last executing test programs:

15m28.154973053s ago: executing program 32 (id=98):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

15m28.019419174s ago: executing program 33 (id=102):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
close(r1)
socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)

15m15.012837594s ago: executing program 5 (id=112):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)

15m14.559803751s ago: executing program 5 (id=118):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

15m13.69881553s ago: executing program 34 (id=120):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000380)='syzkaller\x00', 0x11d9279, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc855, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

15m13.674234722s ago: executing program 5 (id=121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

15m13.253922246s ago: executing program 35 (id=121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

15m13.124415687s ago: executing program 36 (id=122):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20)

15m13.060715732s ago: executing program 37 (id=123):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001600)=r2, 0x4)

14m55.9878146s ago: executing program 8 (id=129):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)

14m55.517229128s ago: executing program 38 (id=129):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)

14m55.469623932s ago: executing program 7 (id=124):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef)
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f00000000c0))

14m55.309834315s ago: executing program 39 (id=124):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef)
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f00000000c0))

14m55.293807786s ago: executing program 9 (id=125):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)

14m55.293573876s ago: executing program 40 (id=125):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)

8m35.826794303s ago: executing program 2 (id=2361):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)

8m33.575586904s ago: executing program 2 (id=2354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

8m30.425200059s ago: executing program 0 (id=2359):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000005c0), 0x12)
write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0x6a)

8m30.2909376s ago: executing program 2 (id=2362):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2401, 0x9)

8m30.290202049s ago: executing program 0 (id=2364):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r0}, 0xc)

8m30.108778004s ago: executing program 0 (id=2366):
perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

8m28.951380837s ago: executing program 2 (id=2368):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

8m28.864518564s ago: executing program 0 (id=2371):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x6, 0x8, 0x22a}, 0x48)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2})

8m28.698514018s ago: executing program 2 (id=2373):
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

8m28.68018612s ago: executing program 0 (id=2374):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x9, 0x14, 0x1}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

8m25.917754312s ago: executing program 0 (id=2378):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10020)
recvmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2102)
sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062)

8m25.911571063s ago: executing program 2 (id=2379):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r0}, 0xc)

8m25.569550821s ago: executing program 41 (id=2378):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10020)
recvmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2102)
sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062)

8m25.564869651s ago: executing program 42 (id=2379):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r0}, 0xc)

8m12.33297712s ago: executing program 5 (id=2380):
perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

8m11.08980888s ago: executing program 5 (id=2402):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4020}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

8m9.093815091s ago: executing program 5 (id=2405):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="554d781c7be64330a4f64cd94e9f978253926edb8e8dde182de9954bfa9908ca91c55a757ecabb330d52ffc22298457976bba2800caca7d14c60e7a6f9d0d220d352cd49d4a9ae4283cd4efd466633897fe6ab1aae8953d54936146250ddb9da4f5fb767812c4b540a078e015ed3b9f282ea203115c5a807dee3da31af8f0686cde77a", @ANYRESDEC], 0x50)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)

8m8.918554095s ago: executing program 43 (id=2405):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="554d781c7be64330a4f64cd94e9f978253926edb8e8dde182de9954bfa9908ca91c55a757ecabb330d52ffc22298457976bba2800caca7d14c60e7a6f9d0d220d352cd49d4a9ae4283cd4efd466633897fe6ab1aae8953d54936146250ddb9da4f5fb767812c4b540a078e015ed3b9f282ea203115c5a807dee3da31af8f0686cde77a", @ANYRESDEC], 0x50)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)

6.717466537s ago: executing program 6 (id=4870):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000)
close(0xffffffffffffffff)
sendmsg(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x20040000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0xffffffff}, {0x3d}, {0x2}, {0x6}]})

6.244367416s ago: executing program 6 (id=4874):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20c80, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x40, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5.824146339s ago: executing program 6 (id=4876):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x26e1, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x28)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000000)=r1, 0x62)

5.82333365s ago: executing program 1 (id=4878):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044)

5.714586658s ago: executing program 1 (id=4879):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

5.45380591s ago: executing program 3 (id=4880):
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

5.453617819s ago: executing program 4 (id=4881):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)

5.250307396s ago: executing program 3 (id=4882):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xd}, 0x11fd61, 0x0, 0x0, 0x7, 0x0, 0xfffffe, 0xfffc, 0x0, 0x0, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.743391667s ago: executing program 6 (id=4883):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r6 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900)=r5, 0x4)

4.729645008s ago: executing program 1 (id=4891):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)

4.364382157s ago: executing program 1 (id=4884):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x113905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

4.364188237s ago: executing program 4 (id=4885):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10)
r3 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

4.001063017s ago: executing program 6 (id=4886):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="eca246a9cc72b057f5f4c3b94943cb8725fe85920c5dd8c2276f4387e901e49d10512167057e8c3e602de5e5fa28be61dc5940b86bf6dfb1a517a1c6d91bf0a3c99fe46357a176506176a7ac94349527d606fff855806bd69f81ab5cc5ef41c7e062961e5da575581eae9d2f2ed11dfb2c87b4bcfd89fa23a508c585c10dd7d986f598de0c1f7d63826111cdcffd5f55a395d78d7627c446a88bb290e5f8e9e8e6d0acdb078711b9351d7b41ae6b7eea6b6666d9882ad583d93ef563434c64fd8e94180b23c2caa8fbcd73c22d52e4a1f3ac5ed9144e65e374bf805e66", 0xdd}], 0x1, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x72}}], 0x18}, 0x20000081)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x419}], 0x1}, 0x0)
close(r2)
socket$kcm(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xfdef)

3.912909284s ago: executing program 3 (id=4887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2, r1}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r3 = syz_clone(0x25200000, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4000000, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r3, 0x0, 0xffffffffffffffff, 0x0)

3.912064074s ago: executing program 4 (id=4888):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='\x00', 0x1}], 0x1}, 0x80d1)

3.564453922s ago: executing program 4 (id=4889):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000340)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))

3.392739606s ago: executing program 1 (id=4890):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7e, &(0x7f0000000180)='/mroc/s\xc9\v/net/ipv/syG\x8a^=\xcd,\xb8)u\x8b[\xcdnc_\x00le\xf44.\xab%nN\xd4\x03\x00\x00\x001=\x11\xc8\xdd\x0fR\xd3s\x87`B\x92\xd0}\xbe\xdd\xc4\x01\xc2s\xa3\xfd\xa7\xe2;\xf48\xe7\xab\x9b\x8e%3\xeb.HeX\xcf\"\xbf\x82\xa502\x86\x9f*K\xc6\x1d\"\xa0\xe6\x9b\x9f\x8f=\x8d\xad\xb3\xaa\xa8\xbc\xbd \xea\x97v\xe7\xd1\xfbP(\xa4'}, 0x30)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='r}!\x00')
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef288563"], 0xffdd)

3.249633497s ago: executing program 3 (id=4892):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffff9bed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x903, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x2011)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b10fb6509f77351edcb7e754dca95aa27851544bdfd2accc2ca1a904c6694332fd9603f2290acebb27cf544de3203186dc836b93d1c151fc7f4dfd028dd64ae5c1c89162692409c7dd2b01966ec908b7e2b3d541ee9a68a7516f9867c27da24b097d88dc68896ab254c60fd201b2ff1ff07ea4c86cc4fbd888b714870991f48e747ae7418d87e72450748795a71d9e91420a8ed68f6f39b5a003df7693ea0df4aa7f2a6a354c490cf91b7656a40a3c87220379ceaaa86a343f9f5adf0912c0a507a8c25ac4ce15f96cbf1af7", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

433.683155ms ago: executing program 6 (id=4893):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
perf_event_open$cgroup(0x0, r2, 0x1, r0, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

432.450885ms ago: executing program 4 (id=4901):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20c80, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x40, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

403.840667ms ago: executing program 1 (id=4894):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)

340.435282ms ago: executing program 3 (id=4895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)

1.69457ms ago: executing program 4 (id=4896):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xd}, 0x11fd61, 0x0, 0x0, 0x7, 0x0, 0xfffffe, 0xfffc, 0x0, 0x0, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=4905):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="00000099eb0f3b270000000000000000f7ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

iscuous mode
[  541.764966][T11698] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  541.772731][T11698] Cannot create hsr debugfs directory
[  541.783405][   T50] Bluetooth: hci4: command tx timeout
[  541.853986][   T50] Bluetooth: hci5: command tx timeout
[  542.493089][T11696] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  542.518916][T11696] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  542.562186][T11696] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  542.575720][T11696] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  542.794993][T11696] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.823727][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.831408][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.860498][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.877921][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.886178][ T3543] bridge_slave_1: left allmulticast mode
[  542.891865][ T3543] bridge_slave_1: left promiscuous mode
[  542.898240][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.909881][ T3543] bridge_slave_0: left allmulticast mode
[  542.915711][ T3543] bridge_slave_0: left promiscuous mode
[  542.921571][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.937777][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.945958][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.954535][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.962164][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.972389][ T3543] dummy0: left allmulticast mode
[  542.978208][ T3543] bridge0: port 3(dummy0) entered disabled state
[  542.987245][ T3543] bridge_slave_1: left allmulticast mode
[  542.992962][ T3543] bridge_slave_1: left promiscuous mode
[  542.998960][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.007889][ T3543] bridge_slave_0: left promiscuous mode
[  543.015039][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.056283][ T3543] veth1_macvtap: left promiscuous mode
[  543.061999][ T3543] veth0_macvtap: left promiscuous mode
[  543.069725][ T3543] veth1_vlan: left promiscuous mode
[  543.075707][ T3543] veth0_vlan: left promiscuous mode
[  543.083733][ T3543] veth1_macvtap: left promiscuous mode
[  543.089308][ T3543] veth0_macvtap: left promiscuous mode
[  543.095128][ T3543] veth1_vlan: left promiscuous mode
[  543.100497][ T3543] veth0_vlan: left promiscuous mode
[  543.812024][ T3543] team0 (unregistering): Port device team_slave_1 removed
[  543.853645][   T50] Bluetooth: hci4: command tx timeout
[  543.870731][ T3543] team0 (unregistering): Port device team_slave_0 removed
[  543.929704][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  543.939056][   T50] Bluetooth: hci5: command tx timeout
[  543.996296][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  544.573649][ T3543] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  544.582998][ T3543] bond0 (unregistering): Released all slaves
[  545.158962][ T3543] team0 (unregistering): Port device team_slave_1 removed
[  545.210293][ T3543] team0 (unregistering): Port device team_slave_0 removed
[  545.260084][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  545.310767][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  545.865642][ T3543] bond0 (unregistering): Released all slaves
[  545.933603][   T50] Bluetooth: hci4: command tx timeout
[  545.970848][T11696] 8021q: adding VLAN 0 to HW filter on device team0
[  545.987447][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.994862][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.013238][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.020511][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.028654][   T50] Bluetooth: hci5: command tx timeout
[  546.175522][T11698] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  546.196075][T11698] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  546.213608][T11698] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  546.240559][T11698] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  546.490004][T11698] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.539174][T11698] 8021q: adding VLAN 0 to HW filter on device team0
[  546.557005][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.564448][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.612153][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.619524][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.655066][T11696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.794323][T11696] veth0_vlan: entered promiscuous mode
[  546.833644][T11696] veth1_vlan: entered promiscuous mode
[  546.896584][T11696] veth0_macvtap: entered promiscuous mode
[  546.907837][T11696] veth1_macvtap: entered promiscuous mode
[  546.946816][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.958364][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.968816][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.980150][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.992665][T11696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.031053][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.053330][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.067322][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.078080][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.091543][T11696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.111433][T11696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.122280][T11696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.132815][T11696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.141869][T11696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.216739][T11698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.310458][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.336228][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.376648][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.390976][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.784765][T11752] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2398'.
[  547.804749][T11750] netlink: 'syz.1.2389': attribute type 29 has an invalid length.
[  547.849304][T11750] netlink: 'syz.1.2389': attribute type 29 has an invalid length.
[  547.919693][T11698] veth0_vlan: entered promiscuous mode
[  547.950443][T11698] veth1_vlan: entered promiscuous mode
[  548.062408][T11698] veth0_macvtap: entered promiscuous mode
[  548.081814][   T50] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  548.094224][T11754] netlink: 'syz.6.2400': attribute type 1 has an invalid length.
[  548.102994][T11754] netlink: 'syz.6.2400': attribute type 4 has an invalid length.
[  548.111405][T11754] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2400'.
[  548.131193][T11698] veth1_macvtap: entered promiscuous mode
[  548.156308][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.167826][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.179197][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.190046][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.200563][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.248104][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.277095][T11698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  548.356790][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.392475][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.420193][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.432811][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.473826][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.519182][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.552083][T11698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  548.573073][T11698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.583945][T11698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.592779][T11698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.602523][T11698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.803331][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.811325][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.871385][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.884925][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.054853][T11769] netlink: 'syz.4.2407': attribute type 1 has an invalid length.
[  549.074220][T11769] netlink: 'syz.4.2407': attribute type 4 has an invalid length.
[  549.082051][T11769] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2407'.
[  549.150814][   T50] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  550.919309][   T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.259866][   T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.447087][   T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.555381][   T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.536764][T11792] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2409'.
[  553.127992][T11796] delete_channel: no stack
[  553.128517][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  553.166970][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  553.186458][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  553.193622][T11699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  553.202985][T11699] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  553.212236][T11699] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  553.220266][T11699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  553.220610][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  553.251476][T11699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  553.266906][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  553.275432][T11699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  553.297064][   T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  553.314104][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  553.322436][T11699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  553.330188][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  553.341221][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  553.354499][   T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  553.364007][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  553.632176][   T53] hsr_slave_0: left promiscuous mode
[  553.643940][   T53] hsr_slave_1: left promiscuous mode
[  553.650961][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.669751][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.681528][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.693677][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.702816][   T53] bridge0: port 3(batadv0) entered disabled state
[  553.717936][   T53] bridge_slave_1: left allmulticast mode
[  553.726256][   T53] bridge_slave_1: left promiscuous mode
[  553.732200][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.745538][   T53] bridge_slave_0: left promiscuous mode
[  553.751783][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.822374][   T53] veth1_macvtap: left promiscuous mode
[  553.828451][   T53] veth0_macvtap: left promiscuous mode
[  553.836648][   T53] veth1_vlan: left promiscuous mode
[  553.846139][   T53] veth0_vlan: left promiscuous mode
[  554.781408][   T53] team0 (unregistering): Port device team_slave_1 removed
[  554.838723][   T53] team0 (unregistering): Port device team_slave_0 removed
[  554.887476][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.938744][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.307787][T11699] Bluetooth: hci0: command tx timeout
[  555.375400][T11699] Bluetooth: hci1: command tx timeout
[  555.459229][T11699] Bluetooth: hci2: command tx timeout
[  555.501552][   T53] bond0 (unregistering): Released all slaves
[  556.188136][T11797] chnl_net:caif_netlink_parms(): no params data found
[  556.387885][T11799] chnl_net:caif_netlink_parms(): no params data found
[  556.531480][T11801] chnl_net:caif_netlink_parms(): no params data found
[  556.561014][T11797] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.572253][T11797] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.586739][T11797] bridge_slave_0: entered allmulticast mode
[  556.609129][T11797] bridge_slave_0: entered promiscuous mode
[  556.652217][T11797] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.661165][T11797] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.669210][T11797] bridge_slave_1: entered allmulticast mode
[  556.686459][T11797] bridge_slave_1: entered promiscuous mode
[  556.797318][T11797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.842256][T11799] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.853518][T11799] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.860808][T11799] bridge_slave_0: entered allmulticast mode
[  556.872321][T11799] bridge_slave_0: entered promiscuous mode
[  556.882047][T11799] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.890032][T11799] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.897655][T11799] bridge_slave_1: entered allmulticast mode
[  556.906251][T11799] bridge_slave_1: entered promiscuous mode
[  556.959530][   T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.996093][T11797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.140682][   T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.157604][T11801] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.165013][T11801] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.172582][T11801] bridge_slave_0: entered allmulticast mode
[  557.180887][T11801] bridge_slave_0: entered promiscuous mode
[  557.210149][T11799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.226445][T11797] team0: Port device team_slave_0 added
[  557.249836][   T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.263133][T11801] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.270809][T11801] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.278667][T11801] bridge_slave_1: entered allmulticast mode
[  557.286389][T11801] bridge_slave_1: entered promiscuous mode
[  557.297885][T11799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.322346][   T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.340856][T11797] team0: Port device team_slave_1 added
[  557.373748][T11699] Bluetooth: hci0: command tx timeout
[  557.411245][T11797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.418980][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.451327][T11797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.462085][T11699] Bluetooth: hci1: command tx timeout
[  557.506053][T11799] team0: Port device team_slave_0 added
[  557.513053][T11797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.521179][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.548456][T11699] Bluetooth: hci2: command tx timeout
[  557.556815][T11797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.571018][T11801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.600140][T11799] team0: Port device team_slave_1 added
[  557.621184][T11801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.738292][T11799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.745535][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.772852][T11799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.828632][   T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.854614][T11797] hsr_slave_0: entered promiscuous mode
[  557.861332][T11797] hsr_slave_1: entered promiscuous mode
[  557.868221][T11797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.875916][T11797] Cannot create hsr debugfs directory
[  557.882197][T11799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.890592][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.917324][T11799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.956872][T11801] team0: Port device team_slave_0 added
[  557.980310][   T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.020045][T11801] team0: Port device team_slave_1 added
[  558.083422][   T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.138426][T11801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.150151][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.177538][T11801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  558.191879][T11801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  558.199064][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.225433][T11801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.242314][T11799] hsr_slave_0: entered promiscuous mode
[  558.250009][T11799] hsr_slave_1: entered promiscuous mode
[  558.257130][T11799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  558.266002][T11799] Cannot create hsr debugfs directory
[  558.289158][   T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.400715][T11801] hsr_slave_0: entered promiscuous mode
[  558.408332][T11801] hsr_slave_1: entered promiscuous mode
[  558.417194][T11801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  558.424848][T11801] Cannot create hsr debugfs directory
[  559.453550][T11699] Bluetooth: hci0: command tx timeout
[  559.535115][T11699] Bluetooth: hci1: command tx timeout
[  559.613460][T11699] Bluetooth: hci2: command tx timeout
[  559.899767][T11797] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  559.934423][T11797] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  559.979613][T11797] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  559.991796][T11797] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  560.265447][T11797] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.319406][   T53] hsr_slave_0: left promiscuous mode
[  560.326417][   T53] hsr_slave_1: left promiscuous mode
[  560.332533][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  560.341295][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  560.354516][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  560.361989][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  560.371599][   T53] bridge_slave_1: left allmulticast mode
[  560.377658][   T53] bridge_slave_1: left promiscuous mode
[  560.383960][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.393343][   T53] bridge_slave_0: left allmulticast mode
[  560.399140][   T53] bridge_slave_0: left promiscuous mode
[  560.407447][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.425437][   T53] hsr_slave_0: left promiscuous mode
[  560.431512][   T53] hsr_slave_1: left promiscuous mode
[  560.438104][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  560.445937][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  560.454883][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  560.462544][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  560.470980][   T53] bridge0: port 4(batadv0) entered disabled state
[  560.488698][   T53] dummy0: left allmulticast mode
[  560.494536][   T53] bridge0: port 3(dummy0) entered disabled state
[  560.502799][   T53] bridge_slave_1: left allmulticast mode
[  560.508580][   T53] bridge_slave_1: left promiscuous mode
[  560.514768][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.523945][   T53] bridge_slave_0: left promiscuous mode
[  560.529780][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.571104][   T53] veth1_macvtap: left promiscuous mode
[  560.578667][   T53] veth0_macvtap: left promiscuous mode
[  560.589316][   T53] veth1_vlan: left promiscuous mode
[  560.594921][   T53] veth0_vlan: left promiscuous mode
[  560.602718][   T53] veth1_macvtap: left promiscuous mode
[  560.608564][   T53] veth0_macvtap: left promiscuous mode
[  560.614438][   T53] veth1_vlan: left promiscuous mode
[  560.620009][   T53] veth0_vlan: left promiscuous mode
[  561.383939][   T53] team0 (unregistering): Port device team_slave_1 removed
[  561.430744][   T53] team0 (unregistering): Port device team_slave_0 removed
[  561.484937][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.535645][T11699] Bluetooth: hci0: command tx timeout
[  561.542898][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.617663][T11699] Bluetooth: hci1: command tx timeout
[  561.699508][T11699] Bluetooth: hci2: command tx timeout
[  562.105667][   T53] bond0 (unregistering): Released all slaves
[  562.740498][   T53] team0 (unregistering): Port device team_slave_1 removed
[  562.797190][   T53] team0 (unregistering): Port device team_slave_0 removed
[  562.849400][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.907026][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.382069][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  563.389069][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  563.493544][   T53] bond0 (unregistering): Released all slaves
[  563.611832][T11797] 8021q: adding VLAN 0 to HW filter on device team0
[  563.631217][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.638469][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.689210][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.696478][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.727103][T11799] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  563.768201][T11799] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  563.780088][T11799] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  563.801426][T11799] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  564.058916][T11799] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.177838][T11799] 8021q: adding VLAN 0 to HW filter on device team0
[  564.227193][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.234542][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.260355][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.267620][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.457542][T11801] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  564.475739][T11801] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  564.487285][T11801] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  564.498246][T11801] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  564.541221][T11797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.720496][T11801] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.778374][T11801] 8021q: adding VLAN 0 to HW filter on device team0
[  564.792771][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.800124][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.851002][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.858448][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  565.002379][T11799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.099081][T11799] veth0_vlan: entered promiscuous mode
[  565.126849][T11799] veth1_vlan: entered promiscuous mode
[  565.182926][T11799] veth0_macvtap: entered promiscuous mode
[  565.215005][T11799] veth1_macvtap: entered promiscuous mode
[  565.256735][T11799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.271464][T11799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.284715][T11799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.311361][T11799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.336862][T11799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.349860][T11799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.362926][T11797] veth0_vlan: entered promiscuous mode
[  565.379476][T11799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.390366][T11799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.399587][T11799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.409086][T11799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.438744][T11797] veth1_vlan: entered promiscuous mode
[  565.471408][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.617658][T11797] veth0_macvtap: entered promiscuous mode
[  565.628112][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.663313][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.679130][T11797] veth1_macvtap: entered promiscuous mode
[  565.728751][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.744610][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.752468][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.779016][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.790049][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.800576][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.812608][T11797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.836239][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.852450][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.869456][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.880201][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.899089][T11797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.927257][T11797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.963392][T11797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.972355][T11797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.998748][T11797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.232706][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.256332][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.265894][T11801] veth0_vlan: entered promiscuous mode
[  566.344164][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.345262][T11801] veth1_vlan: entered promiscuous mode
[  566.352574][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.425085][T11801] veth0_macvtap: entered promiscuous mode
[  566.436208][T11801] veth1_macvtap: entered promiscuous mode
[  566.464022][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.475521][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.485816][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.496783][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.507053][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.517798][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.529729][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  566.567465][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.579419][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.590985][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.602829][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.618628][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.641505][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.665270][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  566.698584][T11801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.720230][T11801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.763717][T11801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.772798][T11801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.358693][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.400212][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.031048][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.083369][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.901795][T11934] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2439'.
[  569.338702][T11699] Bluetooth: hci4: Unknown advertising packet type: 0x70
[  569.338778][T11699] Bluetooth: hci4: Malformed LE Event: 0x0d
[  572.944250][T12042] veth1_macvtap: left promiscuous mode
[  572.949809][T12042] macsec0: entered allmulticast mode
[  573.023603][T12042] veth1_macvtap: entered promiscuous mode
[  573.029508][T12042] veth1_macvtap: entered allmulticast mode
[  573.093613][T12042] macsec0: entered promiscuous mode
[  575.773936][T12081] veth1_macvtap: left promiscuous mode
[  575.813334][T12081] macsec0: entered allmulticast mode
[  575.849786][T12082] veth1_macvtap: entered promiscuous mode
[  575.874558][T12082] veth1_macvtap: entered allmulticast mode
[  575.911601][T12082] macsec0: entered promiscuous mode
[  576.454261][T11699] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  578.307514][T12115] veth1_macvtap: left promiscuous mode
[  578.313090][T12115] macsec0: entered allmulticast mode
[  578.374440][T12122] veth1_macvtap: entered promiscuous mode
[  578.393784][T12122] veth1_macvtap: entered allmulticast mode
[  578.399946][T12122] macsec0: entered promiscuous mode
[  578.541729][ T5159] udevd[5159]: worker [11849] terminated by signal 33 (Unknown signal 33)
[  578.563884][ T5159] udevd[5159]: worker [11849] failed while handling '/devices/virtual/block/loop4'
[  578.750344][ T5800] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  584.177511][ T5800] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  594.103489][T12259] syzkaller0: entered promiscuous mode
[  594.109069][T12259] syzkaller0: entered allmulticast mode
[  594.810520][T11699] Bluetooth: hci2: unknown advertising packet type: 0xff
[  594.814876][T11699] Bluetooth: hci2: Malformed LE Event: 0x02
[  598.066998][T12304] syzkaller0: entered promiscuous mode
[  598.072884][T12304] syzkaller0: entered allmulticast mode
[  598.097229][T11699] Bluetooth: hci1: unknown advertising packet type: 0xff
[  598.097316][T11699] Bluetooth: hci1: Malformed LE Event: 0x02
[  598.638588][T11699] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  601.385822][T11699] Bluetooth: hci0: unknown advertising packet type: 0xff
[  601.385903][T11699] Bluetooth: hci0: Malformed LE Event: 0x02
[  601.514167][T12350] netlink: 'syz.3.2619': attribute type 33 has an invalid length.
[  601.522459][T12350] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2619'.
[  601.694627][T11699] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  601.898303][T12364] netlink: 'syz.4.2625': attribute type 10 has an invalid length.
[  601.922922][T12364] veth1_macvtap: left allmulticast mode
[  601.934077][T12364] veth1_macvtap: left promiscuous mode
[  602.430036][T12377] netlink: 'syz.6.2633': attribute type 33 has an invalid length.
[  602.432287][T11699] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  602.442878][T12377] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2633'.
[  602.595720][T11699] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  602.604219][T11699] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  602.915355][T12397] netlink: 'syz.3.2640': attribute type 10 has an invalid length.
[  602.918964][T12400] sock: sock_timestamping_bind_phc: sock not bind to device
[  602.953742][T12397] veth1_macvtap: left allmulticast mode
[  602.959780][T12397] veth1_macvtap: left promiscuous mode
[  603.311655][T11699] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  603.321856][T11699] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  603.374351][T11699] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  603.500079][T12415] netlink: 'syz.4.2646': attribute type 33 has an invalid length.
[  603.515910][T12415] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2646'.
[  603.935839][T12427] sock: sock_timestamping_bind_phc: sock not bind to device
[  604.198576][T12433] netlink: 'syz.1.2654': attribute type 10 has an invalid length.
[  604.230590][T12433] veth1_macvtap: left allmulticast mode
[  604.260296][T12433] veth1_macvtap: left promiscuous mode
[  604.304502][T12435] netlink: 'syz.3.2656': attribute type 33 has an invalid length.
[  604.332654][T12435] netlink: 'syz.3.2656': attribute type 7 has an invalid length.
[  604.354398][T12435] netlink: 'syz.3.2656': attribute type 6 has an invalid length.
[  604.389839][T12435] netlink: 198140 bytes leftover after parsing attributes in process `syz.3.2656'.
[  604.953589][T12444] netlink: 'syz.3.2658': attribute type 10 has an invalid length.
[  605.015046][T12444] veth0_vlan: left promiscuous mode
[  605.044820][T12444] veth0_vlan: entered promiscuous mode
[  605.068877][T12444] team0: Device veth0_vlan failed to register rx_handler
[  605.119054][T12446] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2659'.
[  605.238394][T12444] syz.3.2658 (12444) used greatest stack depth: 17608 bytes left
[  605.368068][T11699] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  605.376228][T11699] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  605.648399][T12460] sock: sock_timestamping_bind_phc: sock not bind to device
[  608.126219][T12467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2668'.
[  608.140068][T12471] validate_nla: 1 callbacks suppressed
[  608.140086][T12471] netlink: 'syz.3.2670': attribute type 33 has an invalid length.
[  608.159219][T12471] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2670'.
[  611.152284][T12494] netlink: 'syz.1.2680': attribute type 10 has an invalid length.
[  611.212247][T12494] veth0_vlan: left promiscuous mode
[  611.252571][T12494] veth0_vlan: entered promiscuous mode
[  611.272055][T12494] team0: Device veth0_vlan failed to register rx_handler
[  611.569675][T12514] netlink: 'syz.4.2689': attribute type 33 has an invalid length.
[  611.598607][T12514] netlink: 'syz.4.2689': attribute type 7 has an invalid length.
[  611.619489][T12514] netlink: 'syz.4.2689': attribute type 6 has an invalid length.
[  611.639819][T12514] netlink: 198140 bytes leftover after parsing attributes in process `syz.4.2689'.
[  614.078175][T12521] netlink: 'syz.3.2694': attribute type 21 has an invalid length.
[  614.410579][T11699] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10
[  614.420271][T11699] Bluetooth: min 0 < 6
[  614.426463][T12533] syzkaller0: entered allmulticast mode
[  614.609784][T12544] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2710'.
[  615.165510][T11699] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10
[  615.173085][T11699] Bluetooth: min 0 < 6
[  616.503604][T11699] Bluetooth: hci0: command tx timeout
[  617.216011][T11699] Bluetooth: hci2: command tx timeout
[  617.662810][T12568] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2714'.
[  618.427448][T11699] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  618.435576][T11699] Bluetooth: min 0 < 6
[  620.496340][T11699] Bluetooth: hci1: command tx timeout
[  620.693042][T12604] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2728'.
[  624.097963][T12659] syz.4.2752[12659] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  624.098223][T12659] syz.4.2752[12659] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  624.411977][T12669] bridge_slave_1: left allmulticast mode
[  624.454560][T12669] bridge_slave_1: left promiscuous mode
[  624.460686][T12669] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.501079][T12669] bridge_slave_0: left allmulticast mode
[  624.520246][T12669] bridge_slave_0: left promiscuous mode
[  624.544050][T12669] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.738898][T12675] »»»»»»: renamed from lo (while UP)
[  624.794377][T12677] pim6reg1: entered promiscuous mode
[  624.799939][T12677] pim6reg1: entered allmulticast mode
[  624.821808][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  624.843394][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  628.589677][T12725] netlink: 'syz.1.2786': attribute type 10 has an invalid length.
[  628.629001][T12725] batman_adv: batadv0: Adding interface: team0
[  628.654247][T12725] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  628.709644][T12725] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  628.733086][T12732] netlink: 'syz.1.2786': attribute type 10 has an invalid length.
[  628.751528][T12732] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2786'.
[  628.788672][T12732] team0: entered promiscuous mode
[  628.811106][T12732] team_slave_0: entered promiscuous mode
[  628.831697][T11699] Bluetooth: Frame is too long (len 13, expected len 4)
[  628.843598][T12732] team_slave_1: entered promiscuous mode
[  628.856849][T12732] 8021q: adding VLAN 0 to HW filter on device team0
[  628.873928][T12732] batman_adv: batadv0: Interface activated: team0
[  628.895252][T12732] batman_adv: batadv0: Interface deactivated: team0
[  628.912793][T12732] batman_adv: batadv0: Removing interface: team0
[  628.961494][T12732] bridge0: port 3(team0) entered blocking state
[  628.973942][T12732] bridge0: port 3(team0) entered disabled state
[  628.981501][T12732] team0: entered allmulticast mode
[  628.991586][T12732] team_slave_0: entered allmulticast mode
[  629.008578][T12732] team_slave_1: entered allmulticast mode
[  629.021912][T12732] bridge0: port 3(team0) entered blocking state
[  629.028531][T12732] bridge0: port 3(team0) entered forwarding state
[  630.335447][T11699] Bluetooth: Frame is too long (len 13, expected len 4)
[  630.909561][T12778] syz.6.2798[12778] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  630.909818][T12778] syz.6.2798[12778] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  631.983686][T12793] syz.4.2802 (12793) used obsolete PPPIOCDETACH ioctl
[  632.205071][T11699] Bluetooth: Frame is too long (len 13, expected len 4)
[  632.915422][T12809] »»»»»»: renamed from lo (while UP)
[  633.136250][T12817] netlink: 'syz.3.2811': attribute type 10 has an invalid length.
[  633.180017][T12817] batman_adv: batadv0: Adding interface: team0
[  633.215700][T12817] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.250589][T12817] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  633.326769][T12819] netlink: 'syz.3.2811': attribute type 10 has an invalid length.
[  633.363460][T12819] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2811'.
[  633.377223][T12819] team0: entered promiscuous mode
[  633.382386][T12819] team_slave_0: entered promiscuous mode
[  633.390974][T12819] team_slave_1: entered promiscuous mode
[  633.405404][T12819] 8021q: adding VLAN 0 to HW filter on device team0
[  633.412851][T12819] batman_adv: batadv0: Interface activated: team0
[  633.432889][T12819] batman_adv: batadv0: Interface deactivated: team0
[  633.460782][T12819] batman_adv: batadv0: Removing interface: team0
[  633.476854][T12819] bridge0: port 3(team0) entered blocking state
[  633.508894][T12819] bridge0: port 3(team0) entered disabled state
[  633.529255][T12819] team0: entered allmulticast mode
[  633.543402][T12819] team_slave_0: entered allmulticast mode
[  633.583573][T12819] team_slave_1: entered allmulticast mode
[  633.616799][T12819] bridge0: port 3(team0) entered blocking state
[  633.623484][T12819] bridge0: port 3(team0) entered forwarding state
[  634.501553][T12849] bridge_slave_1: left allmulticast mode
[  634.519154][T12849] bridge_slave_1: left promiscuous mode
[  634.546683][T12849] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.244108][T12849] bridge_slave_0: left allmulticast mode
[  635.249881][T12849] bridge_slave_0: left promiscuous mode
[  635.307274][T12849] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.057969][T12873] syz.1.2831[12873] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  636.058226][T12873] syz.1.2831[12873] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  636.085818][T12874] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2832'.
[  639.400695][T12887] team0: left allmulticast mode
[  639.405910][T12887] team_slave_0: left allmulticast mode
[  639.411407][T12887] team_slave_1: left allmulticast mode
[  639.417306][T12887] bridge0: port 3(team0) entered disabled state
[  639.426300][T12887] bridge_slave_1: left allmulticast mode
[  639.432187][T12887] bridge_slave_1: left promiscuous mode
[  639.438114][T12887] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.454446][T12887] bridge_slave_0: left allmulticast mode
[  639.460317][T12887] bridge_slave_0: left promiscuous mode
[  639.475436][T12887] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.863744][T12905] netlink: 'syz.4.2847': attribute type 10 has an invalid length.
[  639.905746][T12905] batman_adv: batadv0: Adding interface: team0
[  639.938652][T12905] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.015226][T12905] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  640.039562][T12912] syz.3.2848[12912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  640.040081][T12912] syz.3.2848[12912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  640.073433][T12910] netlink: 'syz.4.2847': attribute type 10 has an invalid length.
[  640.159755][T12910] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2847'.
[  640.203696][T12910] team0: entered promiscuous mode
[  640.208827][T12910] team_slave_0: entered promiscuous mode
[  640.243533][T12910] team_slave_1: entered promiscuous mode
[  640.273972][T12910] 8021q: adding VLAN 0 to HW filter on device team0
[  640.304415][T12910] batman_adv: batadv0: Interface activated: team0
[  640.330643][T12910] batman_adv: batadv0: Interface deactivated: team0
[  640.353402][T12910] batman_adv: batadv0: Removing interface: team0
[  640.630833][T11699] Bluetooth: Frame is too long (len 13, expected len 4)
[  641.612193][T12943] syz.4.2862[12943] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  641.612453][T12943] syz.4.2862[12943] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  642.873895][T12971] syz.1.2877[12971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  642.890470][T12971] syz.1.2877[12971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  651.086123][T13104] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  653.373610][ T3543] wlan1: Trigger new scan to find an IBSS to join
[  654.402353][T13112] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2931'.
[  657.375204][   T12] wlan1: Trigger new scan to find an IBSS to join
[  659.264964][T13201] syzkaller0: entered promiscuous mode
[  659.270578][T13201] syzkaller0: entered allmulticast mode
[  659.293554][   T12] wlan1: Creating new IBSS network, BSSID 46:27:50:27:b5:da
[  662.661406][T13216] syzkaller0: entered promiscuous mode
[  662.667390][T13216] syzkaller0: entered allmulticast mode
[  662.734786][ T5800] Bluetooth: hci4: command 0x0406 tx timeout
[  665.752290][T13243] netlink: 'syz.6.2998': attribute type 29 has an invalid length.
[  667.951645][T13243] netlink: 'syz.6.2998': attribute type 29 has an invalid length.
[  668.775687][T11699] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  669.396279][T13270] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3003'.
[  669.729844][T11699] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  669.740335][T11699] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  669.750506][T11699] CPU: 1 PID: 11699 Comm: kworker/u5:1 Not tainted 6.6.101-syzkaller #0
[  669.758991][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  669.769080][T11699] Workqueue: hci4 hci_rx_work
[  669.773836][T11699] Call Trace:
[  669.777243][T11699]  <TASK>
[  669.780290][T11699]  dump_stack_lvl+0x16c/0x230
[  669.785028][T11699]  ? show_regs_print_info+0x20/0x20
[  669.790371][T11699]  ? load_image+0x3b0/0x3b0
[  669.795355][T11699]  sysfs_create_dir_ns+0x256/0x280
[  669.800679][T11699]  ? hci_rx_work+0x43a/0xd80
[  669.805380][T11699]  ? sysfs_warn_dup+0xa0/0xa0
[  669.810880][T11699]  ? do_raw_spin_unlock+0x121/0x230
[  669.816115][T11699]  kobject_add_internal+0x6b8/0xc70
[  669.821449][T11699]  kobject_add+0x156/0x220
[  669.826354][T11699]  ? __rwlock_init+0x150/0x150
[  669.831546][T11699]  ? kobject_init+0x1e0/0x1e0
[  669.836274][T11699]  ? _raw_spin_unlock+0x28/0x40
[  669.841258][T11699]  ? get_device_parent+0x366/0x390
[  669.846490][T11699]  device_add+0x408/0xc20
[  669.851068][T11699]  hci_conn_add_sysfs+0xd5/0x1e0
[  669.856143][T11699]  le_conn_complete_evt+0xc37/0x1220
[  669.861826][T11699]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[  669.868093][T11699]  ? bt_info+0x160/0x160
[  669.872555][T11699]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  669.878231][T11699]  ? skb_pull_data+0xfb/0x200
[  669.882945][T11699]  hci_le_conn_complete_evt+0x187/0x440
[  669.888541][T11699]  ? hci_remote_host_features_evt+0x160/0x160
[  669.894827][T11699]  hci_event_packet+0x795/0x1210
[  669.900020][T11699]  ? bis_list+0x290/0x290
[  669.904387][T11699]  ? lockdep_hardirqs_on+0x98/0x150
[  669.909798][T11699]  ? hci_send_to_monitor+0xd7/0x4f0
[  669.915110][T11699]  hci_rx_work+0x43a/0xd80
[  669.919653][T11699]  ? process_scheduled_works+0x957/0x15b0
[  669.925508][T11699]  process_scheduled_works+0xa45/0x15b0
[  669.931283][T11699]  ? assign_work+0x400/0x400
[  669.936008][T11699]  ? assign_work+0x39e/0x400
[  669.940648][T11699]  worker_thread+0xa55/0xfc0
[  669.945364][T11699]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  669.951475][T11699]  ? _raw_spin_unlock+0x40/0x40
[  669.956362][T11699]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  669.962325][T11699]  kthread+0x2fa/0x390
[  669.966436][T11699]  ? pr_cont_work+0x560/0x560
[  669.971168][T11699]  ? kthread_blkcg+0xd0/0xd0
[  669.975814][T11699]  ret_from_fork+0x48/0x80
[  669.980265][T11699]  ? kthread_blkcg+0xd0/0xd0
[  669.984885][T11699]  ret_from_fork_asm+0x11/0x20
[  669.989690][T11699]  </TASK>
[  670.003298][T11699] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  670.017651][T11699] Bluetooth: hci4: failed to register connection device
[  670.813536][ T5800] Bluetooth: hci2: command tx timeout
[  671.248874][T13303] netlink: 'syz.1.3017': attribute type 29 has an invalid length.
[  671.293769][T13303] netlink: 'syz.1.3017': attribute type 29 has an invalid length.
[  671.416851][T13305] syzkaller0: entered promiscuous mode
[  671.444740][T13305] syzkaller0: entered allmulticast mode
[  671.484631][ T5800] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  671.492846][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  671.503512][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:4 Not tainted 6.6.101-syzkaller #0
[  671.512085][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  671.522341][ T5800] Workqueue: hci0 hci_rx_work
[  671.527187][ T5800] Call Trace:
[  671.530603][ T5800]  <TASK>
[  671.533682][ T5800]  dump_stack_lvl+0x16c/0x230
[  671.538439][ T5800]  ? show_regs_print_info+0x20/0x20
[  671.544044][ T5800]  ? load_image+0x3b0/0x3b0
[  671.548681][ T5800]  sysfs_create_dir_ns+0x256/0x280
[  671.553866][ T5800]  ? hci_rx_work+0x43a/0xd80
[  671.558548][ T5800]  ? sysfs_warn_dup+0xa0/0xa0
[  671.563306][ T5800]  ? do_raw_spin_unlock+0x121/0x230
[  671.568561][ T5800]  kobject_add_internal+0x6b8/0xc70
[  671.573815][ T5800]  kobject_add+0x156/0x220
[  671.578269][ T5800]  ? __rwlock_init+0x150/0x150
[  671.583064][ T5800]  ? kobject_init+0x1e0/0x1e0
[  671.587866][ T5800]  ? _raw_spin_unlock+0x28/0x40
[  671.592767][ T5800]  ? get_device_parent+0x366/0x390
[  671.598089][ T5800]  device_add+0x408/0xc20
[  671.602462][ T5800]  hci_conn_add_sysfs+0xd5/0x1e0
[  671.607544][ T5800]  le_conn_complete_evt+0xc37/0x1220
[  671.612879][ T5800]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[  671.619156][ T5800]  ? bt_info+0x160/0x160
[  671.623691][ T5800]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  671.629394][ T5800]  ? skb_pull_data+0xfb/0x200
[  671.634115][ T5800]  hci_le_conn_complete_evt+0x187/0x440
[  671.639779][ T5800]  ? hci_remote_host_features_evt+0x160/0x160
[  671.645884][ T5800]  hci_event_packet+0x795/0x1210
[  671.650887][ T5800]  ? bis_list+0x290/0x290
[  671.655343][ T5800]  ? lockdep_hardirqs_on+0x98/0x150
[  671.660579][ T5800]  ? hci_send_to_monitor+0xd7/0x4f0
[  671.665810][ T5800]  hci_rx_work+0x43a/0xd80
[  671.670260][ T5800]  ? process_scheduled_works+0x957/0x15b0
[  671.676016][ T5800]  process_scheduled_works+0xa45/0x15b0
[  671.681616][ T5800]  ? assign_work+0x400/0x400
[  671.686353][ T5800]  ? assign_work+0x39e/0x400
[  671.690971][ T5800]  worker_thread+0xa55/0xfc0
[  671.695653][ T5800]  kthread+0x2fa/0x390
[  671.699947][ T5800]  ? pr_cont_work+0x560/0x560
[  671.704647][ T5800]  ? kthread_blkcg+0xd0/0xd0
[  671.709285][ T5800]  ret_from_fork+0x48/0x80
[  671.713757][ T5800]  ? kthread_blkcg+0xd0/0xd0
[  671.718373][ T5800]  ret_from_fork_asm+0x11/0x20
[  671.723210][ T5800]  </TASK>
[  671.729103][ T5800] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  671.743277][ T5800] Bluetooth: hci0: failed to register connection device
[  673.102238][T13341] netlink: 'syz.3.3030': attribute type 29 has an invalid length.
[  675.657245][T13341] netlink: 'syz.3.3030': attribute type 29 has an invalid length.
[  676.858113][ T5804] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  676.869738][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  676.880052][ T5804] CPU: 0 PID: 5804 Comm: kworker/u5:8 Not tainted 6.6.101-syzkaller #0
[  676.888515][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  676.898620][ T5804] Workqueue: hci1 hci_rx_work
[  676.903338][ T5804] Call Trace:
[  676.906739][ T5804]  <TASK>
[  676.909766][ T5804]  dump_stack_lvl+0x16c/0x230
[  676.914494][ T5804]  ? show_regs_print_info+0x20/0x20
[  676.919714][ T5804]  ? load_image+0x3b0/0x3b0
[  676.924261][ T5804]  sysfs_create_dir_ns+0x256/0x280
[  676.929404][ T5804]  ? hci_rx_work+0x43a/0xd80
[  676.934012][ T5804]  ? sysfs_warn_dup+0xa0/0xa0
[  676.938811][ T5804]  ? do_raw_spin_unlock+0x121/0x230
[  676.944053][ T5804]  kobject_add_internal+0x6b8/0xc70
[  676.949292][ T5804]  kobject_add+0x156/0x220
[  676.953737][ T5804]  ? __rwlock_init+0x150/0x150
[  676.958528][ T5804]  ? kobject_init+0x1e0/0x1e0
[  676.963238][ T5804]  ? _raw_spin_unlock+0x28/0x40
[  676.968162][ T5804]  ? get_device_parent+0x366/0x390
[  676.973320][ T5804]  device_add+0x408/0xc20
[  676.977717][ T5804]  hci_conn_add_sysfs+0xd5/0x1e0
[  676.982683][ T5804]  le_conn_complete_evt+0xc37/0x1220
[  676.988007][ T5804]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[  676.994283][ T5804]  ? bt_info+0x160/0x160
[  676.998632][ T5804]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  677.004318][ T5804]  ? skb_pull_data+0xfb/0x200
[  677.009085][ T5804]  hci_le_conn_complete_evt+0x187/0x440
[  677.014686][ T5804]  ? hci_remote_host_features_evt+0x160/0x160
[  677.020802][ T5804]  hci_event_packet+0x795/0x1210
[  677.025887][ T5804]  ? bis_list+0x290/0x290
[  677.030248][ T5804]  ? lockdep_hardirqs_on+0x98/0x150
[  677.035486][ T5804]  ? hci_send_to_monitor+0xd7/0x4f0
[  677.040718][ T5804]  hci_rx_work+0x43a/0xd80
[  677.045179][ T5804]  ? process_scheduled_works+0x957/0x15b0
[  677.051100][ T5804]  process_scheduled_works+0xa45/0x15b0
[  677.056784][ T5804]  ? assign_work+0x400/0x400
[  677.061408][ T5804]  ? assign_work+0x39e/0x400
[  677.066037][ T5804]  worker_thread+0xa55/0xfc0
[  677.070682][ T5804]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  677.076602][ T5804]  ? _raw_spin_unlock+0x40/0x40
[  677.081477][ T5804]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  677.087425][ T5804]  kthread+0x2fa/0x390
[  677.091534][ T5804]  ? pr_cont_work+0x560/0x560
[  677.096237][ T5804]  ? kthread_blkcg+0xd0/0xd0
[  677.100936][ T5804]  ret_from_fork+0x48/0x80
[  677.105389][ T5804]  ? kthread_blkcg+0xd0/0xd0
[  677.109999][ T5804]  ret_from_fork_asm+0x11/0x20
[  677.114814][ T5804]  </TASK>
[  677.121415][ T5804] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  677.134079][T13359] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3040'.
[  677.135737][ T5804] Bluetooth: hci1: failed to register connection device
[  678.173823][T11699] Bluetooth: hci1: command 0x0406 tx timeout
[  678.183604][T11699] Bluetooth: hci2: command 0x0406 tx timeout
[  678.189771][ T5804] Bluetooth: hci0: command 0x0406 tx timeout
[  680.444121][T13397] netlink: 'syz.3.3055': attribute type 29 has an invalid length.
[  681.661089][T13388] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3052'.
[  681.671814][T13397] netlink: 'syz.3.3055': attribute type 29 has an invalid length.
[  682.032854][ T5800] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10
[  684.093303][ T5800] Bluetooth: hci4: command 0x0406 tx timeout
[  685.763701][ T5800] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  686.373498][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  686.388603][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  687.777544][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  687.925585][T13468] netlink: 'syz.4.3082': attribute type 29 has an invalid length.
[  688.202839][T13474] netlink: 'syz.3.3084': attribute type 4 has an invalid length.
[  688.212619][T13474] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3084'.
[  690.021352][T13468] netlink: 'syz.4.3082': attribute type 29 has an invalid length.
[  690.208105][ T5800] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  691.816620][T13508] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3099'.
[  692.258683][ T5800] Bluetooth: hci0: command 0x0406 tx timeout
[  692.272349][T13520] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3113'.
[  692.295696][T13521] netlink: 'syz.4.3105': attribute type 29 has an invalid length.
[  692.314868][T13521] netlink: 'syz.4.3105': attribute type 29 has an invalid length.
[  693.180350][T13534] netlink: 'syz.6.3110': attribute type 29 has an invalid length.
[  693.361397][T13534] netlink: 'syz.6.3110': attribute type 29 has an invalid length.
[  693.891015][T13548] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3115'.
[  693.913101][T13547] netlink: 'syz.1.3117': attribute type 29 has an invalid length.
[  694.016205][T13547] netlink: 'syz.1.3117': attribute type 29 has an invalid length.
[  695.118123][T13567] netlink: 'syz.3.3125': attribute type 29 has an invalid length.
[  695.149444][T13567] netlink: 'syz.3.3125': attribute type 29 has an invalid length.
[  697.259593][T13596] netlink: 'syz.4.3137': attribute type 29 has an invalid length.
[  697.326404][T13596] netlink: 'syz.4.3137': attribute type 29 has an invalid length.
[  698.868097][T13616] netlink: 'syz.6.3144': attribute type 29 has an invalid length.
[  698.979934][T13616] netlink: 'syz.6.3144': attribute type 29 has an invalid length.
[  699.209910][T13624] netlink: 'syz.6.3157': attribute type 29 has an invalid length.
[  699.285222][T13626] netlink: 'syz.3.3150': attribute type 29 has an invalid length.
[  699.307076][T13626] netlink: 'syz.3.3150': attribute type 29 has an invalid length.
[  699.326629][T13624] netlink: 'syz.6.3157': attribute type 29 has an invalid length.
[  699.940722][T13646] __sock_release: fasync list not empty!
[  700.298409][T13654] netlink: 'syz.1.3163': attribute type 29 has an invalid length.
[  700.402834][T13654] netlink: 'syz.1.3163': attribute type 29 has an invalid length.
[  700.504954][T13656] netlink: 'syz.4.3164': attribute type 29 has an invalid length.
[  700.545757][T13656] netlink: 'syz.4.3164': attribute type 29 has an invalid length.
[  701.132461][T13670] __sock_release: fasync list not empty!
[  701.453669][T13672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3171'.
[  703.733320][T13701] __sock_release: fasync list not empty!
[  703.945693][T13705] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3184'.
[  704.778268][T13724] validate_nla: 8 callbacks suppressed
[  704.778352][T13724] netlink: 'syz.6.3194': attribute type 29 has an invalid length.
[  704.817107][T13724] netlink: 'syz.6.3194': attribute type 29 has an invalid length.
[  705.794154][T13743] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3197'.
[  705.852110][T13745] netlink: 'syz.1.3200': attribute type 29 has an invalid length.
[  705.865182][T13745] netlink: 'syz.1.3200': attribute type 29 has an invalid length.
[  705.946596][T13747] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3201'.
[  706.901027][T13769] netlink: 'syz.6.3213': attribute type 2 has an invalid length.
[  706.929269][T13769] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.3213'.
[  707.993896][T13779] netlink: 'syz.4.3214': attribute type 29 has an invalid length.
[  708.018971][T13779] netlink: 'syz.4.3214': attribute type 29 has an invalid length.
[  708.055756][T13785] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3216'.
[  711.310190][T13814] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3227'.
[  714.704513][T13835] netlink: 'syz.4.3238': attribute type 2 has an invalid length.
[  714.712537][T13835] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3238'.
[  714.875946][T13840] netlink: 'syz.3.3248': attribute type 3 has an invalid length.
[  714.901613][T13840] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3248'.
[  715.187107][T13847] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3240'.
[  715.439478][ T5800] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  715.449269][ T5800] Bluetooth: hci2: Invalid handle: 0x7600 > 0x0eff
[  715.892540][T13865] syzkaller0: entered promiscuous mode
[  715.903376][T13865] syzkaller0: entered allmulticast mode
[  716.870142][   T50] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  716.878415][   T50] Bluetooth: hci1: Invalid handle: 0xfe3c > 0x0eff
[  717.280366][T13899] syzkaller0: entered promiscuous mode
[  717.292079][T13899] syzkaller0: entered allmulticast mode
[  718.329562][   T50] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  718.337534][   T50] Bluetooth: hci4: Invalid handle: 0xd99e > 0x0eff
[  718.730091][T13933] syzkaller0: entered promiscuous mode
[  718.736988][T13933] syzkaller0: entered allmulticast mode
[  719.893085][T13966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3291'.
[  720.681951][ T5800] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  720.689670][ T5800] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  720.800295][T13998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3304'.
[  721.780266][   T50] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  721.788460][   T50] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  722.060567][T14032] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3315'.
[  722.333646][T14043] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  722.618688][ T5800] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  722.626662][ T5800] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  724.343738][ T1030] wlan1: Trigger new scan to find an IBSS to join
[  725.276482][T14120] syzkaller0: entered promiscuous mode
[  725.282086][T14120] syzkaller0: entered allmulticast mode
[  728.335182][   T53] wlan1: Trigger new scan to find an IBSS to join
[  729.431237][T14165] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  729.509127][T14165] syzkaller0: entered promiscuous mode
[  729.519584][T14165] syzkaller0: entered allmulticast mode
[  730.344437][ T3473] wlan1: Creating new IBSS network, BSSID 3a:25:20:86:b1:66
[  732.399524][T14173] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3376'.
[  732.873950][T14192] veth1_macvtap: left promiscuous mode
[  732.969433][T14192] veth1_macvtap: entered promiscuous mode
[  732.982693][T14192] macsec0: entered promiscuous mode
[  732.989443][T14192] macsec0: entered allmulticast mode
[  733.012352][T14192] veth1_macvtap: entered allmulticast mode
[  733.051089][T14197] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3388'.
[  733.803587][T14211] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3394'.
[  739.269680][T14354] syzkaller0: entered promiscuous mode
[  739.283407][T14354] syzkaller0: entered allmulticast mode
[  739.821896][T14367] netlink: 'syz.4.3458': attribute type 29 has an invalid length.
[  741.052047][T14374] netlink: 'syz.1.3462': attribute type 29 has an invalid length.
[  742.443752][T14367] netlink: 'syz.4.3458': attribute type 29 has an invalid length.
[  742.454986][T14374] netlink: 'syz.1.3462': attribute type 29 has an invalid length.
[  743.096747][T14401] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3469'.
[  743.133512][T14398] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3469'.
[  743.264405][   T50] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  744.676965][T14434] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3483'.
[  744.714488][T14433] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3483'.
[  747.699122][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  747.707993][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  749.598915][T14477] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3501'.
[  749.847756][T14485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3506'.
[  751.593304][T14513] netlink: 'syz.4.3516': attribute type 29 has an invalid length.
[  751.612747][T14513] netlink: 'syz.4.3516': attribute type 29 has an invalid length.
[  751.765370][T14520] netlink: 'syz.3.3518': attribute type 29 has an invalid length.
[  751.779096][T14520] netlink: 'syz.3.3518': attribute type 29 has an invalid length.
[  753.634378][T14555] netlink: 'syz.6.3532': attribute type 29 has an invalid length.
[  753.659995][T14555] netlink: 'syz.6.3532': attribute type 29 has an invalid length.
[  756.756888][T14616] netlink: 'syz.4.3555': attribute type 10 has an invalid length.
[  756.775470][T14616] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3555'.
[  758.464836][T14653] netlink: 'syz.6.3573': attribute type 29 has an invalid length.
[  758.490158][T14653] netlink: 'syz.6.3573': attribute type 29 has an invalid length.
[  758.734104][T14659] netlink: 'syz.1.3576': attribute type 29 has an invalid length.
[  758.750057][T14659] netlink: 'syz.1.3576': attribute type 29 has an invalid length.
[  760.306569][T14684] netlink: 'syz.1.3584': attribute type 29 has an invalid length.
[  762.200565][T14698] netlink: 'syz.4.3590': attribute type 29 has an invalid length.
[  763.189293][T14684] netlink: 'syz.1.3584': attribute type 29 has an invalid length.
[  763.201172][T14698] netlink: 'syz.4.3590': attribute type 29 has an invalid length.
[  765.468084][T14729] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3603'.
[  768.524609][T14746] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3610'.
[  771.090211][T14787] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3626'.
[  774.153666][T14819] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3641'.
[  776.616426][T14834] netlink: 'syz.4.3647': attribute type 21 has an invalid length.
[  776.625296][T14834] IPv6: NLM_F_CREATE should be specified when creating new route
[  776.633868][T14834] IPv6: Can't replace route, no match found
[  780.052730][T14866] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3658'.
[  780.664203][T14873] netlink: 'syz.6.3662': attribute type 21 has an invalid length.
[  780.693533][T14873] IPv6: NLM_F_CREATE should be specified when creating new route
[  780.738549][T14873] IPv6: Can't replace route, no match found
[  781.599483][T14895] netlink: 'syz.3.3673': attribute type 21 has an invalid length.
[  781.640771][T14898] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3674'.
[  781.651517][T14895] IPv6: NLM_F_CREATE should be specified when creating new route
[  781.659734][T14895] IPv6: Can't replace route, no match found
[  781.894360][   T50] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  783.113476][T14927] netlink: 'syz.1.3686': attribute type 21 has an invalid length.
[  783.121669][T14927] IPv6: NLM_F_CREATE should be specified when creating new route
[  783.132888][T14927] IPv6: Can't replace route, no match found
[  783.269470][ T5800] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  785.131786][T14963] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3701'.
[  785.488432][T14975] netlink: 'syz.4.3706': attribute type 15 has an invalid length.
[  785.819569][T14986] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3717'.
[  787.534878][T15009] netlink: 'syz.1.3719': attribute type 15 has an invalid length.
[  787.875237][T15014] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3722'.
[  789.449510][T15039] netlink: 'syz.3.3731': attribute type 15 has an invalid length.
[  789.544792][T15042] syzkaller0: entered promiscuous mode
[  789.570596][T15042] syzkaller0: entered allmulticast mode
[  792.800114][T15082] syzkaller0: entered promiscuous mode
[  792.806544][T15082] syzkaller0: entered allmulticast mode
[  792.938495][T15086] syzkaller0: entered promiscuous mode
[  792.949536][T15086] syzkaller0: entered allmulticast mode
[  795.647981][T15104] netlink: 'syz.3.3758': attribute type 21 has an invalid length.
[  795.673350][T15104] netlink: 'syz.3.3758': attribute type 1 has an invalid length.
[  798.201036][T15109] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.273926][T15122] syz.1.3764[15122] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  798.274068][T15122] syz.1.3764[15122] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  798.913391][T15136] syzkaller0: entered promiscuous mode
[  798.944193][T15136] syzkaller0: entered allmulticast mode
[  802.439040][T15159] syzkaller0: entered promiscuous mode
[  802.449493][T15159] syzkaller0: entered allmulticast mode
[  808.461827][T15233] syzkaller0: entered promiscuous mode
[  808.479438][T15233] syzkaller0: entered allmulticast mode
[  809.153534][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  809.160027][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  811.665570][   T42] syzkaller0: tun_net_xmit 76
[  811.671207][   T42] syzkaller0: tun_net_xmit 48
[  811.685560][T15245] syzkaller0: create flow: hash 322797011 index 1
[  811.693715][ T5880] syzkaller0: tun_net_xmit 76
[  811.788425][T15244] syzkaller0: entered promiscuous mode
[  811.796492][T15244] syzkaller0: entered allmulticast mode
[  811.912214][T15237] syzkaller0: delete flow: hash 322797011 index 1
[  819.722719][T15277] syzkaller0: entered promiscuous mode
[  819.728389][T15277] syzkaller0: entered allmulticast mode
[  822.182166][T15320] syz.1.3835[15320] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  822.182315][T15320] syz.1.3835[15320] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  822.216909][T15320] syz.1.3835[15320] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  822.230639][T15320] syz.1.3835[15320] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  823.957981][T15326] netlink: 'syz.1.3837': attribute type 1 has an invalid length.
[  823.978680][T15326] netlink: 'syz.1.3837': attribute type 4 has an invalid length.
[  823.986553][T15326] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3837'.
[  829.997026][T15402] netlink: 'syz.6.3861': attribute type 1 has an invalid length.
[  830.005702][T15402] netlink: 'syz.6.3861': attribute type 4 has an invalid length.
[  830.034541][T15402] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3861'.
[  830.645442][T15408] netlink: 'syz.3.3863': attribute type 19 has an invalid length.
[  830.663611][T15408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3863'.
[  831.650388][   T50] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  834.523488][T15440] netlink: 'syz.3.3874': attribute type 1 has an invalid length.
[  834.553709][T15440] netlink: 'syz.3.3874': attribute type 4 has an invalid length.
[  834.600331][T15440] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3874'.
[  836.100617][T15468] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3886'.
[  836.910081][T15477] netlink: 'syz.4.3891': attribute type 1 has an invalid length.
[  836.938738][T15477] netlink: 'syz.4.3891': attribute type 4 has an invalid length.
[  836.963865][T15477] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3891'.
[  837.479289][   T50] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  837.710415][T15501] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3898'.
[  838.202865][   T50] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  839.615431][T15533] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.3912'.
[  842.844933][T15590] syzkaller0: entered promiscuous mode
[  842.850665][T15590] syzkaller0: entered allmulticast mode
[  842.862571][T15590] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  848.443992][T15661] netlink: 'syz.3.3966': attribute type 3 has an invalid length.
[  848.451812][T15661] netlink: 'syz.3.3966': attribute type 1 has an invalid length.
[  848.503648][T15661] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3966'.
[  848.780232][   T50] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  851.377620][T15694] syzkaller0: entered promiscuous mode
[  851.395774][T15694] syzkaller0: entered allmulticast mode
[  851.628047][ T5800] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  851.637497][T15698] netlink: 'syz.1.3972': attribute type 3 has an invalid length.
[  851.759148][T15698] netlink: 'syz.1.3972': attribute type 1 has an invalid length.
[  851.814948][T15698] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3972'.
[  854.730449][T15728] netlink: 'syz.6.3985': attribute type 3 has an invalid length.
[  854.753459][T15728] netlink: 'syz.6.3985': attribute type 1 has an invalid length.
[  854.761607][T15728] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.3985'.
[  856.104606][T15746] netlink: 'syz.6.3992': attribute type 7 has an invalid length.
[  857.859000][T15775] lo: entered allmulticast mode
[  857.950673][T15775] lo: entered promiscuous mode
[  857.977798][T15775] lo: left allmulticast mode
[  859.796180][T15814] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4018'.
[  859.829361][T15814] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  860.052435][T15819] netlink: 'syz.1.4019': attribute type 7 has an invalid length.
[  860.753606][T15828] netlink: 'syz.1.4023': attribute type 12 has an invalid length.
[  860.799849][T15828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4023'.
[  861.549911][T15854] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4032'.
[  861.583186][T15854] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  861.919623][T15867] netlink: 'syz.3.4036': attribute type 12 has an invalid length.
[  861.933338][T15867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4036'.
[  862.778378][T15880] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4044'.
[  862.836317][T15880] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  863.302029][T15896] netlink: 'syz.4.4049': attribute type 12 has an invalid length.
[  863.333247][T15896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4049'.
[  864.918346][T15925] netlink: 'syz.1.4059': attribute type 29 has an invalid length.
[  864.943563][T15925] netlink: 'syz.1.4059': attribute type 29 has an invalid length.
[  864.970521][T15925] netlink: 'syz.1.4059': attribute type 29 has an invalid length.
[  865.150099][T15925] syzkaller0: entered promiscuous mode
[  865.183501][T15925] syzkaller0: entered allmulticast mode
[  867.992695][T15945] …: port 1(ip6gretap0) entered blocking state
[  868.004552][T15945] …: port 1(ip6gretap0) entered disabled state
[  868.011540][T15945] ip6gretap0: entered allmulticast mode
[  868.021816][T15945] ip6gretap0: entered promiscuous mode
[  870.149268][T15974] …: port 1(ip6gretap0) entered blocking state
[  870.156232][T15974] …: port 1(ip6gretap0) entered disabled state
[  870.173812][T15974] ip6gretap0: entered allmulticast mode
[  870.185132][T15974] ip6gretap0: entered promiscuous mode
[  870.639863][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  870.646902][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  870.886048][T15992] syzkaller0: entered promiscuous mode
[  870.892088][T15992] syzkaller0: entered allmulticast mode
[  876.852461][T16009] …: port 1(ip6gretap0) entered blocking state
[  876.859123][T16009] …: port 1(ip6gretap0) entered disabled state
[  876.866090][T16009] ip6gretap0: entered allmulticast mode
[  876.872945][T16009] ip6gretap0: entered promiscuous mode
[  876.980919][T16015] syz.6.4104: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1
[  877.017410][T16015] CPU: 1 PID: 16015 Comm: syz.6.4104 Not tainted 6.6.101-syzkaller #0
[  877.025804][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  877.036067][T16015] Call Trace:
[  877.039485][T16015]  <TASK>
[  877.042601][T16015]  dump_stack_lvl+0x16c/0x230
[  877.047514][T16015]  ? show_regs_print_info+0x20/0x20
[  877.052935][T16015]  ? load_image+0x3b0/0x3b0
[  877.057699][T16015]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  877.064245][T16015]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  877.070926][T16015]  warn_alloc+0x210/0x300
[  877.075483][T16015]  ? stack_trace_save+0x9c/0xe0
[  877.080484][T16015]  ? zone_watermark_ok_safe+0x230/0x230
[  877.086328][T16015]  ? kasan_set_track+0x5f/0x70
[  877.091197][T16015]  ? kasan_set_track+0x4e/0x70
[  877.096070][T16015]  ? __kasan_kmalloc+0x8f/0xa0
[  877.101223][T16015]  ? xsk_init_queue+0xb0/0x110
[  877.106098][T16015]  ? xsk_setsockopt+0x4db/0x6f0
[  877.111074][T16015]  ? do_sock_setsockopt+0x175/0x1a0
[  877.116573][T16015]  ? __x64_sys_setsockopt+0x184/0x200
[  877.122123][T16015]  __vmalloc_node_range+0x126/0x1320
[  877.127730][T16015]  ? free_vm_area+0x50/0x50
[  877.132446][T16015]  vmalloc_user+0x74/0x80
[  877.136906][T16015]  ? xskq_create+0xbf/0x170
[  877.141556][T16015]  xskq_create+0xbf/0x170
[  877.146220][T16015]  xsk_init_queue+0xb0/0x110
[  877.150959][T16015]  xsk_setsockopt+0x4db/0x6f0
[  877.155795][T16015]  ? xsk_poll+0x670/0x670
[  877.160300][T16015]  ? __fget_files+0x28/0x4d0
[  877.165112][T16015]  ? aa_sock_opt_perm+0x74/0x100
[  877.170288][T16015]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  877.176143][T16015]  ? security_socket_setsockopt+0x7e/0xa0
[  877.182027][T16015]  ? xsk_poll+0x670/0x670
[  877.186699][T16015]  do_sock_setsockopt+0x175/0x1a0
[  877.191858][T16015]  ? __fdget+0x180/0x210
[  877.196327][T16015]  __x64_sys_setsockopt+0x184/0x200
[  877.201781][T16015]  do_syscall_64+0x55/0xb0
[  877.206314][T16015]  ? clear_bhb_loop+0x40/0x90
[  877.211117][T16015]  ? clear_bhb_loop+0x40/0x90
[  877.216109][T16015]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  877.222130][T16015] RIP: 0033:0x7fb971d8ebe9
[  877.226662][T16015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  877.247076][T16015] RSP: 002b:00007fb972bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  877.255574][T16015] RAX: ffffffffffffffda RBX: 00007fb971fb5fa0 RCX: 00007fb971d8ebe9
[  877.263606][T16015] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  877.271815][T16015] RBP: 00007fb971e11e19 R08: 0000000000000004 R09: 0000000000000000
[  877.279865][T16015] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  877.287904][T16015] R13: 00007fb971fb6038 R14: 00007fb971fb5fa0 R15: 00007ffdd8e3cde8
[  877.296203][T16015]  </TASK>
[  877.341627][T16015] Mem-Info:
[  877.356733][T16015] active_anon:12349 inactive_anon:0 isolated_anon:0
[  877.356733][T16015]  active_file:18560 inactive_file:40154 isolated_file:0
[  877.356733][T16015]  unevictable:768 dirty:90 writeback:0
[  877.356733][T16015]  slab_reclaimable:10969 slab_unreclaimable:106984
[  877.356733][T16015]  mapped:23624 shmem:1384 pagetables:424
[  877.356733][T16015]  sec_pagetables:0 bounce:0
[  877.356733][T16015]  kernel_misc_reclaimable:0
[  877.356733][T16015]  free:1327440 free_pcp:6778 free_cma:0
[  877.412040][T16015] Node 0 active_anon:49308kB inactive_anon:0kB active_file:74240kB inactive_file:160424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94540kB dirty:408kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10492kB pagetables:1688kB sec_pagetables:0kB all_unreclaimable? no
[  877.449727][T16015] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  877.504512][T16015] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  877.533030][T16015] lowmem_reserve[]: 0 2525 2526 2526 2526
[  877.539415][T16015] Node 0 DMA32 free:1392708kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:49456kB inactive_anon:0kB active_file:74240kB inactive_file:159108kB unevictable:1536kB writepending:408kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:12816kB local_pcp:8572kB free_cma:0kB
[  877.582963][T16015] lowmem_reserve[]: 0 0 1 1 1
[  877.588129][T16015] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  877.620259][T16015] lowmem_reserve[]: 0 0 0 0 0
[  877.625542][T16015] Node 1 Normal free:3900920kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14496kB local_pcp:10304kB free_cma:0kB
[  877.659330][T16015] lowmem_reserve[]: 0 0 0 0 0
[  877.665149][T16015] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  877.681523][T16015] Node 0 DMA32: 1989*4kB (UME) 1304*8kB (UME) 779*16kB (UME) 1292*32kB (UME) 601*64kB (UME) 160*128kB (UME) 106*256kB (M) 70*512kB (ME) 25*1024kB (UME) 11*2048kB (M) 281*4096kB (M) = 1393220kB
[  877.723567][T16015] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  877.736148][T16015] Node 1 Normal: 226*4kB (UE) 48*8kB (UE) 41*16kB (UE) 179*32kB (UE) 52*64kB (UME) 8*128kB (UME) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3900920kB
[  877.756135][T16015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  877.766764][T16015] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  877.776657][T16015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  877.788805][T16015] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  877.798704][T16015] 60100 total pagecache pages
[  877.804313][T16015] 0 pages in swap cache
[  877.808591][T16015] Free swap  = 124996kB
[  877.812854][T16015] Total swap = 124996kB
[  877.817257][T16015] 2097051 pages RAM
[  877.821260][T16015] 0 pages HighMem/MovableOnly
[  877.826213][T16015] 416137 pages reserved
[  877.830660][T16015] 0 pages cma reserved
[  878.618422][T16033] syzkaller0: entered promiscuous mode
[  888.415032][T16118] syzkaller0: entered promiscuous mode
[  893.558386][T16152] netlink: 'syz.3.4152': attribute type 29 has an invalid length.
[  893.832816][T16152] netlink: 'syz.3.4152': attribute type 29 has an invalid length.
[  893.853635][T16153] netlink: 'syz.3.4152': attribute type 29 has an invalid length.
[  894.046323][T16146] syzkaller0: entered promiscuous mode
[  894.098846][T16146] syzkaller0: entered allmulticast mode
[  894.832701][T16154] syzkaller0: entered promiscuous mode
[  901.547112][T16207] netlink: 'syz.6.4172': attribute type 29 has an invalid length.
[  901.576240][T16207] netlink: 'syz.6.4172': attribute type 29 has an invalid length.
[  901.635207][T16205] netlink: 'syz.1.4173': attribute type 39 has an invalid length.
[  901.892871][T16207] netlink: 'syz.6.4172': attribute type 29 has an invalid length.
[  901.998477][T16210] syzkaller0: entered promiscuous mode
[  902.004494][T16210] syzkaller0: entered allmulticast mode
[  906.616129][T16257] netlink: 'syz.4.4191': attribute type 29 has an invalid length.
[  906.633249][T16257] netlink: 'syz.4.4191': attribute type 29 has an invalid length.
[  906.650592][T16257] netlink: 'syz.4.4191': attribute type 29 has an invalid length.
[  906.748208][T16257] syzkaller0: entered promiscuous mode
[  906.755335][T16257] syzkaller0: entered allmulticast mode
[  911.086071][T16302] netlink: 'syz.6.4209': attribute type 29 has an invalid length.
[  911.102302][T16302] netlink: 'syz.6.4209': attribute type 29 has an invalid length.
[  911.115461][T16302] netlink: 'syz.6.4209': attribute type 29 has an invalid length.
[  911.274096][T16302] syzkaller0: entered promiscuous mode
[  911.279665][T16302] syzkaller0: entered allmulticast mode
[  913.883449][T16309] syzkaller0: entered promiscuous mode
[  913.928914][   T50] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  916.875224][T16338] netlink: 'syz.3.4217': attribute type 19 has an invalid length.
[  916.926438][T16338] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4217'.
[  917.430288][   T50] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  917.557779][T16364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4232'.
[  918.181568][T16369] syzkaller0: entered promiscuous mode
[  921.302893][   T50] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  921.314211][T16403] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4244'.
[  921.518632][ T5800] Bluetooth: hci2: unknown advertising packet type: 0xff
[  921.518672][ T5800] Bluetooth: hci2: unknown advertising packet type: 0x80
[  923.533402][ T5800] Bluetooth: hci4: command 0x0406 tx timeout
[  924.200585][   T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  924.266427][T16432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4260'.
[  925.093541][   T50] Bluetooth: hci0: unknown advertising packet type: 0xff
[  925.093580][   T50] Bluetooth: hci0: unknown advertising packet type: 0x80
[  925.380437][T16468] delete_channel: no stack
[  927.458198][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  928.337286][T16491] netlink: 'syz.4.4287': attribute type 4 has an invalid length.
[  928.348670][T16491] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4287'.
[  928.375817][T16491] netlink: 'syz.4.4287': attribute type 2 has an invalid length.
[  928.384702][T16491] netlink: 'syz.4.4287': attribute type 8 has an invalid length.
[  928.396219][T16491] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4287'.
[  928.556595][T16502] netlink: 'syz.3.4290': attribute type 2 has an invalid length.
[  928.589539][T16502] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4290'.
[  928.974228][T16520] netlink: 'syz.3.4297': attribute type 33 has an invalid length.
[  928.995145][T16520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4297'.
[  929.008109][T16520] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  930.333300][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  930.717045][ T5800] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[  930.720778][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  930.738645][ T5800] CPU: 0 PID: 5800 Comm: kworker/u5:4 Not tainted 6.6.101-syzkaller #0
[  930.747415][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  930.757716][ T5800] Workqueue: hci2 hci_rx_work
[  930.762475][ T5800] Call Trace:
[  930.765883][ T5800]  <TASK>
[  930.768865][ T5800]  dump_stack_lvl+0x16c/0x230
[  930.773694][ T5800]  ? show_regs_print_info+0x20/0x20
[  930.779058][ T5800]  ? load_image+0x3b0/0x3b0
[  930.783976][ T5800]  sysfs_create_dir_ns+0x256/0x280
[  930.789154][ T5800]  ? process_scheduled_works+0xa45/0x15b0
[  930.795122][ T5800]  ? sysfs_warn_dup+0xa0/0xa0
[  930.800110][ T5800]  ? do_raw_spin_unlock+0x121/0x230
[  930.805688][ T5800]  kobject_add_internal+0x6b8/0xc70
[  930.811071][ T5800]  kobject_add+0x156/0x220
[  930.815658][ T5800]  ? __rwlock_init+0x150/0x150
[  930.820775][ T5800]  ? kobject_init+0x1e0/0x1e0
[  930.825578][ T5800]  ? _raw_spin_unlock+0x28/0x40
[  930.830576][ T5800]  ? get_device_parent+0x366/0x390
[  930.835738][ T5800]  device_add+0x408/0xc20
[  930.840125][ T5800]  hci_conn_add_sysfs+0xd5/0x1e0
[  930.845178][ T5800]  hci_conn_complete_evt+0x719/0x12b0
[  930.850793][ T5800]  ? hci_inquiry_result_evt+0x530/0x530
[  930.856431][ T5800]  ? hci_inquiry_result_evt+0x530/0x530
[  930.862108][ T5800]  hci_event_packet+0x7ed/0x1210
[  930.867233][ T5800]  ? bis_list+0x290/0x290
[  930.871810][ T5800]  ? lockdep_hardirqs_on+0x98/0x150
[  930.877304][ T5800]  ? hci_send_to_monitor+0xd7/0x4f0
[  930.882638][ T5800]  hci_rx_work+0x43a/0xd80
[  930.887198][ T5800]  ? process_scheduled_works+0x957/0x15b0
[  930.893097][ T5800]  process_scheduled_works+0xa45/0x15b0
[  930.898856][ T5800]  ? assign_work+0x400/0x400
[  930.903510][ T5800]  ? assign_work+0x39e/0x400
[  930.908257][ T5800]  worker_thread+0xa55/0xfc0
[  930.912915][ T5800]  kthread+0x2fa/0x390
[  930.917003][ T5800]  ? pr_cont_work+0x560/0x560
[  930.921734][ T5800]  ? kthread_blkcg+0xd0/0xd0
[  930.926363][ T5800]  ret_from_fork+0x48/0x80
[  930.930930][ T5800]  ? kthread_blkcg+0xd0/0xd0
[  930.935581][ T5800]  ret_from_fork_asm+0x11/0x20
[  930.940410][ T5800]  </TASK>
[  930.945363][ T5800] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  930.959583][ T5800] Bluetooth: hci2: failed to register connection device
[  932.016900][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  932.025535][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  933.063461][ T5800] Bluetooth: hci2: command 0x0406 tx timeout
[  933.638755][T16594] syzkaller0: entered allmulticast mode
[  933.841712][T16600] sit0: entered allmulticast mode
[  933.875032][T16599] C: renamed from team_slave_0 (while UP)
[  934.047793][T16599] netlink: 'syz.3.4329': attribute type 3 has an invalid length.
[  934.074746][T16599] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4329'.
[  934.095414][T16599] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  934.322703][T16612] netlink: 'syz.4.4333': attribute type 33 has an invalid length.
[  934.354178][T16612] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4333'.
[  934.372544][T16612] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  939.340139][T16677] syzkaller0: entered allmulticast mode
[  941.979216][T16681] bridge_slave_0: entered promiscuous mode
[  941.986108][T16681] bridge_slave_0: entered allmulticast mode
[  942.402804][T16693] C: renamed from team_slave_0 (while UP)
[  942.441580][T16693] netlink: 'syz.6.4367': attribute type 3 has an invalid length.
[  942.462044][T16693] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4367'.
[  942.497079][T16693] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  943.130072][T16715] bridge_slave_0: entered promiscuous mode
[  943.150273][T16715] bridge_slave_0: entered allmulticast mode
[  943.330541][ T5800] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  944.225353][T16728] netlink: 'syz.6.4382': attribute type 10 has an invalid length.
[  944.257817][T16728] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4382'.
[  944.284327][T16728] batman_adv: batadv0: Adding interface: hsr_slave_1
[  944.291267][T16728] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  944.344451][T16728] batman_adv: batadv0: Interface activated: hsr_slave_1
[  944.404882][T16734] syzkaller0: entered allmulticast mode
[  944.506679][T16734] syzkaller0: entered promiscuous mode
[  944.523251][T16734] syzkaller0: left allmulticast mode
[  944.610615][T16736] C: renamed from team_slave_0 (while UP)
[  944.632737][T16736] netlink: 'syz.1.4384': attribute type 3 has an invalid length.
[  944.651123][T16736] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4384'.
[  944.671748][T16736] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  944.931393][T16744] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.988031][T16747] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.995362][T16747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.489872][T16775] C: renamed from team_slave_0
[  946.510709][T16775] netlink: 'syz.4.4398': attribute type 3 has an invalid length.
[  946.540721][T16775] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4398'.
[  946.561425][T16775] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  949.683669][T16789] bridge_slave_0: entered promiscuous mode
[  949.695320][T16789] bridge_slave_0: entered allmulticast mode
[  950.897380][T16811] netlink: 'syz.6.4412': attribute type 3 has an invalid length.
[  950.905887][T16811] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4412'.
[  950.917758][T16811] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  951.292094][T16825] netlink: 'syz.1.4418': attribute type 2 has an invalid length.
[  952.073687][T16835] netlink: 'syz.6.4424': attribute type 3 has an invalid length.
[  952.082013][T16835] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4424'.
[  952.110081][T16835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  952.674040][T16851] netlink: 'syz.1.4435': attribute type 3 has an invalid length.
[  952.681962][T16851] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4435'.
[  952.764048][T16851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  953.830158][T16880] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4448'.
[  953.895285][T16883] netlink: 'syz.6.4440': attribute type 3 has an invalid length.
[  953.923498][T16883] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4440'.
[  953.960275][T16883] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  954.001640][T16880] netlink: 'syz.3.4448': attribute type 10 has an invalid length.
[  954.074329][T16880] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  956.354552][T16921] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4455'.
[  956.443462][T16921] netlink: 'syz.4.4455': attribute type 10 has an invalid length.
[  956.544785][T16921] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  958.237000][T16954] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4467'.
[  958.358107][T16954] netlink: 'syz.6.4467': attribute type 10 has an invalid length.
[  958.467923][T16954] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  959.121725][ T5800] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  959.129471][ T5800] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  960.658021][T16984] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4480'.
[  960.729013][T16984] netlink: 'syz.1.4480': attribute type 10 has an invalid length.
[  960.802726][T16984] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  960.822402][T16985] pim6reg1: entered promiscuous mode
[  960.828960][T16985] pim6reg1: entered allmulticast mode
[  961.401890][T16996] netlink: 'syz.3.4491': attribute type 3 has an invalid length.
[  961.503737][T16996] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4491'.
[  961.544973][T16996] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  962.500957][T17010] netlink: 'syz.3.4495': attribute type 3 has an invalid length.
[  962.525211][ T5800] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  962.532891][ T5800] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  962.552352][T17010] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4495'.
[  962.585007][T17010] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  962.890810][T17017] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4490'.
[  963.855183][ T5800] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  963.863511][ T5800] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  965.598555][T17067] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4508'.
[  965.621736][T17067] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  965.818855][T17074] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4511'.
[  965.842026][T17074] netlink: 'syz.6.4511': attribute type 10 has an invalid length.
[  967.710570][T17103] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4526'.
[  967.834473][T17103] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  969.994205][T17131] syzkaller0: entered promiscuous mode
[  969.999773][T17131] syzkaller0: entered allmulticast mode
[  978.983625][T17297] netlink: 'syz.6.4605': attribute type 10 has an invalid length.
[  979.528767][T17301] syzkaller0: entered promiscuous mode
[  979.545995][T17301] syzkaller0: entered allmulticast mode
[  982.203753][T17362] netlink: 'syz.3.4620': attribute type 10 has an invalid length.
[  982.526080][ T5800] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  982.534666][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  982.544146][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:4 Not tainted 6.6.101-syzkaller #0
[  982.552527][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  982.562699][ T5800] Workqueue: hci4 hci_rx_work
[  982.567772][ T5800] Call Trace:
[  982.571078][ T5800]  <TASK>
[  982.574034][ T5800]  dump_stack_lvl+0x16c/0x230
[  982.578837][ T5800]  ? show_regs_print_info+0x20/0x20
[  982.584241][ T5800]  ? load_image+0x3b0/0x3b0
[  982.588881][ T5800]  sysfs_create_dir_ns+0x256/0x280
[  982.594060][ T5800]  ? hci_rx_work+0x43a/0xd80
[  982.598849][ T5800]  ? sysfs_warn_dup+0xa0/0xa0
[  982.603569][ T5800]  ? do_raw_spin_unlock+0x121/0x230
[  982.608913][ T5800]  kobject_add_internal+0x6b8/0xc70
[  982.614254][ T5800]  kobject_add+0x156/0x220
[  982.618702][ T5800]  ? __rwlock_init+0x150/0x150
[  982.623592][ T5800]  ? kobject_init+0x1e0/0x1e0
[  982.628402][ T5800]  ? _raw_spin_unlock+0x28/0x40
[  982.633290][ T5800]  ? get_device_parent+0x366/0x390
[  982.638437][ T5800]  device_add+0x408/0xc20
[  982.642939][ T5800]  hci_conn_add_sysfs+0xd5/0x1e0
[  982.648019][ T5800]  le_conn_complete_evt+0xc37/0x1220
[  982.653408][ T5800]  ? bt_warn+0x10c/0x160
[  982.657688][ T5800]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[  982.663959][ T5800]  ? bt_info+0x160/0x160
[  982.668309][ T5800]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  982.674015][ T5800]  ? skb_pull_data+0xfb/0x200
[  982.678819][ T5800]  hci_le_enh_conn_complete_evt+0x189/0x460
[  982.684852][ T5800]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[  982.691380][ T5800]  ? hci_remote_host_features_evt+0x160/0x160
[  982.697582][ T5800]  hci_event_packet+0x795/0x1210
[  982.702581][ T5800]  ? bis_list+0x290/0x290
[  982.706947][ T5800]  ? lockdep_hardirqs_on+0x98/0x150
[  982.712394][ T5800]  ? hci_send_to_monitor+0xd7/0x4f0
[  982.717915][ T5800]  hci_rx_work+0x43a/0xd80
[  982.722373][ T5800]  ? process_scheduled_works+0x957/0x15b0
[  982.728272][ T5800]  process_scheduled_works+0xa45/0x15b0
[  982.733877][ T5800]  ? assign_work+0x400/0x400
[  982.738675][ T5800]  ? assign_work+0x39e/0x400
[  982.743379][ T5800]  worker_thread+0xa55/0xfc0
[  982.748114][ T5800]  kthread+0x2fa/0x390
[  982.752204][ T5800]  ? pr_cont_work+0x560/0x560
[  982.757016][ T5800]  ? kthread_blkcg+0xd0/0xd0
[  982.761652][ T5800]  ret_from_fork+0x48/0x80
[  982.766158][ T5800]  ? kthread_blkcg+0xd0/0xd0
[  982.770793][ T5800]  ret_from_fork_asm+0x11/0x20
[  982.775625][ T5800]  </TASK>
[  982.780708][ T5800] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  982.796850][ T5800] Bluetooth: hci4: failed to register connection device
[  982.838320][T17373] netlink: 209588 bytes leftover after parsing attributes in process `syz.6.4625'.
[  982.849316][T17373] netlink: zone id is out of range
[  982.856861][T17373] netlink: zone id is out of range
[  982.862149][T17373] netlink: zone id is out of range
[  982.868214][T17373] netlink: zone id is out of range
[  982.874359][T17373] netlink: zone id is out of range
[  982.879812][T17373] netlink: zone id is out of range
[  982.891268][T17373] netlink: zone id is out of range
[  982.896971][T17373] netlink: zone id is out of range
[  982.902486][T17373] netlink: get zone limit has 4 unknown bytes
[  983.732958][T17387] netlink: 'syz.4.4628': attribute type 10 has an invalid length.
[  984.083708][T17393] Zero length message leads to an empty skb
[  984.125941][T17395] netlink: 'syz.3.4631': attribute type 39 has an invalid length.
[  984.215678][T17398] netlink: 'syz.1.4632': attribute type 10 has an invalid length.
[  984.798717][T17407] syzkaller0: entered promiscuous mode
[  984.810481][T17407] syzkaller0: entered allmulticast mode
[  984.817624][T17370] Bluetooth: hci4: command 0x0406 tx timeout
[  988.233247][T17418] sit0: entered allmulticast mode
[  988.247405][T17421] sit0: entered promiscuous mode
[  989.057701][T17436] netlink: 'syz.4.4648': attribute type 10 has an invalid length.
[  989.474761][T17438] syzkaller0: entered promiscuous mode
[  989.480644][T17438] syzkaller0: entered allmulticast mode
[  989.594525][T17440] netlink: 'syz.1.4658': attribute type 39 has an invalid length.
[  989.998993][T17455] sit0: entered allmulticast mode
[  990.026368][T17456] netlink: 'syz.4.4664': attribute type 39 has an invalid length.
[  990.142011][T17455] sit0: entered promiscuous mode
[  990.310643][T17464] syzkaller0: entered promiscuous mode
[  990.317007][T17464] syzkaller0: entered allmulticast mode
[  993.116778][T17471] netlink: 'syz.6.4660': attribute type 10 has an invalid length.
[  993.216837][T17471] veth1_macvtap (unregistering): left allmulticast mode
[  993.462774][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  993.477552][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  993.567799][T17475] syzkaller0: entered promiscuous mode
[  993.593118][T17475] syzkaller0: entered allmulticast mode
[  993.608600][T17478] syzkaller0: entered promiscuous mode
[  993.630255][T17478] syzkaller0: entered allmulticast mode
[  996.615885][T17492] veth0_vlan: entered allmulticast mode
[  996.626798][T17495] ÿÿÿÿÿÿ: renamed from vlan1
[  996.870193][T17508] sit0: entered promiscuous mode
[  997.966534][T17526] syzkaller0: entered promiscuous mode
[  997.973505][T17526] syzkaller0: entered allmulticast mode
[  997.980502][T17529] veth0_vlan: entered allmulticast mode
[  998.029273][T17529] ÿÿÿÿÿÿ: renamed from vlan1
[ 1000.872799][T17542] netlink: 'syz.3.4686': attribute type 10 has an invalid length.
[ 1000.891610][T17546] syzkaller0: entered promiscuous mode
[ 1000.906406][T17546] syzkaller0: entered allmulticast mode
[ 1001.369237][T17563] veth0_vlan: entered allmulticast mode
[ 1001.600218][T17564] ÿÿÿÿÿÿ: renamed from vlan1
[ 1002.414065][T17576] netlink: 194488 bytes leftover after parsing attributes in process `syz.6.4698'.
[ 1003.501249][T17594] veth0_vlan: entered allmulticast mode
[ 1003.644292][T17594] ÿÿÿÿÿÿ: renamed from vlan1
[ 1005.118945][T17614] __sock_release: fasync list not empty!
[ 1007.021507][T17654] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.4728'.
[ 1008.791187][T17685] syzkaller0: entered promiscuous mode
[ 1008.798226][T17685] syzkaller0: entered allmulticast mode
[ 1008.942514][T17687] syzkaller0: entered promiscuous mode
[ 1008.969032][T17687] syzkaller0: entered allmulticast mode
[ 1015.534565][T17728] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.4760'.
[ 1015.684771][T17370] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[ 1015.787753][T17742] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4766'.
[ 1015.844323][T17742] hsr_slave_0: left promiscuous mode
[ 1015.851912][T17742] hsr_slave_1: left promiscuous mode
[ 1015.966883][T17744] netlink: 'syz.1.4767': attribute type 27 has an invalid length.
[ 1016.158385][T17744] bond0: (slave bond_slave_0): Releasing backup interface
[ 1017.295962][T17759] syzkaller0: entered promiscuous mode
[ 1017.308723][T17759] syzkaller0: entered allmulticast mode
[ 1017.421663][T17370] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[ 1020.313094][T17775] veth0_vlan: left promiscuous mode
[ 1020.483854][T17775] veth0_vlan: entered promiscuous mode
[ 1020.867836][T17781] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4782'.
[ 1021.762241][T17805] syzkaller0: entered promiscuous mode
[ 1021.770619][T17805] syzkaller0: entered allmulticast mode
[ 1021.793475][T17810] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4795'.
[ 1021.807651][T17810] hsr_slave_0: left promiscuous mode
[ 1021.818792][T17810] hsr_slave_1: left promiscuous mode
[ 1025.078212][T17821] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.4797'.
[ 1025.368934][T17831] veth0_vlan: left promiscuous mode
[ 1025.408312][T17831] veth0_vlan: entered promiscuous mode
[ 1025.643552][T17370] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10
[ 1025.951641][T17851] netlink: 'syz.6.4813': attribute type 27 has an invalid length.
[ 1026.088000][T17851] bond0: (slave bond_slave_0): Releasing backup interface
[ 1026.661437][T17866] veth0_vlan: left promiscuous mode
[ 1026.695944][T17866] veth0_vlan: entered promiscuous mode
[ 1026.732894][T17370] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[ 1027.131881][T17370] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[ 1027.466878][T17370] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[ 1027.694116][T17370] Bluetooth: hci4: command 0x0406 tx timeout
[ 1027.744045][T17905] veth0_vlan: left promiscuous mode
[ 1027.775807][T17905] veth0_vlan: entered promiscuous mode
[ 1027.914313][T17908] netlink: 'syz.4.4835': attribute type 10 has an invalid length.
[ 1027.922320][T17908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4835'.
[ 1027.974967][T17908] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ
[ 1027.981614][T17908] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1028.084289][T17908] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ
[ 1028.822798][T17370] Bluetooth: hci1: command 0x0406 tx timeout
[ 1029.534005][T17370] Bluetooth: hci0: command 0x0406 tx timeout
[ 1029.894589][T17942] wg2: entered promiscuous mode
[ 1029.913281][T17942] wg2: entered allmulticast mode
[ 1030.081139][T17952] syzkaller0: entered promiscuous mode
[ 1030.093240][T17952] syzkaller0: entered allmulticast mode
[ 1033.237382][T17971] veth0_vlan: left promiscuous mode
[ 1033.253883][T17971] veth0_vlan: entered promiscuous mode
[ 1033.380841][T17975] warn_alloc: 2 callbacks suppressed
[ 1033.380858][T17975] syz.1.4871: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[ 1033.417195][T17975] CPU: 1 PID: 17975 Comm: syz.1.4871 Not tainted 6.6.101-syzkaller #0
[ 1033.425924][T17975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1033.436338][T17975] Call Trace:
[ 1033.439707][T17975]  <TASK>
[ 1033.442776][T17975]  dump_stack_lvl+0x16c/0x230
[ 1033.447532][T17975]  ? show_regs_print_info+0x20/0x20
[ 1033.452778][T17975]  ? load_image+0x3b0/0x3b0
[ 1033.457657][T17975]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1033.464314][T17975]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1033.470971][T17975]  warn_alloc+0x210/0x300
[ 1033.475465][T17975]  ? stack_trace_save+0x9c/0xe0
[ 1033.480383][T17975]  ? zone_watermark_ok_safe+0x230/0x230
[ 1033.486097][T17975]  ? kasan_set_track+0x5f/0x70
[ 1033.490901][T17975]  ? kasan_set_track+0x4e/0x70
[ 1033.495711][T17975]  ? __kasan_kmalloc+0x8f/0xa0
[ 1033.500622][T17975]  ? xsk_init_queue+0xb0/0x110
[ 1033.505438][T17975]  ? xsk_setsockopt+0x4db/0x6f0
[ 1033.510430][T17975]  ? do_sock_setsockopt+0x175/0x1a0
[ 1033.515765][T17975]  ? __x64_sys_setsockopt+0x184/0x200
[ 1033.521283][T17975]  __vmalloc_node_range+0x126/0x1320
[ 1033.526877][T17975]  ? free_vm_area+0x50/0x50
[ 1033.531997][T17975]  vmalloc_user+0x74/0x80
[ 1033.536509][T17975]  ? xskq_create+0xbf/0x170
[ 1033.541058][T17975]  xskq_create+0xbf/0x170
[ 1033.545442][T17975]  xsk_init_queue+0xb0/0x110
[ 1033.550107][T17975]  xsk_setsockopt+0x4db/0x6f0
[ 1033.554938][T17975]  ? xsk_poll+0x670/0x670
[ 1033.559460][T17975]  ? __fget_files+0x28/0x4d0
[ 1033.564129][T17975]  ? aa_sock_opt_perm+0x74/0x100
[ 1033.569474][T17975]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1033.575074][T17975]  ? security_socket_setsockopt+0x7e/0xa0
[ 1033.580917][T17975]  ? xsk_poll+0x670/0x670
[ 1033.585318][T17975]  do_sock_setsockopt+0x175/0x1a0
[ 1033.590494][T17975]  ? __fdget+0x180/0x210
[ 1033.594916][T17975]  __x64_sys_setsockopt+0x184/0x200
[ 1033.600324][T17975]  do_syscall_64+0x55/0xb0
[ 1033.605065][T17975]  ? clear_bhb_loop+0x40/0x90
[ 1033.609785][T17975]  ? clear_bhb_loop+0x40/0x90
[ 1033.614842][T17975]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1033.621610][T17975] RIP: 0033:0x7ff44558ebe9
[ 1033.626170][T17975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1033.646145][T17975] RSP: 002b:00007ff4437f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1033.654826][T17975] RAX: ffffffffffffffda RBX: 00007ff4457b5fa0 RCX: 00007ff44558ebe9
[ 1033.662928][T17975] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[ 1033.671086][T17975] RBP: 00007ff445611e19 R08: 0000000000000004 R09: 0000000000000000
[ 1033.679988][T17975] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1033.688129][T17975] R13: 00007ff4457b6038 R14: 00007ff4457b5fa0 R15: 00007fff796bda48
[ 1033.696370][T17975]  </TASK>
[ 1033.723398][T17975] Mem-Info:
[ 1033.726622][T17975] active_anon:12344 inactive_anon:0 isolated_anon:0
[ 1033.726622][T17975]  active_file:18560 inactive_file:40216 isolated_file:0
[ 1033.726622][T17975]  unevictable:768 dirty:167 writeback:0
[ 1033.726622][T17975]  slab_reclaimable:11067 slab_unreclaimable:100262
[ 1033.726622][T17975]  mapped:23643 shmem:1384 pagetables:446
[ 1033.726622][T17975]  sec_pagetables:0 bounce:0
[ 1033.726622][T17975]  kernel_misc_reclaimable:0
[ 1033.726622][T17975]  free:1332353 free_pcp:8732 free_cma:0
[ 1033.811493][T17975] Node 0 active_anon:49476kB inactive_anon:0kB active_file:74240kB inactive_file:160664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94572kB dirty:668kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10400kB pagetables:1784kB sec_pagetables:0kB all_unreclaimable? no
[ 1033.863095][T17975] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1033.911458][T17975] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1033.948571][T17975] lowmem_reserve[]: 0 2525 2526 2526 2526
[ 1033.962399][T17975] Node 0 DMA32 free:1412356kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:49324kB inactive_anon:0kB active_file:74240kB inactive_file:159348kB unevictable:1536kB writepending:668kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:21884kB local_pcp:14016kB free_cma:0kB
[ 1034.025165][T17975] lowmem_reserve[]: 0 0 1 1 1
[ 1034.038487][T17975] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 1034.090387][T17975] lowmem_reserve[]: 0 0 0 0 0
[ 1034.110677][T17975] Node 1 Normal free:3901688kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13728kB local_pcp:10048kB free_cma:0kB
[ 1034.213196][T17975] lowmem_reserve[]: 0 0 0 0 0
[ 1034.218359][T17975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1034.224782][T17984] wg2: entered promiscuous mode
[ 1034.289566][T17975] Node 0 DMA32: 1*4kB (E) 763*8kB (UE) 573*16kB (UME) 1000*32kB (UME) 1236*64kB (UME) 339*128kB (UME) 138*256kB (UM) 73*512kB (UME) 28*1024kB (UME) 10*2048kB (UM) 273*4096kB (UM) = 1409836kB
[ 1034.301871][T17984] wg2: entered allmulticast mode
[ 1034.365849][T17975] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1034.393152][T17975] Node 1 Normal: 226*4kB (UE) 48*8kB (UE) 41*16kB (UE) 189*32kB (UE) 57*64kB (UME) 9*128kB (UME) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3901688kB
[ 1034.417668][T17975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1034.456399][T17975] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1034.480011][T17989] netlink: 'syz.3.4867': attribute type 10 has an invalid length.
[ 1034.493123][T17975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1034.523464][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4867'.
[ 1034.532853][T17989] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check.
[ 1034.553519][T17975] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1034.562961][T17975] 60160 total pagecache pages
[ 1034.580985][T17975] 0 pages in swap cache
[ 1034.593101][T17975] Free swap  = 124996kB
[ 1034.597553][T17975] Total swap = 124996kB
[ 1034.601969][T17975] 2097051 pages RAM
[ 1034.613166][T17975] 0 pages HighMem/MovableOnly
[ 1034.618043][T17975] 416137 pages reserved
[ 1034.622341][T17975] 0 pages cma reserved
[ 1035.400122][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1035.423301][T18002] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1035.455660][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1035.473309][T18002] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1035.815192][T18010] wg2: entered promiscuous mode
[ 1035.834429][T18010] wg2: entered allmulticast mode
[ 1037.020088][T18028] netlink: 'syz.1.4884': attribute type 10 has an invalid length.
[ 1037.043533][T18028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4884'.
[ 1037.134560][T18028] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ
[ 1037.140923][T18028] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1037.214151][T18028] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ
[ 1037.643546][T18032] syzkaller0: entered promiscuous mode
[ 1037.654071][T18032] syzkaller0: entered allmulticast mode
[ 1040.790005][T18053] netlink: 'syz.3.4892': attribute type 4 has an invalid length.
[ 1040.814258][T18053] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4892'.
[ 1040.837763][T18053] wlan1: mtu less than device minimum
[ 1054.901083][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.909173][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1058.028909][T18090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1058.041852][T18090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1058.052350][T18090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1058.061073][T18090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1058.070297][T18090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1058.078675][T18090] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1058.089794][T18090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1058.099736][T18090] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1058.111629][T18090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1058.119806][T18090] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1058.127823][T18090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1058.135370][T18090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1058.510663][T18092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1058.526347][T18092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1058.535795][T18092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1058.544985][T18092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1058.554640][T18092] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1058.562146][T18092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1058.863885][T18084] chnl_net:caif_netlink_parms(): no params data found
[ 1060.173371][T18092] Bluetooth: hci3: command tx timeout
[ 1060.253241][T18092] Bluetooth: hci6: command tx timeout
[ 1060.653218][T18092] Bluetooth: hci5: command tx timeout
[ 1062.253190][T18092] Bluetooth: hci3: command tx timeout
[ 1062.337640][T18092] Bluetooth: hci6: command tx timeout
[ 1062.733144][T18092] Bluetooth: hci5: command tx timeout
[ 1064.333214][T18092] Bluetooth: hci3: command tx timeout
[ 1064.413217][T18092] Bluetooth: hci6: command tx timeout
[ 1064.813135][T18092] Bluetooth: hci5: command tx timeout
[ 1066.413265][T18092] Bluetooth: hci3: command tx timeout
[ 1066.493319][T18092] Bluetooth: hci6: command tx timeout
[ 1066.893127][T18092] Bluetooth: hci5: command tx timeout
[ 1072.672653][   T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1072.692622][   T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1072.702179][   T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1072.715932][   T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1072.724508][   T50] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1072.732583][   T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1074.813238][   T50] Bluetooth: hci7: command tx timeout
[ 1076.893265][   T50] Bluetooth: hci7: command tx timeout
[ 1078.973264][   T50] Bluetooth: hci7: command tx timeout
[ 1081.053212][   T50] Bluetooth: hci7: command tx timeout
[ 1116.338959][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.350795][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.794210][T18092] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1118.813387][T18092] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1118.821824][T18092] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1118.836499][T18092] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1118.846944][T18092] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1118.855001][T18092] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1118.999789][T18091] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1119.011166][T18091] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1119.032088][T18091] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1119.042298][T18091] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1119.059361][T18091] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1119.067386][T18091] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1119.107015][T18091] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1119.117063][T18091] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1119.125643][T18091] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1119.135299][T18091] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1119.143318][T18091] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1119.150735][T18091] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1120.893271][T18091] Bluetooth: hci8: command tx timeout
[ 1121.133347][T18091] Bluetooth: hci10: command tx timeout
[ 1121.213281][T18091] Bluetooth: hci9: command tx timeout
[ 1122.973166][T18091] Bluetooth: hci8: command tx timeout
[ 1123.214220][T18091] Bluetooth: hci10: command tx timeout
[ 1123.293307][T18091] Bluetooth: hci9: command tx timeout
[ 1125.053124][T18091] Bluetooth: hci8: command tx timeout
[ 1125.295092][T18091] Bluetooth: hci10: command tx timeout
[ 1125.373170][T18091] Bluetooth: hci9: command tx timeout
[ 1127.133103][T18091] Bluetooth: hci8: command tx timeout
[ 1127.373305][T18091] Bluetooth: hci10: command tx timeout
[ 1127.453176][T18091] Bluetooth: hci9: command tx timeout
[ 1133.570526][T18092] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1133.583430][T18092] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1133.593322][T18092] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1133.601783][T18092] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1133.609989][T18092] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1133.618147][T18092] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1135.693750][T18091] Bluetooth: hci11: command tx timeout
[ 1137.773256][T18091] Bluetooth: hci11: command tx timeout
[ 1139.853244][T18091] Bluetooth: hci11: command tx timeout
[ 1141.934363][T18091] Bluetooth: hci11: command tx timeout
[ 1146.393013][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1146.400020][    C1] rcu: 	0-....: (1 GPs behind) idle=e9b4/1/0x4000000000000000 softirq=103103/103105 fqs=5246
[ 1146.411614][    C1] rcu: 	         hardirqs   softirqs   csw/system
[ 1146.418072][    C1] rcu: 	 number: 10719063          0            0
[ 1146.424690][    C1] rcu: 	cputime:     6163      46364            0   ==> 52510(ms)
[ 1146.432876][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=166993, q=1392 ncpus=2)
[ 1146.440903][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1146.446365][    C0] NMI backtrace for cpu 0
[ 1146.446380][    C0] CPU: 0 PID: 18064 Comm: syz.3.4905 Not tainted 6.6.101-syzkaller #0
[ 1146.446397][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1146.446406][    C0] RIP: 0010:__lock_acquire+0xdef/0x7c80
[ 1146.446433][    C0] Code: 03 48 89 84 24 b8 00 00 00 42 80 3c 00 00 74 12 48 89 df e8 43 c0 75 00 49 b8 00 00 00 00 00 fc ff df 48 89 9c 24 88 00 00 00 <4c> 8b 3b 48 83 7c 24 60 00 75 31 48 c7 c0 80 a4 ea 96 48 c1 e8 03
[ 1146.446447][    C0] RSP: 0018:ffffc90000006ea0 EFLAGS: 00000046
[ 1146.446462][    C0] RAX: 1ffff110030718da RBX: ffff88801838c6d0 RCX: ffffffff81671b10
[ 1146.446474][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90da3520
[ 1146.446485][    C0] RBP: ffffc900000070e8 R08: dffffc0000000000 R09: 1ffffffff21b46a4
[ 1146.446497][    C0] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 0000000000000002
[ 1146.446508][    C0] R13: ffff88801838bc00 R14: ffff88801838c730 R15: ffff88801838c750
[ 1146.446520][    C0] FS:  00007fe1d61686c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1146.446535][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1146.446546][    C0] CR2: 0000200000001b00 CR3: 000000005dcc2000 CR4: 00000000003506f0
[ 1146.446561][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1146.446570][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1146.446579][    C0] Call Trace:
[ 1146.446587][    C0]  <IRQ>
[ 1146.446609][    C0]  ? verify_lock_unused+0x140/0x140
[ 1146.446632][    C0]  ? mark_lock+0x94/0x320
[ 1146.446650][    C0]  ? verify_lock_unused+0x140/0x140
[ 1146.446668][    C0]  ? __lock_acquire+0x1260/0x7c80
[ 1146.446690][    C0]  lock_acquire+0x197/0x410
[ 1146.446707][    C0]  ? __virt_addr_valid+0x18c/0x540
[ 1146.446733][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1146.446754][    C0]  ? rcu_read_unlock+0x8c/0xa0
[ 1146.446769][    C0]  ? __virt_addr_valid+0x18c/0x540
[ 1146.446790][    C0]  __virt_addr_valid+0x1a9/0x540
[ 1146.446818][    C0]  ? __virt_addr_valid+0x18c/0x540
[ 1146.446838][    C0]  kasan_addr_to_slab+0xd/0xd0
[ 1146.446856][    C0]  __kasan_record_aux_stack+0xf/0xc0
[ 1146.446878][    C0]  irq_work_queue_on+0xf5/0x220
[ 1146.446898][    C0]  rcu_read_unlock_special+0x3a7/0x4c0
[ 1146.446927][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[ 1146.446950][    C0]  ? __perf_cgroup_move+0x60/0x60
[ 1146.446976][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1146.446998][    C0]  __rcu_read_unlock+0x7c/0xd0
[ 1146.447023][    C0]  perf_event_output_forward+0x2e6/0x3a0
[ 1146.447047][    C0]  ? perf_event_output_forward+0x94/0x3a0
[ 1146.447064][    C0]  ? perf_prepare_header+0x1e0/0x1e0
[ 1146.447082][    C0]  ? perf_event_output_forward+0x2f7/0x3a0
[ 1146.447099][    C0]  ? perf_event_output_forward+0x94/0x3a0
[ 1146.447117][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1146.447136][    C0]  __perf_event_overflow+0x447/0x630
[ 1146.447153][    C0]  ? mark_lock+0x94/0x320
[ 1146.447174][    C0]  perf_swevent_event+0x2f5/0x5c0
[ 1146.447194][    C0]  ? perf_tp_event+0x13a0/0x13a0
[ 1146.447217][    C0]  perf_tp_event+0x4f9/0x13a0
[ 1146.447235][    C0]  ? verify_lock_unused+0x140/0x140
[ 1146.447253][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1146.447272][    C0]  ? perf_tp_event+0x12d7/0x13a0
[ 1146.447306][    C0]  ? sched_clock+0x3f/0x60
[ 1146.447322][    C0]  ? sched_clock_cpu+0x75/0x430
[ 1146.447337][    C0]  ? irq_work_single+0x122/0x230
[ 1146.447354][    C0]  ? __lock_acquire+0x7c80/0x7c80
[ 1146.447371][    C0]  ? flush_tlb_func+0x51b/0x650
[ 1146.447392][    C0]  perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1146.447414][    C0]  perf_trace_preemptirq_template+0x281/0x340
[ 1146.447444][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[ 1146.447461][    C0]  ? trace_event_raw_event_preemptirq_template+0x1e0/0x1e0
[ 1146.447485][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1146.447499][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1146.447516][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[ 1146.447532][    C0]  trace_irq_enable+0xbf/0xe0
[ 1146.447555][    C0]  trace_hardirqs_on+0x18/0x40
[ 1146.447576][    C0]  asm_sysvec_irq_work+0x1a/0x20
[ 1146.447591][    C0] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0
[ 1146.447616][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[ 1146.447630][    C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000206
[ 1146.447643][    C0] RAX: 854cf0faa0c49a00 RBX: 1ffff92000000f68 RCX: 854cf0faa0c49a00
[ 1146.447655][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780
[ 1146.447666][    C0] RBP: ffffc90000007bf0 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d
[ 1146.447678][    C0] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: ffffffff8cd35400
[ 1146.447690][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[ 1146.447712][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[ 1146.447742][    C0]  __rcu_read_unlock+0x7c/0xd0
[ 1146.447765][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 1146.447787][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 1146.447809][    C0]  ieee80211_iterate_active_interfaces_atomic+0x15a/0x180
[ 1146.447831][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[ 1146.447851][    C0]  __hrtimer_run_queues+0x51e/0xc40
[ 1146.447872][    C0]  ? hw_scan_work+0xf40/0xf40
[ 1146.447893][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[ 1146.447909][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[ 1146.447934][    C0]  hrtimer_run_softirq+0x187/0x2b0
[ 1146.447953][    C0]  handle_softirqs+0x280/0x820
[ 1146.447970][    C0]  ? __irq_exit_rcu+0xc7/0x190
[ 1146.447987][    C0]  ? do_softirq+0x180/0x180
[ 1146.448004][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1146.448027][    C0]  __irq_exit_rcu+0xc7/0x190
[ 1146.448048][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1146.448067][    C0]  irq_exit_rcu+0x9/0x20
[ 1146.448080][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1146.448105][    C0]  </IRQ>
[ 1146.448110][    C0]  <TASK>
[ 1146.448115][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1146.448143][    C0] RIP: 0010:finish_task_switch+0x26a/0x920
[ 1146.448159][    C0] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 40 6b 1a 09 e8 fb a3 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[ 1146.448172][    C0] RSP: 0018:ffffc9000ba5f7f8 EFLAGS: 00000282
[ 1146.448184][    C0] RAX: 854cf0faa0c49a00 RBX: 0000000000000000 RCX: 854cf0faa0c49a00
[ 1146.448195][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780
[ 1146.448206][    C0] RBP: ffffc9000ba5f850 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d
[ 1146.448218][    C0] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: ffff88801838bc00
[ 1146.448230][    C0] R13: dffffc0000000000 R14: ffff888047990000 R15: ffff8880b8e3cf08
[ 1146.448250][    C0]  ? finish_task_switch+0x265/0x920
[ 1146.448269][    C0]  __schedule+0x14da/0x44d0
[ 1146.448295][    C0]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1146.448316][    C0]  ? perf_trace_preemptirq_template+0x281/0x340
[ 1146.448340][    C0]  ? asan.module_dtor+0x20/0x20
[ 1146.448358][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1146.448377][    C0]  ? lock_chain_count+0x20/0x20
[ 1146.448397][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1146.448423][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1146.448446][    C0]  ? preempt_schedule+0xab/0xc0
[ 1146.448466][    C0]  preempt_schedule_common+0x82/0xc0
[ 1146.448487][    C0]  preempt_schedule+0xab/0xc0
[ 1146.448506][    C0]  ? schedule_preempt_disabled+0x20/0x20
[ 1146.448527][    C0]  ? _raw_spin_unlock_irqrestore+0xa9/0x110
[ 1146.448554][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1146.448579][    C0]  preempt_schedule_thunk+0x1a/0x30
[ 1146.448606][    C0]  try_to_wake_up+0x729/0x10b0
[ 1146.448634][    C0]  ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x16
[ 1146.448654][    C0]  wake_up_q+0xb6/0x100
[ 1146.448678][    C0]  futex_wake+0x40d/0x4b0
[ 1146.448698][    C0]  ? futex_wake_mark+0x150/0x150
[ 1146.448721][    C0]  do_futex+0x35d/0x3e0
[ 1146.448739][    C0]  ? __ia32_sys_get_robust_list+0x90/0x90
[ 1146.448755][    C0]  ? lock_chain_count+0x20/0x20
[ 1146.448774][    C0]  __se_sys_futex+0x36f/0x3f0
[ 1146.448793][    C0]  ? __x64_sys_futex+0xf0/0xf0
[ 1146.448811][    C0]  ? __x64_sys_futex+0x21/0xf0
[ 1146.448826][    C0]  do_syscall_64+0x55/0xb0
[ 1146.448844][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1146.448859][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1146.448874][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1146.448899][    C0] RIP: 0033:0x7fe1d538ebe9
[ 1146.448914][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1146.448927][    C0] RSP: 002b:00007fe1d61680e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1146.448942][    C0] RAX: ffffffffffffffda RBX: 00007fe1d55b5fa8 RCX: 00007fe1d538ebe9
[ 1146.448954][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe1d55b5fac
[ 1146.448963][    C0] RBP: 00007fe1d55b5fa0 R08: 0000000000745d1e R09: 0000000000000000
[ 1146.448973][    C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[ 1146.448982][    C0] R13: 00007fe1d55b6038 R14: 00007ffc9b81c1c0 R15: 00007ffc9b81c2a8
[ 1146.449001][    C0]  </TASK>