last executing test programs:

2m21.108025945s ago: executing program 0 (id=302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f)

2m21.075639159s ago: executing program 0 (id=303):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

2m20.986177052s ago: executing program 0 (id=307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x25, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x50)
write$cgroup_int(r1, &(0x7f0000000100), 0x1001)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="660a00000000000161114c00000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r1}, 0x94)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0xc060}, 0x0)

2m20.894283424s ago: executing program 0 (id=308):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b40)="2ecf97c63ed21d14fe3dd082d759", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2m20.797805072s ago: executing program 0 (id=311):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m20.636649564s ago: executing program 0 (id=314):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

2m5.03906217s ago: executing program 32 (id=314):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

2m4.396454769s ago: executing program 2 (id=544):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x32, &(0x7f0000000100), 0x120)

2m4.334734308s ago: executing program 2 (id=545):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r1, r0, 0x0, r0}, 0x10)

2m4.334328024s ago: executing program 2 (id=547):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

2m4.252681737s ago: executing program 2 (id=548):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x5, 0x2000000, 0x4, 0x5}, 0x48)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40)

2m4.252294678s ago: executing program 2 (id=550):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x4004743d, 0x20000000)

2m4.157220108s ago: executing program 2 (id=551):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)

1m48.404199328s ago: executing program 33 (id=551):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)

58.131497625s ago: executing program 4 (id=1334):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

58.070752814s ago: executing program 4 (id=1335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)

58.070149751s ago: executing program 4 (id=1336):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

57.959453171s ago: executing program 4 (id=1338):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

57.71150151s ago: executing program 4 (id=1340):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480060005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0)

56.642909344s ago: executing program 4 (id=1346):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0)

56.448608022s ago: executing program 34 (id=1346):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0)

28.459525951s ago: executing program 3 (id=1776):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x1c}, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000540)={'full', 0x20, 0x2, 0x20, 0x6}, 0x2f)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xffc0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000140)=r0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0xfe, 0x0, 0x0, 0x0, 0x67e25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x4, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1bffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

28.047687853s ago: executing program 1 (id=1784):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x1}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28)

27.968081848s ago: executing program 1 (id=1785):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0xc8, 0x0, 0x7, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x15)

27.85884003s ago: executing program 1 (id=1787):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000c5ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000a95e9af8be00bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x101c0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

27.659452049s ago: executing program 1 (id=1792):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="2e000000100081ffffff7fec5900000004000000000000005e140602000000000e000300f7ffffff01800000121f", 0x2e}], 0x1}, 0x0)

27.659232744s ago: executing program 1 (id=1793):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000)=r3, 0x4)

27.588924901s ago: executing program 3 (id=1795):
socket$kcm(0x2b, 0x1, 0xfe)

27.567990992s ago: executing program 1 (id=1796):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0", 0x23}], 0x1}, 0x4008041)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

27.40336324s ago: executing program 3 (id=1797):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2})
ioctl$TUNGETVNETHDRSZ(r0, 0x400454cc, 0xffffffffffffffff)

27.279011105s ago: executing program 3 (id=1798):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x35}, 0x28)

27.278809836s ago: executing program 3 (id=1799):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2f, 0x0, 0xc)

27.1897995s ago: executing program 3 (id=1801):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8410, 0x0, 0x0, 0x8, 0x3fb, 0xb, 0x48f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100, 0x2, 0xfffffffe, 0x8, 0x5, 0xfffffffe, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)=ANY=[], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20005)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffeef, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)

24.247873759s ago: executing program 5 (id=1811):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x5, <r0=>0x0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xee1aa83b25ee3ed3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x3400, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, r1}, 0x94)

22.600329652s ago: executing program 5 (id=1812):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40010160)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff7)
socket$kcm(0x10, 0x3, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8b41609e09d2f4655c2f2", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x2b, 0x1, 0x0)

21.811138222s ago: executing program 5 (id=1813):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)

15.465447144s ago: executing program 5 (id=1814):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008f000000760000000000000027007fffffff00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffeee}, 0x23)

15.462500488s ago: executing program 5 (id=1815):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000200000f03e839fc6900000000000000020000000300000003fc39e803e839fc99b78d000000000000000f01000000e1002e"], 0x0, 0x4f}, 0x20)

15.398461302s ago: executing program 5 (id=1816):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)

12.001004867s ago: executing program 35 (id=1801):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8410, 0x0, 0x0, 0x8, 0x3fb, 0xb, 0x48f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100, 0x2, 0xfffffffe, 0x8, 0x5, 0xfffffffe, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)=ANY=[], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20005)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffeef, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)

11.950848499s ago: executing program 36 (id=1796):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0", 0x23}], 0x1}, 0x4008041)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

0s ago: executing program 37 (id=1816):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49542' (ED25519) to the list of known hosts.
syzkaller login: [   56.480026][ T5832] cgroup: Unknown subsys name 'net'
[   56.626702][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.633437][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.073938][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.376476][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.380179][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.383543][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.384183][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.389946][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.390589][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.397034][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.397725][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.403461][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.403840][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.459503][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.464135][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.468114][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.471782][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.475774][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.836196][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   64.896406][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.935444][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   65.027487][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.031075][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.034584][ T5857] bridge_slave_0: entered allmulticast mode
[   65.038730][ T5857] bridge_slave_0: entered promiscuous mode
[   65.069702][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.074177][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.076832][ T5857] bridge_slave_1: entered allmulticast mode
[   65.080423][ T5857] bridge_slave_1: entered promiscuous mode
[   65.139920][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.142991][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.145571][ T5847] bridge_slave_0: entered allmulticast mode
[   65.148591][ T5847] bridge_slave_0: entered promiscuous mode
[   65.152916][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.155577][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.158035][ T5847] bridge_slave_1: entered allmulticast mode
[   65.161063][ T5847] bridge_slave_1: entered promiscuous mode
[   65.167558][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.171231][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.174035][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.176781][ T5846] bridge_slave_0: entered allmulticast mode
[   65.180037][ T5846] bridge_slave_0: entered promiscuous mode
[   65.194213][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.208290][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.210977][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.215886][ T5846] bridge_slave_1: entered allmulticast mode
[   65.219647][ T5846] bridge_slave_1: entered promiscuous mode
[   65.248839][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.270049][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.289392][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.294813][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.299680][ T5857] team0: Port device team_slave_0 added
[   65.318018][ T5857] team0: Port device team_slave_1 added
[   65.366605][ T5847] team0: Port device team_slave_0 added
[   65.381252][ T5847] team0: Port device team_slave_1 added
[   65.394827][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.397004][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.405122][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.411001][ T5846] team0: Port device team_slave_0 added
[   65.418216][ T5846] team0: Port device team_slave_1 added
[   65.447002][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.449733][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.459924][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.491645][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.495072][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.504752][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.525642][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.528144][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.537791][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.544038][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.546595][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.556137][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.560782][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.563514][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.572932][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.582836][ T5857] hsr_slave_0: entered promiscuous mode
[   65.586298][ T5857] hsr_slave_1: entered promiscuous mode
[   65.687953][ T5846] hsr_slave_0: entered promiscuous mode
[   65.691141][ T5846] hsr_slave_1: entered promiscuous mode
[   65.694219][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   65.696217][ T5846] Cannot create hsr debugfs directory
[   65.720353][ T5847] hsr_slave_0: entered promiscuous mode
[   65.723645][ T5847] hsr_slave_1: entered promiscuous mode
[   65.726572][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   65.728883][ T5847] Cannot create hsr debugfs directory
[   65.999084][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.010005][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.016986][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.035019][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.078592][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.089203][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.096857][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.115128][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.174284][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.178951][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.193884][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.199659][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.278970][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.287900][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.307602][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.319968][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.322871][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.340321][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.342986][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.355061][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   66.389766][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.392169][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.395811][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.398100][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.463146][   T54] Bluetooth: hci0: command tx timeout
[   66.465135][   T54] Bluetooth: hci1: command tx timeout
[   66.480683][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.500786][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   66.508811][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.511496][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.520688][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.523705][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.542487][ T5849] Bluetooth: hci2: command tx timeout
[   66.587223][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.636142][ T5847] veth0_vlan: entered promiscuous mode
[   66.649373][ T5847] veth1_vlan: entered promiscuous mode
[   66.655845][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.706521][ T5847] veth0_macvtap: entered promiscuous mode
[   66.714270][ T5847] veth1_macvtap: entered promiscuous mode
[   66.729547][ T5857] veth0_vlan: entered promiscuous mode
[   66.738562][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.747146][ T5857] veth1_vlan: entered promiscuous mode
[   66.751718][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.756655][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.771799][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.775594][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.778945][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.787155][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.820820][ T5857] veth0_macvtap: entered promiscuous mode
[   66.832924][ T5857] veth1_macvtap: entered promiscuous mode
[   66.879821][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.880507][ T5846] veth0_vlan: entered promiscuous mode
[   66.885026][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.907209][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.908788][ T5846] veth1_vlan: entered promiscuous mode
[   66.909880][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.916763][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.930276][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.944266][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.947251][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.950152][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.967768][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.973301][ T5846] veth0_macvtap: entered promiscuous mode
[   66.976317][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.989805][ T5846] veth1_macvtap: entered promiscuous mode
[   67.030353][ T5912] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.064407][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.069577][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.074532][ T5914] openvswitch: netlink: IP tunnel dst address not specified
[   67.099187][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.101516][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.116955][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.152982][ T5716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.159872][ T5716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.167925][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.174089][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.177747][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.265833][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.268861][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.327730][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.330802][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.427463][ T5927] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   67.430255][ T5927] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   67.465459][ T5931] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.683205][ T5937] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12'.
[   67.785756][ T5943] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   67.789429][ T5943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.380012][ T5951] Zero length message leads to an empty skb
[   68.406549][ T5951] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18'.
[   68.544077][ T5849] Bluetooth: hci1: command tx timeout
[   68.545815][ T5849] Bluetooth: hci0: command tx timeout
[   68.652536][   T54] Bluetooth: hci2: command tx timeout
[   68.743904][    C1] hrtimer: interrupt took 31432 ns
[   68.762604][ T5956] netlink: 'syz.2.18': attribute type 10 has an invalid length.
[   68.773940][ T5956] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   68.899719][ T5960] netlink: 'syz.1.20': attribute type 12 has an invalid length.
[   68.905075][ T5960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.054894][ T5962] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.120162][ T5971] syzkaller0: entered promiscuous mode
[   69.123703][ T5971] syzkaller0: entered allmulticast mode
[   69.128123][ T5973] netlink: 'syz.2.27': attribute type 3 has an invalid length.
[   69.130485][ T5973] netlink: 152 bytes leftover after parsing attributes in process `syz.2.27'.
[   69.963277][   T54] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[   69.965635][   T54] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[   70.448635][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'.
[   70.478778][ T5999] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   70.670352][   T54] Bluetooth: hci0: command tx timeout
[   70.670740][ T5849] Bluetooth: hci1: command tx timeout
[   70.715036][ T5849] Bluetooth: hci2: command tx timeout
[   71.104750][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.111938][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.565581][ T6042] netlink: 'syz.2.54': attribute type 29 has an invalid length.
[   71.570081][ T6042] netlink: 'syz.2.54': attribute type 29 has an invalid length.
[   71.575309][ T6042] netlink: 'syz.2.54': attribute type 29 has an invalid length.
[   72.107029][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'.
[   72.358693][ T6073] delete_channel: no stack
[   72.441716][ T6079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.703612][ T5849] Bluetooth: hci1: command tx timeout
[   72.705820][ T5849] Bluetooth: hci0: command tx timeout
[   72.799277][ T5849] Bluetooth: hci2: command tx timeout
[   74.541990][   T27] wlan1: Trigger new scan to find an IBSS to join
[   76.291158][ T6145] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.314649][ T6145] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   76.678469][ T6142] syz.1.96 (6142) used greatest stack depth: 19560 bytes left
[   77.251677][ T5849] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10
[   77.411645][ T6184] netlink: 'syz.2.118': attribute type 10 has an invalid length.
[   77.414123][ T6184] netlink: 'syz.2.118': attribute type 19 has an invalid length.
[   77.416481][ T6184] netlink: 156 bytes leftover after parsing attributes in process `syz.2.118'.
[   77.561497][ T6191] netlink: 'syz.1.121': attribute type 3 has an invalid length.
[   77.570503][ T6191] netlink: 'syz.1.121': attribute type 2 has an invalid length.
[   77.584055][ T6191] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.121'.
[   78.545890][   T40] wlan1: Trigger new scan to find an IBSS to join
[   78.649973][   T35] wlan1: Creating new IBSS network, BSSID 8a:55:c0:b8:73:e3
[   79.261979][ T5849] Bluetooth: hci0: command tx timeout
[   79.371037][ T6249] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   79.890301][ T6262] syz.0.154 uses obsolete (PF_INET,SOCK_PACKET)
[   80.191464][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[   80.987004][ T6309] syzkaller0: entered promiscuous mode
[   80.988742][ T6309] syzkaller0: entered allmulticast mode
[   81.347488][ T1896] cfg80211: failed to load regulatory.db
[   81.478716][ T6343] netlink: ct family unspecified
[   81.498088][ T6343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.520252][ T5849] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[   81.652566][ T6343] netlink: 'syz.0.190': attribute type 12 has an invalid length.
[   81.662501][ T6343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.190'.
[   81.795772][ T6358] : entered promiscuous mode
[   82.035936][ T6379] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.207'.
[   82.928337][ T6427] netlink: 'syz.1.228': attribute type 1 has an invalid length.
[   82.930167][ T6423] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   82.935919][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[   82.971464][ T6423] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   82.989730][ T6423] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   83.000465][ T6423] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   83.216493][ T6436] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.232'.
[   83.283083][ T6440] netlink: 'syz.2.234': attribute type 22 has an invalid length.
[   83.285518][ T6440] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.234'.
[   83.702442][ T6452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.695061][   T33] audit: type=1107 audit(1755361640.175:2): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   84.817443][ T6516] netlink: 17 bytes leftover after parsing attributes in process `syz.2.270'.
[   84.820888][ T6516] netlink: zone id is out of range
[   84.823910][ T6516] netlink: zone id is out of range
[   84.829119][ T6516] netlink: zone id is out of range
[   84.839430][ T6516] netlink: zone id is out of range
[   84.841479][ T6516] netlink: zone id is out of range
[   84.844552][ T6516] netlink: zone id is out of range
[   84.846402][ T6516] netlink: zone id is out of range
[   84.919147][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'.
[   84.929751][ T6522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.273'.
[   85.258250][ T6531] netlink: 'syz.0.275': attribute type 10 has an invalid length.
[   85.261468][ T6531] netlink: 55 bytes leftover after parsing attributes in process `syz.0.275'.
[   86.133590][ T6545] netlink: 'syz.0.282': attribute type 22 has an invalid length.
[   86.136025][ T6545] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   86.138426][ T6545] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.282'.
[   86.154022][ T6546] bridge0: port 3(veth1_to_team) entered blocking state
[   86.156899][ T6546] bridge0: port 3(veth1_to_team) entered disabled state
[   86.160669][ T6546] veth1_to_team: entered allmulticast mode
[   86.172771][ T6546] veth1_to_team: entered promiscuous mode
[   86.176495][ T6546] bridge0: port 3(veth1_to_team) entered blocking state
[   86.180453][ T6546] bridge0: port 3(veth1_to_team) entered forwarding state
[   86.217820][ T6549] netlink: 'syz.0.284': attribute type 64 has an invalid length.
[   86.260998][ T6550] netlink: 92 bytes leftover after parsing attributes in process `syz.1.283'.
[   86.354604][ T6557] netlink: 531 bytes leftover after parsing attributes in process `syz.0.287'.
[   86.498398][ T6567] net_ratelimit: 78 callbacks suppressed
[   86.498414][ T6567] netlink: zone id is out of range
[   86.512060][ T6567] netlink: zone id is out of range
[   86.513627][ T6567] netlink: zone id is out of range
[   86.515213][ T6567] netlink: zone id is out of range
[   86.524302][ T6567] netlink: zone id is out of range
[   86.525982][ T6567] netlink: zone id is out of range
[   86.527638][ T6567] netlink: zone id is out of range
[   86.529335][ T6567] netlink: zone id is out of range
[   86.530939][ T6567] netlink: zone id is out of range
[   86.543016][ T6567] netlink: zone id is out of range
[   88.070509][ T6670] __nla_validate_parse: 4 callbacks suppressed
[   88.070520][ T6670] netlink: 152 bytes leftover after parsing attributes in process `syz.1.341'.
[   88.082421][ T6670] netlink: 6 bytes leftover after parsing attributes in process `syz.1.341'.
[   88.129182][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'.
[   88.200416][ T6683] validate_nla: 7 callbacks suppressed
[   88.200440][ T6683] netlink: 'syz.2.347': attribute type 3 has an invalid length.
[   88.208133][ T6683] netlink: 156 bytes leftover after parsing attributes in process `syz.2.347'.
[   88.211453][ T6683] netlink: 'syz.2.347': attribute type 3 has an invalid length.
[   88.215164][ T6683] netlink: 156 bytes leftover after parsing attributes in process `syz.2.347'.
[   89.446033][ T6705] netlink: 'syz.1.358': attribute type 25 has an invalid length.
[   89.539803][ T6711] netlink: 'syz.2.361': attribute type 21 has an invalid length.
[   89.717047][ T6721] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[   89.748482][ T6723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.366'.
[   90.787971][ T6742] team0: Port device team_slave_0 removed
[   90.927831][ T6746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.377'.
[   91.750767][ T6748] can: request_module (can-proto-0) failed.
[   92.154503][ T6774] veth1_to_team: left allmulticast mode
[   92.156915][ T6774] veth1_to_team: left promiscuous mode
[   92.160426][ T6774] bridge0: port 3(veth1_to_team) entered disabled state
[   92.166883][ T6774] bridge_slave_1: left allmulticast mode
[   92.169406][ T6774] bridge_slave_1: left promiscuous mode
[   92.173009][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.179672][ T6774] bridge_slave_0: left allmulticast mode
[   92.183365][ T6774] bridge_slave_0: left promiscuous mode
[   92.185801][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.367786][ T6776] netlink: 'syz.2.388': attribute type 10 has an invalid length.
[   92.478881][ T6776] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   92.491085][ T6776] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   92.497121][ T6776] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   92.573945][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'.
[   92.961144][ T6794] netlink: 'syz.2.397': attribute type 4 has an invalid length.
[   92.963900][ T6794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.397'.
[   92.977982][ T6794] net_ratelimit: 80 callbacks suppressed
[   92.977993][ T6794] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   93.040819][ T5849] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   93.178563][ T6805] netlink: 'syz.1.401': attribute type 12 has an invalid length.
[   93.181535][ T6805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.401'.
[   93.426782][ T6817] netlink: 'syz.2.408': attribute type 28 has an invalid length.
[   94.055065][ T6830] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.414'.
[   94.332311][ T6846] netlink: 'syz.1.421': attribute type 4 has an invalid length.
[   94.335574][ T6846] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.421'.
[   94.414800][ T6852] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.424'.
[   94.701775][ T6870] netlink: 809 bytes leftover after parsing attributes in process `syz.2.432'.
[   94.704939][ T6870] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.432'.
[   94.707982][ T6870] netlink: 809 bytes leftover after parsing attributes in process `syz.2.432'.
[   95.102657][   T54] Bluetooth: hci2: command tx timeout
[   95.774316][ T6893] netlink: 64 bytes leftover after parsing attributes in process `syz.1.442'.
[   96.368102][ T6925] netlink: 'syz.1.453': attribute type 10 has an invalid length.
[   96.655260][ T6931] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.458'.
[   96.741987][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[   96.820022][ T6937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.200201][ T6990] netlink: 'syz.2.486': attribute type 10 has an invalid length.
[   99.206329][ T6990] __nla_validate_parse: 3 callbacks suppressed
[   99.206344][ T6990] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.486'.
[   99.291711][ T6999] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   99.297232][ T6999] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   99.535345][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.496'.
[   99.543909][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.496'.
[   99.547565][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.496'.
[   99.556731][ T7016] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   99.671254][ T7028] netlink: 'syz.1.504': attribute type 2 has an invalid length.
[   99.677731][ T7028] netlink: 120 bytes leftover after parsing attributes in process `syz.1.504'.
[   99.761099][ T7035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.939342][ T7043] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.511'.
[  101.149414][ T7066] infiniband syz!: set down
[  101.152750][ T7066] infiniband syz!: added team_slave_0
[  101.196159][ T7066] RDS/IB: syz!: added
[  101.198453][ T7066] smc: adding ib device syz! with port count 1
[  101.201205][ T7066] smc:    ib device syz! port 1 has pnetid 
[  101.233307][ T7077] netlink: 'syz.2.524': attribute type 13 has an invalid length.
[  101.236620][ T7077] netlink: 'syz.2.524': attribute type 17 has an invalid length.
[  101.376121][ T7077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.694687][ T7085] netlink: 'syz.2.527': attribute type 27 has an invalid length.
[  101.776331][ T7090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.529'.
[  101.819442][ T7093] netlink: 'syz.1.530': attribute type 22 has an invalid length.
[  101.824438][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'.
[  101.985316][ T7106] IPv6: NLM_F_CREATE should be specified when creating new route
[  101.987886][ T7106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.990296][ T7106] IPv6: NLM_F_CREATE should be set when creating new route
[  103.113084][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.117760][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.121074][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.127467][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.130891][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.436726][ T7128] netlink: 'syz.2.543': attribute type 19 has an invalid length.
[  103.474636][ T7119] chnl_net:caif_netlink_parms(): no params data found
[  103.585409][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.591264][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.598500][ T7119] bridge_slave_0: entered allmulticast mode
[  103.608193][ T7119] bridge_slave_0: entered promiscuous mode
[  103.613371][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.616409][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.620857][ T7119] bridge_slave_1: entered allmulticast mode
[  103.625038][ T7119] bridge_slave_1: entered promiscuous mode
[  103.664738][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.671133][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.704225][ T7119] team0: Port device team_slave_0 added
[  103.709102][ T7119] team0: Port device team_slave_1 added
[  103.729859][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.732151][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.740010][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.755217][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.757996][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.768753][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.905098][ T7119] hsr_slave_0: entered promiscuous mode
[  103.908159][ T7119] hsr_slave_1: entered promiscuous mode
[  103.910883][ T7119] debugfs: 'hsr0' already exists in 'hsr'
[  103.921353][ T7119] Cannot create hsr debugfs directory
[  104.265450][ T7158] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.555'.
[  104.268475][ T7158] nbd: must specify a size in bytes for the device
[  104.400686][ T7119] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.416204][ T7119] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.433767][ T7119] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.445450][ T7119] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.596905][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.608509][ T7119] 8021q: adding VLAN 0 to HW filter on device team0
[  104.615348][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.617907][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.631239][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.633961][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.636869][ T7172] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.559'.
[  104.758842][ T7176] syzkaller0: entered promiscuous mode
[  104.761183][ T7176] syzkaller0: entered allmulticast mode
[  105.182979][ T5849] Bluetooth: hci3: command tx timeout
[  105.671099][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.708039][ T7119] veth0_vlan: entered promiscuous mode
[  105.715985][ T7119] veth1_vlan: entered promiscuous mode
[  105.745231][ T7119] veth0_macvtap: entered promiscuous mode
[  105.751298][ T7119] veth1_macvtap: entered promiscuous mode
[  105.761576][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.770352][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.781006][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.798695][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.816882][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.820566][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.860274][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.866651][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.888845][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.891728][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.130895][ T7199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.569'.
[  106.199324][ T7205] netlink: 56 bytes leftover after parsing attributes in process `syz.3.572'.
[  106.310835][   T33] audit: type=1107 audit(1755361661.785:3): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  106.310835][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  106.310835][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  106.310835][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  106.331153][ T7213] netlink: 'syz.1.576': attribute type 21 has an invalid length.
[  106.372966][ T7213] netlink: 144 bytes leftover after parsing attributes in process `syz.1.576'.
[  106.983489][ T7245] netlink: 'syz.1.592': attribute type 3 has an invalid length.
[  106.986403][ T7245] netlink: 'syz.1.592': attribute type 1 has an invalid length.
[  106.989518][ T7245] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.592'.
[  107.286685][ T5849] Bluetooth: hci3: command tx timeout
[  108.718282][ T5849] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  109.076562][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'.
[  109.081734][ T7325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.627'.
[  109.343801][ T5849] Bluetooth: hci3: command tx timeout
[  109.790640][ T7346] netlink: 196 bytes leftover after parsing attributes in process `syz.3.635'.
[  110.119334][ T7354] netlink: 'syz.1.639': attribute type 13 has an invalid length.
[  110.122205][ T7354] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.639'.
[  110.942067][   T54] Bluetooth: hci2: Opcode 0x206a failed: -110
[  111.022176][   T54] Bluetooth: hci2: command 0x206a tx timeout
[  111.422170][   T54] Bluetooth: hci3: command tx timeout
[  112.521244][ T7381] netlink: 'syz.3.651': attribute type 21 has an invalid length.
[  112.751319][ T7391] netlink: 'syz.1.656': attribute type 29 has an invalid length.
[  112.767983][ T7391] netlink: 'syz.1.656': attribute type 10 has an invalid length.
[  112.799199][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.845921][ T7391] team0: Port device bond0 added
[  112.971797][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.659'.
[  112.976916][ T7398] openvswitch: netlink: Flow actions attr not present in new flow.
[  113.046811][ T7408] netlink: 'syz.1.664': attribute type 39 has an invalid length.
[  113.920033][ T7418] netlink: 'syz.3.668': attribute type 10 has an invalid length.
[  113.925144][ T7418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.668'.
[  114.345150][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'.
[  114.409704][ T7449] netlink: 48 bytes leftover after parsing attributes in process `syz.1.683'.
[  114.479646][ T7457] netlink: 14 bytes leftover after parsing attributes in process `syz.3.686'.
[  114.485351][ T7457] hsr_slave_0: left promiscuous mode
[  114.489856][ T7457] hsr_slave_1: left promiscuous mode
[  114.862932][ T5849] Bluetooth: hci2: command 0x206a tx timeout
[  115.053851][ T7463] netlink: 'syz.1.689': attribute type 10 has an invalid length.
[  115.310181][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'.
[  115.645309][ T7482] netlink: 'syz.3.698': attribute type 10 has an invalid length.
[  115.647913][ T7482] netlink: 156 bytes leftover after parsing attributes in process `syz.3.698'.
[  115.907837][ T7500] netlink: 'syz.3.706': attribute type 4 has an invalid length.
[  115.911142][ T7500] netlink: 'syz.3.706': attribute type 2 has an invalid length.
[  115.916169][ T7500] netlink: 199288 bytes leftover after parsing attributes in process `syz.3.706'.
[  116.299158][ T7517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.713'.
[  116.798013][   T54] Bluetooth: hci3: Malformed LE Event: 0x0d
[  117.640226][ T7546] netlink: 14 bytes leftover after parsing attributes in process `syz.3.727'.
[  117.646347][ T7548] Illegal XDP return value 78915625 on prog  (id 255) dev N/A, expect packet loss!
[  118.627811][ T7559] netlink: 'syz.3.731': attribute type 1 has an invalid length.
[  118.631084][ T7559] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.731'.
[  119.727794][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.731990][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.736746][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.740611][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.749062][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.113182][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1580128500 wd_nsec: 1580128458
[  121.383480][ T7565] netlink: 'syz.1.733': attribute type 8 has an invalid length.
[  121.386881][ T7565] netlink: 'syz.1.733': attribute type 6 has an invalid length.
[  121.390097][ T7565] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.733'.
[  121.825973][ T5849] Bluetooth: hci4: command tx timeout
[  121.852488][ T7561] chnl_net:caif_netlink_parms(): no params data found
[  122.208660][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.212620][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.225546][ T7561] bridge_slave_0: entered allmulticast mode
[  122.230547][ T7561] bridge_slave_0: entered promiscuous mode
[  122.243798][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.246102][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.251950][ T7561] bridge_slave_1: entered allmulticast mode
[  122.255722][ T7561] bridge_slave_1: entered promiscuous mode
[  122.298024][ T7561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.304746][ T7561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.366287][ T7561] team0: Port device team_slave_0 added
[  122.371761][ T7561] team0: Port device team_slave_1 added
[  122.403681][ T7561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.411372][ T7561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.429117][ T7561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.434392][ T7561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.436670][ T7561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.446346][ T7561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.516561][ T7561] hsr_slave_0: entered promiscuous mode
[  122.519949][ T7561] hsr_slave_1: entered promiscuous mode
[  122.530904][ T7561] debugfs: 'hsr0' already exists in 'hsr'
[  122.532999][ T7561] Cannot create hsr debugfs directory
[  122.802305][ T7617] netlink: 172 bytes leftover after parsing attributes in process `syz.1.754'.
[  122.816398][ T7561] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  122.837329][ T7561] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  122.854441][ T7561] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  122.867062][ T7561] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  122.929022][ T7627] netlink: 'syz.1.756': attribute type 21 has an invalid length.
[  122.936967][ T7627] netlink: 156 bytes leftover after parsing attributes in process `syz.1.756'.
[  123.007269][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.030573][ T7561] 8021q: adding VLAN 0 to HW filter on device team0
[  123.063632][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.066503][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.086267][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.088799][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.311600][ T7561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.473130][ T5849] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7
[  123.582916][ T7561] veth0_vlan: entered promiscuous mode
[  123.597160][ T7561] veth1_vlan: entered promiscuous mode
[  123.621594][ T7561] veth0_macvtap: entered promiscuous mode
[  123.628141][ T7561] veth1_macvtap: entered promiscuous mode
[  123.648761][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.665731][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.679365][ T5716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.700253][ T5716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.709409][ T5716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.728633][ T5716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.812677][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.815131][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.886280][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.890630][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.902494][ T5849] Bluetooth: hci4: command tx timeout
[  124.633918][ T7689] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.777'.
[  124.640864][ T7684] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.777'.
[  124.652742][ T7689] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.777'.
[  125.721016][ T7710] netlink: 'syz.4.788': attribute type 27 has an invalid length.
[  125.982122][ T5849] Bluetooth: hci4: command tx timeout
[  126.309553][ T7746] netlink: 'syz.3.800': attribute type 10 has an invalid length.
[  126.317277][ T7746] batman_adv: batadv0: Adding interface: netdevsim0
[  126.319395][ T7746] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.329099][ T7746] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  126.377449][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.803'.
[  126.904011][ T7761] netlink: 'syz.3.809': attribute type 28 has an invalid length.
[  126.907304][ T7761] netlink: 'syz.3.809': attribute type 3 has an invalid length.
[  126.910591][ T7761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.809'.
[  127.816890][ T7769] openvswitch: netlink: Flow actions attr not present in new flow.
[  127.825076][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'.
[  128.016867][ T7784] netlink: 'syz.4.820': attribute type 13 has an invalid length.
[  128.064193][ T5849] Bluetooth: hci4: command tx timeout
[  128.101498][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.104597][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.159895][ T7791] netlink: 'syz.3.823': attribute type 1 has an invalid length.
[  128.186680][ T7784] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.207462][ T7784] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.342479][ T7796] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.824'.
[  128.508297][ T5716] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.511254][ T5716] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.514665][ T5716] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.517461][ T5716] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.557854][ T7784] syz.4.820 (7784) used greatest stack depth: 18792 bytes left
[  128.652759][ T7802] bpf: Bad value for 'gid'
[  129.173464][ T7830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.839'.
[  129.554911][ T7840] netlink: 'syz.1.844': attribute type 10 has an invalid length.
[  129.648476][ T7840] bond0: (slave ): Enslaving as an active interface with an up link
[  129.698051][ T7846] netlink: 152 bytes leftover after parsing attributes in process `syz.4.846'.
[  130.238710][ T7858] netlink: 'syz.1.851': attribute type 10 has an invalid length.
[  130.252382][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.851'.
[  132.320539][ T7858] batman_adv: batadv0: Adding interface: hsr_slave_1
[  132.323609][ T7858] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.333904][ T7858] batman_adv: batadv0: Interface activated: hsr_slave_1
[  132.544130][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.546190][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.675724][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  133.122644][ T7906] netlink: 'syz.1.871': attribute type 10 has an invalid length.
[  133.126097][ T7906] netlink: 55 bytes leftover after parsing attributes in process `syz.1.871'.
[  134.273491][ T7978] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.876'.
[  134.371180][ T7978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.395792][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'.
[  134.401512][ T7989] netlink: 'syz.1.882': attribute type 2 has an invalid length.
[  134.406305][ T7989] netlink: 'syz.1.882': attribute type 1 has an invalid length.
[  134.409337][ T7989] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.882'.
[  134.413031][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'.
[  134.416881][ T7989] nbd: couldn't find device at index 16
[  134.418928][ T7978] netlink: 'syz.4.876': attribute type 1 has an invalid length.
[  134.588180][ T5849] Bluetooth: hci4: Malformed HCI Event
[  134.677598][ T8000] netlink: 'syz.3.887': attribute type 11 has an invalid length.
[  134.680849][ T8000] netlink: 48 bytes leftover after parsing attributes in process `syz.3.887'.
[  134.836718][ T8012] netlink: 'syz.1.894': attribute type 10 has an invalid length.
[  134.842371][ T8012] bridge0: port 3(macsec0) entered blocking state
[  134.845378][ T8012] bridge0: port 3(macsec0) entered disabled state
[  134.848157][ T8012] macsec0: entered allmulticast mode
[  134.850852][ T8012] veth1_macvtap: entered allmulticast mode
[  134.857127][ T8012] macsec0: entered promiscuous mode
[  134.859732][ T8012] bridge0: port 3(macsec0) entered blocking state
[  134.862499][ T8012] bridge0: port 3(macsec0) entered forwarding state
[  134.903338][ T8018] netlink: 176 bytes leftover after parsing attributes in process `syz.1.896'.
[  135.011305][ T8026] bpf: Bad value for 'uid'
[  135.036366][ T8029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.901'.
[  135.340339][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.431425][ T8057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.912'.
[  135.488132][ T8063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.727123][ T8081] veth1_macvtap: left promiscuous mode
[  135.729493][ T8081] macsec0: entered promiscuous mode
[  137.095324][ T8132] netlink: 'syz.1.948': attribute type 2 has an invalid length.
[  137.161433][ T8138] netlink: 'syz.3.951': attribute type 41 has an invalid length.
[  137.232930][ T8140] C: renamed from team_slave_0
[  137.282101][ T5849] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12
[  138.305447][ T8160] syzkaller0: entered promiscuous mode
[  138.307814][ T8160] syzkaller0: entered allmulticast mode
[  138.564799][ T8169] __nla_validate_parse: 5 callbacks suppressed
[  138.564817][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'.
[  139.351964][ T5849] Bluetooth: hci2: command 0x206a tx timeout
[  139.540675][ T8173] pim6reg1: tun_chr_ioctl cmd 1074025680
[  139.691985][ T8183] netlink: 'syz.3.969': attribute type 15 has an invalid length.
[  139.698760][ T8183] netlink: 11318 bytes leftover after parsing attributes in process `syz.3.969'.
[  139.867332][ T8193] netlink: 'syz.3.974': attribute type 2 has an invalid length.
[  139.870626][ T8193] netlink: 164 bytes leftover after parsing attributes in process `syz.3.974'.
[  139.877453][ T8193] netlink: 'syz.3.974': attribute type 2 has an invalid length.
[  139.879985][ T8193] netlink: 164 bytes leftover after parsing attributes in process `syz.3.974'.
[  139.937731][ T8197] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.977'.
[  139.943269][ T8197] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.977'.
[  140.019861][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'.
[  140.138613][ T8214] netlink: 'syz.4.984': attribute type 10 has an invalid length.
[  140.201588][ T8217] netlink: 198328 bytes leftover after parsing attributes in process `syz.3.985'.
[  140.208027][ T8217] netlink: 'syz.3.985': attribute type 1 has an invalid length.
[  140.211165][ T8217] netlink: 'syz.3.985': attribute type 2 has an invalid length.
[  140.638648][ T8239] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.996'.
[  140.652619][ T8239] netlink: 'syz.4.996': attribute type 3 has an invalid length.
[  142.936496][ T8273] syzkaller0: entered promiscuous mode
[  142.938272][ T8273] syzkaller0: entered allmulticast mode
[  143.108539][ T8275] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1012'.
[  143.539552][ T8279] netlink: 'syz.1.1014': attribute type 2 has an invalid length.
[  146.779558][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'.
[  146.864620][ T8296] netlink: 'syz.1.1021': attribute type 39 has an invalid length.
[  147.229291][ T8320] netlink: 'syz.3.1031': attribute type 13 has an invalid length.
[  147.239833][ T8317] sit0: entered promiscuous mode
[  148.790111][ T8347] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1043'.
[  149.698821][ T8359] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1048'.
[  150.539419][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'.
[  150.815331][ T8384] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.819152][ T8384] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.815199][ T8459] syzkaller0: entered promiscuous mode
[  151.817468][ T8459] syzkaller0: entered allmulticast mode
[  151.999088][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'.
[  152.036552][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'.
[  152.598313][ T8508] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  152.599081][ T8509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.678193][ T5849] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[  153.681125][ T5849] Bluetooth: hci2: unexpected event for opcode 0x1004
[  153.728154][ T8543] delete_channel: no stack
[  153.730169][ T8543] delete_channel: no stack
[  154.599432][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1137'.
[  154.616650][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1137'.
[  154.791083][ T8566] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1139'.
[  154.945131][ T8578] netlink: 'syz.1.1144': attribute type 8 has an invalid length.
[  154.947711][ T8578] netlink: 'syz.1.1144': attribute type 3 has an invalid length.
[  154.950393][ T8578] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1144'.
[  154.986341][ T8582] netlink: 4172 bytes leftover after parsing attributes in process `syz.1.1146'.
[  155.311999][ T8603] netlink: 'syz.3.1155': attribute type 10 has an invalid length.
[  155.631501][ T8603] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  155.678801][ T8607] ksmbd: Unknown IPC event: 3, ignore.
[  155.712910][ T8605] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[  155.723311][ T8605] netlink: 'syz.1.1157': attribute type 3 has an invalid length.
[  155.727987][ T8605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'.
[  156.154228][ T8633] netlink: 'syz.1.1168': attribute type 39 has an invalid length.
[  156.382797][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'.
[  156.431987][ T8645] netlink: 'syz.1.1174': attribute type 11 has an invalid length.
[  156.434388][ T8645] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.1174'.
[  156.458460][ T8657] netlink: 'syz.3.1179': attribute type 14 has an invalid length.
[  156.502229][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.872590][ T8704] netlink: zone id is out of range
[  156.874251][ T8704] netlink: zone id is out of range
[  156.875903][ T8704] netlink: zone id is out of range
[  156.877633][ T8704] netlink: zone id is out of range
[  156.879372][ T8704] netlink: zone id is out of range
[  156.881439][ T8704] netlink: zone id is out of range
[  156.883893][ T8704] netlink: zone id is out of range
[  156.885947][ T8704] netlink: zone id is out of range
[  157.732781][ T8729] __nla_validate_parse: 5 callbacks suppressed
[  157.732792][ T8729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1213'.
[  157.745306][ T5849] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  157.748798][ T5849] Bluetooth: hci2: Injecting HCI hardware error event
[  157.753347][ T5849] Bluetooth: hci2: hardware error 0x00
[  159.822043][ T5849] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  159.974557][ T8780] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1237'.
[  160.174854][ T8801] net_ratelimit: 76 callbacks suppressed
[  160.174873][ T8801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.198614][ T8803] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1249'.
[  161.163907][ T8833] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1262'.
[  161.206134][ T8833] hsr_slave_0: left promiscuous mode
[  161.313335][ T8833] hsr_slave_1: left promiscuous mode
[  161.714932][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1266'.
[  161.731497][ T8842] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1265'.
[  162.291644][ T8872] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1279'.
[  162.382471][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1280'.
[  162.387090][ T8874] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  162.449808][ T8876] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1281'.
[  163.026495][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'.
[  163.868327][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1287'.
[  167.688767][ T8948] netlink: 'syz.3.1308': attribute type 2 has an invalid length.
[  169.119143][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1317'.
[  169.129141][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1317'.
[  169.133804][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1317'.
[  169.136716][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1317'.
[  169.760926][ T9005] syzkaller0: entered promiscuous mode
[  169.762893][ T9005] syzkaller0: entered allmulticast mode
[  171.139158][ T9033] vcan0 speed is unknown, defaulting to 1000
[  171.143231][ T9033] vcan0 speed is unknown, defaulting to 1000
[  171.146387][ T9033] vcan0 speed is unknown, defaulting to 1000
[  171.284414][ T9033] infiniband syz1: set active
[  171.286523][ T9033] infiniband syz1: added vcan0
[  171.318770][ T5884] vcan0 speed is unknown, defaulting to 1000
[  171.327128][ T9033] RDS/IB: syz1: added
[  171.330206][ T9033] smc: adding ib device syz1 with port count 1
[  171.332530][ T9033] smc:    ib device syz1 port 1 has pnetid 
[  171.334691][ T5884] vcan0 speed is unknown, defaulting to 1000
[  171.338871][ T9033] vcan0 speed is unknown, defaulting to 1000
[  171.567138][ T9033] vcan0 speed is unknown, defaulting to 1000
[  171.574767][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'.
[  171.587952][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'.
[  171.765330][ T5716] bridge_slave_1: left allmulticast mode
[  171.767800][ T5716] bridge_slave_1: left promiscuous mode
[  171.777028][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.801313][ T5716] bridge_slave_0: left allmulticast mode
[  171.815392][ T5716] bridge_slave_0: left promiscuous mode
[  171.817868][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.848573][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  171.864135][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  171.867679][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  171.874689][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  171.880484][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.182282][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.186054][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.189169][ T5716] bond0 (unregistering): Released all slaves
[  172.218526][ T9033] vcan0 speed is unknown, defaulting to 1000
[  172.674964][ T9033] vcan0 speed is unknown, defaulting to 1000
[  172.828724][ T9050] vcan0 speed is unknown, defaulting to 1000
[  172.977279][ T9077] netlink: 'syz.1.1356': attribute type 39 has an invalid length.
[  173.568172][ T9033] vcan0 speed is unknown, defaulting to 1000
[  173.787951][ T9089] netlink: 'syz.1.1359': attribute type 22 has an invalid length.
[  173.810613][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'.
[  173.904291][   T54] Bluetooth: hci4: command tx timeout
[  173.962655][ T9050] chnl_net:caif_netlink_parms(): no params data found
[  174.189498][ T9105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1364'.
[  174.494751][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.501000][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.508935][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'.
[  174.735169][ T9130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1375'.
[  174.909753][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  174.935061][ T5716] team0 (unregistering): Port device C removed
[  175.210528][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.213104][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.215648][ T9050] bridge_slave_0: entered allmulticast mode
[  175.218652][ T9050] bridge_slave_0: entered promiscuous mode
[  175.230657][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.286017][ T9130] bridge_slave_0 (unregistering): left allmulticast mode
[  175.288191][ T9130] bridge_slave_0 (unregistering): left promiscuous mode
[  175.290501][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.309711][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.313494][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.315884][ T9050] bridge_slave_1: entered allmulticast mode
[  175.319563][ T9050] bridge_slave_1: entered promiscuous mode
[  175.430609][ T9135] syzkaller0: entered promiscuous mode
[  175.434555][ T9135] syzkaller0: entered allmulticast mode
[  175.446576][ T9050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.467388][ T9050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.984143][   T54] Bluetooth: hci4: command tx timeout
[  176.594110][ T9050] team0: Port device team_slave_0 added
[  176.610119][ T9050] team0: Port device team_slave_1 added
[  176.643868][ T9156] netlink: 'syz.1.1384': attribute type 64 has an invalid length.
[  176.689512][ T9050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.691735][ T9050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.692605][ T9160] netlink: 'syz.3.1385': attribute type 1 has an invalid length.
[  176.706604][ T9160] netlink: 376 bytes leftover after parsing attributes in process `syz.3.1385'.
[  176.709224][ T9050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.722233][ T9050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.724499][ T9050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.733368][ T9050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.744643][ T9162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1387'.
[  176.804586][ T9050] hsr_slave_0: entered promiscuous mode
[  176.810158][ T9050] hsr_slave_1: entered promiscuous mode
[  176.817881][ T9050] debugfs: 'hsr0' already exists in 'hsr'
[  176.820176][ T9050] Cannot create hsr debugfs directory
[  177.214391][ T9050] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  177.221005][ T9050] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  177.247732][ T9050] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  177.254477][ T9050] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  177.418250][ T9050] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.455474][ T9050] 8021q: adding VLAN 0 to HW filter on device team0
[  177.471537][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.474645][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.503094][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.505336][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.555089][ T9209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.659693][ T9050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.896432][ T9050] veth0_vlan: entered promiscuous mode
[  177.910339][ T9050] veth1_vlan: entered promiscuous mode
[  177.937413][ T9050] veth0_macvtap: entered promiscuous mode
[  177.942547][ T9050] veth1_macvtap: entered promiscuous mode
[  177.954295][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.965442][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.988964][ T5716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.008058][ T5716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.011429][ T5716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.024001][ T5716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.063474][   T54] Bluetooth: hci4: command tx timeout
[  178.119075][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.135848][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.175790][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.178991][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.223952][ T9250] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1408'.
[  178.325172][   T54] Bluetooth: hci3: unexpected event 0x14 length: 151 > 6
[  178.550755][ T9270] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  178.574033][ T9270] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  179.789591][ T9310] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  179.805217][ T9310] netlink: 'syz.1.1429': attribute type 10 has an invalid length.
[  179.836515][ T9310] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  180.158287][   T54] Bluetooth: hci4: command tx timeout
[  180.640319][ T9327] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1437'.
[  180.993763][ T9333] netlink: 'syz.1.1439': attribute type 33 has an invalid length.
[  180.996562][ T9333] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1439'.
[  181.135780][ T9341] netlink: 'syz.5.1443': attribute type 10 has an invalid length.
[  181.202457][ T9343] netlink: 'syz.1.1444': attribute type 33 has an invalid length.
[  181.209852][ T9343] netlink: 'syz.1.1444': attribute type 3 has an invalid length.
[  181.213532][ T9343] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1444'.
[  181.265412][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.303079][ T9341] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  181.318499][ T9346] bond0: entered promiscuous mode
[  181.323494][ T9346] bond_slave_0: entered promiscuous mode
[  181.325788][ T9346] bond_slave_1: entered promiscuous mode
[  181.328109][ T9346] batadv0: entered promiscuous mode
[  183.081813][ T9398] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1469'.
[  183.227384][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'.
[  183.232127][ T9411] netlink: 'syz.3.1477': attribute type 1 has an invalid length.
[  183.237730][ T9411] netlink: 'syz.3.1477': attribute type 2 has an invalid length.
[  183.240063][ T9411] netlink: 'syz.3.1477': attribute type 1 has an invalid length.
[  183.411042][ T9430] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1484'.
[  183.535775][ T9432] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1485'.
[  183.830754][ T9440] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1487'.
[  184.297069][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'.
[  184.311111][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'.
[  184.637483][ T9494] C: renamed from team_slave_0
[  184.639714][   T54] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  185.326727][ T9494] netlink: 'syz.1.1512': attribute type 1 has an invalid length.
[  185.570822][ T9503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.771651][ T9515] __nla_validate_parse: 2 callbacks suppressed
[  185.771669][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'.
[  185.899193][ T9518] bridge0: port 3(macsec0) entered disabled state
[  185.905755][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.970696][ T9518] bridge0: entered allmulticast mode
[  186.127008][ T9524] C: renamed from team_slave_0 (while UP)
[  186.218549][ T9524] netlink: 'syz.3.1524': attribute type 3 has an invalid length.
[  186.221366][ T9524] netlink: 'syz.3.1524': attribute type 1 has an invalid length.
[  186.229379][ T9524] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1524'.
[  186.236234][ T9525] bridge0: port 3(macsec0) entered blocking state
[  186.238917][ T9525] bridge0: port 3(macsec0) entered forwarding state
[  186.241685][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.244592][ T9525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.281078][ T9525] bridge0: entered promiscuous mode
[  186.701188][ T9543] netlink: 'syz.5.1532': attribute type 40 has an invalid length.
[  186.705064][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1532'.
[  186.735054][ T9546] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  186.738700][ T9546] netlink: 'syz.1.1533': attribute type 2 has an invalid length.
[  186.802639][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'.
[  187.048256][ T9563] veth1_macvtap: left allmulticast mode
[  187.050624][ T9563] veth1_macvtap: left promiscuous mode
[  187.077737][ T9563] bridge0: port 3(macsec0) entered disabled state
[  187.100270][ T9563] veth1_macvtap: entered promiscuous mode
[  187.102927][ T9563] veth1_macvtap: entered allmulticast mode
[  187.107079][ T9563] bridge0: port 3(macsec0) entered blocking state
[  187.109577][ T9563] bridge0: port 3(macsec0) entered forwarding state
[  187.697552][ T9576] netlink: 'syz.3.1547': attribute type 10 has an invalid length.
[  187.700436][ T9576] batman_adv: batadv0: Removing interface: netdevsim0
[  187.832929][ T9576] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  188.510384][ T9603] netlink: 'syz.3.1553': attribute type 23 has an invalid length.
[  188.546797][ T9606] netlink: 'syz.3.1555': attribute type 40 has an invalid length.
[  188.753078][ T9621] netlink: 'syz.3.1562': attribute type 39 has an invalid length.
[  188.827513][ T9627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1565'.
[  188.979072][ T5849] Bluetooth: hci3: unexpected event 0x01 length: 151 > 1
[  189.197767][ T9642] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1571'.
[  189.327168][ T9642] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1571'.
[  189.526878][ T9676] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1581'.
[  189.793775][ T9699] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1587'.
[  189.936358][ T9713] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1592'.
[  190.732658][ T9729] delete_channel: no stack
[  190.777328][ T9737] __nla_validate_parse: 1 callbacks suppressed
[  190.777338][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'.
[  190.967859][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  190.970325][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  191.246532][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1612'.
[  191.249566][ T9766] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  191.809352][ T9778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1617'.
[  191.837066][ T5236] Bluetooth: hci4: Unable to find connection for big 0x00
[  191.892757][ T9786] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1620'.
[  192.048953][ T9796] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1625'.
[  192.373853][ T5236] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6
[  192.845958][ T9835] netlink: 'syz.5.1643': attribute type 22 has an invalid length.
[  193.173503][ T9857] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1654'.
[  193.177037][ T9857] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1654'.
[  193.207119][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'.
[  193.211340][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1655'.
[  193.355677][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'.
[  193.617904][ T9890] netlink: 'syz.5.1670': attribute type 1 has an invalid length.
[  193.621202][ T9890] netlink: 'syz.5.1670': attribute type 2 has an invalid length.
[  194.154707][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.157486][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.308984][ T9897] veth1_macvtap: entered allmulticast mode
[  194.471458][ T9900] vcan0 speed is unknown, defaulting to 1000
[  194.739129][ T9921] netlink: 'syz.1.1681': attribute type 21 has an invalid length.
[  195.213427][ T9935] siw: device registration error -23
[  195.334639][ T9942] netlink: 'syz.5.1690': attribute type 21 has an invalid length.
[  196.004264][ T9977] __nla_validate_parse: 8 callbacks suppressed
[  196.004281][ T9977] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1705'.
[  196.318664][ T9987] syzkaller0: entered promiscuous mode
[  196.320628][ T9987] syzkaller0: entered allmulticast mode
[  196.710864][T10000] netlink: 'syz.3.1715': attribute type 21 has an invalid length.
[  196.714755][T10000] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1715'.
[  196.717458][T10000] netlink: 'syz.3.1715': attribute type 3 has an invalid length.
[  196.720981][T10000] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1715'.
[  196.821423][T10009] netlink: 'syz.5.1720': attribute type 9 has an invalid length.
[  196.866975][T10013] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1723'.
[  196.997252][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1728'.
[  197.001122][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1728'.
[  197.124179][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'.
[  197.475158][ T5236] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11
[  197.544712][T10047] netlink: 'syz.5.1737': attribute type 15 has an invalid length.
[  198.225651][T10095] netlink: 'syz.5.1760': attribute type 29 has an invalid length.
[  198.233414][T10097] netlink: 'syz.3.1762': attribute type 4 has an invalid length.
[  198.237837][T10095] netlink: 'syz.5.1760': attribute type 29 has an invalid length.
[  198.243748][T10095] netlink: 'syz.5.1760': attribute type 29 has an invalid length.
[  198.247979][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1761'.
[  199.380883][T10130] netlink: 'syz.3.1776': attribute type 21 has an invalid length.
[  200.614600][T10183] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1800'.
[  200.749542][T10190] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1803'.
[  200.836017][T10193] netlink: 'syz.5.1804': attribute type 13 has an invalid length.
[  200.840694][T10193] netlink: 'syz.5.1804': attribute type 58 has an invalid length.
[  200.908396][T10195] bridge0: port 3(syz_tun) entered blocking state
[  200.911433][T10195] bridge0: port 3(syz_tun) entered disabled state
[  200.920165][T10195] syz_tun: entered allmulticast mode
[  200.929945][T10195] syz_tun: entered promiscuous mode
[  200.933210][T10195] bridge0: port 3(syz_tun) entered blocking state
[  200.936641][T10195] bridge0: port 3(syz_tun) entered forwarding state
[  206.487200][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3313727840 wd_nsec: 3313727606
[  212.281873][    C1] sched: DL replenish lagged too much
[  216.278949][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  216.283997][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  216.286681][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  216.290168][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  216.293765][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  216.405913][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.410352][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  216.419869][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  216.424745][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  216.428537][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  216.665952][T10223] vcan0 speed is unknown, defaulting to 1000
[  216.931176][T10227] vcan0 speed is unknown, defaulting to 1000
[  217.128863][T10223] chnl_net:caif_netlink_parms(): no params data found
[  218.382236][ T5236] Bluetooth: hci5: command tx timeout
[  218.462144][ T5236] Bluetooth: hci6: command tx timeout
[  220.462033][ T5236] Bluetooth: hci5: command tx timeout
[  220.542080][ T5236] Bluetooth: hci6: command tx timeout
[  222.542184][ T5236] Bluetooth: hci5: command tx timeout
[  222.622207][ T5236] Bluetooth: hci6: command tx timeout
[  224.622123][ T5236] Bluetooth: hci5: command tx timeout
[  224.704055][   T54] Bluetooth: hci6: command tx timeout
[  226.784255][ T5236] Bluetooth: hci3: command 0x0406 tx timeout
[  228.183760][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  228.188488][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  228.192311][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  228.197035][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  228.200425][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.426157][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.428622][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  261.182834][   T34] INFO: task syz.2.551:7148 blocked for more than 143 seconds.
[  261.185831][   T34]       Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  261.233872][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  261.237247][   T34] task:syz.2.551       state:D stack:24328 pid:7148  tgid:7147  ppid:5847   task_flags:0x400140 flags:0x00004004
[  261.267316][   T34] Call Trace:
[  261.268748][   T34]  <TASK>
[  261.269955][   T34]  __schedule+0x1798/0x4cc0
[  261.271802][   T34]  ? perf_trace_lock+0x2f8/0x3b0
[  261.284779][   T34]  ? __pfx___schedule+0x10/0x10
[  261.286872][   T34]  ? schedule+0x91/0x360
[  261.288657][   T34]  schedule+0x165/0x360
[  261.290384][   T34]  schedule_preempt_disabled+0x13/0x30
[  261.314890][   T34]  __mutex_lock+0x7e6/0x1360
[  261.316865][   T34]  ? __mutex_lock+0x5b6/0x1360
[  261.318852][   T34]  ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  261.321302][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  261.332178][   T34]  ? stack_trace_save+0x9c/0xe0
[  261.334261][   T34]  ? stack_depot_save_flags+0x40/0x860
[  261.336515][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  261.338699][   T34]  ? trace_call_bpf+0x91/0x850
[  261.340676][   T34]  nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  261.361956][   T34]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  261.364565][   T34]  ? kmalloc_reserve+0x136/0x290
[  261.366476][   T34]  ? __alloc_skb+0x142/0x2d0
[  261.368269][   T34]  ? netlink_dump+0x1b7/0xe90
[  261.370088][   T34]  ? __netlink_dump_start+0x5cb/0x7e0
[  261.392050][   T34]  ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  261.394563][   T34]  ? genl_rcv_msg+0x5da/0x790
[  261.397383][   T34]  ? netlink_rcv_skb+0x208/0x470
[  261.399415][   T34]  ? genl_rcv+0x28/0x40
[  261.401159][   T34]  ? netlink_unicast+0x82f/0x9e0
[  261.412024][   T34]  ? netlink_sendmsg+0x805/0xb30
[  261.414145][   T34]  ? __sock_sendmsg+0x21c/0x270
[  261.416165][   T34]  ? ____sys_sendmsg+0x505/0x830
[  261.418227][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  261.420186][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  261.441973][   T34]  ? do_syscall_64+0xfa/0x3b0
[  261.443985][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.446491][   T34]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  261.449164][   T34]  ? rcu_is_watching+0x15/0xb0
[  261.451137][   T34]  ? trace_kmalloc+0x1f/0xd0
[  261.471968][   T34]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  261.474791][   T34]  ? __build_skb_around+0x257/0x3e0
[  261.477052][   T34]  genl_dumpit+0x10b/0x1b0
[  261.478923][   T34]  netlink_dump+0x6e4/0xe90
[  261.480792][   T34]  ? __pfx_netlink_dump+0x10/0x10
[  261.499452][   T34]  ? genl_start+0x499/0x6c0
[  261.501408][   T34]  __netlink_dump_start+0x5cb/0x7e0
[  261.515424][   T34]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  261.517844][   T34]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  261.520498][   T34]  ? genl_get_cmd+0x496/0x910
[  261.534916][   T34]  ? __pfx_genl_start+0x10/0x10
[  261.537029][   T34]  ? __pfx_genl_dumpit+0x10/0x10
[  261.539075][   T34]  ? __pfx_genl_done+0x10/0x10
[  261.541088][   T34]  ? trace_call_bpf+0xb7/0x850
[  261.547642][   T34]  ? trace_call_bpf+0x5ba/0x850
[  261.549678][   T34]  genl_rcv_msg+0x5da/0x790
[  261.551537][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.577230][   T34]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  261.580016][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  261.615831][   T34]  netlink_rcv_skb+0x208/0x470
[  261.617884][   T34]  ? __lock_acquire+0xab9/0xd20
[  261.619880][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.647539][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  261.649847][   T34]  ? down_read+0x1ad/0x2e0
[  261.651738][   T34]  genl_rcv+0x28/0x40
[  261.665291][   T34]  netlink_unicast+0x82f/0x9e0
[  261.667340][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  261.669539][   T34]  ? netlink_sendmsg+0x642/0xb30
[  261.671641][   T34]  ? skb_put+0x11b/0x210
[  261.686031][   T34]  netlink_sendmsg+0x805/0xb30
[  261.692137][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.694425][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  261.696716][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  261.698733][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  261.700870][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.721318][   T34]  __sock_sendmsg+0x21c/0x270
[  261.728792][   T34]  ____sys_sendmsg+0x505/0x830
[  261.730859][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.733692][   T34]  ? import_iovec+0x74/0xa0
[  261.735620][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  261.737574][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.739773][   T34]  ? __fget_files+0x2a/0x420
[  261.741676][   T34]  ? __fget_files+0x2a/0x420
[  261.747683][   T34]  ? __fget_files+0x3a0/0x420
[  261.749646][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  261.751686][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  261.757636][   T34]  ? rcu_is_watching+0x15/0xb0
[  261.759671][   T34]  ? do_syscall_64+0xbe/0x3b0
[  261.761633][   T34]  do_syscall_64+0xfa/0x3b0
[  261.767164][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.769318][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.771783][   T34]  ? exc_page_fault+0x9f/0xf0
[  261.774453][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.776992][   T34] RIP: 0033:0x7f647a38ebe9
[  261.778880][   T34] RSP: 002b:00007f64785f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.786230][   T34] RAX: ffffffffffffffda RBX: 00007f647a5b5fa0 RCX: 00007f647a38ebe9
[  261.789559][   T34] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[  261.795868][   T34] RBP: 00007f647a411e19 R08: 0000000000000000 R09: 0000000000000000
[  261.799136][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.805940][   T34] R13: 00007f647a5b6038 R14: 00007f647a5b5fa0 R15: 00007fff2545abe8
[  261.809206][   T34]  </TASK>
[  261.810553][   T34] 
[  261.810553][   T34] Showing all locks held in the system:
[  261.815248][   T34] 2 locks held by kworker/0:0/9:
[  261.817320][   T34] 2 locks held by rcu_tasks_trace/32:
[  261.819561][   T34]  #0: ffffffff8e13ac10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  261.828709][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  261.834725][   T34] 1 lock held by khungtaskd/34:
[  261.836726][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  261.840716][   T34] 6 locks held by kworker/u11:0/54:
[  261.845678][   T34]  #0: ffff8880298d5148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  261.850099][   T34]  #1: ffffc900007cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  261.856702][   T34]  #2: ffff888124520dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  261.860689][   T34]  #3: ffff8881245200b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  261.870041][   T34]  #4: ffffffff8f69cbc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  261.875554][   T34]  #5: ffff8880298d2338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  261.879246][   T34] 3 locks held by kworker/u10:7/1091:
[  261.881475][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  261.889151][   T34]  #1: ffffc90007027bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  261.895051][   T34]  #2: ffffffff8f537f08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  261.898780][   T34] 2 locks held by getty/5675:
[  261.900733][   T34]  #0: ffff88811037f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  261.911218][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  261.916737][   T34] 3 locks held by kworker/u8:2/5716:
[  261.918934][   T34]  #0: ffff888109a1d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  261.926500][   T34]  #1: ffffc90002e6fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  261.933538][   T34]  #2: ffffffff8f537f08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  261.937461][   T34] 4 locks held by kworker/u11:2/5849:
[  261.939656][   T34]  #0: ffff888130c6c948 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  261.947049][   T34]  #1: ffffc9000367fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  261.953442][   T34]  #2: ffff88813266c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  261.957451][   T34]  #3: ffffffff8f69cbc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  261.961675][   T34] 2 locks held by syz.0.314/6615:
[  261.966501][   T34]  #0: ffffffff8f59d530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  261.969897][   T34]  #1: ffffffff8e4186c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  261.978392][   T34] 3 locks held by syz.2.551/7148:
[  261.980491][   T34]  #0: ffffffff8f59d530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  261.986537][   T34]  #1: ffff88802f4a96d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  261.990764][   T34]  #2: ffffffff8e4186c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  261.996543][   T34] 3 locks held by kworker/u10:11/7961:
[  261.998758][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  262.006270][   T34]  #1: ffffc90008887bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  262.015438][   T34]  #2: ffff888125fe8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  262.019316][   T34] 2 locks held by syz.1.1796/10171:
[  262.021345][   T34]  #0: ffffffff8e19d488 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  262.028758][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  262.034547][   T34] 5 locks held by syz.3.1801/10185:
[  262.036667][   T34] 3 locks held by syz.5.1816/10219:
[  262.038728][   T34]  #0: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  262.045298][   T34]  #1: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf61/0x2be0
[  262.048992][   T34]  #2: ffffffff8e19d488 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  262.054168][   T34] 2 locks held by syz-executor/10223:
[  262.056307][   T34]  #0: ffffffff8eca8340 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  262.059963][   T34]  #1: ffffffff8f537f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  262.066628][   T34] 2 locks held by syz-executor/10227:
[  262.068766][   T34]  #0: ffffffff8f52b0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  262.074089][   T34]  #1: ffffffff8f537f08 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800
[  262.077875][   T34] 1 lock held by dhcpcd/10232:
[  262.079805][   T34]  #0: ffff88811310e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.089334][   T34] 1 lock held by dhcpcd/10233:
[  262.091312][   T34]  #0: ffff88813145e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.096649][   T34] 1 lock held by dhcpcd/10234:
[  262.098526][   T34]  #0: ffff8881312d8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.105170][   T34] 1 lock held by syz-executor/10236:
[  262.107287][   T34]  #0: ffffffff8f537f08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  262.110830][   T34] 1 lock held by dhcpcd/10240:
[  262.115092][   T34]  #0: ffff888130a46258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.118795][   T34] 1 lock held by dhcpcd/10241:
[  262.120657][   T34]  #0: ffff888027dd6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.129542][   T34] 1 lock held by dhcpcd/10242:
[  262.131526][   T34]  #0: ffff888021314258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.136715][   T34] 1 lock held by dhcpcd/10243:
[  262.138689][   T34]  #0: ffff8881330c4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.147510][   T34] 1 lock held by dhcpcd/10244:
[  262.149426][   T34]  #0: ffff88811bfec258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.154687][   T34] 1 lock held by dhcpcd/10245:
[  262.156654][   T34]  #0: ffff8881139a4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.160401][   T34] 1 lock held by dhcpcd/10246:
[  262.165178][   T34]  #0: ffff888131076258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  262.168931][   T34] 
[  262.169883][   T34] =============================================
[  262.169883][   T34] 
[  262.174801][   T34] NMI backtrace for cpu 1
[  262.174830][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  262.174859][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.174876][   T34] Call Trace:
[  262.174887][   T34]  <TASK>
[  262.174903][   T34]  dump_stack_lvl+0x189/0x250
[  262.174925][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.174941][   T34]  ? __pfx__printk+0x10/0x10
[  262.174969][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  262.174988][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  262.175006][   T34]  ? __pfx__printk+0x10/0x10
[  262.175027][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  262.175076][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  262.175096][   T34]  watchdog+0xf93/0xfe0
[  262.175117][   T34]  ? watchdog+0x1de/0xfe0
[  262.175139][   T34]  kthread+0x711/0x8a0
[  262.175157][   T34]  ? __pfx_watchdog+0x10/0x10
[  262.175173][   T34]  ? __pfx_kthread+0x10/0x10
[  262.175189][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.175205][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.175221][   T34]  ? __pfx_kthread+0x10/0x10
[  262.175238][   T34]  ret_from_fork+0x3fc/0x770
[  262.175254][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  262.175272][   T34]  ? __switch_to_asm+0x39/0x70
[  262.175288][   T34]  ? __switch_to_asm+0x33/0x70
[  262.175304][   T34]  ? __pfx_kthread+0x10/0x10
[  262.175321][   T34]  ret_from_fork_asm+0x1a/0x30
[  262.175350][   T34]  </TASK>
[  262.175355][   T34] Sending NMI from CPU 1 to CPUs 0:
[  262.235879][    C0] NMI backtrace for cpu 0
[  262.235894][    C0] CPU: 0 UID: 0 PID: 10185 Comm: syz.3.1801 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  262.235911][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.235916][    C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x6/0x2a0
[  262.235933][    C0] Code: 00 00 10 00 e8 4b 8b 27 03 89 c0 e9 54 f8 de 09 cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 41 54 53 48 83 ec 10 65 48 8b 05 69 fc 02 11 48 89 44 24 08
[  262.235939][    C0] RSP: 0018:ffffc90000007448 EFLAGS: 00000002
[  262.235947][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0a4b2a036c3d7500
[  262.235952][    C0] RDX: 0000000000000000 RSI: ffffffff8be335e0 RDI: ffffffff8be335a0
[  262.235957][    C0] RBP: 0000000000000000 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  262.235962][    C0] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: 0000000000000000
[  262.235967][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  262.235971][    C0] FS:  00007f53abc0e6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  262.235977][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  262.235982][    C0] CR2: 00007fa9fca6b36d CR3: 00000000315c2000 CR4: 00000000000006f0
[  262.236004][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  262.236009][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  262.236013][    C0] Call Trace:
[  262.236017][    C0]  <IRQ>
[  262.236021][    C0]  trace_hardirqs_on+0x28/0x40
[  262.236032][    C0]  irqentry_exit+0x74/0x90
[  262.236068][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.236078][    C0] RIP: 0010:stack_trace_consume_entry+0xa2/0x280
[  262.236087][    C0] Code: cc 41 0f b6 04 17 84 c0 0f 85 78 01 00 00 44 89 23 b0 01 e9 99 00 00 00 31 c0 e9 92 00 00 00 48 89 f8 48 c1 e8 03 80 3c 10 00 <74> 29 49 89 ff 48 89 74 24 08 49 89 d4 4c 89 04 24 4c 89 cb e8 15
[  262.236093][    C0] RSP: 0018:ffffc90000007518 EFLAGS: 00000246
[  262.236100][    C0] RAX: 1ffff92000000ec4 RBX: ffffc9000000762c RCX: 0a4b2a036c3d7500
[  262.236105][    C0] RDX: dffffc0000000000 RSI: ffffffff810014ca RDI: ffffc90000007620
[  262.236110][    C0] RBP: 1ffff92000000ec6 R08: ffffc90000007630 R09: 0000000000000013
[  262.236115][    C0] R10: dffffc0000000000 R11: ffffffff81ac3890 R12: 0000000000000000
[  262.236119][    C0] R13: 1ffff92000000ec5 R14: ffffc90000007628 R15: 1ffff92000000ec5
[  262.236126][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  262.236135][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.236144][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.236153][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  262.236162][    C0]  arch_stack_walk+0x110/0x150
[  262.236172][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.236180][    C0]  stack_trace_save+0x9c/0xe0
[  262.236188][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  262.236197][    C0]  ? memset_orig+0x4e/0xb0
[  262.236204][    C0]  kasan_save_track+0x3e/0x80
[  262.236214][    C0]  ? kasan_save_track+0x3e/0x80
[  262.236222][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  262.236230][    C0]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  262.236240][    C0]  ? fill_pool+0x100/0x570
[  262.236249][    C0]  ? debug_object_assert_init+0x2b1/0x380
[  262.236257][    C0]  ? __mod_timer+0x4a/0xf30
[  262.236265][    C0]  ? mrp_join_timer+0x13f/0x170
[  262.236274][    C0]  ? call_timer_fn+0x17e/0x5f0
[  262.236283][    C0]  ? __run_timer_base+0x61a/0x860
[  262.236291][    C0]  ? run_timer_softirq+0xb7/0x180
[  262.236300][    C0]  ? handle_softirqs+0x286/0x870
[  262.236307][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  262.236313][    C0]  ? irq_exit_rcu+0x9/0x30
[  262.236318][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  262.236327][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.236334][    C0]  ? trace_sched_exit_tp+0x1/0x110
[  262.236344][    C0]  ? __schedule+0x17ae/0x4cc0
[  262.236352][    C0]  ? preempt_schedule_irq+0xb5/0x150
[  262.236360][    C0]  ? irqentry_exit+0x6f/0x90
[  262.236378][    C0]  __kasan_slab_alloc+0x6c/0x80
[  262.236387][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  262.236397][    C0]  ? fill_pool+0x100/0x570
[  262.236406][    C0]  fill_pool+0x100/0x570
[  262.236415][    C0]  ? debug_object_assert_init+0x288/0x380
[  262.236424][    C0]  ? __pfx_fill_pool+0x10/0x10
[  262.236434][    C0]  ? debug_object_assert_init+0x288/0x380
[  262.236443][    C0]  debug_object_assert_init+0x2b1/0x380
[  262.236454][    C0]  __mod_timer+0x4a/0xf30
[  262.236461][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  262.236472][    C0]  mrp_join_timer+0x13f/0x170
[  262.236482][    C0]  call_timer_fn+0x17e/0x5f0
[  262.236491][    C0]  ? __pfx_mrp_join_timer+0x10/0x10
[  262.236499][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.236508][    C0]  ? call_timer_fn+0xbe/0x5f0
[  262.236517][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  262.236529][    C0]  ? __pfx_mrp_join_timer+0x10/0x10
[  262.236537][    C0]  __run_timer_base+0x61a/0x860
[  262.236546][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  262.236558][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  262.236570][    C0]  run_timer_softirq+0xb7/0x180
[  262.236580][    C0]  handle_softirqs+0x286/0x870
[  262.236587][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  262.236595][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  262.236603][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  262.236612][    C0]  __irq_exit_rcu+0xca/0x1f0
[  262.236618][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  262.236627][    C0]  irq_exit_rcu+0x9/0x30
[  262.236632][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  262.236642][    C0]  </IRQ>
[  262.236644][    C0]  <TASK>
[  262.236647][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.236656][    C0] RIP: 0010:trace_sched_exit_tp+0x1/0x110
[  262.236670][    C0] Code: 8c 55 fe ff ff 48 8b 7d b0 e8 6b 21 92 00 e9 47 fe ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <53> 66 90 65 8b 05 49 23 0f 11 83 f8 08 73 3b 89 c3 c1 e8 06 48 8d
[  262.236678][    C0] RSP: 0018:ffffc90002c5f950 EFLAGS: 00000206
[  262.236684][    C0] RAX: 0000000000000001 RBX: ffff888100693980 RCX: ffffffff819116ab
[  262.236689][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001
[  262.236693][    C0] RBP: ffffc90002c5fb70 R08: ffff8881083ad603 R09: 1ffff11021075ac0
[  262.236698][    C0] R10: dffffc0000000000 R11: ffffed1021075ac1 R12: dffffc0000000000
[  262.236703][    C0] R13: 1ffff11026cc7557 R14: ffff88810abdb980 R15: ffff888100694f14
[  262.236710][    C0]  ? finish_task_switch+0x32b/0x950
[  262.236721][    C0]  __schedule+0x17ae/0x4cc0
[  262.236731][    C0]  ? irqentry_enter+0x3d/0x60
[  262.236740][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  262.236751][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  262.236758][    C0]  ? __pfx___schedule+0x10/0x10
[  262.236766][    C0]  ? irqentry_exit+0x74/0x90
[  262.236780][    C0]  preempt_schedule_irq+0xb5/0x150
[  262.236789][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  262.236799][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  262.236807][    C0]  irqentry_exit+0x6f/0x90
[  262.236816][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.236823][    C0] RIP: 0010:lock_release+0x5/0x3e0
[  262.236832][    C0] Code: 03 48 8b 3c 24 e9 08 fa ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b
[  262.236838][    C0] RSP: 0018:ffffc90002c5fce0 EFLAGS: 00000282
[  262.236844][    C0] RAX: 1ffff1102157b854 RBX: ffff88801f5a6070 RCX: dffffc0000000000
[  262.236849][    C0] RDX: ffffc900284fa000 RSI: ffffffff81efdb7d RDI: ffff88801f5a60e0
[  262.236854][    C0] RBP: ffffc90002c5fee0 R08: ffffc90002c5fc87 R09: 1ffff9200058bf90
[  262.236859][    C0] R10: dffffc0000000000 R11: fffff5200058bf91 R12: ffff888030d5f550
[  262.236864][    C0] R13: ffff888030f6ddc0 R14: ffff88810abdb980 R15: 1ffff9200058bfb0
[  262.236871][    C0]  ? __se_sys_perf_event_open+0x199d/0x1d70
[  262.236882][    C0]  up_read+0x16/0x20
[  262.236889][    C0]  __se_sys_perf_event_open+0x199d/0x1d70
[  262.236906][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  262.236917][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  262.236926][    C0]  ? __sys_socketpair+0x112/0x560
[  262.236938][    C0]  ? do_syscall_64+0xbe/0x3b0
[  262.236953][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  262.236965][    C0]  do_syscall_64+0xfa/0x3b0
[  262.236977][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.236992][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.237003][    C0]  ? exc_page_fault+0x9f/0xf0
[  262.237016][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.237026][    C0] RIP: 0033:0x7f53aad8ebe9
[  262.237036][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.237071][    C0] RSP: 002b:00007f53abc0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  262.237084][    C0] RAX: ffffffffffffffda RBX: 00007f53aafb5fa0 RCX: 00007f53aad8ebe9
[  262.237092][    C0] RDX: 7fffffffffffffff RSI: 0000000000000000 RDI: 0000200000000440
[  262.237099][    C0] RBP: 00007f53aae11e19 R08: 0000000000000003 R09: 0000000000000000
[  262.237105][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  262.237114][    C0] R13: 00007f53aafb6038 R14: 00007f53aafb5fa0 R15: 00007fff029ebff8
[  262.237128][    C0]  </TASK>
[  262.590753][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  262.593002][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  262.596921][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.600444][   T34] Call Trace:
[  262.601553][   T34]  <TASK>
[  262.602522][   T34]  dump_stack_lvl+0x99/0x250
[  262.604181][   T34]  ? __asan_memcpy+0x40/0x70
[  262.605569][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.607155][   T34]  ? __pfx__printk+0x10/0x10
[  262.608573][   T34]  vpanic+0x281/0x750
[  262.609803][   T34]  ? __pfx_vpanic+0x10/0x10
[  262.611476][   T34]  ? preempt_schedule+0xae/0xc0
[  262.613403][   T34]  ? preempt_schedule_common+0x83/0xd0
[  262.615496][   T34]  panic+0xb9/0xc0
[  262.616943][   T34]  ? __pfx_panic+0x10/0x10
[  262.618724][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  262.620883][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  262.623344][   T34]  watchdog+0xfd2/0xfe0
[  262.625040][   T34]  ? watchdog+0x1de/0xfe0
[  262.626778][   T34]  kthread+0x711/0x8a0
[  262.628442][   T34]  ? __pfx_watchdog+0x10/0x10
[  262.630254][   T34]  ? __pfx_kthread+0x10/0x10
[  262.632044][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.634113][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.636131][   T34]  ? __pfx_kthread+0x10/0x10
[  262.637918][   T34]  ret_from_fork+0x3fc/0x770
[  262.639725][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  262.641712][   T34]  ? __switch_to_asm+0x39/0x70
[  262.643596][   T34]  ? __switch_to_asm+0x33/0x70
[  262.645509][   T34]  ? __pfx_kthread+0x10/0x10
[  262.647305][   T34]  ret_from_fork_asm+0x1a/0x30
[  262.649167][   T34]  </TASK>
[  262.651063][   T34] Kernel Offset: disabled
[  262.652766][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:30:16  Registers:
info registers vcpu 0

CPU#0
RAX=0a4b2a036c3d7500 RBX=0000000000000a06 RCX=0a4b2a036c3d7500 RDX=0000000000000003
RSI=ffffffff8d9b748e RDI=0000000000000001 RBP=ffffc90000007ac0 RSP=ffffc90000007a40
R8 =ffffffff8fa38037 R9 =1ffffffff1f47006 R10=dffffc0000000000 R11=fffffbfff1f47007
R12=dffffc0000000000 R13=ffff888028d27510 R14=ffffffff99c95028 R15=1ffff92000000f48
RIP=ffffffff8b7beeb8 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f53abc0e6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa9fca6b36d CR3=00000000315c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007760000 RBX=1ffff1100418d25a RCX=000000000000009d RDX=ffff888020c692d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0b88 RSP=ffffc900001e09e0
R8 =ffff888020c696bf R9 =1ffff1100418d2d7 R10=dffffc0000000000 R11=ffffed100418d2d8
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff86988cfb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa9fcb645e2 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
