last executing test programs:

3m34.229498147s ago: executing program 1 (id=1405):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffc8, &(0x7f0000000040)=[{&(0x7f00000000c0)="c00e020023000b02d25a806f8c6394f90824fc60040f170147000000053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000001c0)="e4643d4c7a6af5a6d3a94ea8dc7e91f51f993560e8af3cee7a2dc8d243de85e4d4ac645ff2235b8d8058476ae5d9c2b79dc68f1c1dc52cb2b1cc7a1653792aa1db526199d3995fd6ec84108f0a46ae22d66cdfd647c1cf2a8cc1750982c034ea7c4c33d4370212d709176219b7d07aad9f57e7f49374bc9bc5d37d9e88e393ccad37f5c8ba330d9928e20215e9a189b2c56776159dcb810cfe71f41879bf43b0a699dd7273918ba6169dd4a2f1335434"}], 0x1}, 0x0)

3m29.782143365s ago: executing program 1 (id=1405):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffc8, &(0x7f0000000040)=[{&(0x7f00000000c0)="c00e020023000b02d25a806f8c6394f90824fc60040f170147000000053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000001c0)="e4643d4c7a6af5a6d3a94ea8dc7e91f51f993560e8af3cee7a2dc8d243de85e4d4ac645ff2235b8d8058476ae5d9c2b79dc68f1c1dc52cb2b1cc7a1653792aa1db526199d3995fd6ec84108f0a46ae22d66cdfd647c1cf2a8cc1750982c034ea7c4c33d4370212d709176219b7d07aad9f57e7f49374bc9bc5d37d9e88e393ccad37f5c8ba330d9928e20215e9a189b2c56776159dcb810cfe71f41879bf43b0a699dd7273918ba6169dd4a2f1335434"}], 0x1}, 0x0)

3m29.731672915s ago: executing program 1 (id=1438):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x8, 0x0, 0x100, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)

3m29.731379558s ago: executing program 1 (id=1439):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3m29.651204791s ago: executing program 1 (id=1441):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

3m28.375116993s ago: executing program 1 (id=1461):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000400009b000000000700000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000780)={'ipvlan0\x00', @random='\x00\x00\x00\x00\x00 '})

3m13.342838444s ago: executing program 32 (id=1461):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000400009b000000000700000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000780)={'ipvlan0\x00', @random='\x00\x00\x00\x00\x00 '})

2m40.43817352s ago: executing program 3 (id=2181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000040a050000000000200000000a00000a0900030073797a31000000000900010073797a31"], 0x2c}}, 0x4080)

2m40.438025046s ago: executing program 3 (id=2182):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, &(0x7f0000000200)=ANY=[])

2m40.380901952s ago: executing program 3 (id=2184):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="13000000120013"], 0xfe33)

2m40.145946775s ago: executing program 3 (id=2190):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r1=>r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x24, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

2m38.00659169s ago: executing program 3 (id=2190):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r1=>r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x24, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

2m37.950096094s ago: executing program 3 (id=2216):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0011800a0001006c696d69740000002c0002800c000140fffffffffffffffc0c000240000000010000000008000440000000010800034000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)

2m22.900605648s ago: executing program 33 (id=2216):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0011800a0001006c696d69740000002c0002800c000140fffffffffffffffc0c000240000000010000000008000440000000010800034000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)

2m13.379967965s ago: executing program 4 (id=2623):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0xfc, 0x0, 0x0, 0x82084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x7}, 0x100722, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)

2m13.317149514s ago: executing program 4 (id=2626):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)

2m13.238994003s ago: executing program 4 (id=2629):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)

2m13.180089112s ago: executing program 4 (id=2631):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}, {&(0x7f0000001240)="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", 0x234}], 0x2}, 0x9cdc2384056b48b8)

2m13.053172736s ago: executing program 4 (id=2634):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

2m13.052216661s ago: executing program 4 (id=2636):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x20044885)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9500000000040000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x6, 0x78bd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r0, r0, r0, r0], &(0x7f00000002c0)=[{0x0, 0x3, 0x10, 0x3}, {0x5, 0x3, 0x10, 0x4}, {0x2, 0x1, 0xf, 0x6}, {0x0, 0x5, 0x2, 0x2}, {0x1, 0x5, 0x10, 0xc}], 0x10, 0xdfb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000000c0)='bcache_invalidate\x00', r5, 0x0, 0xf}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x8000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000608000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001008000640000000ec08"], 0x108}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff6c, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1m58.012476654s ago: executing program 34 (id=2636):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x20044885)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9500000000040000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x6, 0x78bd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r0, r0, r0, r0], &(0x7f00000002c0)=[{0x0, 0x3, 0x10, 0x3}, {0x5, 0x3, 0x10, 0x4}, {0x2, 0x1, 0xf, 0x6}, {0x0, 0x5, 0x2, 0x2}, {0x1, 0x5, 0x10, 0xc}], 0x10, 0xdfb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000000c0)='bcache_invalidate\x00', r5, 0x0, 0xf}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x8000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000608000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001008000640000000ec08"], 0x108}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff6c, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1m48.710216301s ago: executing program 2 (id=2986):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x3, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)

1m48.62821055s ago: executing program 2 (id=2987):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m48.415941604s ago: executing program 2 (id=2990):
r0 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0}, 0xf5ff)

1m48.415540323s ago: executing program 2 (id=2992):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12080006", 0x2b}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)

1m48.316015864s ago: executing program 2 (id=2996):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

1m48.252542553s ago: executing program 2 (id=2999):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0)

1m33.189608627s ago: executing program 35 (id=2999):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0)

1m28.109624663s ago: executing program 6 (id=3235):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000001947}, 0x11045, 0x0, 0xfffffffd, 0x8, 0x3fe, 0x8d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10182, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x16f04, 0x2e, 0xfffffbff, 0x3, 0x2, 0x100, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40002041)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0xa, 0x3, 0x3a)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3, 0x0, 0x500)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"})
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)="c018030033000b12d25a80648c2594f90124fc60100c07400f000000053582c137153e", 0x23}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYBLOB="0765f706fe618d71b506e4d624d37b5d2f88cde38e34ce1e611304364e5466434851b61c9a513e0d91"], 0xfe33)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x8000)
perf_event_open(0x0, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, 0x0)

1m27.104517079s ago: executing program 6 (id=3247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xb, 0x1, 'mangle\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8082)

1m27.06003053s ago: executing program 6 (id=3249):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe6e}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdir(0x0, 0x90)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)

1m26.910057654s ago: executing program 6 (id=3254):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000300001004000000002e"], 0x0, 0x37}, 0x20)

1m26.909720623s ago: executing program 6 (id=3255):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x40)

1m26.859049298s ago: executing program 6 (id=3256):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m11.671385721s ago: executing program 36 (id=3256):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)

36.21690302s ago: executing program 0 (id=4113):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000fe80)={0x0, 0x0, &(0x7f000000fe40)={&(0x7f000000fb40)=@migrate={0x108, 0x21, 0x9, 0x70bd27, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, 0x4e22, 0x1, 0x4e22, 0x6, 0x0, 0xa0, 0x80}, 0x6e6bb1}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e22, @in6=@local}}, @migrate={0x9c, 0x11, [{@in=@private=0xa010101, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x0, 0x3502, 0x2, 0xa}, {@in=@private=0xa010101, @in6=@private2, @in=@multicast2, @in6=@loopback, 0x6c, 0x2, 0x0, 0x34ff, 0x2, 0xa}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x882}, 0x4000000)

36.004610938s ago: executing program 0 (id=4114):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1eadc, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000003000010700000000000000000b00"], 0x1c}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xa, 0x3, 0x10, 0x97, 0x0, 0x29d, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x100000001, 0xb616}, 0x114a00, 0x2, 0x7, 0x5, 0xf, 0x5, 0x8, 0x0, 0x2, 0x0, 0x4}, r1, 0x6, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xeb, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0x806}, 0x104108, 0x4, 0x0, 0x5, 0x0, 0xffffffff, 0x9, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x0)

31.006978004s ago: executing program 0 (id=4164):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

30.932621973s ago: executing program 0 (id=4165):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x2}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x4}]}, {0x0, [0x30, 0x5f, 0x2e, 0x30, 0x30, 0x30, 0x2e, 0x0, 0x30, 0x61]}}, 0x0, 0x48, 0x0, 0x1, 0x3}, 0x28)

30.931988129s ago: executing program 0 (id=4167):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe"], 0x0}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)

30.86726564s ago: executing program 0 (id=4170):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

15.656922723s ago: executing program 37 (id=4170):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

1.305915169s ago: executing program 7 (id=4632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000320200000a98000000060a010400000000000000000a00f2040900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920800024000200002080004400000008308000140000000110800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

1.226795503s ago: executing program 7 (id=4633):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe6)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x6, 0x0)
mkdir(&(0x7f00000027c0)='./file0\x00', 0xfb500f4b7b3e5ea)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200"/51], 0x0, 0x4e}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x6, 0x0, 0x3, 0x0, 0x0, 0x1413, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x2, 0xffff, 0x0, 0x80, 0x0, 0xa01}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
r8 = socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890b, &(0x7f0000000100))
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000880)={'wg1\x00', 0x400})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000308010300000000000000000000000000082c00048008000b400000000508000940000000000800e13f00e70003080002400000004308000540fffffff700000000000000000000e415b6f68328b0e3e9d2ed5cc8d519f06fc007a29592ce"], 0x4c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0)

1.12115419s ago: executing program 5 (id=4634):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.12090167s ago: executing program 5 (id=4635):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

1.04827168s ago: executing program 5 (id=4636):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1, 0x0, 0x2000}, 0x38)

936.692435ms ago: executing program 5 (id=4637):
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

936.449179ms ago: executing program 5 (id=4638):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)

587.365658ms ago: executing program 8 (id=4640):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x10000000}, 0x48)

517.814741ms ago: executing program 8 (id=4641):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000600), 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608460400", @ANYRES16=r0], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20)

260.974694ms ago: executing program 7 (id=4642):
socketpair(0x22, 0x2, 0x24, &(0x7f0000000ac0))

187.993148ms ago: executing program 8 (id=4643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x0, 0xa}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

108.654581ms ago: executing program 7 (id=4644):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="a5749d05cd9c", 0x6}], 0x1}, 0x80887)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e3, &(0x7f0000000040)={r0})

57.197308ms ago: executing program 7 (id=4645):
syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50)
syz_clone(0x80032400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
close(r2)

56.938263ms ago: executing program 8 (id=4646):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@loopback, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0xfc, 0x1}]}]}, 0x23c}}, 0x0)

56.734304ms ago: executing program 8 (id=4647):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_TYPE={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x600c0)

680.555µs ago: executing program 7 (id=4648):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0xa8}, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0xff, 0x0, 0x0, 0xe4b8, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x7}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10100, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff3f2df)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001280)}, {0x0}], 0x2}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4)
sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

388.871µs ago: executing program 5 (id=4649):
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x84, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c)
sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0)

0s ago: executing program 8 (id=4650):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x10, 0x400000002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {r7, 0x2}}]}, 0x158}}, 0x0)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000002c0)=r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r8, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4001040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090)
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a14010d2bbd7000fedbdf2508000300070000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4001094}, 0xc010)

kernel console output (not intermixed with test programs):

10243][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.923238][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.983209][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.994399][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.017449][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.021574][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.216299][ T8919] sit0: entered allmulticast mode
[  136.228295][ T8919] sit0: entered promiscuous mode
[  136.977138][ T8926] netlink: 'syz.0.1322': attribute type 21 has an invalid length.
[  137.508139][ T8952] netlink: 'syz.2.1331': attribute type 1 has an invalid length.
[  137.672389][ T8959] netlink: 'syz.2.1337': attribute type 29 has an invalid length.
[  137.676215][ T8959] netlink: 'syz.2.1337': attribute type 29 has an invalid length.
[  137.686680][ T8959] netlink: 'syz.2.1337': attribute type 29 has an invalid length.
[  137.700269][ T8959] netlink: 'syz.2.1337': attribute type 29 has an invalid length.
[  137.790675][ T5235] Bluetooth: hci2: command tx timeout
[  138.922197][ T8991] __nla_validate_parse: 7 callbacks suppressed
[  138.922216][ T8991] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1351'.
[  139.009631][ T8981] delete_channel: no stack
[  139.108279][ T9002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1354'.
[  139.112521][ T8997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1354'.
[  139.116996][ T9002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1354'.
[  139.139314][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'.
[  139.157929][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'.
[  139.170689][ T9001] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1356'.
[  139.347946][ T9013] netlink: 'syz.2.1361': attribute type 6 has an invalid length.
[  139.353944][ T9013] netlink: 'syz.2.1361': attribute type 7 has an invalid length.
[  139.357177][ T9013] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1361'.
[  139.363933][ T9013] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.1361'.
[  139.368505][ T9013] netlink: 'syz.2.1361': attribute type 6 has an invalid length.
[  139.372521][ T9013] netlink: 'syz.2.1361': attribute type 7 has an invalid length.
[  139.376079][ T9013] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1361'.
[  139.861760][ T5235] Bluetooth: hci2: command tx timeout
[  140.815831][ T9062] netlink: 'syz.2.1384': attribute type 10 has an invalid length.
[  141.652649][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  141.655927][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  141.658994][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  141.663977][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  141.666955][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  142.098259][ T5235] Bluetooth: hci2: command tx timeout
[  142.779813][ T9112] chnl_net:caif_netlink_parms(): no params data found
[  143.060217][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.063815][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.068288][ T9112] bridge_slave_0: entered allmulticast mode
[  143.074562][ T9112] bridge_slave_0: entered promiscuous mode
[  143.080223][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.085123][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.087554][ T9112] bridge_slave_1: entered allmulticast mode
[  143.093940][ T9112] bridge_slave_1: entered promiscuous mode
[  143.124404][ T9112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.131129][ T9112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.161073][ T9112] team0: Port device team_slave_0 added
[  143.165801][ T9112] team0: Port device team_slave_1 added
[  143.187713][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.190219][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.200975][ T9112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.206797][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.209663][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.220771][ T9112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.276588][ T9112] hsr_slave_0: entered promiscuous mode
[  143.279768][ T9112] hsr_slave_1: entered promiscuous mode
[  143.354517][ T9112] debugfs: 'hsr0' already exists in 'hsr'
[  143.357173][ T9112] Cannot create hsr debugfs directory
[  143.526194][ T9112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.704882][ T5235] Bluetooth: hci0: command tx timeout
[  144.448646][ T9162] __nla_validate_parse: 7 callbacks suppressed
[  144.448662][ T9162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1423'.
[  144.464681][ T9112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.471781][ T9163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1423'.
[  144.475072][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1423'.
[  144.537859][ T9168] netlink: 9292 bytes leftover after parsing attributes in process `syz.2.1425'.
[  144.555872][ T9112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.758567][ T9112] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  144.769600][ T9112] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  144.774282][ T9112] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  144.778590][ T9112] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  144.830063][ T9112] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.846408][ T9112] 8021q: adding VLAN 0 to HW filter on device team0
[  144.851979][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.854373][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.862832][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.866241][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.986740][ T9112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.016567][ T9112] veth0_vlan: entered promiscuous mode
[  145.025913][ T9112] veth1_vlan: entered promiscuous mode
[  145.040217][ T9112] veth0_macvtap: entered promiscuous mode
[  145.045869][ T9112] veth1_macvtap: entered promiscuous mode
[  145.055930][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.067787][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.075200][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.078409][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.106770][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.110904][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.224204][ T5570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.227376][ T5570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.245488][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.248326][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.781683][ T5235] Bluetooth: hci0: command tx timeout
[  145.805546][ T9208] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1437'.
[  145.815284][ T9208] batadv_slave_1: entered promiscuous mode
[  145.835711][ T9210] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1405'.
[  145.908692][ T5235] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  147.432879][ T9265] validate_nla: 2 callbacks suppressed
[  147.432891][ T9265] netlink: 'syz.0.1463': attribute type 64 has an invalid length.
[  147.741907][ T9276] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1466'.
[  147.860655][ T5235] Bluetooth: hci0: command tx timeout
[  149.493801][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1480'.
[  149.771774][ T9312] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1482'.
[  149.941014][ T5235] Bluetooth: hci0: command tx timeout
[  150.249828][ T9337] netlink: 'syz.2.1495': attribute type 21 has an invalid length.
[  154.005143][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1527'.
[  154.008590][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1527'.
[  154.023437][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1527'.
[  154.072430][ T9410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.373710][ T9427] netlink: 'syz.2.1535': attribute type 21 has an invalid length.
[  154.525197][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'.
[  154.632435][ T9442] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1541'.
[  155.307448][ T9482] netlink: 'syz.2.1560': attribute type 2 has an invalid length.
[  155.311903][ T9482] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.1560'.
[  156.786179][ T9518] netlink: 'syz.2.1575': attribute type 21 has an invalid length.
[  156.894532][ T9526] netlink: 11382 bytes leftover after parsing attributes in process `syz.2.1579'.
[  156.978564][ T9533] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1582'.
[  157.038444][ T9539] netlink: 'syz.2.1585': attribute type 1 has an invalid length.
[  157.237057][ T9555] openvswitch: netlink: Message has 4 unknown bytes.
[  157.477235][ T9574] netlink: 'syz.2.1602': attribute type 33 has an invalid length.
[  157.479981][ T9574] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1602'.
[  157.539488][ T9580] netlink: 'syz.0.1601': attribute type 21 has an invalid length.
[  157.558032][ T9580] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1601'.
[  157.585600][ T9580] netlink: 'syz.0.1601': attribute type 4 has an invalid length.
[  158.958963][ T9608] netlink: 'syz.0.1616': attribute type 3 has an invalid length.
[  158.962093][ T9608] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1616'.
[  159.203830][ T9621] netlink: 'syz.2.1622': attribute type 15 has an invalid length.
[  160.246155][ T9648] cgroup2: Unknown parameter 'u'
[  160.332667][ T9654] tc_dump_action: action bad kind
[  162.585303][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.588868][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.592034][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.595127][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.597674][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.735606][ T5878] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.783762][ T5878] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.856016][ T5878] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.927473][ T5878] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.965457][ T9710] chnl_net:caif_netlink_parms(): no params data found
[  163.119501][ T9710] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.125417][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.131949][ T9710] bridge_slave_0: entered allmulticast mode
[  163.136501][ T9710] bridge_slave_0: entered promiscuous mode
[  163.157883][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.161612][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.165883][ T9710] bridge_slave_1: entered allmulticast mode
[  163.168974][ T9710] bridge_slave_1: entered promiscuous mode
[  163.241253][ T5878] bridge_slave_1: left allmulticast mode
[  163.243771][ T5878] bridge_slave_1: left promiscuous mode
[  163.247076][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.269262][ T5878] bridge_slave_0: left allmulticast mode
[  163.274837][ T5878] bridge_slave_0: left promiscuous mode
[  163.276848][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.373788][ T9738] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1668'.
[  163.479041][ T9744] netlink: 'syz.0.1670': attribute type 29 has an invalid length.
[  163.489853][ T9744] netlink: 'syz.0.1670': attribute type 3 has an invalid length.
[  163.492812][ T9744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1670'.
[  163.539890][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'.
[  163.625061][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.633637][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.638619][ T5878] bond0 (unregistering): Released all slaves
[  163.653043][ T9710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.682311][ T9710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.789084][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  163.795950][ T9757] netlink: 'syz.2.1676': attribute type 2 has an invalid length.
[  163.801544][ T9757] netlink: 'syz.2.1676': attribute type 2 has an invalid length.
[  163.805156][ T9757] netlink: 'syz.2.1676': attribute type 1 has an invalid length.
[  163.808381][ T9757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1676'.
[  163.827998][ T9710] team0: Port device team_slave_0 added
[  163.842797][ T9710] team0: Port device team_slave_1 added
[  163.898408][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.902791][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.916937][ T9710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.970286][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.977852][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.008949][ T9710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.184716][ T9710] hsr_slave_0: entered promiscuous mode
[  164.188203][ T9710] hsr_slave_1: entered promiscuous mode
[  164.190723][ T9710] debugfs: 'hsr0' already exists in 'hsr'
[  164.192533][ T9710] Cannot create hsr debugfs directory
[  164.199997][ T5878] hsr_slave_0: left promiscuous mode
[  164.207438][ T5878] hsr_slave_1: left promiscuous mode
[  164.213945][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.216639][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.219916][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.223686][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.235115][ T5878] veth1_macvtap: left promiscuous mode
[  164.237533][ T5878] veth0_macvtap: left promiscuous mode
[  164.239722][ T5878] veth1_vlan: left promiscuous mode
[  164.242756][ T5878] veth0_vlan: left promiscuous mode
[  164.371709][ T9791] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1689'.
[  164.409196][ T9793] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  164.660999][   T54] Bluetooth: hci0: command tx timeout
[  164.809953][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  164.970758][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  165.294884][ T9785] C: renamed from team_slave_0 (while UP)
[  165.301164][ T9785] netlink: 'syz.0.1687': attribute type 3 has an invalid length.
[  165.304509][ T9785] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1687'.
[  165.308234][ T9785] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  165.559802][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  165.559982][   T54] Bluetooth: hci2: connection err: -111
[  165.732299][ T9710] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  165.740928][ T9710] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  165.754483][ T9710] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  165.772578][ T9710] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  165.902952][ T9846] IPv6: Can't replace route, no match found
[  165.984557][ T9710] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.054361][ T9710] 8021q: adding VLAN 0 to HW filter on device team0
[  166.069298][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.072165][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.097958][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.100367][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.334542][ T9710] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.395947][ T9710] veth0_vlan: entered promiscuous mode
[  166.442393][ T9710] veth1_vlan: entered promiscuous mode
[  166.532513][ T9710] veth0_macvtap: entered promiscuous mode
[  166.568675][ T9710] veth1_macvtap: entered promiscuous mode
[  166.622895][ T9710] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.670032][ T9710] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.709477][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.723125][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.742379][   T54] Bluetooth: hci0: command tx timeout
[  166.757530][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.761731][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.038351][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.042470][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.122831][ T1208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.126085][ T1208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.416485][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'.
[  167.863579][ T9953] netlink: 'syz.3.1736': attribute type 10 has an invalid length.
[  167.936363][ T9953] team0: Port device geneve1 added
[  168.563779][ T9995] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1751'.
[  169.094976][   T54] Bluetooth: hci0: command tx timeout
[  169.625693][T10025] xt_time: invalid argument - start or stop time greater than 23:59:59
[  169.803330][T10027] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1763'.
[  170.286759][T10039] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1769'.
[  170.289996][T10039] netlink: zone id is out of range
[  170.293034][T10039] netlink: zone id is out of range
[  170.296005][T10039] netlink: zone id is out of range
[  170.298200][T10039] netlink: zone id is out of range
[  170.302317][T10039] netlink: zone id is out of range
[  170.304628][T10039] netlink: zone id is out of range
[  170.308416][T10039] netlink: zone id is out of range
[  170.311785][T10039] netlink: zone id is out of range
[  170.314042][T10039] netlink: zone id is out of range
[  170.316279][T10039] netlink: zone id is out of range
[  170.327495][T10039] netlink: zone id is out of range
[  170.329598][T10039] netlink: zone id is out of range
[  170.331513][T10039] netlink: zone id is out of range
[  170.333601][T10039] netlink: zone id is out of range
[  170.335480][T10039] netlink: zone id is out of range
[  170.337287][T10039] netlink: zone id is out of range
[  170.339096][T10039] netlink: zone id is out of range
[  170.415612][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1772'.
[  170.430144][T10047] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.465520][T10047] bridge_slave_0 (unregistering): left allmulticast mode
[  170.469358][T10047] bridge_slave_0 (unregistering): left promiscuous mode
[  170.475438][T10047] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.683474][T10057] netlink: 'syz.2.1777': attribute type 15 has an invalid length.
[  170.686932][T10057] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.1777'.
[  170.770857][T10063] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1780'.
[  170.867745][T10072] netlink: 'syz.0.1784': attribute type 1 has an invalid length.
[  170.972210][T10077] veth1_macvtap: left promiscuous mode
[  170.987604][T10077] veth1_macvtap: entered promiscuous mode
[  170.991187][T10077] macsec0: entered promiscuous mode
[  170.993747][T10077] macsec0: entered allmulticast mode
[  170.996200][T10077] veth1_macvtap: entered allmulticast mode
[  171.255827][   T54] Bluetooth: hci0: command tx timeout
[  171.324387][T10080] lo speed is unknown, defaulting to 1000
[  171.327326][T10080] lo speed is unknown, defaulting to 1000
[  171.334922][T10080] lo speed is unknown, defaulting to 1000
[  171.735264][T10080] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  172.063425][T10100] netlink: 'syz.0.1795': attribute type 2 has an invalid length.
[  172.075711][T10100] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  172.079298][T10100] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  172.088675][T10102] netlink: 'syz.2.1796': attribute type 29 has an invalid length.
[  172.102703][T10102] netlink: 'syz.2.1796': attribute type 29 has an invalid length.
[  172.239680][T10080] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  172.259846][T10080] lo speed is unknown, defaulting to 1000
[  172.263899][T10080] lo speed is unknown, defaulting to 1000
[  172.267354][T10080] lo speed is unknown, defaulting to 1000
[  172.270077][T10080] lo speed is unknown, defaulting to 1000
[  172.272950][T10080] lo speed is unknown, defaulting to 1000
[  173.104046][T10127] netlink: 802 bytes leftover after parsing attributes in process `syz.0.1804'.
[  173.211335][T10133] netlink: 'syz.0.1807': attribute type 32 has an invalid length.
[  173.541132][T10158] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1817'.
[  174.029258][T10176] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1824'.
[  174.653664][T10171] lo speed is unknown, defaulting to 1000
[  176.839855][T10251] net_ratelimit: 72 callbacks suppressed
[  176.839870][T10251] netlink: zone id is out of range
[  176.844637][T10251] netlink: zone id is out of range
[  176.859726][T10258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1853'.
[  176.865670][T10251] netlink: set zone limit has 4 unknown bytes
[  176.870138][T10251] netlink: del zone limit has 4 unknown bytes
[  176.876299][T10251] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1850'.
[  177.245029][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'.
[  177.435114][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1883'.
[  177.446187][T10319] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1882'.
[  177.494299][T10323] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.1885'.
[  177.497397][T10323] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.1885'.
[  177.557063][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1889'.
[  177.568253][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'.
[  177.778345][T10356] netlink: 'syz.2.1897': attribute type 21 has an invalid length.
[  178.238016][T10396] netlink: 'syz.0.1909': attribute type 21 has an invalid length.
[  178.521323][   T13] bridge_slave_1: left allmulticast mode
[  178.523936][   T13] bridge_slave_1: left promiscuous mode
[  178.526577][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.535295][   T13] bridge_slave_0: left promiscuous mode
[  178.537880][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.556667][   T13] gretap0: left allmulticast mode
[  178.558932][   T13] gretap0: left promiscuous mode
[  178.564363][   T13] GPL: port 1(gretap0) entered disabled state
[  178.597732][   T13] bond_slave_0: left promiscuous mode
[  178.600492][   T13] bond_slave_1: left promiscuous mode
[  178.605146][   T13] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  178.915681][T10422] netlink: 'syz.0.1919': attribute type 10 has an invalid length.
[  178.936671][T10423] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  178.982228][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.986807][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.993220][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  179.001221][   T13] bond0 (unregistering): Released all slaves
[  179.037967][T10422] batman_adv: batadv0: Adding interface: netdevsim0
[  179.040303][T10422] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.050712][T10422] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  179.281940][T10445] __nla_validate_parse: 2 callbacks suppressed
[  179.281953][T10445] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1924'.
[  179.394600][T10455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1928'.
[  179.398686][T10455] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  179.421522][T10458] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  179.548356][T10467] netlink: 'syz.0.1931': attribute type 10 has an invalid length.
[  179.697273][T10478] netlink: 'syz.3.1935': attribute type 13 has an invalid length.
[  179.700004][T10478] netlink: 'syz.3.1935': attribute type 58 has an invalid length.
[  179.702731][T10478] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1935'.
[  179.764848][T10469] syzkaller0: entered promiscuous mode
[  179.767128][T10469] syzkaller0: entered allmulticast mode
[  179.788400][   T13] hsr_slave_0: left promiscuous mode
[  179.801586][   T13] hsr_slave_1: left promiscuous mode
[  179.815043][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.817525][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.822714][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.825672][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.838272][   T13] veth1_macvtap: left promiscuous mode
[  179.841305][   T13] veth0_macvtap: left promiscuous mode
[  180.057908][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'.
[  180.190676][   T13] team0 (unregistering): Port device team_slave_1 removed
[  180.208100][   T13] team0 (unregistering): Port device team_slave_0 removed
[  182.252529][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'.
[  182.626271][T10593] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1982'.
[  183.362705][T10627] veth1_macvtap: left promiscuous mode
[  183.365121][T10627] macsec0: entered promiscuous mode
[  183.532323][T10631] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1998'.
[  183.559371][T10631] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1998'.
[  183.597955][T10631] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1998'.
[  183.903079][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'.
[  183.947543][T10648] netlink: 'syz.0.2004': attribute type 13 has an invalid length.
[  183.950164][T10648] : renamed from syz_tun (while UP)
[  183.958821][T10648] : refused to change device tx_queue_len
[  183.961728][T10648] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  184.358063][   T54] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9
[  184.757857][T10691] __nla_validate_parse: 2 callbacks suppressed
[  184.757867][T10691] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2022'.
[  184.818340][T10691] netlink: 'syz.3.2022': attribute type 10 has an invalid length.
[  184.904224][T10691] batman_adv: batadv0: Adding interface: netdevsim0
[  184.908450][T10691] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.924105][T10691] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  185.092553][   T54] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  185.233227][T10710] netlink: 'syz.0.2025': attribute type 2 has an invalid length.
[  185.238680][T10710] netlink: 'syz.0.2025': attribute type 1 has an invalid length.
[  186.421286][T10765] netlink: 'syz.0.2047': attribute type 27 has an invalid length.
[  186.427011][T10765] netlink: 'syz.0.2047': attribute type 1 has an invalid length.
[  186.430041][T10765] bridge0: port 1(bridge_slave_0) entered learning state
[  186.578645][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2048'.
[  186.643745][T10781] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2054'.
[  186.682338][T10785] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2056'.
[  186.687898][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'.
[  187.908983][T10817] netlink: 'syz.3.2068': attribute type 39 has an invalid length.
[  187.995834][T10820] : entered promiscuous mode
[  188.490390][T10841] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2080'.
[  188.497734][T10841] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2080'.
[  188.505594][T10841] netlink: 'syz.3.2080': attribute type 10 has an invalid length.
[  188.543128][T10841] veth0_vlan: left promiscuous mode
[  188.552261][T10841] veth0_vlan: entered promiscuous mode
[  188.569701][T10841] team0: Device veth0_vlan failed to register rx_handler
[  188.603184][T10850] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2080'.
[  188.618418][T10856] netlink: 'syz.0.2086': attribute type 1 has an invalid length.
[  188.621627][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'.
[  188.672681][T10841] syz.3.2080 (10841) used greatest stack depth: 17848 bytes left
[  188.723643][T10862] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2089'.
[  188.869191][T10868] option changes via remount are deprecated (pid=10867 comm=syz.0.2092)
[  189.143451][T10885] netlink: 'syz.0.2100': attribute type 1 has an invalid length.
[  189.881071][T10894] __nla_validate_parse: 1 callbacks suppressed
[  189.881081][T10894] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2104'.
[  189.987269][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'.
[  190.341970][ T5235] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  190.348005][ T5235] Bluetooth: hci0: Injecting HCI hardware error event
[  190.386520][T10910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2111'.
[  190.399332][T10910] unsupported nlmsg_type 40
[  190.428933][T10914] netlink: 'syz.2.2113': attribute type 6 has an invalid length.
[  190.493803][T10916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2114'.
[  190.499836][T10916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2114'.
[  190.529588][T10914] netlink: 'syz.2.2113': attribute type 3 has an invalid length.
[  190.538272][T10914] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2113'.
[  190.591474][T10919] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2115'.
[  190.821399][T10923] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2117'.
[  191.018737][T10950] netlink: 'syz.3.2130': attribute type 10 has an invalid length.
[  191.220855][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  191.225594][   T54] Bluetooth: hci0: hardware error 0x00
[  191.282268][T10950] team0 (unregistering): Port device team_slave_0 removed
[  191.314236][T10950] team0 (unregistering): Port device team_slave_1 removed
[  191.337410][T10950] team0 (unregistering): Port device geneve1 removed
[  191.431545][T10968] netlink: 'syz.0.2137': attribute type 21 has an invalid length.
[  191.434798][T10968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2137'.
[  191.524688][T10978] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2142'.
[  192.617541][T11010] netlink: 'syz.2.2152': attribute type 1 has an invalid length.
[  192.621234][T11010] netlink: 'syz.2.2152': attribute type 4 has an invalid length.
[  192.630951][T11010] netlink: 'syz.2.2152': attribute type 1 has an invalid length.
[  192.634249][T11010] netlink: 'syz.2.2152': attribute type 4 has an invalid length.
[  192.819899][T11014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.373172][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  194.052996][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.055835][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.129365][T11048] netlink: 'syz.2.2169': attribute type 1 has an invalid length.
[  195.900524][T11097] __nla_validate_parse: 7 callbacks suppressed
[  195.900537][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'.
[  195.921377][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.923467][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'.
[  195.928887][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.935212][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.940616][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.946806][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.125886][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2198'.
[  196.128722][T11098] lo speed is unknown, defaulting to 1000
[  196.133656][T11110] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2198'.
[  196.150644][T11110] netlink: 'syz.2.2198': attribute type 5 has an invalid length.
[  196.153963][T11110] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2198'.
[  196.299775][T11098] chnl_net:caif_netlink_parms(): no params data found
[  196.450325][T11098] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.453300][T11098] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.455811][T11098] bridge_slave_0: entered allmulticast mode
[  196.461532][T11098] bridge_slave_0: entered promiscuous mode
[  196.466014][T11098] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.470711][T11098] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.473567][T11098] bridge_slave_1: entered allmulticast mode
[  196.477786][T11098] bridge_slave_1: entered promiscuous mode
[  196.534986][T11098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.554150][T11098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.585236][T11098] team0: Port device team_slave_0 added
[  196.588563][T11098] team0: Port device team_slave_1 added
[  196.623277][T11098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.626308][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.638851][T11098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.645550][T11098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.648637][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.660192][T11098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.706710][T11098] hsr_slave_0: entered promiscuous mode
[  196.710133][T11098] hsr_slave_1: entered promiscuous mode
[  196.713497][T11098] debugfs: 'hsr0' already exists in 'hsr'
[  196.716121][T11098] Cannot create hsr debugfs directory
[  196.846354][T11098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.916714][T11098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.955839][T11098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.001691][T11098] batman_adv: batadv0: Removing interface: netdevsim0
[  197.006342][T11098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.099522][T11098] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  197.103904][T11098] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  197.108160][T11098] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  197.113099][T11098] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  197.140960][T11098] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.143473][T11098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.146024][T11098] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.148706][T11098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.187109][T11098] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.201271][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.204988][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.214403][T11098] 8021q: adding VLAN 0 to HW filter on device team0
[  197.220165][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.223172][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.252240][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.254645][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.314524][T11152] netlink: 'syz.0.2210': attribute type 11 has an invalid length.
[  197.317289][T11152] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2210'.
[  197.358792][T11098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.389082][T11151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.399459][T11098] veth0_vlan: entered promiscuous mode
[  197.409522][T11098] veth1_vlan: entered promiscuous mode
[  197.437512][T11098] veth0_macvtap: entered promiscuous mode
[  197.443271][T11098] veth1_macvtap: entered promiscuous mode
[  197.458810][T11098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.468885][T11098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.476375][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.486627][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.498853][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.503445][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.545498][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.548016][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.581156][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.583867][T11159] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2213'.
[  197.584215][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.595246][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.686191][T11167] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2216'.
[  197.778375][T11171] siw: device registration error -23
[  197.813843][T11167] smc: removing ib device syz1
[  197.983536][T11183] netlink: 'syz.0.2223': attribute type 3 has an invalid length.
[  198.030625][ T5235] Bluetooth: hci0: command tx timeout
[  198.075986][T11191] netlink: 'syz.2.2227': attribute type 13 has an invalid length.
[  198.078654][T11191] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2227'.
[  198.082530][T11191] syz_tun: refused to change device tx_queue_len
[  198.129400][T11192] netlink: 809 bytes leftover after parsing attributes in process `syz.0.2225'.
[  198.559769][T11206] netlink: 'syz.2.2234': attribute type 13 has an invalid length.
[  198.563201][T11206] netlink: 'syz.2.2234': attribute type 17 has an invalid length.
[  198.689004][T11206] sit0: left promiscuous mode
[  198.691304][T11206] sit0: left allmulticast mode
[  198.811864][T11206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.966936][T11215] cgroup: Unknown subsys name 'uid'
[  199.305335][T11225] netlink: 'syz.0.2241': attribute type 1 has an invalid length.
[  199.486332][T11243] openvswitch: netlink: IPv4 tunnel dst address is zero
[  199.598554][T11255] netlink: 'syz.2.2256': attribute type 29 has an invalid length.
[  199.629305][T11255] netlink: 'syz.2.2256': attribute type 29 has an invalid length.
[  199.637742][T11255] netlink: 'syz.2.2256': attribute type 29 has an invalid length.
[  199.645215][T11255] netlink: 'syz.2.2256': attribute type 29 has an invalid length.
[  200.100696][ T5235] Bluetooth: hci0: command tx timeout
[  200.480315][T11272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.978279][ T5235] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  201.981521][ T5235] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  202.181142][ T5235] Bluetooth: hci0: command tx timeout
[  202.286741][T11341] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  202.289345][T11341] __nla_validate_parse: 5 callbacks suppressed
[  202.289351][T11341] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2297'.
[  202.502470][T11349] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2300'.
[  202.658968][T11359] syzkaller0: entered promiscuous mode
[  202.664804][T11359] syzkaller0: entered allmulticast mode
[  202.807098][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'.
[  202.924825][T11368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.895139][T11384] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2316'.
[  203.994627][T11395] netlink: 'syz.2.2322': attribute type 21 has an invalid length.
[  204.088436][T11407] netlink: 56429 bytes leftover after parsing attributes in process `syz.0.2328'.
[  204.120377][T11411] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.2330'.
[  204.291710][ T5235] Bluetooth: hci0: command tx timeout
[  204.688446][T11432] netlink: 'syz.0.2338': attribute type 2 has an invalid length.
[  204.887599][T11445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2341'.
[  205.184771][T11455] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  205.190104][T11455] blkio.reset_stats is deprecated
[  205.394461][T11459] netlink: 'syz.2.2347': attribute type 8 has an invalid length.
[  205.398060][T11459] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2347'.
[  205.576697][T11463] netlink: 'syz.2.2349': attribute type 29 has an invalid length.
[  205.601123][T11463] netlink: 'syz.2.2349': attribute type 10 has an invalid length.
[  205.691719][T11463] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.699971][T11463] team0: Port device bond0 added
[  205.855824][T11468] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2351'.
[  206.237341][T11494] netlink: 'syz.2.2363': attribute type 3 has an invalid length.
[  206.240192][T11494] netlink: 199752 bytes leftover after parsing attributes in process `syz.2.2363'.
[  207.694170][T11512] __nla_validate_parse: 1 callbacks suppressed
[  207.694212][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'.
[  207.699706][T11512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2371'.
[  207.723246][T11514] netlink: 'syz.0.2372': attribute type 11 has an invalid length.
[  207.855070][T11521] netlink: 'syz.2.2375': attribute type 9 has an invalid length.
[  208.071596][T11537] netlink: 'syz.0.2383': attribute type 14 has an invalid length.
[  208.925461][T11551] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2390'.
[  208.986988][T11555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.026496][T11561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.226682][T11655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2439'.
[  212.668236][T11686] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2452'.
[  212.674946][T11686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.699205][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.743433][T11690] netlink: 'syz.2.2455': attribute type 39 has an invalid length.
[  212.891222][T11699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.894711][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.898964][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.904464][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.909112][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.914240][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  212.935396][T11697] lo speed is unknown, defaulting to 1000
[  213.056529][T11697] chnl_net:caif_netlink_parms(): no params data found
[  213.477541][T11697] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.480011][T11697] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.485183][T11697] bridge_slave_0: entered allmulticast mode
[  213.488954][T11697] bridge_slave_0: entered promiscuous mode
[  213.497728][T11697] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.502576][T11697] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.507149][T11697] bridge_slave_1: entered allmulticast mode
[  213.526186][T11697] bridge_slave_1: entered promiscuous mode
[  213.584675][T11697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.590303][T11697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.619849][T11697] team0: Port device team_slave_0 added
[  213.623294][T11697] team0: Port device team_slave_1 added
[  213.796148][T11697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.799295][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.810915][T11697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.816028][T11697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.818988][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.831990][T11697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.863454][T11697] hsr_slave_0: entered promiscuous mode
[  213.865950][T11697] hsr_slave_1: entered promiscuous mode
[  213.868238][T11697] debugfs: 'hsr0' already exists in 'hsr'
[  213.871258][T11697] Cannot create hsr debugfs directory
[  213.953247][T11738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2471'.
[  213.990172][T11697] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  213.996871][T11697] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  214.002805][T11697] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  214.007289][T11697] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  214.044418][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'.
[  214.052757][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2474'.
[  214.088531][T11697] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.101970][T11697] 8021q: adding VLAN 0 to HW filter on device team0
[  214.107864][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.110706][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.124820][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.127901][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.286122][T11697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.474183][T11697] veth0_vlan: entered promiscuous mode
[  214.491765][T11697] veth1_vlan: entered promiscuous mode
[  214.516923][T11697] veth0_macvtap: entered promiscuous mode
[  214.521235][T11697] veth1_macvtap: entered promiscuous mode
[  214.530362][T11697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.539908][T11697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.552359][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.559529][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.576868][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.586123][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.638856][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.641641][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.663204][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.665933][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.980629][   T54] Bluetooth: hci3: command tx timeout
[  215.036316][T11809] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2496'.
[  215.276918][T11823] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2503'.
[  215.407629][T11826] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2504'.
[  216.095466][T11851] netlink: 208192 bytes leftover after parsing attributes in process `syz.0.2515'.
[  216.099596][T11851] netlink: 'syz.0.2515': attribute type 1 has an invalid length.
[  216.104302][T11851] netlink: 'syz.0.2515': attribute type 2 has an invalid length.
[  216.448248][T11874] xt_HMARK: proto mask must be zero with L3 mode
[  216.461071][T11874] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2523'.
[  216.464576][T11874] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  216.467720][T11874] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  216.667219][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'.
[  216.791999][T11911] netlink: 'syz.2.2544': attribute type 10 has an invalid length.
[  216.795189][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2544'.
[  216.798958][T11911] dummy0: entered promiscuous mode
[  216.806390][T11911] bridge0: port 1(dummy0) entered blocking state
[  216.810234][T11913] sctp: [Deprecated]: syz.4.2542 (pid 11913) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.810234][T11913] Use struct sctp_sack_info instead
[  216.812801][T11911] bridge0: port 1(dummy0) entered disabled state
[  216.823427][T11911] dummy0: entered allmulticast mode
[  217.061852][   T54] Bluetooth: hci3: command tx timeout
[  219.140666][   T54] Bluetooth: hci3: command tx timeout
[  219.698808][T11962] netlink: 'syz.4.2567': attribute type 3 has an invalid length.
[  219.707414][T11962] __nla_validate_parse: 3 callbacks suppressed
[  219.707458][T11962] netlink: 4264 bytes leftover after parsing attributes in process `syz.4.2567'.
[  219.714919][T11962] netlink: 'syz.4.2567': attribute type 3 has an invalid length.
[  219.717806][T11962] netlink: 4264 bytes leftover after parsing attributes in process `syz.4.2567'.
[  220.106300][T12004] netlink: 'syz.4.2584': attribute type 2 has an invalid length.
[  220.108959][T12004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2584'.
[  220.437106][T12020] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2592'.
[  220.659011][T12031] netlink: 11318 bytes leftover after parsing attributes in process `syz.4.2597'.
[  220.924358][T12034] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2598'.
[  221.220560][   T54] Bluetooth: hci3: command tx timeout
[  221.920996][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'.
[  222.007238][T12074] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2616'.
[  222.477392][T12110] sysfs: Unknown parameter 'subj_type'
[  224.956670][T12122] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  225.263028][T12131] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2641'.
[  227.663126][T12184] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  227.765362][T12195] netlink: 'syz.0.2667': attribute type 28 has an invalid length.
[  227.890380][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2670'.
[  227.898117][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2670'.
[  227.904212][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2670'.
[  228.088214][T12208] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2672'.
[  228.158054][T12212] netlink: 'syz.2.2674': attribute type 39 has an invalid length.
[  228.216678][T12208] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2672'.
[  228.292440][T12208] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2672'.
[  228.393841][T12223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2677'.
[  228.536916][T12226] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2679'.
[  228.642047][T12231] IPv6: NLM_F_CREATE should be specified when creating new route
[  228.884241][T12236] syzkaller0: entered promiscuous mode
[  228.886579][T12236] syzkaller0: entered allmulticast mode
[  230.152250][T12263] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  230.479039][T12281] netlink: 'syz.2.2701': attribute type 1 has an invalid length.
[  230.486192][T12281] netlink: 'syz.2.2701': attribute type 4 has an invalid length.
[  230.488994][T12281] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2701'.
[  230.496818][T12281] netlink: 'syz.2.2701': attribute type 1 has an invalid length.
[  230.499528][T12281] netlink: 'syz.2.2701': attribute type 4 has an invalid length.
[  230.504533][T12281] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2701'.
[  230.636678][T12284] netlink: 'syz.2.2702': attribute type 13 has an invalid length.
[  230.640251][T12284] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2702'.
[  231.548594][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'.
[  231.672958][ T5294] udevd[5294]: worker [12229] terminated by signal 33 (Unknown signal 33)
[  231.755706][T12346] netlink: 'syz.0.2714': attribute type 1 has an invalid length.
[  232.058538][T12393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2720'.
[  232.063515][T12393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2720'.
[  232.068388][T12393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2720'.
[  232.508767][T12412] netlink: 'syz.2.2729': attribute type 1 has an invalid length.
[  233.858110][T12457] netlink: 'syz.2.2750': attribute type 3 has an invalid length.
[  233.861485][T12457] netlink: 'syz.2.2750': attribute type 1 has an invalid length.
[  233.871163][T12457] netlink: 191264 bytes leftover after parsing attributes in process `syz.2.2750'.
[  234.031823][   T54] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  234.072901][T12466] netlink: 'syz.2.2755': attribute type 26 has an invalid length.
[  234.644157][T12501] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2772'.
[  234.863274][ T5859] dummy0: left allmulticast mode
[  234.865394][ T5859] bridge0: port 3(dummy0) entered disabled state
[  234.870037][ T5859] bridge_slave_1: left allmulticast mode
[  234.873088][ T5859] bridge_slave_1: left promiscuous mode
[  234.875414][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.879634][ T5859] bridge_slave_0: left promiscuous mode
[  234.884713][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.274303][ T5859] team0: Port device bond0 removed
[  235.286521][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.297546][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.314245][ T5859] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  235.317640][ T5859] veth1_vlan: left allmulticast mode
[  235.321706][ T5859] bond0 (unregistering): Released all slaves
[  236.124955][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2787'.
[  236.128977][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'.
[  236.137180][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2787'.
[  236.142453][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'.
[  236.825670][T12550] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2793'.
[  236.879505][T12548] netlink: 'syz.0.2789': attribute type 2 has an invalid length.
[  236.944143][T12558] netlink: 'syz.2.2797': attribute type 13 has an invalid length.
[  236.969714][T12560] netlink: 'syz.2.2798': attribute type 21 has an invalid length.
[  237.226365][T12568] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.2801'.
[  237.269176][T12570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2802'.
[  237.324837][T12572] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2803'.
[  237.816553][T12589] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2812'.
[  237.959182][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.963962][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.967633][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.972505][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.976474][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.033344][   T33] audit: type=1107 audit(1757289491.066:2): pid=12590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  238.153611][T12596] chnl_net:caif_netlink_parms(): no params data found
[  238.238907][T12596] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.244654][T12596] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.247299][T12596] bridge_slave_0: entered allmulticast mode
[  238.251873][T12596] bridge_slave_0: entered promiscuous mode
[  238.256187][T12596] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.262928][T12596] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.265888][T12596] bridge_slave_1: entered allmulticast mode
[  238.269133][T12596] bridge_slave_1: entered promiscuous mode
[  238.296798][T12596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.306830][T12596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.329343][T12596] team0: Port device team_slave_0 added
[  238.333022][T12596] team0: Port device team_slave_1 added
[  238.375651][T12596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.380649][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.403082][T12596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.408099][T12596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.411004][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.430467][T12596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.487089][T12596] hsr_slave_0: entered promiscuous mode
[  238.490367][T12596] hsr_slave_1: entered promiscuous mode
[  238.494304][T12596] debugfs: 'hsr0' already exists in 'hsr'
[  238.496800][T12596] Cannot create hsr debugfs directory
[  238.554238][T12631] openvswitch: netlink: IP tunnel dst address not specified
[  238.638358][T12596] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  238.647301][T12596] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  238.653607][T12596] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  238.659382][T12596] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  238.717347][T12596] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.720592][T12596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.723880][T12596] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.726882][T12596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.786404][T12596] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.800072][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.805147][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.822066][T12596] 8021q: adding VLAN 0 to HW filter on device team0
[  238.863876][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.866999][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.882500][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.885537][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.976861][T12653] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  239.073788][T12596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.229416][T12596] veth0_vlan: entered promiscuous mode
[  239.242436][T12596] veth1_vlan: entered promiscuous mode
[  239.267725][T12596] veth0_macvtap: entered promiscuous mode
[  239.276682][T12596] veth1_macvtap: entered promiscuous mode
[  239.292045][T12596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.299947][T12596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.307580][ T5878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.313663][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.320097][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.327328][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.386470][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.390172][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.430056][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.436339][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.604810][T12695] netlink: 'syz.0.2850': attribute type 21 has an invalid length.
[  239.607889][T12695] IPv6: NLM_F_CREATE should be specified when creating new route
[  239.779078][T12706] netlink: 'syz.5.2851': attribute type 64 has an invalid length.
[  240.043688][   T54] Bluetooth: hci3: command tx timeout
[  240.279968][T12719] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2860'.
[  240.634728][T12729] netlink: 'syz.0.2864': attribute type 29 has an invalid length.
[  240.738653][T12744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.043791][T12765] netlink: 'syz.5.2880': attribute type 1 has an invalid length.
[  241.303248][T12789] __nla_validate_parse: 3 callbacks suppressed
[  241.303259][T12789] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2892'.
[  242.100879][   T54] Bluetooth: hci3: command tx timeout
[  242.286594][T12822] netlink: 'syz.2.2909': attribute type 4 has an invalid length.
[  242.342825][T12826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  242.346376][T12826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  242.349703][T12826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  242.353250][T12826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  242.356387][T12826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  242.360026][T12826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  242.363305][T12826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  242.550013][T12840] netlink: 'syz.5.2916': attribute type 1 has an invalid length.
[  242.553087][T12840] netlink: 'syz.5.2916': attribute type 2 has an invalid length.
[  242.555770][T12840] netlink: 'syz.5.2916': attribute type 4 has an invalid length.
[  242.561949][T12840] netlink: 'syz.5.2916': attribute type 1 has an invalid length.
[  242.565062][T12840] netlink: 'syz.5.2916': attribute type 2 has an invalid length.
[  242.568802][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2916'.
[  242.575529][T12840] netlink: 130080 bytes leftover after parsing attributes in process `syz.5.2916'.
[  242.579791][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2916'.
[  244.180734][   T54] Bluetooth: hci3: command tx timeout
[  244.881582][T12933] validate_nla: 1 callbacks suppressed
[  244.881718][T12933] netlink: 'syz.2.2957': attribute type 11 has an invalid length.
[  244.886212][T12933] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2957'.
[  245.041204][T12948] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  245.050572][T12948] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  245.054939][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'.
[  245.345021][T12964] netlink: 'syz.5.2972': attribute type 25 has an invalid length.
[  245.347611][T12964] netlink: 'syz.5.2972': attribute type 3 has an invalid length.
[  245.568289][T12971] net_ratelimit: 3324 callbacks suppressed
[  245.568333][T12971] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  245.573859][T12971] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  245.835277][T12969] xt_time: unknown flags 0xf4
[  245.989008][T12979] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  246.013060][T12979] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  246.042815][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2977'.
[  246.123292][T12983] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2977'.
[  246.126646][T12983] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  246.270720][   T54] Bluetooth: hci3: command tx timeout
[  246.901603][T13002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2986'.
[  246.906360][T13002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2986'.
[  247.237359][T13017] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2994'.
[  247.246162][T13019] netlink: 'syz.2.2992': attribute type 21 has an invalid length.
[  247.265228][T13019] netlink: 'syz.2.2992': attribute type 4 has an invalid length.
[  247.268264][T13019] netlink: 14453 bytes leftover after parsing attributes in process `syz.2.2992'.
[  248.066958][T13057] netlink: 'syz.5.3011': attribute type 21 has an invalid length.
[  248.069846][T13057] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3011'.
[  248.233746][T13067] netlink: 'syz.5.3015': attribute type 5 has an invalid length.
[  248.237141][T13067] netlink: 'syz.5.3015': attribute type 5 has an invalid length.
[  248.548154][T13071] netlink: 'syz.5.3017': attribute type 10 has an invalid length.
[  248.862024][T13071] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  248.968998][T13074] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3018'.
[  248.978454][T13074] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3018'.
[  249.027315][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'.
[  249.038965][T13078] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  249.041866][T13078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.427423][T13104] netlink: 'syz.0.3032': attribute type 10 has an invalid length.
[  249.446270][T13104] geneve0: entered promiscuous mode
[  249.508963][T13104] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  249.842474][T13122] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3040'.
[  249.879701][T13124] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3041'.
[  250.063316][T13128] validate_nla: 1 callbacks suppressed
[  250.063373][T13128] netlink: 'syz.0.3042': attribute type 40 has an invalid length.
[  250.597865][T13119] delete_channel: no stack
[  250.735982][T13128] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.057342][T13140] netlink: 'syz.0.3046': attribute type 4 has an invalid length.
[  252.637291][T13190] __nla_validate_parse: 1 callbacks suppressed
[  252.637306][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3067'.
[  252.645203][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3067'.
[  252.654803][T13190] netlink: 'syz.0.3067': attribute type 4 has an invalid length.
[  253.218348][T13215] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.3079'.
[  253.259785][T13217] netlink: 'syz.0.3080': attribute type 13 has an invalid length.
[  253.267603][T13217] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.3080'.
[  255.206290][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'.
[  255.226702][T13259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.308491][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.314020][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  257.038578][T13294] lo speed is unknown, defaulting to 1000
[  257.041356][T13294] lo speed is unknown, defaulting to 1000
[  257.044244][T13294] lo speed is unknown, defaulting to 1000
[  257.234843][T13294] infiniband syz2: set active
[  257.236582][   T10] lo speed is unknown, defaulting to 1000
[  257.238608][T13294] infiniband syz2: added lo
[  257.265153][T13294] RDS/IB: syz2: added
[  257.267124][T13294] smc: adding ib device syz2 with port count 1
[  257.269345][T13294] smc:    ib device syz2 port 1 has pnetid 
[  257.274650][   T10] lo speed is unknown, defaulting to 1000
[  257.277914][T13294] lo speed is unknown, defaulting to 1000
[  257.391307][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  257.408376][T13294] lo speed is unknown, defaulting to 1000
[  257.535081][T13294] lo speed is unknown, defaulting to 1000
[  257.644322][T13294] lo speed is unknown, defaulting to 1000
[  257.863709][T13294] lo speed is unknown, defaulting to 1000
[  257.897105][T13303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.906824][T13303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.934198][T13303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.937547][T13303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.987204][T13303] batman_adv: batadv0: Removing interface: netdevsim0
[  258.299854][T13294] lo speed is unknown, defaulting to 1000
[  258.549773][T13294] lo speed is unknown, defaulting to 1000
[  258.788454][T13310] IPv6: Can't replace route, no match found
[  258.926502][T13313] sit0: entered allmulticast mode
[  258.941440][T13313] sit0: entered promiscuous mode
[  259.839353][T13322] netlink: 'syz.0.3127': attribute type 6 has an invalid length.
[  259.842692][T13322] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  259.846002][T13322] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3127'.
[  259.937752][T13328] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3130'.
[  260.108107][T13338] netlink: 'syz.0.3135': attribute type 2 has an invalid length.
[  260.139947][   T54] Bluetooth: hci3: Malformed LE Event: 0x0b
[  260.276521][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3140'.
[  260.836044][T13364] lo speed is unknown, defaulting to 1000
[  261.020961][T13370] netlink: 'syz.5.3150': attribute type 10 has an invalid length.
[  261.188078][T13370] team0 (unregistering): Port device team_slave_0 removed
[  261.203183][T13370] team0 (unregistering): Port device team_slave_1 removed
[  261.792628][T13387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  261.795360][T13387] IPv6: NLM_F_CREATE should be set when creating new route
[  261.798624][T13387] IPv6: NLM_F_CREATE should be set when creating new route
[  261.973480][T13398] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3161'.
[  262.551392][T13415] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.3169'.
[  262.749360][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  262.753678][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  262.773973][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  262.803378][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  262.826578][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  262.889653][T13419] lo speed is unknown, defaulting to 1000
[  263.078662][T13419] chnl_net:caif_netlink_parms(): no params data found
[  263.515676][T13419] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.518659][T13419] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.522062][T13419] bridge_slave_0: entered allmulticast mode
[  263.537420][T13419] bridge_slave_0: entered promiscuous mode
[  263.544741][T13419] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.547209][T13419] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.559795][T13419] bridge_slave_1: entered allmulticast mode
[  263.568269][T13419] bridge_slave_1: entered promiscuous mode
[  263.603023][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.610987][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.635985][T13431] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3173'.
[  263.668960][T13419] team0: Port device team_slave_0 added
[  263.686628][T13419] team0: Port device team_slave_1 added
[  263.743644][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.746491][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.760753][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.772667][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.775483][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.795282][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.874984][T13447] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  263.895985][T13419] hsr_slave_0: entered promiscuous mode
[  263.903232][T13419] hsr_slave_1: entered promiscuous mode
[  263.906187][T13419] debugfs: 'hsr0' already exists in 'hsr'
[  263.908333][T13419] Cannot create hsr debugfs directory
[  264.113189][T13419] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  264.139964][T13419] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  264.146155][T13419] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  264.151624][T13419] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  264.213767][T13419] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.228321][T13419] 8021q: adding VLAN 0 to HW filter on device team0
[  264.234889][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.237482][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.246458][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.249492][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.366545][T13419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.536593][T13419] veth0_vlan: entered promiscuous mode
[  264.543766][T13419] veth1_vlan: entered promiscuous mode
[  264.569100][T13419] veth0_macvtap: entered promiscuous mode
[  264.576626][T13419] veth1_macvtap: entered promiscuous mode
[  264.588921][T13419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.597880][T13419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.607188][ T5877] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.615640][ T5877] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.619816][ T5877] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.624524][ T5877] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.683121][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.686369][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.707584][T10208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.710323][T10208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.944604][ T5235] Bluetooth: hci1: command tx timeout
[  265.343204][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3194'.
[  265.353251][T13495] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  265.448716][T13504] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3197'.
[  265.761135][T13516] C: renamed from team_slave_0 (while UP)
[  265.764801][T13516] netlink: 'syz.6.3202': attribute type 3 has an invalid length.
[  265.834191][T13520] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3204'.
[  265.913611][T13526] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3207'.
[  266.990610][ T5235] Bluetooth: hci1: command tx timeout
[  267.005410][ T5235] Bluetooth: hci1: Unable to find connection for big 0x00
[  267.009603][T13544] netlink: 'syz.0.3216': attribute type 10 has an invalid length.
[  267.027091][T13544] veth1_macvtap: left allmulticast mode
[  267.029838][T13544] veth1_macvtap: left promiscuous mode
[  267.420534][T13571] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.3230'.
[  267.524886][T13585] netlink: 'syz.0.3236': attribute type 1 has an invalid length.
[  267.550043][T13587] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3237'.
[  267.606288][T13583] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.3235'.
[  267.773234][T13597] netlink: 'syz.5.3242': attribute type 29 has an invalid length.
[  267.776701][T13597] netlink: 'syz.5.3242': attribute type 29 has an invalid length.
[  268.687750][ T5235] Bluetooth: hci3: adv larger than maximum supported
[  268.789493][T13626] lo speed is unknown, defaulting to 1000
[  268.909388][T13631] syzkaller0: entered promiscuous mode
[  268.911333][T13631] syzkaller0: entered allmulticast mode
[  269.055932][T13641] netlink: 'syz.0.3263': attribute type 21 has an invalid length.
[  269.063488][ T5235] Bluetooth: hci1: command tx timeout
[  269.986287][T13641] netlink: 'syz.0.3263': attribute type 1 has an invalid length.
[  270.133847][T13646] netlink: 'syz.5.3265': attribute type 2 has an invalid length.
[  270.137805][T13646] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3265'.
[  270.332861][T13655] netlink: 'syz.5.3269': attribute type 1 has an invalid length.
[  270.353673][T13657] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.3270'.
[  270.428546][T13663] netlink: 209840 bytes leftover after parsing attributes in process `syz.5.3273'.
[  271.140882][ T5235] Bluetooth: hci1: command tx timeout
[  271.318240][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3288'.
[  274.315225][T13784] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3326'.
[  274.392231][T13784] netlink: 'syz.5.3326': attribute type 10 has an invalid length.
[  274.498580][T13784] batman_adv: batadv0: Adding interface: netdevsim0
[  274.505023][T13784] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.517144][T13784] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  274.631797][T13796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'.
[  274.635790][T13796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'.
[  274.639874][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'.
[  274.732357][T13804] netlink: 'syz.0.3334': attribute type 2 has an invalid length.
[  274.801144][T13808] netlink: 'syz.0.3337': attribute type 16 has an invalid length.
[  274.804488][T13808] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3337'.
[  275.009923][T13820] netlink: 146936 bytes leftover after parsing attributes in process `syz.5.3342'.
[  275.013923][T13820] openvswitch: netlink: Message has 6 unknown bytes.
[  275.046917][T13820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  275.050732][T13820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  275.083557][T13823] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3342'.
[  276.129439][T13829] netlink: 'syz.5.3345': attribute type 64 has an invalid length.
[  276.187212][  T973] lo speed is unknown, defaulting to 1000
[  276.614026][T13844] netlink: 'syz.5.3350': attribute type 10 has an invalid length.
[  276.617482][T13844] bond0: (slave dummy0): Releasing backup interface
[  276.668814][T13848] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3352'.
[  276.672668][T13848] D`: renamed from hsr_slave_1 (while UP)
[  276.820012][T13858] netlink: 'syz.5.3357': attribute type 29 has an invalid length.
[  276.825909][T13858] netlink: 'syz.5.3357': attribute type 29 has an invalid length.
[  277.024775][T13869] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3362'.
[  277.028085][T13868] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3362'.
[  277.033611][T13868] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3362'.
[  277.250687][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3369'.
[  277.310165][ T5235] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  278.125678][T13901] syzkaller0: entered promiscuous mode
[  278.127681][T13901] syzkaller0: entered allmulticast mode
[  278.356980][T13905] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3379'.
[  278.363515][T13905] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3379'.
[  278.578948][T13913] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3383'.
[  278.683885][T13915] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.3384'.
[  278.696256][T13920] netlink: 'syz.0.3386': attribute type 10 has an invalid length.
[  279.379240][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3393'.
[  279.383155][T13936] netlink: 'syz.0.3393': attribute type 2 has an invalid length.
[  279.825455][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.056978][T13964] netlink: 'syz.5.3406': attribute type 27 has an invalid length.
[  280.083090][T13964] netlink: 'syz.5.3406': attribute type 4 has an invalid length.
[  280.114006][T13964] .`: renamed from bond0 (while UP)
[  280.172008][T13970] netlink: 'syz.5.3408': attribute type 2 has an invalid length.
[  280.279412][ T5235] Bluetooth: hci3: Malformed LE Event: 0x1b
[  280.802328][T13988] lo speed is unknown, defaulting to 1000
[  280.834614][T13994] netlink: 'syz.5.3418': attribute type 10 has an invalid length.
[  280.838115][T13994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.857583][T13994] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.876025][T13994] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  281.267428][T14020] tap0: tun_chr_ioctl cmd 1074025677
[  281.270343][T14020] tap0: linktype set to 6
[  281.726522][T14024] __nla_validate_parse: 12 callbacks suppressed
[  281.726599][T14024] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3432'.
[  282.324029][T14036] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  282.473583][T14044] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  282.567331][T14048] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3443'.
[  282.657588][T14056] netlink: 'syz.5.3447': attribute type 10 has an invalid length.
[  283.188653][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3456'.
[  283.297012][T14082] netlink: 'syz.5.3459': attribute type 10 has an invalid length.
[  283.349626][T14083] netlink: 'syz.5.3459': attribute type 10 has an invalid length.
[  283.417984][T14085] netlink: 'syz.0.3460': attribute type 2 has an invalid length.
[  283.428332][T14085] netlink: 'syz.0.3460': attribute type 1 has an invalid length.
[  283.432682][T14085] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3460'.
[  283.436551][T14085] nbd: must specify at least one socket
[  284.153943][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  284.159640][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  284.164531][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  284.169212][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  284.176302][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  284.213304][T14099] lo speed is unknown, defaulting to 1000
[  284.492484][T14099] chnl_net:caif_netlink_parms(): no params data found
[  284.572381][T14099] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.575533][T14099] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.578728][T14099] bridge_slave_0: entered allmulticast mode
[  284.583190][T14099] bridge_slave_0: entered promiscuous mode
[  284.587766][T14099] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.591416][T14099] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.594778][T14099] bridge_slave_1: entered allmulticast mode
[  284.600336][T14099] bridge_slave_1: entered promiscuous mode
[  284.633558][T14099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.638726][T14099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.659349][T14099] team0: Port device team_slave_0 added
[  284.663644][T14099] team0: Port device team_slave_1 added
[  284.682092][T14099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.684924][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.694806][T14099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.703129][T14099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.706001][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.716688][T14099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.752661][T14099] hsr_slave_0: entered promiscuous mode
[  284.755154][T14099] hsr_slave_1: entered promiscuous mode
[  284.757324][T14099] debugfs: 'hsr0' already exists in 'hsr'
[  284.759184][T14099] Cannot create hsr debugfs directory
[  284.924096][T14099] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  284.930710][T14099] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  284.943217][T14099] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  284.957233][T14099] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  285.047293][T14099] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.064358][T14099] 8021q: adding VLAN 0 to HW filter on device team0
[  285.076726][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.079268][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.094083][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.096437][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.152790][T14120] netlink: 'syz.0.3468': attribute type 1 has an invalid length.
[  285.204707][T14099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.327273][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3469'.
[  285.335034][T14131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3469'.
[  285.338804][T14131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3469'.
[  285.467633][T14099] veth0_vlan: entered promiscuous mode
[  285.488274][T14099] veth1_vlan: entered promiscuous mode
[  285.508164][T14099] veth0_macvtap: entered promiscuous mode
[  285.519965][T14099] veth1_macvtap: entered promiscuous mode
[  285.530384][T14099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.545123][T14099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.555447][ T5877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.559498][ T5877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.575344][ T5877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.578712][ T5877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.704502][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.707724][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.769036][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.772988][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.994440][T14148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3479'.
[  285.998244][T14148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3479'.
[  286.138090][T14159] netlink: 'syz.0.3483': attribute type 3 has an invalid length.
[  286.225086][T14163] netlink: 'syz.0.3484': attribute type 23 has an invalid length.
[  286.331466][   T54] Bluetooth: hci4: command tx timeout
[  286.642180][T14168] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.3487'.
[  286.695295][T14172] netlink: 'syz.5.3489': attribute type 1 has an invalid length.
[  286.933322][T14190] __nla_validate_parse: 1 callbacks suppressed
[  286.933336][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3498'.
[  287.314826][T14201] netlink: 'syz.0.3502': attribute type 1 has an invalid length.
[  287.321032][T14201] netlink: 'syz.0.3502': attribute type 1 has an invalid length.
[  287.358191][T14206] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3506'.
[  287.499509][T14213] netlink: 'syz.7.3509': attribute type 13 has an invalid length.
[  287.506023][T14213] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.3509'.
[  287.650037][T14229] netlink: 'syz.7.3516': attribute type 2 has an invalid length.
[  287.779501][T14239] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.3521'.
[  287.784675][T14239] netlink: get zone limit has 8 unknown bytes
[  287.950765][T14259] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.3531'.
[  288.369015][   T54] Bluetooth: hci4: command tx timeout
[  289.425380][T14342] openvswitch: netlink: IP tunnel dst address not specified
[  289.426814][T14343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  289.877392][T14363] netlink: 'syz.7.3578': attribute type 7 has an invalid length.
[  290.074183][T14375] netlink: 'syz.0.3584': attribute type 10 has an invalid length.
[  290.076669][T14375] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3584'.
[  290.201970][T14386] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3588'.
[  290.420741][   T54] Bluetooth: hci4: command tx timeout
[  290.501884][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'.
[  290.504955][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3596'.
[  290.507903][T14410] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3596'.
[  291.024930][T14420] validate_nla: 1 callbacks suppressed
[  291.024941][T14420] netlink: 'syz.7.3603': attribute type 1 has an invalid length.
[  291.029448][T14420] netlink: 'syz.7.3603': attribute type 4 has an invalid length.
[  291.032950][T14420] netlink: 'syz.7.3603': attribute type 1 has an invalid length.
[  291.035723][T14420] netlink: 'syz.7.3603': attribute type 4 has an invalid length.
[  292.153110][T14448] rdma_rxe: rxe_newlink: failed to add lo
[  292.319149][T14452] __nla_validate_parse: 6 callbacks suppressed
[  292.319159][T14452] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3617'.
[  292.458107][T14469] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3625'.
[  292.510910][   T54] Bluetooth: hci4: command tx timeout
[  292.606891][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3633'.
[  292.744498][T14505] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3643'.
[  292.830074][T14514] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3647'.
[  293.080184][T14531] netlink: 'syz.7.3655': attribute type 2 has an invalid length.
[  293.082979][T14531] netlink: 51 bytes leftover after parsing attributes in process `syz.7.3655'.
[  293.210177][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3657'.
[  293.987244][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3675'.
[  294.035904][T14582] netlink: 'syz.7.3678': attribute type 1 has an invalid length.
[  294.038515][T14582] netlink: 'syz.7.3678': attribute type 1 has an invalid length.
[  294.047028][   T54] Bluetooth: hci3: Unable to find connection for big 0x00
[  294.238025][T14594] netlink: 'syz.7.3685': attribute type 2 has an invalid length.
[  294.244298][T14594] netlink: 'syz.7.3685': attribute type 1 has an invalid length.
[  294.247933][T14594] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.3685'.
[  294.258078][T14594] nbd: must specify at least one socket
[  294.580082][T14611] netlink: 'syz.0.3692': attribute type 1 has an invalid length.
[  294.669020][   T54] Bluetooth: hci4: Malformed LE Event: 0x1b
[  294.775561][T14629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.933000][T14644] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3713'.
[  294.956528][T14645] veth0_vlan: entered allmulticast mode
[  295.299684][T14658] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  295.310360][T14657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.316968][T14657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.323597][T14658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.334668][T14657] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  296.627634][T14719] validate_nla: 1 callbacks suppressed
[  296.627735][T14719] netlink: 'syz.0.3744': attribute type 10 has an invalid length.
[  296.943673][T14735] netlink: 'syz.5.3749': attribute type 16 has an invalid length.
[  296.979323][T14739] netlink: 'syz.7.3751': attribute type 2 has an invalid length.
[  297.284978][T14764] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  297.287998][T14764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.216471][T14796] netlink: 'syz.0.3779': attribute type 11 has an invalid length.
[  298.219673][T14796] __nla_validate_parse: 11 callbacks suppressed
[  298.219682][T14796] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3779'.
[  299.282796][T14810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3786'.
[  299.568033][T14818] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3790'.
[  299.574419][T14820] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3791'.
[  299.575309][T14818] D`: renamed from hsr_slave_1 (while UP)
[  301.349967][T14854] syzkaller0: entered promiscuous mode
[  301.354468][T14854] syzkaller0: entered allmulticast mode
[  301.466592][T14868] netlink: 'syz.7.3807': attribute type 16 has an invalid length.
[  301.470038][T14868] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3807'.
[  301.688566][T14876] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3809'.
[  301.738156][T14882] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3812'.
[  301.777170][T14882] netlink: 'syz.7.3812': attribute type 10 has an invalid length.
[  301.995478][T14882] batman_adv: batadv0: Adding interface: netdevsim0
[  301.998769][T14882] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.042394][T14882] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  302.275359][T14907] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3824'.
[  302.440025][T14914] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3826'.
[  302.466235][T14913] netlink: 'syz.5.3826': attribute type 10 has an invalid length.
[  302.681817][T14924] netlink: 'syz.5.3831': attribute type 1 has an invalid length.
[  302.683417][T14922] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3830'.
[  303.624319][T14941] netlink: 809 bytes leftover after parsing attributes in process `syz.7.3836'.
[  303.628241][T14941] netlink: 130160 bytes leftover after parsing attributes in process `syz.7.3836'.
[  303.681582][T14943] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3837'.
[  303.782135][T14950] netlink: 'syz.7.3837': attribute type 10 has an invalid length.
[  303.919380][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  303.923490][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  304.125369][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3840'.
[  304.128605][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3840'.
[  304.136332][T14953] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3840'.
[  304.152580][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3840'.
[  304.162678][T14953] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3840'.
[  305.676146][T15025] IPv6: Can't replace route, no match found
[  305.800223][T15035] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  305.804234][T15035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.844478][T15036] mac80211_hwsim hwsim14 wlan1: left promiscuous mode
[  306.637815][T15052] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  306.642125][T15052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.760548][T15064] netlink: 'syz.5.3891': attribute type 9 has an invalid length.
[  307.045841][T15088] syzkaller0: entered promiscuous mode
[  307.047990][T15088] syzkaller0: entered allmulticast mode
[  307.052325][T15088] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  307.151758][T15091] netlink: 'syz.5.3904': attribute type 21 has an invalid length.
[  307.154723][T15091] netlink: 'syz.5.3904': attribute type 1 has an invalid length.
[  307.672049][T15123] netlink: 'syz.5.3919': attribute type 27 has an invalid length.
[  308.614933][T15171] netlink: 'syz.0.3939': attribute type 10 has an invalid length.
[  308.618250][T15171] team0: entered promiscuous mode
[  308.621031][T15171] C: entered promiscuous mode
[  308.623390][T15171] team_slave_1: entered promiscuous mode
[  308.626146][T15171] team0: entered allmulticast mode
[  308.628495][T15171] C: entered allmulticast mode
[  308.630333][T15171] team_slave_1: entered allmulticast mode
[  308.634087][T15171] bridge0: port 3(team0) entered blocking state
[  308.636366][T15171] bridge0: port 3(team0) entered disabled state
[  308.962344][T15177] netlink: 'syz.0.3942': attribute type 10 has an invalid length.
[  308.979309][T15177] __nla_validate_parse: 15 callbacks suppressed
[  308.979446][T15177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3942'.
[  308.990780][T15177] veth0_vlan: entered allmulticast mode
[  308.995764][T15177] bridge0: port 4(veth0_vlan) entered blocking state
[  309.000151][T15177] bridge0: port 4(veth0_vlan) entered disabled state
[  309.056048][T15177] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  309.183565][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'.
[  309.188076][T15185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3946'.
[  309.252124][T15190] Dead loop on virtual device ip6_vti0, fix it urgently!
[  309.911612][T15204] netlink: 'syz.7.3954': attribute type 10 has an invalid length.
[  310.103072][T15204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.120058][T15204] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  310.152318][T15185] infiniband syz1: set down
[  310.153896][T15185] infiniband syz1: added bond0
[  310.155972][T15185] syz1: rxe_create_cq: returned err = -12
[  310.157890][T15185] infiniband syz1: Couldn't create ib_mad CQ
[  310.160001][T15185] infiniband syz1: Couldn't open port 1
[  310.226893][T15185] RDS/IB: syz1: added
[  310.228365][T15185] smc: adding ib device syz1 with port count 1
[  310.238561][T15185] smc:    ib device syz1 port 1 has pnetid 
[  310.285288][T15214] _Z`Ԁ@S: entered promiscuous mode
[  310.349618][T15215] syzkaller0: entered promiscuous mode
[  310.353664][T15215] syzkaller0: entered allmulticast mode
[  310.476499][T15222] netlink: 'syz.7.3960': attribute type 2 has an invalid length.
[  310.479143][T15222] netlink: 'syz.7.3960': attribute type 1 has an invalid length.
[  310.531350][T15222] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3960'.
[  311.749867][T15247] netlink: 'syz.7.3972': attribute type 11 has an invalid length.
[  311.756645][T15247] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3972'.
[  313.155338][T15272] netlink: 'syz.7.3984': attribute type 10 has an invalid length.
[  313.169372][T15272] team0: Port device syz_tun added
[  313.634406][T15284] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3990'.
[  313.893703][T15300] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3998'.
[  314.369645][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4007'.
[  314.381307][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4007'.
[  314.529153][T15334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4013'.
[  314.536575][T15334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4013'.
[  314.578517][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  314.578541][   T54] Bluetooth: hci2: connection err: -111
[  314.581028][T15340] @: renamed from bond_slave_0 (while UP)
[  314.813151][T15366] netlink: 'syz.7.4027': attribute type 10 has an invalid length.
[  314.815763][T15366] netlink: 'syz.7.4027': attribute type 19 has an invalid length.
[  314.820469][T15366] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4027'.
[  314.943020][T15381] netlink: 'syz.0.4036': attribute type 19 has an invalid length.
[  314.955708][T15383] netlink: 'syz.5.4034': attribute type 2 has an invalid length.
[  314.958779][T15383] netlink: 8196 bytes leftover after parsing attributes in process `syz.5.4034'.
[  315.005495][   T54] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  315.299592][T15404] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4043'.
[  316.703687][T15410] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4046'.
[  316.740254][T15414] netlink: 'syz.0.4048': attribute type 1 has an invalid length.
[  316.752728][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.754794][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  316.760960][T15414] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4048'.
[  316.789451][T15416] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4049'.
[  316.861194][T15420] netlink: 'syz.7.4051': attribute type 10 has an invalid length.
[  317.058691][T15435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.094532][T15439] netlink: 'syz.7.4059': attribute type 2 has an invalid length.
[  318.108992][T15478] netlink: 'syz.5.4075': attribute type 21 has an invalid length.
[  318.506204][ T5235] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7
[  318.831457][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  318.978541][T15540] netlink: 'syz.7.4101': attribute type 1 has an invalid length.
[  319.019222][T15527] netlink: 'syz.5.4096': attribute type 6 has an invalid length.
[  319.118826][T15551] bpf: Bad value for 'gid'
[  319.147582][T15556] netlink: 'syz.0.4108': attribute type 10 has an invalid length.
[  319.170270][T15556] geneve1: entered promiscuous mode
[  319.177832][T15556] geneve1: entered allmulticast mode
[  319.181095][T15556] team0: Port device geneve1 added
[  319.231185][T15560] netlink: 'syz.0.4110': attribute type 4 has an invalid length.
[  319.236832][T15560] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  322.005276][T15622] __nla_validate_parse: 10 callbacks suppressed
[  322.005286][T15622] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.4137'.
[  323.029318][T15644] C: renamed from team_slave_0 (while UP)
[  323.137384][T15644] netlink: 'syz.7.4146': attribute type 3 has an invalid length.
[  323.140178][T15644] netlink: 'syz.7.4146': attribute type 1 has an invalid length.
[  323.147505][T15644] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  323.188128][T15646] openvswitch: netlink: IPv4 tun info is not correct
[  323.214760][T15648] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4148'.
[  323.240377][T15650] netlink: 'syz.7.4149': attribute type 62 has an invalid length.
[  323.376756][T15656] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4152'.
[  323.408214][T15656] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4152'.
[  324.787538][T15704] bpf: Bad value for 'mode'
[  324.815350][T15706] netlink: 304 bytes leftover after parsing attributes in process `syz.7.4174'.
[  324.978728][T15716] netlink: 798 bytes leftover after parsing attributes in process `syz.5.4178'.
[  325.124399][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4181'.
[  325.210178][T15727] netlink: 'syz.7.4183': attribute type 3 has an invalid length.
[  325.214953][T15727] netlink: 199752 bytes leftover after parsing attributes in process `syz.7.4183'.
[  325.412506][T15741] netlink: 495 bytes leftover after parsing attributes in process `syz.7.4190'.
[  325.449021][T15743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.524128][T15745] !: renamed from bond_slave_0 (while UP)
[  325.694432][T15747] netlink: 'syz.7.4193': attribute type 13 has an invalid length.
[  325.697947][T15747] netlink: 'syz.7.4193': attribute type 17 has an invalid length.
[  326.019742][T15747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.025361][T15750] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4194'.
[  326.075004][T15754] netlink: 'syz.7.4196': attribute type 10 has an invalid length.
[  326.515513][T15765] netlink: 'syz.5.4201': attribute type 16 has an invalid length.
[  326.893158][ T5235] Bluetooth: hci3: unexpected event 0x09 length: 151 > 3
[  327.031139][T15789] netlink: 'syz.7.4208': attribute type 6 has an invalid length.
[  327.036504][T15789] __nla_validate_parse: 6 callbacks suppressed
[  327.036512][T15789] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4208'.
[  327.192301][T15795] syzkaller0: entered promiscuous mode
[  327.200008][T15795] syzkaller0: entered allmulticast mode
[  327.352687][T15800] netlink: 'syz.5.4214': attribute type 46 has an invalid length.
[  328.054416][T15820] syzkaller0: entered promiscuous mode
[  328.057791][T15820] syzkaller0: entered allmulticast mode
[  328.103037][T15823] netlink: 'syz.7.4224': attribute type 20 has an invalid length.
[  328.106370][T15823] IPv6: NLM_F_CREATE should be specified when creating new route
[  328.109684][T15823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.112774][T15823] IPv6: NLM_F_CREATE should be set when creating new route
[  329.434197][T15862] netlink: 'syz.5.4241': attribute type 40 has an invalid length.
[  329.469446][T15864] pim6reg1: entered allmulticast mode
[  330.046426][T15887] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  330.157734][T15889] netlink: 'syz.7.4253': attribute type 1 has an invalid length.
[  330.393329][T15899] netlink: 'syz.7.4258': attribute type 2 has an invalid length.
[  330.396372][T15899] netlink: 12374 bytes leftover after parsing attributes in process `syz.7.4258'.
[  330.813254][T15922] netlink: 'syz.5.4269': attribute type 29 has an invalid length.
[  330.821507][T15922] netlink: 'syz.5.4269': attribute type 29 has an invalid length.
[  330.825438][T15922] netlink: 'syz.5.4269': attribute type 29 has an invalid length.
[  330.831756][T15922] netlink: 'syz.5.4269': attribute type 29 has an invalid length.
[  332.016786][T15957] netlink: 'syz.5.4285': attribute type 4 has an invalid length.
[  332.019569][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4285'.
[  332.050010][T15958] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4284'.
[  332.282005][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4293'.
[  332.872793][T15988] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4300'.
[  333.347842][T16010] netlink: 'syz.5.4310': attribute type 1 has an invalid length.
[  333.409972][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4310'.
[  333.414210][T16010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4310'.
[  333.610644][T16019] IPv6: NLM_F_CREATE should be specified when creating new route
[  333.785821][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4317'.
[  335.104310][T16051] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  335.120827][T16051] syzkaller0: entered promiscuous mode
[  335.123253][T16051] syzkaller0: entered allmulticast mode
[  335.126532][T16052] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.4328'.
[  335.131964][T16049] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.4328'.
[  335.137270][T16049] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.4328'.
[  336.228856][T16058] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4332'.
[  336.796242][T16101] netlink: 'syz.5.4350': attribute type 10 has an invalid length.
[  336.806852][T16101] batman_adv: batadv0: Adding interface: D`
[  336.815609][T16101] batman_adv: batadv0: The MTU of interface D` is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.834313][T16101] batman_adv: batadv0: Interface activated: D`
[  338.029642][T16126] netlink: 'syz.7.4362': attribute type 28 has an invalid length.
[  338.039021][T16126] netlink: 'syz.7.4362': attribute type 29 has an invalid length.
[  338.043575][T16126] __nla_validate_parse: 2 callbacks suppressed
[  338.043586][T16126] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4362'.
[  338.146065][T16137] openvswitch: netlink: VXLAN extension 233 out of range max 1
[  338.632645][T16167] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4381'.
[  338.636660][T16167] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4381'.
[  338.798252][T16176] netlink: 'syz.5.4383': attribute type 8 has an invalid length.
[  338.801775][T16176] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4383'.
[  339.046067][T16183] netlink: 'syz.7.4388': attribute type 4 has an invalid length.
[  340.108605][T16196] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4393'.
[  340.117715][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4393'.
[  340.274781][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  340.277933][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  340.282051][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  340.285061][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  340.287968][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  340.323783][T16203] lo speed is unknown, defaulting to 1000
[  340.572683][T16216] delete_channel: no stack
[  340.596839][T16222] netlink: 'syz.7.4401': attribute type 21 has an invalid length.
[  340.601640][T16203] chnl_net:caif_netlink_parms(): no params data found
[  340.791365][T16235] xt_limit: Overflow, try lower: 271964/0
[  340.896993][T16203] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.899739][T16203] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.909751][T16203] bridge_slave_0: entered allmulticast mode
[  340.913966][T16203] bridge_slave_0: entered promiscuous mode
[  340.918891][T16203] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.921913][T16203] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.927902][T16203] bridge_slave_1: entered allmulticast mode
[  340.934345][T16203] bridge_slave_1: entered promiscuous mode
[  340.965080][T16245] netlink: 'syz.5.4409': attribute type 10 has an invalid length.
[  340.970507][T16245] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4409'.
[  340.974712][T16203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.979835][T16203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.044338][T16203] team0: Port device team_slave_0 added
[  341.047477][T16203] team0: Port device team_slave_1 added
[  341.052496][ T5235] Bluetooth: hci4: Malformed HCI Event
[  341.094181][T16249] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4412'.
[  341.098933][T16203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.102484][T16203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.110794][T16203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.114941][T16203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.117167][T16203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.129170][T16203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.208278][T16203] hsr_slave_0: entered promiscuous mode
[  341.221263][T16203] hsr_slave_1: entered promiscuous mode
[  341.231587][T16203] debugfs: 'hsr0' already exists in 'hsr'
[  341.233994][T16203] Cannot create hsr debugfs directory
[  341.256086][T16261] netlink: 'syz.5.4418': attribute type 2 has an invalid length.
[  341.268427][T16261] k*: entered promiscuous mode
[  341.411363][T16203] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  341.423564][T16203] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  341.443748][T16270] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4422'.
[  341.447579][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4422'.
[  341.455357][T16203] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  341.464350][T16203] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  342.178413][T16284] syz.7.4426 (16284) used obsolete PPPIOCDETACH ioctl
[  342.279863][T16203] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.308222][T16203] 8021q: adding VLAN 0 to HW filter on device team0
[  342.317681][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.320890][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.346243][ T5235] Bluetooth: hci5: command tx timeout
[  342.407945][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.411147][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.474873][T16203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.716595][T16306] netlink: 'syz.5.4433': attribute type 28 has an invalid length.
[  342.759975][T16306] netlink: 'syz.5.4433': attribute type 3 has an invalid length.
[  343.699099][T16203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.915706][   T54] Bluetooth: hci3: Malformed Event: 0x13
[  343.949311][T16203] veth0_vlan: entered promiscuous mode
[  343.964741][T16203] veth1_vlan: entered promiscuous mode
[  343.986581][T16203] veth0_macvtap: entered promiscuous mode
[  343.995634][T16203] veth1_macvtap: entered promiscuous mode
[  344.006876][T16203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.020784][T16203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.029108][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.038964][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.057975][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.066867][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.155762][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.158258][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.199963][T16340] siw: device registration error -23
[  344.226702][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.229288][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.309693][T16346] netlink: 'syz.5.4446': attribute type 3 has an invalid length.
[  344.313049][T16346] __nla_validate_parse: 4 callbacks suppressed
[  344.313057][T16346] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4446'.
[  344.420670][   T54] Bluetooth: hci5: command tx timeout
[  344.588527][T16368] netlink: 'syz.5.4455': attribute type 10 has an invalid length.
[  344.707206][T16383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  344.709576][T16383] IPv6: NLM_F_CREATE should be set when creating new route
[  344.712014][T16383] IPv6: NLM_F_CREATE should be set when creating new route
[  344.714194][T16384] netlink: 'syz.5.4463': attribute type 19 has an invalid length.
[  344.714384][T16383] IPv6: NLM_F_CREATE should be set when creating new route
[  344.717061][T16384] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4463'.
[  345.138691][T16398] netlink: 'syz.7.4469': attribute type 11 has an invalid length.
[  345.143134][T16398] netlink: 149476 bytes leftover after parsing attributes in process `syz.7.4469'.
[  345.403872][T16418] : renamed from team_slave_1
[  345.801127][T16433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4485'.
[  345.804825][T16433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4485'.
[  345.890150][T16437] netlink: 'syz.5.4487': attribute type 3 has an invalid length.
[  345.895682][T16437] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.4487'.
[  345.959470][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4488'.
[  346.055666][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4490'.
[  346.419301][T16464] netlink: 'syz.5.4500': attribute type 10 has an invalid length.
[  346.502449][   T54] Bluetooth: hci5: command tx timeout
[  346.678648][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4509'.
[  347.742107][T16497] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4516'.
[  347.895134][T16505] siw: device registration error -23
[  348.108674][T16521] netlink: 'syz.8.4528': attribute type 1 has an invalid length.
[  348.113666][T16521] netlink: 'syz.8.4528': attribute type 1 has an invalid length.
[  348.580954][   T54] Bluetooth: hci5: command tx timeout
[  349.584350][T16603] __nla_validate_parse: 4 callbacks suppressed
[  349.584360][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4566'.
[  349.608552][T16603] netlink: 'syz.8.4566': attribute type 4 has an invalid length.
[  349.615451][T16603] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4566'.
[  349.704621][T16604] syzkaller0: tun_chr_ioctl cmd 1074025677
[  349.707287][T16604] syzkaller0: Linktype set failed because interface is up
[  349.754656][T16603] .`: renamed from bond0 (while UP)
[  349.787628][   T13] syzkaller0: tun_net_xmit 76
[  349.806407][   T13] syzkaller0: tun_net_xmit 48
[  349.821335][ T5899] syzkaller0: tun_net_xmit 76
[  351.870267][T16665] netlink: 'syz.8.4592': attribute type 8 has an invalid length.
[  352.147412][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4597'.
[  352.151938][T16677] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4597'.
[  353.492128][T16700] : renamed from gre0 (while UP)
[  353.615923][T16704] xt_limit: Overflow, try lower: 324382443/4200216956
[  353.936910][T16720] netlink: 'syz.7.4616': attribute type 3 has an invalid length.
[  353.939422][T16720] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4616'.
[  354.015807][T16726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.057180][   T33] audit: type=1107 audit(1757289607.086:3): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  354.095097][T16732] netlink: 830 bytes leftover after parsing attributes in process `syz.7.4622'.
[  354.207479][T16740] netlink: 'syz.5.4626': attribute type 29 has an invalid length.
[  354.213848][T16740] netlink: 'syz.5.4626': attribute type 29 has an invalid length.
[  355.112724][T16777] netlink: 'syz.8.4641': attribute type 3 has an invalid length.
[  355.116733][T16777] netlink: 'syz.8.4641': attribute type 10 has an invalid length.
[  355.405925][T16780] delete_channel: no stack
[  355.407892][T16780] delete_channel: no stack
[  355.754220][T16801] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4648'.
[  355.791619][   T34] INFO: task syz.3.2216:11167 blocked for more than 143 seconds.
[  355.794738][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  355.810653][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.814188][   T34] task:syz.3.2216      state:D stack:22584 pid:11167 tgid:11166 ppid:11098  task_flags:0x400140 flags:0x00004006
[  355.830040][   T34] Call Trace:
[  355.831629][   T34]  <TASK>
[  355.832818][   T34]  __schedule+0x1798/0x4cc0
[  355.834734][   T34]  ? validate_chain+0x897/0x2140
[  355.836796][   T34]  ? __lock_acquire+0xab9/0xd20
[  355.838861][   T34]  ? __pfx___schedule+0x10/0x10
[  355.850680][   T34]  ? schedule+0x91/0x360
[  355.854233][   T34]  schedule+0x165/0x360
[  355.866911][   T34]  schedule_timeout+0x9a/0x270
[  355.868881][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  355.880482][   T34]  ? wait_for_completion+0x267/0x5d0
[  355.882298][   T34]  wait_for_completion+0x2bf/0x5d0
[  355.884189][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  355.886077][   T34]  ? remove_client_context+0x19c/0x1e0
[  355.887920][   T34]  disable_device+0x1c6/0x320
[  355.889541][   T34]  ? __pfx_disable_device+0x10/0x10
[  355.900486][   T34]  ? irqentry_exit+0x74/0x90
[  355.902392][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.904674][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  355.906856][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  355.908841][   T34]  nldev_dellink+0x2d1/0x320
[  355.920254][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  355.924818][   T34]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  355.929721][   T34]  ? apparmor_capable+0x137/0x1b0
[  355.935293][   T34]  ? bpf_lsm_capable+0x9/0x20
[  355.939276][   T34]  ? security_capable+0x7e/0x2e0
[  355.943354][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  355.957298][   T34]  rdma_nl_rcv+0x6ae/0x980
[  355.962445][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  355.971191][   T34]  ? __lock_acquire+0xab9/0xd20
[  355.980156][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  356.010225][   T34]  netlink_unicast+0x82f/0x9e0
[  356.037779][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  356.039552][   T34]  ? netlink_sendmsg+0x642/0xb30
[  356.052475][   T34]  ? skb_put+0x11b/0x210
[  356.053983][   T34]  netlink_sendmsg+0x805/0xb30
[  356.055673][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.057661][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  356.059763][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  356.082198][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.084653][   T34]  __sock_sendmsg+0x21c/0x270
[  356.086377][   T34]  ____sys_sendmsg+0x505/0x830
[  356.088400][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  356.090290][   T34]  ? import_iovec+0x74/0xa0
[  356.094679][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  356.096308][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  356.098086][   T34]  ? __fget_files+0x2a/0x420
[  356.099674][   T34]  ? __fget_files+0x3a0/0x420
[  356.104232][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  356.105929][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  356.108128][   T34]  do_syscall_64+0xfa/0x3b0
[  356.109679][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.114379][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  356.116447][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.118398][   T34] RIP: 0033:0x7f01d538ebe9
[  356.119875][   T34] RSP: 002b:00007f01d6221038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.123173][   T34] RAX: ffffffffffffffda RBX: 00007f01d55c5fa0 RCX: 00007f01d538ebe9
[  356.125847][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  356.128483][   T34] RBP: 00007f01d5411e19 R08: 0000000000000000 R09: 0000000000000000
[  356.133761][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.136413][   T34] R13: 00007f01d55c6038 R14: 00007f01d55c5fa0 R15: 00007ffda50af078
[  356.139040][   T34]  </TASK>
[  356.140260][   T34] 
[  356.140260][   T34] Showing all locks held in the system:
[  356.143964][   T34] 1 lock held by ksoftirqd/1/23:
[  356.146204][   T34] 1 lock held by rcu_tasks_trace/32:
[  356.148524][   T34]  #0: ffffffff8e13ad50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  356.153452][   T34] 1 lock held by khungtaskd/34:
[  356.155631][   T34]  #0: ffffffff8e13a020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  356.159733][   T34] 2 locks held by getty/5674:
[  356.161732][   T34]  #0: ffff8880295b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  356.165965][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  356.170358][   T34] 4 locks held by kworker/u8:2/5859:
[  356.174448][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  356.179177][   T34]  #1: ffffc9000326fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  356.184062][   T34]  #2: ffffffff8f52b1f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  356.188054][   T34]  #3: ffff8881073cc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  356.193203][   T34] 2 locks held by syz.3.2216/11167:
[  356.195476][   T34]  #0: ffffffff99e67898 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  356.199753][   T34]  #1: ffff8881073cc700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  356.205879][   T34] 2 locks held by syz.6.3256/13626:
[  356.207664][   T34]  #0: ffffffff8f52b1f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  356.213199][   T34]  #1: ffff8881073cc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  356.216920][   T34] 1 lock held by syz.7.3807/14872:
[  356.218649][   T34]  #0: ffffffff8e19d5c8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  356.221899][   T34] 2 locks held by syz.0.4170/15695:
[  356.223681][   T34]  #0: ffffffff8f59d6f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.226465][   T34]  #1: ffffffff8e418808 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  356.230152][   T34] 1 lock held by syz.7.4648/16793:
[  356.234294][   T34]  #0: ffffffff8e13fab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  356.237917][   T34] 2 locks held by syz.5.4649/16794:
[  356.239865][   T34]  #0: ffffffff8e19d5c8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  356.243637][   T34]  #1: ffffffff8e13fab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  356.247491][   T34] 1 lock held by dhcpcd/16806:
[  356.249157][   T34]  #0: ffff88802c095c08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  356.254817][   T34] 
[  356.255672][   T34] =============================================
[  356.255672][   T34] 
[  356.258433][   T34] NMI backtrace for cpu 1
[  356.258444][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  356.258457][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  356.258464][   T34] Call Trace:
[  356.258469][   T34]  <TASK>
[  356.258475][   T34]  dump_stack_lvl+0x189/0x250
[  356.258494][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.258507][   T34]  ? __pfx__printk+0x10/0x10
[  356.258531][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  356.258547][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  356.258562][   T34]  ? __pfx__printk+0x10/0x10
[  356.258579][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  356.258607][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  356.258622][   T34]  watchdog+0xf93/0xfe0
[  356.258641][   T34]  ? watchdog+0x1de/0xfe0
[  356.258660][   T34]  kthread+0x711/0x8a0
[  356.258675][   T34]  ? __pfx_watchdog+0x10/0x10
[  356.258690][   T34]  ? __pfx_kthread+0x10/0x10
[  356.258704][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.258719][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.258733][   T34]  ? __pfx_kthread+0x10/0x10
[  356.258748][   T34]  ret_from_fork+0x3fc/0x770
[  356.258762][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  356.258777][   T34]  ? __switch_to_asm+0x39/0x70
[  356.258789][   T34]  ? __switch_to_asm+0x33/0x70
[  356.258801][   T34]  ? __pfx_kthread+0x10/0x10
[  356.258815][   T34]  ret_from_fork_asm+0x1a/0x30
[  356.258838][   T34]  </TASK>
[  356.258843][   T34] Sending NMI from CPU 1 to CPUs 0:
[  356.316412][    C0] NMI backtrace for cpu 0
[  356.316430][    C0] CPU: 0 UID: 0 PID: 16793 Comm: syz.7.4648 Not tainted syzkaller #0 PREEMPT(full) 
[  356.316445][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  356.316452][    C0] RIP: 0010:__lock_acquire+0x332/0xd20
[  356.316476][    C0] Code: e5 15 09 d5 09 cd 44 09 f5 41 89 6c c7 20 45 89 44 c7 24 4c 89 7c 24 10 4d 8d 34 c7 81 e5 ff 1f 00 00 48 0f a3 2d ee 9f 0a 12 <73> 10 48 69 c5 c8 00 00 00 48 8d 80 50 13 49 93 eb 40 83 3d 55 2f
[  356.316487][    C0] RSP: 0018:ffffc9000657f408 EFLAGS: 00000003
[  356.316499][    C0] RAX: 0000000000000000 RBX: ffffffff8e13a020 RCX: 0000000000000007
[  356.316508][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888106de0000
[  356.316514][    C0] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffff8172c195
[  356.316521][    C0] R10: ffffc9000657f658 R11: ffffffff81ac4a90 R12: 0000000000020000
[  356.316530][    C0] R13: 0000000000000000 R14: ffff888106de0af0 R15: ffff888106de0af0
[  356.316537][    C0] FS:  00007f263d0b66c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  356.316547][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.316554][    C0] CR2: 0000559459a3f680 CR3: 0000000129d9a000 CR4: 00000000000006f0
[  356.316589][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.316597][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  356.316605][    C0] Call Trace:
[  356.316609][    C0]  <TASK>
[  356.316616][    C0]  ? unwind_next_frame+0xa5/0x2390
[  356.316631][    C0]  lock_acquire+0x120/0x360
[  356.316647][    C0]  ? unwind_next_frame+0xa5/0x2390
[  356.316662][    C0]  ? unwind_next_frame+0xa5/0x2390
[  356.316673][    C0]  ? __reset_page_owner+0x71/0x1f0
[  356.316689][    C0]  ? unwind_next_frame+0xa5/0x2390
[  356.316699][    C0]  unwind_next_frame+0xc2/0x2390
[  356.316711][    C0]  ? unwind_next_frame+0xa5/0x2390
[  356.316731][    C0]  ? unwind_next_frame+0xa5/0x2390
[  356.316743][    C0]  ? save_stack+0xf5/0x1f0
[  356.316757][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  356.316771][    C0]  arch_stack_walk+0x11c/0x150
[  356.316787][    C0]  ? __reset_page_owner+0x71/0x1f0
[  356.316802][    C0]  stack_trace_save+0x9c/0xe0
[  356.316814][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  356.316830][    C0]  save_stack+0xf5/0x1f0
[  356.316844][    C0]  ? __pfx_save_stack+0x10/0x10
[  356.316863][    C0]  __reset_page_owner+0x71/0x1f0
[  356.316878][    C0]  __free_frozen_pages+0xbc4/0xd30
[  356.316897][    C0]  vfree+0x25a/0x400
[  356.316912][    C0]  ? __pfx_kcov_close+0x10/0x10
[  356.316928][    C0]  kcov_close+0x28/0x50
[  356.316942][    C0]  __fput+0x44c/0xa70
[  356.316958][    C0]  task_work_run+0x1d4/0x260
[  356.316974][    C0]  ? __pfx_task_work_run+0x10/0x10
[  356.316990][    C0]  ? kmem_cache_free+0x18f/0x400
[  356.317006][    C0]  do_exit+0x6b5/0x2300
[  356.317021][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  356.317039][    C0]  ? do_raw_spin_lock+0x121/0x290
[  356.317053][    C0]  ? __pfx_do_exit+0x10/0x10
[  356.317065][    C0]  ? irqentry_exit+0x74/0x90
[  356.317085][    C0]  do_group_exit+0x21c/0x2d0
[  356.317139][    C0]  get_signal+0x1286/0x1340
[  356.317156][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  356.317175][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  356.317189][    C0]  ? perf_trace_preemptirq_template+0xa3/0x340
[  356.317207][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  356.317225][    C0]  exit_to_user_mode_loop+0x75/0x110
[  356.317240][    C0]  do_syscall_64+0x2bd/0x3b0
[  356.317257][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.317267][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  356.317280][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.317290][    C0] RIP: 0033:0x7f263c18ebe9
[  356.317301][    C0] Code: Unable to access opcode bytes at 0x7f263c18ebbf.
[  356.317306][    C0] RSP: 002b:00007f263d0b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  356.317318][    C0] RAX: 0000000000000000 RBX: 00007f263c3c5fa0 RCX: 00007f263c18ebe9
[  356.317324][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  356.317330][    C0] RBP: 00007f263c211e19 R08: 0000000000000000 R09: 0000000000000000
[  356.317338][    C0] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  356.317345][    C0] R13: 00007f263c3c6038 R14: 00007f263c3c5fa0 R15: 00007fffa4e8ea88
[  356.317357][    C0]  </TASK>
[  356.523871][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  356.526243][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  356.529262][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  356.532645][   T34] Call Trace:
[  356.533786][   T34]  <TASK>
[  356.534814][   T34]  dump_stack_lvl+0x99/0x250
[  356.536373][   T34]  ? __asan_memcpy+0x40/0x70
[  356.537966][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.540218][   T34]  ? __pfx__printk+0x10/0x10
[  356.542180][   T34]  vpanic+0x281/0x750
[  356.543755][   T34]  ? __pfx_vpanic+0x10/0x10
[  356.545524][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  356.547814][   T34]  ? preempt_schedule+0xae/0xc0
[  356.549625][   T34]  ? preempt_schedule_common+0x83/0xd0
[  356.551536][   T34]  panic+0xb9/0xc0
[  356.552797][   T34]  ? __pfx_panic+0x10/0x10
[  356.554302][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  356.556107][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  356.558178][   T34]  watchdog+0xfd2/0xfe0
[  356.559591][   T34]  ? watchdog+0x1de/0xfe0
[  356.561058][   T34]  kthread+0x711/0x8a0
[  356.562430][   T34]  ? __pfx_watchdog+0x10/0x10
[  356.563998][   T34]  ? __pfx_kthread+0x10/0x10
[  356.565568][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.567308][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.569058][   T34]  ? __pfx_kthread+0x10/0x10
[  356.570614][   T34]  ret_from_fork+0x3fc/0x770
[  356.572182][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  356.573904][   T34]  ? __switch_to_asm+0x39/0x70
[  356.575505][   T34]  ? __switch_to_asm+0x33/0x70
[  356.577193][   T34]  ? __pfx_kthread+0x10/0x10
[  356.578961][   T34]  ret_from_fork_asm+0x1a/0x30
[  356.580595][   T34]  </TASK>
[  356.582312][   T34] Kernel Offset: disabled
[  356.583754][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:00:08  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000000b3 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000000b3 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900000079f8
R8 =0000000000000000 R9 =ffffffff81ae149e R10=0000000000000003 R11=ffffffff81703490
R12=0000000010000f19 R13=dffffc0000000000 R14=00000000000000b3 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f263d0b66c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e41aff8 CR3=00000000395f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2f96c12e53
XMM06=0000000000000000 00007f2f96c12e4d XMM07=0000000000000000 00007f2f96c12e61
XMM08=0000000000000000 00007f2f96c12ee7 XMM09=0000000000000000 00007f2f96c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000003 RCX=00000000b085605c RDX=00000000efc216b3
RSI=00000000208c37ce RDI=ffff888106a91cc0 RBP=0000000000000000 RSP=ffffc9000313f3d8
R8 =0000000000000000 R9 =ffffffff822ae519 R10=dffffc0000000000 R11=fffff940008e6437
R12=000000005f732093 R13=ffff888106a927b0 R14=ffff888106a92828 R15=82b5e6aab085605c
RIP=ffffffff819d7953 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd76baf7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fd76af976c3 00007fd76af976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000555571f00209 0000555571effe50
XMM06=0000000000000000 0000000000000000 XMM07=d00300100007c003 02100007b0034010
XMM08=0006900300000000 0001000800000007 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
