.007295][T15812] netlink: zone id is out of range
[  329.009318][T15812] netlink: zone id is out of range
[  329.013265][T15812] netlink: zone id is out of range
[  329.014906][T15812] netlink: zone id is out of range
[  329.016522][T15812] netlink: zone id is out of range
[  329.018149][T15812] netlink: zone id is out of range
[  329.019826][T15812] netlink: zone id is out of range
[  329.021446][T15812] netlink: zone id is out of range
[  329.024566][T15812] netlink: zone id is out of range
[  329.081296][T15823] netlink: 'syz.7.4440': attribute type 21 has an invalid length.
[  329.086480][T15823] netlink: 'syz.7.4440': attribute type 1 has an invalid length.
[  329.089278][T15823] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4440'.
[  329.426360][T15855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4456'.
[  329.429484][T15854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4456'.
[  329.435134][T15855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4456'.
[  329.706589][T15859] syzkaller0: entered promiscuous mode
[  329.708456][T15859] syzkaller0: entered allmulticast mode
[  329.777780][T15865] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.4461'.
[  330.192420][T15891] netlink: 'syz.6.4473': attribute type 17 has an invalid length.
[  330.195071][T15891] netlink: 'syz.6.4473': attribute type 16 has an invalid length.
[  330.197616][T15891] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4473'.
[  330.470412][T15913] netlink: 'syz.7.4483': attribute type 10 has an invalid length.
[  330.695288][T15924] netlink: 'syz.6.4488': attribute type 21 has an invalid length.
[  330.697678][T15924] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.4488'.
[  331.350437][T15969] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4507'.
[  337.766507][T16015] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.4527'.
[  338.316032][T16041] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4540'.
[  338.458651][T16052] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.4526'.
[  338.760327][T16074] netlink: 'syz.3.4554': attribute type 21 has an invalid length.
[  339.321171][T16117] netlink: 'syz.3.4573': attribute type 21 has an invalid length.
[  339.324790][T16117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4573'.
[  339.725015][T16135] netlink: 'syz.7.4580': attribute type 13 has an invalid length.
[  339.727544][T16135] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.4580'.
[  339.824417][T16149] netlink: 'syz.6.4586': attribute type 21 has an invalid length.
[  340.051763][T16173] netlink: 'syz.7.4598': attribute type 10 has an invalid length.
[  340.056757][T16173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.062864][T16173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.068077][T16173] batadv_slave_0: entered promiscuous mode
[  340.070231][T16173] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  340.504271][T16215] netlink: 'syz.6.4617': attribute type 21 has an invalid length.
[  340.507295][T16215] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4617'.
[  340.795791][T16252] netlink: 'syz.6.4635': attribute type 3 has an invalid length.
[  340.798251][T16252] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4635'.
[  340.843886][T16254] netlink: 'syz.3.4636': attribute type 10 has an invalid length.
[  340.851373][T16254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4636'.
[  340.873507][T16254] dummy0: entered promiscuous mode
[  340.894119][T16254] net_ratelimit: 75 callbacks suppressed
[  340.894172][T16254] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  342.141155][T16282] : port 1(vlan0) entered blocking state
[  342.143799][T16282] : port 1(vlan0) entered disabled state
[  342.146133][T16282] vlan0: entered allmulticast mode
[  342.151943][T16282] vlan0: entered promiscuous mode
[  342.166040][T16286] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4649'.
[  342.390271][T16297] netlink: 'syz.6.4654': attribute type 21 has an invalid length.
[  343.041594][T16331] netlink: 'syz.6.4669': attribute type 28 has an invalid length.
[  343.138901][T16341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4674'.
[  343.709649][T16363] delete_channel: no stack
[  344.297897][T16397] validate_nla: 2 callbacks suppressed
[  344.297910][T16397] netlink: 'syz.6.4702': attribute type 21 has an invalid length.
[  344.302199][T16397] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4702'.
[  344.376739][T16408] netlink: 'syz.7.4706': attribute type 10 has an invalid length.
[  344.548099][T16428] syzkaller0: entered promiscuous mode
[  344.549989][T16428] syzkaller0: entered allmulticast mode
[  344.556253][T16426] netlink: 'syz.7.4715': attribute type 5 has an invalid length.
[  345.513966][T16442] netlink: 'syz.7.4723': attribute type 1 has an invalid length.
[  345.548096][T16443] netlink: 22 bytes leftover after parsing attributes in process `syz.6.4720'.
[  345.649490][T16461] C: renamed from team_slave_0
[  345.654385][T16461] netlink: 'syz.7.4732': attribute type 4 has an invalid length.
[  345.657303][T16461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  345.678960][T16464] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  345.956896][T16496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4746'.
[  345.959986][T16491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4746'.
[  345.967710][T16496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4746'.
[  346.047473][T16506] mac80211_hwsim hwsim17 .3c: renamed from wlan1
[  346.067225][T16506] netlink: 'syz.7.4753': attribute type 1 has an invalid length.
[  346.070429][T16506] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.4753'.
[  346.081825][T16506] netlink: 14207 bytes leftover after parsing attributes in process `syz.7.4753'.
[  346.103787][T16509] C: renamed from team_slave_0
[  346.106753][T16509] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4754'.
[  346.238697][T16523] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4761'.
[  346.241576][T16523] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  346.252506][T16523] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  346.278465][T16525] delete_channel: no stack
[  346.434260][T16540] netlink: 'syz.6.4769': attribute type 2 has an invalid length.
[  347.535145][T16580] netlink: 'syz.6.4787': attribute type 11 has an invalid length.
[  347.538438][T16580] netlink: 'syz.6.4787': attribute type 11 has an invalid length.
[  347.543057][T16579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.931831][T16632] netlink: 'syz.7.4812': attribute type 30 has an invalid length.
[  349.011141][T16688] : port 1(erspan0) entered blocking state
[  349.013386][T16688] : port 1(erspan0) entered disabled state
[  349.015441][T16688] erspan0: entered allmulticast mode
[  349.018040][T16688] erspan0: entered promiscuous mode
[  349.343160][T16692] netlink: 'syz.3.4837': attribute type 21 has an invalid length.
[  349.346666][T16692] __nla_validate_parse: 8 callbacks suppressed
[  349.346678][T16692] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4837'.
[  349.500158][T16708] netlink: 'syz.3.4844': attribute type 3 has an invalid length.
[  349.503479][T16708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4844'.
[  349.557185][T16713] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4848'.
[  349.774075][T16740] netlink: 'syz.7.4860': attribute type 1 has an invalid length.
[  349.777140][T16740] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4860'.
[  349.877891][T16750] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.4865'.
[  350.821317][T16817] netlink: 809 bytes leftover after parsing attributes in process `syz.3.4895'.
[  350.826670][T16817] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.4895'.
[  350.887920][T16826] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.4899'.
[  350.891135][T16826] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.4899'.
[  351.029249][T16834] netlink: 'syz.7.4903': attribute type 10 has an invalid length.
[  351.051610][T16834] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  351.054999][T16834] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  351.131309][T16843] netlink: 'syz.3.4907': attribute type 21 has an invalid length.
[  351.478826][T16871] netlink: 'syz.3.4921': attribute type 11 has an invalid length.
[  351.481363][T16871] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4921'.
[  351.488415][T16871] netlink: 'syz.3.4921': attribute type 10 has an invalid length.
[  351.494384][T16871] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  351.497935][T16871] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  351.500874][T16871] .`: (slave wlan1): Enslaving as an active interface with an up link
[  351.505632][T16870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.681549][T16967] netlink: 'syz.7.4968': attribute type 2 has an invalid length.
[  353.690034][T16967] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  354.051875][T16989] netlink: 'syz.6.4979': attribute type 10 has an invalid length.
[  354.875709][T16989] batman_adv: batadv0: Interface activated: vlan1
[  354.878522][T16989] team0: Device veth0_vlan failed to register rx_handler
[  354.881976][T16989] batman_adv: batadv0: Interface deactivated: vlan1
[  354.889032][T16990] __nla_validate_parse: 3 callbacks suppressed
[  354.889042][T16990] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4979'.
[  354.894049][T16990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  355.562198][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4983'.
[  355.895278][T17014] netlink: 'syz.7.4989': attribute type 15 has an invalid length.
[  355.897751][T17014] netlink: 11318 bytes leftover after parsing attributes in process `syz.7.4989'.
[  355.987762][T17022] netlink: 'syz.7.4993': attribute type 2 has an invalid length.
[  355.990292][T17022] netlink: 17267 bytes leftover after parsing attributes in process `syz.7.4993'.
[  356.634044][T17043] netlink: 'syz.6.5002': attribute type 3 has an invalid length.
[  356.642697][T17043] netlink: 'syz.6.5002': attribute type 1 has an invalid length.
[  356.645180][T17043] netlink: 191264 bytes leftover after parsing attributes in process `syz.6.5002'.
[  376.138889][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.143907][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.146549][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.149586][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.152135][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.164737][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.168132][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.171871][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.175259][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.178686][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.181228][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.184489][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.187526][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.191418][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.203586][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.075710][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  378.077706][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  378.232605][T17065] Bluetooth: hci4: command tx timeout
[  378.234705][T17065] Bluetooth: hci5: command tx timeout
[  378.236601][T17065] Bluetooth: hci2: command tx timeout
[  380.312633][ T5826] Bluetooth: hci2: command tx timeout
[  380.314834][ T5826] Bluetooth: hci5: command tx timeout
[  380.316539][ T5826] Bluetooth: hci4: command tx timeout
[  382.395092][T17065] Bluetooth: hci4: command tx timeout
[  382.397350][T17065] Bluetooth: hci5: command tx timeout
[  382.399543][T17065] Bluetooth: hci2: command tx timeout
[  384.472886][ T5826] Bluetooth: hci2: command tx timeout
[  384.475065][ T5826] Bluetooth: hci5: command tx timeout
[  384.477198][ T5826] Bluetooth: hci4: command tx timeout
[  432.188632][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  432.192226][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  432.196457][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  432.199327][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  432.201860][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  434.232664][ T5826] Bluetooth: hci6: command tx timeout
[  436.313431][ T5826] Bluetooth: hci6: command tx timeout
[  436.378121][ T5827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  436.381748][ T5827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  436.386479][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  436.390053][ T5827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  436.393467][ T5827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  436.416257][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  436.420038][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  436.424602][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  436.427851][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  436.430947][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  438.392645][T17065] Bluetooth: hci6: command tx timeout
[  438.472634][ T5827] Bluetooth: hci7: command tx timeout
[  438.474854][T17065] Bluetooth: hci8: command tx timeout
[  439.516791][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  439.518785][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  440.472725][T17065] Bluetooth: hci6: command tx timeout
[  440.552602][ T5827] Bluetooth: hci7: command tx timeout
[  440.554515][T17065] Bluetooth: hci8: command tx timeout
[  442.632592][ T5827] Bluetooth: hci7: command tx timeout
[  442.634383][T17065] Bluetooth: hci8: command tx timeout
[  444.712606][T17065] Bluetooth: hci8: command tx timeout
[  444.714354][T17065] Bluetooth: hci7: command tx timeout
[  462.002434][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  462.004561][    C1] rcu: 	1-....: (3878 ticks this GP) idle=e09c/1/0x4000000000000000 softirq=57334/57334 fqs=5250
[  462.009408][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  462.011418][    C1] rcu: 	 number:   887505          0            0
[  462.013405][    C1] rcu: 	cputime:    18732      20037           56   ==> 38780(ms)
[  462.015755][    C1] rcu: 	(t=10502 jiffies g=50733 q=2292 ncpus=2)
[  462.017674][    C1] CPU: 1 UID: 0 PID: 17052 Comm: syz.6.5005 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  462.017687][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  462.017693][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  462.017713][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 b2 e8 f2 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  462.017721][    C1] RSP: 0018:ffffc900001e0580 EFLAGS: 00000206
[  462.017730][    C1] RAX: 940984c89c88ff00 RBX: 1ffff9200003c0b8 RCX: 940984c89c88ff00
[  462.017736][    C1] RDX: 0000000000000003 RSI: ffffffff8d9792eb RDI: ffffffff8be30a00
[  462.017741][    C1] RBP: ffffc900001e0678 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[  462.017747][    C1] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffffffff8e141800
[  462.017753][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  462.017758][    C1] FS:  00007f0d3fa5b6c0(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  462.017765][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  462.017770][    C1] CR2: 000020000000f000 CR3: 000000010f700000 CR4: 00000000000006f0
[  462.017792][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  462.017798][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  462.017803][    C1] Call Trace:
[  462.017808][    C1]  <IRQ>
[  462.017812][    C1]  ? __lock_acquire+0xab9/0xd20
[  462.017831][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  462.017844][    C1]  ? unwind_next_frame+0xa5/0x2390
[  462.017858][    C1]  __rcu_read_unlock+0x84/0xe0
[  462.017868][    C1]  ? unwind_next_frame+0xa5/0x2390
[  462.017875][    C1]  unwind_next_frame+0x19ae/0x2390
[  462.017887][    C1]  ? unwind_next_frame+0xa5/0x2390
[  462.017895][    C1]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  462.017909][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  462.017920][    C1]  arch_stack_walk+0x11c/0x150
[  462.017933][    C1]  ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40
[  462.017946][    C1]  stack_trace_save+0x9c/0xe0
[  462.017955][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  462.017969][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  462.017982][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  462.017995][    C1]  kasan_save_track+0x3e/0x80
[  462.018007][    C1]  ? kasan_save_track+0x3e/0x80
[  462.018015][    C1]  ? kasan_save_free_info+0x46/0x50
[  462.018024][    C1]  ? __kasan_slab_free+0x62/0x70
[  462.018033][    C1]  ? kfree+0x18e/0x440
[  462.018045][    C1]  ? security_task_free+0xa4/0x1b0
[  462.018056][    C1]  ? __put_task_struct+0xfd/0x460
[  462.018067][    C1]  ? rcu_core+0xca8/0x1710
[  462.018077][    C1]  ? handle_softirqs+0x286/0x870
[  462.018087][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  462.018096][    C1]  ? irq_exit_rcu+0x9/0x30
[  462.018105][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  462.018149][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  462.018162][    C1]  ? raw_spin_rq_unlock_irq+0x13/0x90
[  462.018176][    C1]  ? __schedule+0x19d3/0x4d30
[  462.018189][    C1]  ? preempt_schedule_common+0x83/0xd0
[  462.018203][    C1]  ? preempt_schedule+0xae/0xc0
[  462.018211][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  462.018222][    C1]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  462.018256][    C1]  kasan_save_free_info+0x46/0x50
[  462.018265][    C1]  __kasan_slab_free+0x62/0x70
[  462.018276][    C1]  ? security_task_free+0xa4/0x1b0
[  462.018284][    C1]  kfree+0x18e/0x440
[  462.018293][    C1]  ? rcu_core+0xc34/0x1710
[  462.018304][    C1]  ? rcu_core+0xc34/0x1710
[  462.018314][    C1]  security_task_free+0xa4/0x1b0
[  462.018323][    C1]  __put_task_struct+0xfd/0x460
[  462.018334][    C1]  ? __pfx___put_task_struct_rcu_cb+0x10/0x10
[  462.018344][    C1]  ? rcu_core+0xc34/0x1710
[  462.018359][    C1]  rcu_core+0xca8/0x1710
[  462.018380][    C1]  ? __pfx_rcu_core+0x10/0x10
[  462.018389][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.018409][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  462.018419][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  462.018429][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  462.018445][    C1]  handle_softirqs+0x286/0x870
[  462.018458][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  462.018472][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  462.018486][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  462.018498][    C1]  __irq_exit_rcu+0xca/0x1f0
[  462.018509][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  462.018525][    C1]  irq_exit_rcu+0x9/0x30
[  462.018534][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  462.018545][    C1]  </IRQ>
[  462.018548][    C1]  <TASK>
[  462.018551][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  462.018560][    C1] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90
[  462.018569][    C1] Code: cc e8 e1 80 dd 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 66 90 e8 e4 17 e0 09 e8 2f f6 34 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc f3 0f 1e fa 49 be 00 00 00 00 00 fc
[  462.018576][    C1] RSP: 0018:ffffc90003acedc8 EFLAGS: 00000282
[  462.018584][    C1] RAX: 940984c89c88ff00 RBX: 1ffff11026cc754f RCX: 940984c89c88ff00
[  462.018589][    C1] RDX: 0000000000000007 RSI: ffffffff8d9792eb RDI: ffffffff8be30a00
[  462.018595][    C1] RBP: ffffc90003acf010 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[  462.018600][    C1] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffff888108ddb980
[  462.018605][    C1] R13: dffffc0000000000 R14: ffff888108ddb980 R15: ffff888136639f40
[  462.018622][    C1]  __schedule+0x19d3/0x4d30
[  462.018642][    C1]  ? __lock_acquire+0xab9/0xd20
[  462.018654][    C1]  ? preempt_schedule_common+0x83/0xd0
[  462.018664][    C1]  ? __lock_acquire+0xab9/0xd20
[  462.018675][    C1]  ? __pfx___schedule+0x10/0x10
[  462.018683][    C1]  ? migrate_enable+0x29c/0x3c0
[  462.018697][    C1]  ? __lock_acquire+0xab9/0xd20
[  462.018708][    C1]  ? migrate_enable+0x29c/0x3c0
[  462.018715][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  462.018725][    C1]  ? preempt_schedule+0xae/0xc0
[  462.018735][    C1]  preempt_schedule_common+0x83/0xd0
[  462.018746][    C1]  preempt_schedule+0xae/0xc0
[  462.018756][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  462.018770][    C1]  preempt_schedule_thunk+0x16/0x30
[  462.018784][    C1]  _raw_spin_unlock_irqrestore+0xfd/0x110
[  462.018794][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  462.018810][    C1]  rcu_preempt_deferred_qs_irqrestore+0x851/0xc40
[  462.018820][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  462.018838][    C1]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  462.018848][    C1]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  462.018862][    C1]  ? rcu_is_watching+0x7f/0xb0
[  462.018878][    C1]  rcu_read_unlock_special+0x3fe/0x4c0
[  462.018891][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  462.018899][    C1]  ? ___pte_offset_map+0x29/0x2c0
[  462.018920][    C1]  __rcu_read_unlock+0x84/0xe0
[  462.018930][    C1]  __handle_mm_fault+0x1414/0x5620
[  462.018953][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  462.018975][    C1]  ? find_vma+0xe7/0x160
[  462.018986][    C1]  ? __pfx_find_vma+0x10/0x10
[  462.018998][    C1]  handle_mm_fault+0x40a/0x8e0
[  462.019014][    C1]  do_user_addr_fault+0x764/0x1390
[  462.019035][    C1]  exc_page_fault+0x76/0xf0
[  462.019044][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.019055][    C1]  asm_exc_page_fault+0x26/0x30
[  462.019062][    C1] RIP: 0010:rep_movs_alternative+0x75/0x90
[  462.019072][    C1] Code: 05 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 c1 48 89 c8 48 c1 e9 03 83 e0 07 <f3> 48 a5 89 c1 85 c9 75 91 e9 7d 0a 04 00 48 8d 0c c8 eb 86 cc cc
[  462.019078][    C1] RSP: 0018:ffffc90003acf898 EFLAGS: 00010206
[  462.019084][    C1] RAX: 0000000000000003 RBX: ffff8881149f0000 RCX: 000000000000059e
[  462.019089][    C1] RDX: 0000000000000001 RSI: 000020000000f000 RDI: ffff8881149fd140
[  462.019094][    C1] RBP: ffffc90003acf9f0 R08: ffff8881149ffe32 R09: 1ffff1102293ffc6
[  462.019100][    C1] R10: dffffc0000000000 R11: ffffed102293ffc7 R12: 1ffff92000759f77
[  462.019105][    C1] R13: 0000200000001ec0 R14: ffffc90003acfbc8 R15: 000000000000fe33
[  462.019146][    C1]  _copy_from_iter+0x24c/0x16f0
[  462.019170][    C1]  ? irqentry_exit+0x74/0x90
[  462.019186][    C1]  ? __pfx__copy_from_iter+0x10/0x10
[  462.019202][    C1]  ? netlink_sendmsg+0x642/0xb30
[  462.019215][    C1]  ? skb_put+0x11b/0x210
[  462.019225][    C1]  netlink_sendmsg+0x6b2/0xb30
[  462.019242][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.019254][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  462.019268][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  462.019278][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.019290][    C1]  __sock_sendmsg+0x21c/0x270
[  462.019303][    C1]  sock_write_iter+0x258/0x330
[  462.019315][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  462.019331][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  462.019341][    C1]  ? security_file_permission+0x75/0x290
[  462.019361][    C1]  vfs_write+0x54b/0xa90
[  462.019377][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  462.019386][    C1]  ? __pfx_vfs_write+0x10/0x10
[  462.019403][    C1]  ? __fget_files+0x2a/0x420
[  462.019417][    C1]  ksys_write+0x145/0x250
[  462.019429][    C1]  ? __pfx_ksys_write+0x10/0x10
[  462.019440][    C1]  ? rcu_is_watching+0x15/0xb0
[  462.019451][    C1]  ? trace_sys_enter+0x25/0x100
[  462.019467][    C1]  do_syscall_64+0xfa/0x3b0
[  462.019479][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.019486][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  462.019497][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.019504][    C1] RIP: 0033:0x7f0d3eb8eb69
[  462.019514][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.019520][    C1] RSP: 002b:00007f0d3fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  462.019528][    C1] RAX: ffffffffffffffda RBX: 00007f0d3edb5fa0 RCX: 00007f0d3eb8eb69
[  462.019534][    C1] RDX: 000000000000fe33 RSI: 0000200000001ec0 RDI: 0000000000000007
[  462.019538][    C1] RBP: 00007f0d3ec11df1 R08: 0000000000000000 R09: 0000000000000000
[  462.019543][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.019547][    C1] R13: 0000000000000000 R14: 00007f0d3edb5fa0 R15: 00007ffdedbf1ac8
[  462.019562][    C1]  </TASK>
[  462.345270][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 105162759558 wd_nsec: 105162752340

VM DIAGNOSIS:
18:59:37  Registers:
info registers vcpu 0

CPU#0
RAX=d2a2740661107400 RBX=ffffffff81969b18 RCX=d2a2740661107400 RDX=0000000000000001
RSI=ffffffff8d9792eb RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ac2362edf8 CR3=00000000260e4000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007ff0c4b87d20
XMM02=080020b00000007d ffffffff00000000 XMM03=0000000500000007 0320080000000001
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=9803200800000000 0fffffff0000007f XMM07=2180030f00000000 ffff042000000006
XMM08=0020e80300000000 e00300080000007e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df8b0
R8 =ffff888108b50237 R9 =1ffff1102116a046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95955 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0d3fa5b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=000000010f700000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81ace8cb ffffffff81688ded
XMM02=ffffffff81c3daf5 ffffffff81688ded XMM03=ffffffff81c3daf5 ffffffff81c3daf5
XMM04=ffffffff81c91f3c ffffffff81c91f3c XMM05=ffffffff81c91f3c ffffffff81c3daf5
XMM06=ffffffff81c3daf5 ffffffff81c3daf5 XMM07=ffffffff81c3daf5 ffffffff81c3daf5
XMM08=0000000000000000 00007fbd81212eab XMM09=0000000000000000 00007fbd81212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
