last executing test programs:

3m18.035764073s ago: executing program 0 (id=889):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3m17.971016823s ago: executing program 0 (id=891):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0xd2d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

3m17.090014593s ago: executing program 0 (id=898):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000002c0081024e81f782db44b9f4011d080005000300e8fe55a1180015000600142603600e120900260000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40806d9ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040e3d95667e00681ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701e258edfaf3ca34b6f3a29a9ea453aef3", 0xd8}], 0x1}, 0x24080)

3m17.023662673s ago: executing program 0 (id=900):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10000000}, 0x800, 0xc8, 0xffff, 0x7, 0xf9, 0xfffffffc, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffee7, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe800000000000"], 0xfdef)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef)

3m16.146307483s ago: executing program 0 (id=911):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

3m16.14579947s ago: executing program 0 (id=912):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

3m0.541955901s ago: executing program 32 (id=912):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

2m57.095938728s ago: executing program 3 (id=1126):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2m57.02658862s ago: executing program 3 (id=1127):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"})

2m56.964383779s ago: executing program 3 (id=1128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000540), &(0x7f0000000540)=""/123}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m56.964280002s ago: executing program 3 (id=1129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m56.895803939s ago: executing program 3 (id=1131):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m55.593026914s ago: executing program 3 (id=1148):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

2m40.279228988s ago: executing program 33 (id=1148):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

2m10.10696386s ago: executing program 2 (id=1611):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x300}, 0x50)

2m10.053577729s ago: executing program 2 (id=1613):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m10.004197913s ago: executing program 2 (id=1618):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000000000008000000080000000000", @ANYRES32], 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m9.852927479s ago: executing program 2 (id=1624):
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x2412, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00')

2m9.715199212s ago: executing program 2 (id=1628):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

2m9.634928015s ago: executing program 2 (id=1629):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22)
recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1m54.61384493s ago: executing program 34 (id=1629):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22)
recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1m30.524273782s ago: executing program 1 (id=2168):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})

1m30.363284465s ago: executing program 1 (id=2170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m30.285079599s ago: executing program 1 (id=2172):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20)
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x200)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x101000, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{0x3, @default}, [@rose, @null, @netrom, @netrom, @bcast, @bcast, @rose, @default]}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000140)=""/26, 0x1a}, {0x0}, {&(0x7f0000000880)=""/154, 0x9a}], 0x5}, 0x2000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x2a, &(0x7f0000000040), 0xcf)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000040), 0x2)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x10, 0x2, 0x10)

1m30.108583345s ago: executing program 1 (id=2180):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m29.889713002s ago: executing program 1 (id=2185):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x3442, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0)

1m29.691028673s ago: executing program 1 (id=2189):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

1m14.658880791s ago: executing program 35 (id=2189):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

1m7.952883708s ago: executing program 4 (id=2455):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810035000000000bf0fffffe00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

1m7.872418071s ago: executing program 4 (id=2458):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000a00", 0x36}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0xfe)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x160, 0xb, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x160}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040))

1m7.794570927s ago: executing program 6 (id=2462):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xf9, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4)
sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420b4648c", 0x14}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='!~u&00\t&&')
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2}}}], 0x20}, 0x0)
sendmsg$inet(r7, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], 0x38}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m7.723527224s ago: executing program 5 (id=2463):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x2, 0x88)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e0000000000000000020001000000000000000a007fffffff030005002b00000002000000ac1414aa0000000000000000170008007805"], 0x108}, 0x1, 0x7}, 0x0)

1m7.61381856s ago: executing program 6 (id=2464):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2882, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2020)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100e68, 0xc4d, 0x4001, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

1m7.38316631s ago: executing program 6 (id=2465):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020003ffe42037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004)

1m7.382936866s ago: executing program 6 (id=2466):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x404, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x3400, 0x0, 0x0, 0x8, 0x6f3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m6.499578642s ago: executing program 4 (id=2467):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40))
r0 = gettid()
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa66d, 0x4, @perf_config_ext={0x8, 0x8}, 0x0, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xb, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd00170", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x8}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1m6.499166355s ago: executing program 6 (id=2468):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

1m6.421976094s ago: executing program 5 (id=2469):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa0}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m6.421533171s ago: executing program 5 (id=2470):
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0xffffe, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x7, 0x1}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}]}, 0x94)
close(r3)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4)

1m6.354707452s ago: executing program 4 (id=2471):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x0)

1m6.354367414s ago: executing program 4 (id=2472):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20)

1m6.292677975s ago: executing program 6 (id=2473):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000d, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="6a0ac4ff0000000071104f000000000095000000001e0000af4fb8331220767ae2c45d36d35917cf1edafd3b0ff9bb4c7d77efcaca200afb7cc6edd4a37c27d7181c173e3c2e65070000000000000022ba8682e12314f1527751169abe7b1c4601d05ebe71bce08c9057667c9417f518377862243c2612fd344888487cf1ef2e55627b72d1a65c081d68fa3e0fc605f7c6a55cab97028ea18b70b700f5c0d9aa7561bf128c71"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000700000002"], 0x87)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x200}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)

1m6.29219446s ago: executing program 5 (id=2474):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20)

1m6.171324373s ago: executing program 4 (id=2475):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0)
close(0x3)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000780)='syz1\x00', 0x1ff)

59.416689764s ago: executing program 5 (id=2476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

59.416073642s ago: executing program 5 (id=2477):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x1a, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000000)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socket$kcm(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f9010000480", @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x23, r3}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)

47.85261697s ago: executing program 36 (id=2475):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0)
close(0x3)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000780)='syz1\x00', 0x1ff)

4.303971728s ago: executing program 37 (id=2473):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000d, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="6a0ac4ff0000000071104f000000000095000000001e0000af4fb8331220767ae2c45d36d35917cf1edafd3b0ff9bb4c7d77efcaca200afb7cc6edd4a37c27d7181c173e3c2e65070000000000000022ba8682e12314f1527751169abe7b1c4601d05ebe71bce08c9057667c9417f518377862243c2612fd344888487cf1ef2e55627b72d1a65c081d68fa3e0fc605f7c6a55cab97028ea18b70b700f5c0d9aa7561bf128c71"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000700000002"], 0x87)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x200}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)

0s ago: executing program 38 (id=2477):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x1a, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000000)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socket$kcm(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f9010000480", @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x23, r3}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

) entered blocking state
[   56.122484][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.130928][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.134040][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.147186][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.150350][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.316867][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.358047][ T5850] veth0_vlan: entered promiscuous mode
[   56.372880][ T5850] veth1_vlan: entered promiscuous mode
[   56.390770][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.407781][ T5850] veth0_macvtap: entered promiscuous mode
[   56.421926][ T5850] veth1_macvtap: entered promiscuous mode
[   56.425111][ T5849] Bluetooth: hci0: command tx timeout
[   56.438343][ T5849] Bluetooth: hci1: command tx timeout
[   56.445750][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.462159][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.478337][ T5846] veth0_vlan: entered promiscuous mode
[   56.488920][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.498225][ T5724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.502035][ T5724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.509168][ T5849] Bluetooth: hci2: command tx timeout
[   56.518879][ T5724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.532704][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.548897][ T5846] veth1_vlan: entered promiscuous mode
[   56.589609][ T5846] veth0_macvtap: entered promiscuous mode
[   56.597249][ T5853] veth0_vlan: entered promiscuous mode
[   56.620514][ T5846] veth1_macvtap: entered promiscuous mode
[   56.636145][ T5853] veth1_vlan: entered promiscuous mode
[   56.660103][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.665876][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.668608][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.681089][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.690955][ T5853] veth0_macvtap: entered promiscuous mode
[   56.711153][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.715210][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.724746][ T5853] veth1_macvtap: entered promiscuous mode
[   56.727229][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.731528][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.737427][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.742185][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.742700][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.759419][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.795333][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.799467][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.818119][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.829543][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.840183][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.844535][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.850032][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.900094][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.904521][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.952275][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.953815][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.957509][ T5910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.975211][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.013173][    C1] hrtimer: interrupt took 30032 ns
[   57.029281][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.033984][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.268174][ T5910] syz.2.3 (5910) used greatest stack depth: 19728 bytes left
[   57.514284][ T5926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.595605][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.601732][ T5927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7'.
[   58.308591][ T5945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.467497][ T5951] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17'.
[   58.545518][ T5849] Bluetooth: hci1: command tx timeout
[   58.545851][ T5236] Bluetooth: hci0: command tx timeout
[   58.596995][ T5236] Bluetooth: hci2: command tx timeout
[   58.600357][ T5953] Illegal XDP return value 4294967283 on prog  (id 8) dev N/A, expect packet loss!
[   58.911591][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   58.918426][ T5961] netlink: 'syz.2.21': attribute type 2 has an invalid length.
[   59.090505][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'.
[   59.599112][ T5971] openvswitch: netlink: Missing valid actions attribute.
[   59.601772][ T5971] openvswitch: netlink: Actions may not be safe on all matching packets
[   59.853647][ T5978] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.201800][ T6004] IPv6: NLM_F_CREATE should be specified when creating new route
[   60.231393][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   60.518250][ T6026] Zero length message leads to an empty skb
[   60.584035][ T5849] Bluetooth: hci1: command tx timeout
[   60.586493][ T5236] Bluetooth: hci0: command tx timeout
[   60.672605][ T5236] Bluetooth: hci2: command tx timeout
[   61.355755][ T6059] netlink: 'syz.2.55': attribute type 39 has an invalid length.
[   62.697570][ T5849] Bluetooth: hci1: command tx timeout
[   62.698424][ T5236] Bluetooth: hci0: command tx timeout
[   62.761036][ T5236] Bluetooth: hci2: command tx timeout
[   63.086251][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.224592][ T6076] __nla_validate_parse: 4 callbacks suppressed
[   63.224604][ T6076] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.64'.
[   66.508338][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'.
[   66.532936][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.565826][ T6101] bridge_slave_0 (unregistering): left allmulticast mode
[   66.574460][ T6101] bridge_slave_0 (unregistering): left promiscuous mode
[   66.577524][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.700482][ T6110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.80'.
[   66.773630][ T6112] netlink: 198328 bytes leftover after parsing attributes in process `syz.0.81'.
[   66.777709][ T6112] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   66.782906][ T6112] netlink: 'syz.0.81': attribute type 2 has an invalid length.
[   67.431612][ T6116] syz.0.83 (6116) used greatest stack depth: 18856 bytes left
[   67.715430][ T6142] netlink: 211 bytes leftover after parsing attributes in process `syz.2.93'.
[   67.947529][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'.
[   68.261932][ T6188] netlink: 'syz.0.113': attribute type 21 has an invalid length.
[   68.267530][ T6188] netlink: 152 bytes leftover after parsing attributes in process `syz.0.113'.
[   68.281356][ T6186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.304879][ T6186] netlink: 'syz.1.111': attribute type 1 has an invalid length.
[   68.362486][ T6192] : renamed from dummy0 (while UP)
[   68.399578][ T6196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.506242][ T6206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.122'.
[   68.510623][ T6206] netlink: 67 bytes leftover after parsing attributes in process `syz.0.122'.
[   68.612254][ T6212] netlink: 208192 bytes leftover after parsing attributes in process `syz.0.125'.
[   68.617518][ T6212] netlink: 'syz.0.125': attribute type 1 has an invalid length.
[   68.941719][ T6236] syz.1.137 (6236) used obsolete PPPIOCDETACH ioctl
[   69.276649][ T6252] ref_ctr_offset mismatch. inode: 0x103 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[   70.053015][ T6289] netlink: 14 bytes leftover after parsing attributes in process `syz.1.161'.
[   70.106144][ T6290] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   70.115734][ T6290] netlink: 'syz.1.161': attribute type 2 has an invalid length.
[   70.696179][ T6312] netlink: 52 bytes leftover after parsing attributes in process `syz.2.169'.
[   71.072062][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.075185][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.380401][ T6343] netlink: 'syz.1.182': attribute type 2 has an invalid length.
[   71.383972][ T6343] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   71.387181][ T6343] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.182'.
[   71.391061][ T6343] nbd: couldn't find a device at index 16
[   71.652028][ T6360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.679884][ T6367] netlink: 'syz.2.187': attribute type 10 has an invalid length.
[   71.720620][ T6367] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   71.872643][ T6382] validate_nla: 1 callbacks suppressed
[   71.872653][ T6382] netlink: 'syz.1.191': attribute type 17 has an invalid length.
[   71.878604][ T6382] netlink: 160 bytes leftover after parsing attributes in process `syz.1.191'.
[   72.101951][ T6396] netlink: 'syz.1.197': attribute type 10 has an invalid length.
[   72.287639][ T6396] team0: Port device geneve1 added
[   72.597235][ T6405] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.199'.
[   72.889257][ T6420] netlink: 148 bytes leftover after parsing attributes in process `syz.0.204'.
[   72.955056][ T5236] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   73.371496][ T6435] __nla_validate_parse: 1 callbacks suppressed
[   73.371515][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[   73.481980][ T6445] netlink: 'syz.1.214': attribute type 21 has an invalid length.
[   73.760681][ T6452] netlink: 'syz.0.216': attribute type 16 has an invalid length.
[   73.765840][ T6452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.216'.
[   74.983864][ T5849] Bluetooth: hci1: command tx timeout
[   74.988215][ T6484] netlink: 'syz.1.232': attribute type 21 has an invalid length.
[   75.024894][ T6488] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.234'.
[   75.194710][ T6502] netlink: 'syz.2.241': attribute type 13 has an invalid length.
[   75.282460][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'.
[   75.418844][ T6522] bridge_slave_1: left allmulticast mode
[   75.420804][ T6522] bridge_slave_1: left promiscuous mode
[   75.422750][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.429631][ T6524] netlink: 'syz.2.251': attribute type 10 has an invalid length.
[   75.451056][ T6522] bridge_slave_0: left allmulticast mode
[   75.453812][ T6522] bridge_slave_0: left promiscuous mode
[   75.456515][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.627209][ T6524] macvlan0: entered promiscuous mode
[   75.629360][ T6524] macvlan0: entered allmulticast mode
[   75.680996][ T6524] veth1_vlan: entered allmulticast mode
[   75.771778][ T6524] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   75.778875][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[   76.237445][ T6545] netlink: 104 bytes leftover after parsing attributes in process `syz.0.258'.
[   76.742046][ T6549] =======================================================
[   76.742046][ T6549] WARNING: The mand mount option has been deprecated and
[   76.742046][ T6549]          and is ignored by this kernel. Remove the mand
[   76.742046][ T6549]          option from the mount to silence this warning.
[   76.742046][ T6549] =======================================================
[   79.041276][ T6553] netlink: 'syz.0.262': attribute type 21 has an invalid length.
[   79.049923][ T6553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.262'.
[   79.882081][ T6580] netlink: 188 bytes leftover after parsing attributes in process `syz.2.274'.
[   79.980849][ T6587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.276'.
[   80.341085][ T5849] Bluetooth: hci2: ISO packet for unknown connection handle 0
[   80.345434][ T5849] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   80.649992][ T6608] netlink: 'syz.1.286': attribute type 39 has an invalid length.
[   81.308970][   T51] cfg80211: failed to load regulatory.db
[   82.039171][ T6630] netlink: 'syz.2.295': attribute type 10 has an invalid length.
[   82.054298][ T6630] veth1_vlan: left allmulticast mode
[   82.180610][ T6634] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.297'.
[   82.257422][ T6637] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.298'.
[   82.925996][ T6647] netlink: 'syz.0.302': attribute type 10 has an invalid length.
[   82.929739][ T6647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.302'.
[   82.946230][ T6647] batman_adv: batadv0: Adding interface: virt_wifi0
[   82.949147][ T6647] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.964018][ T6647] batman_adv: batadv0: Interface activated: virt_wifi0
[   83.177699][ T6663] delete_channel: no stack
[   83.179460][ T6663] delete_channel: no stack
[   83.276799][ T6661] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   83.353674][ T6667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.361352][ T6672] netlink: 'syz.1.312': attribute type 11 has an invalid length.
[   83.382675][ T6672] netlink: 168 bytes leftover after parsing attributes in process `syz.1.312'.
[   83.445219][ T6680] netlink: 'syz.0.318': attribute type 1 has an invalid length.
[   83.811205][ T6692] syzkaller0: entered promiscuous mode
[   83.823890][ T6692] syzkaller0: entered allmulticast mode
[   84.198738][ T6724] openvswitch: netlink: IP tunnel dst address not specified
[   84.204828][ T6720] netlink: 'syz.1.333': attribute type 10 has an invalid length.
[   84.208300][ T6720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.333'.
[   84.212523][ T6720] veth0_vlan: entered allmulticast mode
[   84.228182][ T6720] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   84.306853][ T6731] netlink: 136 bytes leftover after parsing attributes in process `syz.0.338'.
[   84.310331][ T6733] netlink: 124 bytes leftover after parsing attributes in process `syz.2.339'.
[   84.314717][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.339'.
[   84.409139][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'.
[   84.476792][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[   84.480642][ T6741] netlink: 348 bytes leftover after parsing attributes in process `syz.1.344'.
[   84.505472][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[   84.516693][ T6741] netlink: 348 bytes leftover after parsing attributes in process `syz.1.344'.
[   84.526296][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[   84.695329][ T6758] netlink: 'syz.2.352': attribute type 10 has an invalid length.
[   85.622720][ T6819] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   86.379215][ T6851] netlink: 'syz.2.393': attribute type 10 has an invalid length.
[   86.382627][ T6851] netlink: 'syz.2.393': attribute type 19 has an invalid length.
[   87.314337][ T6873] netlink: 'syz.1.403': attribute type 1 has an invalid length.
[   87.317182][ T6873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.372176][ T6853] syz.2.394: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   87.379478][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) 
[   87.379489][ T6853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.379494][ T6853] Call Trace:
[   87.379497][ T6853]  <TASK>
[   87.379500][ T6853]  dump_stack_lvl+0x189/0x250
[   87.379513][ T6853]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.379521][ T6853]  ? __pfx__printk+0x10/0x10
[   87.379530][ T6853]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.379538][ T6853]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.379546][ T6853]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   87.379554][ T6853]  warn_alloc+0x214/0x310
[   87.379566][ T6853]  ? __pfx_warn_alloc+0x10/0x10
[   87.379579][ T6853]  ? __get_vm_area_node+0x28f/0x300
[   87.379588][ T6853]  ? hash_netport4_resize+0x235/0x1b60
[   87.379598][ T6853]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   87.379617][ T6853]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   87.379628][ T6853]  ? rcu_is_watching+0x15/0xb0
[   87.379636][ T6853]  ? hash_netport4_resize+0x235/0x1b60
[   87.379642][ T6853]  ? hash_netport4_resize+0x235/0x1b60
[   87.379647][ T6853]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   87.379656][ T6853]  ? hash_netport4_resize+0x235/0x1b60
[   87.379666][ T6853]  hash_netport4_resize+0x235/0x1b60
[   87.379672][ T6853]  ? hash_netport4_uadt+0xc97/0xf30
[   87.379680][ T6853]  ? __pfx_hash_netport4_add+0x10/0x10
[   87.379687][ T6853]  ? __pfx_hash_netport4_uadt+0x10/0x10
[   87.379697][ T6853]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   87.379708][ T6853]  call_ad+0x44e/0xb00
[   87.379719][ T6853]  ? __pfx_call_ad+0x10/0x10
[   87.379732][ T6853]  ? __nla_parse+0x40/0x60
[   87.379743][ T6853]  ip_set_ad+0x791/0x930
[   87.379780][ T6853]  ? __pfx_ip_set_ad+0x10/0x10
[   87.379804][ T6853]  nfnetlink_rcv_msg+0xb4d/0x1130
[   87.379813][ T6853]  ? perf_swevent_get_recursion_context+0xa6/0x100
[   87.379820][ T6853]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   87.379835][ T6853]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   87.379853][ T6853]  ? perf_trace_preemptirq_template+0xa3/0x340
[   87.379869][ T6853]  netlink_rcv_skb+0x208/0x470
[   87.379878][ T6853]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   87.379887][ T6853]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   87.379900][ T6853]  ? bpf_lsm_capable+0x9/0x20
[   87.379908][ T6853]  ? security_capable+0x7e/0x2e0
[   87.379920][ T6853]  nfnetlink_rcv+0x26a/0x2520
[   87.379929][ T6853]  ? __pfx_perf_trace_lock+0x10/0x10
[   87.379935][ T6853]  ? migrate_enable+0x29c/0x3c0
[   87.379943][ T6853]  ? trace_call_bpf+0xb7/0x850
[   87.379950][ T6853]  ? trace_call_bpf+0xb7/0x850
[   87.379958][ T6853]  ? trace_call_bpf+0xb7/0x850
[   87.379964][ T6853]  ? trace_call_bpf+0xb7/0x850
[   87.379971][ T6853]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   87.379977][ T6853]  ? trace_call_bpf+0xb7/0x850
[   87.379983][ T6853]  ? __pfx___dev_queue_xmit+0x10/0x10
[   87.379992][ T6853]  ? __pfx_trace_call_bpf+0x10/0x10
[   87.380002][ T6853]  ? perf_trace_run_bpf_submit+0x100/0x170
[   87.380011][ T6853]  ? perf_trace_lock+0x2f8/0x3b0
[   87.380017][ T6853]  ? __skb_clone+0x483/0x7a0
[   87.380026][ T6853]  ? __pfx_perf_trace_lock+0x10/0x10
[   87.380032][ T6853]  ? skb_clone+0x246/0x3a0
[   87.380040][ T6853]  ? __netlink_deliver_tap+0x807/0x850
[   87.380048][ T6853]  ? netlink_deliver_tap+0x2e/0x1b0
[   87.380059][ T6853]  ? netlink_deliver_tap+0x2e/0x1b0
[   87.380071][ T6853]  netlink_unicast+0x82f/0x9e0
[   87.380082][ T6853]  ? __pfx_netlink_unicast+0x10/0x10
[   87.380091][ T6853]  ? netlink_sendmsg+0x642/0xb30
[   87.380099][ T6853]  ? skb_put+0x11b/0x210
[   87.380106][ T6853]  netlink_sendmsg+0x805/0xb30
[   87.380118][ T6853]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.380127][ T6853]  ? perf_trace_run_bpf_submit+0x100/0x170
[   87.380133][ T6853]  ? aa_sock_msg_perm+0xf1/0x1d0
[   87.380141][ T6853]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   87.380148][ T6853]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.380157][ T6853]  __sock_sendmsg+0x21c/0x270
[   87.380166][ T6853]  ____sys_sendmsg+0x505/0x830
[   87.380176][ T6853]  ? __pfx_____sys_sendmsg+0x10/0x10
[   87.380186][ T6853]  ? import_iovec+0x74/0xa0
[   87.380195][ T6853]  ___sys_sendmsg+0x21f/0x2a0
[   87.380202][ T6853]  ? __pfx____sys_sendmsg+0x10/0x10
[   87.380217][ T6853]  ? __fget_files+0x2a/0x420
[   87.380228][ T6853]  ? __fget_files+0x2a/0x420
[   87.380233][ T6853]  ? __fget_files+0x3a0/0x420
[   87.380242][ T6853]  __x64_sys_sendmsg+0x19b/0x260
[   87.380256][ T6853]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   87.380262][ T6853]  ? perf_trace_preemptirq_template+0xa3/0x340
[   87.380274][ T6853]  ? rcu_is_watching+0x15/0xb0
[   87.380282][ T6853]  ? do_syscall_64+0xbe/0x3b0
[   87.380294][ T6853]  do_syscall_64+0xfa/0x3b0
[   87.380301][ T6853]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.380310][ T6853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.380316][ T6853]  ? exc_page_fault+0x9f/0xf0
[   87.380325][ T6853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.380331][ T6853] RIP: 0033:0x7f9b04b8ebe9
[   87.380338][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.380344][ T6853] RSP: 002b:00007f9b05923038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   87.380352][ T6853] RAX: ffffffffffffffda RBX: 00007f9b04dc5fa0 RCX: 00007f9b04b8ebe9
[   87.380357][ T6853] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004
[   87.380362][ T6853] RBP: 00007f9b04c11e19 R08: 0000000000000000 R09: 0000000000000000
[   87.380366][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.380369][ T6853] R13: 00007f9b04dc6038 R14: 00007f9b04dc5fa0 R15: 00007fffee7ff668
[   87.380380][ T6853]  </TASK>
[   87.380383][ T6853] Mem-Info:
[   87.578490][ T6853] active_anon:5792 inactive_anon:0 isolated_anon:0
[   87.578490][ T6853]  active_file:1321 inactive_file:38234 isolated_file:0
[   87.578490][ T6853]  unevictable:1768 dirty:143 writeback:0
[   87.578490][ T6853]  slab_reclaimable:9321 slab_unreclaimable:52893
[   87.578490][ T6853]  mapped:18134 shmem:2436 pagetables:915
[   87.578490][ T6853]  sec_pagetables:0 bounce:0
[   87.578490][ T6853]  kernel_misc_reclaimable:0
[   87.578490][ T6853]  free:303970 free_pcp:14955 free_cma:0
[   87.594668][ T6853] Node 0 active_anon:12236kB inactive_anon:0kB active_file:3740kB inactive_file:65792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33644kB dirty:560kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5488kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.605800][ T6853] Node 1 active_anon:10932kB inactive_anon:0kB active_file:1544kB inactive_file:87144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38892kB dirty:12kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5840kB pagetables:1248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.617395][ T6853] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.640668][ T6853] lowmem_reserve[]: 0 811 811 811 811
[   87.643310][ T6853] Node 0 DMA32 free:359204kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12100kB inactive_anon:0kB active_file:3740kB inactive_file:65792kB unevictable:3536kB writepending:560kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:34904kB local_pcp:17052kB free_cma:0kB
[   87.656638][ T6853] lowmem_reserve[]: 0 0 0 0 0
[   87.658593][ T6853] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.671364][ T6853] lowmem_reserve[]: 0 0 854 854 854
[   87.674027][ T6853] Node 1 Normal free:382316kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10932kB inactive_anon:0kB active_file:1544kB inactive_file:87144kB unevictable:3536kB writepending:12kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:26216kB local_pcp:16408kB free_cma:0kB
[   87.687949][ T6853] lowmem_reserve[]: 0 0 0 0 0
[   87.689966][ T6853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   87.695078][ T6853] Node 0 DMA32: 1371*4kB 
[   87.711782][ T5849] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   87.717185][ T6853] (UM) 285*8kB (UME) 107*16kB (M) 113*32kB (UME) 130*64kB (UME) 27*128kB (UME) 14*256kB (UME) 10*512kB (UM) 6*1024kB (ME) 2*2048kB (UM) 77*4096kB (M) = 359204kB
[   87.728531][ T6853] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   87.739205][ T6853] Node 1 Normal: 93*4kB (UE) 193*8kB (U) 389*16kB (U) 255*32kB (UME) 137*64kB (UME) 33*128kB (UME) 7*256kB (UME) 5*512kB (M) 6*1024kB (UME) 3*2048kB (ME) 82*4096kB (UM) = 381804kB
[   87.753002][ T6853] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.759866][ T6853] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.766143][ T6853] 41991 total pagecache pages
[   87.768208][ T6853] 0 pages in swap cache
[   87.770050][ T6853] Free swap  = 124996kB
[   87.771873][ T6853] Total swap = 124996kB
[   87.775110][ T6853] 786301 pages RAM
[   87.776814][ T6853] 0 pages HighMem/MovableOnly
[   87.778830][ T6853] 241330 pages reserved
[   87.781373][ T6853] 0 pages cma reserved
[   88.448487][ T6934] netlink: 'syz.2.431': attribute type 3 has an invalid length.
[   88.579207][ T6944] netlink: 'syz.2.435': attribute type 21 has an invalid length.
[   88.972010][ T6954] netlink: 'syz.2.438': attribute type 64 has an invalid length.
[   89.268781][ T6956] __nla_validate_parse: 11 callbacks suppressed
[   89.268860][ T6956] netlink: 104 bytes leftover after parsing attributes in process `syz.2.439'.
[   89.319900][ T6962] netlink: 5 bytes leftover after parsing attributes in process `syz.0.442'.
[   89.325700][ T6962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.352004][ T6964] netlink: 76 bytes leftover after parsing attributes in process `syz.1.443'.
[   89.544603][ T5181] wlan1: Trigger new scan to find an IBSS to join
[   89.582417][ T6973] openvswitch: netlink: Missing valid actions attribute.
[   89.586326][ T6973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.685185][ T6977] netlink: 160 bytes leftover after parsing attributes in process `syz.0.449'.
[   90.704284][ T7032] netlink: 'syz.2.473': attribute type 21 has an invalid length.
[   90.707807][ T7032] netlink: 'syz.2.473': attribute type 4 has an invalid length.
[   90.711023][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.473'.
[   91.129987][ T7046] netlink: 'syz.2.479': attribute type 14 has an invalid length.
[   91.661193][ T7059] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.484'.
[   92.152055][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   92.593859][  T165] wlan1: Trigger new scan to find an IBSS to join
[   92.619419][ T7113] netlink: 'syz.1.504': attribute type 10 has an invalid length.
[   92.771285][ T7128] veth1_macvtap: left promiscuous mode
[   92.845038][ T7130] veth1_macvtap: entered promiscuous mode
[   92.848573][ T7130] macsec0: entered promiscuous mode
[   92.850795][ T7130] macsec0: entered allmulticast mode
[   92.852881][ T7130] veth1_macvtap: entered allmulticast mode
[   92.966790][ T7139] netlink: 'syz.2.515': attribute type 21 has an invalid length.
[   93.186214][ T7154] netlink: 'syz.1.522': attribute type 2 has an invalid length.
[   93.189309][ T7154] netlink: 'syz.1.522': attribute type 1 has an invalid length.
[   93.192364][ T7154] netlink: 'syz.1.522': attribute type 8 has an invalid length.
[   93.201093][ T7154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.522'.
[   93.336301][ T7162] netlink: 'syz.2.525': attribute type 21 has an invalid length.
[   93.339621][ T7162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.525'.
[   93.347809][ T7162] netlink: 'syz.2.525': attribute type 4 has an invalid length.
[   93.350777][ T7162] netlink: 3 bytes leftover after parsing attributes in process `syz.2.525'.
[   93.506849][  T739] wlan1: Creating new IBSS network, BSSID e6:cc:f5:09:ab:25
[   94.108685][ T7214] netlink: 156 bytes leftover after parsing attributes in process `syz.1.549'.
[   94.502380][ T7246] __nla_validate_parse: 1 callbacks suppressed
[   94.502396][ T7246] netlink: 55 bytes leftover after parsing attributes in process `syz.0.562'.
[   95.157789][ T5849] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[   95.244120][ T5849] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   95.246829][ T5849] Bluetooth: hci2: connection err: -111
[   95.254849][ T7276] @: renamed from bond_slave_0 (while UP)
[   96.296444][ T7291] validate_nla: 6 callbacks suppressed
[   96.296462][ T7291] netlink: 'syz.2.583': attribute type 8 has an invalid length.
[   96.310625][ T7291] netlink: 'syz.2.583': attribute type 6 has an invalid length.
[   96.315417][ T7291] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.583'.
[   96.618279][ T7315] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   96.631060][ T7315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   96.775737][ T7327] syz.1.599 uses obsolete (PF_INET,SOCK_PACKET)
[   97.088394][ T7327] netlink: 14 bytes leftover after parsing attributes in process `syz.1.599'.
[   97.116212][ T7347] netlink: 'syz.2.607': attribute type 39 has an invalid length.
[   97.172105][ T7353] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.610'.
[   97.436501][ T7372] netlink: 124 bytes leftover after parsing attributes in process `syz.1.619'.
[   97.635724][ T7379] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   97.959510][ T7402] netlink: 'syz.1.633': attribute type 11 has an invalid length.
[   97.968378][ T7402] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.633'.
[   98.176279][ T7401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.496521][ T7437] netlink: 'syz.2.648': attribute type 27 has an invalid length.
[   98.708488][ T7446] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[   98.790627][ T7454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.656'.
[   99.337469][ T7493] sctp: [Deprecated]: syz.2.673 (pid 7493) Use of int in max_burst socket option deprecated.
[   99.337469][ T7493] Use struct sctp_assoc_value instead
[  100.058641][ T7528] netlink: 11382 bytes leftover after parsing attributes in process `syz.2.689'.
[  100.656611][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'.
[  100.662404][ T7558] netlink: 'syz.1.701': attribute type 40 has an invalid length.
[  100.681828][ T7555] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  100.711344][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'.
[  100.724903][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'.
[  100.728614][ T7560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.703'.
[  100.824267][ T7568] netlink: 56 bytes leftover after parsing attributes in process `syz.0.706'.
[  100.905035][ T7580] tmpfs: Bad value for 'mode'
[  100.918002][ T7581] netlink: 'syz.1.712': attribute type 15 has an invalid length.
[  100.920621][ T7581] netlink: 11318 bytes leftover after parsing attributes in process `syz.1.712'.
[  100.934769][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'.
[  101.058652][ T7599] netlink: 'syz.2.721': attribute type 4 has an invalid length.
[  101.088806][ T7603] netlink: 160 bytes leftover after parsing attributes in process `syz.0.722'.
[  101.123134][ T7603] netlink: 'syz.0.722': attribute type 10 has an invalid length.
[  101.200527][ T7603] batman_adv: batadv0: Adding interface: netdevsim0
[  101.203693][ T7603] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.212243][ T7603] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  101.255155][ T7615] netlink: 60 bytes leftover after parsing attributes in process `syz.2.728'.
[  101.381408][ T7627] netlink: 'syz.1.734': attribute type 2 has an invalid length.
[  101.386022][ T7627] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[  101.388840][ T7627] netlink: 'syz.1.734': attribute type 2 has an invalid length.
[  101.391489][ T7627] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[  101.415819][ T7631] netlink: 'syz.1.736': attribute type 21 has an invalid length.
[  101.418516][ T7631] netlink: 'syz.1.736': attribute type 4 has an invalid length.
[  101.538432][ T7642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.541162][ T7642] IPv6: NLM_F_CREATE should be set when creating new route
[  101.544178][ T7642] IPv6: NLM_F_CREATE should be set when creating new route
[  101.547172][ T7642] IPv6: NLM_F_CREATE should be set when creating new route
[  101.777284][ T7657] netlink: 'syz.2.747': attribute type 1 has an invalid length.
[  101.961015][ T7670] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.011985][ T7675] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  103.349472][ T7737] netlink: 'syz.1.785': attribute type 10 has an invalid length.
[  103.350457][ T7731] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.358178][ T7731] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.367609][ T7737] 8021q: adding VLAN 0 to HW filter on device team0
[  103.375672][ T7737] bond0: (slave team0): Enslaving as an active interface with an up link
[  104.300165][ T7777] : renamed from gre0 (while UP)
[  104.340113][ T7782] netlink: zone id is out of range
[  104.342543][ T7782] netlink: zone id is out of range
[  104.349062][ T7779] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[  104.357992][ T7782] netlink: del zone limit has 4 unknown bytes
[  105.010381][ T7799] netlink: 'syz.2.810': attribute type 1 has an invalid length.
[  105.617915][ T7820] __nla_validate_parse: 9 callbacks suppressed
[  105.617932][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'.
[  105.797168][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.822'.
[  105.860820][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.823'.
[  106.138885][ T7835] netlink: 17 bytes leftover after parsing attributes in process `syz.0.824'.
[  106.817549][ T7829] vcan0: entered promiscuous mode
[  106.820047][ T7829] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  106.867901][ T7837] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.825'.
[  107.138442][ T5849] Bluetooth: hci0: unexpected event 0x3d length: 15 > 14
[  107.916565][ T7848] validate_nla: 5 callbacks suppressed
[  107.916622][ T7848] netlink: 'syz.0.830': attribute type 39 has an invalid length.
[  107.985587][ T5849] Bluetooth: hci2: ISO packet too small
[  108.088683][ T7859] netlink: 10 bytes leftover after parsing attributes in process `syz.2.835'.
[  108.155998][ T7864] netlink: 'syz.1.836': attribute type 21 has an invalid length.
[  108.159536][ T7864] netlink: 168 bytes leftover after parsing attributes in process `syz.1.836'.
[  108.269985][ T7867] netlink: 'syz.1.838': attribute type 4 has an invalid length.
[  108.272569][ T7867] netlink: 152 bytes leftover after parsing attributes in process `syz.1.838'.
[  108.301170][ T7867] .`: renamed from bond0 (while UP)
[  108.387438][ T7869] netlink: 104 bytes leftover after parsing attributes in process `syz.2.839'.
[  108.458062][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'.
[  109.028028][ T5849] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  109.115177][ T7884] netlink: 'syz.0.845': attribute type 10 has an invalid length.
[  109.830077][ T7913] syzkaller0: entered promiscuous mode
[  109.832406][ T7913] syzkaller0: entered allmulticast mode
[  110.801114][ T7928] __nla_validate_parse: 1 callbacks suppressed
[  110.801129][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'.
[  110.910922][ T7932] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.866'.
[  110.915417][ T7932] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.866'.
[  111.109750][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  111.241719][ T7943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.870'.
[  111.450876][ T7955] netlink: 182 bytes leftover after parsing attributes in process `syz.0.875'.
[  111.850229][ T7970] netlink: 294 bytes leftover after parsing attributes in process `syz.0.881'.
[  112.122300][ T5849] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  112.402465][ T7991] netlink: 'syz.0.891': attribute type 10 has an invalid length.
[  112.411751][ T7991] netlink: 55 bytes leftover after parsing attributes in process `syz.0.891'.
[  112.437753][ T7991] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  112.495751][ T7991] batman_adv: batadv0: Removing interface: virt_wifi0
[  113.300242][ T8007] netlink: 'syz.0.898': attribute type 1 has an invalid length.
[  113.325025][ T8009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.899'.
[  114.183514][ T5849] Bluetooth: hci0: command tx timeout
[  114.362858][ T8041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.913'.
[  114.366401][ T8041] openvswitch: netlink: Missing key (keys=40, expected=100)
[  114.608463][ T8050] netlink: 'syz.2.917': attribute type 12 has an invalid length.
[  115.814007][ T8096] __nla_validate_parse: 3 callbacks suppressed
[  115.814030][ T8096] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.938'.
[  116.273635][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  117.118864][ T8118] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  117.330206][ T8123] netlink: 14 bytes leftover after parsing attributes in process `syz.2.950'.
[  117.589473][ T8139] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.958'.
[  117.594453][ T8139] netlink: 62239 bytes leftover after parsing attributes in process `syz.1.958'.
[  117.621895][ T8141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'.
[  117.627159][ T8141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'.
[  117.631582][ T8141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'.
[  117.849119][ T8152] syzkaller1: tun_chr_ioctl cmd 1074025677
[  117.851857][ T8152] syzkaller1: linktype set to 823
[  118.418272][ T8174] netlink: 'syz.2.975': attribute type 10 has an invalid length.
[  118.494282][ T8174] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  118.717656][ T8178] netlink: 'syz.1.977': attribute type 2 has an invalid length.
[  118.912431][ T8189] netlink: 'syz.1.982': attribute type 4 has an invalid length.
[  118.916475][ T8189] netlink: 112 bytes leftover after parsing attributes in process `syz.1.982'.
[  118.958295][ T8191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.983'.
[  118.996934][ T8192] option changes via remount are deprecated (pid=8186 comm=syz.2.981)
[  119.329443][ T8202] netlink: 'syz.2.988': attribute type 17 has an invalid length.
[  119.335385][ T8202] netlink: 'syz.2.988': attribute type 16 has an invalid length.
[  119.338958][ T8202] netlink: 152 bytes leftover after parsing attributes in process `syz.2.988'.
[  120.342361][ T8222] warn_alloc: 1 callbacks suppressed
[  120.342419][ T8222] syz.2.995: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  120.441205][ T8222] CPU: 1 UID: 0 PID: 8222 Comm: syz.2.995 Not tainted syzkaller #0 PREEMPT(full) 
[  120.441225][ T8222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.441233][ T8222] Call Trace:
[  120.441238][ T8222]  <TASK>
[  120.441244][ T8222]  dump_stack_lvl+0x189/0x250
[  120.441265][ T8222]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  120.441285][ T8222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.441326][ T8222]  ? __pfx__printk+0x10/0x10
[  120.441343][ T8222]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.441359][ T8222]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.441378][ T8222]  warn_alloc+0x214/0x310
[  120.441399][ T8222]  ? stack_depot_save_flags+0x41b/0x860
[  120.441417][ T8222]  ? __pfx_warn_alloc+0x10/0x10
[  120.441435][ T8222]  ? kasan_save_track+0x4f/0x80
[  120.441451][ T8222]  ? xskq_create+0x56/0x170
[  120.441464][ T8222]  ? xsk_init_queue+0xb0/0x110
[  120.441477][ T8222]  ? xsk_setsockopt+0x57b/0x8d0
[  120.441489][ T8222]  ? do_sock_setsockopt+0x17c/0x1b0
[  120.441499][ T8222]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  120.441510][ T8222]  ? do_syscall_64+0xfa/0x3b0
[  120.441522][ T8222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.441542][ T8222]  __vmalloc_node_range_noprof+0x125/0x12f0
[  120.441598][ T8222]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  120.441620][ T8222]  ? __kasan_kmalloc+0x93/0xb0
[  120.441637][ T8222]  vmalloc_user_noprof+0xad/0xf0
[  120.441653][ T8222]  ? xskq_create+0xbf/0x170
[  120.441669][ T8222]  xskq_create+0xbf/0x170
[  120.441686][ T8222]  xsk_init_queue+0xb0/0x110
[  120.441701][ T8222]  xsk_setsockopt+0x57b/0x8d0
[  120.441718][ T8222]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.441735][ T8222]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.441748][ T8222]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.441761][ T8222]  ? do_sock_setsockopt+0x15e/0x1b0
[  120.441774][ T8222]  ? xsk_setsockopt+0x5/0x8d0
[  120.441786][ T8222]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.441800][ T8222]  do_sock_setsockopt+0x17c/0x1b0
[  120.441815][ T8222]  __x64_sys_setsockopt+0x13f/0x1b0
[  120.441830][ T8222]  do_syscall_64+0xfa/0x3b0
[  120.441847][ T8222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.441856][ T8222]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  120.441872][ T8222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.441883][ T8222] RIP: 0033:0x7f9b04b8ebe9
[  120.441894][ T8222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.441903][ T8222] RSP: 002b:00007f9b02df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  120.441915][ T8222] RAX: ffffffffffffffda RBX: 00007f9b04dc6090 RCX: 00007f9b04b8ebe9
[  120.441924][ T8222] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d
[  120.441931][ T8222] RBP: 00007f9b04c11e19 R08: 0000000000000004 R09: 0000000000000000
[  120.441937][ T8222] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  120.441944][ T8222] R13: 00007f9b04dc6128 R14: 00007f9b04dc6090 R15: 00007fffee7ff668
[  120.441962][ T8222]  </TASK>
[  120.442368][ T8222] Mem-Info:
[  121.179969][ T8222] active_anon:5684 inactive_anon:0 isolated_anon:0
[  121.179969][ T8222]  active_file:1321 inactive_file:38247 isolated_file:0
[  121.179969][ T8222]  unevictable:1768 dirty:187 writeback:0
[  121.179969][ T8222]  slab_reclaimable:9516 slab_unreclaimable:52509
[  121.179969][ T8222]  mapped:18094 shmem:2444 pagetables:1015
[  121.179969][ T8222]  sec_pagetables:0 bounce:0
[  121.179969][ T8222]  kernel_misc_reclaimable:0
[  121.179969][ T8222]  free:309676 free_pcp:12442 free_cma:0
[  121.211469][ T8222] Node 0 active_anon:11808kB inactive_anon:0kB active_file:3740kB inactive_file:65828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33720kB dirty:516kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5432kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.225448][ T8222] Node 1 active_anon:10792kB inactive_anon:0kB active_file:1544kB inactive_file:87160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38656kB dirty:232kB writeback:0kB shmem:4880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5864kB pagetables:1408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.239478][ T8222] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.257571][ T8222] lowmem_reserve[]: 0 811 811 811 811
[  121.260784][ T8222] Node 0 DMA32 free:389896kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11876kB inactive_anon:0kB active_file:3740kB inactive_file:65828kB unevictable:3536kB writepending:516kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:19476kB local_pcp:4288kB free_cma:0kB
[  121.274263][ T8222] lowmem_reserve[]: 0 0 0 0 0
[  121.280634][ T8222] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.295271][ T8222] lowmem_reserve[]: 0 0 854 854 854
[  121.297825][ T8222] Node 1 Normal free:374640kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10860kB inactive_anon:0kB active_file:1544kB inactive_file:87160kB unevictable:3536kB writepending:232kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30708kB local_pcp:19748kB free_cma:0kB
[  121.311995][ T8222] lowmem_reserve[]: 0 0 0 0 0
[  121.314481][ T8222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  121.320593][ T8222] Node 0 DMA32: 495*4kB (UM) 398*8kB (UME) 220*16kB (UME) 156*32kB (UME) 190*64kB (UME) 76*128kB (UME) 27*256kB (UM) 16*512kB (UM) 7*1024kB (UME) 6*2048kB (UM) 78*4096kB (UM) = 389612kB
[  121.329315][ T8222] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  121.337852][ T8222] Node 1 Normal: 323*4kB (UE) 453*8kB (UE) 522*16kB (UME) 460*32kB (UME) 120*64kB (UME) 24*128kB (UME) 4*256kB (UM) 6*512kB (UM) 4*1024kB (ME) 4*2048kB (UME) 78*4096kB (M) = 374612kB
[  121.346328][ T8222] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.350418][ T8222] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.355225][ T8222] 42012 total pagecache pages
[  121.365974][ T8222] 0 pages in swap cache
[  121.367771][ T8222] Free swap  = 124996kB
[  121.369605][ T8222] Total swap = 124996kB
[  121.371405][ T8222] 786301 pages RAM
[  121.373055][ T8222] 0 pages HighMem/MovableOnly
[  121.375975][ T8222] 241330 pages reserved
[  121.377828][ T8222] 0 pages cma reserved
[  121.416328][ T8245] netlink: 'syz.2.1006': attribute type 10 has an invalid length.
[  121.419344][ T8245] veth1_vlan: left promiscuous mode
[  121.438934][ T8245] veth1_vlan: entered promiscuous mode
[  121.442888][ T8245] team0: Port device macvlan1 added
[  121.899377][ T8258] __nla_validate_parse: 6 callbacks suppressed
[  121.899451][ T8258] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1012'.
[  122.569105][ T8264] net veth1_virt_wifi : renamed from virt_wifi0
[  123.220058][ T8266] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  123.943317][ T4894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  124.214205][ T8279] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1021'.
[  124.219332][ T8279] netlink: 'syz.1.1021': attribute type 2 has an invalid length.
[  124.222509][ T8279] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1021'.
[  124.249464][ T8279] netlink: 'syz.1.1021': attribute type 2 has an invalid length.
[  124.253029][ T8279] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1021'.
[  124.351997][ T8284] netlink: 'syz.1.1023': attribute type 10 has an invalid length.
[  124.361211][ T8284] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1023'.
[  124.371843][ T8284] .`: entered promiscuous mode
[  124.375047][ T8284] @: entered promiscuous mode
[  124.430519][ T8284] bond_slave_1: entered promiscuous mode
[  124.437374][ T8284] team0: entered promiscuous mode
[  124.439877][ T8284] team_slave_0: entered promiscuous mode
[  124.444391][ T8284] team_slave_1: entered promiscuous mode
[  124.447966][ T8284] geneve1: entered promiscuous mode
[  124.460107][ T8284] 8021q: adding VLAN 0 to HW filter on device .`
[  125.438672][ T8318] : entered promiscuous mode
[  125.482481][ T8320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1038'.
[  126.486098][ T8329] netlink: del zone limit has 4 unknown bytes
[  126.500788][ T8331] netlink: 'syz.1.1043': attribute type 21 has an invalid length.
[  126.505002][ T8331] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1043'.
[  127.427561][ T8358] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1055'.
[  127.432854][ T8358] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1055'.
[  127.600492][ T8360] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1056'.
[  127.651821][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
[  127.656301][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
[  127.789549][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'.
[  128.021312][ T8377] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1063'.
[  128.115933][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1064'.
[  129.264827][ T8383] infiniband syz!: set active
[  129.268475][ T8383] infiniband syz!: added team_slave_0
[  129.271768][ T8383] syz!: rxe_create_cq: returned err = -12
[  129.276409][ T8383] infiniband syz!: Couldn't create ib_mad CQ
[  129.279118][ T8383] infiniband syz!: Couldn't open port 1
[  129.292116][ T8383] RDS/IB: syz!: added
[  129.296924][ T8383] smc: adding ib device syz! with port count 1
[  129.299761][ T8383] smc:    ib device syz! port 1 has pnetid 
[  129.927933][ T8404] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1072'.
[  130.004849][ T8406] netlink: 'syz.1.1073': attribute type 21 has an invalid length.
[  130.007529][ T8406] netlink: 'syz.1.1073': attribute type 4 has an invalid length.
[  130.077292][ T8414] netlink: 'syz.1.1078': attribute type 33 has an invalid length.
[  130.080030][ T8414] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1078'.
[  130.119235][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.123457][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.127567][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.132494][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.138150][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.488472][ T8417] chnl_net:caif_netlink_parms(): no params data found
[  130.519068][ T8443] netlink: 'syz.1.1088': attribute type 3 has an invalid length.
[  130.554574][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.557451][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.559961][ T8417] bridge_slave_0: entered allmulticast mode
[  130.562971][ T8417] bridge_slave_0: entered promiscuous mode
[  130.566774][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.569141][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.571901][ T8417] bridge_slave_1: entered allmulticast mode
[  130.575680][ T8417] bridge_slave_1: entered promiscuous mode
[  130.602956][ T8417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.608129][ T8417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.611602][ T8448] netlink: 'syz.1.1089': attribute type 21 has an invalid length.
[  130.629421][ T8417] team0: Port device team_slave_0 added
[  130.633524][ T8417] team0: Port device team_slave_1 added
[  130.651713][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.654320][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.663855][ T8417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.668405][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.670707][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.679767][ T8417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.713808][ T8417] hsr_slave_0: entered promiscuous mode
[  130.716316][ T8417] hsr_slave_1: entered promiscuous mode
[  130.718921][ T8417] debugfs: 'hsr0' already exists in 'hsr'
[  130.720855][ T8417] Cannot create hsr debugfs directory
[  130.812094][ T8459] raw_sendmsg: syz.1.1094 forgot to set AF_INET. Fix it!
[  130.826311][ T8417] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  130.831231][ T8417] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  130.835834][ T8417] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  130.840089][ T8417] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  130.872558][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.875417][ T8417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.878315][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.881055][ T8417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.922530][ T8417] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.932453][ T4894] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.936110][ T4894] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.944461][ T8417] 8021q: adding VLAN 0 to HW filter on device team0
[  130.952802][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.955756][ T4894] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.964282][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.966696][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.968834][ T8471] netlink: 'syz.1.1097': attribute type 11 has an invalid length.
[  131.100869][ T8417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.131840][ T8417] veth0_vlan: entered promiscuous mode
[  131.137812][ T8417] veth1_vlan: entered promiscuous mode
[  131.160018][ T8417] veth0_macvtap: entered promiscuous mode
[  131.166366][ T8417] veth1_macvtap: entered promiscuous mode
[  131.176715][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.181419][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.196193][ T5724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.199020][ T5724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.219273][ T5724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.222351][ T5724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.199051][ T5849] Bluetooth: hci3: command tx timeout
[  132.515329][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.517659][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.724180][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.726784][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.752423][ T5181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.756402][ T5181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.273798][ T5849] Bluetooth: hci3: command tx timeout
[  135.039662][ T8606] __nla_validate_parse: 5 callbacks suppressed
[  135.039679][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  135.341113][ T8615] netlink: 'syz.2.1159': attribute type 10 has an invalid length.
[  135.395750][ T8615] veth1_macvtap (unregistering): left allmulticast mode
[  135.402063][ T8617] netlink: 'syz.2.1159': attribute type 10 has an invalid length.
[  135.592039][ T8617] team0: Device hsr_slave_0 failed to register rx_handler
[  136.343676][ T5236] Bluetooth: hci3: command tx timeout
[  136.911021][ T8644] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1169'.
[  138.475216][ T5849] Bluetooth: hci3: command tx timeout
[  138.590529][ T5849] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  138.601151][ T5849] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  138.796698][ T8690] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1191'.
[  139.198455][ T8701] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1196'.
[  139.258916][ T8707] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  139.406506][ T8716] netlink: 'syz.1.1203': attribute type 11 has an invalid length.
[  139.410119][ T8716] netlink: 'syz.1.1203': attribute type 11 has an invalid length.
[  139.462327][ T8718] netlink: 'syz.1.1204': attribute type 1 has an invalid length.
[  140.112718][ T8747] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[  140.699218][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'.
[  140.702215][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'.
[  140.706456][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'.
[  141.651883][ T8796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'.
[  143.788305][ T8830] netlink: 'syz.2.1253': attribute type 12 has an invalid length.
[  143.793060][ T8830] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.1253'.
[  143.842505][ T8834] netlink: 'syz.1.1255': attribute type 1 has an invalid length.
[  143.899226][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'.
[  144.107947][ T8848] netlink: 'syz.1.1261': attribute type 21 has an invalid length.
[  144.110889][ T8848] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1261'.
[  144.214481][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'.
[  145.246658][ T5849] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  145.250383][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  145.256457][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[  145.256480][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.256490][ T5849] Workqueue: hci1 hci_rx_work
[  145.256513][ T5849] Call Trace:
[  145.256518][ T5849]  <TASK>
[  145.256526][ T5849]  dump_stack_lvl+0x189/0x250
[  145.256547][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.256570][ T5849]  ? __pfx__printk+0x10/0x10
[  145.256594][ T5849]  ? kernfs_path_from_node+0x250/0x290
[  145.256610][ T5849]  ? kernfs_path_from_node+0x2f/0x290
[  145.256628][ T5849]  sysfs_create_dir_ns+0x259/0x280
[  145.256646][ T5849]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  145.256663][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  145.256684][ T5849]  kobject_add_internal+0x59f/0xb40
[  145.256710][ T5849]  kobject_add+0x155/0x220
[  145.256732][ T5849]  ? __pfx_kobject_add+0x10/0x10
[  145.256750][ T5849]  ? _raw_spin_unlock+0x28/0x50
[  145.256769][ T5849]  ? get_device_parent+0x366/0x3a0
[  145.256786][ T5849]  device_add+0x408/0xb50
[  145.256802][ T5849]  hci_conn_add_sysfs+0xd5/0x1e0
[  145.256818][ T5849]  le_conn_complete_evt+0xc3a/0x1220
[  145.256841][ T5849]  ? bt_warn+0x10b/0x160
[  145.256855][ T5849]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  145.256872][ T5849]  ? __pfx_bt_warn+0x10/0x10
[  145.256882][ T5849]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  145.256905][ T5849]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  145.256920][ T5849]  ? skb_pull_data+0xfb/0x200
[  145.256938][ T5849]  hci_le_enh_conn_complete_evt+0x189/0x470
[  145.256986][ T5849]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  145.257008][ T5849]  hci_event_packet+0x78f/0x1200
[  145.257026][ T5849]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  145.257047][ T5849]  ? __pfx_hci_event_packet+0x10/0x10
[  145.257064][ T5849]  ? kcov_remote_start+0x4d3/0x7f0
[  145.257083][ T5849]  ? lockdep_hardirqs_on+0x90/0x150
[  145.257103][ T5849]  ? hci_send_to_monitor+0xe2/0x570
[  145.257124][ T5849]  hci_rx_work+0x46a/0xe80
[  145.257145][ T5849]  ? process_scheduled_works+0x9ef/0x17b0
[  145.257159][ T5849]  process_scheduled_works+0xae1/0x17b0
[  145.257194][ T5849]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.257220][ T5849]  worker_thread+0x8a0/0xda0
[  145.257234][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.257256][ T5849]  ? __kthread_parkme+0x7b/0x200
[  145.257277][ T5849]  kthread+0x711/0x8a0
[  145.257293][ T5849]  ? __pfx_worker_thread+0x10/0x10
[  145.257304][ T5849]  ? __pfx_kthread+0x10/0x10
[  145.257320][ T5849]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.257334][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.257349][ T5849]  ? __pfx_kthread+0x10/0x10
[  145.257364][ T5849]  ret_from_fork+0x3fc/0x770
[  145.257380][ T5849]  ? __pfx_ret_from_fork+0x10/0x10
[  145.257398][ T5849]  ? __switch_to_asm+0x39/0x70
[  145.257412][ T5849]  ? __switch_to_asm+0x33/0x70
[  145.257426][ T5849]  ? __pfx_kthread+0x10/0x10
[  145.257442][ T5849]  ret_from_fork_asm+0x1a/0x30
[  145.257470][ T5849]  </TASK>
[  145.257494][ T5849] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  145.394508][ T5849] Bluetooth: hci1: failed to register connection device
[  146.581495][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'.
[  147.255107][ T8906] siw: device registration error -23
[  147.463537][ T5849] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  147.469133][ T5236] Bluetooth: hci1: command tx timeout
[  147.527385][ T8917] netlink: 'syz.2.1290': attribute type 5 has an invalid length.
[  147.559739][ T8919] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  147.575883][ T8919] syzkaller0: entered promiscuous mode
[  147.578475][ T8919] syzkaller0: entered allmulticast mode
[  148.830389][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1300'.
[  148.847279][ T8940] netlink: 'syz.1.1301': attribute type 21 has an invalid length.
[  148.850322][ T8940] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1301'.
[  148.959823][ T8948] netlink: 'syz.2.1305': attribute type 23 has an invalid length.
[  149.016384][ T8952] netlink: 'syz.1.1306': attribute type 29 has an invalid length.
[  149.020386][ T8952] netlink: 'syz.1.1306': attribute type 29 has an invalid length.
[  149.331279][ T8959] syzkaller0: entered promiscuous mode
[  149.354178][ T8959] syzkaller0: entered allmulticast mode
[  150.580708][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  150.586114][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  150.589139][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  150.603910][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  150.613583][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.728523][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.772847][ T8991] netlink: 'syz.2.1321': attribute type 2 has an invalid length.
[  151.779031][ T8991] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1321'.
[  151.787274][ T8991] nbd: must specify a device to reconfigure
[  151.800763][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.837573][ T8990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1322'.
[  151.898663][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.910003][ T8973] chnl_net:caif_netlink_parms(): no params data found
[  151.972726][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.980687][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.983106][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.987474][ T8973] bridge_slave_0: entered allmulticast mode
[  151.990399][ T8973] bridge_slave_0: entered promiscuous mode
[  151.994573][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.997037][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.999451][ T8973] bridge_slave_1: entered allmulticast mode
[  152.002212][ T8973] bridge_slave_1: entered promiscuous mode
[  152.032400][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.041222][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.091636][ T8973] team0: Port device team_slave_0 added
[  152.116270][ T8973] team0: Port device team_slave_1 added
[  152.182158][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.193541][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.220828][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.235254][   T13] bridge_slave_1: left allmulticast mode
[  152.237601][   T13] bridge_slave_1: left promiscuous mode
[  152.240531][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.248011][   T13] bridge_slave_0: left allmulticast mode
[  152.250097][   T13] bridge_slave_0: left promiscuous mode
[  152.252153][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.663523][ T5849] Bluetooth: hci4: command tx timeout
[  152.707938][ T9039] sctp: [Deprecated]: syz.2.1337 (pid 9039) Use of struct sctp_assoc_value in delayed_ack socket option.
[  152.707938][ T9039] Use struct sctp_sack_info instead
[  152.724239][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.730097][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.735441][   T13] bond0 (unregistering): Released all slaves
[  152.743917][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.747113][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.759630][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.889783][ T8973] hsr_slave_0: entered promiscuous mode
[  152.894288][ T8973] hsr_slave_1: entered promiscuous mode
[  152.897404][ T8973] debugfs: 'hsr0' already exists in 'hsr'
[  152.900015][ T8973] Cannot create hsr debugfs directory
[  153.245602][   T13] hsr_slave_0: left promiscuous mode
[  153.248421][   T13] hsr_slave_1: left promiscuous mode
[  153.251257][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.256330][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.260640][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.267743][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.295203][   T13] veth1_macvtap: left promiscuous mode
[  153.298665][   T13] veth0_macvtap: left promiscuous mode
[  153.302977][   T13] veth1_vlan: left promiscuous mode
[  153.308669][   T13] veth0_vlan: left promiscuous mode
[  153.516410][ T9047] netlink: 'syz.2.1338': attribute type 2 has an invalid length.
[  153.520372][ T9047] netlink: 'syz.2.1338': attribute type 1 has an invalid length.
[  153.552706][ T9049] sock: sock_timestamping_bind_phc: sock not bind to device
[  153.616094][ T9047] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1338'.
[  153.709748][   T13] team0 (unregistering): Port device team_slave_1 removed
[  153.746979][   T13] team0 (unregistering): Port device team_slave_0 removed
[  153.875794][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[  154.413391][ T9056] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1340'.
[  154.595752][ T8973] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  154.743669][ T5849] Bluetooth: hci4: command tx timeout
[  155.313624][ T5181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  155.335289][ T8973] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  155.377323][ T8973] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  155.385720][ T8973] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  155.525164][ T9104] netlink: 'syz.2.1354': attribute type 21 has an invalid length.
[  155.528105][ T9104] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1354'.
[  155.531003][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.536987][ T9104] netlink: 'syz.2.1354': attribute type 4 has an invalid length.
[  155.544620][ T9104] netlink: 'syz.2.1354': attribute type 5 has an invalid length.
[  155.547840][ T9104] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1354'.
[  155.568945][ T8973] 8021q: adding VLAN 0 to HW filter on device team0
[  155.576661][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.579247][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.592743][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.595973][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.986374][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.122362][ T9125] netlink: 'syz.2.1358': attribute type 3 has an invalid length.
[  156.143844][ T9125] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1358'.
[  156.589444][ T8973] veth0_vlan: entered promiscuous mode
[  156.607119][ T8973] veth1_vlan: entered promiscuous mode
[  156.665025][ T8973] veth0_macvtap: entered promiscuous mode
[  156.676482][ T8973] veth1_macvtap: entered promiscuous mode
[  156.700767][ T9132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.705424][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.716201][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.728678][ T5724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.736590][ T5724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.750583][ T5724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.757101][ T5724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.814421][ T9140] x_tables: ip_tables: udp match: only valid for protocol 17
[  156.823536][ T5849] Bluetooth: hci4: command tx timeout
[  156.832888][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.839383][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.863030][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.870155][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.349530][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1375'.
[  157.358277][ T9174] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  157.448205][ T9180] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1378'.
[  157.515165][ T9180] hsr_slave_0: left promiscuous mode
[  157.521729][ T9180] hsr_slave_1: left promiscuous mode
[  158.903274][ T5849] Bluetooth: hci4: command tx timeout
[  159.083741][ T9198] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1385'.
[  159.266003][ T9205] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1386'.
[  159.273828][ T9205] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1386'.
[  159.308548][ T9209] netlink: 'syz.2.1389': attribute type 8 has an invalid length.
[  159.343833][ T9207] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1388'.
[  159.491647][ T9218] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1386'.
[  159.815946][ T9227] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.820329][ T9227] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.885398][ T5849] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  159.887915][ T5849] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  160.442598][ T9255] netlink: 'syz.4.1408': attribute type 21 has an invalid length.
[  160.468403][ T9257] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1409'.
[  160.471538][ T9257] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1409'.
[  160.859182][ T9281] netlink: 'syz.2.1418': attribute type 4 has an invalid length.
[  160.869458][ T9281] netlink: 'syz.2.1418': attribute type 16 has an invalid length.
[  160.872848][ T9281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1418'.
[  160.949143][ T9286] netlink: 'syz.2.1421': attribute type 291 has an invalid length.
[  161.961702][ T9299] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  164.892311][ T5849] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  166.239307][ T9358] __nla_validate_parse: 1 callbacks suppressed
[  166.239318][ T9358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1445'.
[  166.296901][ T9356] delete_channel: no stack
[  166.299973][ T9356] delete_channel: no stack
[  166.321772][ T9353] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1444'.
[  166.552467][ T9377] syzkaller0: entered promiscuous mode
[  166.557315][ T9377] syzkaller0: entered allmulticast mode
[  166.566217][ T9379] netlink: 'syz.2.1455': attribute type 10 has an invalid length.
[  168.276269][ T5849] Bluetooth: hci1: unexpected event 0x30 length: 82 > 3
[  168.612166][ T9421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1473'.
[  168.928161][ T9426] syzkaller0: entered promiscuous mode
[  168.930454][ T9426] syzkaller0: entered allmulticast mode
[  169.734968][ T9443] netlink: 'syz.2.1482': attribute type 3 has an invalid length.
[  169.748021][ T9443] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1482'.
[  170.520992][ T9459] syzkaller0: entered promiscuous mode
[  170.522892][ T9459] syzkaller0: entered allmulticast mode
[  171.610752][ T9469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.381351][ T9485] delete_channel: no stack
[  172.383718][ T9485] delete_channel: no stack
[  172.446181][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  172.466551][ T9489] netlink: 'syz.4.1502': attribute type 6 has an invalid length.
[  172.469752][ T9489] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1502'.
[  172.556666][ T9494] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1505'.
[  172.592496][ T5849] Bluetooth: hci1: unexpected event for opcode 0x0000
[  172.650638][ T9500] TCP: TCP_TX_DELAY enabled
[  172.896488][ T9515] netlink: 'syz.2.1515': attribute type 13 has an invalid length.
[  172.899143][ T9515] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1515'.
[  172.916200][ T9515] erspan0: refused to change device tx_queue_len
[  172.918486][ T9515] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  173.796837][ T9540] C: renamed from team_slave_0 (while UP)
[  173.802155][ T9540] netlink: 'syz.1.1526': attribute type 3 has an invalid length.
[  173.812800][ T9540] netlink: 'syz.1.1526': attribute type 1 has an invalid length.
[  173.817365][ T9540] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  173.957839][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'.
[  173.963118][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'.
[  173.968091][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'.
[  174.091935][ T9562] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1537'.
[  174.096044][ T9562] openvswitch: netlink: Message has 4 unknown bytes.
[  174.228212][ T9569] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.231824][ T9569] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.238400][ T9571] netlink: 'syz.4.1541': attribute type 1 has an invalid length.
[  174.238419][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'.
[  174.657294][ T9584] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1545'.
[  174.968474][ T9593] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1547'.
[  175.456350][ T9607] netlink: 'syz.1.1553': attribute type 1 has an invalid length.
[  175.914740][ T9625] netlink: 'syz.4.1559': attribute type 10 has an invalid length.
[  176.224863][ T9642] netlink: 'syz.2.1568': attribute type 1 has an invalid length.
[  176.227509][ T9642] netlink: 'syz.2.1568': attribute type 2 has an invalid length.
[  177.213083][ T5849] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  177.218215][ T5849] Bluetooth: hci1: Injecting HCI hardware error event
[  177.223694][ T5849] Bluetooth: hci1: hardware error 0x00
[  177.843441][ T9671] xt_time: unknown flags 0xf4
[  179.139119][ T9709] netlink: 'syz.2.1597': attribute type 13 has an invalid length.
[  179.143406][ T9709] netlink: 'syz.2.1597': attribute type 17 has an invalid length.
[  179.309704][ T9709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.395672][ T5849] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  180.138968][ T9730] __nla_validate_parse: 4 callbacks suppressed
[  180.138979][ T9730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1606'.
[  180.146051][ T9730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1606'.
[  180.149942][ T9730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1606'.
[  180.332133][ T9752] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1615'.
[  180.413105][ T9760] netlink: 'syz.1.1619': attribute type 2 has an invalid length.
[  180.501833][ T9768] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1623'.
[  180.660358][ T9779] sysfs: Unknown parameter 'subj_type'
[  180.844141][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  180.848318][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  184.612332][ T5236] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  185.007762][ T9817] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1644'.
[  185.101322][ T9821] netlink: 'syz.1.1646': attribute type 10 has an invalid length.
[  185.107548][ T9821] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1646'.
[  185.179516][ T9823] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1647'.
[  185.481750][ T9842] netlink: 'syz.1.1655': attribute type 21 has an invalid length.
[  185.496677][ T9843] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  186.027197][ T9861] netlink: 'syz.1.1664': attribute type 21 has an invalid length.
[  186.146357][ T9865] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1666'.
[  186.248943][ T9865] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1666'.
[  186.347935][ T4894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  186.591992][ T9875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1671'.
[  187.057927][ T9888] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1677'.
[  187.200689][ T9904] netlink: 'syz.4.1685': attribute type 2 has an invalid length.
[  188.128563][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'.
[  188.797243][ T9936] netlink: 'syz.4.1700': attribute type 12 has an invalid length.
[  188.799914][ T9936] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1700'.
[  188.926576][ T9947] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1706'.
[  189.027306][ T9954] netlink: 'syz.4.1709': attribute type 3 has an invalid length.
[  189.030703][ T9954] netlink: 'syz.4.1709': attribute type 1 has an invalid length.
[  189.042227][ T9954] netlink: 191264 bytes leftover after parsing attributes in process `syz.4.1709'.
[  189.211853][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'.
[  189.643030][ T9974] netlink: 'syz.4.1717': attribute type 11 has an invalid length.
[  190.944781][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'.
[  191.174274][T10009] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1734'.
[  192.135908][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'.
[  193.113791][T10046] netlink: 'syz.1.1750': attribute type 10 has an invalid length.
[  193.277513][T10046] team0: Device ipvlan1 failed to register rx_handler
[  193.462404][T10050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1751'.
[  193.482521][T10051] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1751'.
[  193.988246][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.990983][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.332941][T10071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.859956][T10089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.087516][T10098] netlink: 'syz.4.1773': attribute type 62 has an invalid length.
[  195.198779][T10100] netlink: 'syz.4.1774': attribute type 2 has an invalid length.
[  195.201835][T10100] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1774'.
[  195.299164][T10102] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1775'.
[  195.564950][T10115] netlink: 'syz.1.1781': attribute type 10 has an invalid length.
[  196.064848][ T9706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.069266][ T9706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.073656][ T9706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.083700][ T9706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.086730][ T9706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.199417][T10147] netlink: 'syz.4.1791': attribute type 10 has an invalid length.
[  196.256491][T10145] siw: device registration error -23
[  196.272377][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.379585][T10153] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1793'.
[  196.405514][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.451182][T10133] chnl_net:caif_netlink_parms(): no params data found
[  196.460061][T10163] delete_channel: no stack
[  196.461922][T10163] delete_channel: no stack
[  196.471030][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.541830][T10165] netlink: 'syz.4.1798': attribute type 25 has an invalid length.
[  196.547511][T10165] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.1798'.
[  196.562929][   T13] bond0: (slave netdevsim0): Releasing backup interface
[  196.567362][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.611455][T10133] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.617910][T10133] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.623507][T10133] bridge_slave_0: entered allmulticast mode
[  196.626821][T10133] bridge_slave_0: entered promiscuous mode
[  196.632566][T10133] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.635693][T10133] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.638664][T10133] bridge_slave_1: entered allmulticast mode
[  196.642323][T10133] bridge_slave_1: entered promiscuous mode
[  196.739411][T10133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.761797][T10133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.810301][   T13] bridge_slave_1: left allmulticast mode
[  196.812377][   T13] bridge_slave_1: left promiscuous mode
[  196.817514][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.197352][T10193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.266813][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.276950][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.288448][   T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  197.293992][   T13] bond0 (unregistering): Released all slaves
[  197.325148][T10133] team0: Port device team_slave_0 added
[  197.329984][T10197] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1810'.
[  197.347336][T10197] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  197.359540][T10133] team0: Port device team_slave_1 added
[  197.400380][   T13] : left promiscuous mode
[  197.432285][T10133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.441319][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.463445][T10133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.481353][T10133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.488907][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.510655][T10133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.691876][T10133] hsr_slave_0: entered promiscuous mode
[  197.696048][T10133] hsr_slave_1: entered promiscuous mode
[  197.698642][T10133] debugfs: 'hsr0' already exists in 'hsr'
[  197.700705][T10133] Cannot create hsr debugfs directory
[  197.908353][T10133] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  197.926031][T10133] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  197.931116][T10133] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  197.939466][T10133] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  198.104678][ T9706] Bluetooth: hci3: command tx timeout
[  198.156262][T10133] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.202051][   T13] hsr_slave_0: left promiscuous mode
[  198.204988][   T13] hsr_slave_1: left promiscuous mode
[  198.207782][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.211006][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.218081][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.221353][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.232557][   T13] veth1_vlan: left promiscuous mode
[  198.239601][   T13] veth0_vlan: left promiscuous mode
[  198.339522][   T13] team0 (unregistering): Port device macvlan1 removed
[  198.590153][T10223] netlink: 'syz.1.1816': attribute type 16 has an invalid length.
[  198.601928][T10223] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1816'.
[  198.660404][   T13] team0 (unregistering): Port device team_slave_1 removed
[  198.689628][   T13] team0 (unregistering): Port device team_slave_0 removed
[  198.693351][  T165] smc: removing ib device syz!
[  198.975896][T10133] 8021q: adding VLAN 0 to HW filter on device team0
[  199.005506][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.008652][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.018331][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.020872][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.379152][T10133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.540269][T10254] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1827'.
[  199.669135][T10133] veth0_vlan: entered promiscuous mode
[  199.676852][T10133] veth1_vlan: entered promiscuous mode
[  199.717404][T10133] veth0_macvtap: entered promiscuous mode
[  199.744794][T10133] veth1_macvtap: entered promiscuous mode
[  199.762117][T10133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.771390][T10133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.794947][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.836436][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.846907][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.861953][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.929704][ T4894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.932901][ T4894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.993824][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.996424][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.183628][ T9706] Bluetooth: hci3: command tx timeout
[  200.725627][T10316] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1853'.
[  200.779073][T10319] netlink: 'syz.1.1854': attribute type 3 has an invalid length.
[  200.782868][T10319] netlink: 199752 bytes leftover after parsing attributes in process `syz.1.1854'.
[  200.878276][T10326] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1858'.
[  201.021325][T10334] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1863'.
[  201.071583][T10340] IPv6: NLM_F_CREATE should be specified when creating new route
[  202.398061][ T9706] Bluetooth: hci3: command tx timeout
[  203.850121][T10419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.423462][ T9706] Bluetooth: hci3: command tx timeout
[  204.750582][T10434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1906'.
[  204.755521][T10434] unsupported nlmsg_type 40
[  204.857076][T10440] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.1910'.
[  204.906056][T10444] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1912'.
[  204.910476][T10446] netlink: 'syz.4.1913': attribute type 1 has an invalid length.
[  205.015817][T10444] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1912'.
[  205.665884][T10477] netlink: 'syz.5.1928': attribute type 1 has an invalid length.
[  205.672853][T10477] netlink: 'syz.5.1928': attribute type 2 has an invalid length.
[  207.211635][T10452] syzkaller0: entered promiscuous mode
[  207.215225][T10452] syzkaller0: entered allmulticast mode
[  207.351864][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'.
[  207.355534][T10499] openvswitch: netlink: Missing key (keys=40, expected=80)
[  207.385170][T10497] netlink: 'syz.5.1936': attribute type 1 has an invalid length.
[  207.396310][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'.
[  207.403342][T10497] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1936'.
[  208.050307][T10510] : entered promiscuous mode
[  208.122058][T10517] xt_limit: Overflow, try lower: 324382443/4200216956
[  208.639293][T10525] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode
[  208.643622][T10526] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode
[  208.669296][T10528] netlink: 'syz.1.1949': attribute type 13 has an invalid length.
[  208.672863][T10528] netlink: 'syz.1.1949': attribute type 58 has an invalid length.
[  208.677619][T10528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1949'.
[  208.800806][T10538] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1954'.
[  209.055614][T10550] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1959'.
[  209.468597][T10563] : port 1(veth0_to_bridge) entered blocking state
[  209.471689][T10563] : port 1(veth0_to_bridge) entered disabled state
[  209.477578][T10563] veth0_to_bridge: entered allmulticast mode
[  209.481689][T10563] veth0_to_bridge: entered promiscuous mode
[  210.104739][T10574] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  210.305934][T10582] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1972'.
[  210.319905][T10584] : renamed from team_slave_1 (while UP)
[  210.360200][T10582] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1972'.
[  210.410573][T10582] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1972'.
[  210.870973][T10619] tmpfs: Bad value for 'gid'
[  210.872996][T10619] tmpfs: Bad value for 'gid'
[  211.027230][T10623] netlink: 'syz.1.1989': attribute type 9 has an invalid length.
[  211.030736][T10623] netlink: 211924 bytes leftover after parsing attributes in process `syz.1.1989'.
[  211.182387][T10636] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1996'.
[  211.298371][T10640] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1997'.
[  212.356391][T10670] tQ6\bY4: renamed from lo (while UP)
[  212.611714][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2018'.
[  212.622369][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2018'.
[  214.712188][T10774] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2055'.
[  214.767012][T10773] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2054'.
[  214.872370][T10783] netlink: 'syz.5.2060': attribute type 10 has an invalid length.
[  214.877046][T10783] batman_adv: batadv0: Adding interface: vlan1
[  214.879462][T10783] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.891860][T10783] batman_adv: batadv0: Interface activated: vlan1
[  215.046826][T10791] netlink: 'syz.4.2063': attribute type 1 has an invalid length.
[  215.216841][T10801] netlink: 'syz.4.2067': attribute type 4 has an invalid length.
[  215.246066][T10801] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  215.321856][T10807] __nla_validate_parse: 3 callbacks suppressed
[  215.321866][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'.
[  215.496510][ T9706] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1
[  215.496888][ T9706] Bluetooth: hci4: hardware error 0x00
[  216.493104][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'.
[  216.804818][T10861] xt_limit: Overflow, try lower: 271964/0
[  217.061899][T10869] netlink: 'syz.5.2098': attribute type 10 has an invalid length.
[  217.374986][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  217.553016][ T9706] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  217.641152][T10869] team0 (unregistering): Port device team_slave_0 removed
[  217.668904][T10869] team0 (unregistering): Port device team_slave_1 removed
[  217.679701][T10864] delete_channel: no stack
[  217.871147][T10895] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2109'.
[  217.877696][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2109'.
[  217.881710][T10895] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2109'.
[  217.886550][T10895] netlink: 'syz.5.2109': attribute type 2 has an invalid length.
[  217.889716][T10895] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2109'.
[  218.068436][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2116'.
[  218.622467][T10954] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2138'.
[  218.661059][T10957] netlink: 'syz.5.2139': attribute type 2 has an invalid length.
[  218.664481][T10957] netlink: 130532 bytes leftover after parsing attributes in process `syz.5.2139'.
[  218.697088][T10961] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2141'.
[  218.837572][T10975] netlink: 'syz.4.2147': attribute type 3 has an invalid length.
[  219.109968][   T33] audit: type=1107 audit(1757339621.260:2): pid=10995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  219.189784][T10998] netlink: 'syz.1.2158': attribute type 21 has an invalid length.
[  219.298438][T10998] netlink: 'syz.1.2158': attribute type 6 has an invalid length.
[  220.176588][T11041] : port 1(vlan0) entered blocking state
[  220.179088][T11041] : port 1(vlan0) entered disabled state
[  220.181171][T11041] vlan0: entered allmulticast mode
[  220.185186][T11041] vlan0: entered promiscuous mode
[  220.197198][T11033] : port 1(vlan0) entered blocking state
[  220.200118][T11033] : port 1(vlan0) entered forwarding state
[  220.639427][T11070] netlink: 'syz.4.2188': attribute type 6 has an invalid length.
[  221.410953][T11086] __nla_validate_parse: 5 callbacks suppressed
[  221.410967][T11086] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2195'.
[  221.825224][T11102] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.2201'.
[  222.055824][T11113] netlink: 'syz.4.2206': attribute type 21 has an invalid length.
[  222.059286][T11113] netlink: 'syz.4.2206': attribute type 4 has an invalid length.
[  222.062790][T11113] netlink: 14453 bytes leftover after parsing attributes in process `syz.4.2206'.
[  222.400830][T11127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2211'.
[  222.404938][T11127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2211'.
[  223.197790][T11153] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2224'.
[  223.242260][T11155] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2225'.
[  223.714028][T11174] netlink: 'syz.5.2234': attribute type 1 has an invalid length.
[  223.778214][   T33] audit: type=1107 audit(1757339625.930:3): pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lJ$'
[  223.847440][T11184] netlink: 'syz.4.2239': attribute type 11 has an invalid length.
[  223.850746][T11184] netlink: 'syz.4.2239': attribute type 11 has an invalid length.
[  224.099139][T11204] netlink: 'syz.5.2248': attribute type 21 has an invalid length.
[  224.184170][T11210] netlink: 'syz.4.2251': attribute type 21 has an invalid length.
[  224.187590][T11210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2251'.
[  224.492112][T11232] netlink: 'syz.5.2260': attribute type 29 has an invalid length.
[  224.666679][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'.
[  227.288965][T11276] netlink: 'syz.4.2278': attribute type 3 has an invalid length.
[  227.292400][T11276] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2278'.
[  227.936633][T11289] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  228.311400][T11297] netlink: 'syz.4.2288': attribute type 10 has an invalid length.
[  229.666470][T11297] team0: Device ipvlan1 failed to register rx_handler
[  229.956009][T11314] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2295'.
[  230.061903][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2297'.
[  230.087805][T11319] netlink: 'syz.5.2297': attribute type 10 has an invalid length.
[  230.091077][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2297'.
[  230.104214][T11319] dummy0: entered promiscuous mode
[  230.148385][T11323] netlink: 26 bytes leftover after parsing attributes in process `syz.4.2299'.
[  230.171124][T11319] bridge0: port 3(dummy0) entered blocking state
[  230.228748][T11327] netlink: 'syz.4.2301': attribute type 4 has an invalid length.
[  230.228792][T11327] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2301'.
[  230.301635][T11319] bridge0: port 3(dummy0) entered disabled state
[  230.309035][T11319] dummy0: entered allmulticast mode
[  230.453363][T11319] bridge0: port 3(dummy0) entered blocking state
[  230.456860][T11319] bridge0: port 3(dummy0) entered forwarding state
[  230.470070][T11327] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2301'.
[  230.473845][T11327] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  230.506010][T11329] C: renamed from team_slave_0 (while UP)
[  230.510245][T11329] netlink: 'syz.4.2302': attribute type 3 has an invalid length.
[  230.514016][T11329] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2302'.
[  231.425913][T11353] netlink: 'syz.4.2312': attribute type 3 has an invalid length.
[  231.429532][T11353] netlink: 'syz.4.2312': attribute type 1 has an invalid length.
[  231.432726][T11353] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2312'.
[  232.041302][T11379] netlink: 'syz.5.2324': attribute type 5 has an invalid length.
[  232.186705][T11384] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2326'.
[  232.574518][T11392] netlink: 'syz.4.2330': attribute type 9 has an invalid length.
[  232.577347][T11392] netlink: 211924 bytes leftover after parsing attributes in process `syz.4.2330'.
[  233.657814][T11421] sctp: [Deprecated]: syz.4.2342 (pid 11421) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.657814][T11421] Use struct sctp_sack_info instead
[  233.835126][T11423] netlink: 'syz.5.2343': attribute type 2 has an invalid length.
[  233.838617][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2343'.
[  234.739835][T11445] netlink: 'syz.5.2353': attribute type 4 has an invalid length.
[  235.883888][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.888307][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.891659][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.898114][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.901716][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.047650][T11468] chnl_net:caif_netlink_parms(): no params data found
[  236.068391][T11482] netlink: 'syz.4.2368': attribute type 10 has an invalid length.
[  236.135191][T11484] netlink: 'syz.5.2369': attribute type 3 has an invalid length.
[  236.137975][T11484] netlink: 'syz.5.2369': attribute type 2 has an invalid length.
[  236.141338][T11484] netlink: 198112 bytes leftover after parsing attributes in process `syz.5.2369'.
[  236.214932][T11468] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.217696][T11468] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.220229][T11468] bridge_slave_0: entered allmulticast mode
[  236.223709][T11468] bridge_slave_0: entered promiscuous mode
[  236.235588][T11468] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.243635][T11468] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.246124][T11468] bridge_slave_1: entered allmulticast mode
[  236.249470][T11468] bridge_slave_1: entered promiscuous mode
[  236.275770][T11468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.281239][T11468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.317239][T11468] team0: Port device team_slave_0 added
[  236.324741][T11468] team0: Port device team_slave_1 added
[  236.357716][T11468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.360153][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.370291][T11468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.375460][T11468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.377795][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.386973][T11468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.426250][T11468] hsr_slave_0: entered promiscuous mode
[  236.428517][T11468] hsr_slave_1: entered promiscuous mode
[  236.430684][T11468] debugfs: 'hsr0' already exists in 'hsr'
[  236.432568][T11468] Cannot create hsr debugfs directory
[  236.567017][T11468] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  236.574446][T11468] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  236.578900][T11468] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  236.584792][T11468] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  236.602934][T11510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2380'.
[  236.608020][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'.
[  236.622064][T11468] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.624629][T11468] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.627152][T11468] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.629605][T11468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.661302][T11468] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.672538][  T165] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.684577][  T165] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.704857][T11520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2382'.
[  236.708071][T11520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2382'.
[  236.872390][T11468] 8021q: adding VLAN 0 to HW filter on device team0
[  236.883065][  T739] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.885639][  T739] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.891848][  T739] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.894480][  T739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.952471][T11468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  237.181459][T11468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.325430][T11468] veth0_vlan: entered promiscuous mode
[  237.331772][T11468] veth1_vlan: entered promiscuous mode
[  237.347632][T11468] veth0_macvtap: entered promiscuous mode
[  237.351833][T11468] veth1_macvtap: entered promiscuous mode
[  237.364270][T11468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.372219][T11468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.381098][ T5870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.943365][ T5236] Bluetooth: hci1: command tx timeout
[  238.098373][ T5870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.112458][T11555] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2393'.
[  238.166530][T11560] netlink: 'syz.5.2395': attribute type 10 has an invalid length.
[  238.243479][ T5870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.259047][ T5870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.332701][  T739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.341735][  T739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.492061][ T5181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.495058][ T5181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.632923][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2400'.
[  239.748852][T11583] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2404'.
[  239.815420][T11587] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2406'.
[  239.822791][T11587] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2406'.
[  239.827514][T11587] netlink: 'syz.6.2406': attribute type 5 has an invalid length.
[  239.830539][T11587] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2406'.
[  239.919948][ T5236] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  240.023866][ T5236] Bluetooth: hci1: command tx timeout
[  240.219308][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'.
[  240.272061][T11606] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2414'.
[  240.392755][T11614] netlink: 'syz.5.2417': attribute type 21 has an invalid length.
[  240.425204][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2418'.
[  240.462093][T11616] netlink: 'syz.5.2419': attribute type 10 has an invalid length.
[  240.549893][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2423'.
[  240.598859][T11628] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.602056][T11628] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.608078][T11628] bridge0: entered allmulticast mode
[  240.641804][T11628] bridge_slave_1: left allmulticast mode
[  240.645584][T11628] bridge_slave_1: left promiscuous mode
[  240.654456][T11628] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.439584][T11628] bridge_slave_0: left allmulticast mode
[  241.442388][T11628] bridge_slave_0: left promiscuous mode
[  241.455020][T11628] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.103445][ T9706] Bluetooth: hci1: command tx timeout
[  242.210788][T11673] netlink: 'syz.4.2446': attribute type 29 has an invalid length.
[  242.215315][T11673] netlink: 'syz.4.2446': attribute type 29 has an invalid length.
[  242.415176][T11691] netlink: 'syz.4.2455': attribute type 10 has an invalid length.
[  242.422425][T11691] veth1_vlan: entered allmulticast mode
[  242.446985][T11693] openvswitch: netlink: Message has 4 unknown bytes.
[  242.844388][ T9706] Bluetooth: hci1: Malformed HCI Event: 0x22
[  242.953956][T11720] netlink: 'syz.6.2465': attribute type 1 has an invalid length.
[  244.175054][T11737] __nla_validate_parse: 3 callbacks suppressed
[  244.175120][T11737] netlink: 146936 bytes leftover after parsing attributes in process `syz.6.2473'.
[  244.187316][T11737] openvswitch: netlink: Message has 6 unknown bytes.
[  244.204437][ T9706] Bluetooth: hci1: command tx timeout
[  244.240191][T11737] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  244.244903][T11737] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  244.292463][T11744] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2473'.
[  244.379758][T11748] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2477'.
[  252.083428][   T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  255.385642][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.388060][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  257.067196][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 12563939455 wd_nsec: 12563939747
[  260.587493][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  260.591718][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  260.596039][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  260.599217][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  260.602314][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  260.839491][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  260.847398][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  260.851221][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  260.856164][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  260.859765][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  260.969286][ T9706] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  260.974116][ T9706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  260.978212][ T9706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  260.981524][ T9706] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  260.984848][ T9706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  261.266032][T11752] chnl_net:caif_netlink_parms(): no params data found
[  262.664380][ T5236] Bluetooth: hci5: command tx timeout
[  262.903581][ T5236] Bluetooth: hci6: command tx timeout
[  263.063853][ T5236] Bluetooth: hci7: command tx timeout
[  264.744136][ T5236] Bluetooth: hci5: command tx timeout
[  264.984248][ T5236] Bluetooth: hci6: command tx timeout
[  265.143449][ T5236] Bluetooth: hci7: command tx timeout
[  266.823829][ T5236] Bluetooth: hci5: command tx timeout
[  267.063472][ T5236] Bluetooth: hci6: command tx timeout
[  267.223465][ T5236] Bluetooth: hci7: command tx timeout
[  268.903772][ T5236] Bluetooth: hci5: command tx timeout
[  269.150360][ T5236] Bluetooth: hci6: command tx timeout
[  269.303455][ T5236] Bluetooth: hci7: command tx timeout
[  284.808252][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 27224963319 wd_nsec: 27224963940
[  302.089570][ T8039] svc: failed to register nfsdv3 RPC service (errno 512).
[  302.151433][ T8039] svc: failed to register nfsaclv3 RPC service (errno 512).
[  316.834904][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.837735][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  319.385392][ T9707] Bluetooth: hci3: command 0x0406 tx timeout
[  320.329240][ T9707] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  320.333335][ T9707] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  320.337106][ T9707] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  320.340874][ T9707] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  320.345252][ T9707] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  320.373581][   T51] sched: DL replenish lagged too much
[  321.251166][T11768] chnl_net:caif_netlink_parms(): no params data found
[  321.471711][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  321.476570][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  321.483659][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  321.487776][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  321.491352][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  321.532266][ T9707] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  321.539800][ T9707] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  321.545235][ T9707] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  321.549157][ T9707] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  321.552667][ T9707] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  322.423966][ T9706] Bluetooth: hci8: command tx timeout
[  323.543576][ T9706] Bluetooth: hci9: command tx timeout
[  323.623476][ T9706] Bluetooth: hci10: command tx timeout
[  324.503662][ T9706] Bluetooth: hci8: command tx timeout
[  325.623283][ T9706] Bluetooth: hci9: command tx timeout
[  325.703252][ T9706] Bluetooth: hci10: command tx timeout
[  326.583520][ T9706] Bluetooth: hci8: command tx timeout
[  327.704716][ T9706] Bluetooth: hci9: command tx timeout
[  327.792334][ T5236] Bluetooth: hci10: command tx timeout
[  328.663630][ T5236] Bluetooth: hci8: command tx timeout
[  329.783506][ T5236] Bluetooth: hci9: command tx timeout
[  329.867260][ T5236] Bluetooth: hci10: command tx timeout
[  340.743660][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  360.553281][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  373.743832][T11768] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.746158][T11768] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.755863][T11768] bridge_slave_0: entered allmulticast mode
[  373.759069][T11768] bridge_slave_0: entered promiscuous mode
[  373.985797][T11768] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.988786][T11768] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.991382][T11768] bridge_slave_1: entered allmulticast mode
[  373.994956][T11768] bridge_slave_1: entered promiscuous mode
[  374.040894][T11768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.083067][T11768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.219972][   T13] bond0 (unregistering): Released all slaves
[  374.282821][T11768] team0: Port device team_slave_0 added
[  374.293098][T11768] team0: Port device team_slave_1 added
[  374.376172][T11768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.379196][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.389979][T11768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.458348][T11768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  374.461468][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.473064][T11768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  374.480704][T11781] chnl_net:caif_netlink_parms(): no params data found
[  374.540545][T11768] hsr_slave_0: entered promiscuous mode
[  374.543030][T11768] hsr_slave_1: entered promiscuous mode
[  374.546354][T11768] debugfs: 'hsr0' already exists in 'hsr'
[  374.548327][T11768] Cannot create hsr debugfs directory
[  374.642647][T11781] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.646060][T11781] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.648964][T11781] bridge_slave_0: entered allmulticast mode
[  374.651891][T11781] bridge_slave_0: entered promiscuous mode
[  374.657510][T11780] chnl_net:caif_netlink_parms(): no params data found
[  374.673253][T11781] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.676008][T11781] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.678627][T11781] bridge_slave_1: entered allmulticast mode
[  374.681567][T11781] bridge_slave_1: entered promiscuous mode
[  374.714145][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.767857][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.805973][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.829520][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.927168][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.937821][T11780] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.940981][T11780] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.946035][T11780] bridge_slave_0: entered allmulticast mode
[  374.949994][T11780] bridge_slave_0: entered promiscuous mode
[  374.961267][T11781] team0: Port device team_slave_0 added
[  374.972511][T11780] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.976039][T11780] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.979395][T11780] bridge_slave_1: entered allmulticast mode
[  374.984080][T11780] bridge_slave_1: entered promiscuous mode
[  375.007421][T11781] team0: Port device team_slave_1 added
[  375.057938][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.090507][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.095395][T11780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.105749][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.108786][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.121905][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.147464][T11780] team0: Port device team_slave_0 added
[  375.152545][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.155486][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.167238][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.180012][T11780] team0: Port device team_slave_1 added
[  375.247738][T11780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.250835][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.262799][T11780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.269657][T11780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.272677][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.283039][T11780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.290521][T11768] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  375.306407][T11781] hsr_slave_0: entered promiscuous mode
[  375.309019][T11781] hsr_slave_1: entered promiscuous mode
[  375.311531][T11781] debugfs: 'hsr0' already exists in 'hsr'
[  375.314478][T11781] Cannot create hsr debugfs directory
[  375.322108][T11768] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  375.342048][T11768] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  375.388906][T11768] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  375.442115][T11780] hsr_slave_0: entered promiscuous mode
[  375.445273][T11780] hsr_slave_1: entered promiscuous mode
[  375.447899][T11780] debugfs: 'hsr0' already exists in 'hsr'
[  375.449904][T11780] Cannot create hsr debugfs directory
[  375.468881][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.548598][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.622306][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.693398][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.708738][T11781] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  375.714059][   T34] INFO: task syz.1.2189:11072 blocked for more than 143 seconds.
[  375.714802][T11781] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  375.717437][   T34]       Not tainted syzkaller #0
[  375.725214][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  375.733981][   T34] task:syz.1.2189      state:D stack:26112 pid:11072 tgid:11071 ppid:5853   task_flags:0x400140 flags:0x00004004
[  375.738981][   T34] Call Trace:
[  375.740448][   T34]  <TASK>
[  375.741769][   T34]  __schedule+0x1798/0x4cc0
[  375.747215][   T34]  ? perf_trace_run_bpf_submit+0xee/0x170
[  375.749517][   T34]  ? perf_trace_lock+0x2f8/0x3b0
[  375.751530][   T34]  ? __pfx___schedule+0x10/0x10
[  375.754686][   T34]  ? schedule+0x91/0x360
[  375.756429][   T34]  schedule+0x165/0x360
[  375.758114][   T34]  schedule_preempt_disabled+0x13/0x30
[  375.760861][   T34]  __mutex_lock+0x7e6/0x1360
[  375.762740][   T34]  ? __mutex_lock+0x5b6/0x1360
[  375.765464][   T34]  ? nfsd_nl_threads_set_doit+0x2cb/0x960
[  375.767804][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  375.769844][   T34]  ? net_generic+0x1e/0x240
[  375.771673][   T34]  ? net_generic+0x1e/0x240
[  375.783752][   T34]  ? net_generic+0x1e/0x240
[  375.786186][   T34]  ? net_generic+0x1e/0x240
[  375.788583][   T34]  nfsd_nl_threads_set_doit+0x2cb/0x960
[  375.790843][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  375.793066][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  375.800908][   T34]  ? bpf_lsm_capable+0x9/0x20
[  375.802830][   T34]  ? security_capable+0x7e/0x2e0
[  375.805668][   T34]  genl_rcv_msg+0x60e/0x790
[  375.807515][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  375.810933][   T34]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  375.813642][   T34]  ? perf_trace_run_bpf_submit+0xee/0x170
[  375.816034][   T34]  netlink_rcv_skb+0x208/0x470
[  375.817951][   T34]  ? __lock_acquire+0xab9/0xd20
[  375.819908][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  375.821926][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  375.827902][   T34]  ? down_read+0x1ad/0x2e0
[  375.829748][   T34]  genl_rcv+0x28/0x40
[  375.832053][   T34]  netlink_unicast+0x82f/0x9e0
[  375.834885][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  375.836809][   T34]  ? netlink_sendmsg+0x642/0xb30
[  375.839018][   T34]  ? skb_put+0x11b/0x210
[  375.840893][   T34]  netlink_sendmsg+0x805/0xb30
[  375.843021][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.849771][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  375.852037][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  375.854365][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.856152][   T34]  __sock_sendmsg+0x21c/0x270
[  375.857770][   T34]  ____sys_sendmsg+0x505/0x830
[  375.859465][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  375.861639][   T34]  ? import_iovec+0x74/0xa0
[  375.864598][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  375.866507][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  375.868608][   T34]  ? __fget_files+0x2a/0x420
[  375.870482][   T34]  ? __fget_files+0x2a/0x420
[  375.872345][   T34]  ? __fget_files+0x3a0/0x420
[  375.874827][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  375.876829][   T34]  ? perf_trace_run_bpf_submit+0x100/0x170
[  375.879170][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  375.881327][   T34]  ? rcu_is_watching+0x15/0xb0
[  375.883578][   T34]  ? do_syscall_64+0xbe/0x3b0
[  375.885719][   T34]  do_syscall_64+0xfa/0x3b0
[  375.887551][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.890548][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.892885][   T34]  ? exc_page_fault+0x9f/0xf0
[  375.894914][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.897479][   T34] RIP: 0033:0x7f75e9d8ebe9
[  375.899292][   T34] RSP: 002b:00007f75eac98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  375.902577][   T34] RAX: ffffffffffffffda RBX: 00007f75e9fc5fa0 RCX: 00007f75e9d8ebe9
[  375.907273][   T34] RDX: 0000000004000000 RSI: 0000200000000780 RDI: 0000000000000006
[  375.910460][   T34] RBP: 00007f75e9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  375.913819][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.916970][   T34] R13: 00007f75e9fc6038 R14: 00007f75e9fc5fa0 R15: 00007ffdf534c358
[  375.920127][   T34]  </TASK>
[  375.921454][   T34] 
[  375.921454][   T34] Showing all locks held in the system:
[  375.931565][   T34] 6 locks held by kworker/u8:1/13:
[  375.933845][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  375.939190][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  375.948384][   T34]  #2: ffffffff8f52afb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  375.952105][   T34]  #3: ffff8880306060e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0
[  375.958104][   T34]  #4: ffff88803581c250 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0
[  375.962243][   T34]  #5: ffffffff8f537e08 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x8d/0x2a0
[  375.969425][   T34] 4 locks held by kworker/u10:0/28:
[  375.971456][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  375.977574][   T34]  #1: ffffc9000061fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  375.981791][   T34]  #2: ffffffff8f537e08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  375.991969][   T34]  #3: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  375.996438][   T34] 1 lock held by khungtaskd/34:
[  375.998377][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  376.002161][   T34] 3 locks held by kworker/0:2/793:
[  376.004401][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  376.008728][   T34]  #1: ffffc9000487fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  376.015051][   T34]  #2: ffff888034a28240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  376.018922][   T34] 3 locks held by kworker/1:2/794:
[  376.020881][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  376.025384][   T34]  #1: ffffc90004b8fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  376.030161][   T34]  #2: ffff888036f25240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  376.034169][   T34] 2 locks held by getty/5676:
[  376.036028][   T34]  #0: ffff88810f3020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  376.039801][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  376.043807][   T34] 2 locks held by kworker/u8:3/5870:
[  376.045925][   T34] 2 locks held by syz.0.912/8039:
[  376.047871][   T34]  #0: ffffffff8f59d4b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  376.051165][   T34]  #1: ffffffff8e4185c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  376.056879][   T34] 3 locks held by kworker/u8:5/10278:
[  376.058968][   T34]  #0: ffff88810830e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  376.063652][   T34]  #1: ffffc900033afbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  376.068655][   T34]  #2: ffffffff8f537e08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  376.072431][   T34] 2 locks held by syz.1.2189/11072:
[  376.074668][   T34]  #0: ffffffff8f59d4b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  376.077885][   T34]  #1: ffffffff8e4185c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  376.081841][   T34] 1 lock held by syz-executor/11768:
[  376.084667][   T34]  #0: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  376.089032][   T34] 
[  376.103260][   T34] =============================================
[  376.103260][   T34] 
[  376.106576][   T34] NMI backtrace for cpu 1
[  376.106588][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  376.106599][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.106605][   T34] Call Trace:
[  376.106611][   T34]  <TASK>
[  376.106616][   T34]  dump_stack_lvl+0x189/0x250
[  376.106636][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.106647][   T34]  ? __pfx__printk+0x10/0x10
[  376.106668][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  376.106683][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  376.106721][   T34]  ? __pfx__printk+0x10/0x10
[  376.106737][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  376.106755][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  376.106768][   T34]  watchdog+0xf93/0xfe0
[  376.106785][   T34]  ? watchdog+0x1de/0xfe0
[  376.106801][   T34]  kthread+0x711/0x8a0
[  376.106815][   T34]  ? __pfx_watchdog+0x10/0x10
[  376.106828][   T34]  ? __pfx_kthread+0x10/0x10
[  376.106840][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.106853][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.106865][   T34]  ? __pfx_kthread+0x10/0x10
[  376.106877][   T34]  ret_from_fork+0x3fc/0x770
[  376.106889][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  376.106902][   T34]  ? __switch_to_asm+0x39/0x70
[  376.106913][   T34]  ? __switch_to_asm+0x33/0x70
[  376.106924][   T34]  ? __pfx_kthread+0x10/0x10
[  376.106936][   T34]  ret_from_fork_asm+0x1a/0x30
[  376.106956][   T34]  </TASK>
[  376.106961][   T34] Sending NMI from CPU 1 to CPUs 0:
[  376.165003][    C0] NMI backtrace for cpu 0
[  376.165022][    C0] CPU: 0 UID: 0 PID: 5870 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  376.165035][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.165042][    C0] Workqueue: bat_events batadv_nc_worker
[  376.165063][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70
[  376.165079][    C0] Code: 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <c3> cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90
[  376.165089][    C0] RSP: 0018:ffffc9000347fa18 EFLAGS: 00000293
[  376.165098][    C0] RAX: ffffffff8b46ce85 RBX: 0000000000000001 RCX: ffff8881074a3980
[  376.165105][    C0] RDX: 0000000000000000 RSI: ffffffff8be332e0 RDI: ffffffff8be332a0
[  376.165112][    C0] RBP: ffff88802a919128 R08: 0000000000000000 R09: ffffffff8b46ce42
[  376.165119][    C0] R10: dffffc0000000000 R11: ffffffff8b46cd70 R12: dffffc0000000000
[  376.165126][    C0] R13: ffffffff8b46ce42 R14: ffff888027fa4d80 R15: 0000000000000225
[  376.165134][    C0] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  376.165143][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  376.165150][    C0] CR2: 00007f98dcea94a0 CR3: 0000000029896000 CR4: 00000000000006f0
[  376.165184][    C0] DR0: 0000000000000000 DR1: 0000000000000082 DR2: 0000000000000000
[  376.165193][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  376.165199][    C0] Call Trace:
[  376.165204][    C0]  <TASK>
[  376.165208][    C0]  batadv_nc_worker+0x115/0x610
[  376.165223][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  376.165236][    C0]  process_scheduled_works+0xae1/0x17b0
[  376.165255][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  376.165271][    C0]  worker_thread+0x8a0/0xda0
[  376.165283][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  376.165301][    C0]  ? __kthread_parkme+0x7b/0x200
[  376.165315][    C0]  kthread+0x711/0x8a0
[  376.165327][    C0]  ? __pfx_worker_thread+0x10/0x10
[  376.165337][    C0]  ? __pfx_kthread+0x10/0x10
[  376.165355][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.165367][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.165381][    C0]  ? __pfx_kthread+0x10/0x10
[  376.165394][    C0]  ret_from_fork+0x3fc/0x770
[  376.165408][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  376.165421][    C0]  ? __switch_to_asm+0x39/0x70
[  376.165435][    C0]  ? __switch_to_asm+0x33/0x70
[  376.165447][    C0]  ? __pfx_kthread+0x10/0x10
[  376.165460][    C0]  ret_from_fork_asm+0x1a/0x30
[  376.165478][    C0]  </TASK>
[  376.275276][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  376.278049][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  376.281622][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.285625][   T34] Call Trace:
[  376.286997][   T34]  <TASK>
[  376.288139][   T34]  dump_stack_lvl+0x99/0x250
[  376.289971][   T34]  ? __asan_memcpy+0x40/0x70
[  376.291801][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.293886][   T34]  ? __pfx__printk+0x10/0x10
[  376.295754][   T34]  vpanic+0x281/0x750
[  376.297359][   T34]  ? __pfx_vpanic+0x10/0x10
[  376.299182][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  376.301384][   T34]  ? preempt_schedule+0xae/0xc0
[  376.303346][   T34]  ? preempt_schedule_common+0x83/0xd0
[  376.305507][   T34]  panic+0xb9/0xc0
[  376.306984][   T34]  ? __pfx_panic+0x10/0x10
[  376.308769][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  376.310919][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  376.313345][   T34]  watchdog+0xfd2/0xfe0
[  376.314992][   T34]  ? watchdog+0x1de/0xfe0
[  376.316658][   T34]  kthread+0x711/0x8a0
[  376.318263][   T34]  ? __pfx_watchdog+0x10/0x10
[  376.320138][   T34]  ? __pfx_kthread+0x10/0x10
[  376.321982][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.324072][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.326132][   T34]  ? __pfx_kthread+0x10/0x10
[  376.327999][   T34]  ret_from_fork+0x3fc/0x770
[  376.329888][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  376.331945][   T34]  ? __switch_to_asm+0x39/0x70
[  376.333858][   T34]  ? __switch_to_asm+0x33/0x70
[  376.335761][   T34]  ? __pfx_kthread+0x10/0x10
[  376.337588][   T34]  ret_from_fork_asm+0x1a/0x30
[  376.339507][   T34]  </TASK>
[  376.341528][   T34] Kernel Offset: disabled
[  376.343264][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:56:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc9000068f6b0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854efb30
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efbac RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff1932cff8 CR3=000000004a4c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000082 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=306c6e7436706900 306974765f367069
XMM02=306e617073726500 3065726736706900 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 0000000000000000 XMM05=0000000000000000 00007f4110e12e53
XMM06=0000000000000000 00007f4110e12e4d XMM07=0000000000000000 00007f4110e12e61
XMM08=0000000000000000 00007f4110e12ee7 XMM09=0000000000000000 00007f4110e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11026cc75af RBX=ffff88813663ad78 RCX=dffffc0000000000 RDX=0000000000000000
RSI=ffffffff8dba5d49 RDI=ffffffff8be33300 RBP=ffffc900028fe970 RSP=ffffc900028fe760
R8 =ffffffff8fa38037 R9 =1ffffffff1f47006 R10=dffffc0000000000 R11=fffffbfff1f47007
R12=ffff88801f64a1b8 R13=ffff88813663aa98 R14=ffff88813663aac0 R15=000000000065fbb0
RIP=ffffffff8b7a2905 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558c674500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f064b8f35c0 CR3=000000011c3fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000ff0000 0000000000000000 XMM05=0000000000000000 00007f064ac12e53
XMM06=0000000000000000 00007f064ac12e4d XMM07=0000000000000000 00007f064ac12e61
XMM08=0000000000000000 00007f064ac12ee7 XMM09=0000000000000000 00007f064ac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
