last executing test programs:

2m45.789043253s ago: executing program 2 (id=2671):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x500, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000), 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRESDEC], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3, 0x0, 0x2000}, 0x38)
socket$kcm(0x29, 0x2, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000640)="122f9099403bd40853a1f11c89aca7bbd9061fdcd6ad9018efaf546d117217eec76321f11197d73f79db443fb5bcf556ee873d6283e7603340b51e0c4400f7c811709e1621652c3d76dd799fc9a237655d610e40a67056ac884afd9819eb2e5ee53a95530e5a7c71b1568364d072faa6b393e6753ba21e8e2f66b53b00236f4823233a5fe854bd697d6d31e623f5f1a13746663714a924a3344a98d1837f14ec0a3ba2b808f839918338f51fde2cf7c30ba223a9406342d1aca0cec160e52519aef47b3b268544992f00000050b447d497048ee084e0c4667460322c88a29f088714b229687238619a5299b7666dd68c958eee0751ab314f051e9014d5c67461e67376d4ee6ca60caa88d770", 0x0}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001800))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x18, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r6}, 0x18)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
openat$tun(0xffffffffffffff9c, 0x0, 0x183a42, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x3000d041)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x100)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

2m45.570541894s ago: executing program 2 (id=2678):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="130000005500917b090893b30171a54a07"], 0xfe33)

2m45.504090951s ago: executing program 2 (id=2682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f)

2m45.427935261s ago: executing program 2 (id=2684):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)

2m45.427741975s ago: executing program 2 (id=2685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/108, 0x6c}], 0x2}, 0x40000002)

2m45.349954794s ago: executing program 2 (id=2686):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f00000002c0)=""/146, 0x92}], 0x2, &(0x7f0000000140)=""/37, 0x25}, 0x12100)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x1000000, 0xfffffffffffffc90, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x4, &(0x7f0000000200)=r3, 0x21)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e0028000f00000002800000121f", 0x2e}], 0x1}, 0x20)
close(r7)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m30.303922516s ago: executing program 32 (id=2686):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f00000002c0)=""/146, 0x92}], 0x2, &(0x7f0000000140)=""/37, 0x25}, 0x12100)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x1000000, 0xfffffffffffffc90, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x4, &(0x7f0000000200)=r3, 0x21)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e0028000f00000002800000121f", 0x2e}], 0x1}, 0x20)
close(r7)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m36.460972888s ago: executing program 3 (id=3885):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m36.442184794s ago: executing program 3 (id=3886):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001a0007000800000000000000e638eda0f0691ff70000000000000001e0000002000000000000000000000000ffff00000000ffdf0000000033000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000004d42b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000007000000000000000000000000002000c061771a000000007f000000000000000000000002000000700000000000000014000e"], 0x104}}, 0x4000040)

1m36.344239286s ago: executing program 3 (id=3887):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r5 = socket$kcm(0x2c, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r7 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x20040080)
socket$kcm(0x10, 0x2, 0x2)

1m34.21524868s ago: executing program 1 (id=3900):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040))

1m34.143388967s ago: executing program 1 (id=3901):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m34.143220409s ago: executing program 1 (id=3902):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m34.123501661s ago: executing program 1 (id=3903):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r0, 0x0, 0x5}, 0x18)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)

1m34.007599485s ago: executing program 3 (id=3909):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x12)

1m33.96250267s ago: executing program 1 (id=3911):
mount$bpf(0x0, &(0x7f00000004c0)='./cgroup/../file0\x00', &(0x7f0000000680), 0x5, &(0x7f00000011c0)=ANY=[@ANYBLOB=',mode=00000000000000000000011,='])

1m33.913276105s ago: executing program 3 (id=3912):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x51)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004000)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x31, 0x0, 0x4)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0x0, 0x0}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
close(0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x84)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x889bef0b247fcb1e}, 0x40000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1m33.821509614s ago: executing program 1 (id=3913):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10, 0x20}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

1m33.749911805s ago: executing program 33 (id=3913):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10, 0x20}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

1m33.572079668s ago: executing program 3 (id=3915):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)

1m33.571959419s ago: executing program 34 (id=3915):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)

5.56929274s ago: executing program 5 (id=5492):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

5.448049946s ago: executing program 5 (id=5497):
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x76, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x100007fef, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1c145, 0x2e, 0xfffffbff, 0x1, 0x3f, 0x4, 0xf28, 0x0, 0x0, 0x0, 0x40a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$l2tp6(0xa, 0x2, 0x73)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

5.281675268s ago: executing program 5 (id=5501):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="eeaf4f1c83016cbe019e187e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000600)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20000040)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x98051, 0x8, 0x0, 0x6, 0x2118, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, 0x0)
r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12)
r9 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002980)=ANY=[@ANYBLOB="9feb0100180000000000008a180000001800000004000000020000000000000c02000000000000000000000d0000000000305f00"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18003300499d453e0f000000000000009500000000000509"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x3, 0x0, 0x23, 0x0, 0x0, 0x2}, 0x90)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4008, r1}, 0x18)

4.69414704s ago: executing program 0 (id=5510):
socket$kcm(0x1e, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x27, 0xfffffffffffffda9, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.534269299s ago: executing program 0 (id=5523):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000021401002bbd7000ffdbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x400c000}, 0x400c040)

2.46879692s ago: executing program 0 (id=5524):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x28)

2.468348691s ago: executing program 0 (id=5525):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2181, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0xfffffffe, 0x0, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_clone(0x90200000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, r1, 0xffffffffffffffff, r0, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/118}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x12)
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x20040004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000026000100010000000000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000)

1.349107848s ago: executing program 0 (id=5531):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001040), 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000001100), 0x9)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r6, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x8000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r8, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg$kcm(r8, 0x0, 0x0)
r9 = perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2)
r10 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0xb5}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000017c0), 0x2, 0x0)
syz_clone(0x8ca000, &(0x7f0000001800), 0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900))
r12 = getpid()
perf_event_open(0x0, r12, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$unix(r7, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000013c0)="df80609b758f962a5e5b43e968a49079b5c45dcd74b1ff37213dfffa21", 0x1d}], 0x1, &(0x7f0000001980)=[@rights={{0x20, 0x1, 0x1, [r10, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r11, r3]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r11, r1, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xc8, 0x1}, 0x5)

711.952511ms ago: executing program 4 (id=5535):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x4, 0x4}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1008}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r1, 0x25, 0x4, @void}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031", @ANYRES16=r3], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

503.930414ms ago: executing program 4 (id=5536):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8902, &(0x7f0000000380)='\x06\xec\xb1G\x19=9\x1f\"M\xca\xc4n\xfa\xf1\xec\xdf1\xfa\x9c,\x7f\xbfo\xbf\x1fG\xf3\xa6\x8e\xa3_\xbbx\b_5i1\xc4\xaa\xf6\xc3l4\x0eI\xa0\n\f\xbd\x16\xd3o\xd1\xfc\x1d\x86\xf9@\xce\xcaE\xdc<\x10\xf5\xe6\xba\x97\xf5\x92\r\xeb\xc6U\x88Xv\xec\x84\xb4\x19\xffk\xb2\xee\x89\x8e\x91 \xb2\x0e\x9a{\xac/\xe7R\xa5\x9chZ\xcd\x99>\x15vx\xc3\x7f\x9c\xe7\xd5\x84\xbe\v\xea\x98\'\xb7\xd1\x12\x00LN^\xc8\xb7\x80F!\xf9\x85\xc3\xe7#\x1e\x9e\xbfj\x89\xf4\xaf\xd5\xad\xaf\xb7\xdc\xac')

503.726008ms ago: executing program 4 (id=5537):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006bab9e3fe3d86e17aa31026b876c1d0000007ea60847160af36504000a0038001d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4930400e7861000bdd7fcf50ea1e190b4714751d0c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8800)

503.519841ms ago: executing program 5 (id=5538):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d00000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="ddb9547ed38704e9abaf9b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

433.666106ms ago: executing program 5 (id=5539):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848", 0x14}], 0x1}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

203.240908ms ago: executing program 5 (id=5540):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000)

142.884791ms ago: executing program 0 (id=5541):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c45630002008daa"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

83.70748ms ago: executing program 4 (id=5542):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/112, 0x70}], 0x5}, 0x10002)

83.55155ms ago: executing program 4 (id=5543):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a2, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

0s ago: executing program 4 (id=5544):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040)
close(0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x58, &(0x7f00000000c0)}, 0x10)

kernel console output (not intermixed with test programs):

k:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7740kB pagetables:2264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.453202][ T8466] Node 1 active_anon:9376kB inactive_anon:16kB active_file:12968kB inactive_file:9664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32340kB dirty:136kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3664kB pagetables:1664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.463761][ T8466] Node 0 DMA free:14416kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:848kB local_pcp:452kB free_cma:0kB
[  132.480307][ T8466] lowmem_reserve[]: 0 811 811 811 811
[  132.482378][ T8466] Node 0 DMA32 free:100960kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13528kB inactive_anon:4kB active_file:41684kB inactive_file:143316kB unevictable:3536kB writepending:212kB present:1556484kB managed:830916kB mlocked:0kB bounce:0kB free_pcp:37568kB local_pcp:22900kB free_cma:0kB
[  132.493889][ T8466] lowmem_reserve[]: 0 0 0 0 0
[  132.495512][ T8466] Node 1 DMA32 free:447288kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:216kB inactive_anon:16kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:12kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:10448kB local_pcp:2412kB free_cma:0kB
[  132.506113][ T8466] lowmem_reserve[]: 0 0 854 854 854
[  132.508039][ T8466] Node 1 Normal free:263772kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8820kB inactive_anon:0kB active_file:12712kB inactive_file:9664kB unevictable:3536kB writepending:124kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38772kB local_pcp:21344kB free_cma:0kB
[  132.518853][ T8466] lowmem_reserve[]: 0 0 0 0 0
[  132.520737][ T8466] Node 0 DMA: 5*4kB (U) 6*8kB (U) 7*16kB (U) 7*32kB (UM) 7*64kB (UM) 6*128kB (U) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 14420kB
[  132.525897][ T8466] Node 0 DMA32: 1522*4kB (UME) 1851*8kB (UME) 438*16kB (UME) 506*32kB (UM) 236*64kB (UME) 62*128kB (UM) 28*256kB (UME) 8*512kB (UME) 2*1024kB (U) 4*2048kB (UE) 3*4096kB (M) = 100928kB
[  132.534872][ T8466] Node 1 DMA32: 4*4kB (UM) 2*8kB (UM) 7*16kB (UME) 4*32kB (U) 1*64kB (U) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 5*2048kB (UME) 105*4096kB (UM) = 447312kB
[  132.540915][ T8466] Node 1 Normal: 542*4kB (UME) 273*8kB (UME) 119*16kB (M) 16*32kB (M) 13*64kB (ME) 21*128kB (UME) 18*256kB (ME) 6*512kB (UME) 10*1024kB (UM) 11*2048kB (UM) 52*4096kB (UM) = 263728kB
[  132.546910][ T8466] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  132.549863][ T8466] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  132.553205][ T8466] 54380 total pagecache pages
[  132.554845][ T8466] 28 pages in swap cache
[  132.556246][ T8466] Free swap  = 124816kB
[  132.557649][ T8466] Total swap = 124996kB
[  132.559013][ T8466] 786301 pages RAM
[  132.560467][ T8466] 0 pages HighMem/MovableOnly
[  132.562162][ T8466] 241340 pages reserved
[  132.563586][ T8466] 0 pages cma reserved
[  132.685644][ T8466] syz.2.1121 (8466) used greatest stack depth: 16712 bytes left
[  132.710223][ T8500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1134'.
[  132.740398][ T8500] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1134'.
[  132.744232][ T8500] netlink: 'syz.2.1134': attribute type 5 has an invalid length.
[  132.747522][ T8500] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1134'.
[  132.799600][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.802439][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.769312][ T8513] netlink: 'syz.0.1140': attribute type 3 has an invalid length.
[  133.776897][ T8513] netlink: 'syz.0.1140': attribute type 2 has an invalid length.
[  133.783665][ T8513] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.1140'.
[  134.089736][ T8523] netlink: 'syz.0.1145': attribute type 10 has an invalid length.
[  134.174216][ T8523] bridge0: port 3(bond0) entered disabled state
[  134.198200][ T8523] bond0: left allmulticast mode
[  134.201588][ T8523] bond_slave_0: left allmulticast mode
[  134.203892][ T8523] bond_slave_1: left allmulticast mode
[  134.206189][ T8523] mac80211_hwsim hwsim7 .3c: left allmulticast mode
[  134.209214][ T8523] geneve0: left allmulticast mode
[  134.213283][ T8523] bond0: left promiscuous mode
[  134.215283][ T8523] bond_slave_0: left promiscuous mode
[  134.219814][ T8523] bond_slave_1: left promiscuous mode
[  134.224453][ T8523] mac80211_hwsim hwsim7 .3c: left promiscuous mode
[  134.234875][ T8523] bridge0: port 3(bond0) entered disabled state
[  135.105395][ T8561] netlink: 'syz.2.1157': attribute type 27 has an invalid length.
[  135.216736][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.223732][ T8523] team0: Port device bond0 added
[  135.251949][ T8563] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  135.254556][ T8563] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  135.389382][ T8575] netlink: 'syz.2.1165': attribute type 1 has an invalid length.
[  135.398222][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'.
[  136.592892][ T8601] netlink: 'syz.0.1175': attribute type 10 has an invalid length.
[  137.793195][ T8601] bond0: (slave geneve0): Releasing backup interface
[  137.804515][ T8607] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  137.994659][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'.
[  138.734149][ T8635] syzkaller0: entered promiscuous mode
[  138.736500][ T8635] syzkaller0: entered allmulticast mode
[  139.116075][ T8646] netlink: 'syz.1.1194': attribute type 10 has an invalid length.
[  139.119473][ T8646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1194'.
[  140.314473][ T8646] batman_adv: batadv0: Adding interface: vlan1
[  140.317108][ T8646] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.328233][ T8646] batman_adv: batadv0: Interface activated: vlan1
[  140.402831][ T8653] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1197'.
[  140.472950][ T8663] netlink: 'syz.0.1202': attribute type 19 has an invalid length.
[  140.538256][ T8670] netlink: 'syz.1.1206': attribute type 4 has an invalid length.
[  140.546580][ T8670] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1206'.
[  140.646915][ T8682] netlink: 'syz.2.1211': attribute type 4 has an invalid length.
[  140.651619][ T8682] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1211'.
[  140.676314][ T8674] syzkaller0: entered promiscuous mode
[  140.678591][ T8674] syzkaller0: entered allmulticast mode
[  141.686033][ T8698] netlink: 208344 bytes leftover after parsing attributes in process `syz.0.1219'.
[  141.689615][ T8698] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  141.700583][ T8698] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  142.803615][   T33] audit: type=1107 audit(1755772068.208:3): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  143.111467][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'.
[  143.213172][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1239'.
[  143.217822][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1239'.
[  143.362200][ T8746] netlink: 'syz.0.1239': attribute type 21 has an invalid length.
[  143.365823][ T8746] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1239'.
[  143.372454][ T8746] netlink: 'syz.0.1239': attribute type 4 has an invalid length.
[  143.375985][ T8746] netlink: 'syz.0.1239': attribute type 5 has an invalid length.
[  143.379491][ T8746] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1239'.
[  144.188075][ T8767] netlink: 'syz.2.1242': attribute type 1 has an invalid length.
[  144.327177][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'.
[  144.399211][ T8781] netlink: 'syz.1.1249': attribute type 1 has an invalid length.
[  144.402752][ T8781] netlink: 'syz.1.1249': attribute type 4 has an invalid length.
[  144.405765][ T8781] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1249'.
[  144.427365][ T8785] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1252'.
[  144.433104][ T8785] openvswitch: netlink: Message has 6 unknown bytes.
[  144.526366][ T8795] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1255'.
[  144.529852][ T8795] batadv_slave_1: entered promiscuous mode
[  144.533848][ T8798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1254'.
[  144.816384][ T8815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.824552][  T792] lo speed is unknown, defaulting to 1000
[  144.826623][  T792] syz2: Port: 1 Link DOWN
[  145.420618][ T8841] netlink: 'syz.1.1272': attribute type 4 has an invalid length.
[  145.424064][ T8841] netlink: 'syz.1.1272': attribute type 6 has an invalid length.
[  145.892030][ T8866] netlink: 'syz.1.1285': attribute type 21 has an invalid length.
[  145.944307][ T8866] netlink: 'syz.1.1285': attribute type 39 has an invalid length.
[  146.010908][ T5877] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  146.190344][ T8884] netlink: 'syz.2.1294': attribute type 21 has an invalid length.
[  146.343531][ T8882] netlink: 'syz.0.1293': attribute type 3 has an invalid length.
[  146.347984][ T8882] netlink: 'syz.0.1293': attribute type 2 has an invalid length.
[  146.516540][ T8891] delete_channel: no stack
[  146.886351][ T8919] syzkaller0: entered promiscuous mode
[  146.888244][ T8919] syzkaller0: entered allmulticast mode
[  147.802957][ T8941] ieee80211 phy13: Failed to add default virtual iface
[  147.805547][ T8938] syzkaller0: entered promiscuous mode
[  147.807628][ T8938] syzkaller0: entered allmulticast mode
[  148.093759][ T8957] openvswitch: netlink: Message has 4 unknown bytes.
[  148.100401][ T8942] delete_channel: no stack
[  148.275661][ T8976] __nla_validate_parse: 11 callbacks suppressed
[  148.275674][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'.
[  149.486950][ T9020] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1355'.
[  149.731978][ T9034] syzkaller0: entered promiscuous mode
[  149.733896][ T9034] syzkaller0: entered allmulticast mode
[  150.513534][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'.
[  150.517244][ T9043] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1363'.
[  150.626259][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'.
[  150.708732][ T9061] validate_nla: 2 callbacks suppressed
[  150.708747][ T9061] netlink: 'syz.1.1372': attribute type 4 has an invalid length.
[  150.717229][ T9061] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1372'.
[  150.873963][ T9079] netdevsim0: mtu less than device minimum
[  151.087842][ T5877] Bluetooth: hci2: Malformed HCI Event
[  154.073203][ T5877] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  154.268403][ T9111] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1396'.
[  154.416435][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1397'.
[  154.557289][ T9118] netlink: 948 bytes leftover after parsing attributes in process `syz.2.1399'.
[  154.746626][ T9121] netlink: 'syz.1.1400': attribute type 10 has an invalid length.
[  154.756806][ T9121] veth1_vlan: entered allmulticast mode
[  154.788353][ T9125] delete_channel: no stack
[  154.821921][ T9125] delete_channel: no stack
[  154.876363][ T9121] team0: Device veth1_vlan failed to register rx_handler
[  155.268996][ T9125] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1402'.
[  155.343586][ T9146] netlink: 'syz.1.1408': attribute type 1 has an invalid length.
[  155.379560][ T9148] netlink: 731 bytes leftover after parsing attributes in process `syz.0.1409'.
[  155.975219][ T9178] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1423'.
[  156.443209][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'.
[  156.573166][ T9192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.596307][ T9194] sit0: entered allmulticast mode
[  156.614943][ T9194] sit0: entered promiscuous mode
[  156.753260][ T9202] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1432'.
[  156.753871][ T9204] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1433'.
[  157.129592][ T9209] netlink: 'syz.1.1434': attribute type 10 has an invalid length.
[  157.140146][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'.
[  158.864474][ T9255] netlink: 'syz.0.1454': attribute type 29 has an invalid length.
[  158.924335][ T9255] netlink: 'syz.0.1454': attribute type 29 has an invalid length.
[  158.931181][ T9255] netlink: 'syz.0.1454': attribute type 29 has an invalid length.
[  158.936725][ T9255] netlink: 'syz.0.1454': attribute type 29 has an invalid length.
[  159.215901][ T9272] TCP: TCP_TX_DELAY enabled
[  159.220930][ T9272] openvswitch: netlink: Message has 6 unknown bytes.
[  160.692750][ T9298] __nla_validate_parse: 3 callbacks suppressed
[  160.692764][ T9298] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1474'.
[  160.755037][ T9302] netlink: 'syz.2.1476': attribute type 1 has an invalid length.
[  160.758572][ T9302] netlink: 'syz.2.1476': attribute type 4 has an invalid length.
[  160.772428][ T9302] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1476'.
[  160.797069][ T9302] netlink: 'syz.2.1476': attribute type 1 has an invalid length.
[  160.802602][ T9302] netlink: 'syz.2.1476': attribute type 4 has an invalid length.
[  160.808545][ T9302] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1476'.
[  160.985178][ T9321] netlink: 'syz.1.1485': attribute type 3 has an invalid length.
[  160.988562][ T9321] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.1485'.
[  161.205230][ T9332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1489'.
[  161.210312][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1489'.
[  161.216195][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1489'.
[  163.189727][ T9372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1505'.
[  163.488229][ T9384] bond0: left allmulticast mode
[  163.490855][ T9384] bond_slave_0: left allmulticast mode
[  163.493360][ T9384] bond_slave_1: left allmulticast mode
[  163.509838][ T9384] bridge0: port 3(bond0) entered disabled state
[  164.091563][ T9401] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1516'.
[  164.096026][ T9384] bridge_slave_1: left allmulticast mode
[  164.097982][ T9384] bridge_slave_1: left promiscuous mode
[  164.100502][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.114284][ T9384] bridge_slave_0: left allmulticast mode
[  164.116589][ T9384] bridge_slave_0: left promiscuous mode
[  164.119549][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.223470][ T9403] netlink: 'syz.1.1517': attribute type 25 has an invalid length.
[  164.226772][ T9403] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1517'.
[  165.035838][ T9440] netlink: 'syz.0.1534': attribute type 23 has an invalid length.
[  165.193518][ T5877] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8
[  165.271715][ T5877] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  165.277703][ T5877] Bluetooth: hci1: Injecting HCI hardware error event
[  165.281787][ T5236] Bluetooth: hci1: hardware error 0x00
[  165.382386][ T9446] netlink: 'syz.0.1536': attribute type 3 has an invalid length.
[  165.385468][ T9446] netlink: 'syz.0.1536': attribute type 1 has an invalid length.
[  166.066420][ T9467] __nla_validate_parse: 2 callbacks suppressed
[  166.066429][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1545'.
[  166.138468][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'.
[  166.436175][ T9507] netlink: 'syz.0.1562': attribute type 10 has an invalid length.
[  166.557810][ T9507] team0 (unregistering): Port device C removed
[  166.576142][ T9507] team0 (unregistering): Port device team_slave_1 removed
[  166.592392][ T9507] team0 (unregistering): Port device netdevsim0 removed
[  166.618503][ T9507] team0 (unregistering): Port device bond0 removed
[  166.643850][ T9519] netlink: 'syz.2.1570': attribute type 39 has an invalid length.
[  167.084960][ T9538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1578'.
[  167.354513][ T5236] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  167.627284][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'.
[  167.824630][ T9574] netlink: 'syz.0.1594': attribute type 10 has an invalid length.
[  167.845908][ T9574] batman_adv: batadv0: Adding interface: netdevsim0
[  167.851295][ T9574] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.868239][ T9574] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  168.146873][ T9584] netlink: 'syz.0.1599': attribute type 1 has an invalid length.
[  168.149937][ T9584] netlink: 'syz.0.1599': attribute type 2 has an invalid length.
[  168.269229][ T9602] bridge0: port 3(dummy0) entered disabled state
[  168.271669][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.275616][ T9602] bridge0: entered allmulticast mode
[  168.341631][ T9602] bridge0: port 3(dummy0) entered disabled state
[  168.385702][ T9602] bridge_slave_1: left allmulticast mode
[  168.388258][ T9602] bridge_slave_1: left promiscuous mode
[  168.397965][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'.
[  168.398758][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.548764][ T9611] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1606'.
[  168.717000][ T9617] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1607'.
[  168.908435][ T9627] netlink: 'syz.2.1609': attribute type 41 has an invalid length.
[  169.026240][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'.
[  169.029740][ T9640] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1614'.
[  169.239249][ T9651] netlink: 'syz.1.1621': attribute type 2 has an invalid length.
[  169.246835][ T9651] netlink: 'syz.1.1621': attribute type 8 has an invalid length.
[  169.251878][ T9651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1621'.
[  169.293729][ T5236] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[  169.313689][ T9661] netlink: 'syz.1.1626': attribute type 21 has an invalid length.
[  169.391097][ T9668] C: renamed from team_slave_0
[  169.402699][ T9668] netlink: 'syz.1.1629': attribute type 4 has an invalid length.
[  169.405946][ T9668] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  169.816721][ T9703] ieee80211 phy14: Failed to add default virtual iface
[  169.915860][ T9711] netlink: 'syz.1.1648': attribute type 1 has an invalid length.
[  169.987975][ T9718] : renamed from team_slave_1
[  170.573051][ T9754] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  170.995627][ T9762] syzkaller0: entered promiscuous mode
[  170.998031][ T9762] syzkaller0: entered allmulticast mode
[  171.953554][ T9775] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  172.052173][ T9781] __nla_validate_parse: 8 callbacks suppressed
[  172.052188][ T9781] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1677'.
[  172.202492][ T9786] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1679'.
[  172.206160][ T9786] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  172.644203][ T9809] netlink: 'syz.1.1689': attribute type 4 has an invalid length.
[  172.646879][ T9809] netlink: 'syz.1.1689': attribute type 1 has an invalid length.
[  172.649554][ T9809] netlink: 'syz.1.1689': attribute type 2 has an invalid length.
[  172.653583][ T9809] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.1689'.
[  172.906905][ T9815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1694'.
[  172.913218][ T9815] openvswitch: netlink: Missing key (keys=40, expected=100)
[  172.924774][ T9817] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1693'.
[  172.955971][ T9817] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  173.087614][ T9823] tap0: tun_chr_ioctl cmd 2147767520
[  173.306881][ T9831] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1701'.
[  173.311494][ T9831] netlink: 'syz.0.1701': attribute type 3 has an invalid length.
[  173.729644][ T9840] netlink: 'syz.1.1706': attribute type 21 has an invalid length.
[  173.783033][ T9843] dummy0: left promiscuous mode
[  173.785243][ T9843] dummy0: left allmulticast mode
[  173.795134][ T9843] team0: Port device dummy0 added
[  174.179902][ T9855] netlink: 103 bytes leftover after parsing attributes in process `syz.1.1713'.
[  174.377867][ T9880] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1724'.
[  174.652901][ T9908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.656524][ T9908] IPv6: NLM_F_CREATE should be set when creating new route
[  174.659796][ T9908] IPv6: NLM_F_CREATE should be set when creating new route
[  174.684929][ T9910] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1739'.
[  174.688505][ T9910] openvswitch: netlink: Message has 6 unknown bytes.
[  174.692739][ T9915] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  174.788542][ T9919] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.794940][ T9919] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.057511][ T9924] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1744'.
[  175.352375][ T9931] validate_nla: 2 callbacks suppressed
[  175.352389][ T9931] netlink: 'syz.1.1747': attribute type 1 has an invalid length.
[  176.165025][ T9961] syzkaller0: entered promiscuous mode
[  176.167409][ T9961] syzkaller0: entered allmulticast mode
[  177.035676][ T9977] debugfs: '!' already exists in 'ieee80211'
[  177.618919][T10014] Q6\bY4: renamed from lo
[  177.627116][T10008] : entered promiscuous mode
[  177.629093][T10008] : entered allmulticast mode
[  177.748532][T10026] !: renamed from bond_slave_0
[  177.753861][T10027] __nla_validate_parse: 3 callbacks suppressed
[  177.753870][T10027] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1785'.
[  177.882123][T10037] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.1791'.
[  177.886112][T10037] nbd: must specify a size in bytes for the device
[  177.918200][T10041] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  178.214328][T10049] netlink: 'syz.0.1796': attribute type 21 has an invalid length.
[  178.216975][T10049] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1796'.
[  178.395364][T10058] delete_channel: no stack
[  178.893958][T10095] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1813'.
[  179.788839][T10123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1830'.
[  179.845385][T10132] netlink: 'syz.1.1833': attribute type 3 has an invalid length.
[  179.847979][T10132] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1833'.
[  179.860585][T10130] netlink: 'syz.0.1834': attribute type 22 has an invalid length.
[  182.033796][ T5236] Bluetooth: hci0: Malformed Event: 0x13
[  182.045533][T10178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1851'.
[  182.049401][T10178] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1851'.
[  182.054044][T10178] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1851'.
[  182.709047][T10217] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  182.712709][T10217] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  183.077788][T10228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.080578][T10228] IPv6: NLM_F_CREATE should be set when creating new route
[  183.083940][T10228] IPv6: NLM_F_CREATE should be set when creating new route
[  183.673934][T10242] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1880'.
[  184.219781][T10289] netlink: 'syz.2.1900': attribute type 29 has an invalid length.
[  184.231180][T10289] netlink: 'syz.2.1900': attribute type 10 has an invalid length.
[  184.234337][T10291] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1902'.
[  184.234822][T10289] bond0: left promiscuous mode
[  184.244478][T10289] !: left promiscuous mode
[  184.247049][T10289] bond_slave_1: left promiscuous mode
[  184.331181][T10289] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.343203][T10289] team0: Port device bond0 added
[  184.463629][T10307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.469176][T10307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.480720][T10308] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1908'.
[  184.483713][T10307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.486582][T10307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.495513][T10307] batman_adv: batadv0: Interface deactivated: vlan1
[  184.497788][T10307] batman_adv: batadv0: Removing interface: vlan1
[  184.666659][T10323] netlink: 'syz.2.1916': attribute type 1 has an invalid length.
[  184.740221][T10325] vcan0 speed is unknown, defaulting to 1000
[  185.865428][T10354] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1928'.
[  185.989046][T10358] netlink: 'syz.0.1930': attribute type 4 has an invalid length.
[  185.995696][T10358] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1930'.
[  186.107390][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  186.109585][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  186.356639][T10365] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1933'.
[  187.207156][T10400] netlink: 'syz.1.1950': attribute type 16 has an invalid length.
[  187.214188][T10400] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1950'.
[  187.304956][T10411] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1955'.
[  187.654326][T10425] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1962'.
[  187.674586][T10425] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1962'.
[  188.711650][T10493] __nla_validate_parse: 1 callbacks suppressed
[  188.711706][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'.
[  188.736176][T10493] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1985'.
[  190.194334][T10555] netlink: 'syz.1.2011': attribute type 4 has an invalid length.
[  190.399848][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'.
[  191.306839][T10596] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.2028'.
[  191.313285][T10598] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2029'.
[  191.415033][T10606] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2032'.
[  192.548239][T10626] netlink: 'syz.2.2042': attribute type 2 has an invalid length.
[  192.551254][T10626] netlink: 'syz.2.2042': attribute type 1 has an invalid length.
[  192.560951][T10626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2042'.
[  193.164300][T10650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  193.167992][T10650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.173560][T10652] netlink: 'syz.2.2055': attribute type 3 has an invalid length.
[  193.176356][T10652] netlink: 'syz.2.2055': attribute type 1 has an invalid length.
[  193.179071][T10652] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2055'.
[  193.192241][T10652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  193.290667][T10659] netlink: 'syz.2.2058': attribute type 10 has an invalid length.
[  193.294011][T10659] team0: Device ip6_vti0 is of different type
[  193.463501][T10628] vcan0 speed is unknown, defaulting to 1000
[  194.250515][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.253307][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.437890][T10700] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.442472][T10700] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.583173][T10716] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2076'.
[  194.824677][T10724] openvswitch: netlink: Message has 16 unknown bytes.
[  194.827790][T10724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.948306][T10730] netlink: 'syz.2.2085': attribute type 10 has an invalid length.
[  194.954539][T10730] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  195.865837][T10761] xt_HMARK: proto mask must be zero with L3 mode
[  195.907098][T10758] netlink: zone id is out of range
[  195.920946][T10758] netlink: zone id is out of range
[  195.986359][T10766] netlink: 'syz.0.2099': attribute type 10 has an invalid length.
[  196.241056][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'.
[  196.426939][T10796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2113'.
[  196.431130][T10794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2113'.
[  196.461709][T10797] netlink: 'syz.2.2111': attribute type 10 has an invalid length.
[  196.467678][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2111'.
[  196.472253][T10797] dummy0: entered promiscuous mode
[  196.476330][T10797] bond0: (slave dummy0): Releasing backup interface
[  196.495103][T10797] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  196.758525][T10807] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2118'.
[  196.888515][T10815] warn_alloc: 1 callbacks suppressed
[  196.888530][T10815] syz.1.2122: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  196.898371][T10815] CPU: 0 UID: 0 PID: 10815 Comm: syz.1.2122 Not tainted syzkaller #0 PREEMPT(full) 
[  196.898387][T10815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.898394][T10815] Call Trace:
[  196.898399][T10815]  <TASK>
[  196.898405][T10815]  dump_stack_lvl+0x189/0x250
[  196.898450][T10815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.898466][T10815]  ? __pfx__printk+0x10/0x10
[  196.898481][T10815]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  196.898496][T10815]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  196.898512][T10815]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  196.898527][T10815]  warn_alloc+0x214/0x310
[  196.898539][T10815]  ? stack_depot_save_flags+0x40/0x860
[  196.898557][T10815]  ? __pfx_warn_alloc+0x10/0x10
[  196.898571][T10815]  ? kasan_save_track+0x4f/0x80
[  196.898588][T10815]  ? xskq_create+0x56/0x170
[  196.898603][T10815]  ? xsk_init_queue+0xb0/0x110
[  196.898616][T10815]  ? xsk_setsockopt+0x57b/0x8d0
[  196.898627][T10815]  ? do_sock_setsockopt+0x17c/0x1b0
[  196.898637][T10815]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  196.898647][T10815]  ? do_syscall_64+0xfa/0x3b0
[  196.898662][T10815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.898679][T10815]  __vmalloc_node_range_noprof+0x125/0x12f0
[  196.898718][T10815]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  196.898739][T10815]  ? __kasan_kmalloc+0x93/0xb0
[  196.898756][T10815]  vmalloc_user_noprof+0xad/0xf0
[  196.898772][T10815]  ? xskq_create+0xbf/0x170
[  196.898788][T10815]  xskq_create+0xbf/0x170
[  196.898805][T10815]  xsk_init_queue+0xb0/0x110
[  196.898822][T10815]  xsk_setsockopt+0x57b/0x8d0
[  196.898839][T10815]  ? __pfx_xsk_setsockopt+0x10/0x10
[  196.898852][T10815]  ? __pfx_aa_sk_perm+0x10/0x10
[  196.898871][T10815]  ? __fget_files+0x2a/0x420
[  196.898881][T10815]  ? aa_sock_opt_perm+0xff/0x1b0
[  196.898894][T10815]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  196.898907][T10815]  ? __pfx_xsk_setsockopt+0x10/0x10
[  196.898922][T10815]  do_sock_setsockopt+0x17c/0x1b0
[  196.898937][T10815]  __x64_sys_setsockopt+0x13f/0x1b0
[  196.898952][T10815]  do_syscall_64+0xfa/0x3b0
[  196.898968][T10815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.898979][T10815]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.898993][T10815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.899005][T10815] RIP: 0033:0x7f91a738ebe9
[  196.899017][T10815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.899025][T10815] RSP: 002b:00007f91a82e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  196.899038][T10815] RAX: ffffffffffffffda RBX: 00007f91a75b5fa0 RCX: 00007f91a738ebe9
[  196.899052][T10815] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  196.899060][T10815] RBP: 00007f91a7411e19 R08: 0000000000000004 R09: 0000000000000000
[  196.899067][T10815] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  196.899074][T10815] R13: 00007f91a75b6038 R14: 00007f91a75b5fa0 R15: 00007fffd13d61f8
[  196.899096][T10815]  </TASK>
[  196.899102][T10815] Mem-Info:
[  197.030578][T10815] active_anon:6489 inactive_anon:0 isolated_anon:0
[  197.030578][T10815]  active_file:16031 inactive_file:38272 isolated_file:0
[  197.030578][T10815]  unevictable:1768 dirty:270 writeback:0
[  197.030578][T10815]  slab_reclaimable:9718 slab_unreclaimable:92096
[  197.030578][T10815]  mapped:18138 shmem:2409 pagetables:979
[  197.030578][T10815]  sec_pagetables:0 bounce:0
[  197.030578][T10815]  kernel_misc_reclaimable:0
[  197.030578][T10815]  free:237880 free_pcp:21224 free_cma:0
[  197.049716][T10815] Node 0 active_anon:14936kB inactive_anon:0kB active_file:47048kB inactive_file:143352kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39868kB dirty:452kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7888kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  197.063257][T10815] Node 1 active_anon:11020kB inactive_anon:0kB active_file:17076kB inactive_file:9736kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32684kB dirty:628kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3632kB pagetables:1496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  197.076692][T10815] Node 0 DMA free:14452kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:384kB free_cma:0kB
[  197.088978][T10815] lowmem_reserve[]: 0 811 811 811 811
[  197.091907][T10815] Node 0 DMA32 free:108404kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14936kB inactive_anon:0kB active_file:47048kB inactive_file:143352kB unevictable:3536kB writepending:452kB present:1556484kB managed:830916kB mlocked:0kB bounce:0kB free_pcp:26192kB local_pcp:5612kB free_cma:0kB
[  197.103983][T10815] lowmem_reserve[]: 0 0 0 0 0
[  197.106004][T10815] Node 1 DMA32 free:449932kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:96kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8336kB local_pcp:0kB free_cma:0kB
[  197.118130][T10815] lowmem_reserve[]: 0 0 854 854 854
[  197.121060][T10815] Node 1 Normal free:378732kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11020kB inactive_anon:0kB active_file:16820kB inactive_file:9736kB unevictable:3536kB writepending:532kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49616kB local_pcp:21164kB free_cma:0kB
[  197.134225][T10815] lowmem_reserve[]: 0 0 0 0 0
[  197.136512][T10815] Node 0 DMA: 45*4kB (UM) 58*8kB (UM) 53*16kB (U) 53*32kB (UM) 28*64kB (UM) 18*128kB (UM) 10*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 14452kB
[  197.144374][T10815] Node 0 DMA32: 27*4kB (UE) 1089*8kB (ME) 74*16kB (UM) 383*32kB (UME) 346*64kB (UME) 138*128kB (UME) 59*256kB (UME) 15*512kB (UME) 5*1024kB (UM) 3*2048kB (ME) 3*4096kB (UM) = 108404kB
[  197.151754][T10815] Node 1 DMA32: 7*4kB (UM) 8*8kB (UM) 11*16kB (UME) 8*32kB (UM) 6*64kB (UM) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 4*2048kB (UME) 106*4096kB (UM) = 449932kB
[  197.158216][T10815] Node 1 Normal: 1019*4kB (UME) 564*8kB (UME) 457*16kB (UME) 429*32kB (UME) 282*64kB (UME) 134*128kB (UME) 84*256kB (UM) 73*512kB (UME) 37*1024kB (UM) 8*2048kB (UM) 49*4096kB (U) = 378684kB
[  197.165973][T10815] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  197.170093][T10815] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  197.175382][T10815] 56719 total pagecache pages
[  197.177710][T10815] 5 pages in swap cache
[  197.179564][T10815] Free swap  = 124976kB
[  197.181910][T10815] Total swap = 124996kB
[  197.183298][T10815] 786301 pages RAM
[  197.184568][T10815] 0 pages HighMem/MovableOnly
[  197.186615][T10815] 241340 pages reserved
[  197.188612][T10815] 0 pages cma reserved
[  197.217010][T10816] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  197.883893][T10850] vcan0 speed is unknown, defaulting to 1000
[  198.292542][T10856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2138'.
[  198.297396][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2138'.
[  199.671910][T10882] netlink: 'syz.0.2149': attribute type 21 has an invalid length.
[  199.675184][T10882] netlink: 'syz.0.2149': attribute type 11 has an invalid length.
[  200.373624][T10898] netlink: 'syz.0.2155': attribute type 10 has an invalid length.
[  200.377054][T10898] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2155'.
[  200.513476][T10902] netlink: 'syz.0.2157': attribute type 10 has an invalid length.
[  202.131992][T10963] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2180'.
[  202.136083][T10963] netlink: 'syz.1.2180': attribute type 1 has an invalid length.
[  202.457000][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2187'.
[  202.471676][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2187'.
[  202.477373][T10979] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2187'.
[  202.529927][T10985] netlink: 'syz.0.2191': attribute type 21 has an invalid length.
[  203.032642][T11004] netlink: 'syz.1.2197': attribute type 21 has an invalid length.
[  203.040440][T11004] netlink: 'syz.1.2197': attribute type 6 has an invalid length.
[  203.045127][T11004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2197'.
[  203.302419][T11017] : renamed from pim6reg1
[  204.775123][T11059] netlink: 'syz.0.2221': attribute type 21 has an invalid length.
[  204.778292][T11059] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2221'.
[  204.782927][T11059] netlink: 'syz.0.2221': attribute type 4 has an invalid length.
[  205.129934][T11084] IPv6: NLM_F_CREATE should be specified when creating new route
[  206.105832][T11109] netlink: 'syz.2.2243': attribute type 1 has an invalid length.
[  206.110085][T11109] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2243'.
[  206.148537][T11113] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2245'.
[  206.203945][T11117] syzkaller0: tun_chr_ioctl cmd 1074025677
[  206.206561][T11117] syzkaller0: linktype set to 801
[  206.883272][T11148] netlink: 'syz.0.2258': attribute type 3 has an invalid length.
[  206.887213][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'.
[  210.030183][ T5877] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  210.099413][T11187] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  210.270565][T11201] netlink: 'syz.0.2280': attribute type 10 has an invalid length.
[  210.274303][T11201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2280'.
[  210.322119][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2283'.
[  210.325449][T11203] unsupported nlmsg_type 40
[  211.082075][ T5877] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  211.627022][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2307'.
[  212.003429][T11287] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  212.006181][T11287] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  212.797542][T11307] veth0_vlan: entered allmulticast mode
[  212.958870][T11309] veth0_vlan: left promiscuous mode
[  212.962348][T11309] veth0_vlan: entered promiscuous mode
[  213.329587][T11329] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.2337'.
[  213.477341][T11340] syzkaller0: entered promiscuous mode
[  213.479743][T11340] syzkaller0: entered allmulticast mode
[  213.485032][T11340] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  214.392093][T11372] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2354'.
[  214.545255][T11384] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2358'.
[  214.553105][T11384] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  214.647597][T11398] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  214.909824][T11411] netlink: 'syz.2.2370': attribute type 1 has an invalid length.
[  215.105304][T11431] netlink: 492 bytes leftover after parsing attributes in process `syz.2.2380'.
[  215.781611][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'.
[  215.790495][T11448] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  215.793931][T11448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.078842][T11477] netlink: 'syz.0.2402': attribute type 5 has an invalid length.
[  216.081951][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2402'.
[  216.178887][T11487] netlink: 'syz.0.2407': attribute type 9 has an invalid length.
[  216.182982][T11487] netlink: 'syz.0.2407': attribute type 8 has an invalid length.
[  216.185848][T11487] netlink: 143452 bytes leftover after parsing attributes in process `syz.0.2407'.
[  216.452474][T11501] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2412'.
[  216.478174][T11502] delete_channel: no stack
[  216.513867][T11505] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2414'.
[  217.118537][T11526] netlink: 'syz.0.2424': attribute type 21 has an invalid length.
[  217.126111][T11526] __nla_validate_parse: 1 callbacks suppressed
[  217.126121][T11526] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2424'.
[  218.105431][T11565] netlink: 'syz.2.2443': attribute type 3 has an invalid length.
[  218.406723][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'.
[  218.833107][T11602] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2457'.
[  218.847293][T11604] netlink: 'syz.0.2458': attribute type 2 has an invalid length.
[  218.855821][T11604] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.2458'.
[  218.908390][T11606] netlink: 'syz.1.2459': attribute type 4 has an invalid length.
[  219.671572][T11646] netlink: 'syz.0.2477': attribute type 2 has an invalid length.
[  219.675095][T11646] netlink: 'syz.0.2477': attribute type 1 has an invalid length.
[  219.969318][T11652] netlink: 'syz.0.2480': attribute type 21 has an invalid length.
[  221.163946][T11694] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2498'.
[  221.334831][T11706] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2502'.
[  221.338969][T11703] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2502'.
[  221.346632][T11706] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2502'.
[  221.652919][T11727] netlink: 'syz.2.2513': attribute type 11 has an invalid length.
[  221.734562][T11733] netlink: 'syz.0.2515': attribute type 1 has an invalid length.
[  221.738077][T11733] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2515'.
[  221.791052][T11737] sctp: [Deprecated]: syz.0.2517 (pid 11737) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.791052][T11737] Use struct sctp_sack_info instead
[  221.920739][T11749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2523'.
[  222.458178][T11791] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  222.703734][T11813] netlink: 'syz.1.2554': attribute type 21 has an invalid length.
[  222.707189][T11813] netlink: 'syz.1.2554': attribute type 1 has an invalid length.
[  222.819924][T11817] netlink: 'syz.1.2555': attribute type 10 has an invalid length.
[  222.860429][T11817] veth0_vlan: left allmulticast mode
[  222.886031][T11817] veth0_vlan: left promiscuous mode
[  222.890929][T11817] veth0_vlan: entered promiscuous mode
[  222.894979][T11817] team0: Device veth0_vlan failed to register rx_handler
[  223.048989][T11819] sctp: [Deprecated]: syz.2.2556 (pid 11819) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.048989][T11819] Use struct sctp_sack_info instead
[  223.841291][T11838] netlink: 'syz.0.2565': attribute type 10 has an invalid length.
[  224.464491][T11888] __nla_validate_parse: 1 callbacks suppressed
[  224.464505][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'.
[  224.504551][T11891] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2590'.
[  224.538692][T11894] netlink: 'syz.1.2591': attribute type 29 has an invalid length.
[  224.846420][T11912] netlink: 11318 bytes leftover after parsing attributes in process `syz.0.2600'.
[  225.018122][T11916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2602'.
[  225.336924][T11934] : entered promiscuous mode
[  225.337001][T11936] bpf: Bad value for 'gid'
[  225.413616][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'.
[  225.420798][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'.
[  226.261720][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2619'.
[  226.265801][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2619'.
[  226.269728][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2619'.
[  226.982784][T11969] netlink: 'syz.1.2625': attribute type 1 has an invalid length.
[  227.036166][T11974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2627'.
[  227.728129][T12006] netlink: 'syz.0.2640': attribute type 1 has an invalid length.
[  227.734453][T12006] netlink: 'syz.0.2640': attribute type 4 has an invalid length.
[  228.836792][T12018] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  229.091106][T12027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.397044][T12036] netlink: 'syz.0.2652': attribute type 2 has an invalid length.
[  230.822779][T12077] __nla_validate_parse: 11 callbacks suppressed
[  230.822793][T12077] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.2672'.
[  231.009403][T12092] netlink: 'syz.0.2680': attribute type 29 has an invalid length.
[  231.021851][T12092] netlink: 'syz.0.2680': attribute type 29 has an invalid length.
[  231.038240][T12092] netlink: 'syz.0.2680': attribute type 29 has an invalid length.
[  231.087004][T12092] netlink: 'syz.0.2680': attribute type 29 has an invalid length.
[  231.330998][T12109] lo speed is unknown, defaulting to 1000
[  231.335561][T12109] lo speed is unknown, defaulting to 1000
[  231.377836][T12109] lo speed is unknown, defaulting to 1000
[  231.465437][T12115] netlink: 'syz.2.2686': attribute type 40 has an invalid length.
[  232.103024][T12109] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  233.324315][T12109] lo speed is unknown, defaulting to 1000
[  233.526535][T12109] lo speed is unknown, defaulting to 1000
[  233.536817][T12109] lo speed is unknown, defaulting to 1000
[  233.562196][T12112] smc: removing ib device syz0
[  233.632480][T12148] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2701'.
[  233.758142][T12162] netlink: 'syz.1.2709': attribute type 3 has an invalid length.
[  233.767419][T12162] netlink: 199752 bytes leftover after parsing attributes in process `syz.1.2709'.
[  234.125269][T12185] netlink: 'syz.0.2719': attribute type 1 has an invalid length.
[  234.573395][T12217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2735'.
[  234.576891][T12217] netlink: 'syz.1.2735': attribute type 27 has an invalid length.
[  234.579916][T12217] netlink: 'syz.1.2735': attribute type 4 has an invalid length.
[  234.590727][T12217] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2735'.
[  235.782022][T12243] netlink: 'syz.1.2745': attribute type 21 has an invalid length.
[  235.907312][T12257] netlink: 'syz.1.2752': attribute type 12 has an invalid length.
[  235.910972][T12257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2752'.
[  235.937096][T12259] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  236.160489][T12270] netlink: 'syz.1.2758': attribute type 1 has an invalid length.
[  236.547196][T12288] netlink: 'syz.1.2766': attribute type 10 has an invalid length.
[  236.549717][T12288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2766'.
[  236.553719][T12288] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  236.751623][T12291] netlink: 'syz.1.2767': attribute type 6 has an invalid length.
[  236.754560][T12291] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2767'.
[  237.759211][T12344] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  237.905164][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'.
[  237.947530][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'.
[  237.951712][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'.
[  238.339555][T12382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.416881][T12392] netlink: 'syz.1.2815': attribute type 10 has an invalid length.
[  238.419745][T12392] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2815'.
[  239.897304][T12429] netlink: 'syz.1.2831': attribute type 1 has an invalid length.
[  239.900259][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'.
[  240.052889][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2837'.
[  241.445014][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2856'.
[  241.509511][T12484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2858'.
[  241.652630][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2864'.
[  241.657394][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2864'.
[  241.661486][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2864'.
[  241.957512][T12512] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2871'.
[  242.182017][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'.
[  243.024779][T12562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2894'.
[  243.809153][T12576] : renamed from hsr0 (while UP)
[  244.236023][T12586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2904'.
[  244.240219][T12585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2904'.
[  244.462488][T12601] netlink: 'syz.1.2909': attribute type 6 has an invalid length.
[  244.508027][ T5877] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  245.399286][T12638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.919747][T12664] netlink: 'syz.1.2938': attribute type 11 has an invalid length.
[  246.351045][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.355759][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.358728][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.362736][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.365642][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.402969][T12677] lo speed is unknown, defaulting to 1000
[  246.522237][T12677] chnl_net:caif_netlink_parms(): no params data found
[  246.639698][T12677] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.658107][T12677] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.662037][T12677] bridge_slave_0: entered allmulticast mode
[  246.665801][T12677] bridge_slave_0: entered promiscuous mode
[  246.670722][T12677] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.673386][T12677] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.675868][T12677] bridge_slave_1: entered allmulticast mode
[  246.679516][T12677] bridge_slave_1: entered promiscuous mode
[  246.705232][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.712958][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.731767][T12677] team0: Port device team_slave_0 added
[  246.735465][T12677] team0: Port device team_slave_1 added
[  246.752706][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.755574][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.766766][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.772026][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.774367][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.783917][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.813364][T12677] hsr_slave_0: entered promiscuous mode
[  246.816363][T12677] hsr_slave_1: entered promiscuous mode
[  246.935147][T12677] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  246.942219][T12677] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  246.948459][T12677] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  246.954957][T12677] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  247.017778][T12677] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.038365][T12677] 8021q: adding VLAN 0 to HW filter on device team0
[  247.048429][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.051576][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.061650][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.064641][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.205381][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.243490][T12677] veth0_vlan: entered promiscuous mode
[  247.251875][T12677] veth1_vlan: entered promiscuous mode
[  247.266916][T12677] veth0_macvtap: entered promiscuous mode
[  247.271562][T12677] veth1_macvtap: entered promiscuous mode
[  247.281658][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.289504][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.295543][ T5880] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.299205][ T5880] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.304272][ T5880] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.307721][ T5880] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.344494][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.347153][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.364990][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.367567][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.490354][T12718] __nla_validate_parse: 3 callbacks suppressed
[  247.490363][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2953'.
[  247.542920][T12721] netlink: 'syz.0.2955': attribute type 21 has an invalid length.
[  247.558387][T12721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2955'.
[  247.705449][T12731] netlink: 'syz.3.2959': attribute type 12 has an invalid length.
[  247.708713][T12731] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2959'.
[  247.967922][T12754] netlink: 'syz.0.2969': attribute type 3 has an invalid length.
[  247.971631][T12754] netlink: 'syz.0.2969': attribute type 6 has an invalid length.
[  247.974953][T12754] netlink: 'syz.0.2969': attribute type 8 has an invalid length.
[  247.978429][T12754] netlink: 'syz.0.2969': attribute type 10 has an invalid length.
[  247.988570][T12754] netlink: 'syz.0.2969': attribute type 11 has an invalid length.
[  247.993741][T12754] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.2969'.
[  248.089335][T12757] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2968'.
[  248.217543][T12757] team0: Port device dummy0 removed
[  248.390377][ T5868] Bluetooth: hci3: command tx timeout
[  248.442373][T12776] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2978'.
[  249.134766][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'.
[  249.135263][T12791] netlink: 182 bytes leftover after parsing attributes in process `syz.0.2984'.
[  249.146685][T12791] netlink: 'syz.0.2984': attribute type 10 has an invalid length.
[  249.195092][T12791] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2984'.
[  249.244329][T12791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2984'.
[  250.029915][T12840] netlink: 'syz.3.3007': attribute type 13 has an invalid length.
[  250.362768][T12857] @: renamed from bond_slave_0 (while UP)
[  250.386684][T12857] netlink: 'syz.3.3013': attribute type 21 has an invalid length.
[  250.472484][ T5877] Bluetooth: hci3: command tx timeout
[  251.846109][ T5877] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  251.849603][ T5877] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff
[  251.875412][T12910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.550259][ T5877] Bluetooth: hci3: command tx timeout
[  252.640709][T12961] validate_nla: 3 callbacks suppressed
[  252.640720][T12961] netlink: 'syz.3.3063': attribute type 1 has an invalid length.
[  252.759420][T12968] __nla_validate_parse: 6 callbacks suppressed
[  252.759430][T12968] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3065'.
[  252.771255][T12968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.775149][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'.
[  252.866212][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3065'.
[  252.888526][T12965] netlink: 'syz.3.3065': attribute type 1 has an invalid length.
[  252.907204][T12971] netlink: 'syz.0.3067': attribute type 4 has an invalid length.
[  252.942348][T12973] netlink: 'syz.0.3068': attribute type 6 has an invalid length.
[  252.945813][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'.
[  253.166044][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'.
[  253.170330][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'.
[  253.253243][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'.
[  253.256981][T12982] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3071'.
[  253.261391][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'.
[  253.264757][T12982] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3071'.
[  253.352696][T12988] netlink: 'syz.3.3074': attribute type 1 has an invalid length.
[  254.017249][T13031] netlink: 'syz.0.3090': attribute type 10 has an invalid length.
[  254.640319][ T5877] Bluetooth: hci3: command tx timeout
[  254.665748][T13055] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  254.852464][T13064] netlink: 'syz.1.3104': attribute type 1 has an invalid length.
[  255.722165][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.724401][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  257.053165][T13120] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  257.116802][T13118] netlink: 'syz.1.3129': attribute type 6 has an invalid length.
[  257.448978][T13128] netlink: 'syz.0.3132': attribute type 3 has an invalid length.
[  257.948411][T13147] __nla_validate_parse: 9 callbacks suppressed
[  257.948421][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'.
[  257.958859][T13147] : entered promiscuous mode
[  257.987516][T13149] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3141'.
[  258.255929][T13165] netlink: 'syz.0.3148': attribute type 11 has an invalid length.
[  258.611385][T13172] netlink: 'syz.0.3151': attribute type 21 has an invalid length.
[  258.620147][T13172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3151'.
[  260.460849][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'.
[  260.656406][T13227] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3172'.
[  260.670223][T13227] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  261.201831][T13256] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3183'.
[  261.382949][T13260] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3185'.
[  261.393355][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'.
[  261.565382][T13268] netlink: 'syz.0.3189': attribute type 2 has an invalid length.
[  261.982904][T13278] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  262.066157][T13283] netlink: 'syz.3.3196': attribute type 4 has an invalid length.
[  262.069366][T13283] netlink: 211448 bytes leftover after parsing attributes in process `syz.3.3196'.
[  262.546061][T13306] mac80211_hwsim hwsim18 .3c: renamed from wlan1 (while UP)
[  262.690149][T13332] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3217'.
[  262.693962][T13332] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  262.697155][T13332] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  263.026334][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'.
[  263.037173][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'.
[  263.157780][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'.
[  263.208721][T13355] syzkaller0: entered promiscuous mode
[  263.211222][T13355] syzkaller0: entered allmulticast mode
[  263.698745][T13369] netlink: 'syz.1.3235': attribute type 1 has an invalid length.
[  263.702781][T13369] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3235'.
[  263.994720][T13376] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  264.103936][T13388] openvswitch: netlink: EtherType 50a is less than min 600
[  264.139839][T13392] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3246'.
[  264.213271][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'.
[  265.437475][T13435] netlink: 752 bytes leftover after parsing attributes in process `syz.0.3266'.
[  265.452225][T13437] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3267'.
[  265.550318][ T5877] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10
[  265.603246][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3275'.
[  265.889173][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'.
[  265.942604][T13488] openvswitch: netlink: VXLAN extension 233 out of range max 1
[  266.227552][T13515] option changes via remount are deprecated (pid=13514 comm=syz.3.3301)
[  266.482352][T13529] netlink: 'syz.0.3308': attribute type 33 has an invalid length.
[  266.601862][T13537] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  266.777926][T13549] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  267.173780][T13564] lo speed is unknown, defaulting to 1000
[  267.435045][T13589] netlink: 'syz.1.3334': attribute type 2 has an invalid length.
[  267.437778][T13589] netlink: 'syz.1.3334': attribute type 1 has an invalid length.
[  267.442674][T13589] netlink: 'syz.1.3334': attribute type 1 has an invalid length.
[  268.102172][T13617] ksmbd: Unknown IPC event: 3, ignore.
[  270.377867][T13636] __nla_validate_parse: 12 callbacks suppressed
[  270.377882][T13636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3352'.
[  270.389607][T13638] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  270.396688][T13638] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  270.474397][T13640] netlink: 'syz.3.3354': attribute type 29 has an invalid length.
[  270.481247][T13640] netlink: 'syz.3.3354': attribute type 29 has an invalid length.
[  270.491639][T13640] netlink: 'syz.3.3354': attribute type 29 has an invalid length.
[  270.693831][T13653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3358'.
[  270.697350][T13653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.081718][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3365'.
[  271.252431][T13674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3367'.
[  271.445877][ T5877] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  271.563182][T13693] netlink: 'syz.0.3376': attribute type 21 has an invalid length.
[  271.569492][T13693] netlink: 'syz.0.3376': attribute type 4 has an invalid length.
[  271.573043][T13693] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3376'.
[  272.103055][T13719] netlink: 'syz.1.3388': attribute type 1 has an invalid length.
[  272.175114][T13725] lo speed is unknown, defaulting to 1000
[  273.149203][T13745] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.3400'.
[  273.162185][T13747] netlink: 'syz.3.3399': attribute type 2 has an invalid length.
[  273.164667][T13747] netlink: 'syz.3.3399': attribute type 7 has an invalid length.
[  273.167300][T13747] netlink: 85 bytes leftover after parsing attributes in process `syz.3.3399'.
[  273.171322][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'.
[  273.174792][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3398'.
[  273.178292][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3398'.
[  273.183156][T13747] netlink: 'syz.3.3399': attribute type 2 has an invalid length.
[  273.186329][T13747] netlink: 'syz.3.3399': attribute type 7 has an invalid length.
[  273.352277][T13763] syzkaller0: entered promiscuous mode
[  273.354055][T13763] syzkaller0: entered allmulticast mode
[  276.872101][T13832] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  276.876126][T13832] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.901898][T13848] __nla_validate_parse: 4 callbacks suppressed
[  276.901911][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'.
[  277.023359][T13856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3440'.
[  277.136846][T13864] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3444'.
[  277.728718][T13903] netlink: 'syz.3.3461': attribute type 11 has an invalid length.
[  277.733445][T13903] netlink: 'syz.3.3461': attribute type 11 has an invalid length.
[  278.085999][T13909] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3464'.
[  278.089415][T13909] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3464'.
[  278.223005][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3465'.
[  278.326153][T13919] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3468'.
[  278.327595][T13918] validate_nla: 3 callbacks suppressed
[  278.327604][T13918] netlink: 'syz.1.3469': attribute type 3 has an invalid length.
[  278.329373][T13919] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3468'.
[  278.334453][T13918] netlink: 'syz.1.3469': attribute type 1 has an invalid length.
[  278.343354][T13918] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3469'.
[  278.448228][T13928] netlink: 2451 bytes leftover after parsing attributes in process `syz.1.3472'.
[  278.687721][T13937] netlink: 'syz.1.3478': attribute type 2 has an invalid length.
[  278.694485][T13937] netlink: 'syz.1.3478': attribute type 8 has an invalid length.
[  279.257969][T13984] netlink: 'syz.1.3498': attribute type 33 has an invalid length.
[  279.262491][T13984] `: renamed from team0 (while UP)
[  279.324412][T13988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.534968][T13998] netlink: 'syz.1.3504': attribute type 10 has an invalid length.
[  279.880603][T13998] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  279.883674][T13998] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  280.434091][T14022] netlink: 'syz.0.3515': attribute type 27 has an invalid length.
[  280.771503][T14039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.425570][T14056] netlink: zone id is out of range
[  281.427709][T14056] netlink: zone id is out of range
[  281.429950][T14056] netlink: zone id is out of range
[  281.432898][T14056] netlink: zone id is out of range
[  281.435042][T14056] netlink: zone id is out of range
[  281.437194][T14056] netlink: zone id is out of range
[  281.439098][T14056] netlink: zone id is out of range
[  281.440921][T14056] netlink: zone id is out of range
[  281.959142][T14070] __nla_validate_parse: 9 callbacks suppressed
[  281.959152][T14070] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3535'.
[  282.279386][T14084] xt_HMARK: proto mask must be zero with L3 mode
[  282.381760][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3543'.
[  282.385806][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3543'.
[  282.617779][T14095] syzkaller0: entered promiscuous mode
[  282.619577][T14095] syzkaller0: entered allmulticast mode
[  283.101945][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'.
[  284.346069][T14133] netlink: 'syz.0.3561': attribute type 39 has an invalid length.
[  284.377596][T14136] netlink: 'syz.0.3563': attribute type 3 has an invalid length.
[  284.381276][T14136] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3563'.
[  284.429361][T14142] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3566'.
[  284.578125][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'.
[  284.583353][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3571'.
[  284.587991][T14154] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3571'.
[  284.593359][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3571'.
[  284.634124][T14156] net_ratelimit: 16 callbacks suppressed
[  284.634138][T14156] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  284.639859][T14156] openvswitch: netlink: Message has 2 unknown bytes.
[  285.149427][T14177] netlink: 'syz.3.3582': attribute type 29 has an invalid length.
[  285.153626][T14177] netlink: 'syz.3.3582': attribute type 29 has an invalid length.
[  286.045952][T14198] netlink: 'syz.0.3591': attribute type 1 has an invalid length.
[  286.629074][T14208] netlink: 'syz.0.3596': attribute type 1 has an invalid length.
[  286.719404][ T5877] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  287.037300][T14234] : entered promiscuous mode
[  287.258891][T14252] netlink: 'syz.3.3616': attribute type 1 has an invalid length.
[  287.283164][T14252] __nla_validate_parse: 6 callbacks suppressed
[  287.283173][T14252] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3616'.
[  287.313137][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'.
[  287.447637][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'.
[  287.464482][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'.
[  288.790290][ T5877] Bluetooth: hci2: command 0x0406 tx timeout
[  290.261417][T14314] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.3642'.
[  290.460878][T14337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3653'.
[  290.464586][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3653'.
[  290.505191][T14340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.525931][T14342] netlink: 'syz.0.3655': attribute type 1 has an invalid length.
[  290.528735][T14342] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3655'.
[  291.524678][T14377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3669'.
[  291.527925][T14376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3669'.
[  291.633471][T14386] netlink: 'syz.1.3672': attribute type 12 has an invalid length.
[  291.693285][T14393] netlink: 'syz.1.3676': attribute type 3 has an invalid length.
[  292.884329][T14441] netlink: 'syz.1.3696': attribute type 2 has an invalid length.
[  292.887152][T14441] __nla_validate_parse: 3 callbacks suppressed
[  292.887160][T14441] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3696'.
[  293.403722][T14454] netlink: 'syz.3.3702': attribute type 9 has an invalid length.
[  293.407271][T14454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3702'.
[  293.561192][T14472] netlink: 'syz.3.3712': attribute type 1 has an invalid length.
[  293.565398][T14472] netlink: 'syz.3.3712': attribute type 2 has an invalid length.
[  293.726466][ T5877] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11
[  293.749005][T14488] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3719'.
[  293.810583][T14494] openvswitch: netlink: Port 808482864 exceeds max allowable 65535
[  293.996918][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'.
[  294.297770][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'.
[  294.301569][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'.
[  294.498953][T14522] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3735'.
[  294.668978][T14534] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.3739'.
[  294.674106][T14534] netlink: 61827 bytes leftover after parsing attributes in process `syz.0.3739'.
[  294.840476][T14549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3743'.
[  294.900530][T14551] syzkaller0: entered promiscuous mode
[  295.021154][T14543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  295.326357][T14560] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  295.345966][T14560] netlink: 'syz.0.3749': attribute type 11 has an invalid length.
[  295.597495][T14572] netlink: 'syz.0.3755': attribute type 10 has an invalid length.
[  295.625574][T14572] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  295.656414][T14572] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  295.679900][T14572] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  296.281312][T14626] x_tables: ip_tables: icmp match: only valid for protocol 1
[  296.436466][T14647] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  296.774617][T14669] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.777848][T14669] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.783531][T14669] bridge0: entered allmulticast mode
[  296.805613][T14669] bridge_slave_1: left allmulticast mode
[  296.808253][T14669] bridge_slave_1: left promiscuous mode
[  296.812446][T14669] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.822489][T14669] bridge_slave_0: left promiscuous mode
[  296.824769][T14669] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.114620][ T5877] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  298.036355][T14751] __nla_validate_parse: 8 callbacks suppressed
[  298.036369][T14751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3832'.
[  298.086635][T14755] netlink: 'syz.0.3834': attribute type 1 has an invalid length.
[  298.439685][T14772] netlink: 'syz.1.3843': attribute type 6 has an invalid length.
[  298.444829][T14772] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3843'.
[  298.492121][T14775] netlink: 'syz.0.3844': attribute type 29 has an invalid length.
[  298.496650][T14775] netlink: 'syz.0.3844': attribute type 29 has an invalid length.
[  298.500930][T14775] netlink: 'syz.0.3844': attribute type 29 has an invalid length.
[  298.632941][T14781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3845'.
[  298.750298][T14785] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3849'.
[  298.813242][T14792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3852'.
[  299.201386][ T5868] Bluetooth: hci2: command 0x0406 tx timeout
[  299.273765][T14823] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  299.399417][T14825] : entered promiscuous mode
[  299.429903][T14829] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3870'.
[  299.763494][T14840] netlink: 825 bytes leftover after parsing attributes in process `syz.3.3876'.
[  299.766653][T14840] netlink: 130144 bytes leftover after parsing attributes in process `syz.3.3876'.
[  299.874534][T14846] lo speed is unknown, defaulting to 1000
[  299.954259][T14851] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  300.405005][T14878] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.3892'.
[  300.408623][T14878] netlink: 62227 bytes leftover after parsing attributes in process `syz.1.3892'.
[  302.487493][T14912] netlink: 'syz.0.3906': attribute type 2 has an invalid length.
[  302.584542][ T5868] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  304.066023][T14945] __nla_validate_parse: 2 callbacks suppressed
[  304.066040][T14945] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3916'.
[  304.223866][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  304.227121][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  304.229923][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  304.234938][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  304.237975][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  304.259828][T14946] lo speed is unknown, defaulting to 1000
[  304.352103][T14946] chnl_net:caif_netlink_parms(): no params data found
[  304.401425][T14946] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.403773][T14946] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.406149][T14946] bridge_slave_0: entered allmulticast mode
[  304.408859][T14946] bridge_slave_0: entered promiscuous mode
[  304.413180][T14946] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.415979][T14946] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.419017][T14946] bridge_slave_1: entered allmulticast mode
[  304.423902][T14946] bridge_slave_1: entered promiscuous mode
[  304.456091][T14946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.462565][T14946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.491706][T14946] team0: Port device team_slave_0 added
[  304.496289][T14946] team0: Port device team_slave_1 added
[  304.524298][T14946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.527356][T14946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.538035][T14946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.544040][T14946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.548317][T14946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.574020][T14946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.612538][T14946] hsr_slave_0: entered promiscuous mode
[  304.614840][T14946] hsr_slave_1: entered promiscuous mode
[  304.616969][T14946] debugfs: 'hsr0' already exists in 'hsr'
[  304.618791][T14946] Cannot create hsr debugfs directory
[  304.768480][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  304.773840][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  304.780251][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  304.785420][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  304.794590][T14946] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  304.798114][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  304.805035][T14946] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  304.811253][T14946] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  304.816404][T14946] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  304.843176][T14961] lo speed is unknown, defaulting to 1000
[  304.857126][T14946] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.859928][T14946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.862864][T14946] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.865444][T14946] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.989189][T14946] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.999039][T14961] chnl_net:caif_netlink_parms(): no params data found
[  305.026803][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.030182][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.047101][T14946] 8021q: adding VLAN 0 to HW filter on device team0
[  305.066003][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.068492][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.131996][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.134742][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.137883][T14961] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.141856][T14961] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.144890][T14961] bridge_slave_0: entered allmulticast mode
[  305.148721][T14961] bridge_slave_0: entered promiscuous mode
[  305.156046][T14961] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.159441][T14961] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.163592][T14961] bridge_slave_1: entered allmulticast mode
[  305.167560][T14961] bridge_slave_1: entered promiscuous mode
[  305.212252][T14961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.218789][T14961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.244050][T14961] team0: Port device team_slave_0 added
[  305.249425][T14961] team0: Port device team_slave_1 added
[  305.313298][T14961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.315913][T14961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.326582][T14961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.336678][T14961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.339302][T14961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.350739][T14961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.381190][T14946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  305.385622][T14946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  305.505305][T14961] hsr_slave_0: entered promiscuous mode
[  305.507581][T14961] hsr_slave_1: entered promiscuous mode
[  305.509757][T14961] debugfs: 'hsr0' already exists in 'hsr'
[  305.513438][T14961] Cannot create hsr debugfs directory
[  305.599219][T14946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.700709][T14961] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  305.706907][T14961] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  305.716039][T14961] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  305.731979][T14961] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  305.833907][T14946] veth0_vlan: entered promiscuous mode
[  305.848991][T14946] veth1_vlan: entered promiscuous mode
[  305.882141][T14961] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.899793][T14961] 8021q: adding VLAN 0 to HW filter on device team0
[  305.906026][T14946] veth0_macvtap: entered promiscuous mode
[  305.914712][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.917165][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.926006][T14946] veth1_macvtap: entered promiscuous mode
[  305.936575][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.939283][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.971891][T14946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.982748][T14946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.003944][ T5880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.011743][ T5880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.015419][ T5880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.019046][ T5880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.106428][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.109707][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.131091][T15020] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  306.170377][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.174308][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.244411][T14961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.312501][ T5877] Bluetooth: hci1: command tx timeout
[  306.489736][T14961] veth0_vlan: entered promiscuous mode
[  306.500126][T14961] veth1_vlan: entered promiscuous mode
[  306.521756][T14961] veth0_macvtap: entered promiscuous mode
[  306.533528][T14961] veth1_macvtap: entered promiscuous mode
[  306.564560][T14961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.581900][T14961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.606187][ T5880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.614352][ T5880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.649567][ T5880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.656701][ T5880] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.733511][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.737116][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.755028][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.757795][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.941379][ T5877] Bluetooth: hci3: command tx timeout
[  307.650686][T15066] syzkaller1: tun_chr_ioctl cmd 1074025677
[  307.653289][T15066] syzkaller1: linktype set to 780
[  308.390180][ T5877] Bluetooth: hci1: command tx timeout
[  308.471046][T15115] batadv_slave_1: entered promiscuous mode
[  308.473615][T15115] batadv_slave_1: entered allmulticast mode
[  308.487759][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3969'.
[  308.492854][T15109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3969'.
[  308.629848][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3974'.
[  308.835306][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'.
[  308.843431][T15152] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3983'.
[  308.960272][ T5877] Bluetooth: hci3: command tx timeout
[  309.016015][ T5877] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  309.187160][T15171] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3992'.
[  309.219861][T15174] netlink: 'syz.5.3993': attribute type 2 has an invalid length.
[  309.222462][T15174] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3993'.
[  309.225749][T15174] nbd: must specify a device to reconfigure
[  309.323116][T15182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3996'.
[  309.449808][T15188] : entered promiscuous mode
[  309.679638][T15211] netlink: 'syz.0.4011': attribute type 21 has an invalid length.
[  309.683213][T15211] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4011'.
[  309.796281][T15219] netlink: 'syz.5.4016': attribute type 10 has an invalid length.
[  309.833814][T15219] team0: Device ipvlan1 failed to register rx_handler
[  309.864260][T15221] netlink: 'syz.0.4015': attribute type 39 has an invalid length.
[  310.088226][T15231] netlink: 'syz.5.4020': attribute type 46 has an invalid length.
[  310.279915][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'.
[  310.470123][ T5877] Bluetooth: hci1: command tx timeout
[  310.475606][T15259] sit0: left promiscuous mode
[  310.722502][T15262] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  311.033034][ T5877] Bluetooth: hci3: command tx timeout
[  311.073081][T15270] netlink: 51563 bytes leftover after parsing attributes in process `syz.5.4038'.
[  311.390948][T15293] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4049'.
[  311.394312][T15293] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4049'.
[  311.570433][T15307] netlink: 'syz.5.4056': attribute type 6 has an invalid length.
[  311.583347][T15299] x_tables: ip_tables: icmp match: only valid for protocol 1
[  311.737587][ T5877] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11
[  311.761589][T15316] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4060'.
[  311.815277][T15320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.931644][T15327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4063'.
[  312.550137][ T5877] Bluetooth: hci1: command tx timeout
[  313.729344][T15378] netlink: 'syz.0.4087': attribute type 21 has an invalid length.
[  313.760862][T15378] netlink: 'syz.0.4087': attribute type 11 has an invalid length.
[  313.855550][T15388] netlink: 'syz.5.4092': attribute type 10 has an invalid length.
[  313.858194][T15388] batadv0: entered promiscuous mode
[  313.859949][T15388] batadv0: entered allmulticast mode
[  313.865368][T15390] netlink: 'syz.4.4093': attribute type 27 has an invalid length.
[  313.866069][T15388] bridge0: port 3(batadv0) entered blocking state
[  313.870836][T15388] bridge0: port 3(batadv0) entered disabled state
[  313.874922][T15388] bridge0: port 3(batadv0) entered blocking state
[  313.877215][T15388] bridge0: port 3(batadv0) entered forwarding state
[  314.301514][ T5713] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  314.304687][ T5713] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  314.418488][T15420] validate_nla: 1 callbacks suppressed
[  314.418503][T15420] netlink: 'syz.5.4106': attribute type 7 has an invalid length.
[  314.496027][T15424] __nla_validate_parse: 3 callbacks suppressed
[  314.496042][T15424] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4108'.
[  314.650904][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'.
[  315.435391][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4116'.
[  315.746630][T15447] netlink: 'syz.4.4118': attribute type 25 has an invalid length.
[  315.749577][T15447] netlink: 'syz.4.4118': attribute type 1 has an invalid length.
[  315.753420][T15447] bridge0: port 1(bridge_slave_0) entered learning state
[  315.760911][ T5877] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  315.764266][ T5877] Bluetooth: hci3: Injecting HCI hardware error event
[  315.767396][ T5877] Bluetooth: hci3: hardware error 0x00
[  316.092253][T15466] syzkaller0: entered promiscuous mode
[  316.094405][T15466] syzkaller0: entered allmulticast mode
[  316.243645][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4128'.
[  316.580818][T15487] netlink: 64967 bytes leftover after parsing attributes in process `syz.5.4135'.
[  316.926888][T15501] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  317.107185][T15517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4150'.
[  317.115207][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.118015][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.144500][T15519] openvswitch: netlink: Message has 16 unknown bytes.
[  317.206561][T15524] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.4154'.
[  317.702273][T15559] netlink: 'syz.0.4169': attribute type 1 has an invalid length.
[  317.705010][T15559] netlink: 'syz.0.4169': attribute type 4 has an invalid length.
[  317.707984][T15559] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4169'.
[  317.829227][T15572] tun0: tun_chr_ioctl cmd 1074025677
[  317.833424][T15572] tun0: linktype set to 774
[  317.976515][ T5877] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  318.631244][T15588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.728705][T15594] netlink: 'syz.4.4185': attribute type 1 has an invalid length.
[  318.734452][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'.
[  319.001473][ T5877] Bluetooth: hci2: Malformed LE Event: 0x0d
[  319.083337][T15609] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4191'.
[  319.128626][T15613] netlink: 'syz.0.4195': attribute type 1 has an invalid length.
[  319.386418][T15624] netlink: 'syz.4.4197': attribute type 10 has an invalid length.
[  319.389899][T15624] team0: entered promiscuous mode
[  319.415095][T15624] team_slave_0: entered promiscuous mode
[  319.422069][T15624] team_slave_1: entered promiscuous mode
[  319.424594][T15624] team0: entered allmulticast mode
[  319.426900][T15624] team_slave_0: entered allmulticast mode
[  319.429555][T15624] team_slave_1: entered allmulticast mode
[  319.435088][T15624] bridge0: port 3(team0) entered blocking state
[  319.438060][T15624] bridge0: port 3(team0) entered disabled state
[  319.443730][T15624] bridge0: port 3(team0) entered blocking state
[  319.446666][T15624] bridge0: port 3(team0) entered forwarding state
[  319.517566][T15630] __nla_validate_parse: 4 callbacks suppressed
[  319.517576][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4202'.
[  319.695967][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'.
[  320.373019][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.650703][T15665] netlink: 'syz.5.4214': attribute type 29 has an invalid length.
[  320.654998][T15665] netlink: 'syz.5.4214': attribute type 29 has an invalid length.
[  320.885760][ T5877] Bluetooth: hci1: adv larger than maximum supported
[  321.091089][T15690] netlink: 'syz.5.4227': attribute type 10 has an invalid length.
[  321.119758][T15692] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  321.179469][T15696] netlink: 'syz.5.4230': attribute type 1 has an invalid length.
[  321.279710][ T5877] Bluetooth: hci1: Unable to find connection for big 0x00
[  322.325285][T15739] netlink: 'syz.0.4247': attribute type 10 has an invalid length.
[  322.941371][T15758] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  323.072436][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4263'.
[  323.079070][T15774] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4264'.
[  323.087348][T15772] siw: device registration error -23
[  323.119074][T15777] netlink: 'syz.5.4265': attribute type 3 has an invalid length.
[  323.121840][T15777] netlink: 'syz.5.4265': attribute type 4 has an invalid length.
[  323.273058][T15784] netlink: 684 bytes leftover after parsing attributes in process `syz.4.4268'.
[  323.411009][T15791] netlink: 'syz.5.4271': attribute type 10 has an invalid length.
[  323.460921][T15791] team0: Port device geneve1 added
[  323.947927][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4287'.
[  323.951776][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4287'.
[  323.954899][T15827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4287'.
[  324.008182][T15827] netlink: 'syz.0.4287': attribute type 13 has an invalid length.
[  324.013042][T15827] netlink: 'syz.0.4287': attribute type 17 has an invalid length.
[  324.062641][T15829] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4288'.
[  324.122418][T15827] sit0: left allmulticast mode
[  324.265339][T15827] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.277554][T15827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  325.362704][T15875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4308'.
[  325.947977][T15902] netlink: 22 bytes leftover after parsing attributes in process `syz.5.4319'.
[  326.438640][T15929] validate_nla: 7 callbacks suppressed
[  326.438650][T15929] netlink: 'syz.5.4332': attribute type 1 has an invalid length.
[  326.592639][T15943] netlink: 'syz.0.4339': attribute type 29 has an invalid length.
[  326.596853][T15943] netlink: 'syz.0.4339': attribute type 29 has an invalid length.
[  326.604464][T15943] netlink: 'syz.0.4339': attribute type 29 has an invalid length.
[  326.608640][T15943] netlink: 'syz.0.4339': attribute type 29 has an invalid length.
[  327.386389][T15964] netlink: 'syz.0.4349': attribute type 23 has an invalid length.
[  327.492884][ T5877] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  327.496638][ T5877] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  328.139449][T15981] netlink: zone id is out of range
[  328.145161][T15981] netlink: zone id is out of range
[  328.147321][T15981] netlink: zone id is out of range
[  328.186720][T15987] netlink: del zone limit has 4 unknown bytes
[  328.226849][T15981] netlink: set zone limit has 4 unknown bytes
[  328.556506][T16011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4369'.
[  328.674180][T16017] netlink: 'syz.4.4373': attribute type 33 has an invalid length.
[  328.676749][T16017] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4373'.
[  328.704463][T16019] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4374'.
[  329.408905][T16060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.553961][T16072] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4399'.
[  329.608218][T16070] netlink: 'syz.0.4398': attribute type 2 has an invalid length.
[  329.616474][T16070] netlink: 'syz.0.4398': attribute type 3 has an invalid length.
[  329.657904][T16070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4398'.
[  330.193635][T16114] netlink: 'syz.0.4418': attribute type 14 has an invalid length.
[  330.196446][T16114] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4418'.
[  330.704344][T16144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4431'.
[  330.836935][T16153] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4436'.
[  330.956873][T16163] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4440'.
[  331.134172][ T5868] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  331.325979][T16179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4447'.
[  331.331462][T16179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4447'.
[  331.856468][T16207] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.4460'.
[  331.924412][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4462'.
[  331.926191][T16212] validate_nla: 1 callbacks suppressed
[  331.926200][T16212] netlink: 'syz.4.4461': attribute type 29 has an invalid length.
[  331.936788][T16212] netlink: 'syz.4.4461': attribute type 29 has an invalid length.
[  331.939914][T16212] netlink: 'syz.4.4461': attribute type 29 has an invalid length.
[  332.214355][T16232] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4472'.
[  332.264471][T16239] netlink: 'syz.4.4476': attribute type 29 has an invalid length.
[  332.273570][T16239] netlink: 'syz.4.4476': attribute type 29 has an invalid length.
[  332.458489][T16250] netlink: 'syz.0.4480': attribute type 27 has an invalid length.
[  332.467503][T16250] netlink: 'syz.0.4480': attribute type 4 has an invalid length.
[  332.479398][T16250] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4480'.
[  332.502657][T16252] IPv6: NLM_F_CREATE should be specified when creating new route
[  332.888255][T16275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.138552][T16287] netlink: 'syz.0.4498': attribute type 1 has an invalid length.
[  333.142912][T16287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.220140][ T5868] Bluetooth: hci1: command tx timeout
[  333.422453][T16305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  333.425757][T16305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  334.125947][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4524'.
[  334.812160][T16395] netlink: 'syz.4.4547': attribute type 16 has an invalid length.
[  335.676453][T16442] netlink: 'syz.5.4570': attribute type 1 has an invalid length.
[  336.309861][T16477] __nla_validate_parse: 8 callbacks suppressed
[  336.309875][T16477] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4585'.
[  336.765306][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4602'.
[  336.768676][T16514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.780312][T16516] netlink: 201352 bytes leftover after parsing attributes in process `syz.4.4603'.
[  337.023560][T16530] netlink: 6536 bytes leftover after parsing attributes in process `syz.0.4610'.
[  337.093937][T16532] validate_nla: 6 callbacks suppressed
[  337.093952][T16532] netlink: 'syz.5.4611': attribute type 10 has an invalid length.
[  337.252306][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4615'.
[  337.256387][T16544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4615'.
[  338.389575][T16599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.109237][T16630] syzkaller1: tun_chr_ioctl cmd 1074025677
[  339.113829][T16630] syzkaller1: linktype set to 823
[  339.374789][T16632] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4655'.
[  340.139721][T16653] netlink: 'syz.4.4663': attribute type 1 has an invalid length.
[  343.497178][T16687] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  343.642197][T16695] netlink: 'syz.5.4680': attribute type 21 has an invalid length.
[  344.054248][T16724] netlink: 'syz.5.4694': attribute type 3 has an invalid length.
[  344.057610][T16724] netlink: 'syz.5.4694': attribute type 1 has an invalid length.
[  344.063788][T16724] netlink: 191264 bytes leftover after parsing attributes in process `syz.5.4694'.
[  344.433288][T16742] netlink: 'syz.0.4703': attribute type 10 has an invalid length.
[  344.436745][T16742] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.454896][T16742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.464294][T16744] netlink: 'syz.5.4704': attribute type 41 has an invalid length.
[  344.467550][T16744] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4704'.
[  344.488886][T16742] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  344.803727][T16772] netlink: 'syz.4.4715': attribute type 2 has an invalid length.
[  346.344969][T16859] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4757'.
[  346.893877][T16885] netlink: 'syz.0.4768': attribute type 21 has an invalid length.
[  346.896602][T16885] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4768'.
[  346.904878][T16885] netlink: 'syz.0.4768': attribute type 5 has an invalid length.
[  346.907652][T16885] netlink: 'syz.0.4768': attribute type 6 has an invalid length.
[  346.911693][T16885] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4768'.
[  347.405727][T16897] netlink: 763 bytes leftover after parsing attributes in process `syz.5.4774'.
[  347.754496][T16923] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4786'.
[  347.765544][T16923] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4786'.
[  347.774222][T16923] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4786'.
[  348.244454][T16944] Dead loop on virtual device ip6_vti0, fix it urgently!
[  348.677942][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4813'.
[  348.712504][T16976] syzkaller0: entered promiscuous mode
[  348.714456][T16976] syzkaller0: entered allmulticast mode
[  349.867536][T16990] __nla_validate_parse: 2 callbacks suppressed
[  349.867545][T16990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4817'.
[  349.908583][T17001] netlink: 'syz.4.4821': attribute type 29 has an invalid length.
[  349.913282][T17001] netlink: 'syz.4.4821': attribute type 29 has an invalid length.
[  349.921669][T17001] netlink: 'syz.4.4821': attribute type 29 has an invalid length.
[  350.012444][T17013] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.4828'.
[  350.838278][T17053] netlink: 'syz.0.4842': attribute type 1 has an invalid length.
[  350.843126][T17053] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4842'.
[  351.023653][T17070] netlink: 'syz.4.4850': attribute type 10 has an invalid length.
[  351.027251][T17070] bridge0: port 3(team0) entered disabled state
[  351.029653][T17070] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.032359][T17070] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.039844][T17070] bridge0: port 3(team0) entered blocking state
[  351.042265][T17070] bridge0: port 3(team0) entered forwarding state
[  351.045211][T17070] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.048318][T17070] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.051600][T17070] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.054639][T17070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.073225][T17070] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  353.561306][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4899'.
[  353.564881][T17179] openvswitch: netlink: Missing key (keys=40, expected=80)
[  353.930951][T17192] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4898'.
[  354.224141][T17212] netdevsim netdevsim0 : renamed from netdevsim0
[  354.232515][T17217] netlink: 'syz.5.4916': attribute type 21 has an invalid length.
[  354.931063][T17247] netlink: 'syz.0.4927': attribute type 28 has an invalid length.
[  354.933737][T17247] netlink: 'syz.0.4927': attribute type 4 has an invalid length.
[  354.936331][T17247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4927'.
[  355.031048][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4928'.
[  355.281648][T17226] delete_channel: no stack
[  355.470475][ T5868] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11
[  356.025122][T17273] netlink: 'syz.4.4935': attribute type 1 has an invalid length.
[  356.027642][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'.
[  356.882939][T17290] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4941'.
[  357.942663][T17309] netlink: 'syz.0.4949': attribute type 1 has an invalid length.
[  357.954069][T17309] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4949'.
[  358.373447][T17329] netlink: 'syz.4.4958': attribute type 5 has an invalid length.
[  358.375194][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4957'.
[  358.534821][T17341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4962'.
[  358.537672][T17341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4962'.
[  358.542472][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4962'.
[  358.754647][T17355] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4969'.
[  359.132986][ T5868] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  359.136270][ T5868] Bluetooth: hci2: Invalid connection link type handle 0x0000
[  359.443108][T17411] netlink: 'syz.5.4996': attribute type 12 has an invalid length.
[  359.775470][T17426] netlink: 'syz.4.5001': attribute type 1 has an invalid length.
[  359.778784][T17426] netlink: 'syz.4.5001': attribute type 2 has an invalid length.
[  359.788123][T17426] netlink: 'syz.4.5001': attribute type 1 has an invalid length.
[  360.533249][T17434] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  360.929287][T17454] netlink: 'syz.4.5012': attribute type 39 has an invalid length.
[  362.785232][T17495] netlink: 'syz.4.5028': attribute type 1 has an invalid length.
[  362.788355][T17495] __nla_validate_parse: 6 callbacks suppressed
[  362.788364][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5028'.
[  362.891812][T17503] netlink: 15478 bytes leftover after parsing attributes in process `syz.5.5032'.
[  362.947562][T17509] : renamed from dummy0 (while UP)
[  363.756397][T17542] delete_channel: no stack
[  363.761800][T17540] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.5047'.
[  363.777449][T17540] netlink: 'syz.0.5047': attribute type 4 has an invalid length.
[  363.869952][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5048'.
[  363.873718][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5048'.
[  363.971931][T17555] netlink: 'syz.5.5054': attribute type 29 has an invalid length.
[  363.976015][T17555] netlink: 'syz.5.5054': attribute type 29 has an invalid length.
[  363.979586][T17555] netlink: 'syz.5.5054': attribute type 29 has an invalid length.
[  364.014046][T17540] netlink: 'syz.0.5047': attribute type 10 has an invalid length.
[  364.336279][T17575] netlink: 'syz.0.5062': attribute type 28 has an invalid length.
[  364.339840][T17575] netlink: 'syz.0.5062': attribute type 29 has an invalid length.
[  364.343379][T17575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5062'.
[  364.349053][T17575] netlink: 'syz.0.5062': attribute type 9 has an invalid length.
[  364.355126][T17575] netlink: 143452 bytes leftover after parsing attributes in process `syz.0.5062'.
[  365.156748][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5072'.
[  365.169304][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5072'.
[  366.506005][T17652] validate_nla: 2 callbacks suppressed
[  366.506020][T17652] netlink: 'syz.4.5099': attribute type 11 has an invalid length.
[  366.901413][T17673] netlink: 'syz.0.5109': attribute type 33 has an invalid length.
[  366.904532][T17673] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5109'.
[  367.465747][T17713] netlink: 'syz.0.5125': attribute type 4 has an invalid length.
[  367.858662][T17736] netlink: 'syz.5.5137': attribute type 20 has an invalid length.
[  368.046862][T17739] netlink: 798 bytes leftover after parsing attributes in process `syz.4.5139'.
[  368.082286][T17741] netlink: 'syz.4.5140': attribute type 1 has an invalid length.
[  368.296387][T17751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5144'.
[  368.303336][T17751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5144'.
[  368.383625][T17755] netlink: 'syz.4.5147': attribute type 10 has an invalid length.
[  368.386754][T17755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5147'.
[  368.411194][T17755] veth0_vlan: entered allmulticast mode
[  368.416547][T17755] bridge0: port 4(veth0_vlan) entered blocking state
[  368.419800][T17755] bridge0: port 4(veth0_vlan) entered disabled state
[  368.480523][T17755] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  368.827311][T17775] netlink: 'syz.5.5155': attribute type 1 has an invalid length.
[  368.830445][T17775] netlink: 'syz.5.5155': attribute type 4 has an invalid length.
[  368.833595][T17775] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5155'.
[  369.229493][T17805] netlink: 'syz.4.5170': attribute type 2 has an invalid length.
[  369.260454][T17807] netlink: 'syz.5.5171': attribute type 10 has an invalid length.
[  369.426014][T17807] batman_adv: batadv0: Adding interface: team0
[  369.429610][T17807] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.441957][T17807] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  369.788616][T17843] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5187'.
[  370.143556][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5201'.
[  370.466252][T17894] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5212'.
[  370.470432][T17894] netlink: zone id is out of range
[  370.472236][T17894] netlink: zone id is out of range
[  370.474418][T17894] netlink: zone id is out of range
[  370.476335][T17894] netlink: zone id is out of range
[  370.484100][T17894] netlink: zone id is out of range
[  370.485879][T17894] netlink: zone id is out of range
[  370.487800][T17894] netlink: zone id is out of range
[  370.489556][T17894] netlink: zone id is out of range
[  370.496324][T17894] netlink: zone id is out of range
[  371.558879][T17905] netlink: 'syz.0.5216': attribute type 1 has an invalid length.
[  371.709925][T17913] netlink: 'syz.5.5220': attribute type 29 has an invalid length.
[  371.717617][T17913] netlink: 'syz.5.5220': attribute type 29 has an invalid length.
[  371.727466][T17913] netlink: 'syz.5.5220': attribute type 29 has an invalid length.
[  371.735208][T17913] netlink: 'syz.5.5220': attribute type 29 has an invalid length.
[  372.453129][T17929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5227'.
[  372.457074][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5227'.
[  372.774338][T17950] netlink: 'syz.4.5237': attribute type 16 has an invalid length.
[  373.137947][T17979] netlink: 'syz.5.5251': attribute type 1 has an invalid length.
[  373.555171][T18006] __nla_validate_parse: 1 callbacks suppressed
[  373.555186][T18006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5261'.
[  373.686526][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5262'.
[  373.706410][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5262'.
[  374.126943][T18017] netlink: 'syz.5.5266': attribute type 4 has an invalid length.
[  374.130536][T18017] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5266'.
[  374.182466][T18019] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5267'.
[  374.484659][T18051] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5282'.
[  374.634031][T18064] lo speed is unknown, defaulting to 1000
[  375.790078][T18091] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5299'.
[  375.829700][T18094] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5301'.
[  376.283389][T18128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5314'.
[  376.351550][T18128] net_ratelimit: 76 callbacks suppressed
[  376.351555][T18128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.539588][T18133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5318'.
[  377.460396][ T5868] Bluetooth: hci1: Malformed LE Event: 0x1b
[  377.812654][T18174] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  377.815784][T18174] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  377.821097][T18163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.863674][T18178] netlink: 'syz.0.5337': attribute type 21 has an invalid length.
[  377.916610][T18178] netlink: 'syz.0.5337': attribute type 5 has an invalid length.
[  378.017206][T18189] netlink: 'syz.4.5343': attribute type 3 has an invalid length.
[  378.137568][T18199] @: renamed from bond_slave_0 (while UP)
[  378.553438][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.555498][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  380.248453][T18223] __nla_validate_parse: 4 callbacks suppressed
[  380.248463][T18223] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5357'.
[  380.728278][T18265] netlink: 'syz.5.5376': attribute type 29 has an invalid length.
[  380.732434][T18265] netlink: 'syz.5.5376': attribute type 29 has an invalid length.
[  382.021829][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5395'.
[  382.037123][T18308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5396'.
[  382.042459][T18308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5396'.
[  382.096677][T18313] : renamed from gre0 (while UP)
[  382.157654][T18314] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.5398'.
[  382.453206][T18332] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.5406'.
[  382.456262][T18332] netlink: 6324 bytes leftover after parsing attributes in process `syz.5.5406'.
[  382.546130][T18338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5409'.
[  382.554837][T18338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5409'.
[  382.655558][T18347] openvswitch: netlink: IP tunnel dst address not specified
[  382.693828][T18351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.711245][ T5868] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  383.746833][T18369] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.5422'.
[  383.994409][T18390] netlink: 'syz.4.5431': attribute type 10 has an invalid length.
[  384.073780][T18390] geneve1: entered promiscuous mode
[  384.076658][T18390] geneve1: entered allmulticast mode
[  384.086922][T18390] team0: Port device geneve1 added
[  384.153986][T18388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.349561][T18396] netlink: 'syz.5.5435': attribute type 10 has an invalid length.
[  384.571540][T18396] bridge0: port 3(batadv0) entered disabled state
[  384.587469][T18396] batadv0: left allmulticast mode
[  384.589711][T18396] batadv0: left promiscuous mode
[  384.595664][T18396] bridge0: port 3(batadv0) entered disabled state
[  384.758754][T18396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.809016][T18396] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  384.861541][T18400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.231360][T18412] syzkaller0: tun_chr_ioctl cmd 1074025677
[  385.234240][T18412] syzkaller0: Linktype set failed because interface is up
[  385.277314][T18426] syzkaller0: entered promiscuous mode
[  385.279265][T18426] syzkaller0: entered allmulticast mode
[  387.567247][T18443] __nla_validate_parse: 1 callbacks suppressed
[  387.567306][T18443] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5452'.
[  387.843193][ T5868] Bluetooth: hci2: command 0x0406 tx timeout
[  388.513422][T18454] netlink: 'syz.4.5457': attribute type 5 has an invalid length.
[  388.633341][T18458] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5459'.
[  388.724076][T18467] netlink: 'syz.5.5463': attribute type 21 has an invalid length.
[  388.727481][T18467] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5463'.
[  389.667785][T18498] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5475'.
[  389.742839][T18500] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.5476'.
[  389.909793][T18516] netlink: 731 bytes leftover after parsing attributes in process `syz.5.5482'.
[  390.194333][T18526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  391.096508][T18559] : renamed from wg2
[  391.373458][T18572] netlink: set zone limit has 4 unknown bytes
[  391.379334][T18572] netlink: del zone limit has 4 unknown bytes
[  393.143434][T18603] netlink: 208344 bytes leftover after parsing attributes in process `syz.4.5516'.
[  393.149279][T18603] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  393.159823][T18603] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  393.878091][T18610] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5518'.
[  393.906524][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5519'.
[  393.960912][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5521'.
[  393.963797][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5521'.
[  394.157473][T18630] netlink: 'syz.4.5528': attribute type 15 has an invalid length.
[  394.163226][T18630] netlink: 11318 bytes leftover after parsing attributes in process `syz.4.5528'.
[  394.357775][T18636] netlink: 'syz.4.5530': attribute type 39 has an invalid length.
[  394.365334][T18636] veth0_macvtap: left promiscuous mode
[  395.702381][T18647] openvswitch: netlink: Actions may not be safe on all matching packets
[  396.112180][ T5713] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.112608][   T34] INFO: task syz.2.2686:12112 blocked for more than 143 seconds.
[  397.115314][   T34]       Not tainted syzkaller #0
[  397.118563][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  397.122786][   T34] task:syz.2.2686      state:D stack:22016 pid:12112 tgid:12107 ppid:5867   task_flags:0x400140 flags:0x00004004
[  397.127322][   T34] Call Trace:
[  397.128536][   T34]  <TASK>
[  397.129636][   T34]  __schedule+0x1798/0x4cc0
[  397.132596][   T34]  ? __lock_acquire+0xab9/0xd20
[  397.134802][   T34]  ? __pfx___schedule+0x10/0x10
[  397.136759][   T34]  ? schedule+0x91/0x360
[  397.138394][   T34]  schedule+0x165/0x360
[  397.140259][   T34]  schedule_timeout+0x9a/0x270
[  397.142057][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  397.144058][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  397.146025][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.148110][   T34]  ? wait_for_completion+0x267/0x5d0
[  397.151494][   T34]  wait_for_completion+0x2bf/0x5d0
[  397.160325][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  397.163246][   T34]  ? remove_client_context+0x19c/0x1e0
[  397.165449][   T34]  disable_device+0x1c6/0x320
[  397.170833][   T34]  ? __pfx_disable_device+0x10/0x10
[  397.174443][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  397.176382][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  397.178470][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  397.181145][   T34]  nldev_dellink+0x2d1/0x320
[  397.182962][   T34]  ? __pfx_event_sched_in+0x10/0x10
[  397.184734][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  397.186525][   T34]  ? apparmor_capable+0x137/0x1b0
[  397.188263][   T34]  ? bpf_lsm_capable+0x9/0x20
[  397.189896][   T34]  ? security_capable+0x7e/0x2e0
[  397.196399][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  397.198310][   T34]  rdma_nl_rcv+0x6ae/0x980
[  397.200904][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  397.202746][   T34]  ? __lock_acquire+0xab9/0xd20
[  397.204552][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  397.206939][   T34]  netlink_unicast+0x82f/0x9e0
[  397.208721][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  397.212947][   T34]  ? netlink_sendmsg+0x642/0xb30
[  397.214758][   T34]  ? skb_put+0x11b/0x210
[  397.216357][   T34]  netlink_sendmsg+0x805/0xb30
[  397.218271][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.223261][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  397.226239][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  397.229448][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.234058][   T34]  __sock_sendmsg+0x21c/0x270
[  397.238057][   T34]  ____sys_sendmsg+0x505/0x830
[  397.239732][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  397.244011][   T34]  ? import_iovec+0x74/0xa0
[  397.245954][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  397.248860][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  397.252440][   T34]  ? __fget_files+0x2a/0x420
[  397.254197][   T34]  ? __fget_files+0x3a0/0x420
[  397.255968][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  397.257764][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  397.259816][   T34]  ? rcu_is_watching+0x15/0xb0
[  397.262051][   T34]  ? do_syscall_64+0xbe/0x3b0
[  397.263836][   T34]  do_syscall_64+0xfa/0x3b0
[  397.265789][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.267754][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.269903][   T34]  ? exc_page_fault+0x9f/0xf0
[  397.273750][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.275990][   T34] RIP: 0033:0x7fa18998ebe9
[  397.277611][   T34] RSP: 002b:00007fa187bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.280757][   T34] RAX: ffffffffffffffda RBX: 00007fa189bb6180 RCX: 00007fa18998ebe9
[  397.283536][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007
[  397.286594][   T34] RBP: 00007fa189a11e19 R08: 0000000000000000 R09: 0000000000000000
[  397.289320][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.293629][   T34] R13: 00007fa189bb6218 R14: 00007fa189bb6180 R15: 00007ffdc819dd68
[  397.296521][   T34]  </TASK>
[  397.297764][   T34] 
[  397.297764][   T34] Showing all locks held in the system:
[  397.305376][   T34] 4 locks held by kworker/u8:0/12:
[  397.307077][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  397.319295][   T34]  #1: ffffc900000f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  397.324166][   T34]  #2: ffffffff8f52af30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  397.327715][   T34]  #3: ffff888118ec4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  397.333165][   T34] 1 lock held by khungtaskd/34:
[  397.334995][   T34]  #0: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  397.338507][   T34] 2 locks held by getty/5669:
[  397.340685][   T34]  #0: ffff88810d8ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  397.343939][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  397.347557][   T34] 3 locks held by syz-executor/5771:
[  397.349414][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  397.353778][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  397.357447][   T34]  #2: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340
[  397.361400][   T34] 4 locks held by kworker/u8:3/5880:
[  397.363583][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  397.367571][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  397.370525][   T34]  #2: ffff88804b025918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30
[  397.373441][   T34]  #3: ffffffff99d0d288 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420
[  397.376977][   T34] 2 locks held by syz.2.2686/12112:
[  397.378678][   T34]  #0: ffffffff99e68858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  397.382610][   T34]  #1: ffff888118ec4700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  397.386434][   T34] 1 lock held by syz.4.5544/18670:
[  397.388265][   T34]  #0: ffffffff8e19d408 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  397.391588][   T34] 2 locks held by syz.4.5544/18672:
[  397.393301][   T34]  #0: ffffffff8f537d88 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0
[  397.396500][   T34]  #1: ffffffff8e13f8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  397.401088][   T34] 
[  397.402321][   T34] =============================================
[  397.402321][   T34] 
[  397.405863][   T34] NMI backtrace for cpu 1
[  397.405874][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  397.405886][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.405892][   T34] Call Trace:
[  397.405897][   T34]  <TASK>
[  397.405902][   T34]  dump_stack_lvl+0x189/0x250
[  397.405946][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.405960][   T34]  ? __pfx__printk+0x10/0x10
[  397.405984][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  397.406000][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  397.406016][   T34]  ? __pfx__printk+0x10/0x10
[  397.406034][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  397.406053][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  397.406068][   T34]  watchdog+0xf93/0xfe0
[  397.406088][   T34]  ? watchdog+0x1de/0xfe0
[  397.406107][   T34]  kthread+0x711/0x8a0
[  397.406124][   T34]  ? __pfx_watchdog+0x10/0x10
[  397.406138][   T34]  ? __pfx_kthread+0x10/0x10
[  397.406153][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  397.406167][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.406181][   T34]  ? __pfx_kthread+0x10/0x10
[  397.406195][   T34]  ret_from_fork+0x3fc/0x770
[  397.406209][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  397.406225][   T34]  ? __switch_to_asm+0x39/0x70
[  397.406238][   T34]  ? __switch_to_asm+0x33/0x70
[  397.406250][   T34]  ? __pfx_kthread+0x10/0x10
[  397.406264][   T34]  ret_from_fork_asm+0x1a/0x30
[  397.406287][   T34]  </TASK>
[  397.406292][   T34] Sending NMI from CPU 1 to CPUs 0:
[  397.460860][    C0] NMI backtrace for cpu 0
[  397.460874][    C0] CPU: 0 UID: 0 PID: 5880 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  397.460886][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.460893][    C0] Workqueue: bat_events batadv_nc_worker
[  397.460932][    C0] RIP: 0010:lock_acquire+0xf1/0x360
[  397.460948][    C0] Code: 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 65 a8 9c 8d e8 e9 a6 dc 09 65 ff 05 92 44 03 11 45 31 c9 <4c> 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b
[  397.460957][    C0] RSP: 0018:ffffc90003bdf980 EFLAGS: 00000046
[  397.460967][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 3d56846428293900
[  397.460973][    C0] RDX: 0000000000000000 RSI: ffffffff8d9ca865 RDI: ffffffff8be33300
[  397.460980][    C0] RBP: ffffffff8b477462 R08: 0000000000000000 R09: 0000000000000000
[  397.460986][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: 0000000000000002
[  397.460992][    C0] R13: ffffffff8e139e60 R14: 0000000000000000 R15: 0000000000000246
[  397.460999][    C0] FS:  0000000000000000(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  397.461007][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  397.461014][    C0] CR2: 0000001b33104ff8 CR3: 000000010f49e000 CR4: 00000000000006f0
[  397.461046][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  397.461053][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  397.461060][    C0] Call Trace:
[  397.461065][    C0]  <TASK>
[  397.461071][    C0]  ? batadv_nc_worker+0xd2/0x610
[  397.461083][    C0]  ? batadv_nc_worker+0xd2/0x610
[  397.461095][    C0]  batadv_nc_worker+0xef/0x610
[  397.461106][    C0]  ? batadv_nc_worker+0xd2/0x610
[  397.461116][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  397.461127][    C0]  process_scheduled_works+0xae1/0x17b0
[  397.461144][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  397.461156][    C0]  worker_thread+0x8a0/0xda0
[  397.461167][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  397.461182][    C0]  ? __kthread_parkme+0x7b/0x200
[  397.461195][    C0]  kthread+0x711/0x8a0
[  397.461207][    C0]  ? __pfx_worker_thread+0x10/0x10
[  397.461216][    C0]  ? __pfx_kthread+0x10/0x10
[  397.461227][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  397.461238][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.461250][    C0]  ? __pfx_kthread+0x10/0x10
[  397.461261][    C0]  ret_from_fork+0x3fc/0x770
[  397.461272][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  397.461283][    C0]  ? __switch_to_asm+0x39/0x70
[  397.461295][    C0]  ? __switch_to_asm+0x33/0x70
[  397.461306][    C0]  ? __pfx_kthread+0x10/0x10
[  397.461317][    C0]  ret_from_fork_asm+0x1a/0x30
[  397.461332][    C0]  </TASK>
[  397.461864][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  397.554588][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  397.558271][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.562335][   T34] Call Trace:
[  397.563699][   T34]  <TASK>
[  397.564929][   T34]  dump_stack_lvl+0x99/0x250
[  397.566716][   T34]  ? __asan_memcpy+0x40/0x70
[  397.568318][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.570430][   T34]  ? __pfx__printk+0x10/0x10
[  397.572322][   T34]  vpanic+0x281/0x750
[  397.573965][   T34]  ? __pfx_vpanic+0x10/0x10
[  397.575582][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  397.577839][   T34]  ? preempt_schedule+0xae/0xc0
[  397.579837][   T34]  ? preempt_schedule_common+0x83/0xd0
[  397.581899][   T34]  panic+0xb9/0xc0
[  397.583067][   T34]  ? __pfx_panic+0x10/0x10
[  397.584473][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  397.586472][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  397.588685][   T34]  watchdog+0xfd2/0xfe0
[  397.590102][   T34]  ? watchdog+0x1de/0xfe0
[  397.591759][   T34]  kthread+0x711/0x8a0
[  397.593378][   T34]  ? __pfx_watchdog+0x10/0x10
[  397.595178][   T34]  ? __pfx_kthread+0x10/0x10
[  397.596755][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  397.598442][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.600149][   T34]  ? __pfx_kthread+0x10/0x10
[  397.601690][   T34]  ret_from_fork+0x3fc/0x770
[  397.603219][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  397.604885][   T34]  ? __switch_to_asm+0x39/0x70
[  397.606473][   T34]  ? __switch_to_asm+0x33/0x70
[  397.608175][   T34]  ? __pfx_kthread+0x10/0x10
[  397.609954][   T34]  ret_from_fork_asm+0x1a/0x30
[  397.611668][   T34]  </TASK>
[  397.613343][   T34] Kernel Offset: disabled
[  397.614780][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:32:02  Registers:
info registers vcpu 0

CPU#0
RAX=00000000ffffff05 RBX=0000000000000001 RCX=0000000000000003 RDX=0000000000000003
RSI=0000000000000000 RDI=ffff8880237b8000 RBP=0000000000000000 RSP=ffffc90007126948
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90007126b98 R11=ffffffff81ac3880
R12=ffffffffffffff05 R13=0000000000000001 R14=ffff8880237b8b68 R15=ffff8880237b8b10
RIP=ffffffff819d6392 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c230040 CR3=000000002b8ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007fdecfe12ee7 XMM09=0000000000000000 00007fdecfe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888020d60237 R9 =1ffff110041ac046 R10=dffffc0000000000 R11=ffffffff854f6230
R12=dffffc0000000000 R13=ffffffff99afb8c2 R14=ffffffff99df03a0 R15=0000000000000000
RIP=ffffffff854f62ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d68e5df7e8 CR3=00000001318ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81d0947b ffffffff81d0578d
XMM02=ffffffff823cdf24 ffffffff847b8462 XMM03=ffffffff823ce90d ffffffff823cdfac
XMM04=ffffffff823cea74 ffffffff823ce90d XMM05=ffffffff823cdfac ffffffff823cdf24
XMM06=ffffffff823cdc62 ffffffff823cdc0e XMM07=ffffffff823984e5 ffffffff82398498
XMM08=0000000000000000 00007f02a7812ee7 XMM09=0000000000000000 00007f02a7812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
