last executing test programs:

4m56.380767999s ago: executing program 2 (id=124):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8], 0x12)

4m56.299842706s ago: executing program 1 (id=125):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x49a}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000180))

4m56.23868044s ago: executing program 2 (id=127):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6}, 0x0, 0x2, 0x4, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)

4m56.173235275s ago: executing program 1 (id=129):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x41}, 0x80, 0x0}, 0x60000c5)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4\x04\x00+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0xffffffffffffffff)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x94)

4m55.720288044s ago: executing program 2 (id=131):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="d30000000001000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

4m55.720008494s ago: executing program 2 (id=132):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3a, 0x0, 0x0)

4m55.660343867s ago: executing program 1 (id=133):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000a000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m55.659961517s ago: executing program 1 (id=134):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8a06, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x3, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r4 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfcd3bb00f90429fc60", 0x14}], 0x1}, 0x2400c000)

4m55.609503378s ago: executing program 2 (id=136):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8902, &(0x7f0000000080))

4m55.466067066s ago: executing program 1 (id=137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000700)=""/189)

4m55.277660207s ago: executing program 2 (id=138):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, 0x0, 0x0)

4m55.181988455s ago: executing program 32 (id=138):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, 0x0, 0x0)

4m55.110072646s ago: executing program 1 (id=140):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1e0287bd, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001f00)=""/4075, 0xfeb}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x27, 0x25, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1d, 0xa, 0xf08, &(0x7f0000001140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)

4m55.0756474s ago: executing program 33 (id=140):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1e0287bd, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001f00)=""/4075, 0xfeb}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x27, 0x25, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1d, 0xa, 0xf08, &(0x7f0000001140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)

1m4.727342292s ago: executing program 0 (id=3186):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x7fffffff, 0x7}, 0x50)

1m4.587809499s ago: executing program 0 (id=3187):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0)

1m3.717911524s ago: executing program 0 (id=3191):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)

1m3.386347764s ago: executing program 0 (id=3193):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x9, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffbfffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

1m2.95503923s ago: executing program 4 (id=3197):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m2.954865703s ago: executing program 4 (id=3198):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0xe80, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m2.93884694s ago: executing program 4 (id=3199):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28)

1m2.847511531s ago: executing program 4 (id=3200):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x2, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x30}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$kcm(0x29, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x120)

1m2.31499103s ago: executing program 0 (id=3204):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800)

1m2.313482104s ago: executing program 4 (id=3205):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x240008c0)
close(r0)

1m2.207611337s ago: executing program 0 (id=3206):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

1m2.040875756s ago: executing program 34 (id=3206):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

1m1.84172512s ago: executing program 4 (id=3208):
r0 = socket$kcm(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0)

1m1.841525345s ago: executing program 35 (id=3208):
r0 = socket$kcm(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0)

28.331830479s ago: executing program 3 (id=3550):
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x40000010)

28.331249765s ago: executing program 3 (id=3552):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000580))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, 0x0, 0x0)
recvmsg(r2, 0x0, 0x40012142)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x0, 0xb, 0x5, 0x1, 0x0, 0x100000000, 0xc184, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x80, 0x4}, 0x0, 0x7, 0x1, 0x1, 0x9, 0xfff, 0x7, 0x0, 0x3ff, 0x0, 0x3}, r4, 0xc, r3, 0x7)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="2e00000036000511aad25a80698c6394090324fc602f6e35400800018025581d00d1bd00004200000000000000000f05", 0x30}], 0x1, 0x0, 0x0, 0x39c}, 0x4040014)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xfffffffe}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004004)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

28.16246302s ago: executing program 5 (id=3555):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x21, 0x0, 0x0)

28.161730132s ago: executing program 3 (id=3557):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000100000000000000085100000f3ffffff17100000fe150ca48f6afc02669b0587361cc46e92a93a91f7ab4d02c00f02e14e441c713366b5e3527ae7a49758234ea721ef8a2cdf9ec49e728a7e", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21)

28.089253479s ago: executing program 5 (id=3559):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x5, 0x0, 0x0, 0x9, 0x6, 0xd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x38, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.state\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r5)
sendmsg$unix(r6, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x100000000002, 0x4)

28.089078315s ago: executing program 3 (id=3560):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x76)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

28.042553509s ago: executing program 3 (id=3562):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x0, 0x9, 0x0, 0x9, 0x800200, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@map, 0x7, 0x0, 0x9, &(0x7f0000001140)=[0x0], 0x1, 0x0, &(0x7f00000011c0)=[0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0], 0x0, <r4=>0x0}, 0x40)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
close(r6)
ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)={@map=r5, r3, 0x2c, 0x10, r1, @void, @value=r6, @void, @void, r4}, 0x20)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b80)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0)

27.964546579s ago: executing program 5 (id=3564):
r0 = socket$kcm(0x23, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)

27.963920313s ago: executing program 5 (id=3566):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

27.9124359s ago: executing program 5 (id=3567):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0)

27.912269124s ago: executing program 6 (id=3568):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xfffffff7, @local, 0x0, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)="f4f74b", 0x3}], 0x1}, 0x8000)

27.845890783s ago: executing program 6 (id=3569):
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0163014010ff"})

27.845523893s ago: executing program 5 (id=3570):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x18, 0x4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

21.407650588s ago: executing program 3 (id=3571):
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

18.724827216s ago: executing program 6 (id=3572):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x64}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)

16.181476061s ago: executing program 6 (id=3573):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

16.068266812s ago: executing program 6 (id=3574):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000900)={0x5, 0x80, 0x40, 0x3, 0x9, 0x1, 0x0, 0x801, 0x100, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0xb3}, 0x8000, 0xfffffffffffffff8, 0xfffffff4, 0x3, 0x9, 0x5, 0x2, 0x0, 0x5, 0x0, 0x4})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0xfffffe68)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe7d)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef4210000", 0x17}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

15.84327129s ago: executing program 6 (id=3575):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r4}, 0xc)

12.820553221s ago: executing program 36 (id=3570):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x18, 0x4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11.997998224s ago: executing program 37 (id=3571):
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

0s ago: executing program 38 (id=3575):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r4}, 0xc)

kernel console output (not intermixed with test programs):

tive
[   64.095913][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.108218][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.111095][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.121213][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.232330][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.234822][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.237141][ T5849] bridge_slave_0: entered allmulticast mode
[   64.239967][ T5849] bridge_slave_0: entered promiscuous mode
[   64.252781][ T5844] hsr_slave_0: entered promiscuous mode
[   64.256005][ T5844] hsr_slave_1: entered promiscuous mode
[   64.259339][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.263171][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.265855][ T5849] bridge_slave_1: entered allmulticast mode
[   64.269710][ T5849] bridge_slave_1: entered promiscuous mode
[   64.323795][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.328136][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.330538][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.333424][ T5848] bridge_slave_0: entered allmulticast mode
[   64.336204][ T5848] bridge_slave_0: entered promiscuous mode
[   64.341125][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.383329][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.386253][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.389173][ T5848] bridge_slave_1: entered allmulticast mode
[   64.395490][ T5848] bridge_slave_1: entered promiscuous mode
[   64.450027][ T5849] team0: Port device team_slave_0 added
[   64.474576][ T5849] team0: Port device team_slave_1 added
[   64.480020][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.507640][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.568396][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.571238][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.582463][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.610692][ T5848] team0: Port device team_slave_0 added
[   64.622511][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.625551][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.636667][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.643801][ T5848] team0: Port device team_slave_1 added
[   64.713887][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.718014][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.727498][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.733903][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.736704][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.747252][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.809799][ T5849] hsr_slave_0: entered promiscuous mode
[   64.815003][ T5849] hsr_slave_1: entered promiscuous mode
[   64.817879][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   64.820205][ T5849] Cannot create hsr debugfs directory
[   64.857159][ T5848] hsr_slave_0: entered promiscuous mode
[   64.860345][ T5848] hsr_slave_1: entered promiscuous mode
[   64.865406][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   64.867781][ T5848] Cannot create hsr debugfs directory
[   64.983707][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.003827][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.019464][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.037294][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.204481][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.214741][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.222934][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.230837][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.310576][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.317775][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.333652][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.343071][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.353798][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.393731][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   65.419867][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.423052][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.433265][ T5235] Bluetooth: hci0: command tx timeout
[   65.449447][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.451850][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.577092][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.585446][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.592249][ T5847] Bluetooth: hci1: command tx timeout
[   65.595215][ T5235] Bluetooth: hci2: command tx timeout
[   65.628341][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.645529][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   65.654130][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.656940][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.668380][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.671313][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.703609][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.706518][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.710589][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.713140][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.778204][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.799662][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.875910][ T5844] veth0_vlan: entered promiscuous mode
[   65.897514][ T5844] veth1_vlan: entered promiscuous mode
[   65.929988][ T5844] veth0_macvtap: entered promiscuous mode
[   65.939381][ T5844] veth1_macvtap: entered promiscuous mode
[   65.959242][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.974863][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.989182][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.006648][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.034493][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.043704][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.095511][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.099969][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.147593][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.150819][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.235026][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.238197][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.249474][ T5849] veth0_vlan: entered promiscuous mode
[   66.262171][ T5848] veth0_vlan: entered promiscuous mode
[   66.284892][ T5849] veth1_vlan: entered promiscuous mode
[   66.302225][ T5848] veth1_vlan: entered promiscuous mode
[   66.324015][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.365813][ T5235] Bluetooth: hci0: ACL packet for unknown connection handle 0
[   66.369734][ T5912] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   66.376673][ T5849] veth0_macvtap: entered promiscuous mode
[   66.397802][ T5912] veth0_vlan: left promiscuous mode
[   66.400871][ T5912] veth0_vlan: entered promiscuous mode
[   66.406063][ T5912] team0: Device veth0_vlan failed to register rx_handler
[   66.415999][ T5849] veth1_macvtap: entered promiscuous mode
[   66.446053][ T5848] veth0_macvtap: entered promiscuous mode
[   66.450172][ T5848] veth1_macvtap: entered promiscuous mode
[   66.460794][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.468000][ T5912] syz.0.1 (5912) used greatest stack depth: 18176 bytes left
[   66.480376][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.514166][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.526367][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.530784][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.537067][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.548188][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.559662][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.585875][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.592573][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.599861][ T5916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4'.
[   66.616997][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.620551][ T5915] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4'.
[   66.635429][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.641668][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.646772][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.700230][ T5918] netlink: 'syz.0.5': attribute type 11 has an invalid length.
[   66.709412][ T5918] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5'.
[   66.715826][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.720099][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.765493][ T3687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.768075][ T3687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.802855][ T5917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.809773][ T3687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.815544][ T3687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.974997][ T5928] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET)
[   67.179176][ T5929] bridge_slave_1: left allmulticast mode
[   67.181917][ T5929] bridge_slave_1: left promiscuous mode
[   67.185207][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.513116][ T5235] Bluetooth: hci0: command tx timeout
[   67.671907][ T5847] Bluetooth: hci1: command tx timeout
[   67.674408][ T5235] Bluetooth: hci2: command tx timeout
[   67.846179][ T5929] bridge_slave_0: left allmulticast mode
[   67.849569][ T5929] bridge_slave_0: left promiscuous mode
[   67.857062][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.058112][ T5935] delete_channel: no stack
[   68.076072][ T5935] delete_channel: no stack
[   68.118206][ T5935] netlink: 'syz.2.11': attribute type 21 has an invalid length.
[   68.128060][ T5935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11'.
[   68.341167][    C1] hrtimer: interrupt took 26179 ns
[   69.387592][ T5959] warning: `syz.1.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.503922][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'.
[   69.592824][ T5235] Bluetooth: hci0: command tx timeout
[   69.752111][ T5847] Bluetooth: hci1: command tx timeout
[   69.754662][ T5235] Bluetooth: hci2: command tx timeout
[   70.290338][ T6004] Illegal XDP return value 342219608 on prog  (id 23) dev N/A, expect packet loss!
[   71.037127][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.039357][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.177361][ T6022] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.50'.
[   71.672044][ T5235] Bluetooth: hci0: command tx timeout
[   71.832046][ T5235] Bluetooth: hci2: command tx timeout
[   71.835449][ T5235] Bluetooth: hci1: command tx timeout
[   72.054304][ T6049] netlink: 'syz.0.62': attribute type 11 has an invalid length.
[   72.064254][ T6049] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.62'.
[   72.087128][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.901279][ T6058] netlink: 196 bytes leftover after parsing attributes in process `syz.0.66'.
[   73.520331][ T6090] netlink: 'syz.2.82': attribute type 13 has an invalid length.
[   73.526581][ T6090] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.82'.
[   75.672767][ T6132] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.101'.
[   76.061678][ T6148] IPv6: Can't replace route, no match found
[   77.180148][ T6169] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   77.280279][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.1.120'.
[   77.288635][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.1.120'.
[   77.497635][ T6187] netlink: 'syz.0.123': attribute type 27 has an invalid length.
[   77.500785][ T6187] netlink: 164 bytes leftover after parsing attributes in process `syz.0.123'.
[   77.778523][ T6197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'.
[   77.784987][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.831953][ T6197] bridge_slave_0 (unregistering): left allmulticast mode
[   77.842868][ T6197] bridge_slave_0 (unregistering): left promiscuous mode
[   77.849717][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.882021][ T6199] netlink: 14 bytes leftover after parsing attributes in process `syz.1.129'.
[   77.937988][ T6199] hsr_slave_0: left promiscuous mode
[   77.944589][ T6199] hsr_slave_1: left promiscuous mode
[   78.215857][ T6202] netlink: 'syz.0.130': attribute type 21 has an invalid length.
[   78.686549][ T5913] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.780287][ T5913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.862812][ T5913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.935646][ T5913] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.023114][ T5913] bridge_slave_1: left allmulticast mode
[   79.025641][ T5913] bridge_slave_1: left promiscuous mode
[   79.027907][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.033411][ T5913] bridge_slave_0: left allmulticast mode
[   79.035226][ T5913] bridge_slave_0: left promiscuous mode
[   79.037261][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.288233][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.296705][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.301894][ T5913] bond0 (unregistering): Released all slaves
[   79.581273][ T5913] hsr_slave_0: left promiscuous mode
[   79.583743][ T5913] hsr_slave_1: left promiscuous mode
[   79.594512][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.596893][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.614482][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.616735][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.636562][ T5913] veth1_macvtap: left promiscuous mode
[   79.638528][ T5913] veth0_macvtap: left promiscuous mode
[   79.640336][ T5913] veth1_vlan: left promiscuous mode
[   79.659347][ T5913] veth0_vlan: left promiscuous mode
[   79.797662][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.802442][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.805750][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.809406][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.821015][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.985463][ T5913] team0 (unregistering): Port device team_slave_1 removed
[   80.010515][ T5913] team0 (unregistering): Port device team_slave_0 removed
[   80.740112][ T6248] chnl_net:caif_netlink_parms(): no params data found
[   80.829196][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.834287][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.837686][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.840921][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.844152][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.922103][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.925312][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.928893][ T6248] bridge_slave_0: entered allmulticast mode
[   80.933184][ T6248] bridge_slave_0: entered promiscuous mode
[   80.938270][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.941041][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.953298][ T6248] bridge_slave_1: entered allmulticast mode
[   80.957128][ T6248] bridge_slave_1: entered promiscuous mode
[   81.022780][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.028232][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.073676][ T6284] netlink: 'syz.0.149': attribute type 39 has an invalid length.
[   81.078183][ T6248] team0: Port device team_slave_0 added
[   81.089321][ T6248] team0: Port device team_slave_1 added
[   81.096108][ T6284] veth0_macvtap: left promiscuous mode
[   81.227485][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.241536][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.250050][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.273792][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.276555][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.311506][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.365655][ T6248] hsr_slave_0: entered promiscuous mode
[   81.367983][ T6248] hsr_slave_1: entered promiscuous mode
[   81.370186][ T6248] debugfs: 'hsr0' already exists in 'hsr'
[   81.374205][ T6248] Cannot create hsr debugfs directory
[   81.667574][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.836464][ T5847] Bluetooth: hci1: command tx timeout
[   81.962791][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.066600][ T6271] chnl_net:caif_netlink_parms(): no params data found
[   82.102199][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.176294][ T6302] netlink: 'syz.0.152': attribute type 29 has an invalid length.
[   82.194115][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.508785][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.518148][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.523573][ T6271] bridge_slave_0: entered allmulticast mode
[   82.539780][ T6271] bridge_slave_0: entered promiscuous mode
[   82.546413][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.553297][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.556627][ T6271] bridge_slave_1: entered allmulticast mode
[   82.560974][ T6271] bridge_slave_1: entered promiscuous mode
[   82.823961][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.828071][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.831873][ T5875] bond0 (unregistering): Released all slaves
[   82.871273][ T6314] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   82.875599][ T5847] Bluetooth: hci2: command tx timeout
[   82.920600][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.007699][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.061066][ T6248] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.066981][ T6248] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.089140][ T6248] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.115866][ T6271] team0: Port device team_slave_0 added
[   83.117890][ T6248] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.159397][ T6325] syzkaller0: entered promiscuous mode
[   83.162015][ T6325] syzkaller0: entered allmulticast mode
[   83.167119][ T6271] team0: Port device team_slave_1 added
[   83.913391][ T5847] Bluetooth: hci1: command tx timeout
[   83.971573][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.978301][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.993173][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.017550][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.020476][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.027628][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.030122][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.136557][ T5875] veth1_macvtap: left promiscuous mode
[   84.138775][ T5875] veth0_macvtap: left promiscuous mode
[   84.141056][ T5875] veth1_vlan: left promiscuous mode
[   84.143302][ T5875] veth0_vlan: left promiscuous mode
[   84.506041][ T5875] team0 (unregistering): Port device team_slave_1 removed
[   84.527466][ T5875] team0 (unregistering): Port device team_slave_0 removed
[   84.767540][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.770485][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.780922][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.867903][ T6271] hsr_slave_0: entered promiscuous mode
[   84.870770][ T6271] hsr_slave_1: entered promiscuous mode
[   84.874450][ T6271] debugfs: 'hsr0' already exists in 'hsr'
[   84.876641][ T6271] Cannot create hsr debugfs directory
[   84.955094][ T5847] Bluetooth: hci2: command tx timeout
[   85.146127][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.276992][ T6248] 8021q: adding VLAN 0 to HW filter on device team0
[   85.314830][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.317837][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.360230][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.363155][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.393462][ T6271] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.404325][ T6271] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.416383][ T6271] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.420834][ T6271] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.513035][ T3687] wlan1: Trigger new scan to find an IBSS to join
[   85.610938][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.625759][ T6271] 8021q: adding VLAN 0 to HW filter on device team0
[   85.632821][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.635431][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.650072][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.652592][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.838578][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.978211][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.996080][ T5847] Bluetooth: hci1: command tx timeout
[   86.084893][ T6271] veth0_vlan: entered promiscuous mode
[   86.105839][ T6271] veth1_vlan: entered promiscuous mode
[   86.237090][ T6271] veth0_macvtap: entered promiscuous mode
[   86.250448][ T6271] veth1_macvtap: entered promiscuous mode
[   86.293753][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.316791][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.328171][ T6248] veth0_vlan: entered promiscuous mode
[   86.338644][ T5864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.363494][ T5864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.367455][ T6248] veth1_vlan: entered promiscuous mode
[   86.378554][ T5864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.386123][ T5864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.398170][   T52] cfg80211: failed to load regulatory.db
[   86.466125][ T6248] veth0_macvtap: entered promiscuous mode
[   86.580334][ T6248] veth1_macvtap: entered promiscuous mode
[   86.627000][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.669273][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.681668][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.686081][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.733836][ T3687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.739124][ T6407] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.168'.
[   86.742834][ T3687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.746267][ T5875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.758782][ T5875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.768498][ T5875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.775581][ T5875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.940872][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.945918][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.993489][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.012466][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.031719][ T5847] Bluetooth: hci2: command tx timeout
[   87.223482][ T6429] netlink: 'syz.3.174': attribute type 6 has an invalid length.
[   87.650128][ T6442] netlink: 'syz.3.178': attribute type 2 has an invalid length.
[   87.658353][ T6442] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.178'.
[   87.681591][   T36] wlan1: Trigger new scan to find an IBSS to join
[   88.090284][ T5847] Bluetooth: hci1: command tx timeout
[   88.460317][ T6468] Zero length message leads to an empty skb
[   88.654234][ T6488] netlink: 830 bytes leftover after parsing attributes in process `syz.4.190'.
[   88.703707][ T6488] C: renamed from team_slave_0 (while UP)
[   88.725802][ T6493] netlink: 17 bytes leftover after parsing attributes in process `syz.3.194'.
[   88.737375][ T6493] netlink: zone id is out of range
[   88.739526][ T6493] netlink: zone id is out of range
[   88.778276][ T6488] netlink: 'syz.4.190': attribute type 3 has an invalid length.
[   88.793092][ T6493] netlink: zone id is out of range
[   88.795518][ T6493] netlink: zone id is out of range
[   88.797281][ T6493] netlink: zone id is out of range
[   88.799046][ T6493] netlink: zone id is out of range
[   88.801055][ T6493] netlink: zone id is out of range
[   88.817007][ T6488] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   88.833672][ T6493] netlink: zone id is out of range
[   88.844013][ T6493] netlink: zone id is out of range
[   89.024011][ T6504] netlink: 'syz.0.197': attribute type 29 has an invalid length.
[   89.032584][ T6504] netlink: 'syz.0.197': attribute type 29 has an invalid length.
[   89.133752][ T5847] Bluetooth: hci2: command tx timeout
[   89.281981][ T6514] netlink: 136 bytes leftover after parsing attributes in process `syz.4.200'.
[   89.789381][ T6537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.207'.
[   90.552187][   T53] wlan1: Trigger new scan to find an IBSS to join
[   91.186835][   T53] wlan1: Creating new IBSS network, BSSID 2a:fe:0e:f1:bc:34
[   91.387732][ T6595] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.530891][ T6622] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.234'.
[   92.626720][ T6628] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.234'.
[   93.978379][ T6622] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.989414][ T6622] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.119392][ T6647] netlink: 'syz.0.242': attribute type 21 has an invalid length.
[   94.183843][ T6650] tc_dump_action: action bad kind
[   94.507476][ T6668] netlink: 14 bytes leftover after parsing attributes in process `syz.3.251'.
[   94.558212][ T6673] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.252'.
[   95.198269][ T6712] netlink: 'syz.0.267': attribute type 39 has an invalid length.
[   95.208915][ T6716] netlink: 'syz.3.268': attribute type 27 has an invalid length.
[   95.215054][ T6716] netlink: 'syz.3.268': attribute type 3 has an invalid length.
[   95.219063][ T6716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.268'.
[   95.274336][ T6718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.269'.
[   96.106048][ T6736] netlink: 'syz.4.274': attribute type 4 has an invalid length.
[   97.175229][ T6742] : renamed from gre0 (while UP)
[   97.298765][ T6754] netlink: 'syz.0.279': attribute type 10 has an invalid length.
[   97.328899][ T6750] syzkaller0: entered promiscuous mode
[   97.330746][ T6750] syzkaller0: entered allmulticast mode
[   97.484877][ T6756] netlink: 'syz.0.280': attribute type 19 has an invalid length.
[   98.340327][ T6760] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[   98.408526][ T6764] netlink: 'syz.4.284': attribute type 41 has an invalid length.
[   99.300313][ T6797] mac80211_hwsim hwsim9 .3#c: renamed from wlan1 (while UP)
[   99.998333][ T6821] netlink: 'syz.4.303': attribute type 12 has an invalid length.
[  100.002580][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.4.303'.
[  101.867263][ T6920] sit0: entered allmulticast mode
[  101.873681][ T6920] sit0: entered promiscuous mode
[  102.845308][ T6976] netlink: 'syz.0.347': attribute type 21 has an invalid length.
[  102.848666][ T6976] netlink: 'syz.0.347': attribute type 1 has an invalid length.
[  102.853963][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.347'.
[  104.264815][ T7035] netlink: 'syz.0.361': attribute type 39 has an invalid length.
[  105.224841][ T7047] delete_channel: no stack
[  105.348047][ T7057] sctp: [Deprecated]: syz.4.369 (pid 7057) Use of int in max_burst socket option deprecated.
[  105.348047][ T7057] Use struct sctp_assoc_value instead
[  106.815126][ T7074] pim6reg1: entered allmulticast mode
[  107.369072][ T7101] netlink: 'syz.4.389': attribute type 21 has an invalid length.
[  108.568804][ T7148] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  108.584310][ T7148] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.693164][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.415'.
[  108.735919][ T7162] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.416'.
[  110.219717][ T7186] netlink: 'syz.0.423': attribute type 11 has an invalid length.
[  110.222264][ T7186] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.423'.
[  110.276351][ T7180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.362585][ T7190] netlink: 14 bytes leftover after parsing attributes in process `syz.3.426'.
[  110.759262][ T7216] netlink: 'syz.4.437': attribute type 3 has an invalid length.
[  110.769517][ T7216] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.437'.
[  112.999028][ T7232] netlink: 'syz.3.445': attribute type 15 has an invalid length.
[  113.003025][ T7232] netlink: 'syz.3.445': attribute type 7 has an invalid length.
[  113.005416][ T7232] netlink: 52 bytes leftover after parsing attributes in process `syz.3.445'.
[  113.597281][ T7257] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.459'.
[  113.750847][ T7272] netlink: 180 bytes leftover after parsing attributes in process `syz.4.465'.
[  113.946500][ T7283] netlink: 'syz.3.471': attribute type 29 has an invalid length.
[  114.265988][ T7299] netlink: 'syz.0.478': attribute type 29 has an invalid length.
[  114.270635][ T7299] netlink: 'syz.0.478': attribute type 29 has an invalid length.
[  114.282484][ T7299] netlink: 'syz.0.478': attribute type 29 has an invalid length.
[  114.292446][ T7299] netlink: 'syz.0.478': attribute type 29 has an invalid length.
[  114.518525][ T7310] netlink: 'syz.3.483': attribute type 10 has an invalid length.
[  114.814953][ T7310] veth0_vlan: left promiscuous mode
[  114.872642][ T7310] veth0_vlan: entered promiscuous mode
[  114.947054][ T7310] team0: Device veth0_vlan failed to register rx_handler
[  115.176242][ T7339] netlink: 22 bytes leftover after parsing attributes in process `syz.0.496'.
[  115.369761][ T7346] netlink: 'syz.4.499': attribute type 29 has an invalid length.
[  115.902060][ T7375] netlink: 'syz.0.511': attribute type 21 has an invalid length.
[  115.905328][ T7375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.511'.
[  116.966514][ T7412] netlink: 128 bytes leftover after parsing attributes in process `syz.0.528'.
[  117.206202][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.536'.
[  117.293145][ T7430] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.537'.
[  117.415717][ T7440] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.542'.
[  117.522135][ T7444] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.543'.
[  120.400636][ T7539] validate_nla: 8 callbacks suppressed
[  120.400671][ T7539] netlink: 'syz.3.587': attribute type 21 has an invalid length.
[  120.407680][ T7539] netlink: 128 bytes leftover after parsing attributes in process `syz.3.587'.
[  120.411323][ T7539] netlink: 'syz.3.587': attribute type 4 has an invalid length.
[  120.415866][ T7539] netlink: 'syz.3.587': attribute type 5 has an invalid length.
[  120.419006][ T7539] netlink: 3 bytes leftover after parsing attributes in process `syz.3.587'.
[  120.456947][ T7543] sctp: [Deprecated]: syz.0.589 (pid 7543) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.456947][ T7543] Use struct sctp_sack_info instead
[  120.599848][ T7553] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.594'.
[  120.616926][ T7553] netlink: 5 bytes leftover after parsing attributes in process `syz.0.594'.
[  120.626952][ T7555] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.595'.
[  120.829738][ T7565] netlink: 'syz.4.600': attribute type 10 has an invalid length.
[  120.840026][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.600'.
[  120.845554][ T7565] dummy0: entered promiscuous mode
[  120.854663][ T7565] bridge0: port 3(dummy0) entered blocking state
[  120.861317][ T7565] bridge0: port 3(dummy0) entered disabled state
[  120.871731][ T7565] dummy0: entered allmulticast mode
[  120.877117][ T7565] bridge0: port 3(dummy0) entered blocking state
[  120.880082][ T7565] bridge0: port 3(dummy0) entered forwarding state
[  121.069621][ T7576] netlink: 'syz.4.604': attribute type 15 has an invalid length.
[  121.719048][ T7600] syzkaller0: entered promiscuous mode
[  121.722525][ T7600] syzkaller0: entered allmulticast mode
[  124.491321][ T7683] netlink: 'syz.0.652': attribute type 21 has an invalid length.
[  124.589733][ T7685] netlink: 'syz.3.653': attribute type 10 has an invalid length.
[  124.614121][ T7685] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  124.619186][ T7685] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  124.626138][ T7685] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  125.041296][ T7702] netlink: 'syz.3.661': attribute type 10 has an invalid length.
[  125.158403][ T7702] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  125.881028][ T7732] netlink: 164 bytes leftover after parsing attributes in process `syz.4.674'.
[  127.167557][ T7768] netlink: 'syz.0.687': attribute type 10 has an invalid length.
[  127.170064][ T7768] netlink: 55 bytes leftover after parsing attributes in process `syz.0.687'.
[  127.225310][ T7774] delete_channel: no stack
[  129.280396][ T7825] netlink: 160 bytes leftover after parsing attributes in process `syz.0.714'.
[  129.457616][ T7835] netlink: 'syz.4.718': attribute type 1 has an invalid length.
[  129.460270][ T7835] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.718'.
[  129.867402][ T7846] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.723'.
[  129.871123][ T7846] netlink: 5 bytes leftover after parsing attributes in process `syz.4.723'.
[  132.148629][ T7937] netlink: 'syz.4.767': attribute type 29 has an invalid length.
[  132.484751][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.487447][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.790161][ T8003] netlink: 'syz.0.793': attribute type 10 has an invalid length.
[  134.122114][ T8008] blkio.reset_stats is deprecated
[  135.763741][ T8035] netlink: 'syz.3.807': attribute type 6 has an invalid length.
[  135.766848][ T8035] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.807'.
[  135.807998][ T8039] C: renamed from team_slave_0 (while UP)
[  135.811369][ T8039] netlink: 'syz.0.808': attribute type 3 has an invalid length.
[  135.816882][ T8039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.808'.
[  136.510311][ T5847] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  137.017366][ T8104] dummy0: left allmulticast mode
[  137.022857][ T8104] bridge0: port 3(dummy0) entered disabled state
[  137.061264][ T8104] bridge_slave_1: left allmulticast mode
[  137.065487][ T8104] bridge_slave_1: left promiscuous mode
[  137.069238][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.084494][ T8104] bridge_slave_0: left allmulticast mode
[  137.086936][ T8104] bridge_slave_0: left promiscuous mode
[  137.089597][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.301281][ T8112] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  137.484461][ T8124] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.844'.
[  137.774529][ T8134] netlink: 'syz.4.850': attribute type 10 has an invalid length.
[  138.170380][ T8143] netlink: 'syz.0.852': attribute type 10 has an invalid length.
[  138.576591][ T8143] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  138.916234][ T8162] netlink: 'syz.3.857': attribute type 25 has an invalid length.
[  139.224383][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'.
[  139.229304][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'.
[  139.235520][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'.
[  139.294668][ T5847] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  140.835984][ T8236] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.892'.
[  140.841313][ T8236] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.892'.
[  143.415992][ T8291] netlink: 'syz.0.914': attribute type 21 has an invalid length.
[  143.419392][ T8291] netlink: 'syz.0.914': attribute type 1 has an invalid length.
[  143.762860][ T8310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.922'.
[  143.775076][ T8314] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.924'.
[  143.778135][ T8314] net_ratelimit: 76 callbacks suppressed
[  143.778157][ T8314] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  143.784174][ T8314] openvswitch: netlink: Message has 2 unknown bytes.
[  144.008932][ T8326] netlink: 'syz.0.928': attribute type 3 has an invalid length.
[  144.012230][ T8326] netlink: 'syz.0.928': attribute type 1 has an invalid length.
[  144.015424][ T8326] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.928'.
[  145.149786][ T8362] sit0: entered allmulticast mode
[  145.200901][ T8362] sit0: entered promiscuous mode
[  145.657976][ T8373] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.949'.
[  145.893282][ T8388] netlink: 'syz.3.956': attribute type 10 has an invalid length.
[  145.898974][ T8388] veth1_macvtap: left promiscuous mode
[  146.150730][ T8396] netlink: 'syz.4.960': attribute type 10 has an invalid length.
[  146.158789][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.960'.
[  146.168540][ T8396] vcan0: entered promiscuous mode
[  146.171126][ T8396] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  147.389889][ T8428] netlink: 26 bytes leftover after parsing attributes in process `syz.3.975'.
[  148.811992][ T8475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.861220][ T8492] netlink: 'syz.0.1001': attribute type 21 has an invalid length.
[  149.868339][ T8492] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1001'.
[  149.880485][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'.
[  152.468728][ T8560] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1024'.
[  152.971698][ T8590] netlink: 'syz.3.1037': attribute type 10 has an invalid length.
[  152.990060][ T8590] team0: Device ipvlan1 failed to register rx_handler
[  153.129560][ T8610] netlink: 'syz.0.1046': attribute type 29 has an invalid length.
[  153.135267][ T8610] netlink: 'syz.0.1046': attribute type 29 has an invalid length.
[  153.147647][ T8610] netlink: 'syz.0.1046': attribute type 29 has an invalid length.
[  153.266678][ T8617] netlink: 'syz.0.1046': attribute type 29 has an invalid length.
[  153.697872][ T8623] delete_channel: no stack
[  154.060249][ T8643] netlink: 'syz.0.1061': attribute type 21 has an invalid length.
[  154.082860][ T8643] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1061'.
[  154.154187][ T8645] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1062'.
[  154.161918][ T8645] netlink: zone id is out of range
[  154.163795][ T8645] netlink: zone id is out of range
[  154.165552][ T8645] netlink: zone id is out of range
[  154.167270][ T8645] netlink: zone id is out of range
[  154.169127][ T8645] netlink: zone id is out of range
[  154.170810][ T8645] netlink: zone id is out of range
[  154.178178][ T8645] netlink: zone id is out of range
[  154.180533][ T8645] netlink: zone id is out of range
[  154.183912][ T8645] netlink: zone id is out of range
[  154.185647][ T8645] netlink: zone id is out of range
[  154.438330][ T8654] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  154.819642][ T8666] netlink: 'syz.0.1070': attribute type 21 has an invalid length.
[  154.823598][ T8666] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1070'.
[  155.120567][ T8672] delete_channel: no stack
[  155.596776][ T8699] netlink: 'syz.3.1086': attribute type 1 has an invalid length.
[  155.599348][ T8699] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1086'.
[  155.806830][ T8726] netlink: 'syz.4.1099': attribute type 2 has an invalid length.
[  155.809957][ T8726] netlink: 'syz.4.1099': attribute type 1 has an invalid length.
[  155.839731][ T8726] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1099'.
[  155.843453][ T8726] nbd: couldn't find device at index 16
[  155.859740][ T8732] netlink: 'syz.3.1102': attribute type 21 has an invalid length.
[  156.238296][ T8754] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1111'.
[  156.734494][ T8790] netlink: 'syz.0.1127': attribute type 27 has an invalid length.
[  156.849623][ T8798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1131'.
[  158.741873][ T8880] netlink: 'syz.4.1166': attribute type 21 has an invalid length.
[  158.744535][ T8880] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1166'.
[  158.747483][ T8880] netlink: 'syz.4.1166': attribute type 1 has an invalid length.
[  159.599350][ T8929] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1189'.
[  159.703877][ T5847] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  160.124352][ T8951] : port 1(vlan0) entered blocking state
[  160.129841][ T8951] : port 1(vlan0) entered disabled state
[  160.134484][ T8951] vlan0: entered allmulticast mode
[  160.137942][ T8951] veth0_vlan: entered allmulticast mode
[  160.144902][ T8951] vlan0: entered promiscuous mode
[  160.151337][ T8953] : port 1(vlan0) entered blocking state
[  160.153299][ T8953] : port 1(vlan0) entered forwarding state
[  161.538550][ T9000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1219'.
[  161.544121][ T9000] bridge_slave_0: entered allmulticast mode
[  162.542685][ T9024] hsr0: entered promiscuous mode
[  164.153443][ T9075] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.1251'.
[  164.156366][ T9075] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1251'.
[  164.159275][ T9075] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.1251'.
[  165.823070][ T9117] netlink: 'syz.3.1270': attribute type 10 has an invalid length.
[  165.832572][ T9117] geneve0: entered promiscuous mode
[  165.846267][ T9117] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  166.847839][ T9156] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1287'.
[  166.892010][ T9158] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1288'.
[  167.028450][ T9166] netlink: 'syz.0.1291': attribute type 12 has an invalid length.
[  167.031028][ T9166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1291'.
[  167.434200][ T9192] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1304'.
[  168.574134][ T9208] : port 1(vlan0) entered disabled state
[  169.313564][ T9257] netlink: 42496 bytes leftover after parsing attributes in process `syz.4.1333'.
[  171.117665][ T9302] netlink: 'syz.0.1351': attribute type 5 has an invalid length.
[  171.319506][ T9322] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1360'.
[  172.019656][ T9352] syzkaller0: entered promiscuous mode
[  172.023734][ T9352] syzkaller0: entered allmulticast mode
[  173.362828][ T9371] netlink: 'syz.3.1381': attribute type 10 has an invalid length.
[  174.939272][ T9389] netlink: 'syz.3.1387': attribute type 2 has an invalid length.
[  175.654651][ T9418] netlink: 'syz.0.1399': attribute type 11 has an invalid length.
[  175.657691][ T9418] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1399'.
[  176.735771][ T9415] net_ratelimit: 74 callbacks suppressed
[  176.735793][ T9415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.929524][ T9428] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  176.938951][ T9428] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  177.145021][ T9447] ref_ctr_offset mismatch. inode: 0x9c9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  177.745625][ T9464] netlink: 'syz.4.1421': attribute type 6 has an invalid length.
[  177.748908][ T9464] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1421'.
[  178.457629][ T9486] !: renamed from bond_slave_0 (while UP)
[  178.810621][ T9513] netlink: 'syz.0.1439': attribute type 21 has an invalid length.
[  179.029535][ T9531] netlink: 'syz.0.1447': attribute type 2 has an invalid length.
[  179.035881][ T9531] netlink: 'syz.0.1447': attribute type 1 has an invalid length.
[  179.039099][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1447'.
[  179.846354][ T9558] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1460'.
[  181.212644][ T9589] netlink: 'syz.4.1473': attribute type 1 has an invalid length.
[  181.216049][ T9589] netlink: 'syz.4.1473': attribute type 4 has an invalid length.
[  181.219281][ T9589] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1473'.
[  181.527851][ T9598] netlink: 'syz.0.1477': attribute type 39 has an invalid length.
[  181.605851][ T9602] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1479'.
[  181.609846][ T9602] netlink: zone id is out of range
[  181.614131][ T9602] netlink: zone id is out of range
[  181.616585][ T9602] netlink: zone id is out of range
[  181.618854][ T9602] netlink: zone id is out of range
[  181.621131][ T9602] netlink: zone id is out of range
[  181.625442][ T9602] netlink: zone id is out of range
[  181.627814][ T9602] netlink: zone id is out of range
[  181.630146][ T9602] netlink: zone id is out of range
[  181.635008][ T9602] netlink: zone id is out of range
[  183.033875][ T9637] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1495'.
[  183.933098][ T9683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.936066][ T9683] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.959862][ T9683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.998853][ T9683] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.010580][ T9689] netlink: 'syz.3.1517': attribute type 22 has an invalid length.
[  184.021680][ T9689] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1517'.
[  184.470739][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'.
[  184.478494][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'.
[  184.483342][ T9710] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1525'.
[  184.487525][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'.
[  184.490333][ T9710] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1525'.
[  185.751904][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  186.201696][ T9771] netlink: 'syz.4.1550': attribute type 10 has an invalid length.
[  186.209107][ T9771] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  186.287247][ T9775] netlink: 'syz.0.1554': attribute type 3 has an invalid length.
[  186.289852][ T9775] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1554'.
[  186.330255][ T9777] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1555'.
[  186.983594][ T9779] netlink: 'syz.3.1556': attribute type 10 has an invalid length.
[  187.314285][ T9779] team0: Port device .3#c added
[  188.196633][ T9806] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1570'.
[  188.217169][ T9808] netlink: 'syz.3.1566': attribute type 25 has an invalid length.
[  188.221514][ T9808] netlink: 'syz.3.1566': attribute type 28 has an invalid length.
[  188.267127][ T9813] netlink: 'syz.4.1572': attribute type 2 has an invalid length.
[  188.269985][ T9813] netlink: 'syz.4.1572': attribute type 8 has an invalid length.
[  188.273997][ T9813] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1572'.
[  189.190984][ T9866] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1596'.
[  190.683440][ T9898] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1611'.
[  190.845283][ T9904] netlink: 'syz.0.1613': attribute type 10 has an invalid length.
[  190.908870][ T9904] bond0: entered promiscuous mode
[  190.914163][ T9904] !: entered promiscuous mode
[  190.918607][ T9904] bond_slave_1: entered promiscuous mode
[  190.923786][ T9904] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  190.964673][ T9909] netlink: 'syz.4.1615': attribute type 1 has an invalid length.
[  190.967874][ T9909] netlink: 'syz.4.1615': attribute type 4 has an invalid length.
[  190.970961][ T9909] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1615'.
[  191.082502][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1617'.
[  191.086052][ T9913] netlink: 'syz.3.1617': attribute type 3 has an invalid length.
[  191.099189][ T9913] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1617'.
[  191.142758][ T9921] bridge0: port 1(ip6gretap0) entered blocking state
[  191.145748][ T9921] bridge0: port 1(ip6gretap0) entered disabled state
[  191.148766][ T9921] ip6gretap0: entered allmulticast mode
[  191.157701][ T9921] ip6gretap0: entered promiscuous mode
[  191.163197][ T9921] bridge0: port 1(ip6gretap0) entered blocking state
[  191.167374][ T9921] bridge0: port 1(ip6gretap0) entered forwarding state
[  191.342499][ T9928] netlink: 'syz.0.1624': attribute type 13 has an invalid length.
[  191.345353][ T9928] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1624'.
[  191.362792][ T9928] erspan0: refused to change device tx_queue_len
[  191.365449][ T9928] net_ratelimit: 74 callbacks suppressed
[  191.365496][ T9928] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  191.548286][ T9935] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1626'.
[  192.134678][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1637'.
[  192.148137][ T9961] tc_dump_action: action bad kind
[  192.365310][ T9970] netlink: 'syz.3.1641': attribute type 1 has an invalid length.
[  192.368481][ T9970] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1641'.
[  193.112575][T10004] syzkaller0: entered promiscuous mode
[  193.114932][T10004] syzkaller0: entered allmulticast mode
[  193.168338][T10007] netlink: 'syz.3.1658': attribute type 21 has an invalid length.
[  193.897953][T10038] IPv6: NLM_F_CREATE should be specified when creating new route
[  194.098706][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.102972][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.881408][T10070] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1686'.
[  195.509740][T10103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.512431][T10103] IPv6: NLM_F_CREATE should be set when creating new route
[  195.514830][T10103] IPv6: NLM_F_CREATE should be set when creating new route
[  196.242611][T10132] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1712'.
[  196.246662][T10132] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  196.650998][T10142] netlink: 1895 bytes leftover after parsing attributes in process `syz.0.1716'.
[  197.888229][T10199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1743'.
[  197.901313][T10201] netlink: 'syz.4.1742': attribute type 2 has an invalid length.
[  197.905217][T10201] netlink: 130532 bytes leftover after parsing attributes in process `syz.4.1742'.
[  198.246468][T10220] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1752'.
[  199.839354][T10244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'.
[  200.084445][T10265] netlink: 'syz.0.1770': attribute type 4 has an invalid length.
[  200.088075][T10265] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1770'.
[  200.580835][T10307] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1790'.
[  201.400371][T10337] netlink: 'syz.0.1803': attribute type 40 has an invalid length.
[  201.464277][T10337] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.675875][T10353] netlink: 'syz.4.1812': attribute type 21 has an invalid length.
[  201.745633][T10356] netlink: 'syz.3.1813': attribute type 4 has an invalid length.
[  201.749903][T10356] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1813'.
[  201.793027][T10360] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1815'.
[  202.496796][T10397] netlink: 'syz.3.1832': attribute type 2 has an invalid length.
[  202.499749][T10397] netlink: 'syz.3.1832': attribute type 7 has an invalid length.
[  202.503529][T10397] netlink: 85 bytes leftover after parsing attributes in process `syz.3.1832'.
[  202.506443][T10397] netlink: 130140 bytes leftover after parsing attributes in process `syz.3.1832'.
[  202.509463][T10397] netlink: 'syz.3.1832': attribute type 2 has an invalid length.
[  202.513178][T10397] netlink: 'syz.3.1832': attribute type 7 has an invalid length.
[  202.516578][T10397] netlink: 85 bytes leftover after parsing attributes in process `syz.3.1832'.
[  202.896361][ T5847] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7
[  202.956484][T10427] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1845'.
[  204.632183][T10512] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1881'.
[  205.888842][T10534] netlink: 'syz.4.1890': attribute type 4 has an invalid length.
[  205.893072][T10534] netlink: 209028 bytes leftover after parsing attributes in process `syz.4.1890'.
[  206.734511][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  206.737096][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  206.750303][T10542] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1893'.
[  206.919345][T10554] bond_slave_1: entered allmulticast mode
[  210.326473][T10572] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1906'.
[  210.669757][T10597] syz.4.1918: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  210.678562][T10597] CPU: 1 UID: 0 PID: 10597 Comm: syz.4.1918 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  210.678575][T10597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.678581][T10597] Call Trace:
[  210.678587][T10597]  <TASK>
[  210.678592][T10597]  dump_stack_lvl+0x189/0x250
[  210.678620][T10597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.678631][T10597]  ? __pfx__printk+0x10/0x10
[  210.678644][T10597]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  210.678656][T10597]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  210.678667][T10597]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  210.678678][T10597]  warn_alloc+0x214/0x310
[  210.678692][T10597]  ? stack_depot_save_flags+0x41b/0x860
[  210.678703][T10597]  ? __pfx_warn_alloc+0x10/0x10
[  210.678716][T10597]  ? kasan_save_track+0x4f/0x80
[  210.678727][T10597]  ? xskq_create+0x56/0x170
[  210.678736][T10597]  ? xsk_init_queue+0xb0/0x110
[  210.678743][T10597]  ? xsk_setsockopt+0x57b/0x8d0
[  210.678751][T10597]  ? do_sock_setsockopt+0x17c/0x1b0
[  210.678763][T10597]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  210.678774][T10597]  ? do_syscall_64+0xfa/0x3b0
[  210.678784][T10597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.678797][T10597]  __vmalloc_node_range_noprof+0x125/0x12f0
[  210.678822][T10597]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  210.678837][T10597]  ? __kasan_kmalloc+0x93/0xb0
[  210.678849][T10597]  vmalloc_user_noprof+0xad/0xf0
[  210.678860][T10597]  ? xskq_create+0xbf/0x170
[  210.678870][T10597]  xskq_create+0xbf/0x170
[  210.678880][T10597]  xsk_init_queue+0xb0/0x110
[  210.678891][T10597]  xsk_setsockopt+0x57b/0x8d0
[  210.678901][T10597]  ? __pfx_xsk_setsockopt+0x10/0x10
[  210.678909][T10597]  ? __pfx_aa_sk_perm+0x10/0x10
[  210.678921][T10597]  ? __fget_files+0x2a/0x420
[  210.678932][T10597]  ? aa_sock_opt_perm+0xff/0x1b0
[  210.678945][T10597]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  210.678953][T10597]  ? __pfx_xsk_setsockopt+0x10/0x10
[  210.678963][T10597]  do_sock_setsockopt+0x17c/0x1b0
[  210.678976][T10597]  __x64_sys_setsockopt+0x13f/0x1b0
[  210.678990][T10597]  do_syscall_64+0xfa/0x3b0
[  210.678999][T10597]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.679009][T10597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.679017][T10597]  ? exc_page_fault+0x9f/0xf0
[  210.679028][T10597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.679036][T10597] RIP: 0033:0x7f7a82b8ebe9
[  210.679056][T10597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.679064][T10597] RSP: 002b:00007f7a83a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  210.679100][T10597] RAX: ffffffffffffffda RBX: 00007f7a82db5fa0 RCX: 00007f7a82b8ebe9
[  210.679107][T10597] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  210.679112][T10597] RBP: 00007f7a82c11e19 R08: 0000000000000004 R09: 0000000000000000
[  210.679117][T10597] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  210.679122][T10597] R13: 00007f7a82db6038 R14: 00007f7a82db5fa0 R15: 00007ffe7c88e018
[  210.679135][T10597]  </TASK>
[  210.679140][T10597] Mem-Info:
[  210.791638][T10597] active_anon:18112 inactive_anon:12 isolated_anon:0
[  210.791638][T10597]  active_file:7940 inactive_file:43619 isolated_file:0
[  210.791638][T10597]  unevictable:1768 dirty:68 writeback:0
[  210.791638][T10597]  slab_reclaimable:9821 slab_unreclaimable:54318
[  210.791638][T10597]  mapped:18012 shmem:2429 pagetables:1195
[  210.791638][T10597]  sec_pagetables:0 bounce:0
[  210.791638][T10597]  kernel_misc_reclaimable:0
[  210.791638][T10597]  free:256465 free_pcp:33442 free_cma:0
[  210.811680][T10597] Node 0 active_anon:39912kB inactive_anon:48kB active_file:212kB inactive_file:168032kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34488kB dirty:64kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7428kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  210.822722][T10597] Node 1 active_anon:32672kB inactive_anon:0kB active_file:31548kB inactive_file:6444kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37628kB dirty:208kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4332kB pagetables:2252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  210.832838][T10597] Node 0 DMA free:14632kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:728kB local_pcp:352kB free_cma:0kB
[  210.842443][T10597] lowmem_reserve[]: 0 811 811 811 811
[  210.846905][T10597] Node 0 DMA32 free:212692kB boost:6144kB min:39804kB low:48216kB high:56628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39912kB inactive_anon:48kB active_file:212kB inactive_file:168032kB unevictable:3536kB writepending:64kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:38472kB local_pcp:19768kB free_cma:0kB
[  210.860664][T10597] lowmem_reserve[]: 0 0 0 0 0
[  210.862959][T10597] Node 1 DMA32 free:409152kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:31952kB local_pcp:21776kB free_cma:0kB
[  210.878242][T10597] lowmem_reserve[]: 0 0 854 854 854
[  210.880195][T10597] Node 1 Normal free:389384kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32808kB inactive_anon:0kB active_file:31548kB inactive_file:6444kB unevictable:3536kB writepending:208kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:63580kB local_pcp:22536kB free_cma:0kB
[  210.890293][T10597] lowmem_reserve[]: 0 0 0 0 0
[  210.893695][T10597] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 20*32kB (U) 8*64kB (U) 5*128kB (U) 4*256kB (U) 1*512kB (U) 5*1024kB (U) 3*2048kB (UM) 0*4096kB = 14632kB
[  210.899507][T10597] Node 0 DMA32: 541*4kB (ME) 375*8kB (UME) 528*16kB (UME) 726*32kB (UME) 409*64kB (UME) 87*128kB (UME) 39*256kB (UM) 15*512kB (UM) 6*1024kB (U) 6*2048kB (UM) 25*4096kB (U) = 212652kB
[  210.906612][T10597] Node 1 DMA32: 2*4kB (M) 3*8kB (UM) 6*16kB (UM) 49*32kB (UM) 39*64kB (UM) 10*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 96*4096kB (M) = 409184kB
[  210.914376][T10597] Node 1 Normal: 1254*4kB (UME) 423*8kB (UME) 322*16kB (UME) 517*32kB (UME) 344*64kB (UME) 143*128kB (UM) 68*256kB (UME) 37*512kB (UME) 24*1024kB (UM) 20*2048kB (UM) 53*4096kB (UM) = 389392kB
[  210.920949][T10597] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  210.924715][T10597] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  210.927708][T10597] 53988 total pagecache pages
[  210.929351][T10597] 0 pages in swap cache
[  210.931145][T10597] Free swap  = 124996kB
[  210.933177][T10597] Total swap = 124996kB
[  210.941686][T10597] 786301 pages RAM
[  210.943240][T10597] 0 pages HighMem/MovableOnly
[  210.944900][T10597] 241320 pages reserved
[  210.946401][T10597] 0 pages cma reserved
[  212.703142][T10670] netlink: 'syz.0.1948': attribute type 4 has an invalid length.
[  212.706857][T10670] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1948'.
[  212.725851][T10670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  212.755046][T10676] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1951'.
[  212.856458][T10680] netlink: 'syz.0.1952': attribute type 7 has an invalid length.
[  212.973817][T10683] netlink: 'syz.4.1953': attribute type 4 has an invalid length.
[  212.976562][T10683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1953'.
[  213.072360][T10683] wlan1: mtu less than device minimum
[  213.707108][T10705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  214.997120][T10750] netlink: 'syz.4.1984': attribute type 21 has an invalid length.
[  215.258865][T10771] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1994'.
[  215.469757][T10787] netlink: 'syz.0.2002': attribute type 49 has an invalid length.
[  216.927821][T10807] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2011'.
[  217.330032][T10829] cgroup: fork rejected by pids controller in /syz3
[  217.402641][T10832] netlink: 'syz.0.2022': attribute type 10 has an invalid length.
[  217.707020][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.784564][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.827630][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.913814][   T12] bond0: (slave netdevsim0): Releasing backup interface
[  217.920967][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.175509][   T12] bridge_slave_1: left allmulticast mode
[  218.183088][   T12] bridge_slave_1: left promiscuous mode
[  218.188007][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.254100][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.258853][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.263054][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.267570][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.271169][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  218.381146][   T12] bridge_slave_0: left allmulticast mode
[  218.386040][   T12] bridge_slave_0: left promiscuous mode
[  218.389833][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.264969][   T12] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  219.386495][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.393156][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.397781][   T12] bond0 (unregistering): Released all slaves
[  219.604237][   T12] team0: Port device .3#c removed
[  219.872234][T10885] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2040'.
[  219.958070][   T12] hsr_slave_0: left promiscuous mode
[  219.967603][   T12] hsr_slave_1: left promiscuous mode
[  219.972731][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.976875][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.992545][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.995676][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.007905][   T12] veth0_macvtap: left promiscuous mode
[  220.017861][   T12] veth1_vlan: left promiscuous mode
[  220.312937][ T5235] Bluetooth: hci2: command tx timeout
[  220.345155][T10899] netlink: 'syz.4.2046': attribute type 19 has an invalid length.
[  220.348159][T10899] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2046'.
[  220.448601][T10903] netlink: 'syz.4.2048': attribute type 10 has an invalid length.
[  220.506907][   T12] team0 (unregistering): Port device team_slave_1 removed
[  220.540225][   T12] team0 (unregistering): Port device team_slave_0 removed
[  220.891323][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2042'.
[  221.009306][T10903] team0: Port device geneve1 added
[  221.026637][T10852] chnl_net:caif_netlink_parms(): no params data found
[  221.249913][T10852] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.269686][T10852] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.273370][T10852] bridge_slave_0: entered allmulticast mode
[  221.282751][T10852] bridge_slave_0: entered promiscuous mode
[  221.290214][T10852] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.299189][T10852] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.303573][T10852] bridge_slave_1: entered allmulticast mode
[  221.312923][T10852] bridge_slave_1: entered promiscuous mode
[  221.365085][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.371157][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.426848][T10852] team0: Port device team_slave_0 added
[  221.430718][T10852] team0: Port device team_slave_1 added
[  221.497081][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.499415][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.517125][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.523276][T10929] netlink: 'syz.4.2056': attribute type 3 has an invalid length.
[  221.526842][T10929] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2056'.
[  221.530321][T10929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  221.540355][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.544564][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.566982][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.650627][T10852] hsr_slave_0: entered promiscuous mode
[  221.654292][T10852] hsr_slave_1: entered promiscuous mode
[  221.657223][T10852] debugfs: 'hsr0' already exists in 'hsr'
[  221.659516][T10852] Cannot create hsr debugfs directory
[  222.394634][ T5235] Bluetooth: hci2: command tx timeout
[  222.566289][T10852] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  222.588621][T10852] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  222.596941][T10852] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  222.612453][T10852] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  222.657793][T10973] netlink: 'syz.4.2068': attribute type 10 has an invalid length.
[  222.668327][T10973] geneve0: entered promiscuous mode
[  222.679418][T10973] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  222.783432][T10852] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.820915][T10852] 8021q: adding VLAN 0 to HW filter on device team0
[  222.849522][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.852694][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.874567][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.877638][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.420983][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.554110][T10852] veth0_vlan: entered promiscuous mode
[  223.564991][T10852] veth1_vlan: entered promiscuous mode
[  223.617386][T10852] veth0_macvtap: entered promiscuous mode
[  223.633471][T10852] veth1_macvtap: entered promiscuous mode
[  223.678951][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.730719][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.747096][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.750515][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.756215][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.759682][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.385411][T11005] netlink: 'syz.0.2074': attribute type 29 has an invalid length.
[  224.476476][ T5235] Bluetooth: hci2: command tx timeout
[  224.562345][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.565089][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.612606][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.615518][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.727514][T11021] tap0: tun_chr_ioctl cmd 2148553947
[  224.936071][T11035] netlink: 'syz.3.2084': attribute type 10 has an invalid length.
[  224.938737][T11035] team0: Device dummy0 is up. Set it down before adding it as a team port
[  225.609820][ T5235] Bluetooth: hci0: Malformed LE Event: 0x02
[  225.738836][T11074] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2102'.
[  226.536893][T11109] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2119'.
[  226.599190][ T5235] Bluetooth: hci2: command tx timeout
[  227.882509][T11166] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2144'.
[  227.885337][T11166] tc_dump_action: action bad kind
[  227.915652][T11168] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2145'.
[  227.947149][T11170] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2146'.
[  228.506837][T11198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2158'.
[  228.621928][T11203] netlink: 'syz.3.2157': attribute type 10 has an invalid length.
[  231.560585][T11203] bond0: (slave bond_slave_0): Releasing backup interface
[  232.447171][ T5235] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  232.599127][T11260] netlink: 'syz.0.2184': attribute type 3 has an invalid length.
[  232.603485][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'.
[  232.733796][T11264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2187'.
[  233.188906][T11288] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2197'.
[  233.258189][T11292] netlink: 'syz.4.2199': attribute type 1 has an invalid length.
[  233.466940][T11296] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.2200'.
[  233.470299][T11296] openvswitch: netlink: Message has 6 unknown bytes.
[  233.549091][T11301] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  233.581883][T11301] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  233.667550][T11296] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2200'.
[  233.849526][T11309] netlink: 'syz.3.2205': attribute type 21 has an invalid length.
[  235.065386][T11359] netlink: 'syz.0.2228': attribute type 7 has an invalid length.
[  235.301225][T11367] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2231'.
[  236.518200][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2241'.
[  236.521162][T11392] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2241'.
[  236.724251][T11400] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2242'.
[  238.769834][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1308297973 wd_nsec: 1308297994
[  244.820204][T11411] syzkaller0: entered promiscuous mode
[  244.822125][T11411] syzkaller0: entered allmulticast mode
[  246.125043][T11420] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  246.310230][T11432] netlink: 'syz.4.2256': attribute type 21 has an invalid length.
[  246.313609][T11432] netlink: 'syz.4.2256': attribute type 15 has an invalid length.
[  246.316868][T11432] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2256'.
[  246.319682][T11432] IPv6: NLM_F_CREATE should be specified when creating new route
[  246.333944][T11432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  246.336981][T11432] IPv6: NLM_F_CREATE should be set when creating new route
[  246.339895][T11432] IPv6: NLM_F_CREATE should be set when creating new route
[  246.342837][T11432] IPv6: NLM_F_CREATE should be set when creating new route
[  247.437714][T11454] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2266'.
[  247.441012][T11452] netlink: 'syz.3.2265': attribute type 2 has an invalid length.
[  247.453845][T11452] netlink: 'syz.3.2265': attribute type 8 has an invalid length.
[  247.467520][T11452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2265'.
[  247.848837][T11488] can: request_module (can-proto-0) failed.
[  248.318926][T11523] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.2299'.
[  248.987211][T11558] netlink: 'syz.0.2307': attribute type 11 has an invalid length.
[  249.723141][T11566] netlink: 'syz.3.2315': attribute type 46 has an invalid length.
[  249.788059][T11570] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2317'.
[  250.075642][T11576] netlink: 'syz.3.2320': attribute type 12 has an invalid length.
[  250.089579][T11576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2320'.
[  250.123347][T11583] IPv6: NLM_F_REPLACE set, but no existing node found!
[  250.226055][T11588] tap0: tun_chr_ioctl cmd 1074812118
[  251.712829][T11639] netlink: 'syz.3.2348': attribute type 6 has an invalid length.
[  251.716183][T11639] netlink: 'syz.3.2348': attribute type 25 has an invalid length.
[  251.719436][T11639] netlink: 'syz.3.2348': attribute type 27 has an invalid length.
[  251.725493][T11639] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.2348'.
[  251.812576][T11642] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2350'.
[  252.062825][T11657] netlink: 'syz.3.2354': attribute type 29 has an invalid length.
[  252.716767][T11672] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2361'.
[  252.726593][T11672] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  252.730799][T11672] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  253.319684][T11690] netlink: 'syz.0.2368': attribute type 29 has an invalid length.
[  253.324417][T11690] netlink: 'syz.0.2368': attribute type 29 has an invalid length.
[  253.328484][T11690] netlink: 'syz.0.2368': attribute type 29 has an invalid length.
[  253.332573][T11690] netlink: 'syz.0.2368': attribute type 29 has an invalid length.
[  253.557570][T11700] netlink: 'syz.0.2373': attribute type 3 has an invalid length.
[  253.560033][T11700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2373'.
[  253.838502][T11714] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2380'.
[  253.899616][T11717] sock: sock_set_timeout: `syz.0.2381' (pid 11717) tries to set negative timeout
[  254.778055][T11745] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  254.785155][T11745] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  254.854615][T11750] netlink: 'syz.3.2397': attribute type 3 has an invalid length.
[  254.859056][T11750] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2397'.
[  255.355667][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.358578][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.459594][ T5235] Bluetooth: hci0: Malformed HCI Event: 0x22
[  255.556899][T11774] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2408'.
[  260.627192][T11871] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  260.629782][T11871] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  260.836612][T11886] validate_nla: 1 callbacks suppressed
[  260.836631][T11886] netlink: 'syz.3.2457': attribute type 15 has an invalid length.
[  261.307619][ T5235] Bluetooth: hci2: adv larger than maximum supported
[  262.986571][T11950] netlink: 'syz.0.2485': attribute type 1 has an invalid length.
[  262.996373][T11950] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2485'.
[  263.063061][T11953] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2486'.
[  263.067182][T11953] netlink: get zone limit has 8 unknown bytes
[  263.163758][T11958] netlink: 'syz.0.2488': attribute type 2 has an invalid length.
[  263.167277][T11958] netlink: 'syz.0.2488': attribute type 8 has an invalid length.
[  263.170301][T11958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2488'.
[  263.194936][T11949] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2484'.
[  263.202998][T11949] bond_slave_1: entered promiscuous mode
[  263.395973][T11974] netlink: 'syz.3.2496': attribute type 41 has an invalid length.
[  263.525000][T11984] netlink: 'syz.0.2500': attribute type 3 has an invalid length.
[  263.536100][T11984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2500'.
[  264.024593][T12004] openvswitch: netlink: Flow actions attr not present in new flow.
[  264.883468][T12034] netlink: 'syz.3.2524': attribute type 21 has an invalid length.
[  265.345400][T12067] netlink: 'syz.0.2539': attribute type 21 has an invalid length.
[  265.364948][T12069] netlink: 'syz.4.2540': attribute type 10 has an invalid length.
[  265.376221][T12069] 8021q: adding VLAN 0 to HW filter on device team0
[  265.381357][T12069] bond0: (slave team0): Enslaving as an active interface with an up link
[  266.020361][T12107] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2557'.
[  266.032181][T12107] hsr_slave_0: left promiscuous mode
[  266.044405][T12107] hsr_slave_1: left promiscuous mode
[  266.261217][T12123] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2565'.
[  266.531141][T12141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.581352][T12145] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2575'.
[  267.342555][ T5235] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  267.791179][T12208] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2605'.
[  268.785806][T12239] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2619'.
[  269.361191][T12263] delete_channel: no stack
[  269.364776][T12263] delete_channel: no stack
[  270.955370][T12350] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2669'.
[  273.423245][T12425] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2703'.
[  273.505260][T12431] netlink: 'syz.4.2706': attribute type 6 has an invalid length.
[  276.109345][T12530] sock: sock_timestamping_bind_phc: sock not bind to device
[  276.397927][T12540] netlink: 'syz.0.2757': attribute type 21 has an invalid length.
[  276.416619][T12540] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2757'.
[  276.825778][T12557] netlink: 'syz.0.2766': attribute type 2 has an invalid length.
[  276.829523][T12557] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2766'.
[  277.040210][T12580] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2775'.
[  278.218658][T12606] netlink: 'syz.4.2784': attribute type 6 has an invalid length.
[  278.224626][T12606] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2784'.
[  280.310678][   T53] : port 1(vlan0) entered blocking state
[  280.313189][   T53] : port 1(vlan0) entered forwarding state
[  280.329806][T12629] netlink: 'syz.0.2793': attribute type 10 has an invalid length.
[  280.337277][T12629] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2793'.
[  280.571055][T12648] netlink: 'syz.4.2801': attribute type 10 has an invalid length.
[  280.743415][T12659] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2805'.
[  280.746673][T12659] netlink: zone id is out of range
[  280.748365][T12659] netlink: get zone limit has 8 unknown bytes
[  280.983684][T12662] netlink: 'syz.3.2807': attribute type 39 has an invalid length.
[  281.144329][T12662] veth0_macvtap: left promiscuous mode
[  281.250160][T12682] netlink: 'syz.4.2815': attribute type 4 has an invalid length.
[  283.083664][T12690] ip6gretap0: left allmulticast mode
[  283.086593][T12690] ip6gretap0: left promiscuous mode
[  283.088994][T12690] bridge0: port 1(ip6gretap0) entered disabled state
[  283.099345][T12690] bridge_slave_1: left allmulticast mode
[  283.103251][T12690] bridge_slave_1: left promiscuous mode
[  283.105822][T12690] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.208814][T12695] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2820'.
[  283.420619][T12707] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2825'.
[  283.493469][T12712] netlink: 'syz.0.2827': attribute type 1 has an invalid length.
[  283.745073][T12724] netlink: 'syz.4.2833': attribute type 10 has an invalid length.
[  283.748455][T12724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2833'.
[  283.792480][T12724] batman_adv: batadv0: Adding interface: virt_wifi0
[  283.801740][T12724] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.840253][T12724] batman_adv: batadv0: Interface activated: virt_wifi0
[  283.852073][T12727] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2833'.
[  287.349824][T12834] pim6reg1: entered promiscuous mode
[  287.353678][T12834] pim6reg1: entered allmulticast mode
[  288.156032][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2902'.
[  288.450593][T12888] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2908'.
[  288.456498][T12888] netlink: zone id is out of range
[  288.458560][T12888] netlink: zone id is out of range
[  288.460594][T12888] netlink: zone id is out of range
[  288.462987][T12888] netlink: zone id is out of range
[  288.465067][T12888] netlink: zone id is out of range
[  288.466750][T12888] netlink: zone id is out of range
[  288.468844][T12888] netlink: zone id is out of range
[  288.470908][T12888] netlink: zone id is out of range
[  288.473739][T12888] netlink: zone id is out of range
[  288.476472][T12888] netlink: zone id is out of range
[  288.943106][T12901] syzkaller0: entered promiscuous mode
[  288.945193][T12901] syzkaller0: entered allmulticast mode
[  290.358471][T12951] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  290.360713][T12951] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  291.451245][T12988] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  291.455735][T12988] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  291.599931][T12997] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2954'.
[  291.920933][T13005] GPL: port 1(gretap0) entered blocking state
[  291.926440][T13005] GPL: port 1(gretap0) entered disabled state
[  291.929332][T13005] gretap0: entered allmulticast mode
[  291.947882][T13005] gretap0: entered promiscuous mode
[  292.675365][T13029] netlink: 'syz.4.2968': attribute type 2 has an invalid length.
[  292.678080][T13029] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2968'.
[  292.853317][T13044] pim6reg1: entered allmulticast mode
[  293.438246][T13099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2993'.
[  293.960548][ T5235] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  295.863435][T13237] netlink: 'syz.3.3035': attribute type 10 has an invalid length.
[  295.932064][T13237] veth1_macvtap: left promiscuous mode
[  296.400848][T13245] netlink: 'syz.3.3038': attribute type 10 has an invalid length.
[  296.409593][T13245] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.419950][T13245] bridge_slave_1: left allmulticast mode
[  296.424925][T13245] bridge_slave_1: left promiscuous mode
[  296.428067][T13245] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.449545][T13245] bridge_slave_1: entered promiscuous mode
[  296.455840][T13245] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  297.000296][T13256] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3043'.
[  298.367013][T13288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3058'.
[  298.463906][T13298] netlink: 'syz.3.3062': attribute type 11 has an invalid length.
[  298.466321][T13298] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3062'.
[  298.566211][T13305] netlink: 'syz.0.3066': attribute type 21 has an invalid length.
[  298.569302][T13305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3066'.
[  298.754233][T13307] netlink: 'syz.4.3067': attribute type 39 has an invalid length.
[  302.051632][T13337] syzkaller1: tun_chr_ioctl cmd 1074025677
[  302.055836][T13337] syzkaller1: linktype set to 804
[  302.310320][T13363] netlink: 'syz.0.3094': attribute type 46 has an invalid length.
[  302.319666][T13363] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3094'.
[  304.219947][T13424] netlink: 'syz.4.3123': attribute type 7 has an invalid length.
[  304.444521][T13431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.448317][T13431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.742956][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'.
[  304.747042][T13440] netlink: 130076 bytes leftover after parsing attributes in process `syz.4.3129'.
[  304.750416][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'.
[  305.830348][T13464] net_ratelimit: 74 callbacks suppressed
[  305.830370][T13464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.051923][T13480] netlink: 'syz.4.3146': attribute type 4 has an invalid length.
[  306.063245][T13480] netlink: 'syz.4.3146': attribute type 10 has an invalid length.
[  306.080044][T13480] dummy0: left promiscuous mode
[  306.105841][T13480] team0: Port device dummy0 added
[  306.151090][T13487] netlink: 'syz.0.3151': attribute type 3 has an invalid length.
[  306.159248][T13489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3149'.
[  307.339214][T13512] netlink: 'syz.4.3161': attribute type 13 has an invalid length.
[  307.355428][T13512] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3161'.
[  307.365595][T13512] syz_tun: refused to change device tx_queue_len
[  307.560124][T13518] netlink: 'syz.0.3164': attribute type 1 has an invalid length.
[  307.572048][T13518] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3164'.
[  307.952899][T13522] netlink: 'syz.3.3165': attribute type 10 has an invalid length.
[  307.958026][T13522] team0: Device hsr_slave_0 failed to register rx_handler
[  308.003752][T13524] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  308.007072][T13524] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  308.469769][T13543] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3175'.
[  310.242301][T13579] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3190'.
[  310.613015][T13582] sctp: [Deprecated]: syz.3.3192 (pid 13582) Use of struct sctp_assoc_value in delayed_ack socket option.
[  310.613015][T13582] Use struct sctp_sack_info instead
[  310.740172][T13586] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3194'.
[  311.743821][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.825540][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.886380][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.003706][   T12] bond0: (slave ): Releasing backup interface
[  312.007601][   T12] netdevsim netdevsim0  (unregistering): left promiscuous mode
[  312.014428][   T12] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.403048][   T12] bond0 (unregistering): (slave 1!): Releasing backup interface
[  312.405811][   T12] !: left promiscuous mode
[  312.409196][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.414199][   T12] bond0 (unregistering): Released all slaves
[  312.957263][ T5235] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  312.982496][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  312.998354][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.004364][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.008982][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.013787][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.062338][   T12] hsr_slave_0: left promiscuous mode
[  313.067595][   T12] hsr_slave_1: left promiscuous mode
[  313.126092][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.130019][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.134758][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.138022][T13643] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3213'.
[  313.146068][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.151014][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.427853][   T12] team0 (unregistering): Port device team_slave_1 removed
[  313.453415][   T12] team0 (unregistering): Port device C removed
[  314.158752][T13637] chnl_net:caif_netlink_parms(): no params data found
[  314.258882][T13644] chnl_net:caif_netlink_parms(): no params data found
[  314.279744][T13637] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.301671][T13637] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.304639][T13637] bridge_slave_0: entered allmulticast mode
[  314.307657][T13637] bridge_slave_0: entered promiscuous mode
[  314.312454][T13637] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.315340][T13637] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.317841][T13637] bridge_slave_1: entered allmulticast mode
[  314.321740][T13637] bridge_slave_1: entered promiscuous mode
[  314.384507][T13637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.433131][T13637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.449457][T13644] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.452120][T13644] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.454606][T13644] bridge_slave_0: entered allmulticast mode
[  314.457674][T13644] bridge_slave_0: entered promiscuous mode
[  314.473483][T13644] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.476269][T13644] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.478845][T13644] bridge_slave_1: entered allmulticast mode
[  314.483889][T13644] bridge_slave_1: entered promiscuous mode
[  314.489056][T13637] team0: Port device team_slave_0 added
[  314.496283][T13637] team0: Port device team_slave_1 added
[  314.576862][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.590818][T13644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.596946][T13644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.601096][T13637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.606941][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.615984][T13637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.620884][T13637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.625917][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.634608][T13637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.669077][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.726105][T13644] team0: Port device team_slave_0 added
[  314.731304][T13644] team0: Port device team_slave_1 added
[  314.801019][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.816765][T13637] hsr_slave_0: entered promiscuous mode
[  314.820436][T13637] hsr_slave_1: entered promiscuous mode
[  314.827808][T13644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.830568][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.845791][T13644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.865590][   T12] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.877021][T13644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.879821][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.894626][T13644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.029624][T13644] hsr_slave_0: entered promiscuous mode
[  315.032120][ T5852] Bluetooth: hci0: command tx timeout
[  315.037197][T13644] hsr_slave_1: entered promiscuous mode
[  315.040533][T13644] debugfs: 'hsr0' already exists in 'hsr'
[  315.043368][T13644] Cannot create hsr debugfs directory
[  315.195247][ T5852] Bluetooth: hci1: command tx timeout
[  315.258657][T13688] netlink: 'syz.3.3222': attribute type 10 has an invalid length.
[  315.334275][T13688] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  315.338621][   T12] vlan0: left allmulticast mode
[  315.340723][   T12] vlan0: left promiscuous mode
[  315.344405][   T12] : port 1(vlan0) entered disabled state
[  315.355333][   T12] gretap0: left allmulticast mode
[  315.357521][   T12] gretap0: left promiscuous mode
[  315.359853][   T12] GPL: port 1(gretap0) entered disabled state
[  315.722231][   T12] team0: Port device geneve1 removed
[  315.744235][   T12] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  316.363538][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.370123][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.382014][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  316.396520][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[  316.405684][   T12] bond0 (unregistering): Released all slaves
[  316.598895][T13637] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  316.656640][T13637] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  316.662085][T13637] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  316.670813][T13637] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  316.806550][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.808523][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  316.849912][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.867916][T13720] Dead loop on virtual device ip6_vti0, fix it urgently!
[  316.873856][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.889468][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.892880][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.902831][   T12] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  316.905678][   T12] batman_adv: batadv0: Removing interface: virt_wifi0
[  316.933723][   T12] veth1_macvtap: left promiscuous mode
[  316.935862][   T12] veth0_macvtap: left promiscuous mode
[  316.937708][   T12] veth1_vlan: left promiscuous mode
[  316.939413][   T12] veth0_vlan: left promiscuous mode
[  317.113069][ T5852] Bluetooth: hci0: command tx timeout
[  317.273733][ T5852] Bluetooth: hci1: command tx timeout
[  317.395733][   T12] team0 (unregistering): Port device team_slave_1 removed
[  317.443263][   T12] team0 (unregistering): Port device C removed
[  317.769996][   T12] team0 (unregistering): Port device dummy0 removed
[  317.887147][T13644] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  317.896143][T13644] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  317.906047][T13644] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  317.927275][T13644] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  318.128219][T13637] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.189474][T13637] 8021q: adding VLAN 0 to HW filter on device team0
[  318.226148][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.229170][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.384816][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.387746][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.420111][T13644] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.515903][T13644] 8021q: adding VLAN 0 to HW filter on device team0
[  318.535284][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.538206][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.558074][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.560989][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.810029][T13637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.906531][T13644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.172972][T13637] veth0_vlan: entered promiscuous mode
[  319.192258][ T5852] Bluetooth: hci0: command tx timeout
[  319.208021][T13637] veth1_vlan: entered promiscuous mode
[  319.286687][T13637] veth0_macvtap: entered promiscuous mode
[  319.296008][T13644] veth0_vlan: entered promiscuous mode
[  319.315681][T13637] veth1_macvtap: entered promiscuous mode
[  319.336444][T13644] veth1_vlan: entered promiscuous mode
[  319.363038][ T5852] Bluetooth: hci1: command tx timeout
[  319.387765][T13637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.406321][T13637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.453940][ T5864] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.462137][ T5864] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.467333][ T5864] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.585054][ T5864] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.588808][T13644] veth0_macvtap: entered promiscuous mode
[  319.666405][T13644] veth1_macvtap: entered promiscuous mode
[  319.724901][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.726329][T13644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.727402][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.773579][T13644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.786191][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.789720][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.797836][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.801226][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.806628][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.819576][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.922992][ T5852] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[  320.117128][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.155263][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.489741][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.503157][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.283609][ T5852] Bluetooth: hci0: command tx timeout
[  321.436710][ T5852] Bluetooth: hci1: command tx timeout
[  321.751081][T13830] netlink: 'syz.6.3246': attribute type 10 has an invalid length.
[  321.783529][T13830] geneve0: entered promiscuous mode
[  321.793877][T13830] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  324.531314][T13954] netlink: 'syz.5.3281': attribute type 10 has an invalid length.
[  324.536603][T13950] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3279'.
[  324.824252][T13972] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3288'.
[  325.087635][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3295'.
[  325.106195][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3295'.
[  326.239482][T14029] netlink: 'syz.5.3310': attribute type 1 has an invalid length.
[  326.246495][T14029] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3310'.
[  329.412939][T14126] syz.5.3348: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  329.419042][T14126] CPU: 1 UID: 0 PID: 14126 Comm: syz.5.3348 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  329.419062][T14126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  329.419072][T14126] Call Trace:
[  329.419078][T14126]  <TASK>
[  329.419086][T14126]  dump_stack_lvl+0x189/0x250
[  329.419113][T14126]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.419130][T14126]  ? __pfx__printk+0x10/0x10
[  329.419152][T14126]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  329.419171][T14126]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  329.419190][T14126]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  329.419210][T14126]  warn_alloc+0x214/0x310
[  329.419232][T14126]  ? stack_depot_save_flags+0x40/0x860
[  329.419251][T14126]  ? __pfx_warn_alloc+0x10/0x10
[  329.419272][T14126]  ? kasan_save_track+0x4f/0x80
[  329.419343][T14126]  ? xskq_create+0x56/0x170
[  329.419360][T14126]  ? xsk_init_queue+0xb0/0x110
[  329.419376][T14126]  ? xsk_setsockopt+0x57b/0x8d0
[  329.419389][T14126]  ? do_sock_setsockopt+0x17c/0x1b0
[  329.419410][T14126]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  329.419430][T14126]  ? do_syscall_64+0xfa/0x3b0
[  329.419447][T14126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.419467][T14126]  __vmalloc_node_range_noprof+0x125/0x12f0
[  329.419511][T14126]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  329.419531][T14126]  ? xskq_create+0x56/0x170
[  329.419548][T14126]  ? __kasan_kmalloc+0x93/0xb0
[  329.419569][T14126]  vmalloc_user_noprof+0xad/0xf0
[  329.419588][T14126]  ? xskq_create+0xbf/0x170
[  329.419604][T14126]  xskq_create+0xbf/0x170
[  329.419634][T14126]  xsk_init_queue+0xb0/0x110
[  329.419653][T14126]  xsk_setsockopt+0x57b/0x8d0
[  329.419670][T14126]  ? __pfx_xsk_setsockopt+0x10/0x10
[  329.419685][T14126]  ? __pfx_aa_sk_perm+0x10/0x10
[  329.419707][T14126]  ? __fget_files+0x2a/0x420
[  329.419728][T14126]  ? aa_sock_opt_perm+0xff/0x1b0
[  329.419752][T14126]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  329.419767][T14126]  ? __pfx_xsk_setsockopt+0x10/0x10
[  329.419782][T14126]  do_sock_setsockopt+0x17c/0x1b0
[  329.419805][T14126]  __x64_sys_setsockopt+0x13f/0x1b0
[  329.419828][T14126]  do_syscall_64+0xfa/0x3b0
[  329.419844][T14126]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.419859][T14126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.419873][T14126]  ? exc_page_fault+0x9f/0xf0
[  329.419890][T14126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.419904][T14126] RIP: 0033:0x7faccf98ebe9
[  329.419917][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.419930][T14126] RSP: 002b:00007facd08b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  329.419945][T14126] RAX: ffffffffffffffda RBX: 00007faccfbb5fa0 RCX: 00007faccf98ebe9
[  329.419955][T14126] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  329.419963][T14126] RBP: 00007faccfa11e19 R08: 0000000000000004 R09: 0000000000000000
[  329.419971][T14126] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  329.419979][T14126] R13: 00007faccfbb6038 R14: 00007faccfbb5fa0 R15: 00007fff820c5b08
[  329.420002][T14126]  </TASK>
[  329.420011][T14126] Mem-Info:
[  329.540773][T14126] active_anon:23335 inactive_anon:0 isolated_anon:0
[  329.540773][T14126]  active_file:7988 inactive_file:43668 isolated_file:0
[  329.540773][T14126]  unevictable:1768 dirty:51 writeback:0
[  329.540773][T14126]  slab_reclaimable:9962 slab_unreclaimable:56878
[  329.540773][T14126]  mapped:18152 shmem:2478 pagetables:1401
[  329.540773][T14126]  sec_pagetables:0 bounce:0
[  329.540773][T14126]  kernel_misc_reclaimable:0
[  329.540773][T14126]  free:254537 free_pcp:29017 free_cma:0
[  329.558519][T14126] Node 0 active_anon:49088kB inactive_anon:0kB active_file:280kB inactive_file:168136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30876kB dirty:100kB writeback:0kB shmem:5064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7856kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  329.571148][T14126] Node 1 active_anon:44252kB inactive_anon:0kB active_file:31672kB inactive_file:6536kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41732kB dirty:104kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4528kB pagetables:2844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  329.582973][T14126] Node 0 DMA free:14632kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:728kB local_pcp:352kB free_cma:0kB
[  329.594200][T14126] lowmem_reserve[]: 0 811 811 811 811
[  329.596335][T14126] Node 0 DMA32 free:202380kB boost:6144kB min:39804kB low:48216kB high:56628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49088kB inactive_anon:0kB active_file:280kB inactive_file:168136kB unevictable:3536kB writepending:100kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:37336kB local_pcp:13936kB free_cma:0kB
[  329.608531][T14126] lowmem_reserve[]: 0 0 0 0 0
[  329.610394][T14126] Node 1 DMA32 free:439056kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:19496kB local_pcp:10968kB free_cma:0kB
[  329.621740][T14126] lowmem_reserve[]: 0 0 854 854 854
[  329.623776][T14126] Node 1 Normal free:361888kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44252kB inactive_anon:0kB active_file:31672kB inactive_file:6536kB unevictable:3536kB writepending:104kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:59528kB local_pcp:37428kB free_cma:0kB
[  329.635672][T14126] lowmem_reserve[]: 0 0 0 0 0
[  329.637518][T14126] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 20*32kB (U) 8*64kB (U) 5*128kB (U) 4*256kB (U) 1*512kB (U) 5*1024kB (U) 3*2048kB (UM) 0*4096kB = 14632kB
[  329.643667][T14126] Node 0 DMA32: 851*4kB (UME) 388*8kB (UME) 118*16kB (UME) 215*32kB (UM) 171*64kB (UME) 92*128kB (UME) 84*256kB (UM) 31*512kB (UME) 12*1024kB (UE) 8*2048kB (UME) 24*4096kB (U) = 202348kB
[  329.658111][T14126] Node 1 DMA32: 2*4kB (M) 11*8kB (UM) 15*16kB (UM) 124*32kB (UM) 107*64kB (UM) 37*128kB (UM) 11*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 6*2048kB (UM) 97*4096kB (UM) = 439056kB
[  329.664988][T14126] Node 1 Normal: 18*4kB (UME) 21*8kB (UME) 127*16kB (UME) 286*32kB (ME) 108*64kB (ME) 30*128kB (UM) 49*256kB (UME) 53*512kB (UM) 21*1024kB (UM) 12*2048kB (UM) 62*4096kB (UM) = 361888kB
[  329.672099][T14126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  329.675571][T14126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  329.679062][T14126] 54134 total pagecache pages
[  329.680886][T14126] 0 pages in swap cache
[  329.682689][T14126] Free swap  = 124996kB
[  329.684231][T14126] Total swap = 124996kB
[  329.685883][T14126] 786301 pages RAM
[  329.687327][T14126] 0 pages HighMem/MovableOnly
[  329.689164][T14126] 241320 pages reserved
[  329.690749][T14126] 0 pages cma reserved
[  330.428734][T14130] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3350'.
[  330.673538][T14144] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3352'.
[  331.162484][T14171] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.3357'.
[  331.165661][T14171] openvswitch: netlink: Message has 6 unknown bytes.
[  332.707911][T14215] : renamed from bond0 (while UP)
[  332.764442][T14220] netlink: 'syz.3.3378': attribute type 21 has an invalid length.
[  333.081181][T14227] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3381'.
[  333.222993][T14232] sctp: [Deprecated]: syz.6.3383 (pid 14232) Use of int in maxseg socket option.
[  333.222993][T14232] Use struct sctp_assoc_value instead
[  333.275530][T14234] netlink: 'syz.5.3384': attribute type 10 has an invalid length.
[  333.278457][T14234] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3384'.
[  333.346551][T14242] sit0: entered allmulticast mode
[  333.360020][T14242] sit0: entered promiscuous mode
[  335.066284][T14315] IPv6: Can't replace route, no match found
[  335.256636][T14320] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3421'.
[  336.120821][T14360] bridge_slave_0: left allmulticast mode
[  336.150297][T14360] bridge_slave_0: left promiscuous mode
[  336.181109][T14360] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.544445][T14385] netlink: 'syz.5.3439': attribute type 2 has an invalid length.
[  336.676182][T14401] netlink: 'syz.6.3446': attribute type 9 has an invalid length.
[  336.678902][T14401] netlink: 61951 bytes leftover after parsing attributes in process `syz.6.3446'.
[  337.036483][T14438] netlink: 'syz.5.3459': attribute type 1 has an invalid length.
[  337.113243][T14445] netlink: 'syz.6.3461': attribute type 10 has an invalid length.
[  337.115930][T14445] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.127084][T14445] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.138709][T14445] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  337.905265][T14497] syzkaller0: entered promiscuous mode
[  337.907403][T14497] syzkaller0: entered allmulticast mode
[  340.688003][T14550] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3497'.
[  340.777634][T14560] netlink: 'syz.5.3500': attribute type 4 has an invalid length.
[  340.780221][T14560] netlink: 'syz.5.3500': attribute type 3 has an invalid length.
[  340.786347][T14560] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3500'.
[  342.514083][T14620] netlink: 'syz.3.3518': attribute type 2 has an invalid length.
[  342.516925][T14620] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.3518'.
[  343.379724][T14606] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3511'.
[  343.504188][T14631] netlink: 'syz.5.3523': attribute type 3 has an invalid length.
[  343.512264][T14631] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3523'.
[  343.519424][T14629] syzkaller0: entered promiscuous mode
[  344.230787][T14653] netlink: 'syz.6.3532': attribute type 39 has an invalid length.
[  344.405284][T14662] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3534'.
[  344.408777][T14657] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3534'.
[  344.473814][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  345.429744][T14686] netlink: 'syz.5.3547': attribute type 1 has an invalid length.
[  345.452291][T14686] netlink: 'syz.5.3547': attribute type 4 has an invalid length.
[  345.455432][T14686] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3547'.
[  345.683191][T14695] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3552'.
[  345.745924][T14701] netlink: 'syz.5.3554': attribute type 21 has an invalid length.
[  345.872332][T14714] netlink: 'syz.5.3559': attribute type 4 has an invalid length.
[  345.874877][T14714] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3559'.
[  345.953001][T14717] netlink: 'syz.3.3562': attribute type 10 has an invalid length.
[  346.092818][ T5235] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  346.093003][ T5235] Bluetooth: hci1: connection err: -111
[  346.093711][T14717] batman_adv: batadv0: Adding interface: team0
[  346.100676][T14717] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.121072][T14717] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  346.136453][T14731] @: renamed from bond_slave_0 (while UP)
[  353.751959][T14733] sched: DL replenish lagged too much
[  361.312516][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.316910][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.319501][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.322365][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.325344][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.464621][T14754] chnl_net:caif_netlink_parms(): no params data found
[  362.202238][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.206803][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.210167][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.216191][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.218994][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.353060][ T5235] Bluetooth: hci3: command tx timeout
[  364.232144][ T5235] Bluetooth: hci4: command tx timeout
[  365.802085][ T5235] Bluetooth: hci3: command tx timeout
[  366.313923][ T5235] Bluetooth: hci4: command tx timeout
[  367.833367][ T5235] Bluetooth: hci3: command tx timeout
[  368.392883][ T5235] Bluetooth: hci4: command tx timeout
[  369.911925][ T5235] Bluetooth: hci3: command tx timeout
[  370.472697][ T5235] Bluetooth: hci4: command tx timeout
[  374.284085][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.288172][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.291324][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.297952][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.304113][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.392037][ T5852] Bluetooth: hci5: command tx timeout
[  378.235147][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.237377][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  378.473208][ T5852] Bluetooth: hci5: command tx timeout
[  380.552063][ T5852] Bluetooth: hci5: command tx timeout
[  382.632215][ T5852] Bluetooth: hci5: command tx timeout
[  422.288704][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  422.293201][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  422.296725][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  422.300617][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  422.310605][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  423.128124][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  423.135842][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  423.140543][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  423.146114][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  423.149120][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  424.391917][ T5235] Bluetooth: hci6: command tx timeout
[  425.191807][ T5235] Bluetooth: hci7: command tx timeout
[  426.473966][ T5235] Bluetooth: hci6: command tx timeout
[  427.271760][ T5235] Bluetooth: hci7: command tx timeout
[  428.554217][ T5235] Bluetooth: hci6: command tx timeout
[  429.351730][ T5235] Bluetooth: hci7: command tx timeout
[  430.634345][ T5235] Bluetooth: hci6: command tx timeout
[  431.432503][ T5235] Bluetooth: hci7: command tx timeout
[  435.267544][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  435.272209][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  435.275836][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  435.280150][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  435.284834][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  437.351736][ T5852] Bluetooth: hci8: command tx timeout
[  439.435121][ T5852] Bluetooth: hci8: command tx timeout
[  439.677138][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  439.679713][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  441.511687][ T5852] Bluetooth: hci8: command tx timeout
[  443.591685][ T5852] Bluetooth: hci8: command tx timeout
[  444.767350][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 22805558419 wd_nsec: 22805558514
[  445.839331][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  445.844812][ T5847] Bluetooth: hci0: command 0x0406 tx timeout
[  460.241415][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  460.243561][    C0] rcu: 	0-....: (10491 ticks this GP) idle=004c/1/0x4000000000000000 softirq=58584/59358 fqs=5089
[  460.248738][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  460.250756][    C0] rcu: 	 number:  1212188       1129            0
[  460.252733][    C0] rcu: 	cputime:    32673      19816           50   ==> 52500(ms)
[  460.255045][    C0] rcu: 	(t=10501 jiffies g=48389 q=4060 ncpus=2)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  460.257033][    C0] CPU: 0 UID: 0 PID: 14733 Comm: syz.5.3570 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  460.257044][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.257051][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x5e0
[  460.257070][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 52 d8 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  460.257079][    C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000206
[  460.257087][    C0] RAX: 471bc006f2583c00 RBX: 1ffff92000000e84 RCX: 471bc006f2583c00
[  460.257093][    C0] RDX: 0000000000000002 RSI: ffffffff8d9b494b RDI: ffffffff8be32680
[  460.257098][    C0] RBP: ffffc900000074d8 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  460.257104][    C0] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8e13f201
[  460.257110][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffff888020fe8000
[  460.257115][    C0] FS:  00007facd08b86c0(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  460.257121][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  460.257126][    C0] CR2: 000000110c2faea2 CR3: 0000000029e18000 CR4: 00000000000006f0
[  460.257150][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  460.257156][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  460.257160][    C0] Call Trace:
[  460.257166][    C0]  <IRQ>
[  460.257169][    C0]  ? __lock_acquire+0xab9/0xd20
[  460.257186][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  460.257200][    C0]  ? unwind_next_frame+0xa5/0x2390
[  460.257214][    C0]  __rcu_read_unlock+0x84/0xe0
[  460.257225][    C0]  ? unwind_next_frame+0xa5/0x2390
[  460.257233][    C0]  unwind_next_frame+0x19ae/0x2390
[  460.257245][    C0]  ? unwind_next_frame+0xa5/0x2390
[  460.257254][    C0]  ? __kasan_slab_free+0x5b/0x80
[  460.257269][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  460.257280][    C0]  arch_stack_walk+0x11c/0x150
[  460.257322][    C0]  ? kmem_cache_free+0x18f/0x400
[  460.257337][    C0]  stack_trace_save+0x9c/0xe0
[  460.257347][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  460.257356][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  460.257369][    C0]  ? sched_clock_cpu+0x74/0x430
[  460.257382][    C0]  ? lapic_next_event+0x11/0x20
[  460.257390][    C0]  ? clockevents_program_event+0x24d/0x360
[  460.257403][    C0]  kasan_save_track+0x3e/0x80
[  460.257413][    C0]  ? kasan_save_track+0x3e/0x80
[  460.257421][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  460.257430][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  460.257440][    C0]  ? __alloc_skb+0x112/0x2d0
[  460.257450][    C0]  ? ndisc_alloc_skb+0x9f/0x480
[  460.257460][    C0]  ? ndisc_send_rs+0x2b5/0x630
[  460.257469][    C0]  ? addrconf_rs_timer+0x369/0x670
[  460.257478][    C0]  ? call_timer_fn+0x17e/0x5f0
[  460.257488][    C0]  ? __run_timer_base+0x61a/0x860
[  460.257496][    C0]  ? run_timer_softirq+0xb7/0x180
[  460.257505][    C0]  ? handle_softirqs+0x286/0x870
[  460.257569][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  460.257576][    C0]  ? irq_exit_rcu+0x9/0x30
[  460.257582][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  460.257591][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.257600][    C0]  ? unwind_get_return_address+0x22/0x90
[  460.257609][    C0]  ? arch_stack_walk+0xfc/0x150
[  460.257617][    C0]  ? stack_trace_save+0x9c/0xe0
[  460.257625][    C0]  ? kasan_save_track+0x3e/0x80
[  460.257633][    C0]  ? kasan_save_free_info+0x46/0x50
[  460.257641][    C0]  ? __kasan_slab_free+0x5b/0x80
[  460.257672][    C0]  __kasan_slab_alloc+0x6c/0x80
[  460.257684][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  460.257695][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  460.257705][    C0]  ? __alloc_skb+0x112/0x2d0
[  460.257717][    C0]  __alloc_skb+0x112/0x2d0
[  460.257730][    C0]  ndisc_alloc_skb+0x9f/0x480
[  460.257742][    C0]  ndisc_send_rs+0x2b5/0x630
[  460.257752][    C0]  ? ipv6_get_lladdr+0x378/0x3f0
[  460.257766][    C0]  addrconf_rs_timer+0x369/0x670
[  460.257836][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  460.257848][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  460.257861][    C0]  call_timer_fn+0x17e/0x5f0
[  460.257873][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  460.257882][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.257894][    C0]  ? call_timer_fn+0xbe/0x5f0
[  460.257910][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  460.257934][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  460.257948][    C0]  __run_timer_base+0x61a/0x860
[  460.257963][    C0]  ? ktime_get+0x3e/0x1f0
[  460.257980][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  460.257989][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  460.258008][    C0]  run_timer_softirq+0xb7/0x180
[  460.258024][    C0]  handle_softirqs+0x286/0x870
[  460.258040][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  460.258060][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  460.258074][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  460.258086][    C0]  __irq_exit_rcu+0xca/0x1f0
[  460.258094][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  460.258108][    C0]  irq_exit_rcu+0x9/0x30
[  460.258116][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  460.258132][    C0]  </IRQ>
[  460.258137][    C0]  <TASK>
[  460.258144][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.258159][    C0] RIP: 0010:unwind_get_return_address+0x22/0x90
[  460.258171][    C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80
[  460.258179][    C0] RSP: 0018:ffffc900031ceba8 EFLAGS: 00000a02
[  460.258187][    C0] RAX: 0000000000000000 RBX: ffffc900031cebc8 RCX: 471bc006f2583c00
[  460.258193][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b494b RDI: ffffc900031cebc8
[  460.258198][    C0] RBP: ffffc900031cec50 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  460.258204][    C0] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff888020fe8000
[  460.258213][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc900031cebc8
[  460.258240][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  460.258258][    C0]  arch_stack_walk+0xfc/0x150
[  460.258277][    C0]  ? __kasan_slab_free+0x5b/0x80
[  460.258290][    C0]  stack_trace_save+0x9c/0xe0
[  460.258357][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  460.258377][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  460.258397][    C0]  kasan_save_track+0x3e/0x80
[  460.258413][    C0]  ? kasan_save_track+0x3e/0x80
[  460.258428][    C0]  ? kasan_save_free_info+0x46/0x50
[  460.258503][    C0]  ? finish_task_switch+0x3ee/0x950
[  460.258523][    C0]  kasan_save_free_info+0x46/0x50
[  460.258537][    C0]  __kasan_slab_free+0x5b/0x80
[  460.258554][    C0]  kmem_cache_free+0x18f/0x400
[  460.258569][    C0]  finish_task_switch+0x3ee/0x950
[  460.258585][    C0]  __schedule+0x17a0/0x4cc0
[  460.258607][    C0]  ? __lock_acquire+0xab9/0xd20
[  460.258619][    C0]  ? __pfx___schedule+0x10/0x10
[  460.258637][    C0]  ? schedule+0x91/0x360
[  460.258648][    C0]  schedule+0x165/0x360
[  460.258658][    C0]  schedule_preempt_disabled+0x13/0x30
[  460.258668][    C0]  __mutex_lock+0x7e6/0x1360
[  460.258682][    C0]  ? __mutex_lock+0x5b6/0x1360
[  460.258694][    C0]  ? synchronize_rcu_expedited+0x3b9/0x730
[  460.258707][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  460.258725][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  460.258741][    C0]  synchronize_rcu_expedited+0x3b9/0x730
[  460.258753][    C0]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  460.258770][    C0]  ? __lock_acquire+0xab9/0xd20
[  460.258783][    C0]  ? __pfx___might_resched+0x10/0x10
[  460.258792][    C0]  ? do_raw_spin_lock+0x121/0x290
[  460.258809][    C0]  synchronize_rcu+0x11a/0x310
[  460.258818][    C0]  ? __pfx_synchronize_rcu+0x10/0x10
[  460.258830][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  460.258841][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.258852][    C0]  rcu_sync_enter+0x1da/0x310
[  460.258866][    C0]  ? __pfx_rcu_sync_enter+0x10/0x10
[  460.258876][    C0]  ? lock_acquire+0x175/0x360
[  460.258895][    C0]  percpu_down_write+0x60/0x330
[  460.258912][    C0]  register_for_each_vma+0x32/0xc30
[  460.258924][    C0]  ? uprobe_register+0x7e7/0x950
[  460.258935][    C0]  ? up_write+0x1c4/0x420
[  460.258946][    C0]  uprobe_register+0x7f2/0x950
[  460.258961][    C0]  probe_event_enable+0x36a/0xa80
[  460.258973][    C0]  ? __pfx_uprobe_perf_filter+0x10/0x10
[  460.258987][    C0]  perf_trace_event_init+0x4e1/0x9d0
[  460.258999][    C0]  perf_uprobe_init+0x12e/0x1a0
[  460.259009][    C0]  perf_uprobe_event_init+0xe6/0x180
[  460.259020][    C0]  perf_try_init_event+0x17f/0x870
[  460.259030][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  460.259041][    C0]  perf_event_alloc+0x133e/0x2be0
[  460.259049][    C0]  ? __lock_acquire+0xab9/0xd20
[  460.259061][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  460.259080][    C0]  ? __pfx_perf_event_alloc+0x10/0x10
[  460.259090][    C0]  ? __fget_files+0x2a/0x420
[  460.259103][    C0]  ? __fget_files+0x3a0/0x420
[  460.259119][    C0]  __se_sys_perf_event_open+0x5a1/0x1d70
[  460.259138][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  460.259155][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  460.259172][    C0]  ? do_syscall_64+0xbe/0x3b0
[  460.259183][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  460.259194][    C0]  do_syscall_64+0xfa/0x3b0
[  460.259205][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.259213][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.259225][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.259233][    C0] RIP: 0033:0x7faccf98ebe9
[  460.259244][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.259251][    C0] RSP: 002b:00007facd08b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  460.259260][    C0] RAX: ffffffffffffffda RBX: 00007faccfbb5fa0 RCX: 00007faccf98ebe9
[  460.259265][    C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000
[  460.259271][    C0] RBP: 00007faccfa11e19 R08: 0000000000000000 R09: 0000000000000000
[  460.259276][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  460.259281][    C0] R13: 00007faccfbb6038 R14: 00007faccfbb5fa0 R15: 00007fff820c5b08
[  460.259324][    C0]  </TASK>

VM DIAGNOSIS:
03:47:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006710
R8 =ffff888106838237 R9 =1ffff11020d07046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4914 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007facd08b86c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2faea2 CR3=0000000029e18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ffff 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000000000ffff 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8e13f200 RCX=ffffffff8b7b5e5c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8e13f200 RBP=ffffc900001379d8 RSP=ffffc900001378d0
R8 =ffffffff8e13f203 R9 =1ffffffff1c27e40 R10=dffffc0000000000 R11=fffffbfff1c27e41
R12=1ffff92000026f24 R13=0000000000000001 R14=ffffc90000137940 R15=1ffffffff1c27e40
RIP=ffffffff8222fdc5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f96b746f3a9 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
