last executing test programs:

1m21.133278976s ago: executing program 2 (id=814):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0x20}, 0x0)
syz_open_procfs$namespace(r2, 0x0)

1m21.078265129s ago: executing program 2 (id=816):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)

1m21.019389452s ago: executing program 1 (id=820):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540))

1m20.989487271s ago: executing program 2 (id=822):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1m20.986537628s ago: executing program 1 (id=823):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xe058, [{0x3, 0x2, 0xe}]}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x8}, 0x28)

1m20.985068178s ago: executing program 1 (id=825):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000036000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00000000000000000000000f05", 0x2f}], 0x1, 0x0, 0x0, 0x39c}, 0x4040014)

1m20.913512715s ago: executing program 2 (id=826):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))

1m20.913189362s ago: executing program 1 (id=827):
r0 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x240480d5)

1m20.913070266s ago: executing program 1 (id=828):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d805000100fec04d1b34ca3b808de2abea6c110000983cfcce7657581d5f602f3a000000080005007a010401a80016002000034011000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbae5dc92b7f9f15284bd38d150e2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f4e278d8016a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9a", 0xd8}], 0x1}, 0x20008854)

1m20.8216837s ago: executing program 2 (id=829):
socket$kcm(0x10, 0x400000002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac14142421b1a672e9"], 0x30}, 0x40880)

1m20.634103661s ago: executing program 1 (id=830):
bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000004008510000002000000a6000000ffffff859500007b00000000850000007600000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', 0xffffffffffffffff, 0x0, 0xb33c}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000440)={0xa}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000bdff07000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000000000001800"/28], 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xcc, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x1}, 0x2000, 0x2b, 0xfffffc03, 0x8, 0x2, 0x8000000, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

1m20.524364715s ago: executing program 32 (id=830):
bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000004008510000002000000a6000000ffffff859500007b00000000850000007600000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', 0xffffffffffffffff, 0x0, 0xb33c}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000440)={0xa}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000bdff07000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000000000001800"/28], 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xcc, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x1}, 0x2000, 0x2b, 0xfffffc03, 0x8, 0x2, 0x8000000, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

1m20.472179859s ago: executing program 2 (id=832):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
write$cgroup_devices(r0, &(0x7f00000001c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c2b2e21e3dc", 0xd}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
openat$ppp(0xffffffffffffff9c, 0x0, 0x18101, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x17, 0x8}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x6, 0xffffffff}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x5, 0x2000000, 0x4, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fa, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
syz_clone(0x4002000, &(0x7f0000000b00)="ce688e8aa0542bbbe7ebd3d4c7e0df8fda3a74bf89b0e5ff84a8088f31b6", 0x1e, &(0x7f0000000c40), &(0x7f0000000c80), 0x0)

1m20.472035475s ago: executing program 33 (id=832):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
write$cgroup_devices(r0, &(0x7f00000001c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c2b2e21e3dc", 0xd}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
openat$ppp(0xffffffffffffff9c, 0x0, 0x18101, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x17, 0x8}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x6, 0xffffffff}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x5, 0x2000000, 0x4, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fa, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
syz_clone(0x4002000, &(0x7f0000000b00)="ce688e8aa0542bbbe7ebd3d4c7e0df8fda3a74bf89b0e5ff84a8088f31b6", 0x1e, &(0x7f0000000c40), &(0x7f0000000c80), 0x0)

17.001694591s ago: executing program 3 (id=1845):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xf)

16.950474254s ago: executing program 3 (id=1847):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa2c0739963b0e8f1, '\x00', 0x0, @fallback=0x31}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x4, 0xff, 0x7, 0x0, 0x1, 0x917d5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xd}, 0xb3d8c41eb80db927, 0x1, 0x8007, 0x0, 0x81, 0x5, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

16.882555483s ago: executing program 3 (id=1849):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f00000047c0)=""/4044, 0xfcc}, {&(0x7f00000027c0)=""/4065, 0xfe1}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000500)=""/42, 0x2a}, {&(0x7f0000000080)=""/187, 0xbb}], 0x8}, 0x40000100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

16.882340057s ago: executing program 0 (id=1850):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

16.765632299s ago: executing program 3 (id=1851):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x0, 0x0, 0x0, 0x51a4, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xd, 0x7, 0x7, 0x6, 0x0, 0x2, 0x80, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xe323, 0x7}, 0x10c0a1, 0xfffffffffffffc00, 0x8, 0x2, 0x0, 0xf, 0xc426, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x7, r0, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008a9e9fb6cd4a606710d1581d7c9d5422bdfa4ab9f3148d4622130d8ba106e16e623a4887d969e728f3ddc5405091de44c2608f33a063bfbf561aac0030732abc"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
sendmsg$kcm(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000001300)="1400000016001963d20500000056915a15aa2bfe2667968a097c009a8956613590d9de555beaa565b31870c9b74209995e247adab5923aad5fefd5ac98c0d5e79f300ed480d56b74e3d9c9ff97ba6cb468cdae477e71574ae5fc65330fdc77832925ef5290dd605beafc7963f54ea550da449fbbc76518e70fae01b77607f75bd706c9083b4c", 0x86}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000001c0))
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0x28, 0x5, 0x0)
close(r7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffef1, 0x45, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="0180000000000000"])
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)="c19472dee01d4a8a3ba6d4a79e302bd5b3", 0x0, 0x4d, 0xffffffffffffffff, 0x0, 0x1c000000007400}, 0x38)

16.765182952s ago: executing program 0 (id=1852):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x894, r0}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

16.551060446s ago: executing program 0 (id=1862):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80)
ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x122)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))

15.948052556s ago: executing program 4 (id=1858):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28)

15.944030678s ago: executing program 3 (id=1865):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0xf2ff)

15.832726633s ago: executing program 0 (id=1859):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

15.8326177s ago: executing program 4 (id=1860):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

15.749909423s ago: executing program 0 (id=1861):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c0000007a006bcd9e3fe3dc6e081700070000adbd0ec000488b02020000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000086)

15.749687316s ago: executing program 4 (id=1863):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x2a, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)

15.683791795s ago: executing program 4 (id=1864):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r0, 0x2f, 0x2028, 0x4}, 0x20)

15.683454118s ago: executing program 0 (id=1866):
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xc, 0x32, 0x0, 0xe, 0x0, 0x7, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x200000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
unlink(&(0x7f0000000140)='./cgroup\x00')

15.586477406s ago: executing program 4 (id=1867):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x22, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

15.465772576s ago: executing program 4 (id=1868):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@map_fd={0x18, 0x3}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(0x3)

0s ago: executing program 3 (id=1869):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46924' (ED25519) to the list of known hosts.
syzkaller login: [   47.867714][ T5761] cgroup: Unknown subsys name 'net'
[   48.001322][ T5761] cgroup: Unknown subsys name 'cpuset'
[   48.005962][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.285025][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.595145][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.608241][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.618065][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.622220][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.625292][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.682344][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.688029][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.691625][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.696386][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.700858][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.704270][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.709559][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.713294][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.725757][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.729457][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.059831][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   58.092160][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   58.184252][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   58.255322][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.258940][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.261221][ T5845] bridge_slave_0: entered allmulticast mode
[   58.265045][ T5845] bridge_slave_0: entered promiscuous mode
[   58.270373][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.272956][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.275737][ T5849] bridge_slave_0: entered allmulticast mode
[   58.280697][ T5849] bridge_slave_0: entered promiscuous mode
[   58.284523][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.287016][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.290127][ T5849] bridge_slave_1: entered allmulticast mode
[   58.293843][ T5849] bridge_slave_1: entered promiscuous mode
[   58.314697][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.318048][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.320996][ T5845] bridge_slave_1: entered allmulticast mode
[   58.324616][ T5845] bridge_slave_1: entered promiscuous mode
[   58.396288][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.401542][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.406549][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.435460][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.446349][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.449458][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.451879][ T5851] bridge_slave_0: entered allmulticast mode
[   58.454487][ T5851] bridge_slave_0: entered promiscuous mode
[   58.474910][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.478442][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.481396][ T5851] bridge_slave_1: entered allmulticast mode
[   58.484964][ T5851] bridge_slave_1: entered promiscuous mode
[   58.491258][ T5845] team0: Port device team_slave_0 added
[   58.506051][ T5849] team0: Port device team_slave_0 added
[   58.510396][ T5849] team0: Port device team_slave_1 added
[   58.524370][ T5845] team0: Port device team_slave_1 added
[   58.565317][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.574919][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.580648][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.583471][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.592156][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.597021][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.600025][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.609101][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.636194][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.639477][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.648847][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.653851][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.656613][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.667057][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.675983][ T5851] team0: Port device team_slave_0 added
[   58.683758][ T5851] team0: Port device team_slave_1 added
[   58.728630][ T5849] hsr_slave_0: entered promiscuous mode
[   58.731834][ T5849] hsr_slave_1: entered promiscuous mode
[   58.735608][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.738436][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.746947][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.769815][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.772529][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.781624][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.804778][ T5845] hsr_slave_0: entered promiscuous mode
[   58.809116][ T5845] hsr_slave_1: entered promiscuous mode
[   58.811738][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.814620][ T5845] Cannot create hsr debugfs directory
[   58.901147][ T5851] hsr_slave_0: entered promiscuous mode
[   58.903753][ T5851] hsr_slave_1: entered promiscuous mode
[   58.906599][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.909847][ T5851] Cannot create hsr debugfs directory
[   59.115255][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.128802][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.142748][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.159697][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.199353][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.204595][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.210356][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.216584][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.285650][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.292225][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.299426][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.304716][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.382689][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.413037][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   59.425951][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.429251][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.450196][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.453198][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.483483][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.495799][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.523841][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   59.543941][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.546375][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.553366][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   59.568642][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.571748][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.586596][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.602379][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.605374][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.623894][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.626797][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.688209][ T5853] Bluetooth: hci0: command tx timeout
[   59.692523][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.713858][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.768237][ T5846] Bluetooth: hci1: command tx timeout
[   59.770824][ T5853] Bluetooth: hci2: command tx timeout
[   59.801403][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.846362][ T5849] veth0_vlan: entered promiscuous mode
[   59.857094][ T5849] veth1_vlan: entered promiscuous mode
[   59.885777][ T5849] veth0_macvtap: entered promiscuous mode
[   59.892264][ T5849] veth1_macvtap: entered promiscuous mode
[   59.912889][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.922540][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.934701][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.938892][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.942065][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.945135][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.985456][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.027289][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.030573][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.039370][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.063225][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.066593][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.100564][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.103342][ T5851] veth0_vlan: entered promiscuous mode
[   60.109989][ T5845] veth0_vlan: entered promiscuous mode
[   60.124345][ T5845] veth1_vlan: entered promiscuous mode
[   60.131961][ T5851] veth1_vlan: entered promiscuous mode
[   60.170301][ T5845] veth0_macvtap: entered promiscuous mode
[   60.191102][ T5851] veth0_macvtap: entered promiscuous mode
[   60.201085][ T5851] veth1_macvtap: entered promiscuous mode
[   60.210934][ T5845] veth1_macvtap: entered promiscuous mode
[   60.226195][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.243466][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.251508][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.263770][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.275281][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.281407][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.284830][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.288949][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.315954][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.328964][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.335502][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.341191][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.456131][ T5917] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   60.482906][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.486117][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.522570][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.525198][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.537833][ T3900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.551431][ T3900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.573723][ T3900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.576604][ T3900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.695111][ T5925] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.705328][ T5925] : renamed from gre0 (while UP)
[   61.580535][ T5973] netlink: 'syz.2.35': attribute type 21 has an invalid length.
[   61.778317][ T5853] Bluetooth: hci0: command tx timeout
[   61.847647][ T5853] Bluetooth: hci2: command tx timeout
[   61.849961][ T5853] Bluetooth: hci1: command tx timeout
[   61.969892][ T5999] netlink: 'syz.2.48': attribute type 21 has an invalid length.
[   61.973310][ T5999] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   61.980852][ T5999] netlink: 100 bytes leftover after parsing attributes in process `syz.2.48'.
[   62.025462][ T6000] netlink: 'syz.1.47': attribute type 3 has an invalid length.
[   62.035351][ T6000] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.47'.
[   62.411170][ T6019] netlink: 68 bytes leftover after parsing attributes in process `syz.0.56'.
[   62.442052][ T6021] netlink: 'syz.2.57': attribute type 21 has an invalid length.
[   62.544350][ T6028] netlink: 'syz.2.60': attribute type 1 has an invalid length.
[   62.548624][ T6028] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.60'.
[   62.803657][ T6045] dvmrp1: tun_chr_ioctl cmd 1074025677
[   62.806268][ T6045] dvmrp1: linktype set to 773
[   62.975604][ T6055] netlink: 'syz.0.73': attribute type 2 has an invalid length.
[   62.978514][ T6055] netlink: 'syz.0.73': attribute type 1 has an invalid length.
[   63.097354][    C1] hrtimer: interrupt took 28477 ns
[   63.847837][ T5846] Bluetooth: hci0: command tx timeout
[   63.927547][ T5846] Bluetooth: hci1: command tx timeout
[   63.927840][ T5853] Bluetooth: hci2: command tx timeout
[   64.000303][ T6080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.85'.
[   64.454040][ T6094] netlink: 'syz.0.92': attribute type 49 has an invalid length.
[   64.869941][ T6131] netlink: 'syz.0.109': attribute type 29 has an invalid length.
[   65.270588][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'.
[   65.514303][ T6148] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   65.695714][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1048289088 wd_nsec: 1048289142
[   65.928288][ T5853] Bluetooth: hci0: command tx timeout
[   65.969995][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.122'.
[   65.975997][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.122'.
[   65.992665][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.122'.
[   66.007454][ T5853] Bluetooth: hci2: command tx timeout
[   66.007665][ T5846] Bluetooth: hci1: command tx timeout
[   66.033945][ T6169] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.124'.
[   66.763787][ T6199] validate_nla: 4 callbacks suppressed
[   66.763797][ T6199] netlink: 'syz.1.140': attribute type 1 has an invalid length.
[   68.063637][ T6231] Zero length message leads to an empty skb
[   68.069830][ T6231] Driver unsupported XDP return value 0 on prog  (id 57) dev N/A, expect packet loss!
[   68.144289][ T6230] vxcan1: entered allmulticast mode
[   69.745517][ T6259] C: renamed from team_slave_0 (while UP)
[   69.776466][ T6259] netlink: 'syz.2.164': attribute type 3 has an invalid length.
[   69.779827][ T6259] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   69.782728][ T6259] __nla_validate_parse: 4 callbacks suppressed
[   69.782770][ T6259] netlink: 116 bytes leftover after parsing attributes in process `syz.2.164'.
[   69.841385][ T6266] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.169'.
[   70.680543][ T6281] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.176'.
[   70.732219][ T6283] bridge_slave_1: left allmulticast mode
[   70.734813][ T6283] bridge_slave_1: left promiscuous mode
[   70.746008][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.753324][ T6283] bridge_slave_0: left allmulticast mode
[   70.755843][ T6283] bridge_slave_0: left promiscuous mode
[   70.761606][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.026595][ T6297] 0: renamed from bond_slave_1 (while UP)
[   71.095408][ T5846] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   71.210440][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.212874][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.231797][ T6308] netlink: 'syz.2.185': attribute type 2 has an invalid length.
[   72.057100][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'.
[   72.098724][ T6329] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   72.102338][ T6329] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   72.109815][ T6330] netlink: 'syz.1.196': attribute type 2 has an invalid length.
[   72.114849][ T6330] netlink: 'syz.1.196': attribute type 8 has an invalid length.
[   72.117744][ T6330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.196'.
[   72.293955][ T6346] delete_channel: no stack
[   72.296071][ T6346] delete_channel: no stack
[   74.065027][ T6397] netlink: 'syz.1.229': attribute type 3 has an invalid length.
[   74.069625][ T6397] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.229'.
[   74.149822][ T6405] netlink: 'syz.2.233': attribute type 2 has an invalid length.
[   74.211561][ T6408] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.234'.
[   74.305983][ T6416] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.238'.
[   74.721504][ T6446] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.252'.
[   74.854956][ T6456] netlink: 'syz.2.257': attribute type 3 has an invalid length.
[   74.860177][ T6456] netlink: 'syz.2.257': attribute type 1 has an invalid length.
[   74.863626][ T6456] netlink: 116 bytes leftover after parsing attributes in process `syz.2.257'.
[   74.869877][ T6456] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   75.043451][ T6466] netlink: 'syz.0.262': attribute type 21 has an invalid length.
[   75.156039][ T6477] netlink: 'syz.0.266': attribute type 10 has an invalid length.
[   75.158794][ T6477] netlink: 55 bytes leftover after parsing attributes in process `syz.0.266'.
[   75.971900][ T6524] netlink: 17 bytes leftover after parsing attributes in process `syz.1.288'.
[   75.975529][ T6524] netlink: zone id is out of range
[   75.978248][ T6524] netlink: zone id is out of range
[   75.982418][ T6524] netlink: zone id is out of range
[   75.986692][ T6524] netlink: zone id is out of range
[   75.990174][ T6524] netlink: zone id is out of range
[   75.992238][ T6524] netlink: zone id is out of range
[   75.994009][ T6524] netlink: zone id is out of range
[   75.998635][ T6524] netlink: zone id is out of range
[   76.000488][ T6524] netlink: zone id is out of range
[   76.049680][ T6528] netlink: 'syz.0.290': attribute type 1 has an invalid length.
[   76.052541][ T6528] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.290'.
[   76.165529][ T6532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.292'.
[   76.383118][ T6546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.298'.
[   78.090183][ T6593] netlink: 'syz.1.320': attribute type 27 has an invalid length.
[   78.093026][ T6593] netlink: 'syz.1.320': attribute type 3 has an invalid length.
[   78.095610][ T6593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.320'.
[   78.267970][ T6611] netlink: 'syz.2.330': attribute type 39 has an invalid length.
[   78.323649][ T6611] hsr_slave_0 (unregistering): left promiscuous mode
[   80.418775][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'.
[   80.482167][ T6672] netlink: 'syz.2.354': attribute type 6 has an invalid length.
[   80.485203][ T6672] netlink: 164 bytes leftover after parsing attributes in process `syz.2.354'.
[   81.468781][   T10] cfg80211: failed to load regulatory.db
[   81.586412][ T6709] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[   81.599780][ T6709] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[   81.604260][ T6709] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[   81.759673][ T6721] delete_channel: no stack
[   81.761738][ T6721] delete_channel: no stack
[   82.050696][ T5846] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[   82.259606][ T6747] syzkaller0: tun_chr_ioctl cmd 1074025677
[   82.265365][ T6747] syzkaller0: Linktype set failed because interface is up
[   82.279905][   T12] syzkaller0: tun_net_xmit 76
[   82.282006][   T12] syzkaller0: tun_net_xmit 48
[   82.298103][ T5918] syzkaller0: tun_net_xmit 76
[   82.741965][ T6774] netlink: 'syz.0.396': attribute type 5 has an invalid length.
[   84.171318][ T6792] netlink: 'syz.1.404': attribute type 10 has an invalid length.
[   84.331390][ T6792] veth1_vlan: entered allmulticast mode
[   84.434654][ T6792] team0: Device veth1_vlan failed to register rx_handler
[   84.461767][ T6792] syz.1.404 (6792) used greatest stack depth: 18680 bytes left
[   84.562956][ T6811] netlink: 'syz.0.411': attribute type 29 has an invalid length.
[   84.849884][ T6830] netlink: 'syz.0.419': attribute type 2 has an invalid length.
[   84.852646][ T6830] netlink: 'syz.0.419': attribute type 8 has an invalid length.
[   84.862420][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.419'.
[   85.193790][ T6855] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[   85.353196][ T6859] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   85.356893][ T6859] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.433'.
[   86.367032][ T6886] netlink: 'syz.0.446': attribute type 21 has an invalid length.
[   86.383320][ T6886] netlink: 128 bytes leftover after parsing attributes in process `syz.0.446'.
[   86.398879][ T6886] netlink: 'syz.0.446': attribute type 5 has an invalid length.
[   86.401388][ T6886] netlink: 'syz.0.446': attribute type 6 has an invalid length.
[   86.404314][ T6886] netlink: 3 bytes leftover after parsing attributes in process `syz.0.446'.
[   87.366887][ T6924] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.464'.
[   87.632695][ T6938] netlink: 'syz.1.471': attribute type 10 has an invalid length.
[   87.657773][ T6938] netlink: 'syz.1.471': attribute type 3 has an invalid length.
[   87.660437][ T6938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.471'.
[   87.744707][ T6955] netlink: 56 bytes leftover after parsing attributes in process `syz.2.479'.
[   87.773484][ T6955] netlink: 56 bytes leftover after parsing attributes in process `syz.2.479'.
[   87.785482][ T6955] netlink: 56 bytes leftover after parsing attributes in process `syz.2.479'.
[   87.808121][ T6957] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.480'.
[   87.811410][ T6957] net_ratelimit: 74 callbacks suppressed
[   87.811420][ T6957] openvswitch: netlink: Message has 6 unknown bytes.
[   87.921257][ T6971] netlink: 271 bytes leftover after parsing attributes in process `syz.0.486'.
[   88.863989][ T7017] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.506'.
[   89.461401][ T7069] validate_nla: 5 callbacks suppressed
[   89.461443][ T7069] netlink: 'syz.2.531': attribute type 21 has an invalid length.
[   89.767140][ T7096] netlink: 'syz.2.544': attribute type 21 has an invalid length.
[   89.772240][ T7096] IPv6: NLM_F_CREATE should be specified when creating new route
[   90.056246][ T7116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.194525][ T7125] delete_channel: no stack
[   90.284020][ T7130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.287389][ T7130] IPv6: NLM_F_CREATE should be set when creating new route
[   90.290091][ T7130] IPv6: NLM_F_CREATE should be set when creating new route
[   90.293001][ T7130] IPv6: NLM_F_CREATE should be set when creating new route
[   90.533919][ T7147] netlink: 'syz.2.567': attribute type 22 has an invalid length.
[   90.830421][ T7170] netlink: 'syz.0.578': attribute type 1 has an invalid length.
[   90.832904][ T7170] netlink: 'syz.0.578': attribute type 4 has an invalid length.
[   91.501651][ T5846] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[   91.612489][ T5846] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   92.063776][ T7233] netlink: 'syz.1.607': attribute type 21 has an invalid length.
[   92.435184][ T7257] delete_channel: no stack
[   92.451383][ T7262] netlink: 'syz.0.622': attribute type 33 has an invalid length.
[   92.469649][ T7264] netlink: 'syz.2.623': attribute type 21 has an invalid length.
[   92.561293][ T7272] C: renamed from team_slave_0 (while UP)
[   92.564842][ T7272] netlink: 'syz.1.627': attribute type 2 has an invalid length.
[   92.571825][ T7272] __nla_validate_parse: 12 callbacks suppressed
[   92.571836][ T7272] netlink: 120 bytes leftover after parsing attributes in process `syz.1.627'.
[   92.579271][ T7272] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   93.095576][ T7306] netlink: 'syz.2.643': attribute type 9 has an invalid length.
[   93.101900][ T7306] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.643'.
[   93.687712][ T5853] Bluetooth: hci0: command tx timeout
[   94.326347][ T7362] raw_sendmsg: syz.2.670 forgot to set AF_INET. Fix it!
[   94.456009][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.676'.
[   94.460001][ T7374] tc_dump_action: action bad kind
[   94.681060][ T7387] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   94.685339][ T7387] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   95.995488][ T7421] validate_nla: 1 callbacks suppressed
[   95.995544][ T7421] netlink: 'syz.1.695': attribute type 21 has an invalid length.
[   96.005364][ T7421] netlink: 'syz.1.695': attribute type 1 has an invalid length.
[   96.458172][ T7468] netlink: 'syz.1.707': attribute type 3 has an invalid length.
[   96.460852][ T7468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.707'.
[   96.770301][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'.
[   96.885464][ T7487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.725'.
[   96.896679][ T7488] netlink: 'syz.0.726': attribute type 21 has an invalid length.
[   96.906731][ T7488] netlink: 'syz.0.726': attribute type 15 has an invalid length.
[   96.907077][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.727'.
[   96.911451][ T7488] netlink: 156 bytes leftover after parsing attributes in process `syz.0.726'.
[   96.915980][ T7488] IPv6: NLM_F_CREATE should be specified when creating new route
[   96.934673][ T7488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.938016][ T7488] IPv6: NLM_F_CREATE should be set when creating new route
[   96.941319][ T7488] IPv6: NLM_F_CREATE should be set when creating new route
[   96.944180][ T7488] IPv6: NLM_F_CREATE should be set when creating new route
[   96.951876][ T7492] netlink: 'syz.1.729': attribute type 10 has an invalid length.
[   96.956422][ T7492] netlink: 55 bytes leftover after parsing attributes in process `syz.1.729'.
[   97.243992][ T7512] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.736'.
[   97.478867][ T7532] netlink: 'syz.0.746': attribute type 10 has an invalid length.
[   97.482164][ T7532] dummy0: entered promiscuous mode
[   97.491551][ T7532] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   98.303353][ T7561] : renamed from bond0 (while UP)
[   98.473264][ T7570] netlink: 'syz.0.762': attribute type 3 has an invalid length.
[   98.475841][ T7570] netlink: 'syz.0.762': attribute type 1 has an invalid length.
[   98.552028][ T7572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.641294][ T7584] __nla_validate_parse: 1 callbacks suppressed
[   98.641305][ T7584] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.766'.
[   98.703473][ T7585] netlink: 5 bytes leftover after parsing attributes in process `syz.2.768'.
[   98.706693][ T7585] netlink: 'syz.2.768': attribute type 2 has an invalid length.
[   98.711732][ T7585] netlink: 130248 bytes leftover after parsing attributes in process `syz.2.768'.
[  100.260951][ T7636] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.792'.
[  100.395007][ T7647] Q6\bY4: renamed from lo (while UP)
[  102.305173][ T7698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.818'.
[  102.384645][ T7708] netlink: 26 bytes leftover after parsing attributes in process `syz.1.825'.
[  102.445825][ T7719] netlink: 180 bytes leftover after parsing attributes in process `syz.1.828'.
[  103.670598][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  103.674155][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  103.677034][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  103.681313][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  103.684803][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  103.787238][ T7736] chnl_net:caif_netlink_parms(): no params data found
[  103.833793][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.836230][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.839375][ T7736] bridge_slave_0: entered allmulticast mode
[  103.842098][ T7736] bridge_slave_0: entered promiscuous mode
[  103.845400][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.848470][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.850875][ T7736] bridge_slave_1: entered allmulticast mode
[  103.853667][ T7736] bridge_slave_1: entered promiscuous mode
[  103.872927][ T7736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.878114][ T7736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.897179][ T7736] team0: Port device team_slave_0 added
[  103.900941][ T7736] team0: Port device team_slave_1 added
[  103.918707][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.921725][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.940984][ T7736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.946631][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.950534][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.963516][ T7736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.013151][ T7736] hsr_slave_0: entered promiscuous mode
[  104.019483][ T7736] hsr_slave_1: entered promiscuous mode
[  104.027815][ T7736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.030517][ T7736] Cannot create hsr debugfs directory
[  104.156598][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.161104][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.164477][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.168416][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.168811][ T7736] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.174666][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.177784][ T7736] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.184843][ T7736] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.198981][ T7736] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.233034][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.236244][ T7736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.239820][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.242891][ T7736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.364505][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.396167][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.401813][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.413337][ T7736] 8021q: adding VLAN 0 to HW filter on device team0
[  104.427286][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.430469][ T4673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.439681][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.442557][ T4673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.578969][ T7750] chnl_net:caif_netlink_parms(): no params data found
[  104.690351][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.692975][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.695500][ T7750] bridge_slave_0: entered allmulticast mode
[  104.701149][ T7750] bridge_slave_0: entered promiscuous mode
[  104.707249][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.710372][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.712773][ T7750] bridge_slave_1: entered allmulticast mode
[  104.715779][ T7750] bridge_slave_1: entered promiscuous mode
[  104.743076][ T7750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.750769][ T7750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.793314][ T7750] team0: Port device team_slave_0 added
[  104.800294][ T7736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.805514][ T7750] team0: Port device team_slave_1 added
[  105.083245][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.085685][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.100701][ T7750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.106905][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.110130][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.122257][ T7750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.174884][ T7750] hsr_slave_0: entered promiscuous mode
[  105.179312][ T7750] hsr_slave_1: entered promiscuous mode
[  105.199050][ T7750] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.202239][ T7750] Cannot create hsr debugfs directory
[  105.319976][ T7736] veth0_vlan: entered promiscuous mode
[  105.337043][ T7736] veth1_vlan: entered promiscuous mode
[  105.371762][ T7750] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.380111][ T7750] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.385156][ T7750] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.390134][ T7750] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.412241][ T7736] veth0_macvtap: entered promiscuous mode
[  105.422358][ T7736] veth1_macvtap: entered promiscuous mode
[  105.446525][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.464942][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.480884][ T7736] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.483940][ T7736] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.490065][ T7736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.492962][ T7736] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.539102][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.550432][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.553031][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.564212][ T7750] 8021q: adding VLAN 0 to HW filter on device team0
[  105.580601][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.581894][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.583633][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.589036][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.602734][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.605228][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.712111][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.780438][ T5853] Bluetooth: hci0: command tx timeout
[  105.882412][ T7750] veth0_vlan: entered promiscuous mode
[  105.888234][ T7750] veth1_vlan: entered promiscuous mode
[  105.905451][ T7750] veth0_macvtap: entered promiscuous mode
[  105.911218][ T7750] veth1_macvtap: entered promiscuous mode
[  105.921949][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.929410][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.934370][ T7750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.937238][ T7750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.940977][ T7750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.943879][ T7750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.159834][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.175031][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.236865][ T4673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.241658][ T4673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.250812][ T5853] Bluetooth: hci1: command tx timeout
[  106.840728][ T7852] validate_nla: 1 callbacks suppressed
[  106.840786][ T7852] netlink: 'syz.3.864': attribute type 9 has an invalid length.
[  106.845589][ T7852] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.864'.
[  107.035374][ T7885] netlink: 830 bytes leftover after parsing attributes in process `syz.0.880'.
[  107.096169][ T7887] netlink: 'syz.4.881': attribute type 21 has an invalid length.
[  107.203143][ T7897] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.886'.
[  107.290021][ T7909] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.892'.
[  107.674257][ T7938] netlink: 'syz.4.905': attribute type 29 has an invalid length.
[  107.848159][ T5853] Bluetooth: hci0: command tx timeout
[  107.912103][ T7952] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.911'.
[  107.916148][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'.
[  107.920316][ T7952] netlink: 125808 bytes leftover after parsing attributes in process `syz.4.911'.
[  107.976023][ T7958] netlink: 'syz.4.914': attribute type 16 has an invalid length.
[  107.980307][ T7958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.914'.
[  108.328288][ T5853] Bluetooth: hci1: command tx timeout
[  109.229473][ T7995] syzkaller0: entered promiscuous mode
[  109.231626][ T7995] syzkaller0: entered allmulticast mode
[  109.351653][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'.
[  109.929873][ T5853] Bluetooth: hci0: command tx timeout
[  110.407496][ T5853] Bluetooth: hci1: command tx timeout
[  110.620586][ T8055] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.958'.
[  110.635113][ T8055] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  110.662822][ T8060] netlink: 'syz.4.961': attribute type 14 has an invalid length.
[  110.808645][ T8073] netlink: 'syz.3.964': attribute type 5 has an invalid length.
[  111.122514][ T8080] netlink: 'syz.4.968': attribute type 39 has an invalid length.
[  112.007748][ T5853] Bluetooth: hci0: command tx timeout
[  112.488068][ T5853] Bluetooth: hci1: command tx timeout
[  113.140934][ T8152] netlink: 'syz.3.998': attribute type 16 has an invalid length.
[  113.144020][ T8152] __nla_validate_parse: 1 callbacks suppressed
[  113.144030][ T8152] netlink: 168 bytes leftover after parsing attributes in process `syz.3.998'.
[  113.653142][ T8177] netlink: 'syz.3.1009': attribute type 2 has an invalid length.
[  113.656455][ T8177] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1009'.
[  113.660963][ T8177] nbd: must specify at least one socket
[  113.855082][ T8188] netlink: 'syz.4.1014': attribute type 16 has an invalid length.
[  113.862055][ T8188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1014'.
[  114.500668][ T8216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1026'.
[  116.069734][ T8229] netlink: 'syz.0.1031': attribute type 10 has an invalid length.
[  116.092490][ T8231] netlink: 'syz.4.1033': attribute type 1 has an invalid length.
[  116.096355][ T8231] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1033'.
[  116.103505][ T8229] team0: Port device syz_tun added
[  116.261923][ T8241] netlink: 'syz.0.1038': attribute type 10 has an invalid length.
[  116.267811][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.271231][ T8241] : (slave batadv0): Enslaving as an active interface with an up link
[  116.277094][ T8241] netlink: 'syz.0.1038': attribute type 10 has an invalid length.
[  116.283781][ T8241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1038'.
[  116.286882][ T8241] batadv0: entered promiscuous mode
[  116.292430][ T8241] batadv0: entered allmulticast mode
[  116.348101][ T8241] : (slave batadv0): Releasing backup interface
[  116.610913][ T8241] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  116.773465][ T8250] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1041'.
[  117.003880][ T8258] macvtap0: refused to change device tx_queue_len
[  117.231205][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1055'.
[  117.329002][ T8284] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1057'.
[  117.415569][ T8287] netlink: 'syz.4.1058': attribute type 10 has an invalid length.
[  117.421263][ T8287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1058'.
[  118.827867][ T8356] __nla_validate_parse: 1 callbacks suppressed
[  118.827878][ T8356] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1090'.
[  119.012353][ T8362] netlink: 'syz.0.1093': attribute type 1 has an invalid length.
[  119.950923][ T8383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1102'.
[  119.961867][ T8385] netlink: 'syz.4.1103': attribute type 21 has an invalid length.
[  119.965289][ T8385] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.196145][ T8412] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1116'.
[  120.221108][ T8414] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.1117'.
[  120.245958][ T8418] netlink: 'syz.0.1119': attribute type 21 has an invalid length.
[  120.263657][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1119'.
[  120.270611][ T8418] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  120.436696][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.444661][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.447205][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.510024][ T8444] netlink: 'syz.0.1132': attribute type 7 has an invalid length.
[  120.512673][ T8444] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1132'.
[  120.585685][ T8453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1133'.
[  124.073347][ T8483] netlink: 'syz.4.1147': attribute type 1 has an invalid length.
[  124.076158][ T8483] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1147'.
[  124.159898][ T8490] netlink: 'syz.3.1150': attribute type 10 has an invalid length.
[  124.167006][ T8490] batman_adv: batadv0: Adding interface: team0
[  124.170483][ T8490] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.179888][ T8490] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  124.237124][ T8496] netlink: 'syz.3.1153': attribute type 1 has an invalid length.
[  124.399951][ T8507] can: request_module (can-proto-5) failed.
[  124.491305][ T8506] delete_channel: no stack
[  124.649552][ T8525] cgroup: fork rejected by pids controller in /syz3
[  125.952413][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.054464][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.160686][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.212389][   T12] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.392445][   T12] bridge_slave_1: left allmulticast mode
[  126.395125][   T12] bridge_slave_1: left promiscuous mode
[  126.408817][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.424930][   T12] bridge_slave_0: left allmulticast mode
[  126.426836][   T12] bridge_slave_0: left promiscuous mode
[  126.429411][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.465209][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.469499][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.472786][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.480590][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.483496][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.714428][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.724696][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.729009][   T12] bond0 (unregistering): Released all slaves
[  127.091176][ T8580] chnl_net:caif_netlink_parms(): no params data found
[  127.157012][   T12] hsr_slave_0: left promiscuous mode
[  127.164069][   T12] hsr_slave_1: left promiscuous mode
[  127.166357][   T12] batman_adv: batadv0: Removing interface: team0
[  127.169548][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.172030][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.174950][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.185821][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.211014][   T12] veth1_macvtap: left promiscuous mode
[  127.213246][   T12] veth0_macvtap: left promiscuous mode
[  127.216373][   T12] veth1_vlan: left promiscuous mode
[  127.228276][   T12] veth0_vlan: left promiscuous mode
[  127.540256][   T12] team0 (unregistering): Port device team_slave_1 removed
[  127.562640][   T12] team0 (unregistering): Port device team_slave_0 removed
[  128.568681][ T5853] Bluetooth: hci0: command tx timeout
[  128.713048][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.717141][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.720847][ T8580] bridge_slave_0: entered allmulticast mode
[  128.723642][ T8580] bridge_slave_0: entered promiscuous mode
[  128.788833][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.791646][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.794343][ T8580] bridge_slave_1: entered allmulticast mode
[  128.806376][ T8580] bridge_slave_1: entered promiscuous mode
[  128.970692][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.976971][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.277004][ T8580] team0: Port device team_slave_0 added
[  129.302221][ T8580] team0: Port device team_slave_1 added
[  129.326728][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.331468][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.341895][ T8580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.348398][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.351756][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.361168][ T8580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.219374][ T8580] hsr_slave_0: entered promiscuous mode
[  130.221752][ T8580] hsr_slave_1: entered promiscuous mode
[  130.224010][ T8580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.227134][ T8580] Cannot create hsr debugfs directory
[  130.265298][ T8688] syzkaller1: tun_chr_ioctl cmd 1074025677
[  130.269120][ T8688] syzkaller1: linktype set to 776
[  130.545523][ T8708] netlink: 'syz.0.1227': attribute type 46 has an invalid length.
[  130.551432][ T8708] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1227'.
[  130.651758][ T5853] Bluetooth: hci0: command tx timeout
[  131.854677][ T8721] cgroup: fork rejected by pids controller in /syz0
[  131.862094][ T8719] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1231'.
[  131.865946][ T8719] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  131.996683][ T8580] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  132.001991][ T8580] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  132.014037][ T8580] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  132.036216][ T8580] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  132.134456][ T5851] team0: Port device syz_tun removed
[  132.201099][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.232949][ T8580] 8021q: adding VLAN 0 to HW filter on device team0
[  132.239332][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.241824][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.270594][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.273141][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.291045][ T8580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  132.294547][ T8580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.493203][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.535929][ T8580] veth0_vlan: entered promiscuous mode
[  132.553300][ T8580] veth1_vlan: entered promiscuous mode
[  132.586788][ T8580] veth0_macvtap: entered promiscuous mode
[  132.592397][ T8580] veth1_macvtap: entered promiscuous mode
[  132.604401][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  132.609580][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.611943][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  132.614789][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  132.616799][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.623045][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  132.626667][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.628579][ T8580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.637896][ T8580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.640749][ T8580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.643624][ T8580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.650723][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.652935][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.727900][ T5853] Bluetooth: hci0: command tx timeout
[  132.739176][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.741736][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.779913][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.782658][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.866719][ T8761] chnl_net:caif_netlink_parms(): no params data found
[  132.964921][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.967661][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.970151][ T8761] bridge_slave_0: entered allmulticast mode
[  132.976979][ T8761] bridge_slave_0: entered promiscuous mode
[  132.981018][ T8785] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1245'.
[  132.986088][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.991489][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.994246][ T8761] bridge_slave_1: entered allmulticast mode
[  132.997100][ T8761] bridge_slave_1: entered promiscuous mode
[  133.027566][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.032683][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.066664][ T8761] team0: Port device team_slave_0 added
[  133.074494][ T8761] team0: Port device team_slave_1 added
[  133.100250][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.102584][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.111002][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.116093][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.119135][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.127762][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.209234][ T8761] hsr_slave_0: entered promiscuous mode
[  133.212444][ T8761] hsr_slave_1: entered promiscuous mode
[  133.215335][ T8761] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.218543][ T8761] Cannot create hsr debugfs directory
[  133.270373][ T8790] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  133.273306][ T8790] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  133.411617][ T8761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.453844][ T8792] netlink: 'syz.4.1249': attribute type 2 has an invalid length.
[  133.456816][ T8792] netlink: 'syz.4.1249': attribute type 8 has an invalid length.
[  133.470160][ T8792] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1249'.
[  133.510476][ T8761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.578410][ T8761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.636459][ T8761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.776682][ T8761] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  133.784240][ T8761] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  133.788858][ T8761] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  133.795531][ T8761] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  133.861539][ T8814] netlink: 'syz.4.1256': attribute type 8 has an invalid length.
[  133.864808][ T8814] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1256'.
[  133.894849][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.919492][ T8761] 8021q: adding VLAN 0 to HW filter on device team0
[  133.921025][ T8816] netlink: 'syz.3.1257': attribute type 10 has an invalid length.
[  133.926018][ T8816] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1257'.
[  133.939452][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.942024][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.946908][ T8816] team0: entered promiscuous mode
[  133.957511][ T8816] team_slave_0: entered promiscuous mode
[  133.961607][ T8816] team_slave_1: entered promiscuous mode
[  133.984181][ T8816] bridge0: port 3(team0) entered blocking state
[  133.986959][ T8816] bridge0: port 3(team0) entered disabled state
[  133.992137][ T8816] team0: entered allmulticast mode
[  133.994171][ T8816] team_slave_0: entered allmulticast mode
[  133.997106][ T8816] team_slave_1: entered allmulticast mode
[  134.069540][ T8816] bridge0: port 3(team0) entered blocking state
[  134.072153][ T8816] bridge0: port 3(team0) entered forwarding state
[  134.084435][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.086757][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.141001][ T8761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.246172][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.292784][ T8837] netlink: 'syz.4.1265': attribute type 16 has an invalid length.
[  134.298985][ T8761] veth0_vlan: entered promiscuous mode
[  134.304378][ T8837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1265'.
[  134.307116][ T8761] veth1_vlan: entered promiscuous mode
[  134.315630][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.341858][ T8761] veth0_macvtap: entered promiscuous mode
[  134.348856][ T8761] veth1_macvtap: entered promiscuous mode
[  134.356208][ T8839] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1266'.
[  134.365990][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.374716][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.382395][ T8841] netlink: 'syz.4.1267': attribute type 21 has an invalid length.
[  134.383118][ T8761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.389420][ T8761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.392272][ T8761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.395294][ T8761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.412705][ T8841] netlink: 'syz.4.1267': attribute type 1 has an invalid length.
[  134.415419][ T8841] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1267'.
[  134.471252][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.474353][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.496885][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.499969][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.521377][ T8846] netlink: 'syz.3.1268': attribute type 3 has an invalid length.
[  134.524136][ T8846] netlink: 199752 bytes leftover after parsing attributes in process `syz.3.1268'.
[  134.657672][ T5853] Bluetooth: hci2: command tx timeout
[  134.820527][ T5853] Bluetooth: hci0: command tx timeout
[  135.920633][ T8891] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1287'.
[  136.038595][ T8893] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1289'.
[  136.190530][ T8911] netlink: 'syz.0.1297': attribute type 21 has an invalid length.
[  136.727951][ T5853] Bluetooth: hci2: command tx timeout
[  136.895594][ T8958] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1320'.
[  138.122113][ T8969] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1324'.
[  138.808220][ T5853] Bluetooth: hci2: command tx timeout
[  139.013845][ T8977] netlink: 'syz.3.1328': attribute type 27 has an invalid length.
[  139.030249][ T8977] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1328'.
[  139.033646][ T8977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  139.231448][ T8996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1337'.
[  139.273113][ T8999] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1339'.
[  139.413651][ T9003] syzkaller0: entered promiscuous mode
[  139.415522][ T9003] syzkaller0: entered allmulticast mode
[  139.502561][ T9010] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1343'.
[  139.511709][ T9010] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1343'.
[  139.559189][ T9011] netlink: 'syz.0.1342': attribute type 39 has an invalid length.
[  139.561842][ T9011] netlink: 'syz.0.1342': attribute type 4 has an invalid length.
[  139.564435][ T9011] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1342'.
[  139.588983][ T9011] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  139.739947][ T9024] netlink: 'syz.0.1348': attribute type 21 has an invalid length.
[  139.742537][ T9024] netlink: 'syz.0.1348': attribute type 4 has an invalid length.
[  139.852565][ T9041] netlink: 'syz.4.1358': attribute type 16 has an invalid length.
[  139.855064][ T9041] netlink: 'syz.4.1358': attribute type 3 has an invalid length.
[  140.296355][ T9092] netlink: 'syz.3.1383': attribute type 11 has an invalid length.
[  140.603967][ T9090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.664751][ T9113] netlink: 'syz.3.1393': attribute type 13 has an invalid length.
[  140.759337][ T9123] netlink: 'syz.4.1398': attribute type 10 has an invalid length.
[  140.888001][ T5853] Bluetooth: hci2: command tx timeout
[  141.250724][ T9138] syzkaller0: entered promiscuous mode
[  141.252918][ T9138] syzkaller0: entered allmulticast mode
[  141.341460][ T9141] netlink: 'syz.3.1405': attribute type 33 has an invalid length.
[  141.348958][ T9141] __nla_validate_parse: 18 callbacks suppressed
[  141.348973][ T9141] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1405'.
[  141.421154][ T9143] netlink: 'syz.3.1406': attribute type 1 has an invalid length.
[  142.039223][ T9177] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1423'.
[  142.102854][ T9182] netlink: 'syz.0.1424': attribute type 10 has an invalid length.
[  142.114731][ T9182] team0: Port device geneve1 added
[  142.122443][ T9182] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1424'.
[  142.135385][ T9183] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1425'.
[  142.160059][ T9183] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1425'.
[  142.516209][ T9197] Dead loop on virtual device ip6_vti0, fix it urgently!
[  142.643422][ T5853] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[  142.776462][ T9208] delete_channel: no stack
[  142.781618][ T9208] delete_channel: no stack
[  142.905671][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'.
[  143.067048][ T9222] syzkaller0: left promiscuous mode
[  143.069930][ T9222] syzkaller0: left allmulticast mode
[  143.103762][ T9224] netlink: 'syz.4.1444': attribute type 6 has an invalid length.
[  143.106404][ T9224] netlink: 'syz.4.1444': attribute type 1 has an invalid length.
[  143.124814][ T9224] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1444'.
[  143.213358][ T9230] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1447'.
[  143.287237][ T9232] netlink: 'syz.0.1448': attribute type 10 has an invalid length.
[  143.499427][ T9253] netlink: 'syz.4.1458': attribute type 21 has an invalid length.
[  143.710930][ T9270] netlink: 'syz.4.1465': attribute type 1 has an invalid length.
[  143.713711][ T9270] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1465'.
[  143.840040][ T9278] netlink: 'syz.0.1468': attribute type 39 has an invalid length.
[  144.321632][ T9289] netlink: 'syz.4.1473': attribute type 3 has an invalid length.
[  144.692610][ T5853] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  145.022468][ T9328] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1491'.
[  145.709364][ T9337] macvlan0: entered promiscuous mode
[  145.712718][ T9337] macvlan0: entered allmulticast mode
[  145.714952][ T9337] veth1_vlan: entered allmulticast mode
[  146.704497][ T9398] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1522'.
[  146.709597][ T9398] openvswitch: netlink: Message has 6 unknown bytes.
[  146.957916][ T9393] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1520'.
[  147.228389][ T9413] syzkaller0: entered promiscuous mode
[  147.230402][ T9413] syzkaller0: entered allmulticast mode
[  147.257037][ T9416] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  147.562517][ T9441] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1542'.
[  147.603573][ T9443] bond_slave_1: entered promiscuous mode
[  147.605803][ T9443] bond_slave_1: entered allmulticast mode
[  147.672486][ T9447] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1545'.
[  149.204999][ T5853] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[  149.365748][ T9479] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1559'.
[  149.418224][ T9483] validate_nla: 2 callbacks suppressed
[  149.418319][ T9483] netlink: 'syz.4.1562': attribute type 29 has an invalid length.
[  149.445684][ T9483] netlink: 'syz.4.1562': attribute type 10 has an invalid length.
[  149.590421][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.616861][ T9483] team0: Port device bond0 added
[  150.794119][ T9532] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1582'.
[  150.812140][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  151.807153][ T9600] netlink: 'syz.4.1613': attribute type 10 has an invalid length.
[  151.811729][ T9600] bridge0: port 3(team0) entered blocking state
[  151.813971][ T9600] bridge0: port 3(team0) entered disabled state
[  151.820639][ T9600] team0: entered allmulticast mode
[  151.822987][ T9600] team_slave_0: entered allmulticast mode
[  151.825416][ T9600] team_slave_1: entered allmulticast mode
[  151.828451][ T9600] bond0: entered allmulticast mode
[  151.831054][ T9600] bond_slave_0: entered allmulticast mode
[  151.833569][ T9600] bond_slave_1: entered allmulticast mode
[  151.842283][ T9600] team0: entered promiscuous mode
[  151.844484][ T9600] team_slave_0: entered promiscuous mode
[  151.847118][ T9600] team_slave_1: entered promiscuous mode
[  151.851385][ T9600] bond0: entered promiscuous mode
[  151.853044][ T9600] bond_slave_0: entered promiscuous mode
[  151.855951][ T9600] bond_slave_1: entered promiscuous mode
[  151.865981][ T9600] bridge0: port 3(team0) entered blocking state
[  151.868119][ T9600] bridge0: port 3(team0) entered forwarding state
[  152.961285][ T9633] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1627'.
[  153.000508][ T9637] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1629'.
[  153.159119][ T9649] netlink: 'syz.3.1635': attribute type 29 has an invalid length.
[  153.184899][ T9653] netlink: 'syz.0.1637': attribute type 10 has an invalid length.
[  153.403091][ T9665] netlink: 'syz.4.1643': attribute type 25 has an invalid length.
[  153.405620][ T9665] netlink: 'syz.4.1643': attribute type 1 has an invalid length.
[  154.194800][ T9704] netlink: 'syz.4.1657': attribute type 21 has an invalid length.
[  154.493356][ T9723] netlink: 'syz.4.1666': attribute type 10 has an invalid length.
[  154.496057][ T9723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1666'.
[  154.500640][ T9723] batman_adv: batadv0: Adding interface: hsr_slave_1
[  154.502893][ T9723] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.512765][ T9723] batman_adv: batadv0: Interface activated: hsr_slave_1
[  154.712542][ T9735] netlink: 'syz.4.1672': attribute type 16 has an invalid length.
[  154.717536][ T9735] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1672'.
[  154.977033][ T9745] netlink: 'syz.0.1674': attribute type 2 has an invalid length.
[  154.980034][ T9745] netlink: 'syz.0.1674': attribute type 8 has an invalid length.
[  154.984563][ T9745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1674'.
[  155.030887][ T9749] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1677'.
[  155.399434][ T9764] netlink: 'syz.3.1684': attribute type 2 has an invalid length.
[  155.402494][ T9764] netlink: 'syz.3.1684': attribute type 8 has an invalid length.
[  155.405124][ T9764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1684'.
[  155.736663][ T9780] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1692'.
[  155.840733][ T9785] delete_channel: no stack
[  156.137230][ T9794] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1698'.
[  156.148646][ T9794] netlink: 'syz.4.1698': attribute type 10 has an invalid length.
[  156.151756][ T9794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1698'.
[  156.850920][ T9813] netlink: 'syz.3.1706': attribute type 21 has an invalid length.
[  156.853580][ T9813] netlink: 'syz.3.1706': attribute type 1 has an invalid length.
[  159.181461][ T9880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.286485][ T9886] __nla_validate_parse: 3 callbacks suppressed
[  159.286578][ T9886] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1739'.
[  159.401725][ T9895] wg2: entered promiscuous mode
[  159.404111][ T9895] wg2: entered allmulticast mode
[  160.614788][ T9921] netlink: 'syz.4.1755': attribute type 21 has an invalid length.
[  160.622797][ T9921] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1755'.
[  161.404598][ T9952] syzkaller0: entered promiscuous mode
[  161.410934][ T9952] syzkaller0: entered allmulticast mode
[  161.422576][ T9950] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1768'.
[  163.635449][ T5875]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.640734][ T5875]  (unregistering): (slave 0): Releasing backup interface
[  163.644665][ T5875]  (unregistering): Released all slaves
[  163.951292][T10053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1809'.
[  163.961385][T10050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1809'.
[  163.975320][ T5875] hsr_slave_0: left promiscuous mode
[  163.981139][ T5875] hsr_slave_1: left promiscuous mode
[  163.989681][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.992473][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.015297][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.019660][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.042660][ T5875] veth1_macvtap: left promiscuous mode
[  164.044554][ T5875] veth0_macvtap: left promiscuous mode
[  164.046622][ T5875] veth1_vlan: left promiscuous mode
[  164.053619][ T5875] veth0_vlan: left promiscuous mode
[  164.058858][T10059] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1814'.
[  165.173141][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  165.200915][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  165.890604][T10100] syzkaller0: left promiscuous mode
[  165.893013][T10100] syzkaller0: left allmulticast mode
[  165.934852][T10102] netlink: 'syz.0.1833': attribute type 1 has an invalid length.
[  166.517942][T10138] tap0: tun_chr_ioctl cmd 1074025675
[  166.520282][T10138] tap0: persist disabled
[  166.534587][T10139] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1849'.
[  166.538785][T10136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1849'.
[  166.543777][T10136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1849'.
[  183.873717][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.877924][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.881895][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.885751][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.892686][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.896366][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.901830][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.913997][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.917275][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.925616][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.927582][ T5220] Bluetooth: hci3: command tx timeout
[  186.009446][ T5220] Bluetooth: hci4: command tx timeout
[  188.009936][ T5220] Bluetooth: hci3: command tx timeout
[  188.089278][ T5220] Bluetooth: hci4: command tx timeout
[  190.090454][ T5220] Bluetooth: hci3: command tx timeout
[  190.170427][ T5220] Bluetooth: hci4: command tx timeout
[  192.168506][ T5220] Bluetooth: hci3: command tx timeout
[  192.250282][ T5220] Bluetooth: hci4: command tx timeout
[  226.890606][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  250.983224][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  250.988875][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  250.993682][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.001021][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.005921][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.010849][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.015480][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.019127][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.023066][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.026441][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.491948][T10205] Bluetooth: hci0: command 0x0406 tx timeout
[  272.707420][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  272.709949][    C1] rcu: 	1-....: (1 GPs behind) idle=9634/1/0x4000000000000000 softirq=30117/30118 fqs=5247
[  272.715309][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  272.718122][    C1] rcu: 	 number:   793830          0            0
[  272.720414][    C1] rcu: 	cputime:    28169      24320          119   ==> 52500(ms)
[  272.723503][    C1] rcu: 	(t=10501 jiffies g=23189 q=3325 ncpus=2)
[  272.725851][    C1] CPU: 1 UID: 0 PID: 10175 Comm: syz.0.1866 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  272.725860][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.725865][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  272.725882][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  272.725887][    C1] RSP: 0018:ffffc900001e05a0 EFLAGS: 00000206
[  272.725895][    C1] RAX: 503e664da856d100 RBX: 1ffff9200003c0bc RCX: 503e664da856d100
[  272.725899][    C1] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  272.725904][    C1] RBP: ffffc900001e06a0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  272.725908][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  272.725913][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  272.725917][    C1] FS:  00007f39eaff76c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  272.725922][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  272.725927][    C1] CR2: 0000001b2f017ff8 CR3: 0000000112114000 CR4: 00000000000006f0
[  272.725951][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  272.725988][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000090602
[  272.725992][    C1] Call Trace:
[  272.725997][    C1]  <IRQ>
[  272.726005][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  272.726022][    C1]  __rcu_read_unlock+0x84/0xe0
[  272.726032][    C1]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  272.726042][    C1]  netif_receive_skb_list_internal+0xa4f/0xcc0
[  272.726051][    C1]  ? dev_gro_receive+0x1090/0x23b0
[  272.726062][    C1]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  272.726076][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  272.726102][    C1]  gro_receive_skb+0x642/0xce0
[  272.726123][    C1]  e1000_clean_rx_irq+0x980/0x1170
[  272.726164][    C1]  ? __pfx_e1000_clean_rx_irq+0x10/0x10
[  272.726177][    C1]  e1000_clean+0xca4/0x2b00
[  272.726207][    C1]  ? irqentry_exit+0x74/0x90
[  272.726221][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.726236][    C1]  ? __pfx_e1000_clean+0x10/0x10
[  272.726256][    C1]  __napi_poll+0xc7/0x480
[  272.726282][    C1]  net_rx_action+0x707/0xe30
[  272.726297][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  272.726319][    C1]  handle_softirqs+0x286/0x870
[  272.726328][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  272.726338][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  272.726348][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  272.726359][    C1]  __irq_exit_rcu+0xca/0x1f0
[  272.726367][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  272.726378][    C1]  irq_exit_rcu+0x9/0x30
[  272.726385][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  272.726394][    C1]  </IRQ>
[  272.726396][    C1]  <TASK>
[  272.726399][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  272.726406][    C1] RIP: 0010:__schedule+0xfa/0x4d00
[  272.726415][    C1] Code: 30 07 83 f8 08 0f 83 e9 16 00 00 89 c3 c1 e8 06 48 8d 3c c5 f0 e8 a1 8f be 08 00 00 00 e8 6e e3 b3 f6 48 0f a3 1d 86 88 32 04 <73> 16 e8 bf c0 37 f6 84 c0 75 0d 80 3d b2 6b 1c 04 00 0f 84 44 18
[  272.726420][    C1] RSP: 0018:ffffc90009387780 EFLAGS: 00000257
[  272.726427][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8b6f6062
[  272.726431][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa1e8f0
[  272.726434][    C1] RBP: ffffc90009387990 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  272.726439][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  272.726443][    C1] R13: dffffc0000000000 R14: ffff888107d0eb20 R15: dffffc0000000000
[  272.726451][    C1]  ? __schedule+0xf2/0x4d00
[  272.726463][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  272.726474][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  272.726484][    C1]  ? irqentry_enter+0x3d/0x60
[  272.726493][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  272.726502][    C1]  ? preempt_schedule_common+0x83/0xd0
[  272.726513][    C1]  ? __pfx___schedule+0x10/0x10
[  272.726523][    C1]  ? irqentry_exit+0x74/0x90
[  272.726531][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.726543][    C1]  ? preempt_schedule+0xae/0xc0
[  272.726552][    C1]  preempt_schedule_common+0x83/0xd0
[  272.726561][    C1]  preempt_schedule+0xae/0xc0
[  272.726569][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  272.726575][    C1]  ? __pfx_remote_function+0x10/0x10
[  272.726585][    C1]  ? __pfx_generic_exec_single+0x10/0x10
[  272.726595][    C1]  preempt_schedule_thunk+0x16/0x30
[  272.726608][    C1]  ? smp_call_function_single+0x46b/0x590
[  272.726616][    C1]  smp_call_function_single+0x470/0x590
[  272.726623][    C1]  ? __pfx_remote_function+0x10/0x10
[  272.726633][    C1]  ? __pfx_smp_call_function_single+0x10/0x10
[  272.726640][    C1]  ? __pfx_remote_function+0x10/0x10
[  272.726655][    C1]  perf_install_in_context+0x593/0x8f0
[  272.726669][    C1]  ? __pfx_perf_install_in_context+0x10/0x10
[  272.726677][    C1]  ? find_get_pmu_context+0x7cd/0x890
[  272.726685][    C1]  ? __pfx___perf_install_in_context+0x10/0x10
[  272.726700][    C1]  ? anon_inode_getfile+0x106/0x1a0
[  272.726707][    C1]  ? perf_event__header_size+0x168/0x230
[  272.726715][    C1]  __se_sys_perf_event_open+0x193a/0x1d70
[  272.726729][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  272.726744][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  272.726754][    C1]  ? rcu_is_watching+0x15/0xb0
[  272.726764][    C1]  ? do_syscall_64+0xbe/0x3b0
[  272.726772][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  272.726782][    C1]  do_syscall_64+0xfa/0x3b0
[  272.726790][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.726797][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.726804][    C1]  ? exc_page_fault+0x9f/0xf0
[  272.726813][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.726819][    C1] RIP: 0033:0x7f39eb18eb69
[  272.726827][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.726832][    C1] RSP: 002b:00007f39eaff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  272.726838][    C1] RAX: ffffffffffffffda RBX: 00007f39eb3b5fa0 RCX: 00007f39eb18eb69
[  272.726842][    C1] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  272.726846][    C1] RBP: 00007f39eb211df1 R08: 0000000000000000 R09: 0000000000000000
[  272.726850][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  272.726854][    C1] R13: 0000000000000000 R14: 00007f39eb3b5fa0 R15: 00007ffd7c8f3608
[  272.726865][    C1]  </TASK>
[  272.967593][    C1] sched: DL replenish lagged too much
[  273.326377][T10203] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  273.333153][T10203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  273.336016][T10203] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  273.339109][T10203] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  273.341641][T10203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2

VM DIAGNOSIS:
09:32:56  Registers:
info registers vcpu 0

CPU#0
RAX=bffb7b2aa13ed600 RBX=ffffffff81975f18 RCX=bffb7b2aa13ed600 RDX=0000000000000001
RSI=ffffffff8d998701 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d6cde8e0e0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007efda9787d20
XMM02=000200130000002d 0013920300000000 XMM03=0013a00300080013 98031c0200139603
XMM04=0000000000000000 0000000000000017 XMM05=0000000000000000 000000000003bf12
XMM06=900013d003021098 809000130000002f XMM07=9080900000000000 108880900013d003
XMM08=00108080900013d0 031210000000002e XMM09=79656b5f5f2e6567 61726f74735f7570
XMM10=6161383130613966 666666666666660a XMM11=74656e5f74696e69 5f73766f20622030
XMM12=636d206220303633 6331306139666666 XMM13=79656b5f5f2e7665 645f6464615f7074
XMM14=3833633130613966 666666666666660a XMM15=6c6c615f79656b5f 7074636d20622030
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df8d0
R8 =ffff888107db8237 R9 =1ffff11020fb7046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58c4 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f39eaff76c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f017ff8 CR3=0000000112114000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000090602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f39eb387498 00007f39eb387470 XMM03=00007f39eb3874a8 00007f39eb3874a0
XMM04=00007f39ebeed100 00007f39eb387460 XMM05=00007f39eb387478 00007f39eb3874c0
XMM06=00007f39eb3874b8 00007f39eb3874b0 XMM07=00007f39eb3874a8 00007f39eb3874a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f39eb212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
