last executing test programs:

1m12.174786816s ago: executing program 1 (id=1640):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)

1m12.02009864s ago: executing program 1 (id=1643):
perf_event_open(0x0, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="460a00000100002079102800000000009500000000000000316ecb55e7f0f1376a838f77e48b44971804c2240ba4a275f012f3"], &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)

1m11.880518327s ago: executing program 2 (id=1646):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x27, &(0x7f0000000400), 0x4)

1m11.879613957s ago: executing program 1 (id=1648):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

1m11.800039292s ago: executing program 2 (id=1650):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e00f6f775e453b1800000121f00", 0x2e}], 0x1}, 0x40000)
r2 = socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(r2, 0x0, 0x24084c55)

1m11.799362432s ago: executing program 1 (id=1652):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x2, 0x0)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0)
write$cgroup_subtree(r0, 0x0, 0xfdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
r2 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r2)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r9)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4)

1m11.730009344s ago: executing program 2 (id=1654):
r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000306"], 0x50)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x800000000}, 0x38)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0)

1m11.590886666s ago: executing program 2 (id=1655):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4)
r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x400}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x80000002}, 0x38)
sendmsg$nl_xfrm(r0, 0x0, 0x48000)

1m10.835994694s ago: executing program 1 (id=1663):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11041, 0x2e, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x48, 0x1, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0x2}, 0x709, 0x0, 0x0, 0x0, 0x3fe, 0xa}, 0x0, 0x9, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfe, 0x0, 0xfe, 0x0, 0x0, 0x4d31, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000007c0), 0x8}, 0x0, 0x7f, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], 0x82d7)
recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000400), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000400000002000000000000000", @ANYRES32, @ANYBLOB="00e6ff0000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)="cc586ea72b0962cb85542afcb4fdc87394d1b13b3f20ac2c29b048d772fd7c5909fbd54da8a32b2f952c7ec2bafa37cdbde746638538aba21dff145a0e945f358fb19e0ee37e437bd6d72583c43068e2eb2b1eb90a14fbc8633a07ca9ad7288a5af2e3ad0825830c7581df65080b4f83405b5b778a2fda4151e61717d9f58ba6407e0e02c25aff3de8753483900a529e0c11bb1b77ca88", &(0x7f0000000080), 0x1003, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x6, r3}, 0x38)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="140000003a000b63d2038023be3b932c0c713864", 0x14}], 0x1}, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

1m10.693170801s ago: executing program 2 (id=1664):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0)

1m10.60213011s ago: executing program 1 (id=1665):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1m10.541171058s ago: executing program 32 (id=1665):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1m10.34197695s ago: executing program 2 (id=1667):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@upd={0xe8, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {{'sha384-generic\x00'}, '\x00', '\x00', 0x200, 0x400}, [{0x8, 0x1, 0x40}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

1m10.341833214s ago: executing program 33 (id=1667):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@upd={0xe8, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {{'sha384-generic\x00'}, '\x00', '\x00', 0x200, 0x400}, [{0x8, 0x1, 0x40}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

2.669687791s ago: executing program 0 (id=2712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94)

2.60868129s ago: executing program 3 (id=2715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESDEC, @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

2.608421262s ago: executing program 3 (id=2717):
socketpair(0x22, 0x6, 0x24, &(0x7f0000000ac0))

2.608306007s ago: executing program 0 (id=2718):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00\a'], 0xfe33)

2.540011764s ago: executing program 0 (id=2719):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03000000000000ccc7000a00000708000240000000020900010073797a31"], 0x7c}}, 0x4000000)

2.539300528s ago: executing program 3 (id=2721):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

2.539023422s ago: executing program 3 (id=2722):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2.53887967s ago: executing program 0 (id=2723):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)

2.468915104s ago: executing program 0 (id=2724):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000140), 0x4)

2.468545993s ago: executing program 3 (id=2725):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000340), 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780), 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r0)

2.349909989s ago: executing program 0 (id=2726):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
perf_event_open(0x0, 0x0, 0xd, r0, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = getpid()
perf_event_open(0x0, r1, 0x6, 0xffffffffffffffff, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x28, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000000)=r5, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffc02, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x2b, 0x1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r10, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r9)

2.289718709s ago: executing program 34 (id=2726):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
perf_event_open(0x0, 0x0, 0xd, r0, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = getpid()
perf_event_open(0x0, r1, 0x6, 0xffffffffffffffff, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x28, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000000)=r5, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffc02, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x2b, 0x1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r10, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r9)

2.142586308s ago: executing program 3 (id=2728):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x78, 0x0, 0x0)

2.141498434s ago: executing program 35 (id=2728):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x78, 0x0, 0x0)

806.190598ms ago: executing program 4 (id=2734):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000010c0)='&(&\x00')

707.363475ms ago: executing program 4 (id=2735):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x22, 0x2, 0x26, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xffffffffffffffff}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1202, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x86c, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x14)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
mkdir(&(0x7f0000002880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8902, &(0x7f0000000080))
sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b3", 0x1}], 0x1}, 0x1011)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)

321.173253ms ago: executing program 4 (id=2736):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0}, 0x50)

230.500158ms ago: executing program 4 (id=2737):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x680, 0x4e15}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0)

230.219668ms ago: executing program 4 (id=2738):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

0s ago: executing program 4 (id=2739):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f00000005c0)=""/172, 0xac}], 0x5}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36370' (ED25519) to the list of known hosts.
syzkaller login: [   47.790182][ T5782] cgroup: Unknown subsys name 'net'
[   47.918863][ T5782] cgroup: Unknown subsys name 'cpuset'
[   47.924961][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.426695][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.976567][ T5855] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.320641][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.851689][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.855407][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.865653][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.869173][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.872077][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.957013][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.960591][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.963688][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.975061][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.979372][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.986245][ T5888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.989904][ T5888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.993392][ T5888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.997609][ T5888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.010323][ T5888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.356250][ T5887] chnl_net:caif_netlink_parms(): no params data found
[   59.372912][ T5892] chnl_net:caif_netlink_parms(): no params data found
[   59.412446][ T5890] chnl_net:caif_netlink_parms(): no params data found
[   59.510172][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.514166][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.517165][ T5887] bridge_slave_0: entered allmulticast mode
[   59.519954][ T5887] bridge_slave_0: entered promiscuous mode
[   59.523680][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.526472][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.529269][ T5887] bridge_slave_1: entered allmulticast mode
[   59.532106][ T5887] bridge_slave_1: entered promiscuous mode
[   59.588234][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.590975][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.593764][ T5892] bridge_slave_0: entered allmulticast mode
[   59.598258][ T5892] bridge_slave_0: entered promiscuous mode
[   59.615328][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.618121][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.620988][ T5890] bridge_slave_0: entered allmulticast mode
[   59.625823][ T5890] bridge_slave_0: entered promiscuous mode
[   59.629733][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.632203][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.634470][ T5892] bridge_slave_1: entered allmulticast mode
[   59.637531][ T5892] bridge_slave_1: entered promiscuous mode
[   59.641590][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.647628][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.662089][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.665577][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.667909][ T5890] bridge_slave_1: entered allmulticast mode
[   59.670864][ T5890] bridge_slave_1: entered promiscuous mode
[   59.729236][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.734425][ T5887] team0: Port device team_slave_0 added
[   59.739661][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.747024][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.751538][ T5887] team0: Port device team_slave_1 added
[   59.768227][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.793132][ T5892] team0: Port device team_slave_0 added
[   59.816506][ T5892] team0: Port device team_slave_1 added
[   59.827426][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.830193][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.839961][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.861283][ T5890] team0: Port device team_slave_0 added
[   59.864223][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.867900][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.879401][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.883906][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.886948][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.896291][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.900620][ T5890] team0: Port device team_slave_1 added
[   59.908385][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.910807][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.921443][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.952321][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.954736][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.963387][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.968631][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.971028][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.980251][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.031902][ T5892] hsr_slave_0: entered promiscuous mode
[   60.034477][ T5892] hsr_slave_1: entered promiscuous mode
[   60.073828][ T5887] hsr_slave_0: entered promiscuous mode
[   60.076475][ T5887] hsr_slave_1: entered promiscuous mode
[   60.078550][ T5887] debugfs: 'hsr0' already exists in 'hsr'
[   60.080536][ T5887] Cannot create hsr debugfs directory
[   60.086664][ T5890] hsr_slave_0: entered promiscuous mode
[   60.089234][ T5890] hsr_slave_1: entered promiscuous mode
[   60.091467][ T5890] debugfs: 'hsr0' already exists in 'hsr'
[   60.093338][ T5890] Cannot create hsr debugfs directory
[   60.406524][ T5892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.418327][ T5892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.424450][ T5892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.435591][ T5892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.479624][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.488871][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.507383][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.525820][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.577698][ T5890] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.583964][ T5890] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.590161][ T5890] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.599648][ T5890] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.649018][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.672376][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[   60.694845][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.697733][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.710377][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.713258][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.759450][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.782064][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.797943][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   60.808811][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.811574][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.816303][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.818732][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.831122][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[   60.848637][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.851409][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.886734][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.889420][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.904359][ T5887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.920867][ T5237] Bluetooth: hci0: command tx timeout
[   60.988722][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.039460][ T5892] veth0_vlan: entered promiscuous mode
[   61.059203][ T5892] veth1_vlan: entered promiscuous mode
[   61.064814][ T5237] Bluetooth: hci1: command tx timeout
[   61.067125][ T5895] Bluetooth: hci2: command tx timeout
[   61.110363][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.122381][ T5892] veth0_macvtap: entered promiscuous mode
[   61.141713][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.151845][ T5892] veth1_macvtap: entered promiscuous mode
[   61.182896][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.195262][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.199844][ T5887] veth0_vlan: entered promiscuous mode
[   61.206013][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.217294][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.232091][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.241706][ T5887] veth1_vlan: entered promiscuous mode
[   61.247966][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.273416][ T5890] veth0_vlan: entered promiscuous mode
[   61.298295][ T5890] veth1_vlan: entered promiscuous mode
[   61.344406][ T5887] veth0_macvtap: entered promiscuous mode
[   61.350291][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.353618][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.353859][ T5887] veth1_macvtap: entered promiscuous mode
[   61.392751][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.398075][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.402605][ T5890] veth0_macvtap: entered promiscuous mode
[   61.419393][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.426724][ T5890] veth1_macvtap: entered promiscuous mode
[   61.451968][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.475468][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.489414][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.517140][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.521122][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.528858][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.532504][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.551350][ T5899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.567232][ T5899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.570683][ T5899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.582184][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.667596][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.670413][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.693089][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.700442][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.732344][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.742497][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.761735][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.781883][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.928553][ T5895] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   62.256998][ T5980] netlink: 'syz.1.27': attribute type 6 has an invalid length.
[   62.259958][ T5980] netlink: 'syz.1.27': attribute type 7 has an invalid length.
[   62.262447][ T5980] netlink: 9 bytes leftover after parsing attributes in process `syz.1.27'.
[   62.268471][ T5980] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.27'.
[   62.278694][ T5980] netlink: 'syz.1.27': attribute type 6 has an invalid length.
[   62.281249][ T5980] netlink: 'syz.1.27': attribute type 7 has an invalid length.
[   62.302385][ T5980] netlink: 9 bytes leftover after parsing attributes in process `syz.1.27'.
[   62.318357][ T5982] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29'.
[   62.519770][ T6001] warning: `syz.0.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.985099][ T5237] Bluetooth: hci0: command tx timeout
[   63.145097][ T5237] Bluetooth: hci2: command tx timeout
[   63.154710][ T5237] Bluetooth: hci1: command tx timeout
[   63.159790][ T6026] netlink: 'syz.2.47': attribute type 21 has an invalid length.
[   63.189399][ T6026] Zero length message leads to an empty skb
[   63.420034][ T6034] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   63.422786][ T6034] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   63.640768][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'.
[   64.304538][    C0] hrtimer: interrupt took 41017 ns
[   64.827744][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'.
[   64.953381][ T6071] netlink: 'syz.0.69': attribute type 21 has an invalid length.
[   64.962877][ T6071] netlink: 'syz.0.69': attribute type 1 has an invalid length.
[   64.990181][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'.
[   65.075093][ T5237] Bluetooth: hci0: command tx timeout
[   65.224646][ T5237] Bluetooth: hci1: command tx timeout
[   65.224691][ T5895] Bluetooth: hci2: command tx timeout
[   66.291496][ T6106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.84'.
[   66.299797][ T6106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.84'.
[   66.859315][ T5895] Bluetooth: hci2: unknown advertising packet type: 0x0c
[   66.887625][ T6120] netlink: 'syz.0.90': attribute type 21 has an invalid length.
[   66.893444][ T6120] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.90'.
[   67.145077][ T5895] Bluetooth: hci0: command tx timeout
[   67.236445][ T6140] syz.2.100 uses obsolete (PF_INET,SOCK_PACKET)
[   67.308690][ T5895] Bluetooth: hci2: command tx timeout
[   67.308747][ T5237] Bluetooth: hci1: command tx timeout
[   67.398406][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.401912][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.409446][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.412585][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.961252][ T6185] netlink: 'syz.0.116': attribute type 10 has an invalid length.
[   68.889978][ T6259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.121'.
[   68.966700][ T6262] netlink: 'syz.2.123': attribute type 1 has an invalid length.
[   68.969334][ T6262] netlink: 'syz.2.123': attribute type 3 has an invalid length.
[   68.972012][ T6262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.123'.
[   69.069725][ T6268] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.125'.
[   69.074308][ T6268] openvswitch: netlink: Message has 6 unknown bytes.
[   69.200486][ T6282] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.125'.
[   70.473172][   T24] cfg80211: failed to load regulatory.db
[   70.867675][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   70.868296][ T6326] netlink: 'syz.1.148': attribute type 17 has an invalid length.
[   71.221993][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'.
[   71.226650][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'.
[   71.230553][ T6346] netlink: 80 bytes leftover after parsing attributes in process `syz.2.157'.
[   71.308852][ T6350] netlink: 'syz.2.158': attribute type 12 has an invalid length.
[   71.311916][ T6350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.158'.
[   71.411938][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.415542][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.788001][ T6365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.166'.
[   72.501140][ T5237] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6
[   73.225845][ T6430] netlink: 'syz.2.197': attribute type 22 has an invalid length.
[   73.552017][ T6442] netlink: 'syz.1.201': attribute type 12 has an invalid length.
[   73.557007][ T6442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.201'.
[   76.525097][ T6458] netlink: 'syz.0.209': attribute type 29 has an invalid length.
[   76.530500][ T6458] netlink: 'syz.0.209': attribute type 29 has an invalid length.
[   78.157783][ T6504] netlink: 48 bytes leftover after parsing attributes in process `syz.0.229'.
[   78.319527][ T6515] pim6reg1: entered allmulticast mode
[   78.448129][ T6520] netlink: 496 bytes leftover after parsing attributes in process `syz.0.236'.
[   78.750187][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[   78.754836][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[   78.980100][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'.
[   79.890428][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[   79.923744][ T6573] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.060429][ T6584] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[   80.067143][ T6573] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   80.425898][ T6597] syzkaller0: entered promiscuous mode
[   80.428354][ T6597] syzkaller0: entered allmulticast mode
[   80.537814][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.274'.
[   80.768111][ T6619] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.281'.
[   80.771550][ T6619] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   81.561210][ T6669] Illegal XDP return value 2951116565 on prog  (id 107) dev N/A, expect packet loss!
[   82.619537][ T6714] unsupported nla_type 256
[   82.632015][ T6716] netlink: 830 bytes leftover after parsing attributes in process `syz.1.324'.
[   82.636405][ T6716] bond_slave_0: entered promiscuous mode
[   82.638552][ T6716] bond_slave_1: entered promiscuous mode
[   82.741765][ T6728] x_tables: ip_tables: icmp match: only valid for protocol 1
[   83.107022][ T6744] netlink: 'syz.2.337': attribute type 3 has an invalid length.
[   83.110428][ T6744] netlink: 'syz.2.337': attribute type 4 has an invalid length.
[   83.114340][ T6744] netlink: 'syz.2.337': attribute type 5 has an invalid length.
[   83.120654][ T6744] netlink: 'syz.2.337': attribute type 6 has an invalid length.
[   83.123829][ T6744] netlink: 'syz.2.337': attribute type 7 has an invalid length.
[   83.127347][ T6744] netlink: 'syz.2.337': attribute type 7 has an invalid length.
[   83.130684][ T6744] netlink: 13014 bytes leftover after parsing attributes in process `syz.2.337'.
[   83.171834][ T6748] netlink: 182 bytes leftover after parsing attributes in process `syz.1.339'.
[   83.364270][ T5237] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6
[   83.431599][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.438698][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.444055][ T6754] bridge0: entered allmulticast mode
[   83.455342][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.457734][ T6754] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.460514][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.462914][ T6754] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.466922][ T6754] bridge0: entered promiscuous mode
[   83.645928][ T6758] netlink: 72 bytes leftover after parsing attributes in process `syz.2.343'.
[   84.519347][ T6816] netlink: 'syz.1.370': attribute type 10 has an invalid length.
[   84.543224][ T6816] veth0_vlan: left promiscuous mode
[   84.550892][ T6816] veth0_vlan: entered promiscuous mode
[   84.557214][ T6816] team0: Device veth0_vlan failed to register rx_handler
[   84.603966][ T6819] netlink: 'syz.0.371': attribute type 5 has an invalid length.
[   84.817331][ T6833] netlink: 56 bytes leftover after parsing attributes in process `syz.0.378'.
[   84.948090][ T6843] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.366788][ T6866] netlink: 'syz.0.394': attribute type 21 has an invalid length.
[   85.625627][ T6878] syz.0.398 (6878) used obsolete PPPIOCDETACH ioctl
[   85.765372][ T6888] netlink: 'syz.1.401': attribute type 4 has an invalid length.
[   85.910013][ T6895] netlink: 196 bytes leftover after parsing attributes in process `syz.0.405'.
[   86.358970][ T6917] netlink: 168 bytes leftover after parsing attributes in process `syz.2.415'.
[   86.409960][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'.
[   86.413063][ T6923] dummy0: entered promiscuous mode
[   86.689284][ T6938] netlink: 104 bytes leftover after parsing attributes in process `syz.1.425'.
[   87.597194][ T6947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.428'.
[   87.771416][ T6958] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.431'.
[   88.509521][ T6978] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.439'.
[   88.599622][ T6991] netlink: 830 bytes leftover after parsing attributes in process `syz.2.446'.
[   88.681340][ T7001] validate_nla: 3 callbacks suppressed
[   88.681355][ T7001] netlink: 'syz.1.450': attribute type 1 has an invalid length.
[   88.800303][ T7010] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[   88.837483][ T7012] netlink: 'syz.1.455': attribute type 29 has an invalid length.
[   88.840039][ T7012] netlink: 'syz.1.455': attribute type 3 has an invalid length.
[   88.842691][ T7012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.455'.
[   90.042218][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.077738][ T7066] netlink: 'syz.1.477': attribute type 25 has an invalid length.
[   90.158401][ T7078] netlink: 10 bytes leftover after parsing attributes in process `syz.0.482'.
[   90.171998][ T7080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.483'.
[   90.304397][ T7092] netlink: 176 bytes leftover after parsing attributes in process `syz.1.489'.
[   90.875512][ T7104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.494'.
[   91.155446][ T7108] netlink: 'syz.0.495': attribute type 4 has an invalid length.
[   91.158682][ T7108] netlink: 152 bytes leftover after parsing attributes in process `syz.0.495'.
[   91.250906][ T7108] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   91.303389][ T7112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.497'.
[   91.313419][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.387717][ T7112] bridge_slave_0 (unregistering): left allmulticast mode
[   91.390783][ T7112] bridge_slave_0 (unregistering): left promiscuous mode
[   91.399527][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.529849][ T7128] netlink: 'syz.0.503': attribute type 39 has an invalid length.
[   91.537528][ T7130] netlink: 92 bytes leftover after parsing attributes in process `syz.1.505'.
[   92.748636][ T7190] netlink: 'syz.2.530': attribute type 64 has an invalid length.
[   93.800782][ T7209] netlink: 'syz.1.539': attribute type 10 has an invalid length.
[   93.855050][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.873754][ T7209] batadv0: entered promiscuous mode
[   93.888138][ T7209] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   93.897105][ T7215] bond_slave_0: left promiscuous mode
[   93.899328][ T7215] bond_slave_1: left promiscuous mode
[   93.902102][ T7215] batadv0: left promiscuous mode
[   93.904207][ T7215] bond0: entered promiscuous mode
[   93.906838][ T7215] bond_slave_0: entered promiscuous mode
[   93.909933][ T7215] bond_slave_1: entered promiscuous mode
[   93.912389][ T7215] batadv0: entered promiscuous mode
[   94.207066][ T7240] lo speed is unknown, defaulting to 1000
[   94.209589][ T7240] lo speed is unknown, defaulting to 1000
[   94.220255][ T7240] lo speed is unknown, defaulting to 1000
[   94.279890][ T7250] __nla_validate_parse: 2 callbacks suppressed
[   94.279908][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[   94.304951][ T7240] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   94.390739][ T7240] lo speed is unknown, defaulting to 1000
[   94.406523][ T7240] lo speed is unknown, defaulting to 1000
[   94.429089][ T7240] lo speed is unknown, defaulting to 1000
[   94.490203][ T7265] netlink: 'syz.2.563': attribute type 13 has an invalid length.
[   94.493593][ T7265] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.563'.
[   94.588131][ T7269] netlink: 'syz.0.565': attribute type 10 has an invalid length.
[   94.627355][ T7269] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   95.260751][ T7291] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.573'.
[   95.269237][ T7291] openvswitch: netlink: Message has 6 unknown bytes.
[   95.355486][ T7293] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.358811][ T7293] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.088255][ T5237] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[   98.109724][ T7300] syzkaller0: entered promiscuous mode
[   98.114233][ T7300] syzkaller0: entered allmulticast mode
[   98.238021][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'.
[   98.242649][ T7307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.578'.
[   99.122706][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[   99.202785][ T7333] netlink: 64 bytes leftover after parsing attributes in process `syz.0.589'.
[   99.372019][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'.
[  100.406490][ T5237] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6
[  100.630827][ T7386] netlink: 'syz.1.613': attribute type 22 has an invalid length.
[  100.656426][ T7386] netlink: 'syz.1.613': attribute type 1 has an invalid length.
[  100.660358][ T7386] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.613'.
[  100.664447][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[  100.668839][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[  100.927721][ T7399] netlink: 'syz.0.619': attribute type 5 has an invalid length.
[  101.131837][ T7407] netlink: 'syz.0.623': attribute type 15 has an invalid length.
[  101.144618][ T7407] netlink: 'syz.0.623': attribute type 7 has an invalid length.
[  101.147698][ T7407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.623'.
[  101.209760][ T7411] syz.0.625: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  101.218005][ T7411] CPU: 0 UID: 0 PID: 7411 Comm: syz.0.625 Not tainted syzkaller #0 PREEMPT(full) 
[  101.218018][ T7411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.218023][ T7411] Call Trace:
[  101.218028][ T7411]  <TASK>
[  101.218031][ T7411]  dump_stack_lvl+0x189/0x250
[  101.218047][ T7411]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.218056][ T7411]  ? __pfx__printk+0x10/0x10
[  101.218067][ T7411]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.218077][ T7411]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.218105][ T7411]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  101.218117][ T7411]  warn_alloc+0x214/0x310
[  101.218131][ T7411]  ? stack_depot_save_flags+0x41b/0x860
[  101.218143][ T7411]  ? __pfx_warn_alloc+0x10/0x10
[  101.218155][ T7411]  ? kasan_save_track+0x4f/0x80
[  101.218167][ T7411]  ? xskq_create+0x56/0x170
[  101.218176][ T7411]  ? xsk_init_queue+0xb0/0x110
[  101.218184][ T7411]  ? xsk_setsockopt+0x57b/0x8d0
[  101.218191][ T7411]  ? do_sock_setsockopt+0x17c/0x1b0
[  101.218202][ T7411]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  101.218208][ T7411]  ? do_syscall_64+0xfa/0x3b0
[  101.218219][ T7411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.218229][ T7411]  __vmalloc_node_range_noprof+0x125/0x12f0
[  101.218257][ T7411]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.218270][ T7411]  ? __kasan_kmalloc+0x93/0xb0
[  101.218281][ T7411]  vmalloc_user_noprof+0xad/0xf0
[  101.218290][ T7411]  ? xskq_create+0xbf/0x170
[  101.218325][ T7411]  xskq_create+0xbf/0x170
[  101.218343][ T7411]  xsk_init_queue+0xb0/0x110
[  101.218359][ T7411]  xsk_setsockopt+0x57b/0x8d0
[  101.218372][ T7411]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.218381][ T7411]  ? __pfx_aa_sk_perm+0x10/0x10
[  101.218395][ T7411]  ? __fget_files+0x2a/0x420
[  101.218403][ T7411]  ? aa_sock_opt_perm+0xff/0x1b0
[  101.218412][ T7411]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  101.218421][ T7411]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.218431][ T7411]  do_sock_setsockopt+0x17c/0x1b0
[  101.218446][ T7411]  __x64_sys_setsockopt+0x13f/0x1b0
[  101.218455][ T7411]  do_syscall_64+0xfa/0x3b0
[  101.218469][ T7411]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.218478][ T7411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.218484][ T7411]  ? exc_page_fault+0x9f/0xf0
[  101.218494][ T7411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.218500][ T7411] RIP: 0033:0x7f3e7cd8ebe9
[  101.218508][ T7411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.218516][ T7411] RSP: 002b:00007f3e7db2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.218526][ T7411] RAX: ffffffffffffffda RBX: 00007f3e7cfb5fa0 RCX: 00007f3e7cd8ebe9
[  101.218531][ T7411] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  101.218536][ T7411] RBP: 00007f3e7ce11e19 R08: 0000000000000004 R09: 0000000000000000
[  101.218541][ T7411] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  101.218545][ T7411] R13: 00007f3e7cfb6038 R14: 00007f3e7cfb5fa0 R15: 00007ffe6babbbe8
[  101.218560][ T7411]  </TASK>
[  101.219022][ T7411] Mem-Info:
[  101.344402][ T7411] active_anon:27061 inactive_anon:0 isolated_anon:0
[  101.344402][ T7411]  active_file:11388 inactive_file:38236 isolated_file:0
[  101.344402][ T7411]  unevictable:1768 dirty:382 writeback:0
[  101.344402][ T7411]  slab_reclaimable:9413 slab_unreclaimable:52818
[  101.344402][ T7411]  mapped:28481 shmem:15908 pagetables:1076
[  101.344402][ T7411]  sec_pagetables:0 bounce:0
[  101.344402][ T7411]  kernel_misc_reclaimable:0
[  101.344402][ T7411]  free:267922 free_pcp:16106 free_cma:0
[  101.363772][ T7411] Node 0 active_anon:69288kB inactive_anon:0kB active_file:21740kB inactive_file:149336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62312kB dirty:856kB writeback:0kB shmem:25576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5128kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.377281][ T7411] Node 1 active_anon:40112kB inactive_anon:0kB active_file:23812kB inactive_file:3608kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51612kB dirty:672kB writeback:0kB shmem:39212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6588kB pagetables:1752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.391118][ T7411] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  101.403723][ T7411] lowmem_reserve[]: 0 811 811 811 811
[  101.406194][ T7411] Node 0 DMA32 free:178036kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:69288kB inactive_anon:0kB active_file:21740kB inactive_file:149336kB unevictable:3536kB writepending:856kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:39612kB local_pcp:22104kB free_cma:0kB
[  101.445680][ T7411] lowmem_reserve[]: 0 0 0 0 0
[  101.447959][ T7411] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  101.474675][ T7411] lowmem_reserve[]: 0 0 854 854 854
[  101.476948][ T7411] Node 1 Normal free:416396kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41472kB inactive_anon:0kB active_file:23812kB inactive_file:3608kB unevictable:3536kB writepending:672kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:25080kB local_pcp:15372kB free_cma:0kB
[  101.488285][ T7411] lowmem_reserve[]: 0 0 0 0 0
[  101.490127][ T7411] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  101.494871][ T7411] Node 0 DMA32: 526*4kB (UE) 443*8kB (UME) 251*16kB (UM) 1*32kB (E) 3*64kB (UME) 2*128kB (ME) 7*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 2*2048kB (U) 37*4096kB (M) = 174240kB
[  101.502150][ T7411] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  101.509093][ T7411] Node 1 Normal: 3*4kB (UE) 6*8kB (E) 201*16kB (UME) 406*32kB (UME) 98*64kB (U) 22*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (U) 2*2048kB (UM) 94*4096kB (M) = 416524kB
[  101.516375][ T7411] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.520487][ T7411] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.523980][ T7411] 67199 total pagecache pages
[  101.526197][ T7411] 0 pages in swap cache
[  101.528204][ T7411] Free swap  = 124996kB
[  101.530093][ T7411] Total swap = 124996kB
[  101.532007][ T7411] 786301 pages RAM
[  101.533514][ T7411] 0 pages HighMem/MovableOnly
[  101.535480][ T7411] 241329 pages reserved
[  101.537354][ T7411] 0 pages cma reserved
[  101.626433][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'.
[  101.704234][ T7427] netlink: 68 bytes leftover after parsing attributes in process `syz.1.631'.
[  101.750399][ T7431] netlink: 240 bytes leftover after parsing attributes in process `syz.1.633'.
[  101.851079][ T7437] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.636'.
[  102.288429][ T7461] netlink: 44 bytes leftover after parsing attributes in process `syz.2.646'.
[  102.331099][ T7465] netlink: 'syz.1.648': attribute type 7 has an invalid length.
[  102.444351][   T33] audit: type=1107 audit(1755611734.488:2): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  102.613598][ T7483] netlink: 'syz.2.656': attribute type 2 has an invalid length.
[  102.618189][ T7483] netlink: 'syz.2.656': attribute type 5 has an invalid length.
[  102.621423][ T7483] netlink: 'syz.2.656': attribute type 6 has an invalid length.
[  102.625641][ T7483] netlink: 'syz.2.656': attribute type 7 has an invalid length.
[  103.364262][ T5237] Bluetooth: hci1: adv larger than maximum supported
[  104.393025][ T7502] __nla_validate_parse: 7 callbacks suppressed
[  104.393103][ T7502] netlink: 156 bytes leftover after parsing attributes in process `syz.2.664'.
[  104.433674][ T7509] netlink: 809 bytes leftover after parsing attributes in process `syz.2.664'.
[  104.438167][ T7509] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.664'.
[  104.441679][ T7509] netlink: 809 bytes leftover after parsing attributes in process `syz.2.664'.
[  105.566716][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'.
[  106.425801][ T7581] sock: sock_set_timeout: `syz.0.699' (pid 7581) tries to set negative timeout
[  106.537743][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'.
[  106.541571][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'.
[  106.683329][ T7594] netlink: 14 bytes leftover after parsing attributes in process `syz.2.705'.
[  106.716313][ T7594] hsr0: entered promiscuous mode
[  106.719815][ T7594] hsr0: entered allmulticast mode
[  106.723745][ T7594] hsr_slave_0: entered allmulticast mode
[  106.751098][ T7594] hsr_slave_1: entered allmulticast mode
[  107.550639][ T7614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.713'.
[  107.985925][ T7631] validate_nla: 6 callbacks suppressed
[  107.985940][ T7631] netlink: 'syz.0.720': attribute type 2 has an invalid length.
[  108.000258][ T7631] netlink: 'syz.0.720': attribute type 7 has an invalid length.
[  108.002880][ T7631] netlink: 85 bytes leftover after parsing attributes in process `syz.0.720'.
[  108.007090][ T7631] netlink: 'syz.0.720': attribute type 2 has an invalid length.
[  108.010095][ T7631] netlink: 'syz.0.720': attribute type 7 has an invalid length.
[  108.180363][ T7653] netlink: 'syz.2.731': attribute type 5 has an invalid length.
[  109.778943][ T7698] __nla_validate_parse: 4 callbacks suppressed
[  109.778961][ T7698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.751'.
[  109.998680][ T7714] netlink: 'syz.0.759': attribute type 11 has an invalid length.
[  110.002275][ T7714] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.759'.
[  110.065315][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.616328][ T7731] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.762'.
[  110.737894][ T7742] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.769'.
[  110.778510][ T7748] netlink: 'syz.2.772': attribute type 1 has an invalid length.
[  110.880015][ T7758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.955906][ T7763] C: renamed from team_slave_0 (while UP)
[  110.964247][ T7763] netlink: 'syz.1.779': attribute type 8 has an invalid length.
[  110.970200][ T7763] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  110.987511][ T7762] debugfs: '!' already exists in 'ieee80211'
[  111.260808][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.784'.
[  111.300569][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.785'.
[  111.361182][ T7782] syzkaller0: left promiscuous mode
[  111.363679][ T7782] syzkaller0: left allmulticast mode
[  111.751264][ T7799] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[  111.938061][ T7814] xt_time: invalid argument - start or stop time greater than 23:59:59
[  112.580868][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.810'.
[  112.910625][ T7857] lo speed is unknown, defaulting to 1000
[  116.029772][ T7874] netlink: 'syz.1.827': attribute type 4 has an invalid length.
[  116.033132][ T7874] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  116.096593][ T7882] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  116.147942][ T7891] netlink: 'syz.1.834': attribute type 2 has an invalid length.
[  116.172030][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.836'.
[  116.182614][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.836'.
[  116.628243][ T7915] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.925731][ T7937] sit0: entered allmulticast mode
[  116.959563][ T7937] sit0: entered promiscuous mode
[  117.272683][ T7944] netlink: 'syz.0.859': attribute type 2 has an invalid length.
[  117.279900][ T7944] netlink: 130532 bytes leftover after parsing attributes in process `syz.0.859'.
[  117.635921][ T7952] netlink: 798 bytes leftover after parsing attributes in process `syz.0.863'.
[  117.817705][ T7959] netlink: 56 bytes leftover after parsing attributes in process `syz.2.866'.
[  118.452305][ T7982] netlink: 'syz.2.875': attribute type 39 has an invalid length.
[  118.678182][ T7984] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.876'.
[  119.586855][ T7989] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  119.589827][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'.
[  119.745230][ T5237] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  119.804210][ T8008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.160986][ T8031] netlink: 'syz.2.897': attribute type 10 has an invalid length.
[  120.197938][ T8033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.636386][ T8047] netlink: 948 bytes leftover after parsing attributes in process `syz.1.905'.
[  120.929227][ T8067] netlink: 'syz.0.914': attribute type 1 has an invalid length.
[  121.150678][ T8085] netlink: 'syz.0.922': attribute type 21 has an invalid length.
[  121.164710][ T8085] netlink: 132 bytes leftover after parsing attributes in process `syz.0.922'.
[  121.906887][ T5237] Bluetooth: hci2: command tx timeout
[  122.181168][ T8101] veth1_macvtap: left promiscuous mode
[  122.209707][ T5237] Bluetooth: hci0: unexpected event 0x3d length: 151 > 14
[  123.083257][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.935'.
[  123.538343][ T8127] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.939'.
[  123.691258][ T8135] syzkaller0: entered promiscuous mode
[  123.695154][ T8135] syzkaller0: entered allmulticast mode
[  124.739440][ T8152] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.743660][ T8152] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.698911][ T8192] netlink: 'syz.2.964': attribute type 29 has an invalid length.
[  125.707226][ T8192] netlink: 'syz.2.964': attribute type 29 has an invalid length.
[  125.716737][ T8192] netlink: 'syz.2.964': attribute type 29 has an invalid length.
[  126.272530][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'.
[  126.473850][ T8210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.971'.
[  126.478750][ T8209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.971'.
[  126.710191][ T8222] netlink: 128 bytes leftover after parsing attributes in process `syz.2.977'.
[  126.713671][ T8222] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  126.790908][ T8222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.799776][ T8228] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.980'.
[  126.881108][ T8234] netlink: 166 bytes leftover after parsing attributes in process `syz.2.984'.
[  127.598717][ T8302] bpf: Bad value for 'mode'
[  127.796484][ T8329] : renamed from bond_slave_0 (while UP)
[  128.661617][ T8332] delete_channel: no stack
[  131.423899][ T8376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1047'.
[  131.427382][ T8376] openvswitch: netlink: Missing key (keys=40, expected=100)
[  131.612134][ T8389] netlink: 'syz.0.1052': attribute type 13 has an invalid length.
[  131.631587][ T8389] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1052'.
[  132.936640][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.939318][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.107026][ T8433] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1074'.
[  133.175202][ T8439] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  133.181784][ T8439] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  133.209514][ T8439] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  133.219061][ T8439] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  133.649768][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'.
[  135.262138][ T8516] netlink: 'syz.1.1114': attribute type 10 has an invalid length.
[  135.276698][ T8516] geneve0: entered promiscuous mode
[  135.294251][ T8516] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  135.870708][ T8532] netlink: 'syz.0.1120': attribute type 10 has an invalid length.
[  135.906635][ T5237] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  137.116233][ T8570] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1134'.
[  137.365957][ T8590] netlink: 'syz.2.1145': attribute type 1 has an invalid length.
[  137.377118][ T8592] netlink: 'syz.0.1146': attribute type 4 has an invalid length.
[  137.380896][ T8592] netlink: 'syz.0.1146': attribute type 10 has an invalid length.
[  137.403663][ T8592] team0: Port device dummy0 added
[  137.659197][ T8614] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.662352][ T8614] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  137.764600][ T8618] netlink: 'syz.1.1158': attribute type 6 has an invalid length.
[  137.767374][ T8618] netlink: 'syz.1.1158': attribute type 1 has an invalid length.
[  137.770157][ T8618] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1158'.
[  137.945272][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  138.225927][ T8624] netlink: 'syz.1.1160': attribute type 21 has an invalid length.
[  138.229635][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1160'.
[  138.233584][ T8624] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  138.642912][ T8636] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'.
[  138.902865][ T8660] openvswitch: netlink: IP tunnel dst address not specified
[  139.238903][ T8685] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  139.347534][ T8688] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1187'.
[  139.450403][ T8694] netlink: 'syz.2.1190': attribute type 1 has an invalid length.
[  139.453610][ T8694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.073183][ T8704] netlink: 992 bytes leftover after parsing attributes in process `syz.0.1193'.
[  140.719106][ T8667] lo speed is unknown, defaulting to 1000
[  141.169325][ T8723] netlink: 'syz.1.1201': attribute type 3 has an invalid length.
[  141.172182][ T8723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1201'.
[  141.408198][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'.
[  142.126433][ T8777] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1225'.
[  142.146674][ T8777] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1225'.
[  142.173617][ T8781] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  142.483561][ T5895] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  142.697792][ T8777] lo speed is unknown, defaulting to 1000
[  143.043989][ T8812] netlink: 'syz.1.1243': attribute type 29 has an invalid length.
[  143.049905][ T8812] netlink: 'syz.1.1243': attribute type 29 has an invalid length.
[  143.320061][ T8832] netlink: 'syz.2.1253': attribute type 3 has an invalid length.
[  143.323617][ T8832] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1253'.
[  144.317356][ T8874] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1272'.
[  145.240258][ T8894] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  145.414484][ T8898] netlink: 'syz.2.1282': attribute type 21 has an invalid length.
[  145.420280][ T8898] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1282'.
[  147.119566][ T8930] netlink: 'syz.1.1294': attribute type 21 has an invalid length.
[  147.123027][ T8930] netlink: 'syz.1.1294': attribute type 6 has an invalid length.
[  147.134427][ T8930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1294'.
[  147.330370][ T8940] netlink: 'syz.1.1298': attribute type 10 has an invalid length.
[  147.363673][ T8940] team0: Port device syz_tun added
[  148.424156][ T8961] netlink: 'syz.1.1308': attribute type 21 has an invalid length.
[  148.478914][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.482895][ T8954] bridge0: entered allmulticast mode
[  148.859303][ T8985] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1320'.
[  149.463968][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1321'.
[  149.468774][ T8988] netlink: 'syz.0.1321': attribute type 2 has an invalid length.
[  149.473799][ T8988] netlink: 'syz.0.1321': attribute type 2 has an invalid length.
[  149.476957][ T8988] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  149.479615][ T8988] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1321'.
[  149.597532][ T8995] netlink: 'syz.2.1322': attribute type 33 has an invalid length.
[  149.601039][ T8995] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1322'.
[  149.633960][ T8995] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP)
[  149.658466][ T8995] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  150.010321][ T9015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1333'.
[  150.025002][ T9015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1333'.
[  150.048374][ T9019] netlink: 'syz.0.1335': attribute type 2 has an invalid length.
[  150.051442][ T9019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1335'.
[  150.169183][ T9028] netlink: 'syz.2.1340': attribute type 4 has an invalid length.
[  150.361545][ T9041] netlink: 'syz.0.1343': attribute type 10 has an invalid length.
[  150.367209][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1343'.
[  150.370785][ T9041] dummy0: entered promiscuous mode
[  150.598943][ T9041] team0: Port device dummy0 removed
[  150.601770][ T9041] bridge0: port 3(dummy0) entered blocking state
[  150.606111][ T9041] bridge0: port 3(dummy0) entered disabled state
[  150.608865][ T9041] dummy0: entered allmulticast mode
[  151.055826][ T9044] netlink: 'syz.1.1345': attribute type 2 has an invalid length.
[  151.210336][ T9052] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1349'.
[  151.307229][ T9062] netlink: 'syz.0.1354': attribute type 21 has an invalid length.
[  151.318094][ T9062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1354'.
[  151.952649][ T9095] syzkaller0: entered promiscuous mode
[  151.959283][ T9095] syzkaller0: entered allmulticast mode
[  153.108167][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.442920][ T9188] __nla_validate_parse: 12 callbacks suppressed
[  154.442936][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'.
[  154.461792][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'.
[  154.462226][ T9189] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1414'.
[  154.670269][ T9201] tap0: tun_chr_ioctl cmd 1074025678
[  154.672861][ T9201] tap0: group set to 0
[  154.852862][ T9209] validate_nla: 7 callbacks suppressed
[  154.852872][ T9209] netlink: 'syz.2.1423': attribute type 21 has an invalid length.
[  154.858694][ T9209] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1423'.
[  154.861771][ T9209] netlink: 'syz.2.1423': attribute type 4 has an invalid length.
[  154.866119][ T9209] netlink: 'syz.2.1423': attribute type 5 has an invalid length.
[  154.868658][ T9209] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1423'.
[  155.261991][ T9246] netlink: 'syz.2.1440': attribute type 29 has an invalid length.
[  155.268415][ T9246] netlink: 'syz.2.1440': attribute type 29 has an invalid length.
[  155.272200][ T9246] netlink: 'syz.2.1440': attribute type 29 has an invalid length.
[  155.319425][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1443'.
[  155.414302][ T9256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1446'.
[  155.422054][ T9256] tc_dump_action: action bad kind
[  155.548621][ T9263] netlink: 'syz.2.1448': attribute type 3 has an invalid length.
[  155.551452][ T9263] netlink: 'syz.2.1448': attribute type 1 has an invalid length.
[  155.561632][ T9263] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1448'.
[  155.968789][ T9288] debugfs: '!' already exists in 'ieee80211'
[  156.120983][ T9293] netlink: 'syz.1.1461': attribute type 13 has an invalid length.
[  156.127417][ T9293] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.1461'.
[  156.550725][ T9322] netlink: 'syz.1.1468': attribute type 31 has an invalid length.
[  156.996285][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'.
[  157.025633][ T9335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  157.659161][ T9359] syzkaller0: entered promiscuous mode
[  157.661447][ T9359] syzkaller0: entered allmulticast mode
[  158.580260][ T9368] syzkaller0: left promiscuous mode
[  158.582758][ T9368] syzkaller0: left allmulticast mode
[  158.702903][ T9377] syzkaller0: entered promiscuous mode
[  158.706370][ T9377] syzkaller0: entered allmulticast mode
[  159.876012][ T5895] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  159.879398][ T5895] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  159.883612][ T5895] CPU: 1 UID: 0 PID: 5895 Comm: kworker/u11:4 Not tainted syzkaller #0 PREEMPT(full) 
[  159.883626][ T5895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.883633][ T5895] Workqueue: hci2 hci_rx_work
[  159.883651][ T5895] Call Trace:
[  159.883658][ T5895]  <TASK>
[  159.883663][ T5895]  dump_stack_lvl+0x189/0x250
[  159.883681][ T5895]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.883694][ T5895]  ? __pfx__printk+0x10/0x10
[  159.883715][ T5895]  ? kernfs_path_from_node+0x250/0x290
[  159.883727][ T5895]  ? kernfs_path_from_node+0x2f/0x290
[  159.883742][ T5895]  sysfs_create_dir_ns+0x259/0x280
[  159.883756][ T5895]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  159.883770][ T5895]  ? do_raw_spin_unlock+0x4d/0x240
[  159.883787][ T5895]  kobject_add_internal+0x59f/0xb40
[  159.883811][ T5895]  kobject_add+0x155/0x220
[  159.883831][ T5895]  ? __pfx_kobject_add+0x10/0x10
[  159.883847][ T5895]  ? _raw_spin_unlock+0x28/0x50
[  159.883863][ T5895]  ? get_device_parent+0x366/0x3a0
[  159.883877][ T5895]  device_add+0x408/0xb50
[  159.883890][ T5895]  hci_conn_add_sysfs+0xd5/0x1e0
[  159.883903][ T5895]  le_conn_complete_evt+0xc3a/0x1220
[  159.883922][ T5895]  ? bt_warn+0x10b/0x160
[  159.883940][ T5895]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  159.883954][ T5895]  ? __pfx_bt_warn+0x10/0x10
[  159.883963][ T5895]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  159.883981][ T5895]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  159.883994][ T5895]  ? skb_pull_data+0xfb/0x200
[  159.884011][ T5895]  hci_le_enh_conn_complete_evt+0x189/0x470
[  159.884028][ T5895]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  159.884047][ T5895]  hci_event_packet+0x78f/0x1200
[  159.884063][ T5895]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  159.884081][ T5895]  ? __pfx_hci_event_packet+0x10/0x10
[  159.884095][ T5895]  ? kcov_remote_start+0x4d3/0x7f0
[  159.884109][ T5895]  ? lockdep_hardirqs_on+0x90/0x150
[  159.884124][ T5895]  ? hci_send_to_monitor+0xe2/0x570
[  159.884140][ T5895]  hci_rx_work+0x46a/0xe80
[  159.884157][ T5895]  ? process_scheduled_works+0x9ef/0x17b0
[  159.884169][ T5895]  process_scheduled_works+0xae1/0x17b0
[  159.884198][ T5895]  ? __pfx_process_scheduled_works+0x10/0x10
[  159.884219][ T5895]  worker_thread+0x8a0/0xda0
[  159.884232][ T5895]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.884249][ T5895]  ? __kthread_parkme+0x7b/0x200
[  159.884266][ T5895]  kthread+0x711/0x8a0
[  159.884281][ T5895]  ? __pfx_worker_thread+0x10/0x10
[  159.884291][ T5895]  ? __pfx_kthread+0x10/0x10
[  159.884304][ T5895]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.884316][ T5895]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.884328][ T5895]  ? __pfx_kthread+0x10/0x10
[  159.884341][ T5895]  ret_from_fork+0x3fc/0x770
[  159.884353][ T5895]  ? __pfx_ret_from_fork+0x10/0x10
[  159.884368][ T5895]  ? __switch_to_asm+0x39/0x70
[  159.884380][ T5895]  ? __switch_to_asm+0x33/0x70
[  159.884391][ T5895]  ? __pfx_kthread+0x10/0x10
[  159.884404][ T5895]  ret_from_fork_asm+0x1a/0x30
[  159.884456][ T5895]  </TASK>
[  159.884479][ T5895] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  160.003593][ T5895] Bluetooth: hci2: failed to register connection device
[  160.241321][ T9410] validate_nla: 4 callbacks suppressed
[  160.241373][ T9410] netlink: 'syz.2.1505': attribute type 28 has an invalid length.
[  160.247290][ T9410] netlink: 'syz.2.1505': attribute type 29 has an invalid length.
[  160.250647][ T9410] __nla_validate_parse: 1 callbacks suppressed
[  160.250743][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1505'.
[  160.272356][ T9410] netlink: 'syz.2.1505': attribute type 9 has an invalid length.
[  160.480755][ T9410] netlink: 'syz.2.1505': attribute type 8 has an invalid length.
[  160.552390][ T9410] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.1505'.
[  162.024966][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  162.285678][ T9450] netlink: 'syz.0.1519': attribute type 29 has an invalid length.
[  162.290991][ T9450] netlink: 'syz.0.1519': attribute type 29 has an invalid length.
[  162.627029][ T9472] netlink: 'syz.0.1529': attribute type 10 has an invalid length.
[  162.651034][ T9472] team0: Device ipvlan1 failed to register rx_handler
[  163.360938][ T9486] netlink: 'syz.1.1534': attribute type 21 has an invalid length.
[  163.364920][ T9486] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1534'.
[  163.504237][ T9501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.535756][ T9503] netlink: 'syz.2.1542': attribute type 64 has an invalid length.
[  163.959514][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1548'.
[  163.964100][ T9519] caif0: entered promiscuous mode
[  163.968786][ T9519] caif0: entered allmulticast mode
[  163.972492][ T9519] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1548'.
[  164.061587][ T9528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'.
[  164.067531][ T9528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'.
[  164.071915][ T9528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'.
[  164.141846][ T9533] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1554'.
[  164.206585][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'.
[  164.210405][ T9537] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  164.213828][ T9537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.459762][ T9551] netlink: 'syz.0.1562': attribute type 2 has an invalid length.
[  164.728997][ T9565] -1: renamed from syzkaller0
[  165.593754][ T9615] __nla_validate_parse: 4 callbacks suppressed
[  165.593764][ T9615] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1590'.
[  165.604400][ T9617] validate_nla: 3 callbacks suppressed
[  165.604411][ T9617] netlink: 'syz.0.1591': attribute type 10 has an invalid length.
[  165.617592][ T9617] team0: Cannot enslave team device to itself
[  166.123958][ T9641] netlink: 'syz.2.1602': attribute type 1 has an invalid length.
[  166.307887][ T9653] netlink: 'syz.2.1606': attribute type 10 has an invalid length.
[  166.312522][ T9653] geneve0: entered promiscuous mode
[  166.582567][ T9653] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  166.586767][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1612'.
[  166.590025][ T9665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1612'.
[  166.755548][ T9665] netlink: 'syz.0.1612': attribute type 21 has an invalid length.
[  166.759223][ T9665] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1612'.
[  166.763898][ T9665] netlink: 'syz.0.1612': attribute type 4 has an invalid length.
[  166.776745][ T9665] netlink: 'syz.0.1612': attribute type 5 has an invalid length.
[  166.780664][ T9665] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1612'.
[  166.848669][ T9676] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1616'.
[  168.085564][ T9713] openvswitch: netlink: Message has 1 unknown bytes.
[  168.092245][ T9713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.155864][ T9716] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1634'.
[  168.521024][ T9725] syzkaller0: entered promiscuous mode
[  168.522922][ T9725] syzkaller0: entered allmulticast mode
[  168.541008][ T9725] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  168.830620][ T9753] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1650'.
[  169.941844][ T9785] team0: Port device syz_tun removed
[  170.041118][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.111017][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.197868][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.298107][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.528241][   T13] bridge_slave_1: left allmulticast mode
[  170.530860][   T13] bridge_slave_1: left promiscuous mode
[  170.534036][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.607860][   T13] bridge_slave_0: left allmulticast mode
[  170.610412][   T13] bridge_slave_0: left promiscuous mode
[  170.613848][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.659367][ T5895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  170.663892][ T5895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  170.670146][ T5895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  170.674000][ T5895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  170.678333][ T5895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  170.715019][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  170.720421][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  170.727136][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  170.731847][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  170.749167][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  170.966442][   T13] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  171.130794][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.135880][   T13] bond_slave_0: left promiscuous mode
[  171.141041][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.146641][   T13] bond_slave_1: left promiscuous mode
[  171.151028][   T13] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  171.156231][   T13] batadv0: left promiscuous mode
[  171.159775][   T13] bond0 (unregistering): Released all slaves
[  171.248387][ T9807] lo speed is unknown, defaulting to 1000
[  171.262537][ T9805] lo speed is unknown, defaulting to 1000
[  171.539100][ T9807] chnl_net:caif_netlink_parms(): no params data found
[  171.548033][ T9805] chnl_net:caif_netlink_parms(): no params data found
[  171.640665][   T13] hsr_slave_0: left promiscuous mode
[  171.643737][   T13] hsr_slave_1: left promiscuous mode
[  171.648137][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.651504][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.656850][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.659701][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.677691][   T13] veth1_macvtap: left promiscuous mode
[  171.679798][   T13] veth0_macvtap: left promiscuous mode
[  171.681778][   T13] veth1_vlan: left promiscuous mode
[  172.744735][ T5895] Bluetooth: hci1: command tx timeout
[  172.794810][   T13] team0 (unregistering): Port device team_slave_1 removed
[  172.820118][   T13] team0 (unregistering): Port device C removed
[  172.824776][ T5895] Bluetooth: hci2: command tx timeout
[  173.173113][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.177464][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.189324][ T9807] bridge_slave_0: entered allmulticast mode
[  173.196794][ T9807] bridge_slave_0: entered promiscuous mode
[  173.206353][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.209368][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.212426][ T9805] bridge_slave_0: entered allmulticast mode
[  173.224190][ T9805] bridge_slave_0: entered promiscuous mode
[  173.231412][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.237415][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.239957][ T9807] bridge_slave_1: entered allmulticast mode
[  173.243381][ T9807] bridge_slave_1: entered promiscuous mode
[  173.289542][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.291986][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.295897][ T9805] bridge_slave_1: entered allmulticast mode
[  173.298691][ T9805] bridge_slave_1: entered promiscuous mode
[  173.360154][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.387634][ T9807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.398079][ T9807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.412045][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.417863][ T9850] lo speed is unknown, defaulting to 1000
[  173.483498][ T9807] team0: Port device team_slave_0 added
[  173.501754][ T9805] team0: Port device team_slave_0 added
[  173.505312][ T9807] team0: Port device team_slave_1 added
[  173.522792][ T9805] team0: Port device team_slave_1 added
[  173.535124][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.537973][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.546875][ T9807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.572816][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.575677][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.585586][ T9807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.616569][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.619578][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.635441][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.662838][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.683101][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.697796][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.721531][ T9807] hsr_slave_0: entered promiscuous mode
[  173.723931][ T9807] hsr_slave_1: entered promiscuous mode
[  173.726388][ T9807] debugfs: 'hsr0' already exists in 'hsr'
[  173.728264][ T9807] Cannot create hsr debugfs directory
[  173.829863][ T9805] hsr_slave_0: entered promiscuous mode
[  173.832900][ T9805] hsr_slave_1: entered promiscuous mode
[  173.847163][ T9805] debugfs: 'hsr0' already exists in 'hsr'
[  173.849180][ T9805] Cannot create hsr debugfs directory
[  173.897858][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.000703][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.012640][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'.
[  174.015848][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'.
[  174.086763][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.161815][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.213611][ T9807] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  174.224101][ T9807] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  174.245429][ T9807] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  174.276248][ T9807] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  174.298619][ T9885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.452163][ T9805] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  174.466190][ T9805] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  174.482285][ T9805] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  174.506796][ T9805] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  174.519192][   T13] bridge_slave_1: left allmulticast mode
[  174.521676][   T13] bridge_slave_1: left promiscuous mode
[  174.524206][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.821926][   T13] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  174.824904][ T5895] Bluetooth: hci1: command tx timeout
[  174.904697][ T5895] Bluetooth: hci2: command tx timeout
[  174.946403][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.952092][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.958881][   T13] bond0 (unregistering): Released all slaves
[  175.068660][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.141600][ T9807] 8021q: adding VLAN 0 to HW filter on device team0
[  175.162748][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.165949][ T6250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.192262][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.195533][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.273608][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.334167][ T9807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.392880][ T9805] 8021q: adding VLAN 0 to HW filter on device team0
[  175.416716][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.419871][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.470240][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.473230][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.491532][   T13] hsr_slave_0: left promiscuous mode
[  175.494312][   T13] hsr_slave_1: left promiscuous mode
[  175.503726][   T13] veth0_macvtap: left promiscuous mode
[  175.506838][   T13] veth1_vlan: left promiscuous mode
[  175.508734][   T13] veth0_vlan: left promiscuous mode
[  175.773784][   T13] team0 (unregistering): Port device team_slave_1 removed
[  175.807653][   T13] team0 (unregistering): Port device team_slave_0 removed
[  176.079892][ T9807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.207067][ T9933] netlink: 'syz.0.1692': attribute type 3 has an invalid length.
[  176.209685][ T9933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1692'.
[  176.391933][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.504490][ T9807] veth0_vlan: entered promiscuous mode
[  176.520109][ T9807] veth1_vlan: entered promiscuous mode
[  176.532970][ T9805] veth0_vlan: entered promiscuous mode
[  176.579611][ T9805] veth1_vlan: entered promiscuous mode
[  176.632283][ T9805] veth0_macvtap: entered promiscuous mode
[  176.639749][ T9807] veth0_macvtap: entered promiscuous mode
[  176.644357][ T9805] veth1_macvtap: entered promiscuous mode
[  176.655468][ T9807] veth1_macvtap: entered promiscuous mode
[  176.662801][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.673236][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.681071][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.708782][ T5899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.713706][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.733001][ T5899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.741819][ T5899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.752522][ T5899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.775702][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.779212][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.782903][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.806414][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.904920][ T5895] Bluetooth: hci1: command tx timeout
[  176.926535][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.931101][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.952328][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.959995][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.980529][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.983482][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.995339][ T5895] Bluetooth: hci2: command tx timeout
[  177.009980][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.019889][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.088200][ T9979] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1702'.
[  177.104005][ T9977] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1702'.
[  177.120793][ T9979] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1702'.
[  177.303642][ T9995] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1706'.
[  178.143097][ T5895] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  178.216572][T10031] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1713'.
[  178.258601][T10029] lo speed is unknown, defaulting to 1000
[  178.295523][T10037] : entered promiscuous mode
[  178.827942][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'.
[  178.838375][T10073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1727'.
[  178.985992][ T5237] Bluetooth: hci1: command tx timeout
[  179.042273][ T5237] Bluetooth: hci2: Unable to find connection for big 0x00
[  179.064941][ T5237] Bluetooth: hci2: command tx timeout
[  179.225848][T10102] netlink: 'syz.4.1738': attribute type 33 has an invalid length.
[  179.228512][T10102] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1738'.
[  179.603921][T10109] netlink: 'syz.4.1739': attribute type 16 has an invalid length.
[  179.608309][T10109] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1739'.
[  179.735687][T10109] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.977781][T10131] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1742'.
[  180.010920][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'.
[  180.016808][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'.
[  180.048388][T10131] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1742'.
[  180.061506][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'.
[  180.081434][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1742'.
[  180.322704][T10146] netlink: 'syz.0.1744': attribute type 40 has an invalid length.
[  180.367929][T10146] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.984749][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[  181.536783][T10180] netlink: 'syz.4.1757': attribute type 1 has an invalid length.
[  181.556068][T10180] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1757'.
[  181.579939][T10185] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1758'.
[  182.897711][T10225] netlink: 'syz.3.1777': attribute type 21 has an invalid length.
[  184.048246][T10168] Set syz1 is full, maxelem 65536 reached
[  184.276801][T10283] netlink: 'syz.4.1801': attribute type 13 has an invalid length.
[  184.574158][T10301] netlink: 'syz.0.1807': attribute type 10 has an invalid length.
[  184.581164][T10301] __nla_validate_parse: 2 callbacks suppressed
[  184.581177][T10301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1807'.
[  184.599130][T10301] bridge0: port 3(dummy0) entered blocking state
[  184.602039][T10301] bridge0: port 3(dummy0) entered forwarding state
[  184.652805][ T5895] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  184.720624][T10316] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  185.088874][T10352] netlink: 'syz.0.1831': attribute type 2 has an invalid length.
[  185.094022][T10352] netlink: 'syz.0.1831': attribute type 1 has an invalid length.
[  185.112202][T10352] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1831'.
[  185.278725][T10357] netlink: 'syz.0.1833': attribute type 1 has an invalid length.
[  185.324342][T10360] netlink: 'syz.3.1834': attribute type 29 has an invalid length.
[  185.336259][T10360] netlink: 'syz.3.1834': attribute type 29 has an invalid length.
[  186.473833][T10416] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1849'.
[  186.574877][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'.
[  186.678866][T10415] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  187.307529][ T5895] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  187.310998][ T5895] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  188.059857][T10508] validate_nla: 2 callbacks suppressed
[  188.059916][T10508] netlink: 'syz.3.1893': attribute type 1 has an invalid length.
[  188.188344][T10511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.303920][T10518] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1897'.
[  188.314655][T10518] netlink: get zone limit has 8 unknown bytes
[  188.798616][T10534] netlink: 'syz.0.1903': attribute type 28 has an invalid length.
[  188.801277][T10534] netlink: 'syz.0.1903': attribute type 4 has an invalid length.
[  188.803867][T10534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1903'.
[  188.933458][T10544] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  188.943190][T10542] netlink: 824 bytes leftover after parsing attributes in process `syz.0.1908'.
[  189.050331][T10546] netlink: 2451 bytes leftover after parsing attributes in process `syz.4.1909'.
[  189.309221][ T5895] Bluetooth: hci0: Malformed LE Event: 0x0d
[  189.592330][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'.
[  192.224720][T10715] syzkaller0: entered promiscuous mode
[  192.242728][T10715] syzkaller0: entered allmulticast mode
[  192.503902][T10743] netlink: 'syz.0.1952': attribute type 2 has an invalid length.
[  192.599068][T10753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.617636][   T24] lo speed is unknown, defaulting to 1000
[  192.624980][   T24] syz2: Port: 1 Link DOWN
[  194.108824][T10799] netlink: 'syz.4.1975': attribute type 1 has an invalid length.
[  194.113009][T10799] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1975'.
[  194.197532][T10804] netlink: 'syz.4.1977': attribute type 1 has an invalid length.
[  194.339637][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.342438][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  197.135343][T10873] netlink: 'syz.0.2007': attribute type 2 has an invalid length.
[  197.251399][T10881] syzkaller0: entered promiscuous mode
[  197.253371][T10881] syzkaller0: entered allmulticast mode
[  197.443472][T10894] netlink: 'syz.0.2017': attribute type 21 has an invalid length.
[  197.447024][T10894] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2017'.
[  197.557471][T10900] netlink: 'syz.4.2019': attribute type 10 has an invalid length.
[  197.560212][T10900] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2019'.
[  197.793002][T10905] netlink: 'syz.3.2022': attribute type 29 has an invalid length.
[  197.804207][T10905] netlink: 'syz.3.2022': attribute type 29 has an invalid length.
[  197.887912][T10905] netlink: 572 bytes leftover after parsing attributes in process `syz.3.2022'.
[  197.954231][ T5895] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  198.774084][T10945] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2039'.
[  198.791350][T10948] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2041'.
[  199.098930][T10966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.443043][T10979] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2055'.
[  199.773248][T10999] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2062'.
[  202.909308][T11016] siw: device registration error -23
[  203.103546][T11032] netlink: 'syz.3.2079': attribute type 1 has an invalid length.
[  203.111712][T11032] netlink: 376 bytes leftover after parsing attributes in process `syz.3.2079'.
[  203.271472][T11044] netlink: 'syz.0.2084': attribute type 21 has an invalid length.
[  203.576521][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2091'.
[  203.579627][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2091'.
[  203.802464][T11069] =======================================================
[  203.802464][T11069] WARNING: The mand mount option has been deprecated and
[  203.802464][T11069]          and is ignored by this kernel. Remove the mand
[  203.802464][T11069]          option from the mount to silence this warning.
[  203.802464][T11069] =======================================================
[  203.913012][T11075] netlink: 'syz.0.2098': attribute type 1 has an invalid length.
[  203.953244][T11080] openvswitch: netlink: Message has 4 unknown bytes.
[  203.958057][T11080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.031161][T11087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  204.034472][T11087] IPv6: NLM_F_CREATE should be set when creating new route
[  204.037640][T11087] IPv6: NLM_F_CREATE should be set when creating new route
[  204.040542][T11087] IPv6: NLM_F_CREATE should be set when creating new route
[  204.156728][T11094] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode
[  204.161377][T11094] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[  204.226590][T11102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2111'.
[  204.237971][T11102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2111'.
[  204.247059][T11102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2111'.
[  205.288725][T11118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2119'.
[  205.675271][T11146] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2131'.
[  205.678849][T11146] batadv_slave_1: entered promiscuous mode
[  205.860945][T11152] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2133'.
[  206.405728][T11180] netlink: 'syz.0.2146': attribute type 1 has an invalid length.
[  206.409120][T11180] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2146'.
[  206.561696][T11184] netlink: 'syz.0.2148': attribute type 10 has an invalid length.
[  207.187716][T11212] netlink: 'syz.3.2157': attribute type 10 has an invalid length.
[  207.191254][T11212] dummy0: entered promiscuous mode
[  207.194065][T11212] bridge0: port 3(dummy0) entered blocking state
[  207.198819][T11212] bridge0: port 3(dummy0) entered disabled state
[  207.201960][T11212] dummy0: entered allmulticast mode
[  207.209100][T11212] bridge0: port 3(dummy0) entered blocking state
[  207.211964][T11212] bridge0: port 3(dummy0) entered forwarding state
[  208.199440][T11258] netlink: 'syz.0.2163': attribute type 5 has an invalid length.
[  208.202131][T11258] netlink: 'syz.0.2163': attribute type 7 has an invalid length.
[  208.218686][T11258] __nla_validate_parse: 5 callbacks suppressed
[  208.218696][T11258] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2163'.
[  208.348165][T11262] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2165'.
[  208.452227][T11272] netlink: 'syz.0.2170': attribute type 1 has an invalid length.
[  208.581942][T11284] netlink: 'syz.4.2176': attribute type 10 has an invalid length.
[  208.584802][T11284] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2176'.
[  208.974039][T11306] netlink: 'syz.3.2186': attribute type 13 has an invalid length.
[  208.976843][T11306] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2186'.
[  208.980326][T11306] syz_tun: refused to change device tx_queue_len
[  209.409339][T11328] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2196'.
[  209.747361][T11342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2201'.
[  209.758156][T11342] netlink: 'syz.0.2201': attribute type 1 has an invalid length.
[  209.767231][   T33] audit: type=1107 audit(1755611841.818:3): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  210.328240][T11366] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2212'.
[  210.334390][T11366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2212'.
[  210.745292][T11386] netlink: 'syz.0.2222': attribute type 28 has an invalid length.
[  211.120365][T11393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2225'.
[  214.791180][T11419] netlink: 'syz.4.2238': attribute type 3 has an invalid length.
[  214.797572][T11419] netlink: 'syz.4.2238': attribute type 1 has an invalid length.
[  214.802759][T11419] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2238'.
[  215.037582][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2240'.
[  215.041557][T11424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2240'.
[  215.112250][T11427] netlink: 'syz.3.2241': attribute type 10 has an invalid length.
[  215.162512][ T5895] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  215.177543][T11427] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  215.520346][T11446] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2249'.
[  215.542054][T11449] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2250'.
[  215.568643][T11453] net veth1_virt_wifi : renamed from virt_wifi0
[  215.802568][T11478] netlink: 'syz.3.2260': attribute type 1 has an invalid length.
[  215.811534][T11478] netlink: 'syz.3.2260': attribute type 1 has an invalid length.
[  215.825580][T11479] netlink: 809 bytes leftover after parsing attributes in process `syz.4.2259'.
[  215.828557][T11479] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.2259'.
[  215.939059][T11485] siw: device registration error -23
[  216.004714][ T5895] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  216.612019][T11508] netlink: 'syz.3.2271': attribute type 10 has an invalid length.
[  216.715883][T11508] team0: Port device geneve1 added
[  217.400981][T11553] syzkaller1: tun_chr_ioctl cmd 1074025677
[  217.403067][T11553] syzkaller1: linktype set to 823
[  218.041344][ T5895] Bluetooth: hci0: command 0x0406 tx timeout
[  218.270114][T11566] syzkaller0: entered promiscuous mode
[  218.517674][T11579] netlink: 'syz.0.2299': attribute type 4 has an invalid length.
[  218.961419][T11591] netlink: 'syz.0.2303': attribute type 1 has an invalid length.
[  219.020198][T11591] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2303'.
[  219.183340][T11602] macvtap0: refused to change device tx_queue_len
[  219.189187][T11603] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2308'.
[  220.917808][T11655] netlink: 'syz.0.2332': attribute type 10 has an invalid length.
[  220.921120][T11655] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2332'.
[  221.767196][T11674] netlink: 'syz.0.2341': attribute type 32 has an invalid length.
[  221.839567][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2343'.
[  221.954315][T11688] netlink: 'syz.3.2347': attribute type 10 has an invalid length.
[  221.958697][T11688] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2347'.
[  221.962450][T11688] bond0: entered promiscuous mode
[  221.979374][T11688] bond_slave_0: entered promiscuous mode
[  221.982147][T11688] bond_slave_1: entered promiscuous mode
[  221.984909][T11688] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  221.989402][T11688] bridge0: port 4(bond0) entered blocking state
[  221.992643][T11688] bridge0: port 4(bond0) entered disabled state
[  221.996455][T11688] bond0: entered allmulticast mode
[  221.998467][T11688] bond_slave_0: entered allmulticast mode
[  222.000559][T11688] bond_slave_1: entered allmulticast mode
[  222.002664][T11688] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  222.025785][T11688] bridge0: port 4(bond0) entered blocking state
[  222.028965][T11688] bridge0: port 4(bond0) entered forwarding state
[  222.446845][T11695] netlink: 'syz.4.2349': attribute type 10 has an invalid length.
[  222.451466][T11695] bond0: (slave bond_slave_0): Releasing backup interface
[  222.653792][T11707] netlink: 'syz.4.2354': attribute type 3 has an invalid length.
[  222.657778][T11707] netlink: 'syz.4.2354': attribute type 2 has an invalid length.
[  222.661107][T11707] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.2354'.
[  222.755396][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'.
[  222.798557][T11718] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2359'.
[  222.866383][ T5895] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[  223.142669][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'.
[  223.909625][T11815] netlink: 'syz.3.2405': attribute type 46 has an invalid length.
[  224.033981][T11825] syzkaller1: tun_chr_ioctl cmd 1074025677
[  224.036271][T11825] syzkaller1: linktype set to 780
[  224.040572][T11825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2410'.
[  224.043790][T11825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2410'.
[  224.051085][T11825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2410'.
[  224.499266][T11841] netlink: 'syz.0.2417': attribute type 13 has an invalid length.
[  224.502098][T11841] netlink: 'syz.0.2417': attribute type 58 has an invalid length.
[  224.571730][T11846] netlink: 'syz.4.2419': attribute type 21 has an invalid length.
[  224.671956][T11858] xt_time: unknown flags 0xf4
[  225.247492][T11894] syzkaller0: entered promiscuous mode
[  225.249592][T11894] syzkaller0: entered allmulticast mode
[  227.228167][T11952] __nla_validate_parse: 6 callbacks suppressed
[  227.228177][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'.
[  227.327909][T11959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2469'.
[  227.357612][T11963] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2471'.
[  227.736278][T11975] lo speed is unknown, defaulting to 1000
[  228.194318][T11989] netlink: 103 bytes leftover after parsing attributes in process `syz.0.2482'.
[  228.843541][T12039] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2499'.
[  228.854769][T12039] bond_slave_1: entered promiscuous mode
[  228.868489][T12039] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2499'.
[  228.878651][T12043] validate_nla: 6 callbacks suppressed
[  228.878661][T12043] netlink: 'syz.0.2505': attribute type 1 has an invalid length.
[  229.964745][T12087] netlink: 'syz.4.2525': attribute type 1 has an invalid length.
[  230.121198][T12093] netlink: 'syz.0.2528': attribute type 21 has an invalid length.
[  230.678797][T12125] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2544'.
[  230.899305][T12151] C: renamed from team_slave_0 (while UP)
[  230.909781][T12151] netlink: 'syz.3.2557': attribute type 3 has an invalid length.
[  230.918058][T12151] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2557'.
[  230.929671][T12153] netlink: 'syz.0.2556': attribute type 11 has an invalid length.
[  230.933046][T12153] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2556'.
[  230.982191][T12157] netlink: 'syz.0.2559': attribute type 39 has an invalid length.
[  230.992425][T12157] veth0_macvtap: left promiscuous mode
[  232.297574][T12197] : renamed from bond0 (while UP)
[  232.530240][T12224] netlink: 16370 bytes leftover after parsing attributes in process `syz.3.2590'.
[  232.541427][T12225] netlink: 'syz.0.2588': attribute type 40 has an invalid length.
[  232.912832][T12249] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2601'.
[  233.030005][T12258] netlink: 'syz.4.2605': attribute type 1 has an invalid length.
[  233.301320][T12272] sit0: entered allmulticast mode
[  233.317273][T12272] sit0: entered promiscuous mode
[  233.842590][T12293] tc_dump_action: action bad kind
[  234.171719][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.249311][T12305] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2628'.
[  235.036188][T12303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2627'.
[  235.399174][T12344] netlink: 'syz.0.2644': attribute type 1 has an invalid length.
[  235.437535][T12349] netlink: 'syz.4.2646': attribute type 13 has an invalid length.
[  235.544222][T12349] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.552221][T12349] bond_slave_1: left promiscuous mode
[  235.604268][T12349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.611464][T12349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.719115][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.730767][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.756378][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.760012][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.774385][T12358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2651'.
[  236.017677][T12383] netlink: 'syz.3.2663': attribute type 29 has an invalid length.
[  236.021798][T12383] netlink: 'syz.3.2663': attribute type 29 has an invalid length.
[  236.028136][T12383] netlink: 'syz.3.2663': attribute type 29 has an invalid length.
[  236.103920][T12393] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2668'.
[  236.111591][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'.
[  236.305614][T12411] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.2675'.
[  236.363055][T12414] lo speed is unknown, defaulting to 1000
[  236.510471][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2683'.
[  236.514453][T12430] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2683'.
[  236.560364][T12434] tc_dump_action: action bad kind
[  236.770259][T12450] TCP: TCP_TX_DELAY enabled
[  236.892004][T12460] netlink: 'syz.3.2698': attribute type 10 has an invalid length.
[  237.921219][T12487] xt_HMARK: proto mask must be zero with L3 mode
[  238.050856][T12509] __nla_validate_parse: 6 callbacks suppressed
[  238.050866][T12509] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2721'.
[  238.397675][ T5917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.448781][ T5917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.510014][ T5917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.553960][ T5917] bond0: (slave netdevsim0): Releasing backup interface
[  238.556970][ T5917] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  238.559902][ T5917] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  238.564351][ T5917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.694572][ T5917] bond0: left allmulticast mode
[  238.696379][ T5917] bond_slave_0: left allmulticast mode
[  238.698241][ T5917] bond_slave_1: left allmulticast mode
[  238.700464][ T5917] bridge0: port 4(bond0) entered disabled state
[  238.709301][ T5917] dummy0: left allmulticast mode
[  238.711720][ T5917] bridge0: port 3(dummy0) entered disabled state
[  238.717358][ T5917] bridge_slave_1: left allmulticast mode
[  238.719773][ T5917] bridge_slave_1: left promiscuous mode
[  238.722134][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.729017][ T5917] bridge_slave_0: left allmulticast mode
[  238.731485][ T5917] bridge_slave_0: left promiscuous mode
[  238.733962][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.870209][ T5917] team0: Port device geneve1 removed
[  238.983200][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.988533][ T5917] bond_slave_0: left promiscuous mode
[  238.992812][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.997402][ T5917] bond_slave_1: left promiscuous mode
[  239.000732][ T5917] bond0 (unregistering): Released all slaves
[  239.059200][ T5917] : left promiscuous mode
[  239.078626][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.083645][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.087983][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.092888][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.096627][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.132762][T12536] lo speed is unknown, defaulting to 1000
[  239.286578][T12536] chnl_net:caif_netlink_parms(): no params data found
[  239.375734][T12536] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.378336][T12536] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.380801][T12536] bridge_slave_0: entered allmulticast mode
[  239.384424][T12536] bridge_slave_0: entered promiscuous mode
[  239.390141][T12536] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.393237][T12536] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.396768][T12536] bridge_slave_1: entered allmulticast mode
[  239.400497][T12536] bridge_slave_1: entered promiscuous mode
[  239.452123][T12536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.466517][T12536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.484204][ T5917] hsr_slave_0: left promiscuous mode
[  239.496588][ T5917] hsr_slave_1: left promiscuous mode
[  239.499319][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.502372][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.507623][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.514672][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.529199][ T5917] veth1_macvtap: left promiscuous mode
[  239.531589][ T5917] veth0_macvtap: left promiscuous mode
[  239.843740][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.847339][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.856698][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.861536][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.867436][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.886032][ T5917] team0 (unregistering): Port device team_slave_1 removed
[  239.909890][ T5917] team0 (unregistering): Port device C removed
[  240.190190][T12536] team0: Port device team_slave_0 added
[  240.201846][T12536] team0: Port device team_slave_1 added
[  240.248888][T12536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.251594][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.266802][T12536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.287163][T12566] lo speed is unknown, defaulting to 1000
[  240.308463][T12536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.311100][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.319802][T12536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.410315][T12580] netlink: 'syz.4.2738': attribute type 4 has an invalid length.
[  240.442960][T12536] hsr_slave_0: entered promiscuous mode
[  240.447810][T12536] hsr_slave_1: entered promiscuous mode
[  240.641363][T12566] chnl_net:caif_netlink_parms(): no params data found
[  240.651688][ T5917] ------------[ cut here ]------------
[  240.654396][ T5917] WARNING: CPU: 0 PID: 5917 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  240.658765][ T5917] Modules linked in:
[  240.661589][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  240.666003][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.670026][ T5917] Workqueue: netns cleanup_net
[  240.672111][ T5917] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  240.674473][ T5917] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 fa e1 f7 e8 01 c9 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f3 c8 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  240.681800][T12536] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  240.682515][ T5917] RSP: 0018:ffffc90003f5f898 EFLAGS: 00010293
[  240.687169][ T5917] RAX: ffffffff8a21e34f RBX: ffff888109b50000 RCX: ffff8880203a5640
[  240.690863][ T5917] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff8880203a5640
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  240.694086][ T5917] RBP: ffffc90003f5f9b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  240.698037][ T5917] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffffffff8f630c20
[  240.701314][ T5917] R13: 1ffff920007ebf40 R14: ffff888109b51480 R15: dffffc0000000000
[  240.705283][ T5917] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  240.709055][ T5917] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.711781][ T5917] CR2: 00005595b3df30a0 CR3: 0000000113ec4000 CR4: 00000000000006f0
[  240.715636][ T5917] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082
[  240.718878][ T5917] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  240.721533][ T5917] Call Trace:
[  240.722741][ T5917]  <TASK>
[  240.723952][ T5917]  xfrm_net_exit+0x2d/0x70
[  240.726318][ T5917]  ops_undo_list+0x49a/0x990
[  240.728123][ T5917]  ? __pfx_ops_undo_list+0x10/0x10
[  240.730047][ T5917]  ? do_raw_spin_unlock+0x4d/0x240
[  240.731695][ T5917]  cleanup_net+0x4c5/0x800
[  240.733113][ T5917]  ? __pfx_cleanup_net+0x10/0x10
[  240.735255][ T5917]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.737205][ T5917]  ? process_scheduled_works+0x9ef/0x17b0
[  240.739254][ T5917]  ? process_scheduled_works+0x9ef/0x17b0
[  240.741084][ T5917]  process_scheduled_works+0xae1/0x17b0
[  240.743008][ T5917]  ? __pfx_process_scheduled_works+0x10/0x10
[  240.745253][ T5917]  worker_thread+0x8a0/0xda0
[  240.746730][ T5917]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.749044][ T5917]  ? __kthread_parkme+0x7b/0x200
[  240.750996][ T5917]  kthread+0x711/0x8a0
[  240.752368][ T5917]  ? __pfx_worker_thread+0x10/0x10
[  240.754060][ T5917]  ? __pfx_kthread+0x10/0x10
[  240.756070][ T5917]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.758097][ T5917]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.760001][ T5917]  ? __pfx_kthread+0x10/0x10
[  240.761785][ T5917]  ret_from_fork+0x3fc/0x770
[  240.763530][ T5917]  ? __pfx_ret_from_fork+0x10/0x10
[  240.765927][ T5917]  ? __switch_to_asm+0x39/0x70
[  240.767860][ T5917]  ? __switch_to_asm+0x33/0x70
[  240.769829][ T5917]  ? __pfx_kthread+0x10/0x10
[  240.771759][ T5917]  ret_from_fork_asm+0x1a/0x30
[  240.773693][ T5917]  </TASK>
[  240.775397][ T5917] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  240.778136][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  240.781502][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.785010][ T5917] Workqueue: netns cleanup_net
[  240.786574][ T5917] Call Trace:
[  240.787727][ T5917]  <TASK>
[  240.788737][ T5917]  dump_stack_lvl+0x99/0x250
[  240.790256][ T5917]  ? __asan_memcpy+0x40/0x70
[  240.791740][ T5917]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.793329][ T5917]  ? __pfx__printk+0x10/0x10
[  240.794843][ T5917]  vpanic+0x281/0x750
[  240.796165][ T5917]  ? __pfx__printk+0x10/0x10
[  240.797661][ T5917]  ? __pfx_vpanic+0x10/0x10
[  240.799271][ T5917]  ? is_bpf_text_address+0x292/0x2b0
[  240.801125][ T5917]  panic+0xb9/0xc0
[  240.802376][ T5917]  ? __pfx_panic+0x10/0x10
[  240.803769][ T5917]  __warn+0x31b/0x4b0
[  240.805051][ T5917]  ? xfrm_state_fini+0x270/0x2f0
[  240.806742][ T5917]  ? xfrm_state_fini+0x270/0x2f0
[  240.808509][ T5917]  report_bug+0x2be/0x4f0
[  240.809907][ T5917]  ? xfrm_state_fini+0x270/0x2f0
[  240.811526][ T5917]  ? xfrm_state_fini+0x270/0x2f0
[  240.813108][ T5917]  ? xfrm_state_fini+0x272/0x2f0
[  240.814665][ T5917]  handle_bug+0x84/0x160
[  240.816090][ T5917]  exc_invalid_op+0x1a/0x50
[  240.817644][ T5917]  asm_exc_invalid_op+0x1a/0x20
[  240.819206][ T5917] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  240.820946][ T5917] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 fa e1 f7 e8 01 c9 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f3 c8 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  240.827601][ T5917] RSP: 0018:ffffc90003f5f898 EFLAGS: 00010293
[  240.829997][ T5917] RAX: ffffffff8a21e34f RBX: ffff888109b50000 RCX: ffff8880203a5640
[  240.833097][ T5917] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff8880203a5640
[  240.835722][ T5917] RBP: ffffc90003f5f9b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  240.838902][ T5917] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffffffff8f630c20
[  240.842106][ T5917] R13: 1ffff920007ebf40 R14: ffff888109b51480 R15: dffffc0000000000
[  240.845354][ T5917]  ? xfrm_state_fini+0x26f/0x2f0
[  240.847360][ T5917]  ? xfrm_state_fini+0x26f/0x2f0
[  240.849045][ T5917]  xfrm_net_exit+0x2d/0x70
[  240.850671][ T5917]  ops_undo_list+0x49a/0x990
[  240.852306][ T5917]  ? __pfx_ops_undo_list+0x10/0x10
[  240.853963][ T5917]  ? do_raw_spin_unlock+0x4d/0x240
[  240.855688][ T5917]  cleanup_net+0x4c5/0x800
[  240.857358][ T5917]  ? __pfx_cleanup_net+0x10/0x10
[  240.859227][ T5917]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.861014][ T5917]  ? process_scheduled_works+0x9ef/0x17b0
[  240.862916][ T5917]  ? process_scheduled_works+0x9ef/0x17b0
[  240.864855][ T5917]  process_scheduled_works+0xae1/0x17b0
[  240.866641][ T5917]  ? __pfx_process_scheduled_works+0x10/0x10
[  240.868558][ T5917]  worker_thread+0x8a0/0xda0
[  240.869997][ T5917]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.872318][ T5917]  ? __kthread_parkme+0x7b/0x200
[  240.874204][ T5917]  kthread+0x711/0x8a0
[  240.875524][ T5917]  ? __pfx_worker_thread+0x10/0x10
[  240.877056][ T5917]  ? __pfx_kthread+0x10/0x10
[  240.878978][ T5917]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.880686][ T5917]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.882477][ T5917]  ? __pfx_kthread+0x10/0x10
[  240.884084][ T5917]  ret_from_fork+0x3fc/0x770
[  240.885660][ T5917]  ? __pfx_ret_from_fork+0x10/0x10
[  240.887672][ T5917]  ? __switch_to_asm+0x39/0x70
[  240.889411][ T5917]  ? __switch_to_asm+0x33/0x70
[  240.890914][ T5917]  ? __pfx_kthread+0x10/0x10
[  240.892622][ T5917]  ret_from_fork_asm+0x1a/0x30
[  240.894441][ T5917]  </TASK>
[  240.896421][ T5917] Kernel Offset: disabled
[  240.898192][ T5917] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:57:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff99d5d128 RCX=ffffffff93490310 RDX=0000000000000007
RSI=0000000000000000 RDI=ffff8880203a5640 RBP=0000000000000000 RSP=ffffc90000007910
R8 =0000000000000001 R9 =0000000000000001 R10=dffffc0000000000 R11=fffffbfff1f47007
R12=0000000000000000 R13=0000000000000007 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d607b RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005595b3df30a0 CR3=0000000113ec4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000556bdfec3d00 0000556bdfed0ec0 XMM01=0000556bdfebe3b0 0000556bdfec3d00
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff0000000000ff00 0000000000000000 XMM05=0000000000000207 0000000033325006
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=0000000000000251 0000000033326c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000202 RCX=a3d907dd7b6b9700 RDX=0000000000000000
RSI=ffffffff8d9ca59a RDI=ffffffff8be33300 RBP=dffffc0000000000 RSP=ffffc90002b3f408
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000567e80
R12=ffff88801d6f29c0 R13=ffffffff823b54a0 R14=ffff88801d6f2998 R15=ffff88810754d640
RIP=ffffffff819d6d68 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557eaf9500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005595acdcb680 CR3=00000001117d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbc9fd87498 00007fbc9fd87470 XMM03=00007fbc9fd874a8 00007fbc9fd874a0
XMM04=00007fbca08ed100 00007fbc9fd87460 XMM05=00007fbc9fd87478 00007fbc9fd874c0
XMM06=00007fbc9fd874b8 00007fbc9fd874b0 XMM07=00007fbc9fd874a8 00007fbc9fd874a0
XMM08=0000000000000000 00007fbc9fc12ee7 XMM09=0000000000000000 00007fbc9fc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
