last executing test programs:

4.050211466s ago: executing program 0 (id=40536):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
socket$kcm(0x10, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

3.890212601s ago: executing program 0 (id=40538):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33)

3.52164301s ago: executing program 2 (id=40539):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0x18}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0xfffffffc}], 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x28, 0x0, 0x1, 0xff}, 0x28)

3.51624871s ago: executing program 0 (id=40549):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x10})
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0)

3.304431755s ago: executing program 2 (id=40544):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

3.301553315s ago: executing program 0 (id=40553):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0x18}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0xfffffffc}], 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x28, 0x0, 0x1, 0xff}, 0x28)

3.106316211s ago: executing program 2 (id=40545):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108802, 0x7ff, 0x6, 0x0, 0x40, 0x2, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x1ff)

1.16201444s ago: executing program 3 (id=40546):
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

1.16111655s ago: executing program 0 (id=40557):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0x8000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50)

1.142053371s ago: executing program 2 (id=40550):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x27)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, r4, 0x4, r1}, 0x10)

825.997419ms ago: executing program 3 (id=40551):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x0, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
close(0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33)

719.803972ms ago: executing program 2 (id=40552):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000)
close(0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42340, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230006)
close(r2)

719.499492ms ago: executing program 1 (id=40554):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x11, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8)
r3 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)

718.717252ms ago: executing program 0 (id=40555):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8)
close(r2)
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851)
sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8)

619.579404ms ago: executing program 3 (id=40556):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pi6   \x00'}, 0x20)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000680)="2d8a2aab7f8065dc4c77efdaaaa42cc02d671c", 0x0, 0x8, r3}, 0x38)

602.911795ms ago: executing program 1 (id=40558):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0x18}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0xfffffffc}], 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x28, 0x0, 0x1, 0xff}, 0x28)

401.20771ms ago: executing program 2 (id=40559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
close(0x3)

400.96209ms ago: executing program 3 (id=40560):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4042000)

399.91383ms ago: executing program 1 (id=40567):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0x18}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0xfffffffc}], 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x28, 0x0, 0x1, 0xff}, 0x28)

307.487172ms ago: executing program 1 (id=40561):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4)
recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)

269.983333ms ago: executing program 3 (id=40562):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0x102, 0x188, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50)

127.317987ms ago: executing program 1 (id=40563):
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

49.122649ms ago: executing program 3 (id=40564):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108802, 0x7ff, 0x6, 0x0, 0x40, 0x2, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x1ff)

0s ago: executing program 1 (id=40565):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

kernel console output (not intermixed with test programs):

ort 6081 - 0
[ 2266.487837][T15034] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2266.549557][T10562] Bluetooth: hci1: command tx timeout
[ 2266.688123][T15034] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2266.944930][T10562] Bluetooth: hci3: command tx timeout
[ 2266.981006][T15028] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2267.093160][T15010] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2267.178362][T15034] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2267.231534][T15028] 8021q: adding VLAN 0 to HW filter on device team0
[ 2267.241098][T15034] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2267.261128][T15034] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2267.301029][T30780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2267.308287][T30780] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2267.324156][T30780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2267.331506][T30780] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2267.355782][T15034] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2267.489277][T15010] veth0_vlan: entered promiscuous mode
[ 2267.524032][T15010] veth1_vlan: entered promiscuous mode
[ 2267.665949][T10562] Bluetooth: hci0: command tx timeout
[ 2267.723154][T15010] veth0_macvtap: entered promiscuous mode
[ 2267.742504][T20799] hsr_slave_0: left allmulticast mode
[ 2267.753286][T20799] Ÿë
: port 1(hsr_slave_0) entered disabled state
[ 2267.782486][T20799] bridge_slave_0: left promiscuous mode
[ 2267.789712][T20799] )³Û: port 1(bridge_slave_0) entered disabled state
[ 2267.814911][T20799] veth0_macvtap: left promiscuous mode
[ 2268.625027][T10562] Bluetooth: hci1: command tx timeout
[ 2268.719276][T15010] veth1_macvtap: entered promiscuous mode
[ 2268.846889][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2268.874175][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2268.907786][T15010] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2269.011890][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2269.023915][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.034427][T10562] Bluetooth: hci3: command tx timeout
[ 2269.043393][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2269.055032][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.078025][T15010] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2269.091917][T15034] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2269.109152][T15010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.118743][T15010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.127670][T15010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.137238][T15010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.294205][T15034] 8021q: adding VLAN 0 to HW filter on device team0
[ 2269.356373][T15028] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2269.401091][T30780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2269.408453][T30780] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2269.420187][T20801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2269.449054][T30780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2269.449066][T20801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2269.463670][T30780] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2269.575250][T10876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2269.583301][T10876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2269.597576][T15034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2269.614997][T15034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2269.738088][T15028] veth0_vlan: entered promiscuous mode
[ 2269.777092][T15028] veth1_vlan: entered promiscuous mode
[ 2269.887110][T15028] veth0_macvtap: entered promiscuous mode
[ 2269.910531][T15028] veth1_macvtap: entered promiscuous mode
[ 2269.998461][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2270.034668][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2270.044570][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2270.056770][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2270.083330][T15133] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.35097'.
[ 2270.090114][T15028] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2270.115774][T15131] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.35099'.
[ 2270.144588][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2270.177522][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2270.234768][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2270.265465][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2270.301186][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2270.324815][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2270.346939][T15028] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2270.464028][T15140] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.35102'.
[ 2270.464062][T15028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2270.517304][T15028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2270.536054][T15028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2270.569101][T15028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2270.725009][T15034] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2271.956746][T20813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2271.966767][T20813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2271.999624][T15034] veth0_vlan: entered promiscuous mode
[ 2272.034334][T10876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2272.049994][T15034] veth1_vlan: entered promiscuous mode
[ 2272.056963][T10876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2272.142530][T15034] veth0_macvtap: entered promiscuous mode
[ 2272.173003][T15034] veth1_macvtap: entered promiscuous mode
[ 2272.192480][T15153] delete_channel: no stack
[ 2272.208697][T15034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2272.224540][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2272.235483][T15034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2272.247515][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2272.257468][T15034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2272.268153][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2272.280159][T15034] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2272.302041][T15034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2272.313916][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2272.327481][T15034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2272.338760][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2272.349093][T15034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2272.371516][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2272.382854][T15034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2272.405155][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2272.428091][T15034] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2272.446717][T15034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2272.458156][T15034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2272.469443][T15034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2272.490309][T15034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2272.502559][T15158] netlink: 'syz.0.35112': attribute type 29 has an invalid length.
[ 2272.525617][T15158] netlink: 'syz.0.35112': attribute type 29 has an invalid length.
[ 2272.551949][T15160] netlink: 'syz.2.35103': attribute type 27 has an invalid length.
[ 2272.574238][T15161] netlink: 'syz.0.35112': attribute type 29 has an invalid length.
[ 2272.623739][T15158] netlink: 'syz.0.35112': attribute type 29 has an invalid length.
[ 2272.691377][T15158] netlink: 'syz.0.35112': attribute type 29 has an invalid length.
[ 2272.724103][T10876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2272.755559][T10876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2272.845153][T20801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2272.870609][T20801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2273.996268][T15190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.35117'.
[ 2274.645478][T15214] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.35126'.
[ 2275.226439][T15241] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.35140'.
[ 2275.291216][T15238] netlink: 'syz.1.35138': attribute type 2 has an invalid length.
[ 2275.324809][T15238] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35138'.
[ 2276.071730][T15277] netlink: 'syz.0.35163': attribute type 27 has an invalid length.
[ 2276.184179][T15282] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.35157'.
[ 2276.199293][T15272] netlink: 'syz.3.35153': attribute type 2 has an invalid length.
[ 2276.264825][T15272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35153'.
[ 2277.080873][T15309] netlink: 'syz.0.35168': attribute type 27 has an invalid length.
[ 2277.133153][T15307] delete_channel: no stack
[ 2278.826368][T15316] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.35174'.
[ 2281.911020][T15341] delete_channel: no stack
[ 2282.388373][T15358] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.35191'.
[ 2282.538722][T15364] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.35195'.
[ 2283.537159][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.543577][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.703731][T15374] veth1_macvtap: left promiscuous mode
[ 2283.724728][T15374] macsec0: entered allmulticast mode
[ 2284.142458][T15391] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.35208'.
[ 2285.543863][T15413] syzkaller0: entered promiscuous mode
[ 2285.549700][T15413] syzkaller0: entered allmulticast mode
[ 2286.302850][T15419] veth1_macvtap: left promiscuous mode
[ 2286.308646][T15419] macsec0: entered allmulticast mode
[ 2286.586195][T15434] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35225'.
[ 2286.683927][T15438] netlink: 'syz.0.35226': attribute type 27 has an invalid length.
[ 2287.767753][T15450] veth1_macvtap: left promiscuous mode
[ 2287.779190][T15450] macsec0: entered allmulticast mode
[ 2288.007318][T15454] syzkaller0: entered promiscuous mode
[ 2288.012899][T15454] syzkaller0: entered allmulticast mode
[ 2288.432407][T15467] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.35237'.
[ 2290.488587][T15486] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.35247'.
[ 2290.523187][T15486] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.35247'.
[ 2290.676093][T15491] syzkaller0: entered promiscuous mode
[ 2290.705108][T15491] syzkaller0: entered allmulticast mode
[ 2290.802399][T15494] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.35252'.
[ 2291.555184][T15517] netlink: 'syz.3.35263': attribute type 2 has an invalid length.
[ 2291.563144][T15517] netlink: 17259 bytes leftover after parsing attributes in process `syz.3.35263'.
[ 2291.681361][T15521] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.35264'.
[ 2291.760849][T15523] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.35265'.
[ 2291.805205][T15523] openvswitch: netlink: Duplicate key (type 0).
[ 2292.728666][T15545] netlink: 'syz.2.35275': attribute type 2 has an invalid length.
[ 2292.744907][T15545] netlink: 17259 bytes leftover after parsing attributes in process `syz.2.35275'.
[ 2292.825490][T15548] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35285'.
[ 2292.842605][T15548] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.35285'.
[ 2293.179655][T15560] openvswitch: netlink: Duplicate key (type 0).
[ 2293.479442][T15575] __nla_validate_parse: 2 callbacks suppressed
[ 2293.479462][T15575] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35289'.
[ 2293.523051][T15575] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.35289'.
[ 2293.605772][T15577] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.35298'.
[ 2293.644856][T15577] openvswitch: netlink: Duplicate key (type 0).
[ 2293.826723][T15579] netlink: 'syz.0.35290': attribute type 2 has an invalid length.
[ 2293.860932][T15579] netlink: 17259 bytes leftover after parsing attributes in process `syz.0.35290'.
[ 2294.029413][T15589] netlink: 'syz.3.35294': attribute type 10 has an invalid length.
[ 2294.049268][T15589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35294'.
[ 2294.109702][T15589] caif0: entered promiscuous mode
[ 2294.119917][T15589] caif0: entered allmulticast mode
[ 2294.140079][T15589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2298.473072][T15685] netlink: 'syz.2.35332': attribute type 10 has an invalid length.
[ 2298.483757][T15685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.35332'.
[ 2298.514537][T15685] caif0: entered promiscuous mode
[ 2298.521978][T15685] caif0: entered allmulticast mode
[ 2298.535140][T15685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2299.443069][T15721] netlink: 'syz.0.35347': attribute type 10 has an invalid length.
[ 2299.465024][T15721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35347'.
[ 2299.497303][T15721] caif0: entered promiscuous mode
[ 2299.502569][T15721] caif0: entered allmulticast mode
[ 2299.524941][T15721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2300.444024][T15760] netlink: 'syz.3.35366': attribute type 22 has an invalid length.
[ 2301.559521][T15797] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.35384'.
[ 2302.974474][T15819] netlink: 'syz.0.35392': attribute type 1 has an invalid length.
[ 2302.982653][T15819] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.35392'.
[ 2304.590321][T15845] netlink: 'syz.0.35403': attribute type 22 has an invalid length.
[ 2304.606545][T15848] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.35405'.
[ 2307.715611][T15870] netlink: 'syz.2.35424': attribute type 29 has an invalid length.
[ 2307.724042][T15870] netlink: 'syz.2.35424': attribute type 29 has an invalid length.
[ 2307.743495][T15870] netlink: 'syz.2.35424': attribute type 29 has an invalid length.
[ 2307.757498][T15870] netlink: 'syz.2.35424': attribute type 29 has an invalid length.
[ 2307.768458][T15870] netlink: 'syz.2.35424': attribute type 29 has an invalid length.
[ 2307.779975][T15870] netlink: 'syz.2.35424': attribute type 29 has an invalid length.
[ 2308.367014][T15879] netlink: 'syz.2.35417': attribute type 22 has an invalid length.
[ 2308.552322][T15882] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.35418'.
[ 2308.905848][T15894] netlink: 'syz.1.35427': attribute type 29 has an invalid length.
[ 2308.931457][T15894] netlink: 'syz.1.35427': attribute type 29 has an invalid length.
[ 2309.172726][T15902] netlink: 830 bytes leftover after parsing attributes in process `syz.1.35432'.
[ 2309.313998][T10562] Bluetooth: hci3: Malformed LE Event: 0x1d
[ 2311.282182][T15919] validate_nla: 4 callbacks suppressed
[ 2311.282202][T15919] netlink: 'syz.3.35439': attribute type 29 has an invalid length.
[ 2311.309320][T15919] netlink: 'syz.3.35439': attribute type 29 has an invalid length.
[ 2311.331150][T15919] netlink: 'syz.3.35439': attribute type 29 has an invalid length.
[ 2311.375260][T15919] netlink: 'syz.3.35439': attribute type 29 has an invalid length.
[ 2311.411216][T15919] netlink: 'syz.3.35439': attribute type 29 has an invalid length.
[ 2311.465551][T15919] netlink: 'syz.3.35439': attribute type 29 has an invalid length.
[ 2312.224915][T15937] mac80211_hwsim hwsim111 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2314.577864][T15985] mac80211_hwsim hwsim113 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2315.812891][T16008] mac80211_hwsim hwsim84 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2316.150846][T10876] wlan1: Trigger new scan to find an IBSS to join
[ 2317.115303][T30780] wlan1: Trigger new scan to find an IBSS to join
[ 2317.184069][T16038] netlink: 'syz.0.35486': attribute type 29 has an invalid length.
[ 2317.195212][T16038] netlink: 'syz.0.35486': attribute type 29 has an invalid length.
[ 2317.215081][T16038] netlink: 'syz.0.35486': attribute type 29 has an invalid length.
[ 2317.225871][T16038] netlink: 'syz.0.35486': attribute type 29 has an invalid length.
[ 2317.241783][T16038] netlink: 'syz.0.35486': attribute type 29 has an invalid length.
[ 2317.252094][T16038] netlink: 'syz.0.35486': attribute type 29 has an invalid length.
[ 2317.380870][T16045] mac80211_hwsim hwsim109 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2318.791085][T16068] mac80211_hwsim hwsim109 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2319.104164][T16075] mac80211_hwsim hwsim113 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2320.616297][T16113] bridge_slave_1: left allmulticast mode
[ 2320.622361][T16113] bridge_slave_1: left promiscuous mode
[ 2320.643919][T16113] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2320.681339][T16113] bridge_slave_0: left allmulticast mode
[ 2320.714868][T16113] bridge_slave_0: left promiscuous mode
[ 2320.726088][T16113] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2321.110744][T10876] wlan1: Trigger new scan to find an IBSS to join
[ 2321.113713][T30918] wlan1: Trigger new scan to find an IBSS to join
[ 2321.118146][T20801] wlan1: Trigger new scan to find an IBSS to join
[ 2322.313145][T10562] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[ 2323.019957][T10876] wlan1: Creating new IBSS network, BSSID 66:c8:8d:56:38:58
[ 2323.096910][T16137] netlink: 'syz.0.35527': attribute type 10 has an invalid length.
[ 2323.105833][T16137] netlink: 55 bytes leftover after parsing attributes in process `syz.0.35527'.
[ 2323.507712][T16149] netlink: 'syz.2.35531': attribute type 5 has an invalid length.
[ 2325.047212][T16171] netlink: 'syz.3.35542': attribute type 1 has an invalid length.
[ 2325.062096][T16171] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.35542'.
[ 2325.184936][T10876] wlan1: Trigger new scan to find an IBSS to join
[ 2325.191509][T30918] wlan1: Trigger new scan to find an IBSS to join
[ 2326.050239][T16185] netlink: 'syz.2.35547': attribute type 10 has an invalid length.
[ 2326.085216][T16185] netlink: 55 bytes leftover after parsing attributes in process `syz.2.35547'.
[ 2326.114896][T20813] wlan1: Creating new IBSS network, BSSID 56:58:ec:98:fd:bd
[ 2326.136731][T30918] wlan1: Creating new IBSS network, BSSID aa:0a:90:c4:69:41
[ 2326.574892][T16200] netlink: 763 bytes leftover after parsing attributes in process `syz.1.35556'.
[ 2327.095220][T16214] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.35565'.
[ 2327.213770][T16222] netlink: 'syz.1.35566': attribute type 10 has an invalid length.
[ 2327.224769][T16222] netlink: 55 bytes leftover after parsing attributes in process `syz.1.35566'.
[ 2327.464899][T16227] netlink: 763 bytes leftover after parsing attributes in process `syz.3.35568'.
[ 2328.332509][T16258] netlink: 'syz.3.35581': attribute type 10 has an invalid length.
[ 2328.341907][T16258] netlink: 55 bytes leftover after parsing attributes in process `syz.3.35581'.
[ 2328.953945][T16280] bridge_slave_1: left allmulticast mode
[ 2328.976115][T16280] bridge_slave_1: left promiscuous mode
[ 2329.005267][T16280] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2329.047292][T16280] bridge_slave_0: left allmulticast mode
[ 2329.069380][T16280] bridge_slave_0: left promiscuous mode
[ 2329.085129][T16280] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2329.363441][T16292] netlink: 'syz.3.35600': attribute type 10 has an invalid length.
[ 2329.388950][T16292] netlink: 55 bytes leftover after parsing attributes in process `syz.3.35600'.
[ 2330.723728][T16319] bond0: left allmulticast mode
[ 2330.734067][T16319] bond_slave_0: left allmulticast mode
[ 2330.741371][T16319] bond_slave_1: left allmulticast mode
[ 2330.760145][T16319] bridge0: port 3(bond0) entered disabled state
[ 2330.787275][T16319] bridge_slave_1: left allmulticast mode
[ 2330.798784][T16319] bridge_slave_1: left promiscuous mode
[ 2330.814292][T16319] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2330.838209][T16319] bridge_slave_0: left promiscuous mode
[ 2330.850697][T16319] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2331.907527][T16353] netlink: 'syz.3.35628': attribute type 21 has an invalid length.
[ 2331.927948][T16353] netlink: 'syz.3.35628': attribute type 4 has an invalid length.
[ 2331.944857][T16353] netlink: 'syz.3.35628': attribute type 23 has an invalid length.
[ 2331.952868][T16353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35628'.
[ 2332.272808][T30780] hsr_slave_0: left promiscuous mode
[ 2332.284018][T30780] hsr_slave_1: left promiscuous mode
[ 2332.293711][T30780] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2332.309720][T30780] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2332.332277][T30780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2332.354729][T30780] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2332.402637][T30780] bond0: left allmulticast mode
[ 2332.407771][T30780] bond_slave_0: left allmulticast mode
[ 2332.413463][T30780] bond_slave_1: left allmulticast mode
[ 2332.428486][T30780] bridge0: port 3(bond0) entered disabled state
[ 2332.446838][T30780] bridge_slave_1: left allmulticast mode
[ 2332.465171][T30780] bridge_slave_1: left promiscuous mode
[ 2332.499613][T30780] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2332.577164][T30780] bridge_slave_0: left promiscuous mode
[ 2332.583079][T30780] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2332.672337][T30780] veth1_macvtap: left promiscuous mode
[ 2332.684889][T30780] veth0_macvtap: left promiscuous mode
[ 2332.691152][T30780] veth1_vlan: left promiscuous mode
[ 2332.706056][T30780] veth0_vlan: left promiscuous mode
[ 2333.704260][T30780] team0 (unregistering): Port device team_slave_1 removed
[ 2333.800811][T30780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2333.810282][T30780] bond_slave_1 (unregistering): left promiscuous mode
[ 2333.865033][T30780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2333.874410][T30780] bond_slave_0 (unregistering): left promiscuous mode
[ 2334.288998][T30780] bond0 (unregistering): Released all slaves
[ 2334.400987][T16370] bridge_slave_1: left allmulticast mode
[ 2334.407075][T16370] bridge_slave_1: left promiscuous mode
[ 2334.412871][T16370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2334.423221][T16370] bridge_slave_0: left allmulticast mode
[ 2334.429592][T16370] bridge_slave_0: left promiscuous mode
[ 2334.435801][T16370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2334.890271][T16393] netlink: 'syz.2.35642': attribute type 21 has an invalid length.
[ 2334.906469][T16393] netlink: 'syz.2.35642': attribute type 4 has an invalid length.
[ 2334.924772][T16393] netlink: 'syz.2.35642': attribute type 23 has an invalid length.
[ 2334.932880][T16393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35642'.
[ 2335.249055][T16406] netlink: 'syz.1.35652': attribute type 1 has an invalid length.
[ 2335.280923][T16406] netlink: 'syz.1.35652': attribute type 2 has an invalid length.
[ 2335.311101][T16406] netlink: 'syz.1.35652': attribute type 2 has an invalid length.
[ 2335.335629][T16406] netlink: 'syz.1.35652': attribute type 3 has an invalid length.
[ 2335.343792][T16406] netlink: 'syz.1.35652': attribute type 4 has an invalid length.
[ 2335.358755][T16406] netlink: 'syz.1.35652': attribute type 5 has an invalid length.
[ 2335.367056][T16406] netlink: 'syz.1.35652': attribute type 6 has an invalid length.
[ 2335.379229][T16406] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.35652'.
[ 2335.798915][T16420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35657'.
[ 2340.398778][T16550] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.35715'.
[ 2342.598939][T16573] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.35726'.
[ 2342.655644][T16573] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[ 2344.975550][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.982100][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2346.342181][T16627] validate_nla: 11 callbacks suppressed
[ 2346.342203][T16627] netlink: 'syz.1.35751': attribute type 2 has an invalid length.
[ 2346.385218][T16627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35751'.
[ 2346.430994][T16627] netlink: 'syz.1.35751': attribute type 2 has an invalid length.
[ 2346.484877][T16627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35751'.
[ 2346.602870][T16634] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35753'.
[ 2346.627177][T16634] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[ 2348.814770][T16670] netlink: 'syz.1.35767': attribute type 29 has an invalid length.
[ 2348.823083][T16670] netlink: 'syz.1.35767': attribute type 29 has an invalid length.
[ 2348.872125][T16672] netlink: 'syz.1.35767': attribute type 29 has an invalid length.
[ 2348.890826][T16670] netlink: 'syz.1.35767': attribute type 29 has an invalid length.
[ 2348.914780][T16670] netlink: 'syz.1.35767': attribute type 29 has an invalid length.
[ 2348.930676][T16670] netlink: 'syz.1.35767': attribute type 29 has an invalid length.
[ 2348.943577][T16676] veth0_vlan: entered allmulticast mode
[ 2349.102293][T16677] veth0_vlan: left promiscuous mode
[ 2349.110560][T16677] veth0_vlan: entered promiscuous mode
[ 2350.502762][T16711] netlink: 'syz.1.35784': attribute type 21 has an invalid length.
[ 2350.512410][T16711] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.35784'.
[ 2353.110120][T30918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2356.188426][T20805] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2356.199968][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2362.009496][T16896] veth0_vlan: entered allmulticast mode
[ 2362.103089][T16897] veth0_vlan: left promiscuous mode
[ 2362.122563][T16897] veth0_vlan: entered promiscuous mode
[ 2363.724385][T16924] syz.3.35878[16924] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2363.725758][T16924] syz.3.35878[16924] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2368.329374][T17003] netlink: 'syz.2.35914': attribute type 2 has an invalid length.
[ 2368.371334][T17003] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.35914'.
[ 2368.503745][T10562] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9
[ 2370.251898][T17039] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.35930'.
[ 2370.784043][T17055] syzkaller0: entered promiscuous mode
[ 2370.797704][T17055] syzkaller0: entered allmulticast mode
[ 2373.309407][T17066] netlink: 188 bytes leftover after parsing attributes in process `syz.3.35942'.
[ 2373.481347][T17084] netlink: 'syz.3.35949': attribute type 29 has an invalid length.
[ 2373.505772][T17084] netlink: 'syz.3.35949': attribute type 29 has an invalid length.
[ 2373.597745][T17087] netlink: 830 bytes leftover after parsing attributes in process `syz.2.35951'.
[ 2373.832284][T17095] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.35954'.
[ 2374.151449][T17101] netlink: 'syz.3.35959': attribute type 2 has an invalid length.
[ 2374.177376][T17101] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.35959'.
[ 2374.554954][T10562] Bluetooth: hci1: Malformed HCI Event
[ 2375.359925][T17121] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.35966'.
[ 2375.451100][T17125] netlink: 188 bytes leftover after parsing attributes in process `syz.0.35974'.
[ 2375.864038][T17136] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.35972'.
[ 2376.029188][T17146] netlink: 'syz.3.35978': attribute type 3 has an invalid length.
[ 2376.054754][T17146] netlink: 'syz.3.35978': attribute type 5 has an invalid length.
[ 2376.874990][T17153] netlink: 'syz.0.35988': attribute type 30 has an invalid length.
[ 2376.923635][T17154] netlink: 188 bytes leftover after parsing attributes in process `syz.2.35980'.
[ 2377.095295][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.104525][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.113779][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.122998][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.132241][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.141469][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.151789][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.161015][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.170336][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2377.179543][T17162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2378.640467][T17183] netlink: 188 bytes leftover after parsing attributes in process `syz.1.35995'.
[ 2378.749968][T17187] syzkaller0: entered promiscuous mode
[ 2378.768057][T17187] syzkaller0: entered allmulticast mode
[ 2378.795433][T17192] netlink: 'syz.2.36008': attribute type 30 has an invalid length.
[ 2378.809005][T17194] netlink: 830 bytes leftover after parsing attributes in process `syz.1.36000'.
[ 2379.776750][T17205] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.36005'.
[ 2381.819485][T17213] netlink: 188 bytes leftover after parsing attributes in process `syz.1.36009'.
[ 2381.947366][T17218] netlink: 830 bytes leftover after parsing attributes in process `syz.0.36010'.
[ 2382.207907][T17229] netlink: 'syz.1.36023': attribute type 10 has an invalid length.
[ 2382.223006][T17229] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.36023'.
[ 2382.236657][T17229] net_ratelimit: 3321 callbacks suppressed
[ 2382.236681][T17229] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 2382.270367][T17231] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.36015'.
[ 2382.738841][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.748168][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.757403][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.766628][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.775877][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.785129][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.794291][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.803840][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.813073][T17237] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2382.870704][T17215] Bluetooth: hci1: command 0x0406 tx timeout
[ 2382.877416][T17215] Bluetooth: hci0: command 0x0406 tx timeout
[ 2382.884041][T17215] Bluetooth: hci3: command 0x0406 tx timeout
[ 2383.323954][T17248] syzkaller0: entered promiscuous mode
[ 2383.329721][T17248] syzkaller0: entered allmulticast mode
[ 2384.036003][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2387.823766][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2387.835204][T30918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2388.012123][T17345] net_ratelimit: 3320 callbacks suppressed
[ 2388.012147][T17345] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2388.025519][T17345] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2388.487331][T17361] netlink: 'syz.2.36074': attribute type 10 has an invalid length.
[ 2388.505632][T17361] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.36074'.
[ 2388.529551][T17361] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 2391.588210][T17371] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2391.594826][T17371] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2392.383111][T17399] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2392.389801][T17399] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2395.749789][T17435] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2395.756379][T17435] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2399.248184][T17464] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2399.254789][T17464] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2399.495807][T17470] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.36127'.
[ 2399.603684][T17476] netlink: 'syz.1.36129': attribute type 3 has an invalid length.
[ 2399.629721][T17476] netlink: 'syz.1.36129': attribute type 6 has an invalid length.
[ 2399.657468][T17476] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.36129'.
[ 2399.863313][T17482] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.36131'.
[ 2400.371148][T17504] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.36141'.
[ 2400.977445][T17525] netlink: 'syz.2.36150': attribute type 3 has an invalid length.
[ 2401.012047][T17525] netlink: 'syz.2.36150': attribute type 6 has an invalid length.
[ 2401.033528][T17525] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.36150'.
[ 2401.469568][T17534] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.36154'.
[ 2402.370744][T17556] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.36171'.
[ 2402.384231][T17555] netlink: 'syz.3.36163': attribute type 3 has an invalid length.
[ 2402.409655][T17555] netlink: 'syz.3.36163': attribute type 6 has an invalid length.
[ 2402.426247][T17555] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.36163'.
[ 2402.982239][T17575] syz.0.36172[17575] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2402.982731][T17575] syz.0.36172[17575] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2403.067913][T17580] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.36176'.
[ 2403.116352][T17581] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.36174'.
[ 2404.511688][T17615] netlink: 'syz.1.36192': attribute type 9 has an invalid length.
[ 2404.520579][T17615] netlink: 'syz.1.36192': attribute type 23 has an invalid length.
[ 2404.532685][T17615] __nla_validate_parse: 2 callbacks suppressed
[ 2404.532702][T17615] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.36192'.
[ 2406.466590][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.473074][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2407.250350][T17674] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.36221'.
[ 2407.274736][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36221'.
[ 2412.419761][T17706] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.36234'.
[ 2412.542090][T17709] syz.1.36236[17709] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2412.542555][T17709] syz.1.36236[17709] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2413.642888][T17738] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36247'.
[ 2414.268322][T17752] netlink: 'syz.2.36255': attribute type 10 has an invalid length.
[ 2414.286914][T17752] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.36255'.
[ 2414.959901][T20805] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2415.896613][T17785] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36269'.
[ 2421.020779][T17830] netlink: 'syz.1.36292': attribute type 1 has an invalid length.
[ 2421.209429][T20813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2421.213717][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2422.708757][T17846] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.36299'.
[ 2423.305453][T17855] netlink: 'syz.0.36303': attribute type 10 has an invalid length.
[ 2423.356448][T17855] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[ 2424.060507][T17874] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.36311'.
[ 2425.173529][T17895] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36321'.
[ 2425.392823][T17898] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.36323'.
[ 2429.730449][T17961] netlink: 'syz.2.36348': attribute type 10 has an invalid length.
[ 2429.801404][T17961] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[ 2430.537300][T17989] netlink: 'syz.3.36361': attribute type 10 has an invalid length.
[ 2430.560723][T17989] veth1_to_bridge: entered promiscuous mode
[ 2430.581305][T17989] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[ 2433.931791][T18055] netlink: 'syz.2.36388': attribute type 10 has an invalid length.
[ 2433.974783][T18055] netlink: 'syz.2.36388': attribute type 4 has an invalid length.
[ 2434.014910][T18055] netlink: 116 bytes leftover after parsing attributes in process `syz.2.36388'.
[ 2434.048938][T18055] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2434.942157][T18074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.36398'.
[ 2438.360303][T18106] netlink: 'syz.3.36410': attribute type 10 has an invalid length.
[ 2438.370768][T18106] netlink: 'syz.3.36410': attribute type 4 has an invalid length.
[ 2438.382437][T18106] netlink: 116 bytes leftover after parsing attributes in process `syz.3.36410'.
[ 2438.409853][T18106] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2440.621534][T18140] netlink: 'syz.0.36421': attribute type 10 has an invalid length.
[ 2440.644814][T18140] netlink: 'syz.0.36421': attribute type 4 has an invalid length.
[ 2440.653587][T18140] netlink: 116 bytes leftover after parsing attributes in process `syz.0.36421'.
[ 2440.677532][T18140] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2445.598535][ T5083] Bluetooth: hci0: ACL packet too small
[ 2445.886551][T18245] netlink: 'syz.0.36478': attribute type 1 has an invalid length.
[ 2445.901760][T18245] netlink: 'syz.0.36478': attribute type 4 has an invalid length.
[ 2445.912164][T18245] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.36478'.
[ 2446.090307][T20813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2447.436576][T18288] netlink: 'syz.2.36490': attribute type 1 has an invalid length.
[ 2447.482148][T18288] netlink: 'syz.2.36490': attribute type 4 has an invalid length.
[ 2447.504592][T18288] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.36490'.
[ 2447.686737][T18296] netlink: 'syz.1.36503': attribute type 1 has an invalid length.
[ 2447.697589][T18296] netlink: 'syz.1.36503': attribute type 4 has an invalid length.
[ 2447.710857][T18296] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.36503'.
[ 2449.314728][T18323] netlink: 'syz.3.36505': attribute type 10 has an invalid length.
[ 2449.323198][T18323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36505'.
[ 2449.333737][T18323] veth0_vlan: left allmulticast mode
[ 2449.418790][T18323] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2449.640327][T18334] netlink: 'syz.3.36512': attribute type 21 has an invalid length.
[ 2449.654516][T18334] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.36512'.
[ 2450.280595][T18354] netlink: 14 bytes leftover after parsing attributes in process `syz.1.36522'.
[ 2450.293518][T18354] netlink: get zone limit has 4 unknown bytes
[ 2450.484238][T18358] netlink: 'syz.1.36523': attribute type 21 has an invalid length.
[ 2450.495652][T18358] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.36523'.
[ 2450.641739][T18360] netlink: 168 bytes leftover after parsing attributes in process `syz.1.36526'.
[ 2451.471904][T18388] netlink: 'syz.0.36539': attribute type 21 has an invalid length.
[ 2451.487870][T18388] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.36539'.
[ 2452.336965][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2452.440352][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2455.671267][T18430] syzkaller0: entered promiscuous mode
[ 2455.747294][T18430] syzkaller0: entered allmulticast mode
[ 2455.900713][T18439] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.36561'.
[ 2458.369389][T18461] netlink: 'syz.1.36570': attribute type 10 has an invalid length.
[ 2458.415931][T18461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36570'.
[ 2458.470616][T18461] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2458.903879][T18473] netlink: 'syz.2.36584': attribute type 10 has an invalid length.
[ 2458.962162][T18473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36584'.
[ 2459.016544][T18473] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2459.468989][T18488] syzkaller0: entered promiscuous mode
[ 2459.480550][T18488] syzkaller0: entered allmulticast mode
[ 2461.788838][T18499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.36586'.
[ 2462.208222][T18511] netlink: 'syz.0.36589': attribute type 10 has an invalid length.
[ 2462.236215][T18511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36589'.
[ 2462.275252][T18511] veth0_vlan: left allmulticast mode
[ 2462.290909][T18511] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2463.903821][T18544] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.36605'.
[ 2463.920115][T18547] netlink: 'syz.2.36606': attribute type 10 has an invalid length.
[ 2463.941210][T18547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36606'.
[ 2463.999092][T18547] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2464.076726][T18544] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.36605'.
[ 2464.204293][T18550] syzkaller0: entered promiscuous mode
[ 2464.211845][T18550] syzkaller0: entered allmulticast mode
[ 2467.527509][T18577] netlink: 'syz.3.36619': attribute type 10 has an invalid length.
[ 2467.553913][T18577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36619'.
[ 2467.579256][T18577] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2467.802779][T18582] syzkaller0: entered promiscuous mode
[ 2467.812893][T18582] syzkaller0: entered allmulticast mode
[ 2467.834029][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.841291][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2471.221402][T18613] netlink: 'syz.0.36632': attribute type 10 has an invalid length.
[ 2471.238961][T18613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36632'.
[ 2471.263365][T18613] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2474.929856][T18678] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.36661'.
[ 2475.692058][T18696] netlink: 'syz.0.36668': attribute type 10 has an invalid length.
[ 2475.734809][T18696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36668'.
[ 2475.758742][T18696] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2475.966637][T18704] netlink: 'syz.2.36681': attribute type 10 has an invalid length.
[ 2476.015469][T18704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36681'.
[ 2476.062203][T18704] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2477.153720][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2480.538271][T18745] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.36690'.
[ 2480.806555][T18751] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.36694'.
[ 2482.401688][T18773] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.36702'.
[ 2483.464761][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2483.501928][T18788] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.36708'.
[ 2484.095916][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2486.410991][T18831] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36729'.
[ 2488.260926][T18857] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.36741'.
[ 2488.917354][T18866] syzkaller0: entered promiscuous mode
[ 2488.922925][T18866] syzkaller0: entered allmulticast mode
[ 2492.615845][T18889] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36753'.
[ 2493.145532][T18900] netlink: 'syz.0.36759': attribute type 6 has an invalid length.
[ 2493.177322][T18902] netlink: 'syz.3.36761': attribute type 29 has an invalid length.
[ 2493.187641][T18900] netlink: 'syz.0.36759': attribute type 1 has an invalid length.
[ 2493.241743][T18900] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.36759'.
[ 2494.823132][T18902] netlink: 'syz.3.36761': attribute type 29 has an invalid length.
[ 2495.052456][T18918] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36766'.
[ 2496.054281][T18939] netlink: 'syz.1.36775': attribute type 6 has an invalid length.
[ 2496.076397][T18941] netlink: 'syz.0.36776': attribute type 29 has an invalid length.
[ 2496.084931][T18939] netlink: 'syz.1.36775': attribute type 1 has an invalid length.
[ 2496.092990][T18939] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.36775'.
[ 2496.105203][T18941] netlink: 'syz.0.36776': attribute type 29 has an invalid length.
[ 2496.115407][T18941] netlink: 'syz.0.36776': attribute type 29 has an invalid length.
[ 2496.154952][T18941] netlink: 'syz.0.36776': attribute type 29 has an invalid length.
[ 2496.251625][T18945] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.36778'.
[ 2497.254058][T18967] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.36789'.
[ 2499.046401][T18997] validate_nla: 8 callbacks suppressed
[ 2499.046443][T18997] netlink: 'syz.2.36799': attribute type 6 has an invalid length.
[ 2499.061239][T18997] netlink: 'syz.2.36799': attribute type 1 has an invalid length.
[ 2499.070375][T18997] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.36799'.
[ 2499.486220][T19006] netlink: 'syz.0.36813': attribute type 6 has an invalid length.
[ 2499.497083][T19006] netlink: 'syz.0.36813': attribute type 1 has an invalid length.
[ 2499.506879][T19006] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.36813'.
[ 2500.177421][T19016] netlink: 'syz.0.36816': attribute type 13 has an invalid length.
[ 2500.195452][T19016] netlink: 'syz.0.36816': attribute type 4 has an invalid length.
[ 2500.219861][T19017] netlink: 'syz.2.36806': attribute type 29 has an invalid length.
[ 2500.223557][T19016] netlink: 120 bytes leftover after parsing attributes in process `syz.0.36816'.
[ 2500.268458][T19017] netlink: 'syz.2.36806': attribute type 29 has an invalid length.
[ 2500.318201][T19019] netlink: 'syz.2.36806': attribute type 29 has an invalid length.
[ 2500.365025][T19017] netlink: 'syz.2.36806': attribute type 29 has an invalid length.
[ 2501.414319][T19044] netlink: 120 bytes leftover after parsing attributes in process `syz.2.36821'.
[ 2501.872254][T19058] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.36828'.
[ 2502.244428][T19068] netlink: 120 bytes leftover after parsing attributes in process `syz.3.36834'.
[ 2502.431171][T19073] syzkaller0: entered promiscuous mode
[ 2502.436965][T19073] syzkaller0: entered allmulticast mode
[ 2502.445684][T19073] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[ 2504.275156][T19097] syzkaller0: entered promiscuous mode
[ 2504.288601][T19097] syzkaller0: entered allmulticast mode
[ 2507.246474][T19146] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.36869'.
[ 2507.277574][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36869'.
[ 2507.539377][T19160] validate_nla: 10 callbacks suppressed
[ 2507.539398][T19160] netlink: 'syz.3.36876': attribute type 10 has an invalid length.
[ 2507.590516][T19160] team0: Port device netdevsim0 added
[ 2507.653879][T19160] netlink: 'syz.3.36876': attribute type 10 has an invalid length.
[ 2510.090015][T20813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2510.581060][T19160] team0: Port device netdevsim0 removed
[ 2510.603325][T19160] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 2510.611675][T19160] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2511.627533][T19196] netlink: 'syz.1.36892': attribute type 10 has an invalid length.
[ 2511.663756][T19196] team0: Port device netdevsim0 added
[ 2511.705600][T19196] netlink: 'syz.1.36892': attribute type 10 has an invalid length.
[ 2511.767681][T19196] team0: Port device netdevsim0 removed
[ 2511.784386][T19196] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2512.126841][T19208] netlink: 'syz.0.36906': attribute type 10 has an invalid length.
[ 2512.305856][T19208] team0: Port device netdevsim0 added
[ 2512.334788][T19213] netlink: 'syz.0.36906': attribute type 10 has an invalid length.
[ 2512.484095][T19213] team0: Port device netdevsim0 removed
[ 2512.517647][T19213] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2515.143671][T19242] netlink: 'syz.1.36917': attribute type 10 has an invalid length.
[ 2515.159753][T19242] syz_tun: entered promiscuous mode
[ 2515.199658][T19242] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2515.535560][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2515.927891][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2515.982542][T19261] netlink: 'syz.2.36912': attribute type 10 has an invalid length.
[ 2516.852392][T19261] team0: Port device netdevsim0 added
[ 2516.871153][T19262] netlink: 'syz.2.36912': attribute type 10 has an invalid length.
[ 2516.906917][T19262] team0: Port device netdevsim0 removed
[ 2516.928111][T19262] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2518.252388][T19296] netlink: 'syz.2.36933': attribute type 10 has an invalid length.
[ 2518.273111][T19296] bond0: (slave netdevsim0): Releasing backup interface
[ 2518.299342][T19296] team0: Port device netdevsim0 added
[ 2518.330570][T19301] netlink: 'syz.2.36933': attribute type 10 has an invalid length.
[ 2519.299335][T19301] team0: Port device netdevsim0 removed
[ 2519.318149][T19301] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2523.150016][T19339] syzkaller0: entered promiscuous mode
[ 2523.155904][T19339] syzkaller0: entered allmulticast mode
[ 2529.269347][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.276271][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2532.062800][ T5083] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10
[ 2534.156772][ T5083] Bluetooth: hci0: command 0x0406 tx timeout
[ 2537.598177][T19459] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.37007'.
[ 2541.118233][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2546.851890][T20813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2547.057252][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2548.849354][T19526] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.37045'.
[ 2553.144135][T10876] tipc: Subscription rejected, illegal request
[ 2557.402041][T19559] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.37049'.
[ 2564.464308][T10876] tipc: Subscription rejected, illegal request
[ 2568.325259][T16382] tipc: Subscription rejected, illegal request
[ 2572.046375][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2574.243447][T19711] pimreg0: entered promiscuous mode
[ 2574.251411][T19711] pimreg0: entered allmulticast mode
[ 2574.263982][T30780] pimreg0: tun_net_xmit 48
[ 2574.282842][T19711] pimreg0: tun_chr_ioctl cmd 1074025677
[ 2574.290332][T19711] pimreg0: Linktype set failed because interface is up
[ 2574.897271][T19720] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2577.407378][T19773] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2578.493501][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2578.504861][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2582.093577][T19778] netlink: 'syz.2.37147': attribute type 21 has an invalid length.
[ 2582.101965][T19778] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.37147'.
[ 2584.723343][T19884] lo: entered allmulticast mode
[ 2584.770955][T19884] lo: entered promiscuous mode
[ 2584.790373][T19884] lo: left allmulticast mode
[ 2590.708475][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.715041][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2590.849262][T19976] lo: entered allmulticast mode
[ 2590.905817][T19976] lo: entered promiscuous mode
[ 2590.910708][T19976] lo: left allmulticast mode
[ 2592.125892][T20008] lo: entered allmulticast mode
[ 2592.225469][T20008] lo: entered promiscuous mode
[ 2592.235193][T20008] lo: left allmulticast mode
[ 2592.339371][T20018] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.37260'.
[ 2593.044000][T20038] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.37278'.
[ 2596.204796][T20048] lo: entered allmulticast mode
[ 2596.257869][T20048] lo: entered promiscuous mode
[ 2596.262747][T20048] lo: left allmulticast mode
[ 2596.637078][T20054] syzkaller0: entered promiscuous mode
[ 2596.642849][T20054] syzkaller0: entered allmulticast mode
[ 2597.637972][T20071] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.37285'.
[ 2598.097482][T20081] netlink: 'syz.1.37290': attribute type 2 has an invalid length.
[ 2598.106087][T20081] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.37290'.
[ 2603.480879][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2604.098389][T20128] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.37307'.
[ 2606.898069][T20179] sctp: [Deprecated]: syz.2.37328 (pid 20179) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2606.898069][T20179] Use struct sctp_sack_info instead
[ 2609.432285][ T5083] Bluetooth: hci2: Dropping invalid advertising data
[ 2609.439208][ T5083] Bluetooth: hci2: Malformed LE Event: 0x02
[ 2610.445942][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2610.460312][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2611.245183][T20243] netlink: 'syz.3.37355': attribute type 10 has an invalid length.
[ 2611.253601][T20243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37355'.
[ 2611.332160][T20243] batman_adv: batadv0: Adding interface: veth0_vlan
[ 2611.342389][T20243] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2611.383828][T20243] batman_adv: batadv0: Interface activated: veth0_vlan
[ 2611.565036][T20251] syzkaller0: entered promiscuous mode
[ 2611.575178][T20251] syzkaller0: entered allmulticast mode
[ 2611.886539][T20263] sctp: [Deprecated]: syz.1.37362 (pid 20263) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2611.886539][T20263] Use struct sctp_sack_info instead
[ 2614.806552][T20287] sctp: [Deprecated]: syz.0.37371 (pid 20287) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2614.806552][T20287] Use struct sctp_sack_info instead
[ 2615.814692][T20307] syzkaller0: entered promiscuous mode
[ 2615.822380][T20307] syzkaller0: entered allmulticast mode
[ 2617.357067][ T5083] Bluetooth: hci1: Dropping invalid advertising data
[ 2617.365273][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02
[ 2617.385910][T20329] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.37387'.
[ 2618.792347][ T5083] Bluetooth: hci0: Dropping invalid advertising data
[ 2618.800550][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02
[ 2620.599073][T20371] netlink: 'syz.0.37405': attribute type 10 has an invalid length.
[ 2620.616140][T20371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37405'.
[ 2620.626600][T20371] batman_adv: batadv0: Adding interface: veth0_vlan
[ 2620.633257][T20371] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2620.665123][T20371] batman_adv: batadv0: Interface activated: veth0_vlan
[ 2621.014053][T20391] netlink: 'syz.2.37420': attribute type 21 has an invalid length.
[ 2621.024344][T20391] netlink: 'syz.2.37420': attribute type 19 has an invalid length.
[ 2621.032385][T20391] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.37420'.
[ 2621.743299][T20406] syzkaller0: entered promiscuous mode
[ 2621.749623][T20406] syzkaller0: entered allmulticast mode
[ 2625.871172][T20414] netlink: 'syz.1.37418': attribute type 10 has an invalid length.
[ 2625.879313][T20414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37418'.
[ 2625.889145][T20414] batman_adv: batadv0: Adding interface: veth0_vlan
[ 2625.895872][T20414] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2625.922785][T20414] batman_adv: batadv0: Interface activated: veth0_vlan
[ 2627.982150][T20454] netlink: 'syz.2.37439': attribute type 10 has an invalid length.
[ 2627.990945][T20454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.37439'.
[ 2628.005949][T20454] batman_adv: batadv0: Adding interface: veth0_vlan
[ 2628.012955][T20454] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2628.040202][T20454] batman_adv: batadv0: Interface activated: veth0_vlan
[ 2631.821235][T20487] netlink: 'syz.0.37451': attribute type 10 has an invalid length.
[ 2631.846969][T20487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37451'.
[ 2634.512443][T20805] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2640.707703][T20583] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2640.714259][T20583] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2641.375797][T20805] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2641.478037][T20805] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2644.518514][T20615] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2644.525318][T20615] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2649.846782][T20652] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2649.853353][T20652] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2652.046991][T20685] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37533'.
[ 2652.149297][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.155789][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2655.021353][ T5083] Bluetooth: hci3: Malformed LE Event: 0x02
[ 2665.532379][T20801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2665.975827][T20866] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37620'.
[ 2666.002591][T20866] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2667.072218][T20873] netlink: 105940 bytes leftover after parsing attributes in process `syz.0.37616'.
[ 2669.639408][T20903] netlink: 105940 bytes leftover after parsing attributes in process `syz.3.37630'.
[ 2670.575860][T20907] syzkaller0: entered promiscuous mode
[ 2670.581689][T20907] syzkaller0: entered allmulticast mode
[ 2670.602898][T20909] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37631'.
[ 2670.613105][T20909] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2673.512045][T20939] netlink: 105940 bytes leftover after parsing attributes in process `syz.2.37645'.
[ 2673.681293][T20945] netlink: 'syz.0.37649': attribute type 21 has an invalid length.
[ 2673.826725][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2673.828979][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2676.130426][T20976] netlink: 'syz.1.37662': attribute type 21 has an invalid length.
[ 2676.384330][T20984] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37665'.
[ 2676.418537][T20984] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2678.040741][T20991] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.37668'.
[ 2681.290849][T21019] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37681'.
[ 2681.322941][T21019] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2683.112533][T21060] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37696'.
[ 2683.122556][T21060] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2683.594320][T21069] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.37701'.
[ 2693.197069][T21163] netlink: 539 bytes leftover after parsing attributes in process `syz.0.37743'.
[ 2693.436465][T21167] syzkaller0: entered promiscuous mode
[ 2693.442035][T21167] syzkaller0: entered allmulticast mode
[ 2693.982539][T21182] syz.1.37752: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[ 2694.017424][T21182] CPU: 0 PID: 21182 Comm: syz.1.37752 Not tainted syzkaller #0
[ 2694.025073][T21182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2694.035184][T21182] Call Trace:
[ 2694.038576][T21182]  <TASK>
[ 2694.041549][T21182]  dump_stack_lvl+0x18c/0x250
[ 2694.046391][T21182]  ? show_regs_print_info+0x20/0x20
[ 2694.051651][T21182]  ? load_image+0x420/0x420
[ 2694.056236][T21182]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 2694.062793][T21182]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 2694.069370][T21182]  warn_alloc+0x246/0x340
[ 2694.073759][T21182]  ? stack_trace_save+0xaa/0x100
[ 2694.078762][T21182]  ? zone_watermark_ok_safe+0x230/0x230
[ 2694.084382][T21182]  ? kasan_set_track+0x5f/0x70
[ 2694.089207][T21182]  ? kasan_set_track+0x4e/0x70
[ 2694.094036][T21182]  ? __kasan_kmalloc+0x8f/0xa0
[ 2694.098842][T21182]  ? xsk_init_queue+0xad/0x100
[ 2694.103801][T21182]  ? xsk_setsockopt+0x4c9/0x750
[ 2694.108733][T21182]  ? do_sock_setsockopt+0x175/0x1a0
[ 2694.114004][T21182]  ? __x64_sys_setsockopt+0x182/0x200
[ 2694.119458][T21182]  __vmalloc_node_range+0x129/0x1320
[ 2694.124847][T21182]  ? free_vm_area+0x50/0x50
[ 2694.129416][T21182]  vmalloc_user+0x74/0x80
[ 2694.133802][T21182]  ? xskq_create+0xbf/0x170
[ 2694.138344][T21182]  xskq_create+0xbf/0x170
[ 2694.142724][T21182]  xsk_init_queue+0xad/0x100
[ 2694.147362][T21182]  xsk_setsockopt+0x4c9/0x750
[ 2694.152086][T21182]  ? xsk_poll+0x670/0x670
[ 2694.156467][T21182]  ? __fget_files+0x28/0x460
[ 2694.161152][T21182]  ? aa_sock_opt_perm+0x74/0x100
[ 2694.166145][T21182]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 2694.171757][T21182]  ? security_socket_setsockopt+0x7e/0xa0
[ 2694.177543][T21182]  ? xsk_poll+0x670/0x670
[ 2694.181945][T21182]  do_sock_setsockopt+0x175/0x1a0
[ 2694.187027][T21182]  ? __fdget+0x180/0x210
[ 2694.191338][T21182]  __x64_sys_setsockopt+0x182/0x200
[ 2694.196600][T21182]  do_syscall_64+0x55/0xb0
[ 2694.201071][T21182]  ? clear_bhb_loop+0x40/0x90
[ 2694.205806][T21182]  ? clear_bhb_loop+0x40/0x90
[ 2694.210578][T21182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2694.216572][T21182] RIP: 0033:0x7f066699e0d9
[ 2694.221072][T21182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2694.240828][T21182] RSP: 002b:00007f066784f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2694.249322][T21182] RAX: ffffffffffffffda RBX: 00007f0666c25fa0 RCX: 00007f066699e0d9
[ 2694.257370][T21182] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[ 2694.265393][T21182] RBP: 00007f0666a35024 R08: 0000000000000004 R09: 0000000000000000
[ 2694.273411][T21182] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 2694.281420][T21182] R13: 00007f0666c26038 R14: 00007f0666c25fa0 R15: 00007ffc27c20878
[ 2694.289455][T21182]  </TASK>
[ 2694.294830][T21184] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2694.310198][T21182] Mem-Info:
[ 2694.321153][T21182] active_anon:28903 inactive_anon:0 isolated_anon:0
[ 2694.321153][T21182]  active_file:18611 inactive_file:41014 isolated_file:0
[ 2694.321153][T21182]  unevictable:768 dirty:128 writeback:0
[ 2694.321153][T21182]  slab_reclaimable:10747 slab_unreclaimable:98074
[ 2694.321153][T21182]  mapped:24030 shmem:1361 pagetables:571
[ 2694.321153][T21182]  sec_pagetables:0 bounce:0
[ 2694.321153][T21182]  kernel_misc_reclaimable:0
[ 2694.321153][T21182]  free:1319073 free_pcp:7554 free_cma:0
[ 2694.376722][T21182] Node 0 active_anon:115612kB inactive_anon:0kB active_file:74444kB inactive_file:163856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96120kB dirty:512kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10068kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no
[ 2694.422433][T21182] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 2694.494751][T21182] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2694.540488][T21182] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 2694.550125][T21182] Node 0 DMA32 free:1366448kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:115376kB inactive_anon:0kB active_file:74444kB inactive_file:163032kB unevictable:1536kB writepending:512kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:8496kB local_pcp:3948kB free_cma:0kB
[ 2694.593646][T21182] lowmem_reserve[]: 0 0 0 0 0
[ 2694.600252][T21182] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 2694.664556][T21182] lowmem_reserve[]: 0 0 0 0 0
[ 2694.669403][T21182] Node 1 Normal free:3894484kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21572kB local_pcp:13048kB free_cma:0kB
[ 2694.726959][T21182] lowmem_reserve[]: 0 0 0 0 0
[ 2694.732030][T21182] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2694.755900][T21182] Node 0 DMA32: 260*4kB (UME) 180*8kB (UME) 624*16kB (UME) 1932*32kB (UME) 1304*64kB (UME) 599*128kB (UME) 216*256kB (UME) 127*512kB (UM) 34*1024kB (UM) 3*2048kB (UM) 237*4096kB (UME) = 1366448kB
[ 2694.786164][T21182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2694.839875][T21182] Node 1 Normal: 207*4kB (UME) 53*8kB (UME) 39*16kB (UME) 48*32kB (UME) 16*64kB (UME) 7*128kB (UME) 2*256kB (ME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894484kB
[ 2694.866983][T21182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2694.929580][T21182] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2694.996350][T21182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2695.006663][T21182] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2695.016156][T21182] 60986 total pagecache pages
[ 2695.021287][T21182] 0 pages in swap cache
[ 2695.034563][T21182] Free swap  = 124996kB
[ 2695.038893][T21182] Total swap = 124996kB
[ 2695.053819][T21182] 2097051 pages RAM
[ 2695.064087][T21182] 0 pages HighMem/MovableOnly
[ 2695.074371][T21182] 416958 pages reserved
[ 2695.084744][T21182] 0 pages cma reserved
[ 2696.970410][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2697.547129][T21213] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2697.712892][T21219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.37767'.
[ 2700.282170][T21237] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.37783'.
[ 2701.245074][T21273] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.37792'.
[ 2701.379894][T21278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37794'.
[ 2701.492680][T21276] syzkaller0: entered promiscuous mode
[ 2701.499231][T21276] syzkaller0: entered allmulticast mode
[ 2702.074735][T21293] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.37799'.
[ 2705.261636][T21333] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.37814'.
[ 2705.705800][T21337] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.37816'.
[ 2705.778518][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2705.789770][T20801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2706.185278][T21343] syzkaller0: entered promiscuous mode
[ 2706.205779][T21343] syzkaller0: entered allmulticast mode
[ 2713.621240][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2713.633691][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2716.231245][ T5083] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6
[ 2719.893009][ T5083] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[ 2722.630248][ T5083] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[ 2727.519186][ T5083] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[ 2727.918351][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2735.642450][T21697] netlink: 539 bytes leftover after parsing attributes in process `syz.0.37976'.
[ 2736.385931][T21712] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.37982'.
[ 2736.552728][T21716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2737.016488][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2737.027755][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2741.257586][T21777] netlink: 539 bytes leftover after parsing attributes in process `syz.2.38007'.
[ 2741.393384][T21779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2742.260926][T21791] netlink: 539 bytes leftover after parsing attributes in process `syz.3.38015'.
[ 2744.622755][T21810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2745.161424][T21817] netlink: 539 bytes leftover after parsing attributes in process `syz.1.38026'.
[ 2745.937490][T21825] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.38031'.
[ 2746.347855][T21840] netlink: 539 bytes leftover after parsing attributes in process `syz.0.38037'.
[ 2747.001441][ T5083] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[ 2749.027947][T10562] Bluetooth: hci1: command 0x0406 tx timeout
[ 2749.550054][T21850] netlink: 'syz.1.38041': attribute type 21 has an invalid length.
[ 2749.558347][T21850] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38041'.
[ 2749.870845][T10562] Bluetooth: hci2: ISO packet too small
[ 2750.693232][T21897] netlink: 'syz.1.38060': attribute type 10 has an invalid length.
[ 2750.726006][T21897] veth0_macvtap: left promiscuous mode
[ 2756.026061][T10562] Bluetooth: hci0: ISO packet too small
[ 2758.439958][T21966] netlink: 'syz.3.38085': attribute type 21 has an invalid length.
[ 2758.449089][T21966] netlink: 156 bytes leftover after parsing attributes in process `syz.3.38085'.
[ 2758.646070][T21979] netlink: 'syz.0.38097': attribute type 21 has an invalid length.
[ 2758.665795][T10562] Bluetooth: hci1: ISO packet too small
[ 2758.673666][T21979] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38097'.
[ 2758.922052][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2761.798686][T22016] netlink: 'syz.2.38103': attribute type 21 has an invalid length.
[ 2761.833391][T22016] netlink: 156 bytes leftover after parsing attributes in process `syz.2.38103'.
[ 2762.014162][T22025] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.38109'.
[ 2762.038675][T22026] netlink: 'syz.0.38108': attribute type 10 has an invalid length.
[ 2762.100033][T22026] veth0_macvtap: left promiscuous mode
[ 2762.832310][T22048] netlink: 'syz.1.38119': attribute type 21 has an invalid length.
[ 2762.844865][T22048] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38119'.
[ 2765.670385][T22066] netlink: 'syz.3.38125': attribute type 10 has an invalid length.
[ 2765.690431][T22066] veth0_macvtap: left promiscuous mode
[ 2766.069951][T22079] netlink: 'syz.0.38131': attribute type 21 has an invalid length.
[ 2766.097124][T22079] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38131'.
[ 2766.203586][T22086] syz.3.38134[22086] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2766.203877][T22086] syz.3.38134[22086] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2766.878733][T22108] netlink: 'syz.1.38146': attribute type 21 has an invalid length.
[ 2766.903401][T22108] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38146'.
[ 2767.271711][T22122] syz.2.38153[22122] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2767.271955][T22122] syz.2.38153[22122] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2767.572234][T22135] netlink: 'syz.3.38159': attribute type 21 has an invalid length.
[ 2767.602691][T22135] netlink: 156 bytes leftover after parsing attributes in process `syz.3.38159'.
[ 2768.249789][T22159] netlink: 'syz.3.38170': attribute type 21 has an invalid length.
[ 2768.260456][T22159] netlink: 156 bytes leftover after parsing attributes in process `syz.3.38170'.
[ 2768.458632][T22166] netlink: 'syz.1.38182': attribute type 21 has an invalid length.
[ 2768.474933][T22166] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38182'.
[ 2769.776257][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2769.787355][T30918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2772.754156][T22197] netlink: 'syz.1.38187': attribute type 21 has an invalid length.
[ 2772.763619][T22197] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38187'.
[ 2773.012247][T22208] syz.3.38192[22208] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2773.012553][T22208] syz.3.38192[22208] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2775.027619][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2775.045971][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2776.862457][T22257] netlink: 'syz.3.38216': attribute type 21 has an invalid length.
[ 2776.870611][T22257] netlink: 156 bytes leftover after parsing attributes in process `syz.3.38216'.
[ 2777.674099][T22286] pim6reg1: entered promiscuous mode
[ 2777.683162][T22286] pim6reg1: entered allmulticast mode
[ 2781.106677][T22299] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.38235'.
[ 2781.135461][T22299] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[ 2784.842944][T22326] netlink: 'syz.3.38248': attribute type 1 has an invalid length.
[ 2784.861003][T22326] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.38248'.
[ 2784.896766][T22326] netlink: 9 bytes leftover after parsing attributes in process `syz.3.38248'.
[ 2785.006112][T22331] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.38250'.
[ 2785.044902][T22331] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[ 2785.183703][T22337] netlink: 188 bytes leftover after parsing attributes in process `syz.3.38253'.
[ 2785.867735][T22339] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.38254'.
[ 2786.781660][T22367] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.38264'.
[ 2786.805291][T22367] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[ 2789.124627][T22383] netlink: 'syz.1.38270': attribute type 1 has an invalid length.
[ 2789.143724][T22383] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.38270'.
[ 2789.164042][T22383] netlink: 9 bytes leftover after parsing attributes in process `syz.1.38270'.
[ 2789.966675][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2791.922793][T22428] netlink: 188 bytes leftover after parsing attributes in process `syz.1.38289'.
[ 2794.010280][T10562] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4
[ 2794.432345][T22456] netlink: 188 bytes leftover after parsing attributes in process `syz.0.38303'.
[ 2796.692974][T10562] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4
[ 2797.400545][T22494] netlink: 188 bytes leftover after parsing attributes in process `syz.2.38317'.
[ 2798.301630][T10562] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4
[ 2798.982289][T22525] netlink: 188 bytes leftover after parsing attributes in process `syz.2.38332'.
[ 2800.255675][T10562] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4
[ 2800.972538][T22556] netlink: 188 bytes leftover after parsing attributes in process `syz.2.38346'.
[ 2801.403826][T22571] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.38352'.
[ 2802.539063][T22590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.38358'.
[ 2802.575320][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2802.586523][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2803.416588][T22602] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.38363'.
[ 2808.693375][T22598] netlink: 188 bytes leftover after parsing attributes in process `syz.3.38361'.
[ 2808.809090][T22623] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.38373'.
[ 2808.817669][T22627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38381'.
[ 2810.174801][T22657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38388'.
[ 2813.720156][T22737] netlink: 'syz.2.38424': attribute type 3 has an invalid length.
[ 2813.740639][T22737] netlink: 'syz.2.38424': attribute type 1 has an invalid length.
[ 2813.764596][T22737] netlink: 'syz.2.38424': attribute type 1 has an invalid length.
[ 2813.781713][T22737] netlink: 'syz.2.38424': attribute type 2 has an invalid length.
[ 2813.804557][T22737] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.38424'.
[ 2821.407597][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2822.343810][T22834] syzkaller0: entered promiscuous mode
[ 2822.349891][T22834] syzkaller0: entered allmulticast mode
[ 2825.055883][T22873] netlink: 'syz.2.38482': attribute type 14 has an invalid length.
[ 2825.074441][T22873] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.38482'.
[ 2825.910555][T22903] syzkaller0: entered promiscuous mode
[ 2825.916598][T22903] syzkaller0: entered allmulticast mode
[ 2829.552728][T22961] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.38519'.
[ 2829.789176][T22964] syzkaller0: entered promiscuous mode
[ 2829.804563][T22964] syzkaller0: entered allmulticast mode
[ 2831.797716][T23005] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.38538'.
[ 2831.807468][T23005] netlink: zone id is out of range
[ 2831.812699][T23005] netlink: zone id is out of range
[ 2831.818716][T23005] netlink: zone id is out of range
[ 2831.823913][T23005] netlink: zone id is out of range
[ 2831.853610][T23005] netlink: zone id is out of range
[ 2831.863058][T23005] netlink: zone id is out of range
[ 2831.871151][T23005] netlink: zone id is out of range
[ 2831.877163][T23005] netlink: zone id is out of range
[ 2831.882359][T23005] netlink: zone id is out of range
[ 2831.888183][T23005] netlink: zone id is out of range
[ 2832.733945][T22985] netlink: 'syz.1.38528': attribute type 14 has an invalid length.
[ 2832.742311][T22985] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.38528'.
[ 2833.589930][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2833.600808][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2836.468438][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.474945][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2836.598742][T23093] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.38574'.
[ 2836.899427][T23100] syzkaller0: entered promiscuous mode
[ 2836.905369][T23100] syzkaller0: entered allmulticast mode
[ 2838.312325][T23126] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.38587'.
[ 2839.607546][T23128] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.38588'.
[ 2839.618858][T23128] net_ratelimit: 80 callbacks suppressed
[ 2839.618876][T23128] netlink: zone id is out of range
[ 2839.635164][T23128] netlink: zone id is out of range
[ 2839.640352][T23128] netlink: zone id is out of range
[ 2839.646209][T23128] netlink: zone id is out of range
[ 2839.651406][T23128] netlink: zone id is out of range
[ 2839.660741][T23128] netlink: zone id is out of range
[ 2839.666331][T23128] netlink: zone id is out of range
[ 2839.671625][T23128] netlink: zone id is out of range
[ 2839.677397][T23128] netlink: zone id is out of range
[ 2839.684720][T23128] netlink: zone id is out of range
[ 2843.199723][T23165] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.38603'.
[ 2843.231400][T23168] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.38602'.
[ 2843.251588][T23168] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.38602'.
[ 2845.785597][T23210] syzkaller0: entered promiscuous mode
[ 2845.794867][T23210] syzkaller0: entered allmulticast mode
[ 2851.321857][T23282] syzkaller0: entered promiscuous mode
[ 2851.329990][T23282] syzkaller0: entered allmulticast mode
[ 2852.514311][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2853.307990][T23307] netlink: 'syz.3.38663': attribute type 3 has an invalid length.
[ 2853.316240][T23307] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.38663'.
[ 2855.233045][T23314] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.38673'.
[ 2855.279221][T23314] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.38673'.
[ 2856.707756][T23345] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.38679'.
[ 2856.724582][T23345] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.38679'.
[ 2858.086358][T23370] netlink: 'syz.2.38693': attribute type 3 has an invalid length.
[ 2858.098883][T23370] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.38693'.
[ 2858.468430][T23376] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.38696'.
[ 2858.561394][T23376] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.38696'.
[ 2864.238358][T23487] netlink: 'syz.2.38743': attribute type 21 has an invalid length.
[ 2864.274882][T23487] netlink: 'syz.2.38743': attribute type 13 has an invalid length.
[ 2864.282890][T23487] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.38743'.
[ 2864.702363][T20813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2864.713896][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2866.710123][T23530] netlink: 'syz.0.38763': attribute type 21 has an invalid length.
[ 2866.723080][T23530] netlink: 'syz.0.38763': attribute type 13 has an invalid length.
[ 2866.732989][T23530] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.38763'.
[ 2867.652514][T23536] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.38772'.
[ 2867.701897][T23536] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 2868.994203][T23558] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.38783'.
[ 2870.909918][T23589] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.38787'.
[ 2872.094993][T23622] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.38799'.
[ 2876.081755][T10562] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[ 2883.167680][T10562] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[ 2883.544095][T20801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2892.738599][T23911] netlink: 'syz.3.38923': attribute type 10 has an invalid length.
[ 2892.746812][T23911] netlink: 2 bytes leftover after parsing attributes in process `syz.3.38923'.
[ 2892.756841][T23911] batadv_slave_1: entered promiscuous mode
[ 2892.762899][T23911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2892.770802][T23911] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2892.788417][T23922] netlink: 'syz.0.38927': attribute type 21 has an invalid length.
[ 2892.814613][T23922] netlink: 'syz.0.38927': attribute type 7 has an invalid length.
[ 2895.931955][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2895.944721][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2897.907882][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2897.914886][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2903.449933][T24087] batman_adv: batadv0: Interface deactivated: veth0_vlan
[ 2903.458164][T24087] veth0_vlan: entered allmulticast mode
[ 2903.533672][T24087] ªªªªª6: renamed from veth0_vlan
[ 2903.627024][T24092] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.39000'.
[ 2905.407191][T10562] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4
[ 2909.082588][T10562] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4
[ 2909.416276][T24209] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.39050'.
[ 2909.482158][T24211] batman_adv: batadv0: Interface deactivated: veth0_vlan
[ 2909.513538][T24211] veth0_vlan: entered allmulticast mode
[ 2909.627286][T24214] ªªªªª6: renamed from veth0_vlan
[ 2909.792993][T24221] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.39056'.
[ 2910.322599][T10562] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4
[ 2911.837599][ T5083] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4
[ 2913.014204][T24296] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.39086'.
[ 2913.035995][T24297] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.39087'.
[ 2913.188044][ T5083] Bluetooth: hci2: command 0x0406 tx timeout
[ 2913.258663][T24304] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.39090'.
[ 2914.724518][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2917.268943][T10562] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[ 2917.387022][T24367] netlink: 196 bytes leftover after parsing attributes in process `syz.0.39115'.
[ 2917.597467][T24371] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.39118'.
[ 2918.138040][T24384] netlink: 'syz.3.39123': attribute type 11 has an invalid length.
[ 2918.156909][T24384] netlink: 'syz.3.39123': attribute type 1 has an invalid length.
[ 2918.167929][T24384] netlink: 'syz.3.39123': attribute type 1 has an invalid length.
[ 2918.184483][T24384] netlink: 'syz.3.39123': attribute type 2 has an invalid length.
[ 2918.192740][T24384] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.39123'.
[ 2919.479595][T24397] netlink: 196 bytes leftover after parsing attributes in process `syz.3.39126'.
[ 2923.936910][T24441] net_ratelimit: 170 callbacks suppressed
[ 2923.936950][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2923.952704][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2923.962365][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2923.972144][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2923.981879][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2923.991564][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2924.001156][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2924.010838][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2924.020504][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2924.030186][T24441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2924.678494][T24450] syzkaller0: entered promiscuous mode
[ 2924.684106][T24450] syzkaller0: entered allmulticast mode
[ 2927.618980][T30918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2927.630114][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2930.066911][T10562] Bluetooth: hci1: Dropping invalid advertising data
[ 2930.073784][T10562] Bluetooth: hci1: unknown advertising packet type: 0xdc
[ 2930.073808][T10562] Bluetooth: hci1: Malformed LE Event: 0x02
[ 2930.544107][T24482] syzkaller0: entered promiscuous mode
[ 2930.557708][T24482] syzkaller0: entered allmulticast mode
[ 2931.005400][T10562] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[ 2931.565832][T10562] Bluetooth: hci2: Dropping invalid advertising data
[ 2931.581748][T10562] Bluetooth: hci2: unknown advertising packet type: 0xdc
[ 2931.581775][T10562] Bluetooth: hci2: Malformed LE Event: 0x02
[ 2931.905104][T24509] syzkaller0: entered promiscuous mode
[ 2931.910717][T24509] syzkaller0: entered allmulticast mode
[ 2932.289779][T10562] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11
[ 2933.019048][T10562] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[ 2933.056155][T10562] Bluetooth: hci3: Dropping invalid advertising data
[ 2933.070090][T10562] Bluetooth: hci3: unknown advertising packet type: 0xdc
[ 2933.070117][T10562] Bluetooth: hci3: Malformed LE Event: 0x02
[ 2933.364002][T10562] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[ 2933.374730][T24539] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.39194'.
[ 2933.443356][T24539] net_ratelimit: 1590 callbacks suppressed
[ 2933.443377][T24539] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2938.719950][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.729265][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.738605][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.747833][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.757069][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.766307][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.775800][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.785028][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.794242][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2938.803874][T24591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2942.313328][T10562] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[ 2943.750652][T24658] net_ratelimit: 2742 callbacks suppressed
[ 2943.750686][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.773954][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.784143][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.794089][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.803966][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.813794][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.823838][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.833620][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.843400][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2943.853233][T24658] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 2945.225618][T10562] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[ 2946.416527][T30780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2951.463975][ T5083] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[ 2952.287080][T24720] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.39258'.
[ 2953.104684][T24251] Bluetooth: hci2: command 0x206a tx timeout
[ 2953.110940][T10562] Bluetooth: hci2: Opcode 0x206a failed: -110
[ 2953.246613][T10562] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[ 2953.467200][T24745] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.39269'.
[ 2954.303570][T24251] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[ 2954.874747][ T5083] Bluetooth: hci1: Opcode 0x206a failed: -110
[ 2954.888566][ T5083] Bluetooth: hci1: command 0x206a tx timeout
[ 2955.184645][ T5083] Bluetooth: hci2: command 0x206a tx timeout
[ 2956.147097][T10562] Bluetooth: hci0: Opcode 0x206a failed: -110
[ 2956.153659][T10562] Bluetooth: hci0: command 0x206a tx timeout
[ 2956.944665][T10562] Bluetooth: hci1: command 0x206a tx timeout
[ 2958.232869][T10562] Bluetooth: hci0: command 0x206a tx timeout
[ 2958.703231][T20801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2958.717107][T16382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2959.348867][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 2959.355573][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 2963.665878][T24844] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.39309'.
[ 2978.978881][T20801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2982.037659][T25042] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.39390'.
[ 2983.869077][T25072] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.39405'.
[ 2984.087062][T25083] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.39410'.
[ 2984.096874][T25083] netlink: 'syz.3.39410': attribute type 2 has an invalid length.
[ 2984.106069][T25083] netlink: 'syz.3.39410': attribute type 1 has an invalid length.
[ 2986.901077][T25111] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.39419'.
[ 2989.628654][T10876] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2989.639439][T20813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3002.327895][T25201] syzkaller0: entered promiscuous mode
[ 3002.333568][T25201] syzkaller0: entered allmulticast mode
[ 3002.353982][T25177] ¥: port 1(team0) entered blocking state
[ 3002.364763][T25177] ¥: port 1(team0) entered disabled state
[ 3002.370764][T25177] team0: entered allmulticast mode
[ 3002.396464][T25177] team_slave_0: entered allmulticast mode
[ 3002.413727][T25177] team_slave_1: entered allmulticast mode
[ 3002.428568][T25177] team0: entered promiscuous mode
[ 3002.452070][T25177] team_slave_0: entered promiscuous mode
[ 3002.465120][T25177] team_slave_1: entered promiscuous mode
[ 3002.486203][T25178] team0: left allmulticast mode
[ 3002.491173][T25178] team_slave_0: left allmulticast mode
[ 3002.504746][T25178] team_slave_1: left allmulticast mode
[ 3002.510346][T25178] team0: left promiscuous mode
[ 3002.523070][T25178] team_slave_0: left promiscuous mode
[ 3002.536791][T25178] team_slave_1: left promiscuous mode
[ 3002.542658][T25178] ¥: port 1(team0) entered disabled state
[ 3006.350077][T25210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39459'.
[ 3007.480958][T25275] syzkaller0: entered promiscuous mode
[ 3007.486813][T25275] syzkaller0: entered allmulticast mode
[ 3009.770112][T25283] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39487'.
[ 3010.362318][T20799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3011.632968][T25319] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39498'.
[ 3011.778281][T25327] __sock_release: fasync list not empty!
[ 3011.948309][T25332] syzkaller0: entered promiscuous mode
[ 3011.967746][T25332] syzkaller0: entered allmulticast mode
[ 3012.611891][T25355] __sock_release: fasync list not empty!
[ 3012.773768][T10562] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[ 3014.618204][T25353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39511'.
[ 3014.864500][T10562] Bluetooth: hci2: command 0x206a tx timeout
[ 3014.945534][T25386] __sock_release: fasync list not empty!
[ 3015.092209][T25389] syz.2.39525 (25389) used greatest stack depth: 19208 bytes left
[ 3016.196844][T25422] syzkaller0: entered promiscuous mode
[ 3016.202537][T25422] syzkaller0: entered allmulticast mode
[ 3017.316811][T25432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3019.857271][T25460] syzkaller0: entered promiscuous mode
[ 3019.870275][T25460] syzkaller0: entered allmulticast mode
[ 3020.036721][T10562] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[ 3020.655869][T20813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3020.658964][T30918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3020.790648][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 3020.797181][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 3022.069556][T10562] Bluetooth: hci1: command 0x206a tx timeout
[ 3022.691901][T25502] ¥: port 1(team0) entered blocking state
[ 3022.698069][T25502] ¥: port 1(team0) entered disabled state
[ 3022.706590][T25502] team0: entered allmulticast mode
[ 3022.711871][T25502] team_slave_0: entered allmulticast mode
[ 3022.718131][T25502] team_slave_1: entered allmulticast mode
[ 3022.726476][T25502] team0: entered promiscuous mode
[ 3022.732619][T25502] team_slave_0: entered promiscuous mode
[ 3022.741196][T25502] team_slave_1: entered promiscuous mode
[ 3022.751991][T25503] team0: left allmulticast mode
[ 3022.773641][T25503] team_slave_0: left allmulticast mode
[ 3022.781200][T25503] team_slave_1: left allmulticast mode
[ 3022.794808][T25503] team0: left promiscuous mode
[ 3022.803425][T25503] team_slave_0: left promiscuous mode
[ 3022.824635][T25503] team_slave_1: left promiscuous mode
[ 3022.830538][T25503] ¥: port 1(team0) entered disabled state
[ 3029.810088][T25603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3032.531686][T25665] sock: sock_timestamping_bind_phc: sock not bind to device
[ 3034.036021][T25701] netlink: 'syz.0.39656': attribute type 10 has an invalid length.
[ 3034.045415][T25701] netlink: 'syz.0.39656': attribute type 19 has an invalid length.
[ 3034.053411][T25701] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.39656'.
[ 3034.277377][T25705] syzkaller0: entered promiscuous mode
[ 3034.282947][T25705] syzkaller0: entered allmulticast mode
[ 3037.303775][T25716] Ÿë
: port 1(hsr_slave_0) entered blocking state
[ 3037.320908][T25716] Ÿë
: port 1(hsr_slave_0) entered disabled state
[ 3037.337982][T25716] hsr_slave_0: entered allmulticast mode
[ 3037.358340][T25716] hsr_slave_0: left allmulticast mode
[ 3038.321642][T25723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3043.216323][T10562] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12
[ 3044.379665][T25798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3045.267641][T10562] Bluetooth: hci0: command 0x206a tx timeout
[ 3048.131519][T25801] syzkaller0: entered promiscuous mode
[ 3048.137220][T25801] syzkaller0: entered allmulticast mode
[ 3057.083011][T10562] Bluetooth: hci0: Malformed Event: 0x2f
[ 3060.164896][T25936] netlink: 'syz.0.39762': attribute type 3 has an invalid length.
[ 3060.173030][T25936] netlink: 'syz.0.39762': attribute type 1 has an invalid length.
[ 3060.181008][T25936] netlink: 'syz.0.39762': attribute type 1 has an invalid length.
[ 3060.190521][T25936] netlink: 'syz.0.39762': attribute type 2 has an invalid length.
[ 3060.198581][T25936] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.39762'.
[ 3060.919681][T10562] Bluetooth: hci2: Malformed Event: 0x2f
[ 3062.466861][T10562] Bluetooth: hci0: command 0x206a tx timeout
[ 3062.471651][ T5083] Bluetooth: hci0: Opcode 0x206a failed: -110
[ 3062.595982][T25986] netlink: 'syz.3.39777': attribute type 3 has an invalid length.
[ 3062.666449][T25986] netlink: 'syz.3.39777': attribute type 1 has an invalid length.
[ 3062.730447][T25986] netlink: 'syz.3.39777': attribute type 1 has an invalid length.
[ 3062.757746][T25986] netlink: 'syz.3.39777': attribute type 2 has an invalid length.
[ 3062.776726][T25986] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.39777'.
[ 3066.945044][ T5083] Bluetooth: hci2: Opcode 0x206a failed: -110
[ 3066.951247][ T5083] Bluetooth: hci2: command 0x206a tx timeout
[ 3067.216440][T26032] netlink: 'syz.2.39797': attribute type 3 has an invalid length.
[ 3067.228806][T26032] netlink: 'syz.2.39797': attribute type 1 has an invalid length.
[ 3067.237490][T26032] netlink: 'syz.2.39797': attribute type 1 has an invalid length.
[ 3067.246638][T26032] netlink: 'syz.2.39797': attribute type 2 has an invalid length.
[ 3067.257245][T26032] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.39797'.
[ 3072.464626][T10562] Bluetooth: hci3: Opcode 0x206a failed: -110
[ 3072.473677][T10562] Bluetooth: hci3: command 0x206a tx timeout
[ 3082.229571][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 3082.241189][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 3084.827060][T26145] macsec0: entered promiscuous mode
[ 3084.892342][T26147] veth1_macvtap: entered allmulticast mode
[ 3084.900502][T26147] veth1_macvtap: entered promiscuous mode
[ 3085.013766][T26151] netlink: 'syz.3.39847': attribute type 2 has an invalid length.
[ 3085.053251][T26151] netlink: 'syz.3.39847': attribute type 1 has an invalid length.
[ 3085.069759][T26151] netlink: 198036 bytes leftover after parsing attributes in process `syz.3.39847'.
[ 3086.531582][T26177] macsec0: entered promiscuous mode
[ 3086.594529][T26177] veth1_macvtap: entered allmulticast mode
[ 3086.601036][T26177] veth1_macvtap: entered promiscuous mode
[ 3086.785794][T26183] netlink: 'syz.0.39861': attribute type 2 has an invalid length.
[ 3086.793711][T26183] netlink: 'syz.0.39861': attribute type 1 has an invalid length.
[ 3086.833743][T26183] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.39861'.
[ 3089.263372][T26210] veth1_macvtap: left promiscuous mode
[ 3089.279148][T26210] macsec0: entered promiscuous mode
[ 3089.304790][T26210] macsec0: entered allmulticast mode
[ 3089.440002][T26210] veth1_macvtap: entered allmulticast mode
[ 3089.466090][T26210] veth1_macvtap: entered promiscuous mode
[ 3091.476017][T26238] macsec0: entered promiscuous mode
[ 3091.573666][T26238] veth1_macvtap: entered allmulticast mode
[ 3091.581009][T26238] veth1_macvtap: entered promiscuous mode
[ 3099.856140][T26310] syzkaller0: entered promiscuous mode
[ 3099.866781][T26310] syzkaller0: entered allmulticast mode
[ 3103.020742][T26357] syzkaller0: entered promiscuous mode
[ 3103.028863][T26357] syzkaller0: entered allmulticast mode
[ 3106.732019][T26402] syzkaller0: entered promiscuous mode
[ 3106.739530][T26402] syzkaller0: entered allmulticast mode
[ 3116.449900][T10562] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[ 3116.949725][T26548] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.40018'.
[ 3118.453746][T26575] netlink: 'syz.3.40029': attribute type 3 has an invalid length.
[ 3118.466884][T26575] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.40029'.
[ 3121.088899][T26618] netlink: 'syz.0.40048': attribute type 3 has an invalid length.
[ 3121.107602][T26618] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.40048'.
[ 3121.839295][T10562] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[ 3122.014900][T26635] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.40055'.
[ 3122.116906][T26638] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.40064'.
[ 3129.070267][T26687] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.40080'.
[ 3129.127950][T26687] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present!
[ 3129.989395][T26714] syzkaller0: entered promiscuous mode
[ 3130.013596][T26714] syzkaller0: entered allmulticast mode
[ 3130.420429][T26728] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.40091'.
[ 3132.597369][T26728] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present!
[ 3132.721033][T26739] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.40095'.
[ 3132.840565][T26742] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3132.852995][T26742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.583434][T26761] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.40103'.
[ 3134.130981][T26773] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.40110'.
[ 3134.369437][T26777] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3134.386775][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3134.412536][T26777] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3134.453520][T26777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3134.919653][T26795] netlink: 'syz.3.40119': attribute type 10 has an invalid length.
[ 3134.928959][T26795] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.40119'.
[ 3135.152489][T26801] netlink: 'syz.2.40122': attribute type 3 has an invalid length.
[ 3135.169880][T26801] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.40122'.
[ 3135.489995][T26809] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3135.512681][T26809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3135.544925][T26809] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3135.590233][T26809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3139.679149][T26846] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3139.696832][T26846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3139.728897][T26846] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3139.748195][T26846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3139.771110][T26846] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3139.801016][T26846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3140.053551][T26861] syz.3.40147[26861] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 3140.053906][T26861] syz.3.40147[26861] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 3140.112974][T26856] syzkaller0: entered promiscuous mode
[ 3140.143521][T26856] syzkaller0: entered allmulticast mode
[ 3143.669612][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 3143.680592][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 3145.845549][T26904] netlink: 'syz.2.40161': attribute type 10 has an invalid length.
[ 3145.854065][T26904] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.40161'.
[ 3147.078819][T26898] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3147.089726][T26898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3147.100171][T26898] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3147.113018][T26898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3147.124109][T26898] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3147.135216][T26898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3147.147374][T26912] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.40165'.
[ 3147.672212][T26930] netlink: 'syz.0.40174': attribute type 10 has an invalid length.
[ 3147.703815][T26930] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.40174'.
[ 3147.968913][T26938] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3148.006356][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3148.039174][T26938] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3148.086616][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3148.117671][T26938] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3148.152860][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3148.568281][T26942] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3148.591947][T26942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3148.618268][T26942] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3148.643832][T26942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3148.660211][T26942] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3148.671802][T26942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3149.440233][T26957] netlink: 'syz.1.40182': attribute type 3 has an invalid length.
[ 3149.461114][T26957] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.40182'.
[ 3151.368797][T26953] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3151.379654][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3151.389757][T26953] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3151.400350][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3151.412656][T26953] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[ 3151.423970][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3152.158781][T26981] netlink: 'syz.1.40187': attribute type 10 has an invalid length.
[ 3152.218462][T26981] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.40187'.
[ 3153.643012][T27014] netlink: 'syz.2.40203': attribute type 10 has an invalid length.
[ 3153.714078][T27014] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.40203'.
[ 3155.617463][T27047] netlink: 'syz.2.40215': attribute type 10 has an invalid length.
[ 3155.644600][T27047] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.40215'.
[ 3157.499926][T27079] netlink: 'syz.3.40228': attribute type 10 has an invalid length.
[ 3157.508729][T27079] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.40228'.
[ 3160.409759][T27132] netlink: 'syz.3.40249': attribute type 3 has an invalid length.
[ 3160.422132][T27132] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.40249'.
[ 3163.307524][T27165] netlink: 'syz.0.40261': attribute type 3 has an invalid length.
[ 3163.316443][T27165] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.40261'.
[ 3166.834769][T27191] syzkaller0: entered promiscuous mode
[ 3166.860126][T27194] netlink: 'syz.0.40275': attribute type 10 has an invalid length.
[ 3166.877421][T27191] syzkaller0: entered allmulticast mode
[ 3166.889252][T27194] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.40275'.
[ 3167.532108][T27210] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.40279'.
[ 3167.586406][T27210] net_ratelimit: 1846 callbacks suppressed
[ 3167.587952][T27210] netlink: del zone limit has 8 unknown bytes
[ 3168.512165][T10562] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[ 3171.800979][T10562] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[ 3172.219749][T27264] netlink: 'syz.2.40301': attribute type 4 has an invalid length.
[ 3172.240809][T27264] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.40301'.
[ 3173.088633][T27270] netlink: 'syz.3.40304': attribute type 6 has an invalid length.
[ 3173.113451][T27270] netlink: 212824 bytes leftover after parsing attributes in process `syz.3.40304'.
[ 3173.416360][T10562] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[ 3173.427694][T27277] syzkaller0: entered promiscuous mode
[ 3173.442162][T27277] syzkaller0: entered allmulticast mode
[ 3176.530584][T27304] netlink: 'syz.3.40320': attribute type 4 has an invalid length.
[ 3176.547881][T27304] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.40320'.
[ 3177.659093][T27314] netlink: 'syz.2.40323': attribute type 6 has an invalid length.
[ 3177.669928][T27314] netlink: 212824 bytes leftover after parsing attributes in process `syz.2.40323'.
[ 3178.423645][T10562] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3
[ 3179.462759][T27331] netlink: 'syz.1.40333': attribute type 6 has an invalid length.
[ 3179.494639][T27331] netlink: 212824 bytes leftover after parsing attributes in process `syz.1.40333'.
[ 3180.079005][T27346] syzkaller0: entered promiscuous mode
[ 3180.084868][T27346] syzkaller0: entered allmulticast mode
[ 3182.850628][T10562] Bluetooth: hci2: unexpected event 0x30 length: 151 > 3
[ 3182.874600][T27361] netlink: 'syz.0.40351': attribute type 4 has an invalid length.
[ 3182.908622][T27361] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.40351'.
[ 3182.928271][T27359] syzkaller0: entered promiscuous mode
[ 3182.944098][T27359] syzkaller0: entered allmulticast mode
[ 3183.146637][T27370] netlink: 'syz.0.40345': attribute type 6 has an invalid length.
[ 3183.163208][T27370] netlink: 212820 bytes leftover after parsing attributes in process `syz.0.40345'.
[ 3186.643508][T27385] syzkaller0: entered promiscuous mode
[ 3186.650057][T27385] syzkaller0: entered allmulticast mode
[ 3186.747986][T10562] Bluetooth: hci3: ISO packet for unknown connection handle 0
[ 3186.953176][T27395] netlink: 'syz.1.40356': attribute type 4 has an invalid length.
[ 3186.972342][T27395] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.40356'.
[ 3192.762174][T27452] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.40380'.
[ 3194.297950][T27465] netlink: 'syz.1.40386': attribute type 29 has an invalid length.
[ 3194.311083][T27465] netlink: 'syz.1.40386': attribute type 29 has an invalid length.
[ 3194.328238][T27465] netlink: 'syz.1.40386': attribute type 29 has an invalid length.
[ 3194.343936][T27465] netlink: 'syz.1.40386': attribute type 29 has an invalid length.
[ 3194.361591][T27465] netlink: 'syz.1.40386': attribute type 29 has an invalid length.
[ 3194.407035][T27465] netlink: 'syz.1.40386': attribute type 29 has an invalid length.
[ 3195.071344][T10562] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9
[ 3196.038213][T27482] netlink: 'syz.1.40394': attribute type 4 has an invalid length.
[ 3196.074617][T27482] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.40394'.
[ 3197.345035][T10562] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[ 3198.223539][T27517] netlink: 'syz.1.40408': attribute type 4 has an invalid length.
[ 3198.274598][T27517] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.40408'.
[ 3202.168564][T10562] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[ 3203.345871][T10562] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9
[ 3203.389048][T27552] netlink: 'syz.0.40420': attribute type 29 has an invalid length.
[ 3203.407587][T27552] netlink: 'syz.0.40420': attribute type 29 has an invalid length.
[ 3203.430447][T27552] netlink: 'syz.0.40420': attribute type 29 has an invalid length.
[ 3203.460937][T27552] netlink: 'syz.0.40420': attribute type 29 has an invalid length.
[ 3203.478466][T27552] netlink: 'syz.0.40420': attribute type 29 has an invalid length.
[ 3203.498832][T27552] netlink: 'syz.0.40420': attribute type 29 has an invalid length.
[ 3205.109857][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 3205.116741][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 3205.845383][T27590] syzkaller0: entered promiscuous mode
[ 3205.861235][T27590] syzkaller0: entered allmulticast mode
[ 3205.934649][T27594] netlink: 'syz.3.40437': attribute type 29 has an invalid length.
[ 3211.309998][T27594] netlink: 'syz.3.40437': attribute type 29 has an invalid length.
[ 3211.848804][T27642] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.40458'.
[ 3212.055350][T27653] sctp: [Deprecated]: syz.2.40463 (pid 27653) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 3212.055350][T27653] Use struct sctp_sack_info instead
[ 3213.163044][T27679] netlink: 'syz.3.40474': attribute type 3 has an invalid length.
[ 3213.191446][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40474'.
[ 3213.454022][T27690] netlink: 'syz.2.40477': attribute type 29 has an invalid length.
[ 3213.462561][T27690] netlink: 'syz.2.40477': attribute type 29 has an invalid length.
[ 3213.498940][T27690] netlink: 'syz.2.40477': attribute type 29 has an invalid length.
[ 3213.524997][T27690] netlink: 'syz.2.40477': attribute type 29 has an invalid length.
[ 3213.536371][T27690] netlink: 'syz.2.40477': attribute type 29 has an invalid length.
[ 3213.560501][T27690] netlink: 'syz.2.40477': attribute type 29 has an invalid length.
[ 3214.110207][T27711] netlink: 'syz.2.40487': attribute type 3 has an invalid length.
[ 3214.123601][T27711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40487'.
[ 3217.604043][T27742] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.40500'.
[ 3217.769633][T27750] netlink: 'syz.0.40504': attribute type 3 has an invalid length.
[ 3217.788500][T27750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40504'.
[ 3218.427720][T27769] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.40514'.
[ 3218.960303][T27776] netlink: 'syz.1.40517': attribute type 3 has an invalid length.
[ 3218.980137][T27776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40517'.
[ 3219.790077][T27808] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.40525'.
[ 3220.247138][T27820] netlink: 'syz.3.40529': attribute type 3 has an invalid length.
[ 3220.283318][T27820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40529'.
[ 3221.218507][T27844] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.40538'.
[ 3221.605698][T27847] syzkaller0: entered promiscuous mode
[ 3221.611291][T27847] syzkaller0: entered allmulticast mode
[ 3221.665432][ T7250] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[ 3224.744384][T27894] syzkaller0: entered promiscuous mode
[ 3224.751942][T27894] syzkaller0: entered allmulticast mode
[ 3224.843299][T27899] netlink: 'syz.3.40562': attribute type 3 has an invalid length.
[ 3224.856817][T27899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40562'.
[ 3225.078817][T27904] 
[ 3225.081245][T27904] ======================================================
[ 3225.088308][T27904] WARNING: possible circular locking dependency detected
[ 3225.095380][T27904] syzkaller #0 Not tainted
[ 3225.099916][T27904] ------------------------------------------------------
[ 3225.106973][T27904] syz.3.40564/27904 is trying to acquire lock:
[ 3225.113159][T27904] ffff88802fa1d238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630
[ 3225.122130][T27904] 
[ 3225.122130][T27904] but task is already holding lock:
[ 3225.129532][T27904] ffff8880b8e37de8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450
[ 3225.138051][T27904] 
[ 3225.138051][T27904] which lock already depends on the new lock.
[ 3225.138051][T27904] 
[ 3225.148494][T27904] 
[ 3225.148494][T27904] the existing dependency chain (in reverse order) is:
[ 3225.157550][T27904] 
[ 3225.157550][T27904] -> #1 (stock_lock){-.-.}-{2:2}:
[ 3225.164825][T27904]        try_charge_memcg+0x237/0x17c0
[ 3225.170445][T27904]        __memcg_kmem_charge_page+0x224/0x380
[ 3225.176565][T27904]        __alloc_pages+0x222/0x460
[ 3225.181724][T27904]        __kmalloc_large_node+0x8c/0x1f0
[ 3225.187676][T27904]        __kmalloc_node+0x112/0x240
[ 3225.192944][T27904]        bpf_map_kmalloc_node+0xbc/0x1b0
[ 3225.198645][T27904]        trie_update_elem+0x172/0xd60
[ 3225.204085][T27904]        bpf_map_update_value+0x64b/0x710
[ 3225.209867][T27904]        generic_map_update_batch+0x5de/0x800
[ 3225.215986][T27904]        bpf_map_do_batch+0x3f2/0x600
[ 3225.221408][T27904]        __sys_bpf+0x381/0x890
[ 3225.226219][T27904]        __x64_sys_bpf+0x7c/0x90
[ 3225.231203][T27904]        do_syscall_64+0x55/0xb0
[ 3225.236229][T27904]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 3225.242694][T27904] 
[ 3225.242694][T27904] -> #0 (&trie->lock){-.-.}-{2:2}:
[ 3225.250083][T27904]        __lock_acquire+0x37ef/0x7d80
[ 3225.255507][T27904]        lock_acquire+0x19e/0x420
[ 3225.260583][T27904]        _raw_spin_lock_irqsave+0xb4/0x100
[ 3225.266445][T27904]        trie_delete_elem+0x94/0x630
[ 3225.271781][T27904]        bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 3225.277875][T27904]        trace_call_bpf+0x333/0x6c0
[ 3225.283143][T27904]        perf_trace_run_bpf_submit+0x7a/0x1c0
[ 3225.289261][T27904]        perf_trace_lock_acquire+0x342/0x400
[ 3225.295282][T27904]        lock_acquire+0x3ef/0x420
[ 3225.300359][T27904]        percpu_ref_put+0x35/0x180
[ 3225.305572][T27904]        __refill_stock+0x12a/0x3d0
[ 3225.310835][T27904]        refill_stock+0x19e/0x450
[ 3225.315911][T27904]        try_charge_memcg+0x1281/0x17c0
[ 3225.321508][T27904]        obj_cgroup_charge+0x36e/0x630
[ 3225.327039][T27904]        slab_pre_alloc_hook+0x2e2/0x300
[ 3225.332729][T27904]        kmem_cache_alloc_lru+0x4d/0x2b0
[ 3225.338425][T27904]        __d_alloc+0x31/0x710
[ 3225.343156][T27904]        d_alloc+0x4a/0x250
[ 3225.347719][T27904]        lookup_one_qstr_excl+0xca/0x250
[ 3225.353408][T27904]        filename_create+0x246/0x450
[ 3225.358750][T27904]        do_mkdirat+0xa9/0x450
[ 3225.363568][T27904]        __x64_sys_mkdirat+0x89/0xa0
[ 3225.368904][T27904]        do_syscall_64+0x55/0xb0
[ 3225.373894][T27904]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 3225.380358][T27904] 
[ 3225.380358][T27904] other info that might help us debug this:
[ 3225.380358][T27904] 
[ 3225.390838][T27904]  Possible unsafe locking scenario:
[ 3225.390838][T27904] 
[ 3225.398342][T27904]        CPU0                    CPU1
[ 3225.403745][T27904]        ----                    ----
[ 3225.409144][T27904]   lock(stock_lock);
[ 3225.413184][T27904]                                lock(&trie->lock);
[ 3225.419844][T27904]                                lock(stock_lock);
[ 3225.426401][T27904]   lock(&trie->lock);
[ 3225.430529][T27904] 
[ 3225.430529][T27904]  *** DEADLOCK ***
[ 3225.430529][T27904] 
[ 3225.438718][T27904] 4 locks held by syz.3.40564/27904:
[ 3225.444052][T27904]  #0: ffff88802e146418 (sb_writers#10){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 3225.453380][T27904]  #1: ffff888074188670 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[ 3225.464115][T27904]  #2: ffff8880b8e37de8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450
[ 3225.473089][T27904]  #3: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0
[ 3225.482486][T27904] 
[ 3225.482486][T27904] stack backtrace:
[ 3225.488426][T27904] CPU: 0 PID: 27904 Comm: syz.3.40564 Not tainted syzkaller #0
[ 3225.496014][T27904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 3225.506133][T27904] Call Trace:
[ 3225.509457][T27904]  <TASK>
[ 3225.512435][T27904]  dump_stack_lvl+0x18c/0x250
[ 3225.517185][T27904]  ? load_image+0x420/0x420
[ 3225.521762][T27904]  ? show_regs_print_info+0x20/0x20
[ 3225.527035][T27904]  ? print_circular_bug+0x12b/0x1a0
[ 3225.532297][T27904]  check_noncircular+0x2fc/0x400
[ 3225.537304][T27904]  ? print_deadlock_bug+0x5d0/0x5d0
[ 3225.542564][T27904]  ? lockdep_lock+0x195/0x230
[ 3225.547307][T27904]  ? _find_first_zero_bit+0xd6/0x100
[ 3225.552658][T27904]  __lock_acquire+0x37ef/0x7d80
[ 3225.557594][T27904]  ? perf_trace_buf_alloc+0x131/0x290
[ 3225.563043][T27904]  ? verify_lock_unused+0x140/0x140
[ 3225.568301][T27904]  ? perf_trace_lock_acquire+0x1a7/0x400
[ 3225.573984][T27904]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 3225.580637][T27904]  lock_acquire+0x19e/0x420
[ 3225.585193][T27904]  ? trie_delete_elem+0x94/0x630
[ 3225.590192][T27904]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 3225.596834][T27904]  ? read_lock_is_recursive+0x20/0x20
[ 3225.602276][T27904]  _raw_spin_lock_irqsave+0xb4/0x100
[ 3225.607626][T27904]  ? trie_delete_elem+0x94/0x630
[ 3225.612625][T27904]  ? _raw_spin_lock+0x40/0x40
[ 3225.617408][T27904]  trie_delete_elem+0x94/0x630
[ 3225.622246][T27904]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 3225.627762][T27904]  trace_call_bpf+0x333/0x6c0
[ 3225.632504][T27904]  ? trace_call_bpf+0xc3/0x6c0
[ 3225.637318][T27904]  ? mark_lock+0x94/0x320
[ 3225.641701][T27904]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 3225.647823][T27904]  ? __lock_acquire+0x1336/0x7d80
[ 3225.652909][T27904]  ? trace_call_bpf+0xc3/0x6c0
[ 3225.657735][T27904]  perf_trace_run_bpf_submit+0x7a/0x1c0
[ 3225.663357][T27904]  perf_trace_lock_acquire+0x342/0x400
[ 3225.668880][T27904]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 3225.675521][T27904]  ? perf_trace_lock_acquire+0x342/0x400
[ 3225.681217][T27904]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 3225.687858][T27904]  lock_acquire+0x3ef/0x420
[ 3225.692422][T27904]  ? percpu_ref_put+0x19/0x180
[ 3225.697240][T27904]  ? verify_lock_unused+0x140/0x140
[ 3225.702488][T27904]  ? read_lock_is_recursive+0x20/0x20
[ 3225.707911][T27904]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 3225.714547][T27904]  ? __lock_acquire+0x1262/0x7d80
[ 3225.719629][T27904]  ? percpu_ref_put+0x19/0x180
[ 3225.724440][T27904]  percpu_ref_put+0x35/0x180
[ 3225.729057][T27904]  ? percpu_ref_put+0x19/0x180
[ 3225.733862][T27904]  __refill_stock+0x12a/0x3d0
[ 3225.738579][T27904]  refill_stock+0x19e/0x450
[ 3225.743131][T27904]  ? refill_stock+0xea/0x450
[ 3225.747771][T27904]  ? mem_cgroup_uncharge_skmem+0x1b0/0x1b0
[ 3225.753651][T27904]  ? page_counter_try_charge+0x293/0x2c0
[ 3225.759338][T27904]  ? try_charge_memcg+0x3e1/0x17c0
[ 3225.764515][T27904]  try_charge_memcg+0x1281/0x17c0
[ 3225.769598][T27904]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 3225.776231][T27904]  ? try_charge_memcg+0x21a/0x17c0
[ 3225.781415][T27904]  ? folio_flags+0x120/0x120
[ 3225.786295][T27904]  ? percpu_ref_tryget+0x15/0x180
[ 3225.791437][T27904]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 3225.797229][T27904]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 3225.803325][T27904]  ? percpu_ref_tryget+0x15/0x180
[ 3225.808425][T27904]  ? percpu_ref_tryget+0x15/0x180
[ 3225.813542][T27904]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 3225.819337][T27904]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 3225.825128][T27904]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[ 3225.831014][T27904]  obj_cgroup_charge+0x36e/0x630
[ 3225.836018][T27904]  ? obj_cgroup_charge+0xed/0x630
[ 3225.841108][T27904]  ? mod_objcg_mlstate+0x320/0x320
[ 3225.846298][T27904]  ? percpu_ref_put+0x12/0x100
[ 3225.851144][T27904]  slab_pre_alloc_hook+0x2e2/0x300
[ 3225.856341][T27904]  ? slab_pre_alloc_hook+0xb1/0x300
[ 3225.861613][T27904]  kmem_cache_alloc_lru+0x4d/0x2b0
[ 3225.866794][T27904]  ? __d_alloc+0x31/0x710
[ 3225.871191][T27904]  __d_alloc+0x31/0x710
[ 3225.875410][T27904]  d_alloc+0x4a/0x250
[ 3225.879457][T27904]  lookup_one_qstr_excl+0xca/0x250
[ 3225.884635][T27904]  filename_create+0x246/0x450
[ 3225.889472][T27904]  ? kern_path_create+0x50/0x50
[ 3225.894383][T27904]  ? __virt_addr_valid+0x10c/0x380
[ 3225.899619][T27904]  do_mkdirat+0xa9/0x450
[ 3225.903932][T27904]  ? vfs_mkdir+0x470/0x470
[ 3225.908416][T27904]  __x64_sys_mkdirat+0x89/0xa0
[ 3225.913242][T27904]  do_syscall_64+0x55/0xb0
[ 3225.917754][T27904]  ? clear_bhb_loop+0x40/0x90
[ 3225.922495][T27904]  ? clear_bhb_loop+0x40/0x90
[ 3225.927235][T27904]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 3225.933208][T27904] RIP: 0033:0x7f24bb79e0d9
[ 3225.937684][T27904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3225.957377][T27904] RSP: 002b:00007f24bc70c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3225.965856][T27904] RAX: ffffffffffffffda RBX: 00007f24bba25fa0 RCX: 00007f24bb79e0d9
[ 3225.973890][T27904] RDX: 00000000000001ff RSI: 0000200000000340 RDI: 0000000000000007
[ 3225.981921][T27904] RBP: 00007f24bb835024 R08: 0000000000000000 R09: 0000000000000000
[ 3225.989950][T27904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3225.997978][T27904] R13: 00007f24bba26038 R14: 00007f24bba25fa0 R15: 00007ffc0c21b6f8
[ 3226.006055][T27904]  </TASK>
[ 3230.147942][T21909] page_pool_release_retry() stalled pool shutdown 1 inflight 61 sec
[ 3232.864315][T21747] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec