last executing test programs:

38.212479424s ago: executing program 1 (id=267):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t')
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000)=0xffffffffffffffff, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d", @ANYRES32, @ANYBLOB="1c000000000003000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001180)=[0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], 0x0, 0xa7, 0x0, 0x0, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0xa6, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

37.823358913s ago: executing program 1 (id=273):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)

37.823199556s ago: executing program 1 (id=274):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8906, 0x0)

37.751027414s ago: executing program 1 (id=276):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

37.692393735s ago: executing program 1 (id=278):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

37.493199094s ago: executing program 1 (id=280):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ad4b54c, 0x0, 0x0, 0x0, 0xfffffff7}, @generic={0x66, 0x0, 0x0, 0xfffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @alu={0x6, 0x0, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94)

22.381628512s ago: executing program 32 (id=280):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ad4b54c, 0x0, 0x0, 0x0, 0xfffffff7}, @generic={0x66, 0x0, 0x0, 0xfffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @alu={0x6, 0x0, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94)

1.829875209s ago: executing program 3 (id=676):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.569719906s ago: executing program 3 (id=677):
socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x1e, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000000)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000580)=@in6={0xa, 0xce63, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0)

796.920953ms ago: executing program 3 (id=682):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2f00000008000000040000", @ANYRES32=r1, @ANYBLOB='W\f'], 0x20)

720.416377ms ago: executing program 3 (id=683):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0)

719.877307ms ago: executing program 2 (id=685):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

657.58989ms ago: executing program 3 (id=686):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x0)
mount$bpf(0x0, 0x0, 0xfffffffffffffffd, 0x1002008, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000015c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x2, 0x12)

560.340036ms ago: executing program 0 (id=688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

559.734358ms ago: executing program 2 (id=689):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@migrate={0xd8, 0x21, 0x1, 0x70bd28, 0x25dfdbfc, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e20, 0x8, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x2e}, 0x6e6bb5}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x32, 0x1, 0x0, 0x34ff, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@private0, 0x0, 0x2}}, @policy_type={0xa, 0x10, {0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8048044}, 0x4040)

559.323558ms ago: executing program 0 (id=690):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f00000009c0)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x8}, 0x40012100)

480.463374ms ago: executing program 2 (id=691):
r0 = socket$kcm(0x25, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12040)

400.918142ms ago: executing program 0 (id=692):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7fffffff}, 0x100068, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)

339.121939ms ago: executing program 3 (id=693):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

323.619667ms ago: executing program 2 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

185.393469ms ago: executing program 0 (id=695):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000280)=0x1fffc)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdbe1}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400)
openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
r1 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
recvmsg(r1, 0x0, 0x80)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040)

185.122132ms ago: executing program 2 (id=696):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)='A', 0x1}], 0x1, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x0)

80.880091ms ago: executing program 2 (id=697):
socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x103811, 0x0, 0x0, 0x4, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000008}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
socket$kcm(0x10, 0x2, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

393.85µs ago: executing program 0 (id=698):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)

0s ago: executing program 0 (id=699):
perf_event_open(&(0x7f0000000180)={0x2, 0xde, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r2 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35593' (ED25519) to the list of known hosts.
syzkaller login: [   55.759416][ T5801] cgroup: Unknown subsys name 'net'
[   55.884747][ T5801] cgroup: Unknown subsys name 'cpuset'
[   55.888482][ T5801] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.631830][ T5801] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.759588][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.870938][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   68.134936][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.137556][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.139851][ T5863] bridge_slave_0: entered allmulticast mode
[   68.152752][ T5863] bridge_slave_0: entered promiscuous mode
[   68.165424][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.167644][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.169823][ T5863] bridge_slave_1: entered allmulticast mode
[   68.182406][ T5863] bridge_slave_1: entered promiscuous mode
[   68.220465][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.228265][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.285860][ T5863] team0: Port device team_slave_0 added
[   68.299001][ T5863] team0: Port device team_slave_1 added
[   68.432954][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.435180][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.445928][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.451332][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.453863][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.469395][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.524817][ T5863] hsr_slave_0: entered promiscuous mode
[   68.529430][ T5863] hsr_slave_1: entered promiscuous mode
[   68.693756][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.699510][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.705032][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.709409][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.730095][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.732537][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.735080][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.737336][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.776065][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.785750][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.788678][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.799533][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   68.806093][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.808404][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.822614][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.824841][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.919022][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.942318][ T5863] veth0_vlan: entered promiscuous mode
[   68.947760][ T5863] veth1_vlan: entered promiscuous mode
[   68.964658][ T5863] veth0_macvtap: entered promiscuous mode
[   68.968658][ T5863] veth1_macvtap: entered promiscuous mode
[   68.978791][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.985287][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.994774][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.000552][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.004038][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.014183][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.673847][ T5914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.674363][ T5865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.677956][ T5914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.683630][ T5914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.687138][ T5914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.690753][ T5914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.722613][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.726037][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.730284][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.740638][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.745753][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.749142][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.755996][ T5921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.786885][ T5920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.793072][ T5920] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.802499][ T5920] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.817139][ T5865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.907712][ T5865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.075618][ T5913] chnl_net:caif_netlink_parms(): no params data found
[   70.198921][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.201374][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.204026][ T5913] bridge_slave_0: entered allmulticast mode
[   70.207586][ T5913] bridge_slave_0: entered promiscuous mode
[   70.228044][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.230894][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.234705][ T5913] bridge_slave_1: entered allmulticast mode
[   70.238198][ T5913] bridge_slave_1: entered promiscuous mode
[   70.260531][ T5918] chnl_net:caif_netlink_parms(): no params data found
[   70.323566][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.352134][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.399753][ T5913] team0: Port device team_slave_0 added
[   70.404984][ T5913] team0: Port device team_slave_1 added
[   70.420529][ T5916] chnl_net:caif_netlink_parms(): no params data found
[   70.465564][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.468295][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.477020][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.488237][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.490784][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.494166][ T5918] bridge_slave_0: entered allmulticast mode
[   70.497318][ T5918] bridge_slave_0: entered promiscuous mode
[   70.500751][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.503670][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.513375][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.534740][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.537425][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.539823][ T5918] bridge_slave_1: entered allmulticast mode
[   70.543924][ T5918] bridge_slave_1: entered promiscuous mode
[   70.577032][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.610120][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.685723][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.688647][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.692423][ T5916] bridge_slave_0: entered allmulticast mode
[   70.695793][ T5916] bridge_slave_0: entered promiscuous mode
[   70.700923][ T5918] team0: Port device team_slave_0 added
[   70.708529][ T5913] hsr_slave_0: entered promiscuous mode
[   70.711252][ T5913] hsr_slave_1: entered promiscuous mode
[   70.715368][ T5913] debugfs: 'hsr0' already exists in 'hsr'
[   70.717310][ T5913] Cannot create hsr debugfs directory
[   70.720690][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.723678][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.725877][ T5916] bridge_slave_1: entered allmulticast mode
[   70.728620][ T5916] bridge_slave_1: entered promiscuous mode
[   70.742902][ T5918] team0: Port device team_slave_1 added
[   70.793098][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.799782][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.848451][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.851385][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.863669][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.870138][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.873703][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.884146][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.921173][ T5916] team0: Port device team_slave_0 added
[   70.975222][ T5916] team0: Port device team_slave_1 added
[   70.983218][ T5918] hsr_slave_0: entered promiscuous mode
[   70.985981][ T5918] hsr_slave_1: entered promiscuous mode
[   70.988542][ T5918] debugfs: 'hsr0' already exists in 'hsr'
[   70.990626][ T5918] Cannot create hsr debugfs directory
[   71.001283][ T5865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.102843][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.105535][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.115587][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.136519][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.139631][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.150175][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.238237][ T5916] hsr_slave_0: entered promiscuous mode
[   71.241259][ T5916] hsr_slave_1: entered promiscuous mode
[   71.245258][ T5916] debugfs: 'hsr0' already exists in 'hsr'
[   71.247049][ T5916] Cannot create hsr debugfs directory
[   71.316693][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.324052][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.337225][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.339821][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.353181][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.377721][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.474774][ T5918] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.487667][ T5918] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.499772][ T5918] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.508106][ T5918] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.587044][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.615890][ T5913] 8021q: adding VLAN 0 to HW filter on device team0
[   71.626747][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.629490][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.641125][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.648204][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.651189][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.685944][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[   71.702505][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.704782][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.717653][ T5913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.726855][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.729657][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.744693][   T54] Bluetooth: hci0: command tx timeout
[   71.812976][   T54] Bluetooth: hci2: command tx timeout
[   71.814183][ T5920] Bluetooth: hci1: command tx timeout
[   71.866789][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.905995][ T5913] veth0_vlan: entered promiscuous mode
[   71.913798][ T5913] veth1_vlan: entered promiscuous mode
[   71.942537][ T5913] veth0_macvtap: entered promiscuous mode
[   71.947827][ T5913] veth1_macvtap: entered promiscuous mode
[   71.959742][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.973248][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.984190][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.987748][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.003213][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.024598][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.045755][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.106511][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.109571][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.154234][ T5918] veth0_vlan: entered promiscuous mode
[   72.162190][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.166174][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.177269][ T5918] veth1_vlan: entered promiscuous mode
[   72.231568][ T5918] veth0_macvtap: entered promiscuous mode
[   72.248790][ T5918] veth1_macvtap: entered promiscuous mode
[   72.280135][ T5968] netlink: 'syz.0.17': attribute type 15 has an invalid length.
[   72.357044][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.390186][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.424211][ T5865] bridge_slave_1: left allmulticast mode
[   72.426485][ T5865] bridge_slave_1: left promiscuous mode
[   72.429062][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.462731][ T5865] bridge_slave_0: left allmulticast mode
[   72.464879][ T5865] bridge_slave_0: left promiscuous mode
[   72.467676][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.620183][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   72.876095][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.900448][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.905853][ T5865] bond0 (unregistering): Released all slaves
[   72.925204][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.958577][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.971004][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.988838][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.087874][ T5865] hsr_slave_0: left promiscuous mode
[   73.091085][ T5865] hsr_slave_1: left promiscuous mode
[   73.094521][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.097878][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.104249][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.107378][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.134119][ T5865] veth1_macvtap: left promiscuous mode
[   73.137105][ T5865] veth0_macvtap: left promiscuous mode
[   73.139532][ T5865] veth1_vlan: left promiscuous mode
[   73.145173][ T5865] veth0_vlan: left promiscuous mode
[   73.241502][    C1] hrtimer: interrupt took 43247 ns
[   73.812428][ T5920] Bluetooth: hci0: command tx timeout
[   73.891912][ T5920] Bluetooth: hci1: command tx timeout
[   73.900062][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   73.910021][ T5920] Bluetooth: hci2: command tx timeout
[   73.967417][ T5994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.29'.
[   74.029014][ T5865] team0 (unregistering): Port device team_slave_1 removed
[   74.057007][ T5865] team0 (unregistering): Port device team_slave_0 removed
[   74.549752][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.561235][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.687180][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.695919][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.773606][ T5916] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.796803][ T5916] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.829305][ T5916] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.837955][ T5916] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.846419][ T6010] netlink: 'syz.2.16': attribute type 46 has an invalid length.
[   75.007893][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.056009][ T5916] 8021q: adding VLAN 0 to HW filter on device team0
[   75.078287][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.081200][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.129897][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.132905][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.379213][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.437557][ T5916] veth0_vlan: entered promiscuous mode
[   75.456808][ T5916] veth1_vlan: entered promiscuous mode
[   75.475296][ T6044] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.42'.
[   75.489201][ T5916] veth0_macvtap: entered promiscuous mode
[   75.496881][ T5916] veth1_macvtap: entered promiscuous mode
[   75.516252][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.525159][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.542305][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.545348][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.548780][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.565238][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.622968][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.632868][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.676531][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.679993][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.852772][ T6061] netlink: 10 bytes leftover after parsing attributes in process `syz.1.49'.
[   75.892206][ T5920] Bluetooth: hci0: command tx timeout
[   75.972781][ T5920] Bluetooth: hci2: command tx timeout
[   75.973474][   T54] Bluetooth: hci1: command tx timeout
[   76.034839][ T6076] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.55'.
[   76.142917][ T6085] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.60'.
[   76.177508][ T6088] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   76.350820][ T6096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.433600][ T6100] netlink: 'syz.1.67': attribute type 10 has an invalid length.
[   76.439445][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.447202][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.527929][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.532790][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.538416][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.540879][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.559540][ T6100] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   76.634638][   T54] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[   76.927613][ T6112] netlink: 'syz.2.73': attribute type 11 has an invalid length.
[   76.957899][ T6112] netlink: 140 bytes leftover after parsing attributes in process `syz.2.73'.
[   77.073577][ T6111] delete_channel: no stack
[   77.208206][ T6125] syz.1.78: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   77.228272][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) 
[   77.228292][ T6125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.228301][ T6125] Call Trace:
[   77.228311][ T6125]  <TASK>
[   77.228320][ T6125]  dump_stack_lvl+0x189/0x250
[   77.228369][ T6125]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.228393][ T6125]  ? __pfx__printk+0x10/0x10
[   77.228423][ T6125]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.228445][ T6125]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.228473][ T6125]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   77.228503][ T6125]  warn_alloc+0x214/0x310
[   77.228527][ T6125]  ? stack_depot_save_flags+0x41b/0x860
[   77.228551][ T6125]  ? __pfx_warn_alloc+0x10/0x10
[   77.228580][ T6125]  ? kasan_save_track+0x4f/0x80
[   77.228605][ T6125]  ? xskq_create+0x56/0x170
[   77.228618][ T6125]  ? xsk_init_queue+0xb0/0x110
[   77.228661][ T6125]  ? xsk_setsockopt+0x57b/0x8d0
[   77.228674][ T6125]  ? do_sock_setsockopt+0x17c/0x1b0
[   77.228691][ T6125]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   77.228707][ T6125]  ? do_syscall_64+0xfa/0x3b0
[   77.228721][ T6125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.228761][ T6125]  __vmalloc_node_range_noprof+0x125/0x12f0
[   77.228871][ T6125]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   77.228907][ T6125]  ? __kasan_kmalloc+0x93/0xb0
[   77.228944][ T6125]  vmalloc_user_noprof+0xad/0xf0
[   77.228963][ T6125]  ? xskq_create+0xbf/0x170
[   77.228988][ T6125]  xskq_create+0xbf/0x170
[   77.229017][ T6125]  xsk_init_queue+0xb0/0x110
[   77.229050][ T6125]  xsk_setsockopt+0x57b/0x8d0
[   77.229081][ T6125]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.229102][ T6125]  ? __pfx_aa_sk_perm+0x10/0x10
[   77.229135][ T6125]  ? __fget_files+0x2a/0x420
[   77.229148][ T6125]  ? aa_sock_opt_perm+0xff/0x1b0
[   77.229183][ T6125]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   77.229200][ T6125]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.229226][ T6125]  do_sock_setsockopt+0x17c/0x1b0
[   77.229271][ T6125]  __x64_sys_setsockopt+0x13f/0x1b0
[   77.229316][ T6125]  do_syscall_64+0xfa/0x3b0
[   77.229335][ T6125]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.229355][ T6125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.229371][ T6125]  ? exc_page_fault+0x9f/0xf0
[   77.229402][ T6125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.229416][ T6125] RIP: 0033:0x7f665938ec29
[   77.229435][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.229447][ T6125] RSP: 002b:00007f66575f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   77.229462][ T6125] RAX: ffffffffffffffda RBX: 00007f66595d5fa0 RCX: 00007f665938ec29
[   77.229472][ T6125] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   77.229481][ T6125] RBP: 00007f6659411e41 R08: 0000000000000004 R09: 0000000000000000
[   77.229489][ T6125] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   77.229498][ T6125] R13: 00007f66595d6038 R14: 00007f66595d5fa0 R15: 00007ffd3a105ca8
[   77.229567][ T6125]  </TASK>
[   77.229573][ T6125] Mem-Info:
[   77.770797][ T6130] syz.0.77 uses obsolete (PF_INET,SOCK_PACKET)
[   78.084074][   T54] Bluetooth: hci1: command tx timeout
[   78.337706][   T54] Bluetooth: hci0: command tx timeout
[   78.358453][ T6125] active_anon:5086 inactive_anon:0 isolated_anon:0
[   78.358453][ T6125]  active_file:1105 inactive_file:38256 isolated_file:0
[   78.358453][ T6125]  unevictable:1768 dirty:1427 writeback:0
[   78.358453][ T6125]  slab_reclaimable:9588 slab_unreclaimable:53179
[   78.358453][ T6125]  mapped:18030 shmem:2431 pagetables:978
[   78.358453][ T6125]  sec_pagetables:0 bounce:0
[   78.358453][ T6125]  kernel_misc_reclaimable:0
[   78.358453][ T6125]  free:302404 free_pcp:18754 free_cma:0
[   78.380100][   T54] Bluetooth: hci2: command tx timeout
[   78.444861][ T6125] Node 0 active_anon:13900kB inactive_anon:0kB active_file:2148kB inactive_file:25384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41400kB dirty:5368kB writeback:0kB shmem:4704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4672kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   78.597161][ T6125] Node 1 active_anon:6444kB inactive_anon:0kB active_file:2272kB inactive_file:127640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:340kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6820kB pagetables:1480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   78.706799][ T6125] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   78.817841][ T6140] veth0_vlan: entered allmulticast mode
[   81.333869][ T6125] lowmem_reserve[]: 0 811 811 811 811
[   81.336343][ T6125] Node 0 DMA32 free:414848kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13924kB inactive_anon:0kB active_file:2148kB inactive_file:25392kB unevictable:3536kB writepending:5368kB present:1556484kB managed:830860kB mlocked:0kB bounce:0kB free_pcp:23996kB local_pcp:7380kB free_cma:0kB
[   81.383655][ T6140] veth0_vlan: left promiscuous mode
[   81.394435][ T6140] veth0_vlan: entered promiscuous mode
[   81.681902][ T6125] lowmem_reserve[]: 0 0 0 0 0
[   81.694322][ T6125] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.728554][ T6125] lowmem_reserve[]: 0 0 854 854 854
[   81.731080][ T6125] Node 1 Normal free:320036kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6400kB inactive_anon:0kB active_file:2272kB inactive_file:127640kB unevictable:3536kB writepending:336kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:52888kB local_pcp:22268kB free_cma:0kB
[   81.747469][ T6125] lowmem_reserve[]: 0 0 0 0 0
[   81.749669][ T6125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.755512][ T6125] Node 0 DMA32: 2*4kB (ME) 2*8kB (UE) 11*16kB (UM) 20*32kB (UME) 7*64kB (ME) 3*128kB (UME) 3*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 99*4096kB (M) = 414600kB
[   81.765112][ T6125] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   81.772233][ T6125] Node 1 Normal: 3579*4kB (UME) 1827*8kB (UME) 144*16kB (UM) 39*32kB (M) 23*64kB (M) 15*128kB (UME) 8*256kB (ME) 3*512kB (M) 4*1024kB (UME) 3*2048kB (UME) 66*4096kB (M) = 320036kB
[   81.779697][ T6125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.786191][ T6125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.824651][ T6125] 41829 total pagecache pages
[   81.827755][ T6125] 0 pages in swap cache
[   81.829659][ T6125] Free swap  = 124996kB
[   81.837603][ T6125] Total swap = 124996kB
[   81.839554][ T6125] 786301 pages RAM
[   81.841275][ T6125] 0 pages HighMem/MovableOnly
[   81.843925][ T6125] 241354 pages reserved
[   81.845902][ T6125] 0 pages cma reserved
[   85.290723][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 6508677218 wd_nsec: 6508677472
[   86.602995][ T6148] netlink: 'syz.0.86': attribute type 10 has an invalid length.
[   86.688362][ T6153] netlink: 'syz.0.86': attribute type 11 has an invalid length.
[   86.699366][   T24] cfg80211: failed to load regulatory.db
[   86.715155][ T6148] team0: Port device wlan1 added
[   86.717729][ T6153] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.86'.
[   86.731281][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.755765][ T6185] netlink: 'syz.0.103': attribute type 2 has an invalid length.
[   87.801200][ T6187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.104'.
[   88.118890][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'.
[   88.309345][ T6212] netlink: 'syz.1.112': attribute type 4 has an invalid length.
[   88.317468][ T6212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.112'.
[   88.339973][ T6212] .`: renamed from bond0 (while UP)
[   89.938760][ T6262] Zero length message leads to an empty skb
[   89.942158][ T6262] netlink: 'syz.2.132': attribute type 1 has an invalid length.
[   89.944668][ T6262] netlink: 'syz.2.132': attribute type 4 has an invalid length.
[   89.947146][ T6262] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.132'.
[   91.620985][ T6302] netlink: 'syz.1.150': attribute type 10 has an invalid length.
[   91.636112][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.150'.
[   92.285546][ T6311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.557642][   T54] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[   94.464372][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'.
[   94.595394][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   94.619894][ T6349] netlink: 'syz.2.171': attribute type 10 has an invalid length.
[   94.643382][ T6349] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   94.833111][ T6357] netlink: 2 bytes leftover after parsing attributes in process `syz.0.175'.
[   94.914637][ T6361] netlink: 64 bytes leftover after parsing attributes in process `syz.1.176'.
[   95.002528][ T6367] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.180'.
[   95.059809][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   96.065922][ T6526] netlink: 68 bytes leftover after parsing attributes in process `syz.2.202'.
[   96.228933][ T6532] netlink: 596 bytes leftover after parsing attributes in process `syz.1.205'.
[   96.353303][ T6536] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.538317][ T6543] veth1_macvtap: left promiscuous mode
[   96.540555][ T6543] macsec0: entered promiscuous mode
[  102.039599][ T6559] pim6reg1: entered promiscuous mode
[  102.041979][ T6559] pim6reg1: entered allmulticast mode
[  102.049682][   T54] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  102.341341][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'.
[  102.738876][ T6589] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.227'.
[  102.828351][ T6595] =======================================================
[  102.828351][ T6595] WARNING: The mand mount option has been deprecated and
[  102.828351][ T6595]          and is ignored by this kernel. Remove the mand
[  102.828351][ T6595]          option from the mount to silence this warning.
[  102.828351][ T6595] =======================================================
[  104.170658][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.1.240'.
[  104.377126][ T6630] netlink: 'syz.2.243': attribute type 2 has an invalid length.
[  104.381845][ T6630] netlink: 'syz.2.243': attribute type 1 has an invalid length.
[  104.496030][ T6630] netlink: 228 bytes leftover after parsing attributes in process `syz.2.243'.
[  104.529689][ T6634] netlink: 'syz.1.244': attribute type 11 has an invalid length.
[  104.824728][ T6657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.254'.
[  104.827617][ T6657] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'.
[  104.916071][ T6667] C: renamed from team_slave_0 (while UP)
[  104.919650][ T6667] netlink: 'syz.1.258': attribute type 3 has an invalid length.
[  104.924698][ T6665] netlink: 'syz.0.259': attribute type 2 has an invalid length.
[  104.927750][ T6665] netlink: 164 bytes leftover after parsing attributes in process `syz.0.259'.
[  104.932062][ T6667] netlink: 152 bytes leftover after parsing attributes in process `syz.1.258'.
[  104.935608][ T6667] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  104.949489][ T6665] netlink: 'syz.0.259': attribute type 2 has an invalid length.
[  104.953193][ T6665] netlink: 164 bytes leftover after parsing attributes in process `syz.0.259'.
[  105.821356][ T6712] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.277'.
[  106.980001][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  106.999639][ T6733] netlink: 'syz.2.287': attribute type 10 has an invalid length.
[  107.321822][ T6737] netlink: 'syz.2.289': attribute type 1 has an invalid length.
[  107.387051][ T6739] __nla_validate_parse: 1 callbacks suppressed
[  107.387068][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.291'.
[  107.393550][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'.
[  108.104929][   T54] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  109.474385][ T6785] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  109.822617][ T6802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.411320][ T6833] netlink: 'syz.2.330': attribute type 33 has an invalid length.
[  110.418040][ T6833] netlink: 152 bytes leftover after parsing attributes in process `syz.2.330'.
[  110.660731][ T6842] sctp: [Deprecated]: syz.2.335 (pid 6842) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.660731][ T6842] Use struct sctp_sack_info instead
[  111.802211][ T6859] netlink: 120 bytes leftover after parsing attributes in process `syz.0.342'.
[  111.803681][ T6861] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.343'.
[  111.946626][ T6873] netlink: 'syz.2.349': attribute type 21 has an invalid length.
[  111.949696][ T6873] netlink: 'syz.2.349': attribute type 15 has an invalid length.
[  111.952864][ T6873] netlink: 156 bytes leftover after parsing attributes in process `syz.2.349'.
[  111.956495][ T6873] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.959347][ T6873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.962045][ T6873] IPv6: NLM_F_CREATE should be set when creating new route
[  111.964536][ T6873] IPv6: NLM_F_CREATE should be set when creating new route
[  111.966910][ T6873] IPv6: NLM_F_CREATE should be set when creating new route
[  112.054003][ T6877] netlink: 'syz.0.350': attribute type 11 has an invalid length.
[  112.057151][ T6877] netlink: 168 bytes leftover after parsing attributes in process `syz.0.350'.
[  112.133059][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  112.136150][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  112.138980][ T5920] Bluetooth: hci0: hardware error 0x00
[  112.232489][ T6879] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP)
[  113.401428][ T6923] netlink: zone id is out of range
[  113.453283][ T6923] netlink: zone id is out of range
[  113.467761][ T6925] netlink: del zone limit has 4 unknown bytes
[  113.469972][ T6923] netlink: zone id is out of range
[  113.922767][ T6923] netlink: set zone limit has 4 unknown bytes
[  114.215504][ T5920] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  114.570992][ T6942] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.378'.
[  114.614094][ T6945] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[  114.974636][ T6950] netlink: 'syz.0.381': attribute type 33 has an invalid length.
[  114.977826][ T6950] netlink: 152 bytes leftover after parsing attributes in process `syz.0.381'.
[  115.470702][ T6962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.386'.
[  115.521053][ T6962] netlink: 'syz.0.386': attribute type 21 has an invalid length.
[  115.534938][ T6962] netlink: 'syz.0.386': attribute type 10 has an invalid length.
[  115.955501][ T6968] netlink: 'syz.0.389': attribute type 1 has an invalid length.
[  116.045694][ T6972] netlink: 'syz.2.391': attribute type 21 has an invalid length.
[  116.048217][ T6972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.391'.
[  116.051167][ T6972] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[  116.757434][ T7001] netlink: del zone limit has 4 unknown bytes
[  117.999618][ T7018] netlink: 168 bytes leftover after parsing attributes in process `syz.0.412'.
[  118.186481][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.419'.
[  119.119976][ T7045] tmpfs: Bad value for 'mode'
[  119.277631][ T7056] netlink: 830 bytes leftover after parsing attributes in process `syz.2.426'.
[  120.384193][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[  120.602432][ T7092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.442'.
[  121.137807][ T7104] netlink: 'syz.0.447': attribute type 3 has an invalid length.
[  121.140272][ T7104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.447'.
[  121.235324][ T7107] netlink: 'syz.2.449': attribute type 5 has an invalid length.
[  121.238756][ T7107] netlink: 'syz.2.449': attribute type 5 has an invalid length.
[  121.442046][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.446614][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.449777][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.456306][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.464111][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.577770][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.617127][ T7120] sit0: entered allmulticast mode
[  121.650127][ T7120] sit0: entered promiscuous mode
[  122.159949][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.239289][ T7112] chnl_net:caif_netlink_parms(): no params data found
[  122.475000][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.493814][ T7134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.555342][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.586501][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.588715][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.594908][ T7112] bridge_slave_0: entered allmulticast mode
[  122.598166][ T7112] bridge_slave_0: entered promiscuous mode
[  122.602189][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.605041][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.607910][ T7112] bridge_slave_1: entered allmulticast mode
[  122.611032][ T7112] bridge_slave_1: entered promiscuous mode
[  122.639468][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.649519][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.705324][ T7112] team0: Port device team_slave_0 added
[  122.714431][ T7112] team0: Port device team_slave_1 added
[  122.745648][   T13] bridge_slave_1: left allmulticast mode
[  122.747891][   T13] bridge_slave_1: left promiscuous mode
[  122.749969][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.755520][   T13] bridge_slave_0: left allmulticast mode
[  122.757327][   T13] bridge_slave_0: left promiscuous mode
[  122.759258][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.793505][ T7153] xt_socket: unknown flags 0x20
[  123.054701][   T13] .` (unregistering): (slave bridge0): Releasing backup interface
[  123.062779][ T7169] netlink: 'syz.0.472': attribute type 10 has an invalid length.
[  123.162237][   T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.167639][   T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.173795][   T13] .` (unregistering): Released all slaves
[  123.184469][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.187103][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.197250][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.218733][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.222111][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.233944][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.245052][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.248688][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.264517][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.267481][ T7169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.271096][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.273957][ T7169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.281360][ T7169] team0: Port device bridge0 added
[  123.284214][ T7170] bridge_slave_1: left allmulticast mode
[  123.290986][ T7170] bridge_slave_1: left promiscuous mode
[  123.295937][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.301429][ T7170] bridge_slave_0: left promiscuous mode
[  123.305150][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.324705][ T7170] team0: Port device bridge0 removed
[  123.449565][ T7112] hsr_slave_0: entered promiscuous mode
[  123.454284][ T7112] hsr_slave_1: entered promiscuous mode
[  123.491792][ T5920] Bluetooth: hci1: command tx timeout
[  124.035048][   T13] hsr_slave_0: left promiscuous mode
[  124.037444][   T13] hsr_slave_1: left promiscuous mode
[  124.039736][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.042919][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.045739][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.048231][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.074662][   T13] veth0_macvtap: left promiscuous mode
[  124.076769][   T13] veth1_vlan: left promiscuous mode
[  124.078816][   T13] veth0_vlan: left promiscuous mode
[  124.099822][ T7183] netlink: 220 bytes leftover after parsing attributes in process `syz.2.478'.
[  124.418849][   T13] team0 (unregistering): Port device team_slave_1 removed
[  124.452696][   T13] team0 (unregistering): Port device C removed
[  124.604965][ T7193] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.479'.
[  125.053998][ T7112] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  125.067816][ T7112] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  125.085425][ T7112] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  125.092664][ T7200] netlink: 'syz.0.481': attribute type 2 has an invalid length.
[  125.117182][ T7112] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  125.307181][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.331319][ T7112] 8021q: adding VLAN 0 to HW filter on device team0
[  125.346810][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.349581][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.367999][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.371089][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.395574][ T7218] IPv6: : Disabled Multicast RS
[  125.572042][ T5920] Bluetooth: hci1: command tx timeout
[  126.338393][ T7112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.370451][ T7112] veth0_vlan: entered promiscuous mode
[  126.397807][ T7112] veth1_vlan: entered promiscuous mode
[  126.424619][ T7112] veth0_macvtap: entered promiscuous mode
[  126.430963][ T7112] veth1_macvtap: entered promiscuous mode
[  126.503875][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.518258][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.529447][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.539561][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.563365][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.566616][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.650392][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.656732][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.675515][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.678672][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.984494][ T7275] netlink: 'syz.0.508': attribute type 13 has an invalid length.
[  126.989835][ T7275] netlink: 'syz.0.508': attribute type 17 has an invalid length.
[  127.043039][ T7275] sit0: left promiscuous mode
[  127.045088][ T7275] sit0: left allmulticast mode
[  127.097930][ T7275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.424796][ T7293] lo speed is unknown, defaulting to 1000
[  127.550916][ T7293] lo speed is unknown, defaulting to 1000
[  127.581208][ T7299] syzkaller0: entered promiscuous mode
[  127.584282][ T7299] syzkaller0: entered allmulticast mode
[  127.597917][ T7293] lo speed is unknown, defaulting to 1000
[  127.652827][ T5920] Bluetooth: hci1: command tx timeout
[  128.393699][ T7293] infiniband syz2: set active
[  128.396088][ T7293] infiniband syz2: added lo
[  128.406364][ T7293] syz2: rxe_create_cq: returned err = -12
[  128.409002][ T7293] infiniband syz2: Couldn't create ib_mad CQ
[  128.415633][ T7293] infiniband syz2: Couldn't open port 1
[  128.462951][ T7293] RDS/IB: syz2: added
[  128.465106][ T7293] smc: adding ib device syz2 with port count 1
[  128.467635][ T7293] smc:    ib device syz2 port 1 has pnetid 
[  129.195792][  T791] lo speed is unknown, defaulting to 1000
[  129.205664][ T5964] lo speed is unknown, defaulting to 1000
[  129.210369][ T7293] lo speed is unknown, defaulting to 1000
[  129.350392][ T7310] warning: `syz.2.519' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  129.460959][ T7293] lo speed is unknown, defaulting to 1000
[  129.552304][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'.
[  129.630658][ T7324] netlink: 'syz.0.526': attribute type 29 has an invalid length.
[  129.652514][ T7293] lo speed is unknown, defaulting to 1000
[  129.654644][ T7324] netlink: 'syz.0.526': attribute type 29 has an invalid length.
[  129.665610][ T7324] netlink: 488 bytes leftover after parsing attributes in process `syz.0.526'.
[  129.679257][ T7328] netlink: 168 bytes leftover after parsing attributes in process `syz.2.528'.
[  129.733747][ T5920] Bluetooth: hci1: command tx timeout
[  129.915302][ T7347] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.537'.
[  132.776074][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.778706][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.229034][ T7361] netlink: 'syz.2.543': attribute type 12 has an invalid length.
[  133.248137][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.543'.
[  133.769802][ T7401] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  133.820306][ T7405] netlink: 92 bytes leftover after parsing attributes in process `syz.2.563'.
[  134.848667][ T7416] delete_channel: no stack
[  135.281178][ T7447] netlink: 348 bytes leftover after parsing attributes in process `syz.0.579'.
[  135.390930][ T7456] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  135.812068][   T36] wlan1: Trigger new scan to find an IBSS to join
[  135.843195][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.588'.
[  135.849276][ T7468] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  135.897952][ T7472] netlink: 'syz.0.590': attribute type 10 has an invalid length.
[  135.907861][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.911291][ T7472] team0: Port device bond0 added
[  136.214488][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'.
[  136.454544][ T7502] option changes via remount are deprecated (pid=7494 comm=syz.0.600)
[  136.998185][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'.
[  137.246806][ T7529] netlink: 'syz.2.612': attribute type 3 has an invalid length.
[  137.249586][ T7529] netlink: 'syz.2.612': attribute type 3 has an invalid length.
[  137.255062][ T7529] netlink: 130500 bytes leftover after parsing attributes in process `syz.2.612'.
[  137.383435][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[  137.387729][ T7536] netlink: 220 bytes leftover after parsing attributes in process `syz.0.615'.
[  137.605568][ T7556] syzkaller0: tun_chr_ioctl cmd 2147767506
[  138.184032][ T7581] netlink: 'syz.0.636': attribute type 4 has an invalid length.
[  138.384320][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  138.410878][ T7585] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  138.851842][ T3598] wlan1: Trigger new scan to find an IBSS to join
[  139.223969][ T7611] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.646'.
[  139.398528][ T7618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.649'.
[  139.494834][ T7626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.861053][ T7647] netlink: 56 bytes leftover after parsing attributes in process `syz.3.659'.
[  141.820248][   T36] wlan1: Trigger new scan to find an IBSS to join
[  142.711381][ T7700] netlink: 168 bytes leftover after parsing attributes in process `syz.0.684'.
[  142.747080][ T1089] wlan1: Creating new IBSS network, BSSID ba:2d:47:1f:57:1c
[  142.920821][ T7715] netlink: 'syz.0.690': attribute type 29 has an invalid length.
[  142.930933][ T7715] netlink: 'syz.0.690': attribute type 29 has an invalid length.
[  143.258525][ T7725] netlink: 'syz.0.695': attribute type 10 has an invalid length.
[  143.299426][ T7725] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  143.304241][ T7725] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  143.308410][ T7725] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  143.530572][ T7723] ------------[ cut here ]------------
[  143.533165][ T7723] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  143.542868][ T7723] WARNING: CPU: 0 PID: 7723 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x6e6/0xc20
[  143.546283][ T7723] Modules linked in:
[  143.547826][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.3.693 Not tainted syzkaller #0 PREEMPT(full) 
[  143.552127][ T7723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.555450][ T7723] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  143.557917][ T7723] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 0f 01 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  143.564322][ T7723] RSP: 0018:ffffc90002aaef08 EFLAGS: 00010282
[  143.566598][ T7723] RAX: 5aa6f8d1d00fa200 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  143.569169][ T7723] RDX: ffffc90028f1f000 RSI: 0000000000047360 RDI: 0000000000047361
[  143.572307][ T7723] RBP: 00000000ffffdfcd R08: ffff88804b024253 R09: 1ffff1100960484a
[  143.578217][ T7723] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888030526230
[  143.580841][ T7723] R13: ffff888030526250 R14: ffff888030526268 R15: 00000000ffffdfcc
[  143.583746][ T7723] FS:  00007fcc44fc66c0(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  143.586590][ T7723] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.588983][ T7723] CR2: 00007f44d7dd7dac CR3: 000000002476a000 CR4: 00000000000006f0
[  143.598355][ T7723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  143.600881][ T7723] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  143.603513][ T7723] Call Trace:
[  143.604638][ T7723]  <TASK>
[  143.606075][ T7723]  reg_set_min_max+0x214/0x300
[  143.607999][ T7723]  check_cond_jmp_op+0x1985/0x2d50
[  143.609757][ T7723]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  143.611767][ T7723]  ? do_check+0x72d/0xed30
[  143.613428][ T7723]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  143.615585][ T7723]  do_check+0x5a8e/0xed30
[  143.617298][ T7723]  ? __pfx_do_check+0x10/0x10
[  143.619136][ T7723]  do_check_common+0x1938/0x24e0
[  143.620835][ T7723]  bpf_check+0x18319/0x1d6a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  143.639951][ T7723]  ? __pfx_perf_tp_event+0x10/0x10
[  143.649133][ T7723]  ? perf_trace_run_bpf_submit+0xee/0x170
[  143.651365][ T7723]  ? perf_trace_preemptirq_template+0x280/0x340
[  143.657715][ T7723]  ? irqentry_enter+0x3d/0x60
[  143.659710][ T7723]  ? irqentry_exit+0x74/0x90
[  143.661524][ T7723]  ? __pfx_bpf_check+0x10/0x10
[  143.663283][ T7723]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  143.665560][ T7723]  ? seqcount_lockdep_reader_access+0x17e/0x1c0
[  143.667691][ T7723]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  143.669809][ T7723]  ? __asan_memset+0x22/0x50
[  143.672083][ T7723]  ? bpf_obj_name_cpy+0x194/0x1e0
[  143.673815][ T7723]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  143.679373][ T7723]  ? security_bpf_prog_load+0x7f/0x310
[  143.681211][ T7723]  bpf_prog_load+0x1318/0x1930
[  143.682987][ T7723]  ? __pfx_bpf_prog_load+0x10/0x10
[  143.684828][ T7723]  ? lock_acquire+0x175/0x360
[  143.686838][ T7723]  ? bpf_lsm_bpf+0x9/0x20
[  143.688285][ T7723]  ? security_bpf+0x7e/0x300
[  143.689964][ T7723]  __sys_bpf+0x4ff/0x850
[  143.691351][ T7723]  ? __pfx___sys_bpf+0x10/0x10
[  143.693263][ T7723]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  143.695877][ T7723]  __x64_sys_bpf+0x7c/0x90
[  143.697973][ T7723]  do_syscall_64+0xfa/0x3b0
[  143.699842][ T7723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.702035][ T7723]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  143.703994][ T7723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.705990][ T7723] RIP: 0033:0x7fcc4418ec29
[  143.707723][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.713694][ T7723] RSP: 002b:00007fcc44fc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  143.716880][ T7723] RAX: ffffffffffffffda RBX: 00007fcc443d5fa0 RCX: 00007fcc4418ec29
[  143.719464][ T7723] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  143.721874][ T7723] RBP: 00007fcc44211e41 R08: 0000000000000000 R09: 0000000000000000
[  143.724226][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.727095][ T7723] R13: 00007fcc443d6038 R14: 00007fcc443d5fa0 R15: 00007fffb45dae48
[  143.729840][ T7723]  </TASK>
[  143.731321][ T7723] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  143.733678][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.3.693 Not tainted syzkaller #0 PREEMPT(full) 
[  143.736900][ T7723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.739991][ T7723] Call Trace:
[  143.741151][ T7723]  <TASK>
[  143.742036][ T7723]  dump_stack_lvl+0x99/0x250
[  143.743452][ T7723]  ? __asan_memcpy+0x40/0x70
[  143.744928][ T7723]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.746534][ T7723]  ? __pfx__printk+0x10/0x10
[  143.748214][ T7723]  vpanic+0x281/0x750
[  143.749567][ T7723]  ? __pfx__printk+0x10/0x10
[  143.751036][ T7723]  ? __pfx_vpanic+0x10/0x10
[  143.752697][ T7723]  ? is_bpf_text_address+0x26/0x2b0
[  143.754325][ T7723]  panic+0xb9/0xc0
[  143.755761][ T7723]  ? __pfx_panic+0x10/0x10
[  143.757391][ T7723]  __warn+0x31b/0x4b0
[  143.758665][ T7723]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  143.760428][ T7723]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  143.762305][ T7723]  report_bug+0x2be/0x4f0
[  143.763720][ T7723]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  143.765537][ T7723]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  143.767698][ T7723]  ? reg_bounds_sanity_check+0x6e8/0xc20
[  143.769861][ T7723]  handle_bug+0x84/0x160
[  143.771499][ T7723]  exc_invalid_op+0x1a/0x50
[  143.773173][ T7723]  asm_exc_invalid_op+0x1a/0x20
[  143.774737][ T7723] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  143.777148][ T7723] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 0f 01 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  143.783075][ T7723] RSP: 0018:ffffc90002aaef08 EFLAGS: 00010282
[  143.785093][ T7723] RAX: 5aa6f8d1d00fa200 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  143.787869][ T7723] RDX: ffffc90028f1f000 RSI: 0000000000047360 RDI: 0000000000047361
[  143.790419][ T7723] RBP: 00000000ffffdfcd R08: ffff88804b024253 R09: 1ffff1100960484a
[  143.792984][ T7723] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888030526230
[  143.795779][ T7723] R13: ffff888030526250 R14: ffff888030526268 R15: 00000000ffffdfcc
[  143.798487][ T7723]  reg_set_min_max+0x214/0x300
[  143.799986][ T7723]  check_cond_jmp_op+0x1985/0x2d50
[  143.801573][ T7723]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  143.803268][ T7723]  ? do_check+0x72d/0xed30
[  143.804716][ T7723]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  143.806938][ T7723]  do_check+0x5a8e/0xed30
[  143.808301][ T7723]  ? __pfx_do_check+0x10/0x10
[  143.809784][ T7723]  do_check_common+0x1938/0x24e0
[  143.811315][ T7723]  bpf_check+0x18319/0x1d6a0
[  143.812762][ T7723]  ? __pfx_perf_tp_event+0x10/0x10
[  143.814358][ T7723]  ? perf_trace_run_bpf_submit+0xee/0x170
[  143.816537][ T7723]  ? perf_trace_preemptirq_template+0x280/0x340
[  143.818560][ T7723]  ? irqentry_enter+0x3d/0x60
[  143.820053][ T7723]  ? irqentry_exit+0x74/0x90
[  143.821562][ T7723]  ? __pfx_bpf_check+0x10/0x10
[  143.823059][ T7723]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  143.825082][ T7723]  ? seqcount_lockdep_reader_access+0x17e/0x1c0
[  143.827547][ T7723]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  143.829705][ T7723]  ? __asan_memset+0x22/0x50
[  143.831126][ T7723]  ? bpf_obj_name_cpy+0x194/0x1e0
[  143.832671][ T7723]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  143.834266][ T7723]  ? security_bpf_prog_load+0x7f/0x310
[  143.836335][ T7723]  bpf_prog_load+0x1318/0x1930
[  143.838242][ T7723]  ? __pfx_bpf_prog_load+0x10/0x10
[  143.839905][ T7723]  ? lock_acquire+0x175/0x360
[  143.841456][ T7723]  ? bpf_lsm_bpf+0x9/0x20
[  143.842973][ T7723]  ? security_bpf+0x7e/0x300
[  143.844566][ T7723]  __sys_bpf+0x4ff/0x850
[  143.846197][ T7723]  ? __pfx___sys_bpf+0x10/0x10
[  143.847787][ T7723]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  143.849986][ T7723]  __x64_sys_bpf+0x7c/0x90
[  143.851465][ T7723]  do_syscall_64+0xfa/0x3b0
[  143.853000][ T7723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.854938][ T7723]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  143.856768][ T7723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.858601][ T7723] RIP: 0033:0x7fcc4418ec29
[  143.860112][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.866497][ T7723] RSP: 002b:00007fcc44fc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  143.869230][ T7723] RAX: ffffffffffffffda RBX: 00007fcc443d5fa0 RCX: 00007fcc4418ec29
[  143.871765][ T7723] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  143.874782][ T7723] RBP: 00007fcc44211e41 R08: 0000000000000000 R09: 0000000000000000
[  143.877519][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.880275][ T7723] R13: 00007fcc443d6038 R14: 00007fcc443d5fa0 R15: 00007fffb45dae48
[  143.882954][ T7723]  </TASK>
[  143.884576][ T7723] Kernel Offset: disabled
[  143.886033][ T7723] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:12:57  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000004a520 RDI=000000000004a521 RBP=00000000000003f8 RSP=ffffc90002aae6b0
R8 =ffff8880214a0237 R9 =1ffff11004294046 R10=dffffc0000000000 R11=ffffffff85501400
R12=dffffc0000000000 R13=ffffffff99b038e9 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550147c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcc44fc66c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f44d7dd7dac CR3=000000002476a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fcc44212e7b
XMM06=0000000000000000 00007fcc44212e75 XMM07=0000000000000000 00007fcc44212e89
XMM08=0000000000000000 00007fcc44212f0f XMM09=0000000000000000 00007fcc44212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81ceb0fa RBX=00007f17eab8ec29 RCX=ffff888020369cc0 RDX=0000000000000100
RSI=ffffffff8dbaa0c3 RDI=00007f17eab8ec29 RBP=0000000000000001 RSP=ffffc900001e0308
R8 =0000000000000000 R9 =ffffffff81aac84d R10=ffffc900001e03f8 R11=ffffffff81ac4d00
R12=ffff888020369cc0 R13=ffff888124d68000 R14=00007f17eab8ec29 R15=1ffff9200003c07e
RIP=ffffffff81a72b80 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f17eb9f26c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b82ff CR3=000000002e3dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688a6d ffffffff81688a29
XMM02=ffffffff81c94eac ffffffff81688a29 XMM03=ffffffff81c3fe55 ffffffff81c3fe55
XMM04=00007f17eb90d100 00007f17eada7460 XMM05=00007f17eada7478 00007f17eada74c0
XMM06=00007f17eada74b8 00007f17eada74b0 XMM07=00007f17eada74a8 00007f17eada74a0
XMM08=0000000000000000 00007f17eac12f0f XMM09=0000000000000000 00007f17eac12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
