last executing test programs:

3m53.716854271s ago: executing program 2 (id=422):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x29, 0xb, 0x70bd27, 0x0, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3m53.716224546s ago: executing program 2 (id=423):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x8c, 0x1}, 0x48)
close(r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000c5ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000a95e9af8be00bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x101c0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

3m52.91776522s ago: executing program 2 (id=425):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m52.729309389s ago: executing program 2 (id=429):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1604, 0xc8, 0x1, 0x0, 0xfffffffffffffffe, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00ff00"], 0xfe43)

3m52.674040036s ago: executing program 2 (id=431):
syz_clone(0x22a1080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

3m52.614666399s ago: executing program 2 (id=434):
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xe51}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000007cc38af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x33, 0x8, "4451ba0458dee1c9e5e59b23a69105969aa24269d3bfe353bbc58030d83880ae9d1dbdbd508a23be5c8fecd4faab2d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x4}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x41}, 0x0)

3m37.591779778s ago: executing program 32 (id=434):
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xe51}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000007cc38af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x33, 0x8, "4451ba0458dee1c9e5e59b23a69105969aa24269d3bfe353bbc58030d83880ae9d1dbdbd508a23be5c8fecd4faab2d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x4}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.290056253s ago: executing program 3 (id=2879):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000002b80), 0x8)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0x7f}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed02, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)
recvmsg(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/243, 0xf3}, {&(0x7f0000001600)=""/195, 0xc3}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f0000001700)=""/202, 0xca}, {&(0x7f0000001800)=""/47, 0x2f}, {&(0x7f0000001840)=""/15, 0xf}, {&(0x7f0000001880)=""/27, 0x1b}, {&(0x7f00000018c0)=""/190, 0xbe}, {&(0x7f0000001980)=""/200, 0xc8}], 0x9, &(0x7f0000001b40)=""/4096, 0x1000}, 0x40000020)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xcfe, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1.906138055s ago: executing program 3 (id=2885):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000040)={0x5, 0x0, 0x8000000}, 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0xffff, 0x2, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x64)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

1.335154343s ago: executing program 1 (id=2887):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xc, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xe, 0x9}, 0x118d2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910489bef44f2e62acdd20000a709000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f0000000240)=""/211, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe90}, 0x94)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r7], 0x12)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="300000003e000701fefffffffcffffff047c000008004280040008000c00018006000600800a000008000280040006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})

1.218330998s ago: executing program 1 (id=2889):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r0)

1.036300297s ago: executing program 1 (id=2890):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x86}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10}, 0x94)

1.035786765s ago: executing program 0 (id=2891):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
fstat(r3, &(0x7f00000000c0))

1.034675391s ago: executing program 1 (id=2892):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1b, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}, {}, {}, [@ldst={0x1, 0x2, 0x2, 0x6, 0x0, 0xfffffffffffffff0, 0x1}, @call={0x85, 0x0, 0x0, 0x98}, @call={0x85, 0x0, 0x0, 0xa9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x6f6d, 0x9a, &(0x7f0000000140)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x8, 0x70a11ebf, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x758e}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x18000)
r2 = socket$kcm(0x29, 0x3, 0x0)
socket$kcm(0x29, 0x8, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0)
recvmsg$kcm(r2, &(0x7f0000001680)={&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=""/243, 0xf3}, 0x45)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x40c000, 0x0)
ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0)
r4 = syz_clone(0x10100080, &(0x7f0000001780)="b939f438bf8c82a46b9ae442c1bb6cd4acbe2dd5fd254c4079d0abea10547414639a333355878765f92d87c63adf7a767514e25e7418d59eb9cc7049aab785cd7a3bb8e6701c41dbc1a07cbf1f8e53a030721f29bd45e4f7c1f6360b6cb907bc30d01698a1cde5ff1772ad856bf3a66655e5692436578a934c28ef407162c8fde74d8d5e692c3790a1216b768512ea457b431299f892956172b963e854060f732133575ac64afe609e5761fa497e118f5fdb24d029d4bd310c50854119cb0140110cbf6d0476c104cecc38dfb5d07849a1fe06e91ffcbec03e9f1db527d43b", 0xdf, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="9f8de09fd0d130")
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='cpuset.effective_mems\x00', 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0xec4, 0x10a1, 0xd5f0becbbc46e58a, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_config_ext={0x5, 0xf40}, 0x114408, 0x1, 0x8001, 0x6, 0x4, 0x5, 0xb84, 0x0, 0x6, 0x0, 0x7}, r4, 0x8, r5, 0x8)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, r5, 0x3, 0x5, 0x4}, 0x50)
fstat(r7, &(0x7f0000001a00))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001bc0)={r5, 0x58, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c80)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1a19, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x5, &(0x7f0000001a80)=@raw=[@alu={0x4, 0x1, 0x4, 0xb, 0x3, 0x6, 0x4}, @call={0x85, 0x0, 0x0, 0xac}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000001ac0)='GPL\x00', 0xf, 0x1f, &(0x7f0000001b00)=""/31, 0x41100, 0x1, '\x00', r8, 0x17, r5, 0x8, &(0x7f0000001c00)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001c40)={0x3, 0x6, 0x7ec, 0x2}, 0x10, 0x1cfa9, r1, 0x1, &(0x7f0000001d00)=[r5, r7, r5, r7, r5, r5, r9, r7], &(0x7f0000001d40)=[{0x0, 0x1, 0x8, 0xc}], 0x10, 0x8}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001fc0)={r5, 0x20, &(0x7f0000001f80)={&(0x7f0000001e40)=""/58, 0x3a, 0x0, &(0x7f0000001e80)=""/214, 0xd6}}, 0x10)
r11 = perf_event_open$cgroup(&(0x7f0000002100)={0x3, 0x80, 0x5, 0x3, 0xfa, 0x4, 0x0, 0x5, 0x42040, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000020c0), 0xa}, 0x200008, 0x80000001, 0x10c, 0x8, 0x8000000000000000, 0x5, 0x39, 0x0, 0xb741, 0x0, 0x8}, r5, 0x6, r6, 0x9)
perf_event_open(&(0x7f0000002040)={0x3, 0x80, 0x0, 0x4, 0x10, 0xc, 0x0, 0x5, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000002000), 0x1}, 0x40, 0x7, 0xd, 0x5, 0x6, 0x8, 0x7, 0x0, 0xfffffff8, 0x0, 0x101}, r4, 0xb, r11, 0x8)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000002180))
r12 = socket$unix(0x1, 0x4, 0x0)
recvmsg$unix(r12, &(0x7f0000002340)={&(0x7f00000021c0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002240)=""/171, 0xab}], 0x1}, 0x2160)
getpid()
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000002380)='/dev/net/tun\x00')
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000023c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x66, '\x00', r8, r5, 0x5, 0x3, 0x2}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002700)={r10, 0xe0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002440)=[0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000002480)=[0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r15=>0x0, 0x12, &(0x7f0000002500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002540), &(0x7f0000002580), 0x8, 0x25, 0x8, 0x8, &(0x7f00000025c0)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002740)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x9, '\x00', r14, r5, 0x3, 0x3}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000027c0)=r15, 0x4)

920.097837ms ago: executing program 1 (id=2893):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000073000000760000000000000027007fffffff0000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x140a, 0x429, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008040)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[], 0x38, 0x4048800}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000780)="1c0000005e007f029e0b18c9d25a27a69801976ab0a272a2a788bab6", 0x1c}], 0x1}, 0x840)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000009c0)={0x3c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x1d, 0x125, 0x0, 0x1, [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}, @nested={0xc, 0x13, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid=0xee00}]}, @generic="b5"]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1, 0x18, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='syzkaller\x00', 0x4, 0xe5, &(0x7f0000001080)=""/229, 0x41000, 0x2, '\x00', r6, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x4, 0xd, 0x5, 0x1}, 0x10, 0x0, r8, 0x5, &(0x7f00000013c0)=[r2], &(0x7f0000001400)=[{0x5, 0x2, 0xf, 0x9}, {0x2, 0x3, 0x5, 0x6}, {0x0, 0x2, 0xf, 0x6}, {0x2, 0x4, 0xb, 0x4}, {0x4, 0x1, 0x1, 0xa}], 0x10, 0xc5}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10)
openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=@framed={{0x18, 0xa}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94)

850.887517ms ago: executing program 0 (id=2894):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xc, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', @random="000005000020"})

849.920407ms ago: executing program 3 (id=2895):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
r2 = socket$kcm(0x29, 0x5, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, 0x0, 0x3400cc00)
r4 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x6, 0x50, 0x0, 0x400, 0x4a128, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x48cf7a53, 0x4, @perf_bp={&(0x7f0000000340)}, 0x2410, 0x4, 0x8, 0x6, 0xfffffffffffffffb, 0x4, 0x2c, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r0, 0x1)
r5 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r5, 0x29, 0x49, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x0) (async)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x32004090) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2102)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000039bbc662d000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x6a, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x800000000000, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10008, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
socket$kcm(0x2b, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) (async)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d34, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x102812, 0x0, 0x0, 0x1, 0x8000000, 0xa9, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

670.581326ms ago: executing program 3 (id=2896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001f40)='ns/user\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="44010000100001000000000000000000fc0000000000000000000000000000010000000000000000000000000000000000006159000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000004000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000001000000000000000000000000400000100000000000000000000000000000000063500000a00f9fd6000000000000000480003"], 0x144}}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J*tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')

596.478202ms ago: executing program 0 (id=2897):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}]}, 0x68}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a0002", 0x1b}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
r1 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

595.77508ms ago: executing program 0 (id=2898):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x953, 0x0, r0, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) (async, rerun: 64)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) (async, rerun: 64)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x5, 0x2, 0x81, 0x800}, {0x400, 0x9, 0x9}]})
r3 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x2, 0x6, 0x1, 0x3, 0x0, 0x2, 0x8100, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x5, @perf_config_ext={0x6, 0xffffffffffffcbd5}, 0x8020, 0x7, 0x80, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0xf}, 0x8) (async)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x101100, 0x0)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000500)={'pimreg1\x00', 0x600}) (async, rerun: 64)
ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000540)=0xffffffff) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x8)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8, <r9=>0x0}, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x13, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x1, 0x0, 0x6, 0x7, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000640)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000680)=""/87, 0x41100, 0x0, '\x00', r5, @fallback=0x16, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0x10, 0x9, 0x3}, 0x10, r9, 0xffffffffffffffff, 0x7, &(0x7f00000007c0)=[r2, r4, r0, r2], &(0x7f0000000800)=[{0x5, 0x5}, {0x0, 0x2, 0x2, 0x1}, {0x3, 0x4, 0x4, 0x3}, {0x4, 0x4, 0x5, 0x7}, {0x3, 0x2, 0xa, 0x4}, {0x1, 0x2, 0x2, 0xc}, {0x1, 0x2, 0x5, 0x7}], 0x10, 0x7fff}, 0x94)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xa, &(0x7f0000000940)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f00000009c0)='syzkaller\x00', 0x2, 0x3e, &(0x7f0000000a00)=""/62, 0x41000, 0x32, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000000a40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[r4, r0, r4, r0], &(0x7f0000000ac0)=[{0x5, 0x5, 0xb, 0x8}, {0x1, 0x2, 0xf}]}, 0x94) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@fallback=<r12=>r10, 0x20, 0x0, 0x2, &(0x7f0000000bc0)=[0x0], 0x1, 0x0, &(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r13=>0x0}, 0x40)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000d80)={0x5, <r15=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup=r14, r10, 0x12, 0x32, r11, @void, @void, @void, @value=r15, r13}, 0x20)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r1, r12, 0x5, 0x0, 0x3}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x101000, 0x0) (async, rerun: 64)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002080)={&(0x7f0000000e80)="69fe7c8ee98661d575202775982e0594d3cf36c20325adff7f412fe53498070848d4ca7d8bd640020513b9408b7781e6e7eadd05c1d02a94d230685b7396bde77790dd40f45d000900f1515834f357452b8473b74655574558e7c6df8d1482af4234b1b9", &(0x7f0000000f00)=""/162, &(0x7f0000000fc0)="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", &(0x7f0000001fc0)="d5048f9cd58aadc7450ef08d007801bcbda5dfebe75c8a0d8089a44713d1dd43e86dbee6c96ae59fbbd25105232ae20c38842a0b626edf26555e828ccecaaeae88fa150748f7cf720512d306916e32793a70c135ef69e25cad0db5a4226d33ead2c181a0e59ede0fc6005c7fe09c75a396b4238fa0c1d26f85aaa88f3743c92d048fa7a348335f3347b3b71709c3bc87d7fc2318cae2c9ddcee47ddf67f371424b1b9feb9badc63dd5fca235c77506188c15fb3d12bb", 0x7fff, r16, 0x4}, 0x38) (async, rerun: 64)
r17 = bpf$ITER_CREATE(0x21, &(0x7f00000020c0)={r12}, 0x8)
sendmsg$kcm(r17, &(0x7f00000022c0)={&(0x7f0000002100)=@pppoe={0x18, 0x0, {0x0, @empty, 'veth0_to_team\x00'}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002180)="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", 0xfe}], 0x1}, 0x1) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003840)={0xffffffffffffffff, 0xe0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000035c0)=[0x0], &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000003640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000003680), &(0x7f00000036c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000003700)}}, 0x10)

595.039044ms ago: executing program 3 (id=2899):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x3442, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071106d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x74, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
sendmsg$tipc(r0, &(0x7f0000000480)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="4e747c636fd378093e114bf67fd3a6145c78e1e80e1603247cb36fa306ffc7bf5d5f4c2f34cfd82af1c985ea917c3055ba01573238cc19e8a34b054d00c08ac83e", 0x41}, {&(0x7f00000000c0)="55e7935dc77a0a9356a70d6ad1b0893ad75726b9d839fcf815fd34caed3c3ea3a70fdfe767fa06f04485a6b4da4a9098051aabbdccf3e2218ff84702d23804bf581f669b5e42074f3adaf763e8e57bbf7f0a438dc44cfabefde7331c550c3af8ddfea6758cac2b1dfeea7a1a6988146c79e3a2196e6238f5b0f27e5c9b4397aadcf8d7c8bdea", 0x86}, {&(0x7f0000000180)="56b7508c36647129de89e973a922ba0ce383bfe55449e46b66d7fd1d1b95d03d103da37c16af74e5c0f1a7aeadacf3a7bbee558c640d83c27343705a5ae4e0a86ab112b19332925de60b86be1a29cfa4cea9699d55628d3720cc79b7dc1a62cb6b5494286403d63521b6be45924d8366d2d5508698d92d1641dedb61a44788ac0c1cc2acf18d6d27bfaf37447ae7286f108f8b23d7ac2b3bb0c9c31fc69735a46eb98e0356c1d739222e839f050651bb248c7588509c5be70b0bc5a26a0dbfb29d385fece62f45af04c3e5aab7e7c0", 0xcf}, {&(0x7f0000000280)="e5a1e586cf8094325900850dca1ee44b5876d535d88b413bda50c55f65afd754ab078ae566100ea896360a6ff3b217beab8079e22bd781dfad5b380123929e5d28e671b343d3b7a3311aa177ad144d97c6198837a243247b4bcce0fc1cb3c12351ee21d50d53ce3cccddcf9d57032ed3608cf1a33a051081741de2006e75ce739ae03ab45c64d2f6b160f8e82bd8a36fd80802192d703759fa6910f670f304ec5de1cec725fe12b682817db190942621fab364955da893b8d5e403e43443854e6a362855fc40a0c8ed49907067fc1624eb0404c0ba423ed445778e6a9d346b2e16ee4f85f5a6124c20", 0xe9}], 0x4, &(0x7f00000003c0)="ceeb794676df82d52701f3ae11a7b70d803d6577d2bc6c842c43618a60b44b3e685f68ba962b1f5e26a64d0b93fd7d23c753ae3894b479dce86a29a2d556b6a3eb558b2ff69822eb81bccb7589192bffebfa1a90e384393b4b3d1c3ef063883bfe8a02450d6130334e1745677e156075944869ecd2548114a0ea9a07f8f8fdfb062edb8cda038d4ef1f6e8aa2e16c54e4a828b6fa4239c7f", 0x98, 0x1}, 0x20000008)

470.149149ms ago: executing program 0 (id=2900):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x142d0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000008000000000000000000085000000600000008500000088000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94)

176.977768ms ago: executing program 3 (id=2901):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="0100000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000004000000030000004100000000010000", @ANYRES32=r1, @ANYBLOB="1000"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="04000000000000000100"/28], 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x8006, 0xf9, 0x0, 0x8, 0x3fe, 0x7fbfffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040)=r7, 0x4)
sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420b4648c", 0x14}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='!~u&00\t&&')
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2}}}], 0x20}, 0x0)

90.436196ms ago: executing program 0 (id=2902):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2c, 0x2, 0x80004, &(0x7f00000013c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0600000000000000", @ANYRES32, @ANYBLOB="7c8099f14be53130526bf8c2ca80124e21342ffde4710166b4a811ede2524fa56a8129f76c92bf01f0d1f75907567517a0a1df02e12e47624d1aa053257550aa6c5a10eeab29432854333e0d3b2337e29700d388c11c5101574cf4294b6c36c5ec52ecdd9bc0ca78fef2769a78e3e1ffe770ae308349d56362cf4eeced760a347c83ff6b6bf2da86c203683b44d9be8ec69043ecb44b9697a292d2e78e2b41ad15208aab5a2599517d67e97b945e614299d22c6a42515a6832380ff2250258d34efb394b196f1b6420c68e5ceb0ef595f3beb7af200c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)=0x20)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000080)="38595b83604e23e27c079c452b0cd130bdfadffee69452cdf5623b1189fd0c28fcb69bbd24f966104ceb6189b022b22d3832579d1907373592db801ff159d8b07f2b60a407e61b", &(0x7f0000000200)=""/70, &(0x7f00000002c0)="57483113e2970e0b7ae694f6be3188e84252f24765b9c23e5adc56be782b6cdd3930006b60f5efc0b90a7050f09368059cdccca0e1f6915535f915f52427049eaffb3d23ce97ec8c59ece1792aa825d3c02dc7bf38ac6b478ba10e8d139eba54eef035e64d08707a7f097bcd5c74f853cb462401037bdbf8e3b3ceec1debffd5", &(0x7f0000000340)="f18ea5a558916fc83b46e8a42ddb61b3bf77138a06c0c9fdf4b51e376494cf3fc045e4e440375b6a2fb2415ff47b72a6409e0a1e1020dd7e175f3d3a43ceccb977162ca050354df176b58d1dd0b17f7387258e2f1c37f8ccefba86f30b498ae5fe72fa3db08b859e042635c29e996ece6b0697b7eae04d3c5fa9f08fd0b54f19aaf705ba5689201b75e215d497e2e5c4f55b0d871659f8bc1353a1084e9530", 0x0, r0}, 0x38)

0s ago: executing program 1 (id=2903):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="a01d8de04ed19204acf523ece9badebf18ad99d02d653f7d6954bb59518409866a67a76fe3961698f70a94b27037e49c80c92d311dbbe73380edee7e9fbf10dbf37dfc9292dc000a17298ba87a7964e27d8e2bc1414620702be47baf08e42f89afa8ad05a9b28488998ecd32751f3157de272519225ec14878df695dbc40df094046b99fafb440df79b6dd84e73249b35927a34fd42fed4fc8d5cca5d9638f3cdb8341893b8440e40a140c0c0002"], 0x294}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r7, &(0x7f00000006c0)}, 0x20)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]})

kernel console output (not intermixed with test programs):

596189][ T6075] wg0 speed is unknown, defaulting to 1000
[   71.652981][ T6075] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.689329][    C0] hrtimer: interrupt took 32789 ns
[   71.698578][ T6075] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   71.834809][ T6075] wg0 speed is unknown, defaulting to 1000
[   71.850369][ T6075] wg0 speed is unknown, defaulting to 1000
[   71.865606][ T6075] wg0 speed is unknown, defaulting to 1000
[   71.894582][ T6075] syz.1.68 (6075) used greatest stack depth: 19448 bytes left
[   72.088655][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[   72.339081][ T6102] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   72.370615][ T6105] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.81'.
[   72.427666][ T6110] netlink: 'syz.0.84': attribute type 14 has an invalid length.
[   72.488959][ T6114] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[   72.563936][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   73.029582][ T5865] Bluetooth: hci2: command tx timeout
[   73.112733][ T5865] Bluetooth: hci1: command tx timeout
[   73.113561][   T54] Bluetooth: hci0: command tx timeout
[   75.317024][ T6191] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   75.326063][ T6191] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   75.462695][ T6198] sctp: [Deprecated]: syz.0.122 (pid 6198) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.462695][ T6198] Use struct sctp_sack_info instead
[   76.926286][ T6216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.126'.
[   76.960843][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.008943][ T6216] bridge_slave_0 (unregistering): left allmulticast mode
[   77.012677][ T6216] bridge_slave_0 (unregistering): left promiscuous mode
[   77.015290][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.123714][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.131'.
[   77.486264][ T6245] netlink: 'syz.2.142': attribute type 1 has an invalid length.
[   77.488756][ T6245] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.142'.
[   77.521007][ T6249] netlink: 'syz.2.145': attribute type 10 has an invalid length.
[   77.525139][ T6251] netlink: 'syz.1.143': attribute type 11 has an invalid length.
[   77.526670][ T6249] macvlan0: entered allmulticast mode
[   77.527762][ T6251] netlink: 168 bytes leftover after parsing attributes in process `syz.1.143'.
[   77.541156][ T6249] veth1_vlan: entered allmulticast mode
[   77.545001][ T6249] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   77.730996][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'.
[   77.899979][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   77.918612][ T6272] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.155'.
[   79.372744][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.376148][ T6311] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   79.378689][ T6311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.576800][ T6314] netlink: zone id is out of range
[   79.578618][ T6314] netlink: zone id is out of range
[   79.581782][ T6314] netlink: zone id is out of range
[   79.583775][ T6314] netlink: zone id is out of range
[   79.589830][ T6314] netlink: zone id is out of range
[   79.591712][ T6314] netlink: zone id is out of range
[   79.593410][ T6314] netlink: zone id is out of range
[   79.595189][ T6314] netlink: zone id is out of range
[   79.978992][ T6340] netlink: 'syz.2.186': attribute type 10 has an invalid length.
[   80.093173][ T6336] : entered promiscuous mode
[   80.108375][ T6343] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.186'.
[   80.380534][ T6340] team0 (unregistering): Port device team_slave_0 removed
[   80.388349][ T6340] team0 (unregistering): Port device team_slave_1 removed
[   80.544112][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[   80.710064][ T6363] netlink: 'syz.0.196': attribute type 10 has an invalid length.
[   81.806837][ T6413] vcan0 speed is unknown, defaulting to 1000
[   81.824534][ T6413] vcan0 speed is unknown, defaulting to 1000
[   81.837206][ T6413] vcan0 speed is unknown, defaulting to 1000
[   82.673868][ T6418] warning: `syz.2.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.731648][ T6418] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   82.791358][ T6413] infiniband syz1: set active
[   82.794737][   T10] vcan0 speed is unknown, defaulting to 1000
[   82.800051][ T6413] infiniband syz1: added vcan0
[   82.800839][ T6425] __nla_validate_parse: 3 callbacks suppressed
[   82.800850][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[   82.802400][ T6413] syz1: rxe_create_cq: returned err = -12
[   82.808239][ T6413] infiniband syz1: Couldn't create ib_mad CQ
[   82.822903][ T6413] infiniband syz1: Couldn't open port 1
[   82.863227][ T6413] RDS/IB: syz1: added
[   82.866784][ T6413] smc: adding ib device syz1 with port count 1
[   82.868986][ T6413] smc:    ib device syz1 port 1 has pnetid 
[   82.872657][   T10] vcan0 speed is unknown, defaulting to 1000
[   82.876699][ T6413] vcan0 speed is unknown, defaulting to 1000
[   83.050333][ T6413] vcan0 speed is unknown, defaulting to 1000
[   83.367299][ T6413] vcan0 speed is unknown, defaulting to 1000
[   83.552473][ T6445] netlink: 188 bytes leftover after parsing attributes in process `syz.2.223'.
[   83.581761][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[   83.847285][ T6468] : renamed from pim6reg1
[   85.556023][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.558388][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.564808][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.567144][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.572621][ T6501] delete_channel: no stack
[   85.849116][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   85.859280][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   85.878251][ T6524] netlink: 68 bytes leftover after parsing attributes in process `syz.2.252'.
[   86.023021][ T6540] netlink: 42496 bytes leftover after parsing attributes in process `syz.1.260'.
[   86.051686][ T6542] netlink: 'syz.1.261': attribute type 12 has an invalid length.
[   86.054079][ T6542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.261'.
[   86.174286][ T6550] netlink: 276 bytes leftover after parsing attributes in process `syz.1.265'.
[   86.607186][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'.
[   86.985940][   T54] Bluetooth: hci1: ACL packet too small
[   87.134294][ T6600] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   87.170064][ T6609] erspan0 speed is unknown, defaulting to 1000
[   87.186172][ T6609] erspan0 speed is unknown, defaulting to 1000
[   87.194954][ T6609] erspan0 speed is unknown, defaulting to 1000
[   87.823134][ T6640] __nla_validate_parse: 4 callbacks suppressed
[   87.823149][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'.
[   87.828172][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'.
[   87.853794][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'.
[   87.859136][ T6640] netlink: 2 bytes leftover after parsing attributes in process `syz.1.307'.
[   87.957099][   T33] audit: type=1107 audit(1757960652.346:3): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   87.984508][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'.
[   88.116534][ T6609] infiniband syz2: set active
[   88.118225][ T2313] erspan0 speed is unknown, defaulting to 1000
[   88.132100][ T6609] infiniband syz2: added erspan0
[   88.155801][ T6609] RDS/IB: syz2: added
[   88.158227][ T6609] smc: adding ib device syz2 with port count 1
[   88.161851][ T6609] smc:    ib device syz2 port 1 has pnetid 
[   88.163950][ T2313] erspan0 speed is unknown, defaulting to 1000
[   88.166586][ T6609] erspan0 speed is unknown, defaulting to 1000
[   88.354742][ T6609] erspan0 speed is unknown, defaulting to 1000
[   88.373644][ T6659] netlink: 'syz.1.315': attribute type 3 has an invalid length.
[   88.376302][ T6659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.315'.
[   88.492640][ T6609] erspan0 speed is unknown, defaulting to 1000
[   88.904407][ T6686] C: renamed from team_slave_0 (while UP)
[   88.955694][ T6686] netlink: 'syz.1.325': attribute type 3 has an invalid length.
[   88.958900][ T6686] netlink: 152 bytes leftover after parsing attributes in process `syz.1.325'.
[   88.963850][ T6686] net_ratelimit: 10 callbacks suppressed
[   88.963872][ T6686] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.005154][ T6684] xt_time: unknown flags 0xf4
[   89.392668][ T6716] netlink: 'syz.1.336': attribute type 210 has an invalid length.
[   89.428599][ T6718] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.337'.
[   89.570000][ T6730] wg0 speed is unknown, defaulting to 1000
[   89.575813][ T6730] vcan0 speed is unknown, defaulting to 1000
[   89.727473][ T6730] erspan0 speed is unknown, defaulting to 1000
[   89.742900][ T6739] =======================================================
[   89.742900][ T6739] WARNING: The mand mount option has been deprecated and
[   89.742900][ T6739]          and is ignored by this kernel. Remove the mand
[   89.742900][ T6739]          option from the mount to silence this warning.
[   89.742900][ T6739] =======================================================
[   89.782475][ T6741] delete_channel: no stack
[   90.001217][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.352'.
[   90.261934][ T6766] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.356'.
[   92.824672][   T54] Bluetooth: hci0: ACL packet for unknown connection handle 0
[   93.952469][ T6844] pimreg: tun_chr_ioctl cmd 1074025677
[   93.954584][ T6844] pimreg: linktype set to 778
[   94.179068][ T6852] __nla_validate_parse: 3 callbacks suppressed
[   94.179205][ T6852] netlink: 6 bytes leftover after parsing attributes in process `syz.0.395'.
[   94.411643][ T6865] : renamed from bond_slave_0 (while UP)
[   95.155956][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'.
[   95.163571][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.409'.
[   95.447251][ T6901] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   95.579099][ T6908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.415'.
[   95.697122][ T6915] netlink: 'syz.2.419': attribute type 21 has an invalid length.
[   95.701294][ T6915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.419'.
[   95.718127][ T6917] netlink: 'syz.0.420': attribute type 17 has an invalid length.
[   95.721460][ T6917] netlink: 'syz.0.420': attribute type 16 has an invalid length.
[   95.725249][ T6917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.420'.
[   95.743241][ T6915] netlink: 'syz.2.419': attribute type 4 has an invalid length.
[   95.746297][ T6915] netlink: 'syz.2.419': attribute type 5 has an invalid length.
[   95.748784][ T6915] netlink: 3 bytes leftover after parsing attributes in process `syz.2.419'.
[   95.793457][ T6921] netlink: 'syz.2.422': attribute type 1 has an invalid length.
[   95.854260][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   96.674853][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'.
[   96.678444][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[   96.683003][ T6934] netlink: 2 bytes leftover after parsing attributes in process `syz.2.425'.
[   96.731400][ T6936] netlink: 'syz.0.426': attribute type 5 has an invalid length.
[   96.735426][ T6936] netlink: 'syz.0.426': attribute type 7 has an invalid length.
[   96.828466][ T6946] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[   96.832103][ T6946] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   97.455105][ T6967] syzkaller0: entered promiscuous mode
[   97.458173][ T6967] syzkaller0: entered allmulticast mode
[  100.294158][ T7031] __nla_validate_parse: 2 callbacks suppressed
[  100.294173][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[  100.504026][ T7044] netlink: 56 bytes leftover after parsing attributes in process `syz.0.477'.
[  102.708517][ T7123] syz.1.513 uses obsolete (PF_INET,SOCK_PACKET)
[  103.187053][ T7131] netlink: 10 bytes leftover after parsing attributes in process `syz.0.517'.
[  103.471870][ T7137] netlink: 'syz.0.520': attribute type 16 has an invalid length.
[  103.490524][ T7137] netlink: 156 bytes leftover after parsing attributes in process `syz.0.520'.
[  106.483944][ T7158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.651174][ T7164] netlink: 'syz.0.534': attribute type 21 has an invalid length.
[  106.669615][ T7164] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[  106.672895][ T7164] netlink: 144 bytes leftover after parsing attributes in process `syz.0.534'.
[  106.754361][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'.
[  106.757309][ T7170] netlink: 'syz.0.536': attribute type 2 has an invalid length.
[  106.906296][ T7174] netlink: 'syz.1.538': attribute type 28 has an invalid length.
[  106.910901][ T7176] netlink: 22 bytes leftover after parsing attributes in process `syz.0.539'.
[  106.922197][ T7174] netlink: 'syz.1.538': attribute type 3 has an invalid length.
[  106.926090][ T7174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.538'.
[  107.265306][ T7187] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.543'.
[  107.408707][ T7196] netlink: 1 bytes leftover after parsing attributes in process `syz.1.544'.
[  107.486056][ T7200] netlink: 'syz.0.549': attribute type 11 has an invalid length.
[  107.489266][ T7200] netlink: 'syz.0.549': attribute type 11 has an invalid length.
[  107.700405][ T7204] netlink: 124 bytes leftover after parsing attributes in process `syz.0.551'.
[  107.704435][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.551'.
[  107.826135][ T7208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.935919][ T7210] netlink: 'syz.0.554': attribute type 2 has an invalid length.
[  107.940592][ T7210] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.554'.
[  108.461352][ T7223] netlink: 64 bytes leftover after parsing attributes in process `syz.0.558'.
[  109.892659][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1011740921 wd_nsec: 1011740771
[  110.378329][ T7255] tc_dump_action: action bad kind
[  111.714753][ T7295] __nla_validate_parse: 4 callbacks suppressed
[  111.714770][ T7295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.591'.
[  112.291076][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.297760][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.305667][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.314796][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.318465][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.378783][ T7319] wg0 speed is unknown, defaulting to 1000
[  112.384555][ T7319] vcan0 speed is unknown, defaulting to 1000
[  112.811742][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.872133][ T7319] erspan0 speed is unknown, defaulting to 1000
[  113.086406][ T7332] option changes via remount are deprecated (pid=7330 comm=syz.0.607)
[  113.155994][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.235331][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.380995][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.707416][ T7319] chnl_net:caif_netlink_parms(): no params data found
[  113.873393][ T7357] netlink: 'syz.1.613': attribute type 16 has an invalid length.
[  113.876730][ T7357] netlink: 48 bytes leftover after parsing attributes in process `syz.1.613'.
[  114.389642][ T5865] Bluetooth: hci3: command tx timeout
[  115.605901][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.728854][   T12] bridge_slave_1: left allmulticast mode
[  115.732853][   T12] bridge_slave_1: left promiscuous mode
[  115.736315][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.747918][   T12] bridge_slave_0: left promiscuous mode
[  115.755125][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.469616][ T5865] Bluetooth: hci3: command tx timeout
[  116.646287][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'.
[  116.657252][   T28] smc: removing ib device syz2
[  117.194653][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.201898][   T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  117.206144][   T12] veth1_vlan: left allmulticast mode
[  117.211850][   T12] bond0 (unregistering): Released all slaves
[  117.298608][  T792] erspan0 speed is unknown, defaulting to 1000
[  117.311753][  T792] syz2: Port: 1 Link DOWN
[  117.326061][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.328686][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.333358][ T7319] bridge_slave_0: entered allmulticast mode
[  117.336931][ T7319] bridge_slave_0: entered promiscuous mode
[  117.342884][ T5920] erspan0 speed is unknown, defaulting to 1000
[  117.356231][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.360785][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.364926][ T7319] bridge_slave_1: entered allmulticast mode
[  117.378392][ T7319] bridge_slave_1: entered promiscuous mode
[  117.447513][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.461617][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.530226][ T7319] team0: Port device team_slave_0 added
[  117.537318][ T7319] team0: Port device team_slave_1 added
[  117.633822][ T7393] netlink: 14 bytes leftover after parsing attributes in process `syz.1.626'.
[  117.637766][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.652022][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.684941][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.729119][ T7398] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.627'.
[  117.771369][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.773622][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.785828][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.882176][ T7395] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.627'.
[  117.887451][ T7398] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.627'.
[  118.011002][ T7400] netlink: 'syz.0.629': attribute type 10 has an invalid length.
[  118.028471][ T7319] hsr_slave_0: entered promiscuous mode
[  118.035898][ T7319] hsr_slave_1: entered promiscuous mode
[  118.056044][ T7319] debugfs: 'hsr0' already exists in 'hsr'
[  118.057800][ T7319] Cannot create hsr debugfs directory
[  118.464148][ T7319] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  118.478286][ T7319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  118.493487][ T7319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  118.503672][ T7319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  118.555927][ T5865] Bluetooth: hci3: command tx timeout
[  118.698098][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.743506][ T7319] 8021q: adding VLAN 0 to HW filter on device team0
[  118.769118][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.772200][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.806430][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.809071][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.874764][   T12] hsr_slave_0: left promiscuous mode
[  118.891434][   T12] hsr_slave_1: left promiscuous mode
[  118.923301][   T12] veth1_macvtap: left promiscuous mode
[  118.925964][   T12] veth0_macvtap: left promiscuous mode
[  118.928031][   T12] veth1_vlan: left promiscuous mode
[  118.950326][   T12] veth0_vlan: left promiscuous mode
[  119.026893][ T7440] netlink: 'syz.0.644': attribute type 10 has an invalid length.
[  120.113383][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.152639][ T7319] veth0_vlan: entered promiscuous mode
[  120.162202][ T7319] veth1_vlan: entered promiscuous mode
[  120.206316][ T7319] veth0_macvtap: entered promiscuous mode
[  120.216092][ T7319] veth1_macvtap: entered promiscuous mode
[  120.249633][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.267476][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.282489][ T5919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.285317][ T5919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.299508][ T5919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.303044][ T5919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.394321][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.397548][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.429214][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.438119][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.502814][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'.
[  120.598145][ T7474] syzkaller0: entered promiscuous mode
[  120.607170][ T7473] netlink: 196 bytes leftover after parsing attributes in process `syz.0.655'.
[  120.608878][ T7474] syzkaller0: entered allmulticast mode
[  120.634151][ T5865] Bluetooth: hci3: command tx timeout
[  123.823443][ T7545] netlink: 'syz.1.688': attribute type 33 has an invalid length.
[  123.826966][ T7545] netlink: 164 bytes leftover after parsing attributes in process `syz.1.688'.
[  123.997347][ T7557] tap0: tun_chr_ioctl cmd 1074025677
[  124.002484][ T7557] tap0: linktype set to 769
[  124.262677][ T7569] netlink: 'syz.3.700': attribute type 21 has an invalid length.
[  124.286394][ T7571] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.701'.
[  124.809180][ T7581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.706'.
[  124.881908][   T40] wlan1: Trigger new scan to find an IBSS to join
[  126.605311][ T7651] netlink: 13 bytes leftover after parsing attributes in process `syz.3.737'.
[  127.490553][ T7668] netlink: 104 bytes leftover after parsing attributes in process `syz.0.743'.
[  128.551587][ T7706] netlink: 'syz.3.759': attribute type 2 has an invalid length.
[  128.554621][ T7706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.759'.
[  129.010195][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.769'.
[  129.020216][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'.
[  129.022973][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.769'.
[  129.054164][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'.
[  129.435338][ T7732] netlink: 'syz.1.771': attribute type 1 has an invalid length.
[  129.679243][ T7744] C: renamed from team_slave_0 (while UP)
[  129.739107][ T7746] netlink: 'syz.3.779': attribute type 3 has an invalid length.
[  129.744020][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'.
[  129.747010][ T7749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.778'.
[  129.747304][ T7746] netlink: 'syz.3.779': attribute type 3 has an invalid length.
[  129.752370][ T7749] openvswitch: netlink: Missing key (keys=40, expected=100)
[  129.759590][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'.
[  129.762451][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'.
[  130.118043][ T7764] netlink: 64 bytes leftover after parsing attributes in process `syz.1.786'.
[  130.397381][ T7772] netlink: set zone limit has 4 unknown bytes
[  130.922046][ T7784] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.930489][ T7784] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.002725][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'.
[  131.064415][ T7789] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  131.728542][ T7784] syz.1.795 (7784) used greatest stack depth: 19216 bytes left
[  131.871208][ T7808] netlink: 'syz.1.804': attribute type 1 has an invalid length.
[  132.390403][ T7823] netlink: 'syz.1.811': attribute type 10 has an invalid length.
[  132.393497][ T7823] ipvlan1: entered promiscuous mode
[  132.395611][ T7823] ipvlan1: entered allmulticast mode
[  132.397607][ T7823] veth0_vlan: entered allmulticast mode
[  132.403046][ T7823] bridge0: port 3(ipvlan1) entered blocking state
[  132.405506][ T7823] bridge0: port 3(ipvlan1) entered disabled state
[  132.412491][ T7823] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  132.447407][ T7766] syz.3.787: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  132.453443][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.3.787 Not tainted syzkaller #0 PREEMPT(full) 
[  132.453455][ T7766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.453462][ T7766] Call Trace:
[  132.453466][ T7766]  <TASK>
[  132.453471][ T7766]  dump_stack_lvl+0x189/0x250
[  132.453497][ T7766]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.453508][ T7766]  ? __pfx__printk+0x10/0x10
[  132.453521][ T7766]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  132.453532][ T7766]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  132.453543][ T7766]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  132.453554][ T7766]  warn_alloc+0x214/0x310
[  132.453565][ T7766]  ? __pfx_warn_alloc+0x10/0x10
[  132.453577][ T7766]  ? __get_vm_area_node+0x28f/0x300
[  132.453589][ T7766]  ? hash_netportnet_create+0x354/0xf90
[  132.453603][ T7766]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  132.453629][ T7766]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  132.453640][ T7766]  ? hash_netportnet_create+0x354/0xf90
[  132.453651][ T7766]  ? __get_vm_area_node+0x28f/0x300
[  132.453688][ T7766]  ? hash_netportnet_create+0x354/0xf90
[  132.453699][ T7766]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  132.453711][ T7766]  ? hash_netportnet_create+0x354/0xf90
[  132.453734][ T7766]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  132.453749][ T7766]  ? rcu_is_watching+0x15/0xb0
[  132.453759][ T7766]  ? hash_netportnet_create+0x354/0xf90
[  132.453768][ T7766]  ? hash_netportnet_create+0x354/0xf90
[  132.453777][ T7766]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  132.453791][ T7766]  ? hash_netportnet_create+0x354/0xf90
[  132.453801][ T7766]  ? hash_netportnet_create+0x2fa/0xf90
[  132.453825][ T7766]  hash_netportnet_create+0x354/0xf90
[  132.453836][ T7766]  ? ip_set_create+0x4a2/0x1940
[  132.453852][ T7766]  ? __nla_parse+0x40/0x60
[  132.453863][ T7766]  ? __pfx_hash_netportnet_create+0x10/0x10
[  132.453873][ T7766]  ip_set_create+0xa97/0x1940
[  132.453885][ T7766]  ? ip_set_create+0x4a2/0x1940
[  132.453902][ T7766]  ? __pfx_ip_set_create+0x10/0x10
[  132.453931][ T7766]  nfnetlink_rcv_msg+0xb4d/0x1130
[  132.453945][ T7766]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  132.453972][ T7766]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  132.453983][ T7766]  ? kasan_save_free_info+0x46/0x50
[  132.454016][ T7766]  netlink_rcv_skb+0x208/0x470
[  132.454027][ T7766]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  132.454041][ T7766]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  132.454055][ T7766]  ? bpf_lsm_capable+0x9/0x20
[  132.454068][ T7766]  ? security_capable+0x7e/0x2e0
[  132.454080][ T7766]  nfnetlink_rcv+0x26a/0x2520
[  132.454094][ T7766]  ? __dev_queue_xmit+0x1d79/0x3b50
[  132.454111][ T7766]  ? __dev_queue_xmit+0x27b/0x3b50
[  132.454128][ T7766]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  132.454141][ T7766]  ? __pfx___dev_queue_xmit+0x10/0x10
[  132.454158][ T7766]  ? ref_tracker_free+0x63a/0x7d0
[  132.454167][ T7766]  ? __asan_memcpy+0x40/0x70
[  132.454177][ T7766]  ? __pfx_ref_tracker_free+0x10/0x10
[  132.454187][ T7766]  ? perf_trace_lock+0xec/0x3b0
[  132.454198][ T7766]  ? __pfx_perf_trace_lock+0x10/0x10
[  132.454206][ T7766]  ? skb_clone+0x246/0x3a0
[  132.454220][ T7766]  ? __netlink_deliver_tap+0x807/0x850
[  132.454229][ T7766]  ? netlink_deliver_tap+0x2e/0x1b0
[  132.454241][ T7766]  ? netlink_deliver_tap+0x2e/0x1b0
[  132.454265][ T7766]  netlink_unicast+0x82f/0x9e0
[  132.454279][ T7766]  ? __pfx_netlink_unicast+0x10/0x10
[  132.454288][ T7766]  ? netlink_sendmsg+0x642/0xb30
[  132.454296][ T7766]  ? skb_put+0x11b/0x210
[  132.454307][ T7766]  netlink_sendmsg+0x805/0xb30
[  132.454321][ T7766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.454331][ T7766]  ? aa_sock_msg_perm+0xf1/0x1d0
[  132.454342][ T7766]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.454352][ T7766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.454361][ T7766]  __sock_sendmsg+0x21c/0x270
[  132.454377][ T7766]  ____sys_sendmsg+0x505/0x830
[  132.454391][ T7766]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.454405][ T7766]  ? import_iovec+0x74/0xa0
[  132.454419][ T7766]  ___sys_sendmsg+0x21f/0x2a0
[  132.454431][ T7766]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.454451][ T7766]  ? __fget_files+0x2a/0x420
[  132.454465][ T7766]  ? __fget_files+0x2a/0x420
[  132.454472][ T7766]  ? __fget_files+0x3a0/0x420
[  132.454484][ T7766]  __x64_sys_sendmsg+0x19b/0x260
[  132.454496][ T7766]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.454511][ T7766]  ? rcu_is_watching+0x15/0xb0
[  132.454522][ T7766]  ? do_syscall_64+0xbe/0x3b0
[  132.454534][ T7766]  do_syscall_64+0xfa/0x3b0
[  132.454542][ T7766]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.454551][ T7766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.454559][ T7766]  ? exc_page_fault+0x9f/0xf0
[  132.454568][ T7766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.454577][ T7766] RIP: 0033:0x7effd0f8eba9
[  132.454587][ T7766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.454594][ T7766] RSP: 002b:00007effd1e16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.454603][ T7766] RAX: ffffffffffffffda RBX: 00007effd11d5fa0 RCX: 00007effd0f8eba9
[  132.454610][ T7766] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  132.454615][ T7766] RBP: 00007effd1011e19 R08: 0000000000000000 R09: 0000000000000000
[  132.454620][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.454625][ T7766] R13: 00007effd11d6038 R14: 00007effd11d5fa0 R15: 00007fff8b6cefc8
[  132.454638][ T7766]  </TASK>
[  132.454812][ T7766] Mem-Info:
[  132.629554][ T7766] active_anon:8423 inactive_anon:0 isolated_anon:0
[  132.629554][ T7766]  active_file:12833 inactive_file:38266 isolated_file:0
[  132.629554][ T7766]  unevictable:1768 dirty:53 writeback:0
[  132.629554][ T7766]  slab_reclaimable:9859 slab_unreclaimable:54056
[  132.629554][ T7766]  mapped:18035 shmem:2443 pagetables:1044
[  132.629554][ T7766]  sec_pagetables:0 bounce:0
[  132.629554][ T7766]  kernel_misc_reclaimable:0
[  132.629554][ T7766]  free:249213 free_pcp:21711 free_cma:0
[  132.648493][ T7766] Node 0 active_anon:12100kB inactive_anon:0kB active_file:42748kB inactive_file:145292kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47412kB dirty:92kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6864kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.660742][ T7766] Node 1 active_anon:21592kB inactive_anon:0kB active_file:8584kB inactive_file:7772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24728kB dirty:120kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4432kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.673073][ T7766] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  132.684603][ T7766] lowmem_reserve[]: 0 811 811 811 811
[  132.686912][ T7766] Node 0 DMA32 free:185156kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12100kB inactive_anon:0kB active_file:42748kB inactive_file:145292kB unevictable:3536kB writepending:92kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:44432kB local_pcp:17636kB free_cma:0kB
[  132.700112][ T7766] lowmem_reserve[]: 0 0 0 0 0
[  132.702109][ T7766] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  132.714161][ T7766] lowmem_reserve[]: 0 0 854 854 854
[  132.716539][ T7766] Node 1 Normal free:337720kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21592kB inactive_anon:0kB active_file:8584kB inactive_file:7772kB unevictable:3536kB writepending:120kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42104kB local_pcp:24424kB free_cma:0kB
[  132.729237][ T7766] lowmem_reserve[]: 0 0 0 0 0
[  132.731472][ T7766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  132.737723][ T7766] Node 0 DMA32: 435*4kB (UM) 361*8kB (UME) 270*16kB (UM) 358*32kB (UME) 209*64kB (UM) 125*128kB (UM) 27*256kB (UME) 19*512kB (UM) 14*1024kB (UME) 5*2048kB (U) 23*4096kB (UM) = 185204kB
[  132.745273][ T7766] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  132.751481][ T7766] Node 1 Normal: 3*4kB (ME) 3*8kB (UME) 1*16kB (U) 2*32kB (UE) 3*64kB (ME) 14*128kB (ME) 9*256kB (UME) 9*512kB (UME) 5*1024kB (M) 4*2048kB (ME) 77*4096kB (M) = 337716kB
[  132.758419][ T7766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  132.762450][ T7766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  132.766951][ T7766] 53542 total pagecache pages
[  132.768981][ T7766] 0 pages in swap cache
[  132.770774][ T7766] Free swap  = 124996kB
[  132.772484][ T7766] Total swap = 124996kB
[  132.774156][ T7766] 786301 pages RAM
[  132.775688][ T7766] 0 pages HighMem/MovableOnly
[  132.777469][ T7766] 241347 pages reserved
[  132.778959][ T7766] 0 pages cma reserved
[  132.873066][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.877262][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.393032][ T7839] netlink: 'syz.0.818': attribute type 2 has an invalid length.
[  133.401775][ T7839] netlink: 'syz.0.818': attribute type 9 has an invalid length.
[  134.470114][   T33] audit: type=1107 audit(1757960698.866:4): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  135.472003][ T7931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.592924][ T7941] __nla_validate_parse: 4 callbacks suppressed
[  135.592937][ T7941] netlink: 731 bytes leftover after parsing attributes in process `syz.3.865'.
[  135.632348][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'.
[  135.639522][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'.
[  135.726421][ T7951] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  135.742471][ T7954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.838886][ T7960] netlink: 348 bytes leftover after parsing attributes in process `syz.3.873'.
[  135.940619][ T7967] lo speed is unknown, defaulting to 1000
[  135.944354][ T7967] lo speed is unknown, defaulting to 1000
[  135.947794][ T7967] lo speed is unknown, defaulting to 1000
[  135.966165][ T7967] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  136.011792][ T7967] lo speed is unknown, defaulting to 1000
[  136.015681][ T7967] lo speed is unknown, defaulting to 1000
[  136.026522][ T7967] lo speed is unknown, defaulting to 1000
[  136.204060][ T7981] netlink: 'syz.1.883': attribute type 10 has an invalid length.
[  136.421250][ T7981] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  136.585391][ T7999] netlink: 72 bytes leftover after parsing attributes in process `syz.3.891'.
[  136.659829][ T8005] sctp: [Deprecated]: syz.1.894 (pid 8005) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.659829][ T8005] Use struct sctp_sack_info instead
[  136.962303][ T8026] netlink: 404 bytes leftover after parsing attributes in process `syz.0.904'.
[  137.061848][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'.
[  137.144920][ T8034] sctp: [Deprecated]: syz.0.907 (pid 8034) Use of int in maxseg socket option.
[  137.144920][ T8034] Use struct sctp_assoc_value instead
[  138.145655][ T8090] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.148556][ T8090] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.064809][ T8109] netlink: 'syz.3.937': attribute type 4 has an invalid length.
[  139.169270][ T8110] IPv6: Can't replace route, no match found
[  140.286607][ T8132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.943'.
[  141.010119][ T8146] netlink: 'syz.3.952': attribute type 39 has an invalid length.
[  141.550813][ T8166] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.960'.
[  141.794594][ T8184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.968'.
[  141.928444][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'.
[  141.994729][ T8193] netlink: 100 bytes leftover after parsing attributes in process `syz.1.971'.
[  142.369369][ T8213] netlink: 84 bytes leftover after parsing attributes in process `syz.1.981'.
[  143.297560][ T8241] netlink: 'syz.0.992': attribute type 1 has an invalid length.
[  143.371842][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.993'.
[  143.376228][ T8243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.993'.
[  143.381361][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.993'.
[  143.544060][ T8254] syzkaller1: tun_chr_ioctl cmd 1074025673
[  144.035752][ T8277] netlink: 'syz.3.1008': attribute type 10 has an invalid length.
[  144.045632][ T8277] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.058387][ T8277] team0: Port device batadv0 added
[  144.280489][ T8270] netlink: 'syz.0.1005': attribute type 13 has an invalid length.
[  144.283175][ T8270] netlink: 'syz.0.1005': attribute type 17 has an invalid length.
[  144.959053][ T8270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.313876][ T5865] Bluetooth: hci3: unexpected event 0x0f length: 151 > 4
[  147.140769][ T8367] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1045'.
[  147.147470][ T8367] netlink: 'syz.0.1045': attribute type 2 has an invalid length.
[  147.152239][ T8367] netlink: 'syz.0.1045': attribute type 8 has an invalid length.
[  147.155154][ T8367] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1045'.
[  147.521780][ T8377] netlink: 'syz.3.1053': attribute type 1 has an invalid length.
[  147.815878][ T8392] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1059'.
[  148.129181][ T8417] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1071'.
[  148.423704][ T8428] delete_channel: no stack
[  148.425695][ T8428] delete_channel: no stack
[  148.517801][ T8435] @0: renamed from bond_slave_1 (while UP)
[  148.524410][ T8432] vcan0 speed is unknown, defaulting to 1000
[  148.647903][ T8432] lo speed is unknown, defaulting to 1000
[  149.036934][ T5852] cgroup: fork rejected by pids controller in /syz0
[  149.113442][ T8466] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1089'.
[  149.124247][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'.
[  149.128383][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1089'.
[  149.151050][ T8466] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1089'.
[  149.185889][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'.
[  149.196990][ T8466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1089'.
[  152.247417][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'.
[  152.355914][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'.
[  152.424280][ T8478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1096'.
[  152.434985][ T8478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.431482][ T8497] netlink: 'syz.3.1102': attribute type 6 has an invalid length.
[  153.433966][ T8497] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1102'.
[  153.798912][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.806638][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.810589][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.816141][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.819931][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.897867][ T8499] vcan0 speed is unknown, defaulting to 1000
[  154.034354][ T8505] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1105'.
[  154.078853][ T8499] lo speed is unknown, defaulting to 1000
[  154.122356][ T8511] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1108'.
[  154.222096][ T8499] chnl_net:caif_netlink_parms(): no params data found
[  154.325131][ T8531] netlink: 'syz.3.1115': attribute type 21 has an invalid length.
[  154.332642][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.335609][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.338820][ T8499] bridge_slave_0: entered allmulticast mode
[  154.343920][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'.
[  154.347375][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'.
[  154.352030][ T8499] bridge_slave_0: entered promiscuous mode
[  154.371959][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.375166][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.378381][ T8499] bridge_slave_1: entered allmulticast mode
[  154.381785][ T8499] bridge_slave_1: entered promiscuous mode
[  154.426293][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.435516][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.462190][ T8499] team0: Port device team_slave_0 added
[  154.467728][ T8499] team0: Port device team_slave_1 added
[  154.506811][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.519638][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.532635][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.550295][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.552539][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.564948][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.624356][ T8544] netlink: 'syz.1.1121': attribute type 1 has an invalid length.
[  154.626367][ T8499] hsr_slave_0: entered promiscuous mode
[  154.631767][ T8499] hsr_slave_1: entered promiscuous mode
[  154.634431][ T8499] debugfs: 'hsr0' already exists in 'hsr'
[  154.636641][ T8499] Cannot create hsr debugfs directory
[  155.048608][ T8548] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1123'.
[  155.467757][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1124'.
[  155.636087][ T8499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.812593][ T8499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.829679][   T54] Bluetooth: hci0: command tx timeout
[  155.887216][ T8499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.012803][ T8570] openvswitch: netlink: Flow key attr not present in new flow.
[  156.017207][ T8499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.277417][ T8499] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  156.288613][ T8499] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  156.306215][ T8499] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  156.318110][ T8499] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  156.330318][ T8573] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  156.335816][ T8573] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  156.540508][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.556612][ T8499] 8021q: adding VLAN 0 to HW filter on device team0
[  156.598154][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.601426][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.624066][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.627242][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.895004][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.945254][ T8499] veth0_vlan: entered promiscuous mode
[  156.958154][ T8499] veth1_vlan: entered promiscuous mode
[  156.988065][ T8499] veth0_macvtap: entered promiscuous mode
[  156.995993][ T8499] veth1_macvtap: entered promiscuous mode
[  157.012346][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.041833][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.053235][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.065257][ T5919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.079173][ T5919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.085139][ T5919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.202927][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.213061][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.238635][ T8601] netlink: 'syz.3.1140': attribute type 3 has an invalid length.
[  157.244431][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.247672][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.253993][ T8601] netlink: 'syz.3.1140': attribute type 1 has an invalid length.
[  157.257036][ T8601] __nla_validate_parse: 4 callbacks suppressed
[  157.257048][ T8601] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1140'.
[  157.486095][ T8613] netlink: 'syz.3.1145': attribute type 29 has an invalid length.
[  157.516087][ T8613] netlink: 'syz.3.1145': attribute type 10 has an invalid length.
[  157.914559][   T54] Bluetooth: hci0: command tx timeout
[  157.919741][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.014106][ T8613] team0: Port device bond0 added
[  158.363132][ T8613] syz.3.1145 (8613) used greatest stack depth: 18616 bytes left
[  158.666974][ T8631] netlink: 'syz.1.1151': attribute type 39 has an invalid length.
[  158.987366][ T8631] hsr_slave_0 (unregistering): left promiscuous mode
[  159.217804][ T8637] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.227865][ T8637] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.338136][ T8644] tun0: tun_chr_ioctl cmd 1074812117
[  159.716281][ T8659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'.
[  159.724370][ T8659] unsupported nlmsg_type 40
[  159.992307][   T54] Bluetooth: hci0: command tx timeout
[  160.866023][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'.
[  162.080247][   T54] Bluetooth: hci0: command tx timeout
[  163.207141][ T8734] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1194'.
[  163.620785][ T8724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.627447][ T8734] hsr_slave_0: left promiscuous mode
[  163.631108][ T8734] hsr_slave_1: left promiscuous mode
[  163.659159][   T95] lo speed is unknown, defaulting to 1000
[  163.815934][ T8749] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1201'.
[  163.948340][ T8760] netlink: 'syz.0.1206': attribute type 6 has an invalid length.
[  163.952450][ T8760] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1206'.
[  163.991596][ T8765] netlink: 'syz.1.1210': attribute type 10 has an invalid length.
[  164.241690][ T8765] batman_adv: batadv0: Adding interface: netdevsim0
[  164.244198][ T8765] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.255090][ T8765] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  164.397123][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'.
[  164.674452][ T8766] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  164.679857][ T8766] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  164.994484][ T8796] vcan0 speed is unknown, defaulting to 1000
[  165.383247][ T8796] lo speed is unknown, defaulting to 1000
[  168.222755][ T8857] siw: device registration error -23
[  168.364107][ T8869] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1250'.
[  169.062771][ T8890] syzkaller0: entered promiscuous mode
[  169.065033][ T8890] syzkaller0: entered allmulticast mode
[  170.534094][ T8895] sit0: entered promiscuous mode
[  170.536258][ T8895] sit0: entered allmulticast mode
[  170.664982][ T8910] netlink: 'syz.3.1266': attribute type 4 has an invalid length.
[  170.793999][ T8922] netlink: 'syz.1.1273': attribute type 29 has an invalid length.
[  170.813750][ T8918] netlink: 'syz.3.1270': attribute type 8 has an invalid length.
[  170.816409][ T8918] netlink: 'syz.3.1270': attribute type 3 has an invalid length.
[  170.819250][ T8918] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1270'.
[  170.847920][ T8918] netlink: 'syz.3.1270': attribute type 13 has an invalid length.
[  170.873366][ T8918] netlink: 'syz.3.1270': attribute type 17 has an invalid length.
[  171.410147][ T8918] sit0: left promiscuous mode
[  171.412156][ T8918] sit0: left allmulticast mode
[  171.705178][ T8918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.904661][ T8949] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1284'.
[  172.231904][ T8964] netlink: 'syz.3.1288': attribute type 1 has an invalid length.
[  172.247628][ T8964] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1288'.
[  175.172272][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.174978][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.191335][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.194177][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.227560][ T8981] team0: Port device batadv0 removed
[  175.718495][ T9018] netlink: 'syz.0.1315': attribute type 29 has an invalid length.
[  176.006048][ T9034] netlink: 'syz.3.1322': attribute type 15 has an invalid length.
[  176.145403][   T33] audit: type=1107 audit(1757960740.536:5): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  176.263790][ T9047] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1328'.
[  176.268683][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'.
[  176.438395][ T9059] netlink: 'syz.3.1335': attribute type 33 has an invalid length.
[  176.440427][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1334'.
[  176.443694][ T9059] netlink: 'syz.3.1335': attribute type 3 has an invalid length.
[  176.448842][ T9059] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1335'.
[  176.648413][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'.
[  176.977523][ T9090] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1349'.
[  177.027439][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'.
[  177.286745][ T9105] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1355'.
[  177.973977][ T9114] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  178.150589][ T9118] netlink: 'syz.1.1361': attribute type 39 has an invalid length.
[  178.665011][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'.
[  178.771563][ T9144] netlink: 'syz.0.1371': attribute type 10 has an invalid length.
[  178.846373][ T9144] team0: Device ipvlan1 failed to register rx_handler
[  179.486000][ T9145] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  179.492196][ T9147] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  179.534185][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'.
[  180.463941][ T9216] netlink: 'syz.1.1405': attribute type 13 has an invalid length.
[  180.490851][ T9216] erspan0: refused to change device tx_queue_len
[  180.493446][ T9216] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  180.551077][ T9223] netlink: 'syz.1.1408': attribute type 1 has an invalid length.
[  181.004098][ T9256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.173365][ T9286] __nla_validate_parse: 2 callbacks suppressed
[  182.173386][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1436'.
[  183.418151][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'.
[  183.430717][ T9304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1444'.
[  183.678871][ T9313] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1448'.
[  183.734850][ T9316] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1449'.
[  184.138520][ T9330] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1456'.
[  185.604266][ T9381] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1475'.
[  185.687335][ T9389] netlink: 'syz.1.1479': attribute type 1 has an invalid length.
[  185.843029][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'.
[  186.295017][ T9433] netlink: 'syz.3.1500': attribute type 1 has an invalid length.
[  186.827728][ T9477] netlink: 'syz.3.1521': attribute type 1 has an invalid length.
[  186.997001][ T9482] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1523'.
[  187.014314][ T9482] netlink: 'syz.3.1523': attribute type 4 has an invalid length.
[  187.018128][ T9482] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1523'.
[  187.205626][ T9498] netlink: 'syz.0.1531': attribute type 10 has an invalid length.
[  187.814651][ T9513] netlink: 'syz.0.1537': attribute type 39 has an invalid length.
[  187.992704][ T9521] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1540'.
[  188.214754][ T9533] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1546'.
[  190.956674][ T9561] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1558'.
[  190.963404][ T9561] netlink: zone id is out of range
[  190.965159][ T9561] netlink: get zone limit has 8 unknown bytes
[  190.977701][ T9564] netlink: 'syz.1.1560': attribute type 1 has an invalid length.
[  191.093673][ T9567] netlink: 'syz.0.1561': attribute type 4 has an invalid length.
[  191.096344][ T9567] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1561'.
[  191.108113][ T9570] delete_channel: no stack
[  191.143390][ T9567] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  191.271927][ T5865] Bluetooth: hci2: command 0x0406 tx timeout
[  191.275632][ T9577] netlink: 'syz.1.1566': attribute type 10 has an invalid length.
[  191.278171][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1566'.
[  191.282397][ T9577] batadv0: entered promiscuous mode
[  191.285201][ T9577] bridge0: port 3(batadv0) entered blocking state
[  191.288715][ T9577] bridge0: port 3(batadv0) entered disabled state
[  191.293918][ T9577] batadv0: entered allmulticast mode
[  191.297489][ T9577] bridge0: port 3(batadv0) entered blocking state
[  191.299933][ T9577] bridge0: port 3(batadv0) entered forwarding state
[  191.679956][ T5886] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  191.684265][ T5886] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  191.926712][ T9619] syzkaller0: entered promiscuous mode
[  191.928796][ T9619] syzkaller0: entered allmulticast mode
[  192.078740][ T9622] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1584'.
[  193.015926][ T9640] netlink: 'syz.1.1590': attribute type 3 has an invalid length.
[  193.018445][ T9640] netlink: 'syz.1.1590': attribute type 1 has an invalid length.
[  193.021103][ T9640] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1590'.
[  194.312765][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.317004][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  195.650644][ T9662] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.1600'.
[  195.656754][ T9662] netlink: 62227 bytes leftover after parsing attributes in process `syz.3.1600'.
[  196.087630][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1610'.
[  196.212318][ T9699] netlink: 'syz.1.1617': attribute type 1 has an invalid length.
[  196.277113][ T9707] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1621'.
[  196.366448][ T9714] netlink: 'syz.0.1624': attribute type 12 has an invalid length.
[  196.369139][ T9714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1624'.
[  196.487024][ T9722] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1628'.
[  196.785495][ T9732] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.1631'.
[  196.813651][ T9732] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1631'.
[  196.818029][ T9732] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.1631'.
[  197.624970][ T9744] netlink: 'syz.3.1638': attribute type 10 has an invalid length.
[  197.772341][ T9744] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  198.091348][ T9761] __nla_validate_parse: 2 callbacks suppressed
[  198.091361][ T9761] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1646'.
[  198.097053][ T9761] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1646'.
[  198.281521][ T5886] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.442678][ T9775] netlink: 'syz.0.1652': attribute type 29 has an invalid length.
[  198.446730][ T9775] netlink: 'syz.0.1652': attribute type 29 has an invalid length.
[  198.452810][ T9775] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1652'.
[  198.456522][ T9775] unsupported nla_type 58
[  201.903271][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'.
[  201.907018][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'.
[  202.005801][ T9808] netlink: 'syz.3.1665': attribute type 2 has an invalid length.
[  202.008458][ T9808] netlink: 130532 bytes leftover after parsing attributes in process `syz.3.1665'.
[  203.469185][ T9858] vcan0 speed is unknown, defaulting to 1000
[  203.852606][ T9890] netlink: 'syz.1.1700': attribute type 29 has an invalid length.
[  203.855145][ T9890] netlink: 'syz.1.1700': attribute type 3 has an invalid length.
[  203.857720][ T9890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1700'.
[  204.487528][ T9858] lo speed is unknown, defaulting to 1000
[  205.435308][ T9930] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.438743][ T9930] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.776456][ T9962] netlink: 'syz.3.1732': attribute type 3 has an invalid length.
[  205.781281][ T9962] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1732'.
[  205.898970][ T9966] netlink: 'syz.0.1734': attribute type 5 has an invalid length.
[  205.920757][ T9966] netlink: 'syz.0.1734': attribute type 15 has an invalid length.
[  206.454369][ T9989] netlink: 'syz.3.1745': attribute type 2 has an invalid length.
[  206.457555][ T9989] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1745'.
[  206.654475][T10002] netlink: 'syz.3.1751': attribute type 3 has an invalid length.
[  206.657389][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'.
[  207.088165][T10023] netlink: 9292 bytes leftover after parsing attributes in process `syz.3.1761'.
[  207.338128][   T33] audit: type=1107 audit(1757960771.726:6): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  207.365617][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'.
[  207.369125][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'.
[  207.680128][T10062] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  207.807818][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'.
[  207.811424][T10066] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1778'.
[  208.170676][T10074] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1785'.
[  211.715105][T10087] __nla_validate_parse: 1 callbacks suppressed
[  211.715117][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1789'.
[  211.721634][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1789'.
[  211.884086][T10095] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1793'.
[  213.035417][T10116] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1801'.
[  213.289561][T10135] netlink: 'syz.1.1810': attribute type 25 has an invalid length.
[  213.424461][T10149] netlink: 'syz.3.1815': attribute type 10 has an invalid length.
[  213.437419][T10149] 8021q: adding VLAN 0 to HW filter on device team0
[  213.539196][T10147] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1814'.
[  213.547070][T10147] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1814'.
[  213.704370][T10158] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1818'.
[  213.962879][T10172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1821'.
[  214.367679][T10193] lo: entered allmulticast mode
[  214.372704][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'.
[  214.376690][T10193] lo: entered promiscuous mode
[  214.378228][T10193] lo: left allmulticast mode
[  214.417810][T10195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1828'.
[  214.422905][T10195] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  214.477535][T10197] _Z`Ԁ@S: entered promiscuous mode
[  214.862041][T10221] netlink: 'syz.1.1836': attribute type 21 has an invalid length.
[  215.497359][T10237] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  215.508027][T10237] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  215.524878][T10239] netlink: 'syz.3.1842': attribute type 21 has an invalid length.
[  216.856560][T10272] lo: entered promiscuous mode
[  219.105599][T10286] __nla_validate_parse: 5 callbacks suppressed
[  219.105612][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'.
[  219.308716][T10288] wg0 speed is unknown, defaulting to 1000
[  219.315495][T10288] wg0 speed is unknown, defaulting to 1000
[  219.339647][T10288] wg0 speed is unknown, defaulting to 1000
[  219.395004][T10297] lo: entered promiscuous mode
[  219.596062][T10306] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1863'.
[  219.621864][T10288] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  219.837735][T10288] wg0 speed is unknown, defaulting to 1000
[  219.853093][T10288] wg0 speed is unknown, defaulting to 1000
[  219.868062][T10288] wg0 speed is unknown, defaulting to 1000
[  219.892886][T10288] wg0 speed is unknown, defaulting to 1000
[  219.983494][T10322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1869'.
[  220.038070][T10324] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1870'.
[  220.864135][T10366] netlink: 'syz.0.1880': attribute type 4 has an invalid length.
[  220.867621][T10366] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1880'.
[  220.936049][T10366] .`: renamed from bond0 (while UP)
[  221.244629][T10371] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1881'.
[  221.919930][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'.
[  223.043346][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1893'.
[  223.048667][T10422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1893'.
[  223.063549][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1893'.
[  224.106208][T10459] lo: left promiscuous mode
[  224.108145][T10459] lo: entered allmulticast mode
[  224.141754][T10459] __nla_validate_parse: 3 callbacks suppressed
[  224.141771][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'.
[  224.148983][T10459] lo: entered promiscuous mode
[  224.154010][T10459] lo: left allmulticast mode
[  224.538921][T10478] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1913'.
[  225.365943][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'.
[  225.393245][T10489] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  225.431512][T10489] netlink: 'syz.3.1916': attribute type 10 has an invalid length.
[  225.588850][T10489] team0: Port device dummy0 added
[  225.613204][T10504] netlink: 'syz.0.1920': attribute type 4 has an invalid length.
[  225.616327][T10504] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1920'.
[  225.669073][T10506] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  225.676854][T10506] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  225.766187][T10489] syz.3.1916 (10489) used greatest stack depth: 18296 bytes left
[  225.927641][T10520] veth0_vlan: entered allmulticast mode
[  226.083250][T10530] veth0_vlan: left promiscuous mode
[  226.091908][T10530] veth0_vlan: entered promiscuous mode
[  226.123068][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'.
[  226.172597][T10535] netlink: 'syz.0.1929': attribute type 4 has an invalid length.
[  226.291350][T10539] lo: left promiscuous mode
[  226.293185][T10539] lo: entered allmulticast mode
[  226.326195][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'.
[  226.369210][T10537] netlink: 'syz.3.1931': attribute type 29 has an invalid length.
[  226.381548][T10537] netlink: 'syz.3.1931': attribute type 29 has an invalid length.
[  226.398046][T10541] netlink: 54595 bytes leftover after parsing attributes in process `syz.0.1932'.
[  226.404263][T10541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1932'.
[  226.429022][T10542] netlink: 'syz.3.1931': attribute type 29 has an invalid length.
[  226.432054][T10542] netlink: 'syz.3.1931': attribute type 29 has an invalid length.
[  226.615318][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'.
[  226.783039][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'.
[  226.792029][T10557] netlink: 'syz.3.1937': attribute type 41 has an invalid length.
[  226.994421][T10564] lo: entered promiscuous mode
[  226.996214][T10564] lo: left allmulticast mode
[  227.376302][T10583] lo: left promiscuous mode
[  227.377817][T10583] lo: entered allmulticast mode
[  227.384701][T10583] lo: entered promiscuous mode
[  227.386587][T10583] lo: left allmulticast mode
[  227.436398][T10585] netlink: 'syz.1.1948': attribute type 29 has an invalid length.
[  227.447906][T10585] netlink: 'syz.1.1948': attribute type 3 has an invalid length.
[  228.777926][T10638] vcan0 speed is unknown, defaulting to 1000
[  229.199223][T10651] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  229.208423][T10638] lo speed is unknown, defaulting to 1000
[  229.211572][T10638] wg0 speed is unknown, defaulting to 1000
[  229.256711][T10655] __nla_validate_parse: 10 callbacks suppressed
[  229.256724][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'.
[  229.266676][T10655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1966'.
[  230.621518][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'.
[  230.625313][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1974'.
[  230.789790][T10688] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1975'.
[  231.210844][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'.
[  231.213830][T10709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1981'.
[  231.340757][T10722] bridge0: port 4(ip6gretap0) entered blocking state
[  231.343331][T10722] bridge0: port 4(ip6gretap0) entered disabled state
[  231.345750][T10722] ip6gretap0: entered allmulticast mode
[  231.348591][T10722] ip6gretap0: entered promiscuous mode
[  231.354831][T10722] bridge0: port 4(ip6gretap0) entered blocking state
[  231.357671][T10722] bridge0: port 4(ip6gretap0) entered forwarding state
[  231.417772][T10728] veth0_vlan: left promiscuous mode
[  231.422217][T10728] veth0_vlan: entered promiscuous mode
[  232.149843][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1988'.
[  232.521344][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1992'.
[  232.549611][   T54] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  232.603700][T10750] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1995'.
[  232.667842][T10753] netlink: 'syz.1.1996': attribute type 210 has an invalid length.
[  232.933782][   T54] Bluetooth: hci2: Malformed LE Event: 0x0d
[  232.978856][T10771] netlink: 'syz.3.2001': attribute type 25 has an invalid length.
[  232.981717][T10771] netlink: 'syz.3.2001': attribute type 28 has an invalid length.
[  233.273672][T10792] netlink: 'syz.1.2007': attribute type 13 has an invalid length.
[  233.525697][T10792] bridge0: port 4(ip6gretap0) entered disabled state
[  233.541465][T10792] bridge0: port 3(batadv0) entered disabled state
[  233.544067][T10792] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.768653][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.787561][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.170072][   T24] vcan0 speed is unknown, defaulting to 1000
[  234.172519][   T24] syz1: Port: 1 Link DOWN
[  234.174820][   T24] vcan0 speed is unknown, defaulting to 1000
[  234.178346][   T95] wg0 speed is unknown, defaulting to 1000
[  234.181510][ T5919] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.181743][   T95] syz0: Port: 1 Link DOWN
[  234.194208][ T5919] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.198846][ T5919] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.292288][T10819] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  234.439020][T10830] __nla_validate_parse: 8 callbacks suppressed
[  234.439032][T10830] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2017'.
[  234.633231][   T54] Bluetooth: hci3: command tx timeout
[  235.056536][T10835] netlink: 'syz.0.2018': attribute type 29 has an invalid length.
[  235.063760][T10833] netlink: 'syz.0.2018': attribute type 10 has an invalid length.
[  235.169542][T10833] 8021q: adding VLAN 0 to HW filter on device .`
[  235.195601][T10833] team0: Port device .` added
[  235.595293][ T5865] Bluetooth: hci2: ISO packet for unknown connection handle 15
[  235.971186][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2027'.
[  236.024911][T10878] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2031'.
[  236.030589][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2031'.
[  236.034101][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'.
[  236.037936][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2030'.
[  236.043002][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2030'.
[  236.127730][T10884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2032'.
[  236.764800][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'.
[  236.768337][T10907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2039'.
[  236.910930][T10908] netlink: 'syz.1.2038': attribute type 4 has an invalid length.
[  237.431916][ T5865] Bluetooth: hci3: command 0x0406 tx timeout
[  237.558190][T10927] netlink: 'syz.3.2044': attribute type 1 has an invalid length.
[  237.595542][T10927] netlink: 'syz.3.2044': attribute type 29 has an invalid length.
[  237.946053][T10941] vcan0 speed is unknown, defaulting to 1000
[  238.120395][T10941] lo speed is unknown, defaulting to 1000
[  238.123376][T10941] wg0 speed is unknown, defaulting to 1000
[  242.219923][T11032] __nla_validate_parse: 13 callbacks suppressed
[  242.219940][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2071'.
[  242.231790][T11031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2071'.
[  242.383567][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'.
[  242.406847][T11046] : entered promiscuous mode
[  242.431270][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'.
[  242.497972][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'.
[  242.502438][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2076'.
[  242.536971][T11041] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2073'.
[  242.617582][T11055] netlink: 'syz.1.2078': attribute type 39 has an invalid length.
[  242.688953][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'.
[  242.692052][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2080'.
[  242.744137][T11070] netlink: 'syz.0.2082': attribute type 21 has an invalid length.
[  242.746632][T11070] netlink: 14565 bytes leftover after parsing attributes in process `syz.0.2082'.
[  242.811150][T11072] netlink: 'syz.3.2083': attribute type 2 has an invalid length.
[  242.868417][T11074] netlink: 'syz.0.2084': attribute type 10 has an invalid length.
[  242.874271][T11075] netlink: 'syz.0.2084': attribute type 10 has an invalid length.
[  242.877648][T11075] batman_adv: batadv0: Adding interface: 
[  242.881526][T11075] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.890218][T11075] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  242.955011][T11088] netlink: 'syz.1.2088': attribute type 4 has an invalid length.
[  242.960167][T11088] wlan1: mtu less than device minimum
[  243.494254][T11141] netlink: 'syz.3.2104': attribute type 210 has an invalid length.
[  243.561931][T11143] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  243.711851][T11151] lo: left promiscuous mode
[  243.713962][T11151] lo: entered allmulticast mode
[  243.734931][T11151] lo: entered promiscuous mode
[  243.736890][T11151] lo: left allmulticast mode
[  243.800056][T11148] netlink: zone id is out of range
[  243.802366][T11148] netlink: zone id is out of range
[  243.810867][T11148] netlink: zone id is out of range
[  243.812952][T11148] netlink: zone id is out of range
[  243.815687][T11148] netlink: zone id is out of range
[  243.818034][T11148] netlink: zone id is out of range
[  243.827189][T11148] netlink: zone id is out of range
[  243.828926][T11148] netlink: zone id is out of range
[  243.888044][T11148] netlink: set zone limit has 4 unknown bytes
[  244.108412][T11176] lo: left promiscuous mode
[  244.112328][T11176] lo: entered allmulticast mode
[  244.116792][    T9] lo speed is unknown, defaulting to 1000
[  244.119138][    T9] syz2: Port: 1 Link DOWN
[  244.121631][T11176] lo: entered promiscuous mode
[  244.123599][T11176] lo: left allmulticast mode
[  244.133619][   T24] lo speed is unknown, defaulting to 1000
[  244.136113][   T24] syz2: Port: 1 Link ACTIVE
[  244.196867][T11183] netlink: 'syz.0.2117': attribute type 1 has an invalid length.
[  245.487822][T11220] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  245.494019][T11219] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  246.048933][ T5919] bridge_slave_1: left allmulticast mode
[  246.059823][ T5919] bridge_slave_1: left promiscuous mode
[  246.063446][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.075956][ T5919] gretap0: left allmulticast mode
[  246.078140][ T5919] gretap0: left promiscuous mode
[  246.085838][ T5919] GPL: port 1(gretap0) entered disabled state
[  247.227076][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.234924][ T5919] bond0 (unregistering): (slave 4@0): Releasing backup interface
[  247.240103][ T5919] bond0 (unregistering): Released all slaves
[  247.329721][ T5919] : left promiscuous mode
[  247.928843][T11265] __nla_validate_parse: 13 callbacks suppressed
[  247.928860][T11265] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2139'.
[  248.112885][T11269] netlink: 'syz.0.2140': attribute type 5 has an invalid length.
[  248.115440][T11269] netlink: 'syz.0.2140': attribute type 7 has an invalid length.
[  248.118411][ T5919] hsr_slave_0: left promiscuous mode
[  248.127517][ T5919] hsr_slave_1: left promiscuous mode
[  248.128268][T11269] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2140'.
[  248.134965][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.138681][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.145606][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.148325][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.187162][ T5919] veth1_macvtap: left promiscuous mode
[  248.190479][ T5919] veth0_macvtap: left promiscuous mode
[  248.192928][ T5919] veth1_vlan: left promiscuous mode
[  248.194706][ T5919] veth0_vlan: left promiscuous mode
[  248.786779][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  248.827948][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  249.252458][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2141'.
[  249.256338][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2141'.
[  249.348410][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'.
[  249.793242][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'.
[  249.797388][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'.
[  249.937236][T11329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.943355][T11329] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2157'.
[  249.946996][T11329] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2157'.
[  249.952184][T11329] netlink: 'syz.1.2157': attribute type 2 has an invalid length.
[  249.975768][T11331] netlink: 'syz.0.2158': attribute type 39 has an invalid length.
[  250.268086][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'.
[  250.986978][T11368] netlink: 'syz.1.2169': attribute type 1 has an invalid length.
[  251.369995][T11376] delete_channel: no stack
[  254.337260][T11385] warn_alloc: 3 callbacks suppressed
[  254.337276][T11385] syz.1.2174: vmalloc error: size 2625536, failed to allocated page array size 5128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  254.346504][T11385] CPU: 0 UID: 0 PID: 11385 Comm: syz.1.2174 Not tainted syzkaller #0 PREEMPT(full) 
[  254.346518][T11385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.346525][T11385] Call Trace:
[  254.346529][T11385]  <TASK>
[  254.346536][T11385]  dump_stack_lvl+0x189/0x250
[  254.346555][T11385]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.346570][T11385]  ? __pfx__printk+0x10/0x10
[  254.346584][T11385]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  254.346596][T11385]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  254.346606][T11385]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  254.346617][T11385]  warn_alloc+0x214/0x310
[  254.346629][T11385]  ? __pfx_warn_alloc+0x10/0x10
[  254.346641][T11385]  ? __get_vm_area_node+0x28f/0x300
[  254.346654][T11385]  ? pfifo_fast_init+0x10d/0x6b0
[  254.346665][T11385]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  254.346692][T11385]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  254.346707][T11385]  ? rcu_is_watching+0x15/0xb0
[  254.346717][T11385]  ? pfifo_fast_init+0x10d/0x6b0
[  254.346725][T11385]  ? pfifo_fast_init+0x10d/0x6b0
[  254.346732][T11385]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  254.346745][T11385]  ? pfifo_fast_init+0x10d/0x6b0
[  254.346757][T11385]  pfifo_fast_init+0x10d/0x6b0
[  254.346767][T11385]  qdisc_create_dflt+0x13b/0x4e0
[  254.346778][T11385]  mq_init+0x2dc/0x660
[  254.346794][T11385]  ? __pfx_mq_init+0x10/0x10
[  254.346804][T11385]  ? qdisc_alloc+0x7a1/0xaa0
[  254.346818][T11385]  qdisc_create_dflt+0x13b/0x4e0
[  254.346826][T11385]  ? dev_activate+0x1a9/0x1150
[  254.346836][T11385]  dev_activate+0x1ce/0x1150
[  254.346851][T11385]  __dev_open+0x69c/0x880
[  254.346863][T11385]  ? __pfx___dev_open+0x10/0x10
[  254.346876][T11385]  __dev_change_flags+0x1ea/0x6d0
[  254.346890][T11385]  ? __pfx___dev_change_flags+0x10/0x10
[  254.346900][T11385]  ? full_name_hash+0x92/0xe0
[  254.346919][T11385]  netif_change_flags+0x88/0x1a0
[  254.346935][T11385]  dev_change_flags+0x130/0x260
[  254.346955][T11385]  dev_ioctl+0x7b4/0x1150
[  254.346968][T11385]  sock_do_ioctl+0x22c/0x300
[  254.346984][T11385]  ? __pfx_sock_do_ioctl+0x10/0x10
[  254.347004][T11385]  sock_ioctl+0x576/0x790
[  254.347017][T11385]  ? __pfx_sock_ioctl+0x10/0x10
[  254.347029][T11385]  ? __fget_files+0x2a/0x420
[  254.347036][T11385]  ? __fget_files+0x3a0/0x420
[  254.347043][T11385]  ? __fget_files+0x2a/0x420
[  254.347052][T11385]  ? bpf_lsm_file_ioctl+0x9/0x20
[  254.347063][T11385]  ? __pfx_sock_ioctl+0x10/0x10
[  254.347075][T11385]  __se_sys_ioctl+0xfc/0x170
[  254.347087][T11385]  do_syscall_64+0xfa/0x3b0
[  254.347099][T11385]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.347109][T11385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.347117][T11385]  ? exc_page_fault+0x9f/0xf0
[  254.347127][T11385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.347135][T11385] RIP: 0033:0x7fd1cb58eba9
[  254.347145][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.347152][T11385] RSP: 002b:00007fd1cc367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.347162][T11385] RAX: ffffffffffffffda RBX: 00007fd1cb7d5fa0 RCX: 00007fd1cb58eba9
[  254.347168][T11385] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000008
[  254.347173][T11385] RBP: 00007fd1cb611e19 R08: 0000000000000000 R09: 0000000000000000
[  254.347178][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.347183][T11385] R13: 00007fd1cb7d6038 R14: 00007fd1cb7d5fa0 R15: 00007ffe46396e78
[  254.347197][T11385]  </TASK>
[  254.347201][T11385] Mem-Info:
[  254.467125][T11385] active_anon:16 inactive_anon:2901 isolated_anon:17
[  254.467125][T11385]  active_file:1183 inactive_file:5179 isolated_file:0
[  254.467125][T11385]  unevictable:1751 dirty:20 writeback:0
[  254.467125][T11385]  slab_reclaimable:10299 slab_unreclaimable:251456
[  254.467125][T11385]  mapped:16344 shmem:2092 pagetables:992
[  254.467125][T11385]  sec_pagetables:0 bounce:0
[  254.467125][T11385]  kernel_misc_reclaimable:0
[  254.467125][T11385]  free:64699 free_pcp:1618 free_cma:0
[  254.484101][T11385] Node 0 active_anon:28kB inactive_anon:11544kB active_file:2828kB inactive_file:20680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23356kB dirty:56kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6780kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  254.495239][T11385] Node 1 active_anon:104kB inactive_anon:60kB active_file:2176kB inactive_file:36kB unevictable:3468kB isolated(anon):68kB isolated(file):0kB mapped:42088kB dirty:24kB writeback:0kB shmem:3564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4400kB pagetables:1976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  254.505016][T11385] Node 0 DMA free:5120kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  254.514428][T11385] lowmem_reserve[]: 0 811 811 811 811
[  254.516169][T11385] Node 0 DMA32 free:142968kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:11544kB active_file:2828kB inactive_file:20680kB unevictable:3536kB writepending:56kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:1368kB local_pcp:456kB free_cma:0kB
[  254.526017][T11385] lowmem_reserve[]: 0 0 0 0 0
[  254.527541][T11385] Node 1 DMA32 free:24440kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  254.537142][T11385] lowmem_reserve[]: 0 0 854 854 854
[  254.538805][T11385] Node 1 Normal free:86268kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:104kB inactive_anon:60kB active_file:2176kB inactive_file:36kB unevictable:3468kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:4804kB local_pcp:2060kB free_cma:0kB
[  254.548995][T11385] lowmem_reserve[]: 0 0 0 0 0
[  254.550931][T11385] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 5120kB
[  254.555132][T11385] Node 0 DMA32: 253*4kB (ME) 222*8kB (UME) 184*16kB (ME) 185*32kB (UME) 150*64kB (UME) 281*128kB (UME) 107*256kB (UME) 56*512kB (UME) 29*1024kB (UME) 0*2048kB 0*4096kB = 142980kB
[  254.560655][T11385] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 4*4096kB (M) = 24440kB
[  254.565409][T11385] Node 1 Normal: 1*4kB (M) 1*8kB (E) 1*16kB (M) 162*32kB (UM) 216*64kB (UME) 143*128kB (UME) 59*256kB (UM) 34*512kB (U) 16*1024kB (UM) 0*2048kB 0*4096kB = 86236kB
[  254.571013][T11385] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  254.574288][T11385] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  254.577249][T11385] 8552 total pagecache pages
[  254.578732][T11385] 26 pages in swap cache
[  254.580250][T11385] Free swap  = 96016kB
[  254.581613][T11385] Total swap = 124996kB
[  254.583150][T11385] 786301 pages RAM
[  254.584439][T11385] 0 pages HighMem/MovableOnly
[  254.586187][T11385] 241347 pages reserved
[  254.587479][T11385] 0 pages cma reserved
[  255.629026][T11385] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  255.651737][T11392] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.674527][T11392] bridge_slave_0 (unregistering): left allmulticast mode
[  255.677370][T11392] bridge_slave_0 (unregistering): left promiscuous mode
[  255.680508][T11392] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.769270][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.772692][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.846336][T11394] team0: Port device .` removed
[  255.852721][T11394] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.861873][T11394] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.868467][T11394] .` (unregistering): Released all slaves
[  256.031898][T11408] __nla_validate_parse: 8 callbacks suppressed
[  256.031916][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'.
[  256.038050][T11408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.851314][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'.
[  256.855062][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2184'.
[  256.926377][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'.
[  256.932620][T11418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2186'.
[  257.180683][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2192'.
[  257.185572][T11433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2192'.
[  257.207829][T11429] veth1_macvtap: left promiscuous mode
[  257.269193][T11438] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2194'.
[  258.056615][T11438] vcan0 speed is unknown, defaulting to 1000
[  258.068841][T11448] netlink: 'syz.0.2195': attribute type 10 has an invalid length.
[  258.665320][T11460] netlink: 'syz.1.2198': attribute type 2 has an invalid length.
[  258.668913][T11460] netlink: 'syz.1.2198': attribute type 8 has an invalid length.
[  258.673568][T11460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2198'.
[  259.076919][T11479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2204'.
[  259.146001][T11438] lo speed is unknown, defaulting to 1000
[  259.154812][T11438] wg0 speed is unknown, defaulting to 1000
[  259.895238][T11500] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  259.912951][T11500] netlink: 'syz.0.2210': attribute type 1 has an invalid length.
[  261.241821][T11543] __nla_validate_parse: 6 callbacks suppressed
[  261.241832][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'.
[  261.275319][T11543] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  261.325810][T11545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2224'.
[  261.329272][T11545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2224'.
[  261.333049][T11545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2224'.
[  261.367106][T11547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2225'.
[  261.585291][T11568] syzkaller1: tun_chr_ioctl cmd 1074025677
[  261.587503][T11568] syzkaller1: linktype set to 780
[  261.605983][T11566] netlink: 'syz.1.2230': attribute type 13 has an invalid length.
[  262.217093][T11593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.263516][T11597] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2241'.
[  262.273608][T11597] netlink: 'syz.3.2241': attribute type 4 has an invalid length.
[  262.275485][T11600] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2242'.
[  262.284776][T11600] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  262.288229][T11600] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  262.385536][T11608] netlink: 'syz.0.2246': attribute type 35 has an invalid length.
[  263.354104][T11638] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  263.358372][T11638] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  263.489167][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2258'.
[  263.875558][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'.
[  263.987297][T11691] netlink: 'syz.0.2273': attribute type 21 has an invalid length.
[  263.991959][T11691] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2273'.
[  264.070158][T11694] netlink: 'syz.3.2272': attribute type 10 has an invalid length.
[  264.072958][T11694] ipvlan1: entered promiscuous mode
[  264.075035][T11694] ipvlan1: entered allmulticast mode
[  264.089801][T11694] bridge0: port 1(ipvlan1) entered blocking state
[  264.092407][T11694] bridge0: port 1(ipvlan1) entered disabled state
[  264.096537][T11694] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  264.192705][T11699] netlink: 'syz.3.2276': attribute type 13 has an invalid length.
[  264.564785][T11709] netlink: 'syz.3.2279': attribute type 10 has an invalid length.
[  265.105143][T11728] netlink: 'syz.3.2285': attribute type 4 has an invalid length.
[  265.112197][T11728] netlink: 'syz.3.2285': attribute type 1 has an invalid length.
[  265.115431][T11728] netlink: 'syz.3.2285': attribute type 2 has an invalid length.
[  266.416035][T11765] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  266.491319][T11771] __nla_validate_parse: 10 callbacks suppressed
[  266.491335][T11771] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2296'.
[  266.564159][T11777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2299'.
[  266.567938][T11777] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2299'.
[  266.572412][T11777] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2299'.
[  266.690403][T11780] netlink: 'syz.3.2300': attribute type 1 has an invalid length.
[  266.695467][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'.
[  266.706137][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'.
[  266.868217][T11786] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  266.877946][T11786] netlink: 'syz.3.2302': attribute type 10 has an invalid length.
[  266.884517][T11786] bond0: (slave bond_slave_0): Releasing backup interface
[  267.758621][T11793] netlink: 'syz.1.2304': attribute type 16 has an invalid length.
[  267.761910][T11793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2304'.
[  267.807038][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'.
[  267.923973][T11804] syzkaller0: entered promiscuous mode
[  267.925916][T11804] syzkaller0: entered allmulticast mode
[  268.075191][T11817] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2312'.
[  268.745489][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'.
[  269.000252][T11852] netlink: 'syz.1.2324': attribute type 10 has an invalid length.
[  269.003539][T11852] team0: entered promiscuous mode
[  269.005792][T11852] C: entered promiscuous mode
[  269.007960][T11852] team_slave_1: entered promiscuous mode
[  269.014792][T11852] 8021q: adding VLAN 0 to HW filter on device team0
[  269.024702][T11849] netlink: 'syz.3.2323': attribute type 21 has an invalid length.
[  269.031075][T11852] bridge0: port 5(team0) entered blocking state
[  269.031424][T11849] netlink: 'syz.3.2323': attribute type 1 has an invalid length.
[  269.033726][T11852] bridge0: port 5(team0) entered disabled state
[  269.047455][T11852] team0: entered allmulticast mode
[  269.050549][T11852] C: entered allmulticast mode
[  269.052585][T11852] team_slave_1: entered allmulticast mode
[  269.206080][T11860] netlink: 'syz.0.2326': attribute type 25 has an invalid length.
[  270.483773][T11902] netlink: 'syz.1.2337': attribute type 39 has an invalid length.
[  270.654087][T11913] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.659072][T11913] bridge0: entered allmulticast mode
[  270.887303][T11921] vcan0 speed is unknown, defaulting to 1000
[  271.011768][T11921] lo speed is unknown, defaulting to 1000
[  271.014720][T11921] wg0 speed is unknown, defaulting to 1000
[  271.263373][T11947] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  272.305857][T11978] netlink: 'syz.0.2362': attribute type 10 has an invalid length.
[  272.381941][T11985] netlink: 'syz.0.2362': attribute type 11 has an invalid length.
[  272.385081][T11985] __nla_validate_parse: 10 callbacks suppressed
[  272.385096][T11985] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2362'.
[  272.430255][T11978] team0: Port device wlan1 added
[  272.682878][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2363'.
[  272.686197][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2363'.
[  272.944121][T11976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.952769][T12003] netlink: 'syz.1.2369': attribute type 27 has an invalid length.
[  272.956815][T12003] netlink: 'syz.1.2369': attribute type 4 has an invalid length.
[  272.959100][T12003] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2369'.
[  273.206534][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'.
[  273.273152][T12017] netlink: 'syz.3.2373': attribute type 10 has an invalid length.
[  273.275609][T12017] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2373'.
[  273.296714][T12015] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2371'.
[  274.635411][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2379'.
[  274.638997][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2379'.
[  274.790487][T12035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.925565][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'.
[  275.961524][T12067] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  276.396047][T12085] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  276.446566][T12084] lo: left promiscuous mode
[  276.448466][T12084] lo: entered allmulticast mode
[  276.453218][   T47] lo speed is unknown, defaulting to 1000
[  276.455675][   T47] syz2: Port: 1 Link DOWN
[  276.461379][T12084] lo: entered promiscuous mode
[  276.464299][T12084] lo: left allmulticast mode
[  276.472926][   T24] lo speed is unknown, defaulting to 1000
[  276.475233][   T24] syz2: Port: 1 Link ACTIVE
[  276.747810][T12104] netlink: 'syz.1.2406': attribute type 6 has an invalid length.
[  276.789199][T12108] netlink: 'syz.0.2404': attribute type 4 has an invalid length.
[  277.017191][T12112] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  277.017903][T12112] netlink: 'syz.1.2407': attribute type 10 has an invalid length.
[  277.033900][T12112] veth0_vlan: left promiscuous mode
[  277.038164][T12112] veth0_vlan: entered promiscuous mode
[  277.046730][T12112] team0: Device veth0_vlan failed to register rx_handler
[  277.772353][T12128] __nla_validate_parse: 11 callbacks suppressed
[  277.772364][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'.
[  277.781018][T12128] lo: left promiscuous mode
[  277.783017][T12128] lo: entered allmulticast mode
[  278.044379][T12139] netlink: 'syz.0.2415': attribute type 19 has an invalid length.
[  278.049173][T12139] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.2415'.
[  278.055675][T12139] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.2415'.
[  278.061324][T12139] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.2415'.
[  278.275281][T12143] lo: left promiscuous mode
[  278.277071][T12143] lo: entered allmulticast mode
[  278.309791][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  278.352050][T12149] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  278.974708][T12165] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2425'.
[  278.989239][T12165] netlink: 'syz.1.2425': attribute type 4 has an invalid length.
[  278.997167][T12165] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2425'.
[  279.008296][T12165] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  279.078545][T12168] netlink: 'syz.0.2426': attribute type 1 has an invalid length.
[  279.082952][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'.
[  279.145342][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'.
[  279.190462][T12172] netlink: 'syz.0.2428': attribute type 11 has an invalid length.
[  279.193573][T12172] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2428'.
[  279.197460][T12173] netlink: 'syz.0.2428': attribute type 11 has an invalid length.
[  279.201612][T12173] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2428'.
[  279.286301][T12175] netlink: 'syz.1.2429': attribute type 10 has an invalid length.
[  279.310318][T12175] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  279.401975][T12171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.747094][T12207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.796441][T12213] netlink: 'syz.0.2442': attribute type 26 has an invalid length.
[  282.893655][T12218] netlink: 'syz.0.2444': attribute type 10 has an invalid length.
[  282.896317][T12218] __nla_validate_parse: 1 callbacks suppressed
[  282.896329][T12218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2444'.
[  282.905831][T12218] batman_adv: batadv0: Adding interface: hsr_slave_1
[  282.908322][T12218] batman_adv: batadv0: Interface activated: hsr_slave_1
[  282.934415][T12221] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2445'.
[  283.533418][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'.
[  283.536671][T12242] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  283.541205][T12242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.837912][T12249] netlink: 'syz.1.2452': attribute type 10 has an invalid length.
[  283.868569][T12249] bond0: (slave c1): Releasing backup interface
[  283.968143][T12253] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2453'.
[  284.023564][T12267] netlink: 'syz.3.2456': attribute type 21 has an invalid length.
[  284.844260][T12289] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2464'.
[  284.972936][T12292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.456848][T12302] lo: left promiscuous mode
[  285.458906][T12302] lo: entered allmulticast mode
[  285.466197][   T10] lo speed is unknown, defaulting to 1000
[  285.468627][   T10] syz2: Port: 1 Link DOWN
[  285.614047][ T5865] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  285.808426][T12316] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2472'.
[  285.981519][T12322] netlink: 'syz.1.2475': attribute type 4 has an invalid length.
[  286.421297][T12345] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2481'.
[  286.807009][T12358] netlink: 'syz.0.2484': attribute type 21 has an invalid length.
[  287.722166][T12373] bond_slave_1: mtu less than device minimum
[  288.080567][ T5865] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7
[  288.298845][T12392] netlink: 'syz.0.2496': attribute type 29 has an invalid length.
[  288.328568][T12392] netlink: 'syz.0.2496': attribute type 29 has an invalid length.
[  288.340431][T12392] netlink: 'syz.0.2496': attribute type 29 has an invalid length.
[  288.351497][T12392] C: renamed from team_slave_0
[  288.356430][T12392] netlink: 'syz.0.2496': attribute type 3 has an invalid length.
[  288.360232][T12392] netlink: 'syz.0.2496': attribute type 1 has an invalid length.
[  288.363292][T12392] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  288.460841][T12399] netlink: 'syz.1.2498': attribute type 1 has an invalid length.
[  288.492605][T12399] netlink: 'syz.1.2498': attribute type 2 has an invalid length.
[  288.671574][T12413] netlink: 'syz.1.2503': attribute type 33 has an invalid length.
[  288.674090][T12413] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2503'.
[  288.742466][T12415] netlink: 'syz.0.2504': attribute type 22 has an invalid length.
[  288.745676][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'.
[  288.930434][T12427] vcan0 speed is unknown, defaulting to 1000
[  289.025119][T12434] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2509'.
[  289.096029][T12427] lo speed is unknown, defaulting to 1000
[  289.101993][T12427] wg0 speed is unknown, defaulting to 1000
[  292.206560][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'.
[  292.214803][T12495] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  292.217901][T12495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.348200][T12505] netlink: 'syz.0.2531': attribute type 3 has an invalid length.
[  292.351439][T12505] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2531'.
[  292.354789][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'.
[  292.458567][T12513] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2533'.
[  292.966680][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2537'.
[  293.108727][T12523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.322029][T12566] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2548'.
[  294.362342][T12566] vcan0 speed is unknown, defaulting to 1000
[  294.534688][T12566] lo speed is unknown, defaulting to 1000
[  294.537967][T12566] wg0 speed is unknown, defaulting to 1000
[  294.985892][T12591] validate_nla: 1 callbacks suppressed
[  294.985923][T12591] netlink: 'syz.1.2554': attribute type 1 has an invalid length.
[  294.993240][T12591] netlink: 'syz.1.2554': attribute type 1 has an invalid length.
[  295.645059][T12617] syzkaller0: entered promiscuous mode
[  295.647169][T12617] syzkaller0: entered allmulticast mode
[  295.653022][T12617] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  295.924371][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'.
[  297.351899][T12623] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2563'.
[  297.417152][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2564'.
[  297.860199][T12640] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2568'.
[  298.038492][T12648] netlink: 'syz.3.2572': attribute type 39 has an invalid length.
[  298.476980][T12673] netlink: 'syz.3.2579': attribute type 210 has an invalid length.
[  298.601202][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'.
[  298.608256][T12677] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  298.619941][T12677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.704159][T12679] netlink: 'syz.1.2580': attribute type 10 has an invalid length.
[  298.707887][T12679] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2580'.
[  298.847319][T12683] netlink: 'syz.1.2580': attribute type 29 has an invalid length.
[  298.977193][T12688] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2583'.
[  299.046472][T12690] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  299.057136][T12690] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  299.164277][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'.
[  299.374874][T12697] netlink: 'syz.0.2587': attribute type 13 has an invalid length.
[  299.377489][T12697] netlink: 'syz.0.2587': attribute type 17 has an invalid length.
[  299.387481][T12697] lo: left allmulticast mode
[  299.434188][T12697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.532364][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2589'.
[  299.535852][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2589'.
[  299.617809][T12707] blkio.reset_stats is deprecated
[  299.845830][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2594'.
[  299.975011][T12725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.066348][T12734] validate_nla: 4 callbacks suppressed
[  300.066360][T12734] netlink: 'syz.3.2600': attribute type 2 has an invalid length.
[  300.080520][T12734] netlink: 'syz.3.2600': attribute type 1 has an invalid length.
[  300.083771][T12734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2600'.
[  300.096913][T12734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2600'.
[  300.290364][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'.
[  300.412169][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'.
[  300.734513][T12764] netlink: 'syz.3.2609': attribute type 13 has an invalid length.
[  300.739140][T12741] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2601'.
[  300.757951][T12766] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2610'.
[  301.079644][ T5919] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.083228][ T5919] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.094652][ T5919] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.098013][ T5919] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.129149][T12772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2613'.
[  301.710973][T12791] netlink: 'syz.1.2618': attribute type 28 has an invalid length.
[  301.803287][T12797] netlink: 'syz.3.2619': attribute type 12 has an invalid length.
[  302.854191][T12837] netlink: 'syz.1.2628': attribute type 29 has an invalid length.
[  302.857927][T12837] netlink: 'syz.1.2628': attribute type 29 has an invalid length.
[  302.863194][T12837] netlink: 'syz.1.2628': attribute type 29 has an invalid length.
[  303.155993][T12844] netlink: 'syz.0.2631': attribute type 41 has an invalid length.
[  303.367310][T12853] netlink: 'syz.3.2634': attribute type 10 has an invalid length.
[  303.982931][T12842] delete_channel: no stack
[  304.034117][T12849] delete_channel: no stack
[  304.545549][T12877] __nla_validate_parse: 14 callbacks suppressed
[  304.545563][T12877] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2642'.
[  304.572248][T12877] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2642'.
[  304.683468][T12879] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2643'.
[  304.793064][T12879] syzkaller0: entered promiscuous mode
[  304.794799][T12879] syzkaller0: entered allmulticast mode
[  304.951250][T12886] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2644'.
[  305.003472][T12888] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2644'.
[  305.553137][T12895] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.2645'.
[  305.565106][T12895] openvswitch: netlink: Message has 4 unknown bytes.
[  305.588741][T12892] netlink: 12467 bytes leftover after parsing attributes in process `syz.1.2645'.
[  306.335202][T12891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2645'.
[  306.397346][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2647'.
[  306.427908][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2648'.
[  307.081362][T12948] validate_nla: 7 callbacks suppressed
[  307.081383][T12948] netlink: 'syz.3.2666': attribute type 10 has an invalid length.
[  307.086723][T12948] dummy0: entered promiscuous mode
[  307.117884][T12948] team0: Port device dummy0 removed
[  307.255180][T12954] delete_channel: no stack
[  307.285625][T12953] delete_channel: no stack
[  307.445947][T12961] netlink: 'syz.1.2670': attribute type 21 has an invalid length.
[  307.449139][T12961] IPv6: NLM_F_CREATE should be specified when creating new route
[  307.504023][T12966] : renamed from dummy0
[  307.696728][T12986] netlink: 'syz.3.2679': attribute type 1 has an invalid length.
[  309.592426][T13028] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  309.788629][T13040] __nla_validate_parse: 7 callbacks suppressed
[  309.788641][T13040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2695'.
[  310.596104][T13037] netlink: 'syz.1.2695': attribute type 13 has an invalid length.
[  310.638825][T13037] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2695'.
[  310.697686][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2697'.
[  310.720294][T13046] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2696'.
[  311.176812][T13066] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2703'.
[  312.567758][T13107] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2711'.
[  312.811866][T13117] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2716'.
[  313.013829][T13120] tap0: tun_chr_ioctl cmd 1074025678
[  313.016384][T13120] tap0: group set to 0
[  313.091715][T13127] netlink: 'syz.3.2719': attribute type 1 has an invalid length.
[  313.212628][T13133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.213147][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'.
[  313.216639][T13133] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  313.468445][T13149] team0: left allmulticast mode
[  313.472090][T13149] C: left allmulticast mode
[  313.474577][T13149] team_slave_1: left allmulticast mode
[  313.479128][T13149] bridge0: port 5(team0) entered disabled state
[  313.495234][T13149] ip6gretap0: left allmulticast mode
[  313.501146][T13149] ip6gretap0: left promiscuous mode
[  313.503755][T13149] bridge0: port 4(ip6gretap0) entered disabled state
[  313.508529][T13149] batadv0: left allmulticast mode
[  313.511440][T13149] bridge0: port 3(batadv0) entered disabled state
[  313.517966][T13149] bridge_slave_1: left allmulticast mode
[  313.521312][T13149] bridge_slave_1: left promiscuous mode
[  313.523496][T13149] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.531007][T13149] bridge_slave_0: left promiscuous mode
[  313.533638][T13149] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.932215][T13156] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  313.935130][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.951789][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.017572][T13158] netlink: 'syz.0.2729': attribute type 2 has an invalid length.
[  314.021441][T13158] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2729'.
[  314.269990][T13172] netlink: 'syz.1.2733': attribute type 32 has an invalid length.
[  314.349055][T13171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2735'.
[  315.085298][T13192] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  315.624432][T13213] netlink: 'syz.1.2745': attribute type 10 has an invalid length.
[  315.636708][T13213] veth0_vlan: left promiscuous mode
[  315.644286][T13213] veth0_vlan: entered promiscuous mode
[  315.658820][T13213] team0: Device veth0_vlan failed to register rx_handler
[  315.748933][T13214] netlink: 'syz.0.2742': attribute type 4 has an invalid length.
[  315.752517][T13214] __nla_validate_parse: 3 callbacks suppressed
[  315.752528][T13214] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.2742'.
[  316.175037][T13220] netlink: 'syz.3.2747': attribute type 33 has an invalid length.
[  316.177607][T13220] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2747'.
[  316.658669][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2752'.
[  316.712270][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2754'.
[  317.192711][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  317.195346][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.302363][T13261] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2759'.
[  317.347810][T13264] lo: entered allmulticast mode
[  317.629862][T13272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2763'.
[  318.087414][T13283] vcan0 speed is unknown, defaulting to 1000
[  318.206708][T13283] lo speed is unknown, defaulting to 1000
[  318.209685][T13283] wg0 speed is unknown, defaulting to 1000
[  318.309112][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'.
[  318.349837][T13299] netlink: 'syz.1.2771': attribute type 21 has an invalid length.
[  318.353113][T13299] netlink: 'syz.1.2771': attribute type 5 has an invalid length.
[  320.053304][T13303] vcan0 speed is unknown, defaulting to 1000
[  320.296634][T13303] lo speed is unknown, defaulting to 1000
[  320.301278][T13303] wg0 speed is unknown, defaulting to 1000
[  320.518061][T13340] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2782'.
[  320.760089][T13348] netlink: 'syz.1.2786': attribute type 1 has an invalid length.
[  320.764223][T13348] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2786'.
[  320.865624][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2789'.
[  321.085219][T13374] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2793'.
[  321.088698][T13373] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2793'.
[  321.117074][T13373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.123645][T13372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.205678][T13389] xt_time: invalid argument - start or stop time greater than 23:59:59
[  321.425356][T13419] netlink: 'syz.3.2803': attribute type 10 has an invalid length.
[  321.550150][T13419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2803'.
[  321.555567][T13419] netlink: 'syz.3.2803': attribute type 10 has an invalid length.
[  321.558727][T13419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2803'.
[  322.264396][T13452] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2813'.
[  322.266174][T13453] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2813'.
[  322.678343][T13479] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2820'.
[  322.693589][T13479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2820'.
[  323.339086][T13522] netlink: 'syz.0.2833': attribute type 1 has an invalid length.
[  323.425999][T13524] netlink: 'syz.0.2834': attribute type 8 has an invalid length.
[  323.428611][T13524] netlink: 'syz.0.2834': attribute type 3 has an invalid length.
[  323.517579][T13536] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  323.621925][T13542] netlink: 'syz.1.2840': attribute type 1 has an invalid length.
[  323.968073][T13553] netlink: 'syz.0.2843': attribute type 10 has an invalid length.
[  324.053435][T13558] netlink: 'syz.3.2845': attribute type 10 has an invalid length.
[  324.725141][T13549] delete_channel: no stack
[  324.858265][T13556] netlink: 'syz.3.2845': attribute type 4 has an invalid length.
[  325.106749][T13575] openvswitch: netlink: IPv6 tunnel dst address is zero
[  325.906304][T13606] __nla_validate_parse: 6 callbacks suppressed
[  325.906384][T13606] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2859'.
[  325.936194][T13605] netlink: 'syz.1.2861': attribute type 4 has an invalid length.
[  325.940799][T13605] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.2861'.
[  326.074634][T13609] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2862'.
[  326.154143][T13614] netlink: 'syz.1.2863': attribute type 2 has an invalid length.
[  326.167450][T13614] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2863'.
[  326.255191][T13616] netlink: 'syz.1.2864': attribute type 21 has an invalid length.
[  326.525221][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2866'.
[  326.534614][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2868'.
[  326.569081][T13633] tmpfs: Unknown parameter 'uid'
[  326.810115][T13645] lo: entered promiscuous mode
[  326.813208][T13645] lo: left allmulticast mode
[  326.828437][   T47] lo speed is unknown, defaulting to 1000
[  326.831362][   T47] syz2: Port: 1 Link ACTIVE
[  327.236906][T13666] lo: entered promiscuous mode
[  327.250827][T13666] lo: left allmulticast mode
[  327.412613][T13663] netlink: 208252 bytes leftover after parsing attributes in process `syz.3.2879'.
[  327.416088][T13663] netlink: 'syz.3.2879': attribute type 1 has an invalid length.
[  327.945568][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'.
[  328.806130][T13713] lo: left promiscuous mode
[  328.808263][T13713] lo: entered allmulticast mode
[  328.814664][   T47] lo speed is unknown, defaulting to 1000
[  328.817091][   T47] syz2: Port: 1 Link DOWN
[  328.822264][T13713] lo: entered promiscuous mode
[  328.824227][T13713] lo: left allmulticast mode
[  328.834071][   T24] lo speed is unknown, defaulting to 1000
[  328.836547][   T24] syz2: Port: 1 Link ACTIVE
[  328.880165][T13715] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2897'.
[  329.305422][T13731] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2901'.
[  329.502423][T13737] validate_nla: 3 callbacks suppressed
[  329.502437][T13737] netlink: 'syz.1.2903': attribute type 10 has an invalid length.
[  329.507748][T13737] : entered promiscuous mode
[  329.520029][T13737] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  464.439881][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz-executor:8499]
[  464.439906][    C0] Modules linked in:
[  464.439918][    C0] irq event stamp: 1604288
[  464.439924][    C0] hardirqs last  enabled at (1604287): [<ffffffff8b7a6234>] irqentry_exit+0x74/0x90
[  464.439951][    C0] hardirqs last disabled at (1604288): [<ffffffff8b7a4e6e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  464.439969][    C0] softirqs last  enabled at (1604286): [<ffffffff81850b4a>] __irq_exit_rcu+0xca/0x1f0
[  464.439987][    C0] softirqs last disabled at (1604275): [<ffffffff81850b4a>] __irq_exit_rcu+0xca/0x1f0
[  464.440008][    C0] CPU: 0 UID: 0 PID: 8499 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  464.440029][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  464.440041][    C0] RIP: 0010:smp_call_function_many_cond+0xd38/0x12d0
[  464.440061][    C0] Code: 89 ee 83 e6 01 31 ff e8 56 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 01 5f 0b 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 e5 5e 0b 00 eb e4 44
[  464.440075][    C0] RSP: 0018:ffffc90007857540 EFLAGS: 00000293
[  464.440087][    C0] RAX: 0000000000000000 RBX: 1ffff11026cc7f61 RCX: ffff8880278b1cc0
[  464.440097][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  464.440105][    C0] RBP: ffffc900078576c0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  464.440116][    C0] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffff88813663fb08
[  464.440126][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  464.440136][    C0] FS:  000055557b462500(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  464.440147][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  464.440156][    C0] CR2: 0000555581654808 CR3: 000000004865c000 CR4: 00000000000006f0
[  464.440190][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  464.440199][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  464.440207][    C0] Call Trace:
[  464.440214][    C0]  <TASK>
[  464.440227][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  464.440255][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  464.440276][    C0]  ? ldt_dup_context+0x336/0x3e0
[  464.440296][    C0]  ? rcu_is_watching+0x15/0xb0
[  464.440314][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  464.440332][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  464.440348][    C0]  flush_tlb_mm_range+0x6b1/0x12d0
[  464.440377][    C0]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  464.440398][    C0]  ? up_write+0x1c4/0x420
[  464.440420][    C0]  dup_mmap+0x15a0/0x1ac0
[  464.440454][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  464.440481][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  464.440496][    C0]  ? mm_init+0xcc3/0xef0
[  464.440517][    C0]  copy_mm+0x13c/0x4b0
[  464.440535][    C0]  copy_process+0x1706/0x3c00
[  464.440561][    C0]  ? copy_process+0x97f/0x3c00
[  464.440582][    C0]  ? __pfx_copy_process+0x10/0x10
[  464.440651][    C0]  kernel_clone+0x21e/0x840
[  464.440669][    C0]  ? css_rstat_updated+0x23a/0x4f0
[  464.440685][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  464.440716][    C0]  __x64_sys_clone+0x18b/0x1e0
[  464.440732][    C0]  ? count_memcg_event_mm+0x21/0x260
[  464.440750][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  464.440775][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  464.440796][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  464.440819][    C0]  ? do_syscall_64+0xbe/0x3b0
[  464.440839][    C0]  do_syscall_64+0xfa/0x3b0
[  464.440855][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  464.440868][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.440884][    C0]  ? exc_page_fault+0x9f/0xf0
[  464.440899][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.440913][    C0] RIP: 0033:0x7f8614185413
[  464.440928][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  464.440940][    C0] RSP: 002b:00007ffe411333c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  464.440953][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8614185413
[  464.440963][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  464.440971][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  464.440978][    C0] R10: 000055557b4627d0 R11: 0000000000000246 R12: 0000000000000000
[  464.440987][    C0] R13: 00000000000927c0 R14: 00000000000506b0 R15: 00007ffe41133560
[  464.441009][    C0]  </TASK>
[  464.441016][    C0] Sending NMI from CPU 0 to CPUs 1:
[  464.605732][    C1] NMI backtrace for cpu 1
[  464.605750][    C1] CPU: 1 UID: 0 PID: 13739 Comm: syz.3.2904 Not tainted syzkaller #0 PREEMPT(full) 
[  464.605760][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  464.605767][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x13/0x110
[  464.605782][    C1] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 <48> 83 ec 60 48 89 f3 49 89 fe 65 48 8b 05 eb e1 23 07 48 89 44 24
[  464.605790][    C1] RSP: 0018:ffffc900001e08e0 EFLAGS: 00000082
[  464.605798][    C1] RAX: 1ffff11026cc4f60 RBX: ffff888136627b00 RCX: ffff8881086bd640
[  464.605804][    C1] RDX: 0000000000010000 RSI: 0000000000000802 RDI: ffff888136627a80
[  464.605809][    C1] RBP: ffffc900001e0918 R08: 0000000000000003 R09: 0000000000000004
[  464.605814][    C1] R10: dffffc0000000000 R11: fffff5200003c100 R12: ffff888040456598
[  464.605820][    C1] R13: ffff888136627b00 R14: dffffc0000000000 R15: 0000000000000802
[  464.605825][    C1] FS:  00007effd1e166c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  464.605831][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  464.605836][    C1] CR2: 00007effd10dd080 CR3: 000000010699c000 CR4: 00000000000006f0
[  464.605864][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  464.605870][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  464.605875][    C1] Call Trace:
[  464.605882][    C1]  <IRQ>
[  464.605891][    C1]  hrtimer_try_to_cancel+0x3be/0x420
[  464.605913][    C1]  hrtimer_cancel+0x3b/0x50
[  464.605926][    C1]  cpu_clock_event_stop+0xd9/0x130
[  464.605944][    C1]  __perf_event_overflow+0x580/0xe40
[  464.605955][    C1]  ? __pfx___perf_event_overflow+0x10/0x10
[  464.605963][    C1]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  464.605976][    C1]  perf_swevent_hrtimer+0x3c5/0x550
[  464.605988][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  464.605998][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  464.606015][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  464.606022][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  464.606036][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  464.606046][    C1]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  464.606055][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  464.606068][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  464.606078][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  464.606092][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  464.606104][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  464.606113][    C1]  </IRQ>
[  464.606116][    C1]  <TASK>
[  464.606119][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  464.606128][    C1] RIP: 0010:apparmor_socket_create+0x0/0x180
[  464.606142][    C1] Code: 90 90 e9 6a fd ff ff e8 3e 7c 3b fd 4c 89 e7 e8 e6 48 00 00 eb 85 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 41 89 cf 89 d3 89 f5 41
[  464.606149][    C1] RSP: 0018:ffffc90006f17dc0 EFLAGS: 00000287
[  464.606157][    C1] RAX: ffffffff847b092d RBX: 0000000000000000 RCX: 0000000000000000
[  464.606162][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028
[  464.606166][    C1] RBP: 0000000000000000 R08: ffffc90006f17e80 R09: 0000000000000000
[  464.606171][    C1] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffff88803bf50000
[  464.606177][    C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000028
[  464.606183][    C1]  ? security_socket_create+0x1d/0x2e0
[  464.606196][    C1]  security_socket_create+0xa3/0x2e0
[  464.606206][    C1]  __sock_create+0xd5/0x9f0
[  464.606214][    C1]  ? do_syscall_64+0xb7/0x3b0
[  464.606223][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  464.606234][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  464.606246][    C1]  __sys_socket+0xd7/0x1b0
[  464.606254][    C1]  __x64_sys_socket+0x7a/0x90
[  464.606262][    C1]  do_syscall_64+0xfa/0x3b0
[  464.606271][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.606278][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  464.606287][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.606295][    C1] RIP: 0033:0x7effd0f8eba9
[  464.606304][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.606311][    C1] RSP: 002b:00007effd1e16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  464.606318][    C1] RAX: ffffffffffffffda RBX: 00007effd11d5fa0 RCX: 00007effd0f8eba9
[  464.606324][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028
[  464.606328][    C1] RBP: 00007effd1011e19 R08: 0000000000000000 R09: 0000000000000000
[  464.606333][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.606338][    C1] R13: 00007effd11d6038 R14: 00007effd11d5fa0 R15: 00007fff8b6cefc8
[  464.606347][    C1]  </TASK>
[  464.606695][    C0] Kernel panic - not syncing: softlockup: hung tasks
[  464.791333][    C0] CPU: 0 UID: 0 PID: 8499 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.795838][    C0] Tainted: [L]=SOFTLOCKUP
[  464.797638][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  464.801815][    C0] Call Trace:
[  464.803229][    C0]  <IRQ>
[  464.804451][    C0]  dump_stack_lvl+0x99/0x250
[  464.806419][    C0]  ? __asan_memcpy+0x40/0x70
[  464.808346][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  464.810527][    C0]  ? __pfx__printk+0x10/0x10
[  464.812491][    C0]  vpanic+0x281/0x750
[  464.814192][    C0]  ? __pfx__printk+0x10/0x10
[  464.816134][    C0]  ? __pfx_vpanic+0x10/0x10
[  464.818048][    C0]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  464.820603][    C0]  panic+0xb9/0xc0
[  464.822195][    C0]  ? __pfx_panic+0x10/0x10
[  464.824002][    C0]  ? nmi_backtrace_stall_check+0x433/0x440
[  464.826310][    C0]  ? irq_work_queue+0xc3/0x140
[  464.828192][    C0]  watchdog_timer_fn+0x862/0x870
[  464.830157][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  464.832301][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  464.834650][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  464.837170][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  464.839377][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  464.841689][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  464.843892][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  464.846288][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  464.848320][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  464.850763][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  464.853068][    C0]  </IRQ>
[  464.854280][    C0]  <TASK>
[  464.855508][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  464.857920][    C0] RIP: 0010:smp_call_function_many_cond+0xd38/0x12d0
[  464.860458][    C0] Code: 89 ee 83 e6 01 31 ff e8 56 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 01 5f 0b 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 e5 5e 0b 00 eb e4 44
[  464.867982][    C0] RSP: 0018:ffffc90007857540 EFLAGS: 00000293
[  464.870429][    C0] RAX: 0000000000000000 RBX: 1ffff11026cc7f61 RCX: ffff8880278b1cc0
[  464.873614][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  464.876753][    C0] RBP: ffffc900078576c0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  464.879914][    C0] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffff88813663fb08
[  464.883091][    C0] R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
[  464.886258][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  464.888279][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  464.890776][    C0]  ? ldt_dup_context+0x336/0x3e0
[  464.892790][    C0]  ? rcu_is_watching+0x15/0xb0
[  464.894706][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  464.896801][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  464.898856][    C0]  flush_tlb_mm_range+0x6b1/0x12d0
[  464.900930][    C0]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  464.903125][    C0]  ? up_write+0x1c4/0x420
[  464.904878][    C0]  dup_mmap+0x15a0/0x1ac0
[  464.906684][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  464.908645][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  464.911031][    C0]  ? mm_init+0xcc3/0xef0
[  464.912791][    C0]  copy_mm+0x13c/0x4b0
[  464.914455][    C0]  copy_process+0x1706/0x3c00
[  464.916415][    C0]  ? copy_process+0x97f/0x3c00
[  464.918371][    C0]  ? __pfx_copy_process+0x10/0x10
[  464.920412][    C0]  kernel_clone+0x21e/0x840
[  464.922246][    C0]  ? css_rstat_updated+0x23a/0x4f0
[  464.924329][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  464.926391][    C0]  __x64_sys_clone+0x18b/0x1e0
[  464.928340][    C0]  ? count_memcg_event_mm+0x21/0x260
[  464.930464][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  464.932620][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  464.935281][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  464.937912][    C0]  ? do_syscall_64+0xbe/0x3b0
[  464.939836][    C0]  do_syscall_64+0xfa/0x3b0
[  464.941706][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  464.943832][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.946279][    C0]  ? exc_page_fault+0x9f/0xf0
[  464.948189][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.950623][    C0] RIP: 0033:0x7f8614185413
[  464.952433][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  464.960035][    C0] RSP: 002b:00007ffe411333c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  464.963017][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8614185413
[  464.966087][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  464.969268][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  464.972463][    C0] R10: 000055557b4627d0 R11: 0000000000000246 R12: 0000000000000000
[  464.975679][    C0] R13: 00000000000927c0 R14: 00000000000506b0 R15: 00007ffe41133560
[  464.978900][    C0]  </TASK>
[  466.099215][    C0] Shutting down cpus with NMI
[  466.101897][    C0] Kernel Offset: disabled
[  466.103650][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:30:29  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000075d0
R8 =ffff888108898237 R9 =1ffff11021113046 R10=dffffc0000000000 R11=ffffffff854fa380
R12=dffffc0000000000 R13=ffffffff99b028c7 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa3fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557b462500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555581654808 CR3=000000004865c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007effd1012e53
XMM06=0000000000000000 00007effd1012e4d XMM07=0000000000000000 00007effd1012e61
XMM08=0000000000000000 00007effd1012ee7 XMM09=0000000000000000 00007effd1012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=db2059215e41b100 RDX=0000000000000000
RSI=ffffffff8dba9835 RDI=ffffffff8be33e00 RBP=ffffffff81adabcb RSP=ffffc900001e07d0
R8 =0000000000000000 R9 =ffffffff81adabcb R10=dffffc0000000000 R11=ffffed1026cc4f51
R12=0000000000000000 R13=ffff888136627a98 R14=0000000000000001 R15=0000000000000046
RIP=ffffffff8b7a7151 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007effd1e166c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007effd10dd080 CR3=000000010699c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007effd11a7498 00007effd11a7470 XMM03=00007effd11a74a8 00007effd11a74a0
XMM04=00007effd1d0d100 00007effd11a7460 XMM05=00007effd11a7478 00007effd11a74c0
XMM06=00007effd11a74b8 00007effd11a74b0 XMM07=00007effd11a74a8 00007effd11a74a0
XMM08=0000000000000000 00007effd1012ee7 XMM09=0000000000000000 00007effd1012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
