last executing test programs:

3m24.929015046s ago: executing program 0 (id=721):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0x2000000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x2000c404)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2)

3m24.788398941s ago: executing program 0 (id=728):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0)

3m24.739435404s ago: executing program 0 (id=730):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m24.739203277s ago: executing program 0 (id=731):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

3m23.859947807s ago: executing program 0 (id=733):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r0}, 0x38)

3m23.642386851s ago: executing program 0 (id=739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f0000000240)=r1}, 0x20)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)

3m23.50803734s ago: executing program 32 (id=739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f0000000240)=r1}, 0x20)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)

2m10.865223914s ago: executing program 1 (id=2006):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000300142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

2m10.802959092s ago: executing program 3 (id=2009):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e0080", 0x95}], 0x1}, 0x14)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={0x0, 0x0, 0x10}, 0x18)

2m10.725313692s ago: executing program 3 (id=2012):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x12, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x5, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)

2m10.725143763s ago: executing program 2 (id=2013):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)

2m10.725016658s ago: executing program 3 (id=2014):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x10021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0xa17c, 0xff, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})

2m10.724800681s ago: executing program 2 (id=2015):
socket$kcm(0x11, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8)

2m10.675875263s ago: executing program 1 (id=2016):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0x1c}, @in=@multicast2, 0x3, 0x4, 0x10}]}, 0x38}}, 0x20000000)

2m10.674004812s ago: executing program 3 (id=2017):
r0 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x2)

2m10.562228691s ago: executing program 2 (id=2018):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m10.474310221s ago: executing program 3 (id=2019):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x84, 0x4, 0x4, 0x64}, 0x50)

2m10.474113694s ago: executing program 2 (id=2020):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x3, 0x9, 0x9, 0xfffffff9}]})

2m10.473797495s ago: executing program 3 (id=2021):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001949}, 0x202, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

2m10.413119659s ago: executing program 1 (id=2022):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m10.412761025s ago: executing program 1 (id=2023):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r2, 0x8010743f, 0xf0ff1f00000000)

2m9.578684738s ago: executing program 2 (id=2024):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m2.936398989s ago: executing program 1 (id=2025):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x0, 0x27, 0x0, 0x0)

2m2.935947924s ago: executing program 2 (id=2026):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x4c8c0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

2m2.933073718s ago: executing program 1 (id=2027):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_devices(r2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)

1m54.891331181s ago: executing program 33 (id=2021):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001949}, 0x202, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1m47.886619542s ago: executing program 34 (id=2027):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000036ed91266e02bde419577666e0f4d4e92b684fc7a1e827ed378f80f9d1e0de1103c441243d468c01eccc1879ccb06fa5f19f341251472eaa792f21b25e609ed0f164ac20120156898ee724f3ac070afa4a68ffa67c14e6dab42068bd9c63149d6a7af8c8adacb40ee6accbe400fb7b2fcc1c1b279cbb1f1595a55add87829e7f591a29ba72c4d7c5dd75e1848314dadd93341c1647ffeb6e95d371f8c9548f110fdadc56b932bd7b40152f3f6d5203060d2734a8c6dea644756e817e3b486a4367cd9e3bbac366d95485f4a6981737ac2a89e895df85b59398f7c6debcecce7c425436a4e71731f7a801e09537a271c3c4a73d5f7038392b10eb01b053a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_devices(r2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)

1m47.818810399s ago: executing program 35 (id=2026):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x4c8c0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

1m19.318133418s ago: executing program 4 (id=2117):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0x80000000ffff, 0x8251c, 0x5, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x40003500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000)

1m19.191264318s ago: executing program 4 (id=2119):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0xc1, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x2d, 0x0, 0x88)

1m19.056410251s ago: executing program 4 (id=2124):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x0)

1m18.970661772s ago: executing program 4 (id=2126):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000120001002bbd7000ffdbdf250aa500fd400100000000000000000000000000000600000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="ffffffff"], 0x4c}}, 0x10)

1m18.911732408s ago: executing program 4 (id=2128):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

1m18.771532912s ago: executing program 4 (id=2132):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0xfffc}]}, 0x94)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

1m3.339403905s ago: executing program 36 (id=2132):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0xfffc}]}, 0x94)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

37.549877825s ago: executing program 5 (id=2567):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0)

37.488814255s ago: executing program 5 (id=2570):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000)

37.417317104s ago: executing program 5 (id=2571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0xb, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)

37.368948202s ago: executing program 5 (id=2574):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x130}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

37.205832637s ago: executing program 5 (id=2576):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

35.286476239s ago: executing program 5 (id=2596):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x0)

19.852349507s ago: executing program 37 (id=2596):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x0)

2.146271485s ago: executing program 6 (id=2922):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r3, &(0x7f0000000240)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000007c0)=""/248, 0xf8}], 0x2, &(0x7f0000000900)=""/229, 0xe5}, 0x40000042)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = socket$kcm(0x1e, 0x4, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000200)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1)

1.311782748s ago: executing program 7 (id=2939):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.238459279s ago: executing program 7 (id=2941):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
close(0xffffffffffffffff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.237885106s ago: executing program 6 (id=2942):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xeb, 0x0, 0x0, 0xfc, 0x0, 0x100000001, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x1, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0)

1.066324328s ago: executing program 7 (id=2945):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x4000)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'perf_event'}]}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0)

526.358371ms ago: executing program 8 (id=2948):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0)

470.707908ms ago: executing program 8 (id=2949):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb836d5cecbe8b101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

375.156658ms ago: executing program 8 (id=2950):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a840100001500010200000000000000000a0000098800048014000300776c616e3100000000000000000000000800024052f5e19b140003007767300000000000000000000000000008000140000000010800014000000001140003"], 0x21f4}, 0x1, 0x0, 0x0, 0x2004d004}, 0x8800)

313.145995ms ago: executing program 8 (id=2951):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

305.532803ms ago: executing program 8 (id=2952):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000)

255.48468ms ago: executing program 7 (id=2953):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
close(r0)

254.919669ms ago: executing program 6 (id=2954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x50, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)

176.074807ms ago: executing program 6 (id=2955):
r0 = socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)

175.500189ms ago: executing program 6 (id=2956):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xe, 0x9}, 0x118d2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8], 0x12)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000)
perf_event_open(0x0, 0xffffffffffffffff, 0x10000000000b, 0xffffffffffffffff, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

115.583505ms ago: executing program 8 (id=2957):
socket$key(0xf, 0x3, 0x2)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

55.83141ms ago: executing program 7 (id=2958):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700))

55.43095ms ago: executing program 6 (id=2959):
socket$kcm(0x1e, 0x4, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, 0x0, 0x3406c012)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0x11, 0x2, 0x201, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048080)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)

0s ago: executing program 7 (id=2960):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61929' (ED25519) to the list of known hosts.
syzkaller login: [   56.149933][ T5831] cgroup: Unknown subsys name 'net'
[   56.287881][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.295090][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.497874][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.866575][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.871039][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.876435][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.894540][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.899124][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.902575][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.906171][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.911165][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.914805][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.948795][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.000017][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.003960][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.007269][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.011141][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.016734][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.286298][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.419451][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.453818][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.457391][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.460475][ T5851] bridge_slave_0: entered allmulticast mode
[   64.465498][ T5851] bridge_slave_0: entered promiscuous mode
[   64.470347][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   64.497420][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.500354][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.503991][ T5851] bridge_slave_1: entered allmulticast mode
[   64.507927][ T5851] bridge_slave_1: entered promiscuous mode
[   64.588677][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.621919][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.678661][ T5851] team0: Port device team_slave_0 added
[   64.684118][ T5851] team0: Port device team_slave_1 added
[   64.686816][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.689674][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.693603][ T5847] bridge_slave_0: entered allmulticast mode
[   64.697476][ T5847] bridge_slave_0: entered promiscuous mode
[   64.743041][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.746026][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.748977][ T5847] bridge_slave_1: entered allmulticast mode
[   64.754125][ T5847] bridge_slave_1: entered promiscuous mode
[   64.773969][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.776982][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.779837][ T5856] bridge_slave_0: entered allmulticast mode
[   64.784352][ T5856] bridge_slave_0: entered promiscuous mode
[   64.789487][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.794392][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.805000][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.811879][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.817398][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.827385][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.845636][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.848875][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.852515][ T5856] bridge_slave_1: entered allmulticast mode
[   64.856405][ T5856] bridge_slave_1: entered promiscuous mode
[   64.898227][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.919955][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.928253][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.936167][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.013418][ T5847] team0: Port device team_slave_0 added
[   65.031761][ T5856] team0: Port device team_slave_0 added
[   65.041376][ T5851] hsr_slave_0: entered promiscuous mode
[   65.045618][ T5851] hsr_slave_1: entered promiscuous mode
[   65.051802][ T5847] team0: Port device team_slave_1 added
[   65.058399][ T5856] team0: Port device team_slave_1 added
[   65.128226][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.131071][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.141120][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.147944][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.150728][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.161225][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.180620][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.184250][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.193750][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.203475][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.205770][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.215934][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.310687][ T5847] hsr_slave_0: entered promiscuous mode
[   65.314366][ T5847] hsr_slave_1: entered promiscuous mode
[   65.317465][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   65.319982][ T5847] Cannot create hsr debugfs directory
[   65.348235][ T5856] hsr_slave_0: entered promiscuous mode
[   65.351299][ T5856] hsr_slave_1: entered promiscuous mode
[   65.361128][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.363829][ T5856] Cannot create hsr debugfs directory
[   65.625120][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.641792][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.654524][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.681207][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.748212][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.755346][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.764708][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.779064][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.852613][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.859153][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.876970][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.890050][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.963681][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.995631][ T5854] Bluetooth: hci1: command tx timeout
[   66.002435][ T5854] Bluetooth: hci0: command tx timeout
[   66.011706][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.026850][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.029800][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.045836][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.048109][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.072625][ T5854] Bluetooth: hci2: command tx timeout
[   66.105212][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.135727][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.146265][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.149022][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.171989][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.175039][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.185828][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.244002][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.286180][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.296690][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.299674][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.315023][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.317374][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.357915][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.396607][ T5851] veth0_vlan: entered promiscuous mode
[   66.404021][ T5851] veth1_vlan: entered promiscuous mode
[   66.424268][ T5851] veth0_macvtap: entered promiscuous mode
[   66.428330][ T5851] veth1_macvtap: entered promiscuous mode
[   66.440975][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.449422][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.459314][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.464829][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.467681][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.470333][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.505453][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.548601][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.576369][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.579721][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.604867][ T5856] veth0_vlan: entered promiscuous mode
[   66.626362][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.631402][ T5856] veth1_vlan: entered promiscuous mode
[   66.634631][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.674653][ T5847] veth0_vlan: entered promiscuous mode
[   66.688946][ T5847] veth1_vlan: entered promiscuous mode
[   66.730069][ T5856] veth0_macvtap: entered promiscuous mode
[   66.731467][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.749768][ T5856] veth1_macvtap: entered promiscuous mode
[   66.756111][ T5847] veth0_macvtap: entered promiscuous mode
[   66.785427][ T5847] veth1_macvtap: entered promiscuous mode
[   66.807078][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.830178][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.850211][   T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.854461][   T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.860373][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.870313][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.882829][   T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.885570][   T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.903336][   T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.921535][   T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.928018][   T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.945837][   T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.004235][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.008365][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.041267][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.045328][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.083147][  T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.087318][  T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.141337][  T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.151801][  T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.255458][ T5854] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[   67.422734][ T5934] Zero length message leads to an empty skb
[   67.460642][ T5936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.714428][ T5952] netlink: 'syz.1.19': attribute type 16 has an invalid length.
[   67.719182][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'.
[   68.077588][ T5854] Bluetooth: hci0: command tx timeout
[   68.077620][   T55] Bluetooth: hci1: command tx timeout
[   68.144527][ T5972] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.30'.
[   68.147370][ T5972] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   68.153564][   T55] Bluetooth: hci2: command tx timeout
[   68.357677][ T5984] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.36'.
[   68.367738][ T5978] netlink: 'syz.1.33': attribute type 10 has an invalid length.
[   68.416505][ T5986] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   68.511680][ T5992] netlink: 'syz.0.41': attribute type 4 has an invalid length.
[   68.519884][ T5992] netlink: 'syz.0.41': attribute type 2 has an invalid length.
[   68.526855][ T5992] netlink: 199408 bytes leftover after parsing attributes in process `syz.0.41'.
[   68.687911][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'.
[   68.706060][ T6008] warning: `syz.2.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.191166][    C0] hrtimer: interrupt took 36700 ns
[   69.229229][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'.
[   69.281450][ T6038] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.61'.
[   69.586692][ T6040] sit0: entered allmulticast mode
[   70.153544][   T55] Bluetooth: hci0: command tx timeout
[   70.162510][   T55] Bluetooth: hci1: command tx timeout
[   70.242976][   T55] Bluetooth: hci2: command tx timeout
[   70.907505][ T6092] veth0_vlan: entered allmulticast mode
[   71.169723][ T6092] veth0_vlan: left promiscuous mode
[   71.389438][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.392668][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.745004][ T6092] veth0_vlan: entered promiscuous mode
[   72.030351][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.234925][   T55] Bluetooth: hci1: command tx timeout
[   72.237115][   T55] Bluetooth: hci0: command tx timeout
[   72.270861][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'.
[   72.315636][ T5854] Bluetooth: hci2: command tx timeout
[   72.367619][ T6128] openvswitch: netlink: Geneve option length err (len 612, max 255).
[   72.370650][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[   72.511500][ T6133] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.547839][ T6133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.617521][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'.
[   72.627183][ T6143] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   72.964625][ T6161] netlink: 'syz.0.121': attribute type 8 has an invalid length.
[   73.056310][ T6167] netlink: 'syz.0.124': attribute type 11 has an invalid length.
[   73.064768][ T6167] __nla_validate_parse: 1 callbacks suppressed
[   73.064778][ T6167] netlink: 148 bytes leftover after parsing attributes in process `syz.0.124'.
[   73.088504][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[   73.095157][ T6169] netlink: 6 bytes leftover after parsing attributes in process `syz.2.125'.
[   73.113196][ T6173] netlink: 'syz.0.127': attribute type 4 has an invalid length.
[   73.115738][ T6173] netlink: 152 bytes leftover after parsing attributes in process `syz.0.127'.
[   73.130240][ T6173] netlink: 6 bytes leftover after parsing attributes in process `syz.0.127'.
[   73.135662][ T6173] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.416243][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[   73.707133][ T5854] Bluetooth: hci1: unexpected event 0x18 length: 151 > 23
[   73.898813][ T6196] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[   73.981199][ T6204] netlink: 188 bytes leftover after parsing attributes in process `syz.1.140'.
[   74.015910][ T6206] netlink: 'syz.0.143': attribute type 16 has an invalid length.
[   74.019007][ T6206] netlink: 156 bytes leftover after parsing attributes in process `syz.0.143'.
[   74.091688][ T6212] netlink: 'syz.0.146': attribute type 64 has an invalid length.
[   74.313050][ T5854] Bluetooth: hci1: command tx timeout
[   75.148774][ T6240] netlink: 'syz.1.160': attribute type 21 has an invalid length.
[   75.168177][ T6240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.160'.
[   75.178774][ T6240] netlink: 'syz.1.160': attribute type 1 has an invalid length.
[   75.225319][ T6250] netlink: 'syz.0.163': attribute type 5 has an invalid length.
[   75.441099][ T6264] netlink: 'syz.0.170': attribute type 4 has an invalid length.
[   75.444540][ T6264] netlink: 152 bytes leftover after parsing attributes in process `syz.0.170'.
[   75.448555][ T6264] .`: renamed from bond0
[   76.178433][   T33] audit: type=1107 audit(1758084039.516:2): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   78.109815][ T6355] validate_nla: 3 callbacks suppressed
[   78.109852][ T6355] netlink: 'syz.2.207': attribute type 29 has an invalid length.
[   78.118692][ T6355] netlink: 'syz.2.207': attribute type 29 has an invalid length.
[   78.519394][ T6371] dummy0: entered promiscuous mode
[   78.521815][ T6371] dummy0: entered allmulticast mode
[   78.668050][ T6379] netlink: 'syz.2.219': attribute type 21 has an invalid length.
[   78.770596][ T6385] __nla_validate_parse: 5 callbacks suppressed
[   78.770616][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'.
[   79.081046][ T6397] netlink: 'syz.2.227': attribute type 7 has an invalid length.
[   79.323162][ T6409] syz.2.233 uses obsolete (PF_INET,SOCK_PACKET)
[   81.747606][ T6426] Driver unsupported XDP return value 0 on prog  (id 77) dev N/A, expect packet loss!
[   81.800044][ T6429] netlink: 'syz.2.241': attribute type 4 has an invalid length.
[   81.878982][ T6432] openvswitch: netlink: IP tunnel dst address not specified
[   82.037580][ T6442] netlink: 'syz.2.247': attribute type 1 has an invalid length.
[   82.040216][ T6442] netlink: 'syz.2.247': attribute type 1 has an invalid length.
[   82.109854][ T6448] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.250'.
[   82.266782][ T6458] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[   82.817107][ T6484] wg2: entered promiscuous mode
[   82.824590][ T6484] wg2: entered allmulticast mode
[   82.837222][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'.
[   82.866012][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[   83.050485][ T6501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.444333][ T6513] netlink: 'syz.0.278': attribute type 21 has an invalid length.
[   83.449018][ T6513] netlink: 212256 bytes leftover after parsing attributes in process `syz.0.278'.
[   83.466596][ T6513] netlink: zone id is out of range
[   83.468402][ T6513] netlink: zone id is out of range
[   83.470283][ T6513] netlink: zone id is out of range
[   83.471954][ T6513] netlink: zone id is out of range
[   83.483414][ T6513] netlink: zone id is out of range
[   83.488889][ T6513] netlink: zone id is out of range
[   83.490552][ T6513] netlink: zone id is out of range
[   83.493752][ T6513] netlink: zone id is out of range
[   84.137117][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[   84.555870][ T6540] ]X: renamed from veth0_vlan (while UP)
[   84.750690][ T6547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.167195][ T6554] netlink: 152 bytes leftover after parsing attributes in process `syz.1.295'.
[   85.170534][ T6554] tc_dump_action: action bad kind
[   85.347052][ T6560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.298'.
[   85.351360][ T6558] netlink: 'syz.1.297': attribute type 21 has an invalid length.
[   85.355836][ T6560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.298'.
[   85.360034][ T6558] netlink: 128 bytes leftover after parsing attributes in process `syz.1.297'.
[   85.364129][ T6560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.298'.
[   85.372558][ T6558] netlink: 'syz.1.297': attribute type 5 has an invalid length.
[   85.375384][ T6558] netlink: 'syz.1.297': attribute type 6 has an invalid length.
[   85.390560][ T6558] netlink: 3 bytes leftover after parsing attributes in process `syz.1.297'.
[   85.439316][ T6562] sit0: entered promiscuous mode
[   85.441354][ T6562] sit0: entered allmulticast mode
[   86.634097][    T9] cfg80211: failed to load regulatory.db
[   86.751825][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1039196531 wd_nsec: 1039209578
[   87.241684][ T6582] netlink: 10 bytes leftover after parsing attributes in process `syz.0.305'.
[   87.304993][ T6586] netlink: 'syz.0.307': attribute type 9 has an invalid length.
[   87.307850][ T6586] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.307'.
[   87.571129][ T6596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.312'.
[   88.639441][ T6607] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.653914][ T6607] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.979440][ T6633] =======================================================
[   89.979440][ T6633] WARNING: The mand mount option has been deprecated and
[   89.979440][ T6633]          and is ignored by this kernel. Remove the mand
[   89.979440][ T6633]          option from the mount to silence this warning.
[   89.979440][ T6633] =======================================================
[   90.694553][ T6647] __nla_validate_parse: 1 callbacks suppressed
[   90.694571][ T6647] netlink: 830 bytes leftover after parsing attributes in process `syz.1.333'.
[   91.050603][ T6666] netlink: 'syz.1.340': attribute type 4 has an invalid length.
[   91.061622][ T6666] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.340'.
[   91.586028][ T6675] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[   92.083026][ T6691] netlink: 26 bytes leftover after parsing attributes in process `syz.2.353'.
[   92.129716][ T6695] netlink: 'syz.1.355': attribute type 5 has an invalid length.
[   92.390485][ T6704] netlink: 'syz.1.359': attribute type 1 has an invalid length.
[   92.404517][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'.
[   92.609333][ T6712] netlink: 184 bytes leftover after parsing attributes in process `syz.0.362'.
[   92.815021][ T6726] netlink: 'syz.2.369': attribute type 5 has an invalid length.
[   92.817915][ T6726] netlink: 'syz.2.369': attribute type 5 has an invalid length.
[   92.968882][ T5854] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[   94.898334][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'.
[   95.038088][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[   95.072569][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'.
[   95.095113][ T6760] netlink: 'syz.1.384': attribute type 21 has an invalid length.
[   95.098845][ T6760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.384'.
[   95.180507][ T6764] netlink: 56 bytes leftover after parsing attributes in process `syz.1.385'.
[   95.530167][ T6776] netlink: 'syz.0.390': attribute type 3 has an invalid length.
[   95.535768][ T6776] netlink: 'syz.0.390': attribute type 1 has an invalid length.
[   95.542482][ T6776] netlink: 201352 bytes leftover after parsing attributes in process `syz.0.390'.
[   97.361606][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'.
[   97.749068][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   98.935947][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.432'.
[   99.975972][ T6885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'.
[   99.980433][ T6885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'.
[   99.986613][ T6885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'.
[  100.069782][ T6889] net_ratelimit: 6 callbacks suppressed
[  100.069809][ T6889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.519483][ T6909] netlink: 'syz.0.451': attribute type 2 has an invalid length.
[  100.522762][ T6909] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.451'.
[  100.592048][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'.
[  100.654678][ T6920] netlink: 830 bytes leftover after parsing attributes in process `syz.2.457'.
[  100.880599][ T6938] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.988899][ T6946] syzkaller0: entered promiscuous mode
[  100.988973][ T6946] syzkaller0: entered allmulticast mode
[  101.068743][ T6938] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.714044][ T6964] openvswitch: netlink: Duplicate or invalid key (type 0).
[  101.717301][ T6964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.427911][ T6992] netlink: 'syz.2.484': attribute type 10 has an invalid length.
[  102.445992][ T6992] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  102.450925][ T6992] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  102.458883][ T6992] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  102.744924][ T7004] netlink: 14 bytes leftover after parsing attributes in process `syz.2.489'.
[  102.973832][ T7013] netlink: 14 bytes leftover after parsing attributes in process `syz.1.493'.
[  103.120118][ T7024] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  103.135527][ T7024] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  103.187438][ T7027] netlink: 14 bytes leftover after parsing attributes in process `syz.0.500'.
[  103.190941][ T7027] hsr0: entered promiscuous mode
[  103.194393][ T7027] hsr0: entered allmulticast mode
[  103.196577][ T7027] hsr_slave_0: entered allmulticast mode
[  103.198905][ T7027] hsr_slave_1: entered allmulticast mode
[  103.680638][ T7046] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[  103.698917][ T7046] netlink: 'syz.0.508': attribute type 2 has an invalid length.
[  103.718404][ T7046] netlink: 'syz.0.508': attribute type 4 has an invalid length.
[  103.729295][ T7046] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[  103.738862][ T7046] netlink: 'syz.0.508': attribute type 2 has an invalid length.
[  103.754657][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[  103.767722][ T7046] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.508'.
[  103.787910][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[  104.036245][ T7054] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  104.231359][ T7069] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  104.293652][ T7073] netlink: 'syz.0.520': attribute type 4 has an invalid length.
[  104.333365][ T7076] xt_socket: unknown flags 0x20
[  104.521188][ T7093] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.528'.
[  106.284567][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'.
[  106.977077][ T7115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.300886][ T7132] netlink: 196 bytes leftover after parsing attributes in process `syz.1.545'.
[  108.586504][ T7146] netlink: 'syz.0.551': attribute type 39 has an invalid length.
[  109.415455][ T7172] netlink: 'syz.2.563': attribute type 10 has an invalid length.
[  109.533283][ T7189] netlink: 'syz.1.572': attribute type 46 has an invalid length.
[  109.536803][ T7189] netlink: 'syz.1.572': attribute type 19 has an invalid length.
[  109.539555][ T7186] syzkaller0: entered promiscuous mode
[  109.541576][ T7186] syzkaller0: entered allmulticast mode
[  109.544474][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'.
[  109.833107][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[  111.883222][ T7235] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.593'.
[  111.990789][ T7246] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.598'.
[  112.246102][ T7257] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  113.036626][ T7284] netlink: 'syz.1.614': attribute type 10 has an invalid length.
[  113.893527][ T7284] syz.1.614 (7284) used greatest stack depth: 19448 bytes left
[  114.490204][ T7310] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.624'.
[  114.921815][ T7303] netlink: 156 bytes leftover after parsing attributes in process `syz.0.617'.
[  115.075784][ T7316] netlink: 168 bytes leftover after parsing attributes in process `syz.0.627'.
[  115.604465][ T7352] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.644'.
[  115.607281][ T7351] xt_limit: Overflow, try lower: 271964/0
[  115.680612][ T7356] sit0: entered allmulticast mode
[  115.716813][ T7361] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.649'.
[  115.751689][ T7362] sit0: entered promiscuous mode
[  115.940119][   T55] Bluetooth: hci2: ISO packet too small
[  116.196620][ T7380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.657'.
[  116.640916][ T7382] netlink: 'syz.1.658': attribute type 2 has an invalid length.
[  116.645260][ T7382] netlink: 12374 bytes leftover after parsing attributes in process `syz.1.658'.
[  116.773460][ T7393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.663'.
[  116.846373][ T7400] netlink: 64 bytes leftover after parsing attributes in process `syz.2.666'.
[  117.234618][ T7426] netlink: 'syz.2.679': attribute type 2 has an invalid length.
[  117.237757][ T7426] netlink: 'syz.2.679': attribute type 8 has an invalid length.
[  117.240815][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.679'.
[  119.785703][ T7498] : entered promiscuous mode
[  120.273985][ T7510] __nla_validate_parse: 2 callbacks suppressed
[  120.274003][ T7510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.715'.
[  120.297432][ T7510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.715'.
[  120.302558][ T7510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.715'.
[  120.351890][ T7520] dummy0: mtu less than device minimum
[  120.438767][ T7528] netlink: 360 bytes leftover after parsing attributes in process `syz.2.725'.
[  121.505466][ T7548] netlink: 277 bytes leftover after parsing attributes in process `syz.1.734'.
[  122.027390][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.032008][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.038605][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.041751][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.045908][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.186309][ T7570] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.745'.
[  122.213907][ T7568] chnl_net:caif_netlink_parms(): no params data found
[  122.293004][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.297815][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.301260][ T7568] bridge_slave_0: entered allmulticast mode
[  122.312994][ T7568] bridge_slave_0: entered promiscuous mode
[  122.320117][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.323914][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.329709][ T7568] bridge_slave_1: entered allmulticast mode
[  122.336683][ T7568] bridge_slave_1: entered promiscuous mode
[  122.408783][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.417732][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.448781][ T7568] team0: Port device team_slave_0 added
[  122.453539][ T7568] team0: Port device team_slave_1 added
[  122.484937][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.487489][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.496318][ T7568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.504846][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.507733][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.516628][ T7568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.556972][ T7568] hsr_slave_0: entered promiscuous mode
[  122.560354][ T7568] hsr_slave_1: entered promiscuous mode
[  122.563282][ T7568] debugfs: 'hsr0' already exists in 'hsr'
[  122.565633][ T7568] Cannot create hsr debugfs directory
[  122.709666][ T7568] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.718626][ T7568] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.724207][ T7568] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.730972][ T7568] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.820375][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.842013][ T7568] 8021q: adding VLAN 0 to HW filter on device team0
[  122.851171][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.853844][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.868188][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.871159][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.041085][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'.
[  123.049960][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'.
[  123.072900][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'.
[  123.100747][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.142065][ T7568] veth0_vlan: entered promiscuous mode
[  123.150056][ T7568] veth1_vlan: entered promiscuous mode
[  123.174310][ T7568] veth0_macvtap: entered promiscuous mode
[  123.178351][ T7568] veth1_macvtap: entered promiscuous mode
[  123.193907][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.206169][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.218655][ T5716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.310239][ T5716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.341355][ T5716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.357927][ T5716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.399462][  T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.410930][  T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.438923][  T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.441931][  T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.741225][ T7630] netlink: 'syz.2.760': attribute type 21 has an invalid length.
[  124.083336][ T5854] Bluetooth: hci1: command tx timeout
[  124.121022][ T7647] netlink: 798 bytes leftover after parsing attributes in process `syz.2.764'.
[  124.197696][ T7654] netlink: 'syz.1.767': attribute type 15 has an invalid length.
[  124.497013][ T7669] nbd: must specify a size in bytes for the device
[  124.991187][ T7682] netlink: 'syz.1.780': attribute type 10 has an invalid length.
[  125.174181][ T7684] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.184479][ T7684] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.449327][ T7691] __nla_validate_parse: 9 callbacks suppressed
[  125.449339][ T7691] netlink: 116572 bytes leftover after parsing attributes in process `syz.2.782'.
[  126.152375][ T5854] Bluetooth: hci1: command tx timeout
[  126.280747][ T7718] netlink: 100 bytes leftover after parsing attributes in process `syz.1.796'.
[  126.581097][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[  127.095450][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'.
[  127.325916][ T7761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.817'.
[  127.337783][ T7759] netlink: 'syz.2.815': attribute type 10 has an invalid length.
[  127.508408][ T7759] team0: Port device geneve1 added
[  127.623643][ T7777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.823'.
[  127.627691][ T7775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.823'.
[  127.661539][ T7759] syz.2.815 (7759) used greatest stack depth: 17848 bytes left
[  127.821463][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  127.844156][ T7788] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  127.847006][ T7788] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  128.250354][ T5854] Bluetooth: hci1: command tx timeout
[  128.817655][ T7833] netlink: 128 bytes leftover after parsing attributes in process `syz.1.850'.
[  128.868576][ T7834] netlink: 'syz.2.849': attribute type 2 has an invalid length.
[  128.872028][ T7834] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.849'.
[  128.896947][ T7834] nbd: must specify a device to reconfigure
[  129.141971][ T7848] tap0: tun_chr_ioctl cmd 1074025678
[  129.149685][ T7848] tap0: group set to 0
[  129.213912][ T7851] erspan0 speed is unknown, defaulting to 1000
[  129.217557][ T7851] erspan0 speed is unknown, defaulting to 1000
[  129.226683][ T7851] erspan0 speed is unknown, defaulting to 1000
[  129.254527][ T7851] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  129.277812][ T7851] erspan0 speed is unknown, defaulting to 1000
[  129.287018][ T7851] erspan0 speed is unknown, defaulting to 1000
[  129.289264][ T7853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.859'.
[  129.291601][ T7851] erspan0 speed is unknown, defaulting to 1000
[  129.304274][ T7851] erspan0 speed is unknown, defaulting to 1000
[  129.935651][ T7870] netlink: 'syz.2.866': attribute type 11 has an invalid length.
[  130.005344][ T7875] netlink: 'syz.3.868': attribute type 1 has an invalid length.
[  130.075287][ T7879] netlink: 'syz.2.869': attribute type 11 has an invalid length.
[  130.090863][ T7879] netlink: 'syz.2.869': attribute type 15 has an invalid length.
[  130.101089][ T7879] netlink: 'syz.2.869': attribute type 16 has an invalid length.
[  130.107592][ T7879] netlink: 'syz.2.869': attribute type 21 has an invalid length.
[  130.110756][ T7879] netlink: 'syz.2.869': attribute type 25 has an invalid length.
[  130.118495][ T7879] netlink: 'syz.2.869': attribute type 27 has an invalid length.
[  130.121633][ T7879] netlink: 'syz.2.869': attribute type 28 has an invalid length.
[  130.312579][ T5854] Bluetooth: hci1: command tx timeout
[  130.512420][ T7905] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  130.516334][ T7905] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  130.649379][ T7915] netlink: 830 bytes leftover after parsing attributes in process `syz.3.888'.
[  130.927409][ T7936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.897'.
[  131.423191][ T7971] netlink: del zone limit has 4 unknown bytes
[  131.625580][ T7986] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component
[  131.733201][ T5854] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  131.911187][ T8004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.928'.
[  131.955214][ T8008] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.930'.
[  132.018449][ T5854] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  132.427113][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.941'.
[  132.436157][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.941'.
[  132.582846][ T8044] netlink: 64967 bytes leftover after parsing attributes in process `syz.1.948'.
[  132.725566][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.728112][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.403911][ T8079] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.965'.
[  133.427198][ T8079] bridge0: entered promiscuous mode
[  133.429259][ T8079] bridge0: entered allmulticast mode
[  133.449138][ T8082] netlink: 5 bytes leftover after parsing attributes in process `syz.2.966'.
[  133.580727][ T8088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'.
[  136.347218][ T8108] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  136.353264][ T8111] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  136.824452][ T5716] syzkaller0: tun_net_xmit 76
[  136.827005][ T5716] syzkaller0: tun_net_xmit 48
[  136.830910][ T8147] syzkaller0: tun_net_xmit 1280
[  136.833677][ T8147] syzkaller0: create flow: hash 1413377309 index 1
[  136.852517][ T5314] syzkaller0: tun_net_xmit 76
[  136.863862][ T8146] syzkaller0: delete flow: hash 1413377309 index 1
[  138.037973][ T8173] validate_nla: 7 callbacks suppressed
[  138.037993][ T8173] netlink: 'syz.2.1004': attribute type 7 has an invalid length.
[  138.063061][ T8173] __nla_validate_parse: 4 callbacks suppressed
[  138.063071][ T8173] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1004'.
[  138.144337][ T8181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1006'.
[  139.525704][ T8229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1027'.
[  140.675799][ T8273] netlink: 'syz.2.1048': attribute type 10 has an invalid length.
[  140.679606][ T8273] lo: entered promiscuous mode
[  140.689071][ T8273] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  140.694396][ T8275] netlink: 'syz.1.1049': attribute type 2 has an invalid length.
[  140.698335][ T8275] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1049'.
[  141.820743][ T8320] : renamed from wg2 (while UP)
[  141.935350][ T8311] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1066'.
[  141.939495][ T8311] bond_slave_0: entered promiscuous mode
[  141.942289][ T8311] bond_slave_1: entered promiscuous mode
[  142.386736][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1085'.
[  142.390805][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1085'.
[  142.722463][ T5854] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  142.869293][ T8387] netlink: 'syz.1.1102': attribute type 27 has an invalid length.
[  142.876972][ T8387] netlink: 'syz.1.1102': attribute type 3 has an invalid length.
[  142.879527][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1102'.
[  143.638435][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'.
[  143.733061][ T5854] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  144.035664][ T8456] syzkaller0: entered promiscuous mode
[  144.040015][ T8456] syzkaller0: entered allmulticast mode
[  144.233887][ T8470] netlink: 'syz.3.1142': attribute type 3 has an invalid length.
[  144.239381][ T8470] netlink: 'syz.3.1142': attribute type 1 has an invalid length.
[  144.246937][ T8470] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1142'.
[  144.267614][ T8470] netlink: 'syz.3.1142': attribute type 8 has an invalid length.
[  144.461576][ T8482] delete_channel: no stack
[  144.509387][ T8485] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1149'.
[  144.512947][ T8485] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1149'.
[  145.024536][ T8522] netlink: 'syz.3.1167': attribute type 21 has an invalid length.
[  145.029197][ T8522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1167'.
[  145.113930][ T8529] netlink: 'syz.3.1170': attribute type 2 has an invalid length.
[  145.117171][ T8529] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1170'.
[  145.597937][ T8566] netlink: 'syz.3.1187': attribute type 11 has an invalid length.
[  145.600672][ T8566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1187'.
[  145.909412][ T8581] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1194'.
[  145.971506][ T8578] delete_channel: no stack
[  145.971882][ T8585] netlink: 'syz.3.1196': attribute type 41 has an invalid length.
[  145.977025][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1196'.
[  146.050702][ T8589] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1198'.
[  146.240504][ T8601] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  146.243979][ T8601] netlink: 'syz.2.1205': attribute type 2 has an invalid length.
[  148.100994][ T8642] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  148.104079][ T8642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.138025][ T8644] netlink: 'syz.2.1224': attribute type 6 has an invalid length.
[  148.668992][ T8675] __nla_validate_parse: 6 callbacks suppressed
[  148.669012][ T8675] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.1239'.
[  150.941378][ T8702] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  151.183737][ T8730] validate_nla: 2 callbacks suppressed
[  151.183794][ T8730] netlink: 'syz.2.1264': attribute type 5 has an invalid length.
[  152.237610][ T5854] Bluetooth: hci0: ACL packet too small
[  152.328806][ T8755] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1274'.
[  152.336010][ T8754] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1274'.
[  152.341511][ T8754] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1274'.
[  152.995998][ T8777] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.1285'.
[  153.011274][ T8777] openvswitch: netlink: Message has 6 unknown bytes.
[  153.122896][ T8780] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.126599][ T8780] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.951181][ T8806] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1297'.
[  154.585827][ T8837] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1311'.
[  154.633556][ T8839] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1312'.
[  155.610509][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'.
[  155.615866][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'.
[  155.619435][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'.
[  155.959277][ T8906] syzkaller1: tun_chr_ioctl cmd 1074025673
[  156.072652][ T8909] netlink: 'syz.2.1343': attribute type 64 has an invalid length.
[  156.466360][ T8925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.468934][ T8925] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.475291][ T8925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.477880][ T8925] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.640421][ T8931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.940092][ T8953] netlink: 'syz.2.1364': attribute type 10 has an invalid length.
[  156.951093][ T8953] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1364'.
[  156.972430][ T8953] team0: entered promiscuous mode
[  156.974509][ T8953] team_slave_0: entered promiscuous mode
[  156.977114][ T8953] team_slave_1: entered promiscuous mode
[  156.979725][ T8953] geneve1: entered promiscuous mode
[  156.996718][ T8953] bridge0: port 3(team0) entered blocking state
[  156.999556][ T8953] bridge0: port 3(team0) entered disabled state
[  157.006725][ T8953] team0: entered allmulticast mode
[  157.010228][ T8953] team_slave_0: entered allmulticast mode
[  157.012712][ T8953] team_slave_1: entered allmulticast mode
[  157.014902][ T8953] geneve1: entered allmulticast mode
[  157.020319][ T8953] bridge0: port 3(team0) entered blocking state
[  157.022747][ T8953] bridge0: port 3(team0) entered forwarding state
[  157.176076][ T8965] erspan0 speed is unknown, defaulting to 1000
[  157.660129][ T9005] netlink: 'syz.1.1384': attribute type 10 has an invalid length.
[  157.664761][ T9005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1384'.
[  157.667977][ T9005] dummy0: left allmulticast mode
[  157.671721][ T9005] bridge0: port 3(dummy0) entered blocking state
[  157.676201][ T9005] bridge0: port 3(dummy0) entered disabled state
[  157.679190][ T9005] dummy0: entered allmulticast mode
[  157.694758][ T9005] bridge0: port 3(dummy0) entered blocking state
[  157.697630][ T9005] bridge0: port 3(dummy0) entered forwarding state
[  157.770396][ T9011] bridge0: port 4(ip6gretap0) entered blocking state
[  157.779788][ T9011] bridge0: port 4(ip6gretap0) entered disabled state
[  157.785081][ T9011] ip6gretap0: entered allmulticast mode
[  157.788262][ T9011] ip6gretap0: entered promiscuous mode
[  157.791372][ T9011] bridge0: port 4(ip6gretap0) entered blocking state
[  157.794053][ T9011] bridge0: port 4(ip6gretap0) entered forwarding state
[  158.054497][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'.
[  158.065278][ T9029] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  158.068995][ T9029] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.029981][ T9080] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1415'.
[  159.745453][ T9132] netlink: 'syz.3.1437': attribute type 1 has an invalid length.
[  160.438193][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.286649][ T9216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1471'.
[  163.920018][ T9240] netlink: 'syz.2.1481': attribute type 12 has an invalid length.
[  163.928772][ T9240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1481'.
[  164.021558][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'.
[  164.032308][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'.
[  165.424950][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'.
[  165.767244][ T9304] netlink: 'syz.2.1511': attribute type 10 has an invalid length.
[  165.777694][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.783401][ T9304] bond0: entered promiscuous mode
[  165.787344][ T9304] bond_slave_0: entered promiscuous mode
[  165.789571][ T9304] bond_slave_1: entered promiscuous mode
[  165.791567][ T9304] bond0: entered allmulticast mode
[  165.793710][ T9304] bond_slave_0: entered allmulticast mode
[  165.795688][ T9304] bond_slave_1: entered allmulticast mode
[  165.798323][ T9304] team0: Port device bond0 added
[  165.849379][ T9306] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1512'.
[  165.964079][ T9310] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1514'.
[  167.380661][ T9386] netlink: 'syz.3.1547': attribute type 10 has an invalid length.
[  167.387776][ T9386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1547'.
[  167.392515][ T9386] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  167.397395][ T9386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.639427][ T9404] netlink: 'syz.1.1555': attribute type 10 has an invalid length.
[  167.770313][ T9406] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1557'.
[  167.858200][ T9410] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  167.987712][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'.
[  168.806412][   T33] audit: type=1107 audit(1758084132.146:3): pid=9441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  169.152660][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'.
[  169.334871][ T9461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1581'.
[  169.804601][ T5854] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  170.000870][ T9477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1588'.
[  170.014638][ T9478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1588'.
[  170.018616][ T9477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1588'.
[  170.042869][ T9443] erspan0 speed is unknown, defaulting to 1000
[  170.806265][ T9519] netlink: 'syz.1.1607': attribute type 21 has an invalid length.
[  170.809271][ T9519] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1607'.
[  171.832510][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  171.850993][ T9555] bridge0: port 3(team0) entered disabled state
[  171.853783][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.856886][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.867151][ T9555] bridge0: entered allmulticast mode
[  172.847097][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1632'.
[  173.667792][ T9633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1656'.
[  174.447849][ T9688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1673'.
[  174.610962][ T9696] tap0: tun_chr_ioctl cmd 1074025677
[  174.621129][ T9696] tap0: linktype set to 774
[  174.798601][ T9707] netlink: 'syz.2.1684': attribute type 10 has an invalid length.
[  174.920861][ T9708] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1684'.
[  174.994722][ T9707] team0 (unregistering): left allmulticast mode
[  174.997326][ T9707] team_slave_0: left allmulticast mode
[  174.999484][ T9707] team_slave_1: left allmulticast mode
[  175.001671][ T9707] geneve1: left allmulticast mode
[  175.006241][ T9707] bond0: left allmulticast mode
[  175.008248][ T9707] bond_slave_0: left allmulticast mode
[  175.010432][ T9707] bond_slave_1: left allmulticast mode
[  175.012848][ T9707] bridge0: port 3(team0) entered disabled state
[  175.020079][ T9707] team_slave_0: left promiscuous mode
[  175.031433][ T9707] team0 (unregistering): Port device team_slave_0 removed
[  175.034767][ T9707] team_slave_1: left promiscuous mode
[  175.045146][ T9707] team0 (unregistering): Port device team_slave_1 removed
[  175.048320][ T9707] geneve1: left promiscuous mode
[  175.058051][ T9707] team0 (unregistering): Port device geneve1 removed
[  175.060979][ T9707] bond0: left promiscuous mode
[  175.064053][ T9707] bond_slave_0: left promiscuous mode
[  175.066348][ T9707] bond_slave_1: left promiscuous mode
[  175.075650][ T9707] team0 (unregistering): Port device bond0 removed
[  175.161428][ T9714] xt_l2tp: v2 sid > 0xffff: 131072
[  175.414924][ T9726] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  175.419177][ T9726] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.835197][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1700'.
[  177.126702][ T9789] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  177.508105][ T5854] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  179.384866][ T9831] netlink: 'syz.3.1738': attribute type 1 has an invalid length.
[  179.538181][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1741'.
[  179.993101][ T5854] Bluetooth: hci1: unknown advertising packet type: 0x0c
[  180.369221][ T9869] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1754'.
[  180.923970][ T9890] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1764'.
[  181.157572][ T9892] syz.1.1765 (9892) used obsolete PPPIOCDETACH ioctl
[  181.186369][ T9894] netlink: 'syz.2.1766': attribute type 1 has an invalid length.
[  181.896992][ T9922] sctp: [Deprecated]: syz.3.1778 (pid 9922) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.896992][ T9922] Use struct sctp_sack_info instead
[  182.048528][ T9928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1781'.
[  182.054342][ T9928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1781'.
[  182.058089][ T9928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1781'.
[  182.129575][ T9932] netlink: 'syz.3.1783': attribute type 10 has an invalid length.
[  182.133440][ T9932] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1783'.
[  182.267925][ T9940] netlink: 'syz.2.1786': attribute type 10 has an invalid length.
[  182.271227][ T9940] bridge0: left allmulticast mode
[  182.534406][ T9957] netlink: 'syz.1.1795': attribute type 9 has an invalid length.
[  182.537399][ T9957] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1795'.
[  182.619607][ T9959] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1796'.
[  182.669790][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  182.843072][ T9974] netlink: 'syz.2.1803': attribute type 10 has an invalid length.
[  184.238817][ T5897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.338504][ T5897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.406228][ T5897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.497948][ T5897] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.694456][ T5897] bridge_slave_1: left allmulticast mode
[  184.697095][ T5897] bridge_slave_1: left promiscuous mode
[  184.700675][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.731608][ T5897] bridge_slave_0: left allmulticast mode
[  184.738317][ T5897] bridge_slave_0: left promiscuous mode
[  184.740451][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.305176][ T5897] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.317401][ T5897] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.324430][ T5897] .` (unregistering): Released all slaves
[  185.354436][   T24] s: Port: 1 Link DOWN
[  185.711451][T10078] __nla_validate_parse: 4 callbacks suppressed
[  185.711470][T10078] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1841'.
[  185.769526][T10087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1844'.
[  186.076006][T10095] netlink: 'syz.2.1847': attribute type 1 has an invalid length.
[  186.078994][T10095] netlink: 'syz.2.1847': attribute type 4 has an invalid length.
[  186.081673][T10095] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1847'.
[  186.161898][T10100] netlink: 'syz.1.1845': attribute type 33 has an invalid length.
[  186.177559][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1845'.
[  186.391125][T10112] netlink: 'syz.1.1851': attribute type 6 has an invalid length.
[  186.395835][T10112] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1851'.
[  186.825695][T10144] netlink: 'syz.3.1866': attribute type 10 has an invalid length.
[  186.829566][T10144] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.840496][T10144] bridge0: left promiscuous mode
[  186.843530][T10144] bridge0: left allmulticast mode
[  186.858835][T10144] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.861316][T10144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.882001][T10144] bridge0: entered promiscuous mode
[  186.893615][T10144] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  187.295862][T10179] netlink: 'syz.3.1883': attribute type 10 has an invalid length.
[  187.302063][T10179] netdevsim netdevsim3 : entered promiscuous mode
[  187.305919][T10179] bond0: (slave ): Enslaving as an active interface with an up link
[  188.130486][T10214] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1898'.
[  188.157023][T10217] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  188.157178][T10217] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  188.918047][T10229] erspan0 speed is unknown, defaulting to 1000
[  189.270426][T10241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.274666][T10241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.350408][T10241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.358528][T10241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.893904][T10262] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1917'.
[  189.968358][T10268] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1920'.
[  190.027175][T10266] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1918'.
[  190.137769][T10274] netlink: 'syz.1.1923': attribute type 21 has an invalid length.
[  190.141265][T10274] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1923'.
[  190.255232][T10278] netlink: 'syz.1.1925': attribute type 4 has an invalid length.
[  190.820455][T10293] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.831914][T10293] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  190.945907][   T33] audit: type=1107 audit(1758084154.286:4): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  191.614046][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  191.618029][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[  192.724149][T10354] __nla_validate_parse: 1 callbacks suppressed
[  192.724168][T10354] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1957'.
[  192.904792][   T55] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  192.956566][T10371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1965'.
[  192.994836][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1967'.
[  192.997789][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1967'.
[  193.001322][T10375] netlink: 'syz.1.1967': attribute type 4 has an invalid length.
[  193.080739][T10383] netlink: 'syz.3.1971': attribute type 2 has an invalid length.
[  193.084760][T10383] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1971'.
[  193.087857][T10383] nbd: must specify at least one socket
[  193.816035][T10433] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1992'.
[  194.167601][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.170107][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.230130][T10449] netlink: 'syz.1.1999': attribute type 1 has an invalid length.
[  194.234643][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1999'.
[  194.332284][T10457] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2002'.
[  194.370085][T10459] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2004'.
[  194.480001][T10463] netlink: 'syz.1.2006': attribute type 21 has an invalid length.
[  194.550805][T10478] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.2013'.
[  202.352630][T10539] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.356456][T10539] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  210.618428][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  210.623428][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  210.626283][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  210.629480][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  210.633168][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  210.671518][T10547] erspan0 speed is unknown, defaulting to 1000
[  210.795108][T10547] chnl_net:caif_netlink_parms(): no params data found
[  212.712513][ T5854] Bluetooth: hci3: command tx timeout
[  214.792461][ T5854] Bluetooth: hci3: command tx timeout
[  216.872475][ T5854] Bluetooth: hci3: command tx timeout
[  217.883809][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.890932][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.894092][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.904429][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.907092][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.947762][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  217.951396][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  217.954962][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  217.958343][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.960925][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  218.952482][ T5854] Bluetooth: hci3: command tx timeout
[  219.992586][   T55] Bluetooth: hci4: command tx timeout
[  219.995854][ T5854] Bluetooth: hci5: command tx timeout
[  222.072405][ T5854] Bluetooth: hci5: command tx timeout
[  222.074806][ T5854] Bluetooth: hci4: command tx timeout
[  224.152487][   T55] Bluetooth: hci4: command tx timeout
[  224.154284][   T55] Bluetooth: hci5: command tx timeout
[  225.527622][T10555] erspan0 speed is unknown, defaulting to 1000
[  225.574422][T10559] erspan0 speed is unknown, defaulting to 1000
[  226.232473][ T5854] Bluetooth: hci5: command tx timeout
[  226.234770][ T5854] Bluetooth: hci4: command tx timeout
[  228.301017][T10547] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.303645][T10547] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.306198][T10547] bridge_slave_0: entered allmulticast mode
[  228.309263][T10547] bridge_slave_0: entered promiscuous mode
[  228.315053][T10547] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.317258][T10547] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.319974][T10547] bridge_slave_1: entered allmulticast mode
[  228.323067][T10547] bridge_slave_1: entered promiscuous mode
[  228.598423][T10555] chnl_net:caif_netlink_parms(): no params data found
[  228.976639][T10559] chnl_net:caif_netlink_parms(): no params data found
[  229.918105][T10547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.068370][T10547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.286171][T10547] team0: Port device team_slave_0 added
[  230.291503][T10547] team0: Port device team_slave_1 added
[  230.398406][T10555] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.401621][T10555] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.406537][T10555] bridge_slave_0: entered allmulticast mode
[  230.410804][T10555] bridge_slave_0: entered promiscuous mode
[  230.416898][T10559] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.419609][T10559] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.422576][T10559] bridge_slave_0: entered allmulticast mode
[  230.426248][T10559] bridge_slave_0: entered promiscuous mode
[  230.440844][T10547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.443850][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.454133][T10547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.459030][T10555] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.462016][T10555] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.465653][T10555] bridge_slave_1: entered allmulticast mode
[  230.469462][T10555] bridge_slave_1: entered promiscuous mode
[  230.474442][T10559] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.477382][T10559] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.480305][T10559] bridge_slave_1: entered allmulticast mode
[  230.486525][T10559] bridge_slave_1: entered promiscuous mode
[  230.501485][T10547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.504653][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.518053][T10547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.573562][T10559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.587109][T10555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.595325][T10559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.629092][T10555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.637565][T10559] team0: Port device team_slave_0 added
[  230.667948][T10559] team0: Port device team_slave_1 added
[  230.701586][T10555] team0: Port device team_slave_0 added
[  230.722986][T10547] hsr_slave_0: entered promiscuous mode
[  230.726030][T10547] hsr_slave_1: entered promiscuous mode
[  230.728717][T10547] debugfs: 'hsr0' already exists in 'hsr'
[  230.730874][T10547] Cannot create hsr debugfs directory
[  230.735966][T10555] team0: Port device team_slave_1 added
[  230.747053][T10559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.749260][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.758262][T10559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.772265][T10559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.774623][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.783354][T10559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.797306][T10555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.799535][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.807760][T10555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.825350][T10555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.827750][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.837355][T10555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.898629][T10559] hsr_slave_0: entered promiscuous mode
[  230.900998][T10559] hsr_slave_1: entered promiscuous mode
[  230.903592][T10559] debugfs: 'hsr0' already exists in 'hsr'
[  230.905421][T10559] Cannot create hsr debugfs directory
[  230.938469][T10555] hsr_slave_0: entered promiscuous mode
[  230.941266][T10555] hsr_slave_1: entered promiscuous mode
[  230.943943][T10555] debugfs: 'hsr0' already exists in 'hsr'
[  230.945742][T10555] Cannot create hsr debugfs directory
[  231.206441][T10547] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  231.215978][T10547] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  231.222539][T10547] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  231.243690][T10547] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  231.305964][T10555] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  231.313929][T10555] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  231.322126][T10555] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  231.347798][T10555] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  231.447913][T10559] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  231.455775][T10559] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  231.461675][T10559] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  231.479655][T10559] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  231.557206][T10547] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.588424][T10555] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.606902][T10547] 8021q: adding VLAN 0 to HW filter on device team0
[  231.628238][T10555] 8021q: adding VLAN 0 to HW filter on device team0
[  231.634902][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.637630][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.642874][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.645591][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.666449][  T442] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.669402][  T442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.699675][  T442] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.702573][  T442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.743920][T10559] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.769131][T10555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.795734][T10559] 8021q: adding VLAN 0 to HW filter on device team0
[  231.811958][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.814358][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.820394][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.822753][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.870238][T10559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  231.880710][T10559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.937043][T10547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.985443][T10555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.014772][T10559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.210903][T10547] veth0_vlan: entered promiscuous mode
[  232.218768][T10547] veth1_vlan: entered promiscuous mode
[  232.265082][T10547] veth0_macvtap: entered promiscuous mode
[  232.277753][T10547] veth1_macvtap: entered promiscuous mode
[  232.314785][T10559] veth0_vlan: entered promiscuous mode
[  232.318298][T10547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.325852][T10555] veth0_vlan: entered promiscuous mode
[  232.333981][T10547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.346310][T10559] veth1_vlan: entered promiscuous mode
[  232.351939][T10555] veth1_vlan: entered promiscuous mode
[  232.356157][ T5876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.360021][ T5876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.371903][ T5876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.384939][ T5876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.449281][T10555] veth0_macvtap: entered promiscuous mode
[  232.455129][T10559] veth0_macvtap: entered promiscuous mode
[  232.469663][T10555] veth1_macvtap: entered promiscuous mode
[  232.476217][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.479701][T10559] veth1_macvtap: entered promiscuous mode
[  232.484067][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.519398][T10559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.527610][  T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.531711][T10555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.534598][  T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.543362][T10559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.547621][T10555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.574354][ T5876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.609696][ T5876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.616179][ T5876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.633962][ T5876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.649302][ T5876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.655106][ T5876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.659044][ T5876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.671644][ T5876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.756435][  T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.759321][  T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.780323][  T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.784816][  T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.825359][  T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.828989][  T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.859665][  T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.863488][  T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.247032][T10670] __nla_validate_parse: 1 callbacks suppressed
[  234.247048][T10670] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2042'.
[  234.332896][T10673] netlink: 'syz.5.2043': attribute type 13 has an invalid length.
[  235.098149][T10673] gretap0: refused to change device tx_queue_len
[  235.101487][T10673] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  235.842479][T10691] netlink: 'syz.4.2051': attribute type 13 has an invalid length.
[  235.846022][T10691] netlink: 'syz.4.2051': attribute type 17 has an invalid length.
[  236.113476][T10698] option changes via remount are deprecated (pid=10693 comm=syz.5.2052)
[  236.423454][T10691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.517946][   T55] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  236.521556][   T55] Bluetooth: hci4: Invalid handle: 0x85b0 > 0x0eff
[  236.976942][T10744] raw_sendmsg: syz.4.2075 forgot to set AF_INET. Fix it!
[  238.168211][T10758] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2081'.
[  238.843492][ T5854] Bluetooth: hci4: Malformed HCI Event
[  239.015581][T10770] syzkaller1: tun_chr_ioctl cmd 1074812117
[  239.668810][T10781] netlink: 'syz.5.2089': attribute type 1 has an invalid length.
[  240.924409][T10794] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2094'.
[  242.387742][T10805] syzkaller0: entered promiscuous mode
[  242.389986][T10805] syzkaller0: entered allmulticast mode
[  243.504035][T10783] Set syz1 is full, maxelem 65536 reached
[  245.767526][T10844] netlink: 'syz.6.2112': attribute type 39 has an invalid length.
[  245.831910][T10837] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2112'.
[  246.034330][T10855] siw: device registration error -23
[  246.244716][T10870] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2124'.
[  246.245972][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2122'.
[  246.317550][T10864] netlink: 'syz.6.2122': attribute type 21 has an invalid length.
[  246.320613][T10864] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2122'.
[  246.416235][T10878] netlink: 'syz.5.2129': attribute type 11 has an invalid length.
[  247.480202][T10893] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2135'.
[  247.643197][T10899] wg0 speed is unknown, defaulting to 1000
[  247.645271][T10899] wg0 speed is unknown, defaulting to 1000
[  247.675677][T10899] wg0 speed is unknown, defaulting to 1000
[  247.804730][T10899] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  247.920158][T10899] wg0 speed is unknown, defaulting to 1000
[  247.930736][T10899] wg0 speed is unknown, defaulting to 1000
[  247.949602][T10899] wg0 speed is unknown, defaulting to 1000
[  247.959582][T10899] wg0 speed is unknown, defaulting to 1000
[  247.969584][T10899] wg0 speed is unknown, defaulting to 1000
[  247.993968][T10899] wg0 speed is unknown, defaulting to 1000
[  248.003202][T10899] wg0 speed is unknown, defaulting to 1000
[  248.013578][T10899] wg0 speed is unknown, defaulting to 1000
[  249.127222][ T5854] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  249.130158][ T5854] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  249.553854][T10920] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2147'.
[  250.617794][T10939] netlink: 'syz.6.2156': attribute type 29 has an invalid length.
[  250.627510][T10939] netlink: 'syz.6.2156': attribute type 10 has an invalid length.
[  250.668994][T10939] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.688227][T10939] team0: Port device bond0 added
[  250.846224][ T5854] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5
[  251.130389][T10949] netlink: 'syz.5.2160': attribute type 3 has an invalid length.
[  251.137057][T10949] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.2160'.
[  251.151610][T10949] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2160'.
[  251.825712][T10980] netlink: 'syz.6.2172': attribute type 10 has an invalid length.
[  251.828251][T10980] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2172'.
[  251.845028][T10980] team0: entered promiscuous mode
[  251.847266][T10980] team_slave_0: entered promiscuous mode
[  251.850788][T10980] team_slave_1: entered promiscuous mode
[  251.873290][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2174'.
[  251.904096][T10980] bond0: entered promiscuous mode
[  251.906604][T10980] bond_slave_0: entered promiscuous mode
[  251.911712][T10980] bond_slave_1: entered promiscuous mode
[  251.918870][T10980] team0: entered allmulticast mode
[  251.921328][T10980] team_slave_0: entered allmulticast mode
[  251.924155][T10980] team_slave_1: entered allmulticast mode
[  251.926788][T10980] bond0: entered allmulticast mode
[  251.929444][T10980] bond_slave_0: entered allmulticast mode
[  251.932028][T10980] bond_slave_1: entered allmulticast mode
[  251.952901][T10980] bridge0: port 3(team0) entered blocking state
[  251.956515][T10980] bridge0: port 3(team0) entered disabled state
[  252.065153][T10980] bridge0: port 3(team0) entered blocking state
[  252.068736][T10980] bridge0: port 3(team0) entered forwarding state
[  252.461430][T10999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2180'.
[  252.480318][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2180'.
[  252.493783][T10999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2180'.
[  253.199557][T11025] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2191'.
[  253.599548][T11039] openvswitch: netlink: Missing key (keys=40, expected=80)
[  253.961364][T11060] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2206'.
[  254.796326][T11077] netlink: 'syz.6.2216': attribute type 160 has an invalid length.
[  256.433496][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  256.436162][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  258.865481][T11149] netlink: 'syz.6.2248': attribute type 27 has an invalid length.
[  258.868541][T11149] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2248'.
[  259.110181][T11153] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2250'.
[  262.429329][T11183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  262.432285][T11183] IPv6: NLM_F_CREATE should be set when creating new route
[  262.434975][T11183] IPv6: NLM_F_CREATE should be set when creating new route
[  262.437495][T11183] IPv6: NLM_F_CREATE should be set when creating new route
[  262.440528][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  262.445029][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  262.447976][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.451965][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.455393][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.487558][T11181] erspan0 speed is unknown, defaulting to 1000
[  262.490736][T11181] wg0 speed is unknown, defaulting to 1000
[  262.788196][T11181] chnl_net:caif_netlink_parms(): no params data found
[  262.903257][T11181] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.905824][T11181] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.908715][T11181] bridge_slave_0: entered allmulticast mode
[  262.932661][T11181] bridge_slave_0: entered promiscuous mode
[  262.938529][T11181] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.940982][T11181] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.952815][T11181] bridge_slave_1: entered allmulticast mode
[  262.955719][T11181] bridge_slave_1: entered promiscuous mode
[  263.021855][T11181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.031240][T11181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.039583][T11205] netlink: 4800 bytes leftover after parsing attributes in process `syz.6.2267'.
[  263.053419][T11205] netlink: 4800 bytes leftover after parsing attributes in process `syz.6.2267'.
[  263.100660][T11181] team0: Port device team_slave_0 added
[  263.116770][T11181] team0: Port device team_slave_1 added
[  263.190989][T11181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.195733][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.210967][T11181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.216994][T11181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.219730][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.232908][T11181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.251199][T11216] option changes via remount are deprecated (pid=11214 comm=syz.5.2271)
[  263.304947][T11181] hsr_slave_0: entered promiscuous mode
[  263.308259][T11181] hsr_slave_1: entered promiscuous mode
[  263.311127][T11181] debugfs: 'hsr0' already exists in 'hsr'
[  263.314667][T11181] Cannot create hsr debugfs directory
[  263.766036][T11181] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  263.778316][T11181] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  263.809070][T11181] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  263.849917][T11181] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  264.051241][T11181] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.099170][T11181] 8021q: adding VLAN 0 to HW filter on device team0
[  264.109499][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.112454][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.151396][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.154426][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.165342][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2278'.
[  264.346450][T11239] netlink: 'syz.6.2279': attribute type 12 has an invalid length.
[  264.349555][T11239] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2279'.
[  264.472718][   T55] Bluetooth: hci0: command tx timeout
[  264.588440][T11181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.915643][T11181] veth0_vlan: entered promiscuous mode
[  264.925075][T11181] veth1_vlan: entered promiscuous mode
[  264.976857][T11181] veth0_macvtap: entered promiscuous mode
[  264.984827][T11181] veth1_macvtap: entered promiscuous mode
[  265.016971][T11181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.043968][T11181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.056747][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.060218][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.077203][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.081496][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.224616][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.227542][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.289385][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.298429][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.528820][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'.
[  266.553056][   T55] Bluetooth: hci0: command tx timeout
[  268.632634][   T55] Bluetooth: hci0: command tx timeout
[  269.186225][T11299] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2300'.
[  269.864839][T11330] netlink: 'syz.7.2309': attribute type 10 has an invalid length.
[  269.867764][T11330] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2309'.
[  269.962751][T11337] delete_channel: no stack
[  270.130831][T11343] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2317'.
[  270.714816][   T55] Bluetooth: hci0: command tx timeout
[  271.193363][   T55] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3
[  271.655945][T11384] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2334'.
[  273.435941][T11399] netlink: 'syz.7.2341': attribute type 29 has an invalid length.
[  273.440969][T11400] netlink: 'syz.7.2341': attribute type 29 has an invalid length.
[  273.445912][T11401] netlink: 'syz.7.2341': attribute type 29 has an invalid length.
[  273.605109][T11409] netlink: 'syz.7.2344': attribute type 97 has an invalid length.
[  273.608351][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'.
[  273.613269][T11409] netlink: 'syz.7.2344': attribute type 97 has an invalid length.
[  273.616271][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'.
[  273.984927][T11416] netlink: 'syz.7.2347': attribute type 1 has an invalid length.
[  274.009823][T11416] netlink: 'syz.7.2347': attribute type 3 has an invalid length.
[  274.021431][T11416] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2347'.
[  274.078801][T11419] syz.7.2347: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  274.161165][T11419] CPU: 0 UID: 0 PID: 11419 Comm: syz.7.2347 Not tainted syzkaller #0 PREEMPT(full) 
[  274.161180][T11419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.161187][T11419] Call Trace:
[  274.161193][T11419]  <TASK>
[  274.161198][T11419]  dump_stack_lvl+0x189/0x250
[  274.161228][T11419]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.161240][T11419]  ? __pfx__printk+0x10/0x10
[  274.161253][T11419]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  274.161263][T11419]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  274.161274][T11419]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  274.161286][T11419]  warn_alloc+0x214/0x310
[  274.161302][T11419]  ? stack_depot_save_flags+0x40/0x860
[  274.161317][T11419]  ? __pfx_warn_alloc+0x10/0x10
[  274.161326][T11419]  ? kasan_save_track+0x4f/0x80
[  274.161338][T11419]  ? xskq_create+0x56/0x170
[  274.161346][T11419]  ? xsk_init_queue+0xb0/0x110
[  274.161352][T11419]  ? xsk_setsockopt+0x57b/0x8d0
[  274.161364][T11419]  ? do_sock_setsockopt+0x17c/0x1b0
[  274.161373][T11419]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  274.161382][T11419]  ? do_syscall_64+0xfa/0x3b0
[  274.161390][T11419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.161403][T11419]  __vmalloc_node_range_noprof+0x125/0x12f0
[  274.161433][T11419]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  274.161449][T11419]  ? __kasan_kmalloc+0x93/0xb0
[  274.161462][T11419]  vmalloc_user_noprof+0xad/0xf0
[  274.161474][T11419]  ? xskq_create+0xbf/0x170
[  274.161482][T11419]  xskq_create+0xbf/0x170
[  274.161492][T11419]  xsk_init_queue+0xb0/0x110
[  274.161502][T11419]  xsk_setsockopt+0x57b/0x8d0
[  274.161516][T11419]  ? __pfx_xsk_setsockopt+0x10/0x10
[  274.161529][T11419]  ? __pfx_aa_sk_perm+0x10/0x10
[  274.161538][T11419]  ? __fget_files+0x2a/0x420
[  274.161545][T11419]  ? aa_sock_opt_perm+0xff/0x1b0
[  274.161555][T11419]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  274.161565][T11419]  ? __pfx_xsk_setsockopt+0x10/0x10
[  274.161578][T11419]  do_sock_setsockopt+0x17c/0x1b0
[  274.161591][T11419]  __x64_sys_setsockopt+0x13f/0x1b0
[  274.161604][T11419]  do_syscall_64+0xfa/0x3b0
[  274.161612][T11419]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.161621][T11419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.161628][T11419]  ? exc_page_fault+0x9f/0xf0
[  274.161638][T11419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.161646][T11419] RIP: 0033:0x7fec34b8eba9
[  274.161654][T11419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.161661][T11419] RSP: 002b:00007fec35ac4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  274.161671][T11419] RAX: ffffffffffffffda RBX: 00007fec34dd6090 RCX: 00007fec34b8eba9
[  274.161677][T11419] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  274.161682][T11419] RBP: 00007fec34c11e19 R08: 0000000000000004 R09: 0000000000000000
[  274.161687][T11419] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  274.161692][T11419] R13: 00007fec34dd6128 R14: 00007fec34dd6090 R15: 00007ffd979f72f8
[  274.161707][T11419]  </TASK>
[  274.161713][T11419] Mem-Info:
[  274.288964][T11419] active_anon:9523 inactive_anon:0 isolated_anon:0
[  274.288964][T11419]  active_file:12866 inactive_file:38324 isolated_file:0
[  274.288964][T11419]  unevictable:1768 dirty:93 writeback:0
[  274.288964][T11419]  slab_reclaimable:10893 slab_unreclaimable:77361
[  274.288964][T11419]  mapped:18155 shmem:2416 pagetables:1171
[  274.288964][T11419]  sec_pagetables:0 bounce:0
[  274.288964][T11419]  kernel_misc_reclaimable:0
[  274.288964][T11419]  free:256246 free_pcp:19256 free_cma:0
[  274.308551][T11419] Node 0 active_anon:22720kB inactive_anon:0kB active_file:21472kB inactive_file:13676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19804kB dirty:204kB writeback:0kB shmem:4776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6204kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  274.332719][T11419] Node 1 active_anon:15372kB inactive_anon:0kB active_file:29992kB inactive_file:139620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52816kB dirty:168kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7288kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  274.388776][T11419] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  274.403580][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2352'.
[  274.417117][T11419] lowmem_reserve[]: 0 811 811 811 811
[  274.428272][T11419] Node 0 DMA32 free:366304kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22720kB inactive_anon:0kB active_file:21472kB inactive_file:13676kB unevictable:3536kB writepending:204kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:38512kB local_pcp:18808kB free_cma:0kB
[  274.450666][T11408] erspan0 speed is unknown, defaulting to 1000
[  274.455073][T11408] wg0 speed is unknown, defaulting to 1000
[  274.471288][T11419] lowmem_reserve[]: 0 0 0 0 0
[  274.479744][T11419] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  274.517708][T11419] lowmem_reserve[]: 0 0 854 854 854
[  274.522832][T11419] Node 1 Normal free:184612kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15372kB inactive_anon:0kB active_file:29992kB inactive_file:139620kB unevictable:3536kB writepending:168kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39004kB local_pcp:17024kB free_cma:0kB
[  274.543506][T11419] lowmem_reserve[]: 0 0 0 0 0
[  274.545310][T11419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  274.549677][T11419] Node 0 DMA32: 630*4kB (UME) 246*8kB (UME) 148*16kB (UME) 120*32kB (UM) 79*64kB (UM) 91*128kB (UME) 82*256kB (UM) 36*512kB (UME) 34*1024kB (U) 11*2048kB (UM) 59*4096kB (UM) = 365832kB
[  274.572346][T11419] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  274.578929][T11419] Node 1 Normal: 1665*4kB (UME) 533*8kB (UME) 744*16kB (UME) 593*32kB (UME) 184*64kB (UME) 114*128kB (UME) 67*256kB (UM) 36*512kB (UME) 13*1024kB (UME) 7*2048kB (UE) 13*4096kB (M) = 184652kB
[  274.599412][T11419] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.611000][T11419] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.626160][T11419] 53606 total pagecache pages
[  274.630615][T11419] 0 pages in swap cache
[  274.633013][T11419] Free swap  = 124996kB
[  274.635086][T11419] Total swap = 124996kB
[  274.636771][T11419] 786301 pages RAM
[  274.638320][T11419] 0 pages HighMem/MovableOnly
[  274.640214][T11419] 241347 pages reserved
[  274.641933][T11419] 0 pages cma reserved
[  275.269183][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2366'.
[  275.567263][T11470] IPv6: Can't replace route, no match found
[  275.757951][T11481] netlink: 'syz.7.2376': attribute type 39 has an invalid length.
[  276.026995][T11486] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2379'.
[  276.474116][T11512] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2392'.
[  276.477626][T11512] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2392'.
[  276.788573][T11528] : entered promiscuous mode
[  276.837948][T11533] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2401'.
[  277.041221][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2403'.
[  277.408087][T11556] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2411'.
[  277.585916][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2410'.
[  277.680550][T11564] netlink: 'syz.6.2414': attribute type 2 has an invalid length.
[  277.696555][T11564] netlink: 'syz.6.2414': attribute type 1 has an invalid length.
[  277.700429][T11564] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.2414'.
[  277.705107][T11564] block nbd5: not configured, cannot reconfigure
[  280.374412][   T55] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  281.208430][T11688] syzkaller0: entered promiscuous mode
[  281.210764][T11688] syzkaller0: entered allmulticast mode
[  281.409946][T11694] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  283.244620][T11719] netlink: 'syz.7.2478': attribute type 4 has an invalid length.
[  283.247971][T11719] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2478'.
[  283.260431][T11719] .`: renamed from bond0 (while UP)
[  283.709085][T11736] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2485'.
[  284.004150][T11741] netlink: 'syz.6.2487': attribute type 2 has an invalid length.
[  284.006907][T11741] netlink: 130532 bytes leftover after parsing attributes in process `syz.6.2487'.
[  284.306628][T11752] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  284.440777][T11760] netlink: 'syz.6.2496': attribute type 3 has an invalid length.
[  284.444332][T11760] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2496'.
[  284.570851][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2499'.
[  285.489903][T11799] netlink: 'syz.5.2513': attribute type 11 has an invalid length.
[  285.987092][T11824] netlink: 'syz.5.2522': attribute type 29 has an invalid length.
[  285.991126][T11824] netlink: 'syz.5.2522': attribute type 29 has an invalid length.
[  285.996504][T11824] netlink: 'syz.5.2522': attribute type 29 has an invalid length.
[  286.000711][T11824] netlink: 'syz.5.2522': attribute type 29 has an invalid length.
[  286.086120][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2525'.
[  286.089338][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2525'.
[  286.093008][T11830] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2525'.
[  286.283731][T11846] netlink: 'syz.6.2533': attribute type 3 has an invalid length.
[  286.289468][T11845] netlink: 'syz.5.2532': attribute type 21 has an invalid length.
[  286.296995][T11845] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2532'.
[  286.440169][T11855] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2537'.
[  287.383860][T11909] erspan0 speed is unknown, defaulting to 1000
[  287.397192][T11909] wg0 speed is unknown, defaulting to 1000
[  287.455966][   T55] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  287.531146][   T55] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  288.920713][T11977] __nla_validate_parse: 6 callbacks suppressed
[  288.920726][T11977] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2585'.
[  288.939644][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2585'.
[  289.073277][T11981] validate_nla: 10 callbacks suppressed
[  289.073294][T11981] netlink: 'syz.6.2587': attribute type 3 has an invalid length.
[  289.078563][T11981] netlink: 'syz.6.2587': attribute type 1 has an invalid length.
[  289.081726][T11981] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.2587'.
[  289.170019][T11985] netlink: 'syz.6.2589': attribute type 10 has an invalid length.
[  289.181163][T11985] bridge0: port 3(team0) entered disabled state
[  289.186130][T11985] team0: left allmulticast mode
[  289.188341][T11985] team_slave_0: left allmulticast mode
[  289.190686][T11985] team_slave_1: left allmulticast mode
[  289.198484][T11985] bond0: left allmulticast mode
[  289.202811][T11985] bond_slave_0: left allmulticast mode
[  289.205718][T11985] bond_slave_1: left allmulticast mode
[  289.210452][T11985] team0: left promiscuous mode
[  289.217084][T11985] team_slave_0: left promiscuous mode
[  289.219626][T11985] team_slave_1: left promiscuous mode
[  289.222590][T11985] bond0: left promiscuous mode
[  289.224737][T11985] bond_slave_0: left promiscuous mode
[  289.227320][T11985] bond_slave_1: left promiscuous mode
[  289.230245][T11985] bridge0: port 3(team0) entered disabled state
[  289.241433][T11985] team0: Cannot enslave team device to itself
[  289.421720][T11987] netlink: 'syz.6.2590': attribute type 29 has an invalid length.
[  289.436530][T11988] netlink: 'syz.6.2590': attribute type 29 has an invalid length.
[  289.454602][T11987] netlink: 'syz.6.2590': attribute type 29 has an invalid length.
[  289.560372][T11988] netlink: 'syz.6.2590': attribute type 29 has an invalid length.
[  290.938774][T12018] netlink: 'syz.6.2604': attribute type 1 has an invalid length.
[  291.335716][T12026] netlink: 'syz.6.2608': attribute type 1 has an invalid length.
[  291.349103][T12026] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.2608'.
[  292.431376][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2635'.
[  292.524906][T12083] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.2636'.
[  292.631246][T12088] netlink: 'syz.7.2639': attribute type 21 has an invalid length.
[  292.639941][T12088] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2639'.
[  292.647578][T12088] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2639'.
[  293.287521][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'.
[  294.170975][T12112] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.2648'.
[  294.763895][T12125] validate_nla: 2 callbacks suppressed
[  294.763912][T12125] netlink: 'syz.7.2654': attribute type 39 has an invalid length.
[  294.819430][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2655'.
[  294.834788][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2655'.
[  294.841026][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2655'.
[  295.195945][T12139] : renamed from gre0 (while UP)
[  296.199793][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2667'.
[  296.210069][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2667'.
[  297.076113][T12163] netlink: 'syz.7.2670': attribute type 3 has an invalid length.
[  297.079441][T12163] netlink: 'syz.7.2670': attribute type 6 has an invalid length.
[  297.087350][T12163] netlink: 'syz.7.2670': attribute type 8 has an invalid length.
[  297.090629][T12163] netlink: 'syz.7.2670': attribute type 10 has an invalid length.
[  297.103951][T12163] netlink: 'syz.7.2670': attribute type 11 has an invalid length.
[  297.107054][T12163] netlink: 198236 bytes leftover after parsing attributes in process `syz.7.2670'.
[  297.748286][T12178] openvswitch: netlink: Message has 1 unknown bytes.
[  297.751012][T12178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.319444][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.326652][T12248] netlink: 'syz.7.2706': attribute type 10 has an invalid length.
[  299.331472][T12248] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.338993][T12248] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.400824][T12248] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.403443][T12248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.408332][T12248] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.412313][T12248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.481203][T12248] .`: (slave bridge0): Enslaving as an active interface with an up link
[  299.750368][T12264] netlink: 'syz.7.2713': attribute type 11 has an invalid length.
[  299.758214][T12264] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2713'.
[  299.801274][T12263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.866587][T12277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.473082][   T55] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  302.775603][   T55] Bluetooth: hci5: unexpected subevent 0x03 length: 150 > 9
[  302.838939][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2730'.
[  302.879366][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2730'.
[  302.947128][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2730'.
[  303.466659][T12327] netlink: 'syz.6.2738': attribute type 4 has an invalid length.
[  303.469907][T12327] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2738'.
[  305.618991][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  305.624065][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  305.628321][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.631812][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.636274][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.682527][   T55] Bluetooth: hci1: command tx timeout
[  307.947278][T12331] erspan0 speed is unknown, defaulting to 1000
[  307.951010][T12331] wg0 speed is unknown, defaulting to 1000
[  308.059159][T12347] netlink: 'syz.6.2746': attribute type 29 has an invalid length.
[  308.196615][T12331] chnl_net:caif_netlink_parms(): no params data found
[  308.230481][T12357] netlink: 'syz.7.2750': attribute type 39 has an invalid length.
[  308.251168][T12357] veth0_macvtap: left promiscuous mode
[  308.406917][T12331] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.414334][T12331] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.417515][T12331] bridge_slave_0: entered allmulticast mode
[  308.418560][T12365] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2752'.
[  308.421569][T12331] bridge_slave_0: entered promiscuous mode
[  308.436817][T12331] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.439812][T12331] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.447835][T12331] bridge_slave_1: entered allmulticast mode
[  308.451857][T12331] bridge_slave_1: entered promiscuous mode
[  308.499282][T12365] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2752'.
[  308.531574][T12331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.550517][T12331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.600224][T12365] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2752'.
[  308.649116][T12331] team0: Port device team_slave_0 added
[  308.656992][T12331] team0: Port device team_slave_1 added
[  308.692590][T12331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.695429][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.707908][T12331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.716957][T12331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.719695][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.729528][T12331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.798630][T12331] hsr_slave_0: entered promiscuous mode
[  308.801878][T12331] hsr_slave_1: entered promiscuous mode
[  308.843265][T12331] debugfs: 'hsr0' already exists in 'hsr'
[  308.845669][T12331] Cannot create hsr debugfs directory
[  309.757333][   T55] Bluetooth: hci1: command tx timeout
[  310.081715][   T55] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4
[  311.005060][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2765'.
[  311.080049][T12331] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  311.090455][T12331] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  311.096649][T12331] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  311.105441][T12331] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  311.211735][T12331] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.216961][T12412] netlink: 'syz.6.2768': attribute type 2 has an invalid length.
[  311.223290][T12412] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.2768'.
[  311.285436][T12331] 8021q: adding VLAN 0 to HW filter on device team0
[  311.298582][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.301565][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.001203][   T55] Bluetooth: hci1: command tx timeout
[  312.014951][T12414] netlink: 'syz.7.2769': attribute type 3 has an invalid length.
[  312.031830][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.034758][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.240562][T12331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.458412][T12331] veth0_vlan: entered promiscuous mode
[  312.500260][T12331] veth1_vlan: entered promiscuous mode
[  312.564592][T12331] veth0_macvtap: entered promiscuous mode
[  312.589417][T12331] veth1_macvtap: entered promiscuous mode
[  312.606476][T12331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.646678][T12331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.680562][ T5876] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.689765][ T5876] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.719137][ T5876] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.740767][ T5876] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.689746][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.700754][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.728602][T12441] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  313.768746][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.772518][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.082794][   T55] Bluetooth: hci1: command tx timeout
[  314.816885][T12459] netlink: 'syz.6.2782': attribute type 6 has an invalid length.
[  314.819670][T12459] netlink: 'syz.6.2782': attribute type 1 has an invalid length.
[  314.823307][T12459] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.2782'.
[  314.997432][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2786'.
[  315.287232][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2791'.
[  316.333231][T12564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.680566][T12586] C: renamed from team_slave_0 (while UP)
[  316.685845][T12586] netlink: 'syz.6.2816': attribute type 2 has an invalid length.
[  316.688844][T12586] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  316.881009][T12598] veth1_macvtap: left promiscuous mode
[  316.885058][T12598] macsec0: entered promiscuous mode
[  317.051170][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.058448][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.409650][T12607] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.2824'.
[  317.463352][T12610] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2826'.
[  317.518245][T12615] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2828'.
[  317.731269][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2835'.
[  318.027324][T12644] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.2843'.
[  318.736747][T12654] netlink: 'syz.6.2846': attribute type 1 has an invalid length.
[  319.366861][T12674] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2856'.
[  319.692470][T12688] netlink: 'syz.6.2861': attribute type 15 has an invalid length.
[  320.393985][T12701] netdevsim netdevsim7 : renamed from netdevsim0 (while UP)
[  320.588137][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2875'.
[  320.659711][T12719] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.2877'.
[  320.747692][   T55] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  320.754646][T12729] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  320.894601][T12743] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2888'.
[  321.022034][T12752] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2894'.
[  321.034335][T12752] openvswitch: netlink: Missing key (keys=40, expected=100)
[  321.129954][T12760] netlink: 'syz.8.2897': attribute type 3 has an invalid length.
[  321.138671][T12760] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2897'.
[  321.297572][T12767] : renamed from bond_slave_0 (while UP)
[  321.803169][T12792] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  323.215577][T12827] tap0: tun_chr_ioctl cmd 1074812118
[  323.755132][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2935'.
[  323.759116][T12850] netlink: 130076 bytes leftover after parsing attributes in process `syz.7.2935'.
[  323.768170][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2935'.
[  323.780433][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2934'.
[  323.785634][T12847] netlink: 130076 bytes leftover after parsing attributes in process `syz.8.2934'.
[  324.697789][T12889] sctp: [Deprecated]: syz.8.2947 (pid 12889) Use of struct sctp_assoc_value in delayed_ack socket option.
[  324.697789][T12889] Use struct sctp_sack_info instead
[  324.749583][T12892] siw: device registration error -23
[  324.794754][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  324.798647][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  324.802925][ T5854] Bluetooth: hci1: hardware error 0x00
[  325.036261][T12909] netlink: 'syz.6.2954': attribute type 1 has an invalid length.
[  325.544343][ T5897] unregister_netdevice: waiting for .` to become free. Usage count = 3
SYZFAIL: failed to recv rpc
[  325.555638][ T5897] ref_tracker: netdev@ffff888026f90610 has 1/1 users at
[  325.555638][ T5897]      ib_device_set_netdev+0x31f/0x6d0
[  325.555638][ T5897]      siw_newlink+0x40c/0xd70
[  325.555638][ T5897]      nldev_newlink+0x4a5/0x5a0
[  325.555638][ T5897]      rdma_nl_rcv+0x6ae/0x980
[  325.555638][ T5897]      netlink_unicast+0x82f/0x9e0
[  325.555638][ T5897]      netlink_sendmsg+0x805/0xb30
[  325.555638][ T5897]      __sock_sendmsg+0x21c/0x270
[  325.555638][ T5897]      ____sys_sendmsg+0x505/0x830
[  325.555638][ T5897]      ___sys_sendmsg+0x21f/0x2a0
[  325.555638][ T5897]      __x64_sys_sendmsg+0x19b/0x260
[  325.555638][ T5897]      do_syscall_64+0xfa/0x3b0
[  325.555638][ T5897]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.555638][ T5897] 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  326.873185][ T5854] Bluetooth: hci1: Opcode 0x0c03 failed: -110

VM DIAGNOSIS:
04:44:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000202 RBX=0000000000000200 RCX=0000000000080000 RDX=ffffc900083e9000
RSI=0000000000000200 RDI=ffffffff89a35987 RBP=ffffc900028df910 RSP=ffffc900028df880
R8 =ffff888026e80007 R9 =1ffff11004dd0000 R10=dffffc0000000000 R11=ffffed1004dd0001
R12=dffffc0000000000 R13=ffffc900029b3030 R14=dffffc0000000000 R15=1ffff9200051bf10
RIP=ffffffff8184f9be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fec35ae56c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c352b11 CR3=000000012825c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000008000003b7 ffffff0200000207 XMM03=0000000100000085 00000000000004b7
XMM04=9500000001000000 8500000000000004 XMM05=b700000008000003 b7ffffff02000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=0000000000000000 00007fec34c12ee7 XMM09=0000000000000000 00007fec34c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000a4007 RBX=0000000000000003 RCX=ffffffff93499888 RDX=0000000000080000
RSI=0000000000004000 RDI=ffff888026625640 RBP=0000000000000007 RSP=ffffc900001e05e8
R8 =0000000000000000 R9 =ffffffff8172d195 R10=ffffc900001e0838 R11=ffffffff81ac4d00
R12=0000000000024000 R13=0000000000000000 R14=ffff888026626270 R15=ffff888026626130
RIP=ffffffff819d7738 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f97c7558800 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e24d07d60 CR3=000000010ef14000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=768ef5e3234e0000 4556fb22a67e8402
XMM02=458d02002500e375 001be750f4650111 XMM03=f6517eb46793bf00 000000000f00379e
XMM04=0000000000000000 000000000000d7bd XMM05=d0a686e7378093d4 f4c9640af6517eb4
XMM06=6793bf0000000000 0f00379e458d0200 XMM07=2500e375001be750 f4650111768ef5e3
XMM08=0000000000000000 00007f5ad1612ee7 XMM09=0000000000000000 00007f5ad1612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
