last executing test programs:

2m38.91798239s ago: executing program 1 (id=550):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb)

2m38.296440756s ago: executing program 1 (id=551):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

2m38.199743784s ago: executing program 1 (id=553):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0)

2m38.13528244s ago: executing program 1 (id=556):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x8, 0x0, 0x4)

2m38.074740563s ago: executing program 1 (id=558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m38.071355803s ago: executing program 1 (id=560):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)

2m37.544823191s ago: executing program 0 (id=565):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a001200014002020c600e41b0000900ac000a0501000000a40012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080)

2m37.45337079s ago: executing program 0 (id=566):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

2m37.449149042s ago: executing program 0 (id=567):
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x6}, 0x4c58, 0x5, 0x0, 0x1, 0x2, 0x20002, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m37.268033175s ago: executing program 0 (id=570):
socketpair$unix(0x2d, 0x2, 0x88, &(0x7f0000000580))

2m37.20762701s ago: executing program 0 (id=572):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf55050001"], 0x20}, 0x1, 0x0, 0x0, 0x24000845}, 0x800)

2m37.057511845s ago: executing program 0 (id=573):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000001100), 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

2m22.48544924s ago: executing program 32 (id=560):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)

2m22.087062985s ago: executing program 33 (id=573):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000001100), 0x9)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

1m51.663663465s ago: executing program 3 (id=924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x48)
socketpair(0x8, 0x1, 0xf92ed20, &(0x7f0000000000))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20)

1m51.663459016s ago: executing program 3 (id=925):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1m51.592948814s ago: executing program 3 (id=926):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

1m51.482195244s ago: executing program 3 (id=927):
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000050)

1m50.583356724s ago: executing program 3 (id=930):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x10)

1m50.343270745s ago: executing program 3 (id=931):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, "b93b"}], 0x18}, 0xfc00)

1m50.29467186s ago: executing program 34 (id=931):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, "b93b"}], 0x18}, 0xfc00)

1m26.578926083s ago: executing program 5 (id=1297):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1m26.5769093s ago: executing program 5 (id=1299):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1m25.670625861s ago: executing program 5 (id=1306):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x10a8, 0x6, 0x0, 0x0, 0x9, 0x7ffffc, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a", 0x46}], 0x1}, 0x0)

1m25.620053749s ago: executing program 5 (id=1309):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12)

1m25.399208798s ago: executing program 5 (id=1313):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m24.209324246s ago: executing program 5 (id=1335):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x40040)

1m9.222218516s ago: executing program 35 (id=1335):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x40040)

362.828177ms ago: executing program 4 (id=2494):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

362.440008ms ago: executing program 4 (id=2496):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)

302.379642ms ago: executing program 6 (id=2498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

302.124268ms ago: executing program 4 (id=2499):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000180)=r3, 0x4)

301.863574ms ago: executing program 6 (id=2500):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180003004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23}, 0x23)

251.882418ms ago: executing program 6 (id=2502):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xa, 0x8, 0x8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000dc0)={r0, &(0x7f0000001b80), &(0x7f0000001bc0)=""/7, 0x2}, 0x20)

251.31126ms ago: executing program 2 (id=2503):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0x50, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x7fffffff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

251.140687ms ago: executing program 4 (id=2504):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0x7ff, 0xfffffffe, 0x0, 0x80, 0x80002}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

176.895162ms ago: executing program 2 (id=2505):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0x1}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x48c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20040001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

176.720237ms ago: executing program 6 (id=2506):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1a00000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008f07f0020000040000"], 0x50)

176.372915ms ago: executing program 4 (id=2507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)

175.783229ms ago: executing program 6 (id=2508):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_TTL={0x5, 0x7, 0x36}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x20000020)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000140), &(0x7f0000000340)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000dc0000000000000067edca6f40ce209029c3f0701766dd3550a69d62aceed108d895f024e41b6d4891b7c27e9aeacc3a", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x9, 0x9, 0x1, 0x800, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x8}, 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @exit], &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r3, 0x31, 0x12, r5}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0)
socketpair(0x25, 0x1, 0x1, &(0x7f00000000c0))
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

165.888639ms ago: executing program 2 (id=2509):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x408)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r0, &(0x7f0000000180), 0x40001)

141.305105ms ago: executing program 2 (id=2510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x884}, 0x40)

60.172045ms ago: executing program 2 (id=2511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0x9, 0x6, 0xfffff01c}, {0x6, 0xff, 0x9, 0x1}]})

59.809622ms ago: executing program 4 (id=2512):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x4e, 0x0, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x300)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38)

606.968µs ago: executing program 6 (id=2513):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

0s ago: executing program 2 (id=2514):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60373' (ED25519) to the list of known hosts.
syzkaller login: [   56.513464][ T5831] cgroup: Unknown subsys name 'net'
[   56.662591][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.668417][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.246096][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.123328][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.128186][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.131777][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.135334][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.139581][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.142231][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.144999][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.149058][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.176573][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.181586][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.191957][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.197941][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.201987][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.209554][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.213384][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.516773][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.650300][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   65.679186][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   65.727868][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.731594][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.734925][ T5854] bridge_slave_0: entered allmulticast mode
[   65.739244][ T5854] bridge_slave_0: entered promiscuous mode
[   65.760814][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.763485][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.766381][ T5854] bridge_slave_1: entered allmulticast mode
[   65.770747][ T5854] bridge_slave_1: entered promiscuous mode
[   65.833500][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.836304][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.839568][ T5859] bridge_slave_0: entered allmulticast mode
[   65.844081][ T5859] bridge_slave_0: entered promiscuous mode
[   65.857005][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.860926][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.863838][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.866766][ T5859] bridge_slave_1: entered allmulticast mode
[   65.870844][ T5859] bridge_slave_1: entered promiscuous mode
[   65.891507][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.948313][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.966240][ T5854] team0: Port device team_slave_0 added
[   65.971010][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.973786][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.976591][ T5849] bridge_slave_0: entered allmulticast mode
[   65.981574][ T5849] bridge_slave_0: entered promiscuous mode
[   65.986883][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.001467][ T5854] team0: Port device team_slave_1 added
[   66.003685][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.006855][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.010292][ T5849] bridge_slave_1: entered allmulticast mode
[   66.013872][ T5849] bridge_slave_1: entered promiscuous mode
[   66.026391][ T5859] team0: Port device team_slave_0 added
[   66.058713][ T5859] team0: Port device team_slave_1 added
[   66.074697][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.077116][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.086012][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.091836][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.094091][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.102809][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.134232][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.140842][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.151911][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.154100][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.162548][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.189581][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.192250][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.202064][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.230928][ T5849] team0: Port device team_slave_0 added
[   66.237043][ T5854] hsr_slave_0: entered promiscuous mode
[   66.240470][ T5854] hsr_slave_1: entered promiscuous mode
[   66.245836][ T5849] team0: Port device team_slave_1 added
[   66.280862][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.283331][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.292857][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.317929][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.320348][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.330815][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.343896][ T5859] hsr_slave_0: entered promiscuous mode
[   66.349212][ T5859] hsr_slave_1: entered promiscuous mode
[   66.351938][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   66.354172][ T5859] Cannot create hsr debugfs directory
[   66.468754][ T5849] hsr_slave_0: entered promiscuous mode
[   66.472956][ T5849] hsr_slave_1: entered promiscuous mode
[   66.475749][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   66.479538][ T5849] Cannot create hsr debugfs directory
[   66.750270][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.765714][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.772380][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.778557][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.850383][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.859990][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.866042][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.883078][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.939708][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.946625][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.960873][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.981957][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.014067][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.045034][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   67.072225][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.074700][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.082642][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.093198][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.095942][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.125375][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   67.155489][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.158306][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.163315][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.165924][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.178205][ T5233] Bluetooth: hci1: command tx timeout
[   67.240822][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.247751][ T5233] Bluetooth: hci0: command tx timeout
[   67.247796][   T54] Bluetooth: hci2: command tx timeout
[   67.274354][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   67.289123][  T744] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.291859][  T744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.296602][  T744] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.299483][  T744] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.445092][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.492652][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.502361][ T5854] veth0_vlan: entered promiscuous mode
[   67.532006][ T5854] veth1_vlan: entered promiscuous mode
[   67.568734][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.594853][ T5859] veth0_vlan: entered promiscuous mode
[   67.613274][ T5859] veth1_vlan: entered promiscuous mode
[   67.625532][ T5854] veth0_macvtap: entered promiscuous mode
[   67.640939][ T5854] veth1_macvtap: entered promiscuous mode
[   67.676161][ T5849] veth0_vlan: entered promiscuous mode
[   67.685757][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.704398][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.709941][ T5849] veth1_vlan: entered promiscuous mode
[   67.713328][ T5859] veth0_macvtap: entered promiscuous mode
[   67.722241][ T5859] veth1_macvtap: entered promiscuous mode
[   67.750811][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.753761][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.766937][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.774011][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.780852][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.789757][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.796397][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.811523][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.815093][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.826614][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.879839][ T5849] veth0_macvtap: entered promiscuous mode
[   67.896392][ T5849] veth1_macvtap: entered promiscuous mode
[   67.945119][  T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.952322][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.955984][  T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.965904][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.011315][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.014676][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.032694][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.036669][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.041665][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.044649][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.084599][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.088838][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.103981][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.106597][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.160863][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.163371][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.176463][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.187644][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.190115][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.853837][ T5953] netlink: 'syz.0.17': attribute type 1 has an invalid length.
[   69.101842][ T5959] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18'.
[   69.155757][ T5960] : renamed from pim6reg1
[   69.249185][   T54] Bluetooth: hci1: command tx timeout
[   69.328160][   T54] Bluetooth: hci2: command tx timeout
[   69.347594][   T54] Bluetooth: hci0: command tx timeout
[   69.890676][ T5973] netlink: 'syz.1.26': attribute type 23 has an invalid length.
[   70.322271][ T5994] netlink: 'syz.1.31': attribute type 4 has an invalid length.
[   70.331544][ T5994] netlink: 152 bytes leftover after parsing attributes in process `syz.1.31'.
[   70.377074][ T5994] .`: renamed from bond0 (while UP)
[   71.181518][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.187355][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.337900][   T54] Bluetooth: hci1: command tx timeout
[   71.407837][   T54] Bluetooth: hci0: command tx timeout
[   71.408423][ T5233] Bluetooth: hci2: command tx timeout
[   71.412326][ T6059] Zero length message leads to an empty skb
[   72.031276][ T5950] Set syz1 is full, maxelem 65536 reached
[   72.731880][ T6089] netlink: 830 bytes leftover after parsing attributes in process `syz.0.53'.
[   72.997234][    C0] hrtimer: interrupt took 30883 ns
[   73.408889][ T5233] Bluetooth: hci1: command tx timeout
[   73.487769][ T5233] Bluetooth: hci0: command tx timeout
[   73.490768][ T5233] Bluetooth: hci2: command tx timeout
[   73.617090][ T6095] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.622531][ T6095] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.56'.
[   75.195371][ T6127] netlink: 152 bytes leftover after parsing attributes in process `syz.1.70'.
[   75.729317][ T6144] @: renamed from bond_slave_0 (while UP)
[   75.729757][ T5233] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[   76.932101][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'.
[   76.969811][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.94'.
[   76.974346][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.94'.
[   77.023879][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'.
[   77.077362][ T6190] netlink: 'syz.2.98': attribute type 10 has an invalid length.
[   77.559780][ T6221] Illegal XDP return value 4294967262 on prog  (id 47) dev N/A, expect packet loss!
[   77.896791][ T6234] xt_l2tp: unknown flags: 51
[   78.265115][ T6257] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET)
[   78.631659][ T6265] ksmbd: Unknown IPC event: 1, ignore.
[   78.693041][ T6268] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   78.693200][ T6269] netlink: 'syz.1.133': attribute type 17 has an invalid length.
[   78.799274][ T6275] netlink: 'syz.1.135': attribute type 10 has an invalid length.
[   78.801879][ T6275] netlink: 168 bytes leftover after parsing attributes in process `syz.1.135'.
[   78.864248][ T6279] syzkaller0: entered promiscuous mode
[   78.865984][ T6279] syzkaller0: entered allmulticast mode
[   79.033562][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'.
[   79.037584][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'.
[   79.041208][ T6288] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   79.236536][ T6290] openvswitch: netlink: Message has 8 unknown bytes.
[   79.431067][ T6290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.647124][ T6305] =======================================================
[   79.647124][ T6305] WARNING: The mand mount option has been deprecated and
[   79.647124][ T6305]          and is ignored by this kernel. Remove the mand
[   79.647124][ T6305]          option from the mount to silence this warning.
[   79.647124][ T6305] =======================================================
[   79.982270][ T6332] netlink: 2 bytes leftover after parsing attributes in process `syz.1.162'.
[   80.170709][ T6342] netlink: 'syz.1.167': attribute type 1 has an invalid length.
[   80.196800][ T6342] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.167'.
[   80.274794][ T6352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'.
[   80.417943][ T6362] netlink: 10 bytes leftover after parsing attributes in process `syz.2.177'.
[   80.583695][ T6379] netlink: 'syz.1.185': attribute type 29 has an invalid length.
[   80.590286][ T6379] netlink: 'syz.1.185': attribute type 29 has an invalid length.
[   80.594113][ T6379] netlink: 'syz.1.185': attribute type 29 has an invalid length.
[   80.598255][ T6379] netlink: 'syz.1.185': attribute type 29 has an invalid length.
[   80.653422][ T6381] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.186'.
[   80.656428][ T6381] nbd: must specify a size in bytes for the device
[   80.839016][ T6388] netlink: 'syz.0.184': attribute type 40 has an invalid length.
[   80.930544][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.993403][ T6421] team0: Port device geneve1 added
[   82.817159][ T6474] validate_nla: 1 callbacks suppressed
[   82.820915][ T6474] netlink: 'syz.2.219': attribute type 12 has an invalid length.
[   82.823935][ T6474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.219'.
[   82.882901][ T6474] syz.2.219 (6474) used obsolete PPPIOCDETACH ioctl
[   83.795898][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   83.968653][ T6559] erspan0 speed is unknown, defaulting to 1000
[   83.971379][ T6559] erspan0 speed is unknown, defaulting to 1000
[   83.974941][ T6559] erspan0 speed is unknown, defaulting to 1000
[   83.984655][ T6559] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.992999][ T6559] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   84.011935][ T6559] erspan0 speed is unknown, defaulting to 1000
[   84.015140][ T6559] erspan0 speed is unknown, defaulting to 1000
[   84.020555][ T6559] erspan0 speed is unknown, defaulting to 1000
[   84.553535][ T6591] netlink: 'syz.1.245': attribute type 25 has an invalid length.
[   84.556552][ T6591] netlink: 'syz.1.245': attribute type 28 has an invalid length.
[   84.717093][ T5233] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[   85.413539][ T6641] lo: entered allmulticast mode
[   85.426086][ T6641] lo: entered promiscuous mode
[   85.428679][ T6641] lo: left allmulticast mode
[   85.642269][ T6651] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.271'.
[   85.645445][ T6651] netlink: 5 bytes leftover after parsing attributes in process `syz.2.271'.
[   85.788879][ T6656] netlink: 180 bytes leftover after parsing attributes in process `syz.2.271'.
[   85.930801][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.279'.
[   86.204894][ T6676] netlink: 'syz.1.282': attribute type 29 has an invalid length.
[   86.226404][ T6677] netlink: 'syz.1.282': attribute type 29 has an invalid length.
[   86.242199][ T6676] netlink: 'syz.1.282': attribute type 29 has an invalid length.
[   86.342294][ T6677] netlink: 'syz.1.282': attribute type 29 has an invalid length.
[   86.539159][   T24] cfg80211: failed to load regulatory.db
[   86.793944][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[   86.801510][ T6701] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   87.275884][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'.
[   87.478614][ T6743] netlink: 10 bytes leftover after parsing attributes in process `syz.1.307'.
[   87.513679][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[   87.518077][ T6745] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   87.539730][ T6745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.620345][ T6753] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.980330][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   87.985508][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   88.034200][ T6770] netlink: 'syz.2.319': attribute type 10 has an invalid length.
[   88.091787][ T6770] bond0: (slave c@): Releasing backup interface
[   88.831404][ T6770] syz.2.319 (6770) used greatest stack depth: 18280 bytes left
[   89.063325][ T6791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.192528][ T6800] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   89.633793][ T6814] netlink: 'syz.1.337': attribute type 49 has an invalid length.
[   89.700238][ T6819] netlink: 'syz.1.338': attribute type 11 has an invalid length.
[   90.115589][   T33] audit: type=1107 audit(1757018315.915:2): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   90.673688][ T6863] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[   90.676580][ T6863] netlink: 'syz.0.359': attribute type 2 has an invalid length.
[   90.681458][ T6863] netlink: 'syz.0.359': attribute type 4 has an invalid length.
[   90.684325][ T6863] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[   90.687187][ T6863] netlink: 'syz.0.359': attribute type 2 has an invalid length.
[   90.690504][ T6863] __nla_validate_parse: 1 callbacks suppressed
[   90.690513][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'.
[   90.697993][ T6863] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.359'.
[   90.701438][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'.
[   91.023408][ T6874] netlink: 'syz.0.365': attribute type 4 has an invalid length.
[   91.935183][ T6915] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.384'.
[   91.940288][ T6915] netlink: 62227 bytes leftover after parsing attributes in process `syz.1.384'.
[   92.845698][ T6935] bridge_slave_1: left allmulticast mode
[   92.853550][ T6935] bridge_slave_1: left promiscuous mode
[   92.855883][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.010235][ T6935] bridge_slave_0: left allmulticast mode
[   93.012256][ T6935] bridge_slave_0: left promiscuous mode
[   93.014391][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.273051][ T6926] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.279839][ T6926] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.555248][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'.
[   93.669684][ T6960] netlink: 872 bytes leftover after parsing attributes in process `syz.0.403'.
[   93.673892][ T6960] netlink: 872 bytes leftover after parsing attributes in process `syz.0.403'.
[   93.686141][ T6961] netlink: 763 bytes leftover after parsing attributes in process `syz.1.398'.
[   95.203258][ T6990] : port 1(veth0_to_bridge) entered blocking state
[   95.205707][ T6990] : port 1(veth0_to_bridge) entered disabled state
[   95.209819][ T6990] veth0_to_bridge: entered allmulticast mode
[   95.246303][ T6990] veth0_to_bridge: entered promiscuous mode
[   95.550006][ T6992] sit0: entered allmulticast mode
[   96.560260][ T7010] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   96.849390][ T7035] netlink: 180 bytes leftover after parsing attributes in process `syz.0.433'.
[   97.041783][ T7045] netlink: 124 bytes leftover after parsing attributes in process `syz.1.438'.
[   97.045475][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'.
[   97.137940][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[   97.541067][ T7074] netlink: 128 bytes leftover after parsing attributes in process `syz.1.448'.
[   97.781938][ T7083] netlink: 'syz.0.452': attribute type 21 has an invalid length.
[   97.784519][ T7083] IPv6: NLM_F_CREATE should be specified when creating new route
[   98.790685][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'.
[   99.176946][ T7152] bridge0: entered promiscuous mode
[   99.182833][ T7152] bridge0: entered allmulticast mode
[   99.275811][ T7158] veth1_macvtap: left promiscuous mode
[   99.373610][ T7161] veth1_macvtap: entered promiscuous mode
[   99.377579][ T7161] macsec0: entered promiscuous mode
[   99.379505][ T7161] macsec0: entered allmulticast mode
[   99.381294][ T7161] veth1_macvtap: entered allmulticast mode
[  100.293709][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'.
[  100.553783][ T5233] Bluetooth: hci0: Unable to find connection for big 0x00
[  100.579997][ T7199] netlink: 'syz.0.505': attribute type 11 has an invalid length.
[  100.583311][ T7199] netlink: 'syz.0.505': attribute type 11 has an invalid length.
[  100.676553][ T7200] : port 1(vlan0) entered blocking state
[  100.678847][ T7200] : port 1(vlan0) entered disabled state
[  100.722340][ T7200] vlan0: entered allmulticast mode
[  100.740678][ T7200] veth0_vlan: entered allmulticast mode
[  100.751020][ T7200] vlan0: entered promiscuous mode
[  100.782004][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'.
[  100.788597][ T7197] : port 1(vlan0) entered blocking state
[  100.791842][ T7197] : port 1(vlan0) entered forwarding state
[  100.915927][ T7214] netlink: 'syz.1.512': attribute type 21 has an invalid length.
[  100.938144][ T7214] netlink: 164 bytes leftover after parsing attributes in process `syz.1.512'.
[  101.261728][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'.
[  101.697196][ T7255] : renamed from vlan0 (while UP)
[  101.779019][ T7269] netlink: 'syz.0.537': attribute type 9 has an invalid length.
[  101.904540][ T7275] __nla_validate_parse: 5 callbacks suppressed
[  101.904555][ T7275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.538'.
[  101.915630][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.282865][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'.
[  102.766985][ T7275] bridge_slave_0 (unregistering): left allmulticast mode
[  102.772729][ T7275] bridge_slave_0 (unregistering): left promiscuous mode
[  102.775550][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.859153][ T7291] syzkaller0: entered promiscuous mode
[  102.861528][ T7291] syzkaller0: entered allmulticast mode
[  103.813557][ T7320] netlink: 'syz.0.552': attribute type 3 has an invalid length.
[  103.816060][ T7320] netlink: 'syz.0.552': attribute type 8 has an invalid length.
[  103.822823][ T7320] netlink: 'syz.0.552': attribute type 6 has an invalid length.
[  103.825267][ T7320] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.552'.
[  104.527794][ T7347] netlink: 'syz.0.564': attribute type 21 has an invalid length.
[  104.530393][ T7347] netlink: 'syz.0.564': attribute type 6 has an invalid length.
[  104.532798][ T7347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.564'.
[  104.911932][ T7363] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  104.981975][ T7339] erspan0 speed is unknown, defaulting to 1000
[  104.989807][ T7361] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.571'.
[  105.210387][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[  119.786234][   T15] sched: DL replenish lagged too much
[  119.924198][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.930381][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.933620][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.935200][ T7383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'.
[  119.942014][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.942102][ T7383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'.
[  119.959736][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.960470][ T7383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'.
[  120.053951][ T7380] erspan0 speed is unknown, defaulting to 1000
[  120.261941][ T7380] chnl_net:caif_netlink_parms(): no params data found
[  120.383481][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.391285][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.394566][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.398846][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.402182][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.490727][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.493463][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.496188][ T7380] bridge_slave_0: entered allmulticast mode
[  120.521054][ T7380] bridge_slave_0: entered promiscuous mode
[  120.539476][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.542386][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.545310][ T7380] bridge_slave_1: entered allmulticast mode
[  120.551813][ T7380] bridge_slave_1: entered promiscuous mode
[  120.621211][ T7401] sit0: entered allmulticast mode
[  120.633600][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.644510][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.665535][ T7392] erspan0 speed is unknown, defaulting to 1000
[  120.674313][ T7401] sit0: entered promiscuous mode
[  120.720779][ T7380] team0: Port device team_slave_0 added
[  120.736065][ T7380] team0: Port device team_slave_1 added
[  120.810739][ T5710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.831805][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.834634][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.846937][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.866707][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.870102][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.882151][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.956648][ T5710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.031841][ T5710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.080577][ T7380] hsr_slave_0: entered promiscuous mode
[  121.084076][ T7380] hsr_slave_1: entered promiscuous mode
[  121.086736][ T7380] debugfs: 'hsr0' already exists in 'hsr'
[  121.089467][ T7380] Cannot create hsr debugfs directory
[  121.115618][ T5710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.286014][ T7392] chnl_net:caif_netlink_parms(): no params data found
[  121.835320][ T7416] netlink: 'syz.2.585': attribute type 21 has an invalid length.
[  121.914140][ T5710] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.921977][ T5710] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.926823][ T5710] .` (unregistering): Released all slaves
[  121.958066][   T10] erspan0 speed is unknown, defaulting to 1000
[  121.960691][   T10] syz2: Port: 1 Link DOWN
[  122.047675][ T5233] Bluetooth: hci3: command tx timeout
[  122.050084][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.052400][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.054786][ T7392] bridge_slave_0: entered allmulticast mode
[  122.059062][ T7392] bridge_slave_0: entered promiscuous mode
[  122.062595][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.064904][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.067140][ T7392] bridge_slave_1: entered allmulticast mode
[  122.071316][ T7392] bridge_slave_1: entered promiscuous mode
[  122.082934][ T7380] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.102532][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.105822][ T7380] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.114186][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.117983][ T7380] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.141106][ T7380] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.151499][ T7392] team0: Port device team_slave_0 added
[  122.157155][ T7392] team0: Port device team_slave_1 added
[  122.184752][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.187017][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.196426][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.203514][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.206282][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.216583][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.272449][ T7392] hsr_slave_0: entered promiscuous mode
[  122.275547][ T7392] hsr_slave_1: entered promiscuous mode
[  122.278512][ T7392] debugfs: 'hsr0' already exists in 'hsr'
[  122.280745][ T7392] Cannot create hsr debugfs directory
[  122.448277][ T5233] Bluetooth: hci4: command tx timeout
[  122.468082][ T7392] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  122.475726][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.479823][ T7392] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  122.484138][ T7392] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  122.494038][ T7392] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  122.502835][ T7380] 8021q: adding VLAN 0 to HW filter on device team0
[  122.511730][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.514328][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.546091][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.549106][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.705866][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.726607][ T7392] 8021q: adding VLAN 0 to HW filter on device team0
[  122.732638][  T412] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.734901][  T412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.744581][  T412] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.747273][  T412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.836470][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.893046][ T7380] veth0_vlan: entered promiscuous mode
[  122.911098][ T7380] veth1_vlan: entered promiscuous mode
[  122.974038][ T7380] veth0_macvtap: entered promiscuous mode
[  122.984286][ T7380] veth1_macvtap: entered promiscuous mode
[  123.002189][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.011383][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.020345][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.047971][ T7409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.061636][ T7409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.066981][ T7409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.070966][ T7409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.184762][ T6037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.200061][ T6037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.263433][ T6037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.266405][ T6037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.348348][ T7392] veth0_vlan: entered promiscuous mode
[  123.362951][ T7392] veth1_vlan: entered promiscuous mode
[  123.432385][ T7392] veth0_macvtap: entered promiscuous mode
[  123.442282][ T7392] veth1_macvtap: entered promiscuous mode
[  123.459550][ T7470] sit0: entered allmulticast mode
[  123.472501][ T7470] sit0: entered promiscuous mode
[  123.516933][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.531761][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.541431][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.558963][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.574789][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.583070][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.916751][ T6524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.922112][ T6524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.055605][  T412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.058817][  T412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.127497][ T5233] Bluetooth: hci3: command tx timeout
[  124.528390][ T5233] Bluetooth: hci4: command tx timeout
[  124.933498][ T7505] svc: failed to register nfsdv3 RPC service (errno 111).
[  124.950398][ T7505] svc: failed to register nfsaclv3 RPC service (errno 111).
[  125.404562][ T7514] netlink: 'syz.2.591': attribute type 21 has an invalid length.
[  125.410626][ T7514] netlink: 128 bytes leftover after parsing attributes in process `syz.2.591'.
[  125.759447][ T7529] netlink: 'syz.3.597': attribute type 21 has an invalid length.
[  126.065588][ T7552] netlink: 'syz.3.605': attribute type 10 has an invalid length.
[  126.077098][ T7552] team0: Port device geneve1 added
[  126.213286][ T5233] Bluetooth: hci3: command tx timeout
[  126.424377][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'.
[  126.607456][ T5233] Bluetooth: hci4: command tx timeout
[  126.691329][ T7570] netlink: 176 bytes leftover after parsing attributes in process `syz.3.611'.
[  126.727056][ T7574] C: renamed from team_slave_0 (while UP)
[  126.731633][ T7574] netlink: 'syz.3.613': attribute type 8 has an invalid length.
[  126.734480][ T7574] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  128.200455][ T7594] netlink: 'syz.2.619': attribute type 21 has an invalid length.
[  128.288080][ T5233] Bluetooth: hci3: command tx timeout
[  128.345968][ T7598] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  128.654166][ T7619] delete_channel: no stack
[  128.660594][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'.
[  128.688619][ T5233] Bluetooth: hci4: command tx timeout
[  128.841388][ T7630] veth1_macvtap: left promiscuous mode
[  128.843169][ T7630] macsec0: entered promiscuous mode
[  128.920763][ T7631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.629'.
[  129.703758][ T7642] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  129.744612][   T33] audit: type=1107 audit(1757018355.545:3): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  129.951066][ T7658] netlink: 7 bytes leftover after parsing attributes in process `syz.4.647'.
[  129.984291][ T7658] netlink: 7 bytes leftover after parsing attributes in process `syz.4.647'.
[  130.311946][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[  130.376968][ T5233] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11
[  130.550724][ T7688] netlink: 'syz.4.659': attribute type 10 has an invalid length.
[  130.639515][ T7688] team0: Device ipvlan1 failed to register rx_handler
[  132.034967][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.676'.
[  132.041510][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'.
[  132.879238][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.881871][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.396694][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.685'.
[  133.493251][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[  134.458813][ T5233] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  134.463030][ T5233] Bluetooth: hci3: Injecting HCI hardware error event
[  134.466357][ T5233] Bluetooth: hci3: hardware error 0x00
[  134.612497][   T54] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  134.764415][ T7813] netlink: 64 bytes leftover after parsing attributes in process `syz.4.705'.
[  135.116404][ T7822] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.709'.
[  135.354142][ T7832] netlink: 'syz.4.714': attribute type 21 has an invalid length.
[  135.356869][ T7832] netlink: 'syz.4.714': attribute type 4 has an invalid length.
[  135.362076][ T7832] netlink: 14453 bytes leftover after parsing attributes in process `syz.4.714'.
[  135.906348][ T7842] netlink: 735 bytes leftover after parsing attributes in process `syz.4.719'.
[  136.016375][ T7854] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.725'.
[  136.168990][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.729'.
[  136.537367][ T5233] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  136.816387][ T7894] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  136.918038][ T7765] Set syz1 is full, maxelem 65536 reached
[  137.272116][ T7926] __nla_validate_parse: 2 callbacks suppressed
[  137.272128][ T7926] netlink: 80 bytes leftover after parsing attributes in process `syz.3.749'.
[  137.497502][ T7945] netlink: 'syz.4.757': attribute type 4 has an invalid length.
[  137.500009][ T7945] netlink: 132 bytes leftover after parsing attributes in process `syz.4.757'.
[  137.671610][ T7962] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.675623][ T7962] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.780615][ T8003] syzkaller0: entered promiscuous mode
[  138.782368][ T8003] syzkaller0: entered allmulticast mode
[  138.952113][ T8015] netlink: 'syz.4.780': attribute type 2 has an invalid length.
[  138.995764][ T8019] openvswitch: netlink: IP tunnel dst address not specified
[  139.372461][ T8035] netlink: 'syz.3.789': attribute type 21 has an invalid length.
[  139.377698][ T8035] netlink: 128 bytes leftover after parsing attributes in process `syz.3.789'.
[  139.381710][ T8035] netlink: 'syz.3.789': attribute type 4 has an invalid length.
[  139.385628][ T8035] netlink: 'syz.3.789': attribute type 5 has an invalid length.
[  139.389316][ T8037] netlink: 208 bytes leftover after parsing attributes in process `syz.4.790'.
[  139.389803][ T8035] netlink: 3 bytes leftover after parsing attributes in process `syz.3.789'.
[  139.455580][ T8041] netlink: 132 bytes leftover after parsing attributes in process `syz.4.791'.
[  139.912704][ T8071] : entered promiscuous mode
[  139.914769][ T8071] : entered allmulticast mode
[  140.018676][ T8077] netlink: 'syz.3.808': attribute type 11 has an invalid length.
[  140.021288][ T8077] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.808'.
[  140.084650][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.218625][ T8096] netlink: 'syz.3.816': attribute type 21 has an invalid length.
[  141.343158][ T8099] netlink: 112 bytes leftover after parsing attributes in process `syz.3.817'.
[  142.315381][ T8117] netlink: 'syz.3.825': attribute type 9 has an invalid length.
[  142.318589][ T8117] netlink: 211924 bytes leftover after parsing attributes in process `syz.3.825'.
[  142.362977][ T8122] netlink: 'syz.2.827': attribute type 21 has an invalid length.
[  142.678696][ T8140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.835'.
[  142.844240][ T8160] netlink: 184 bytes leftover after parsing attributes in process `syz.4.846'.
[  142.945321][ T8166] netlink: 'syz.2.847': attribute type 21 has an invalid length.
[  143.245175][ T8188] netlink: 164 bytes leftover after parsing attributes in process `syz.3.860'.
[  143.282978][ T8191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.858'.
[  143.290018][ T8186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.858'.
[  143.485820][ T8186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.986271][ T8202] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.865'.
[  146.859680][ T8222] netlink: 17 bytes leftover after parsing attributes in process `syz.2.874'.
[  146.862639][ T8222] netlink: zone id is out of range
[  146.864370][ T8222] netlink: zone id is out of range
[  146.866077][ T8222] netlink: zone id is out of range
[  146.868013][ T8222] netlink: zone id is out of range
[  146.869767][ T8222] netlink: zone id is out of range
[  146.871456][ T8222] netlink: zone id is out of range
[  146.873156][ T8222] netlink: zone id is out of range
[  146.874893][ T8222] netlink: zone id is out of range
[  146.876613][ T8222] netlink: zone id is out of range
[  146.967766][ T8228] netlink: 'syz.3.877': attribute type 21 has an invalid length.
[  147.791921][ T8235] netlink: 'syz.3.879': attribute type 1 has an invalid length.
[  147.837171][ T8237] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.880'.
[  147.883452][ T8229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.875'.
[  147.909734][ T8239] netlink: 152 bytes leftover after parsing attributes in process `syz.2.881'.
[  147.912725][ T8239] tc_dump_action: action bad kind
[  148.433733][ T8262] netlink: 16094 bytes leftover after parsing attributes in process `syz.4.891'.
[  148.636999][ T8265] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  148.667623][ T8265] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.820507][ T8274] netlink: 'syz.4.896': attribute type 3 has an invalid length.
[  149.414556][ T8315] netlink: 10 bytes leftover after parsing attributes in process `syz.4.915'.
[  149.490027][ T8323] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.914'.
[  149.772480][ T5233] Bluetooth: hci4: unexpected event 0x23 length: 15 > 13
[  152.077595][ T8320] syz.2.916: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  152.085782][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.2.916 Not tainted syzkaller #0 PREEMPT(full) 
[  152.085794][ T8320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.085800][ T8320] Call Trace:
[  152.085804][ T8320]  <TASK>
[  152.085819][ T8320]  dump_stack_lvl+0x189/0x250
[  152.085836][ T8320]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.085845][ T8320]  ? __pfx__printk+0x10/0x10
[  152.085856][ T8320]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  152.085867][ T8320]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  152.085876][ T8320]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  152.085886][ T8320]  warn_alloc+0x214/0x310
[  152.085901][ T8320]  ? __pfx_warn_alloc+0x10/0x10
[  152.085916][ T8320]  ? __get_vm_area_node+0x28f/0x300
[  152.085927][ T8320]  ? hash_netportnet_create+0x354/0xf90
[  152.085942][ T8320]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  152.085990][ T8320]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  152.086006][ T8320]  ? hash_netportnet_create+0x354/0xf90
[  152.086022][ T8320]  ? __get_vm_area_node+0x28f/0x300
[  152.086039][ T8320]  ? hash_netportnet_create+0x354/0xf90
[  152.086051][ T8320]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  152.086061][ T8320]  ? hash_netportnet_create+0x354/0xf90
[  152.086085][ T8320]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  152.086099][ T8320]  ? rcu_is_watching+0x15/0xb0
[  152.086107][ T8320]  ? hash_netportnet_create+0x354/0xf90
[  152.086118][ T8320]  ? hash_netportnet_create+0x354/0xf90
[  152.086130][ T8320]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  152.086141][ T8320]  ? hash_netportnet_create+0x354/0xf90
[  152.086152][ T8320]  ? hash_netportnet_create+0x2fa/0xf90
[  152.086165][ T8320]  hash_netportnet_create+0x354/0xf90
[  152.086179][ T8320]  ? __nla_parse+0x40/0x60
[  152.086191][ T8320]  ? __pfx_hash_netportnet_create+0x10/0x10
[  152.086203][ T8320]  ip_set_create+0xa97/0x1940
[  152.086212][ T8320]  ? ip_set_create+0x4a2/0x1940
[  152.086226][ T8320]  ? __pfx_ip_set_create+0x10/0x10
[  152.086251][ T8320]  nfnetlink_rcv_msg+0xb4d/0x1130
[  152.086261][ T8320]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  152.086278][ T8320]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  152.086287][ T8320]  ? kasan_save_free_info+0x46/0x50
[  152.086317][ T8320]  netlink_rcv_skb+0x208/0x470
[  152.086328][ T8320]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  152.086338][ T8320]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  152.086354][ T8320]  ? bpf_lsm_capable+0x9/0x20
[  152.086364][ T8320]  ? security_capable+0x7e/0x2e0
[  152.086384][ T8320]  nfnetlink_rcv+0x26a/0x2520
[  152.086395][ T8320]  ? __dev_queue_xmit+0x1d79/0x3b50
[  152.086409][ T8320]  ? __dev_queue_xmit+0x27b/0x3b50
[  152.086423][ T8320]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  152.086432][ T8320]  ? __pfx___dev_queue_xmit+0x10/0x10
[  152.086446][ T8320]  ? ref_tracker_free+0x63a/0x7d0
[  152.086457][ T8320]  ? __asan_memcpy+0x40/0x70
[  152.086466][ T8320]  ? __pfx_ref_tracker_free+0x10/0x10
[  152.086475][ T8320]  ? __skb_clone+0x63/0x7a0
[  152.086485][ T8320]  ? __skb_clone+0x483/0x7a0
[  152.086495][ T8320]  ? skb_clone+0x246/0x3a0
[  152.086505][ T8320]  ? __netlink_deliver_tap+0x807/0x850
[  152.086515][ T8320]  ? netlink_deliver_tap+0x2e/0x1b0
[  152.086528][ T8320]  ? netlink_deliver_tap+0x2e/0x1b0
[  152.086542][ T8320]  netlink_unicast+0x82f/0x9e0
[  152.086555][ T8320]  ? __pfx_netlink_unicast+0x10/0x10
[  152.086565][ T8320]  ? netlink_sendmsg+0x642/0xb30
[  152.086575][ T8320]  ? skb_put+0x11b/0x210
[  152.086588][ T8320]  netlink_sendmsg+0x805/0xb30
[  152.086602][ T8320]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.086614][ T8320]  ? aa_sock_msg_perm+0xf1/0x1d0
[  152.086627][ T8320]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.086635][ T8320]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.086646][ T8320]  __sock_sendmsg+0x21c/0x270
[  152.086657][ T8320]  ____sys_sendmsg+0x505/0x830
[  152.086668][ T8320]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.086680][ T8320]  ? import_iovec+0x74/0xa0
[  152.086690][ T8320]  ___sys_sendmsg+0x21f/0x2a0
[  152.086699][ T8320]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.086722][ T8320]  ? __fget_files+0x2a/0x420
[  152.086733][ T8320]  ? __fget_files+0x3a0/0x420
[  152.086749][ T8320]  __x64_sys_sendmsg+0x19b/0x260
[  152.086758][ T8320]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.086770][ T8320]  ? rcu_is_watching+0x15/0xb0
[  152.086780][ T8320]  ? do_syscall_64+0xbe/0x3b0
[  152.086793][ T8320]  do_syscall_64+0xfa/0x3b0
[  152.086802][ T8320]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.086812][ T8320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.086820][ T8320]  ? exc_page_fault+0x9f/0xf0
[  152.086830][ T8320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.086838][ T8320] RIP: 0033:0x7f6127d8ebe9
[  152.086847][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.086853][ T8320] RSP: 002b:00007f6128bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.086862][ T8320] RAX: ffffffffffffffda RBX: 00007f6127fc5fa0 RCX: 00007f6127d8ebe9
[  152.086868][ T8320] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  152.086872][ T8320] RBP: 00007f6127e11e19 R08: 0000000000000000 R09: 0000000000000000
[  152.086877][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.086881][ T8320] R13: 00007f6127fc6038 R14: 00007f6127fc5fa0 R15: 00007fffcffa95e8
[  152.086894][ T8320]  </TASK>
[  152.086898][ T8320] Mem-Info:
[  152.277590][ T8320] active_anon:19257 inactive_anon:2 isolated_anon:0
[  152.277590][ T8320]  active_file:13616 inactive_file:38258 isolated_file:0
[  152.277590][ T8320]  unevictable:1768 dirty:60 writeback:0
[  152.277590][ T8320]  slab_reclaimable:10034 slab_unreclaimable:63282
[  152.277590][ T8320]  mapped:14406 shmem:2454 pagetables:1051
[  152.277590][ T8320]  sec_pagetables:0 bounce:0
[  152.277590][ T8320]  kernel_misc_reclaimable:0
[  152.277590][ T8320]  free:237424 free_pcp:19941 free_cma:0
[  152.357404][ T8320] Node 0 active_anon:13140kB inactive_anon:0kB active_file:38804kB inactive_file:88616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37508kB dirty:188kB writeback:0kB shmem:5184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3056kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  152.411099][ T8320] Node 1 active_anon:63888kB inactive_anon:8kB active_file:15660kB inactive_file:64416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26440kB dirty:52kB writeback:0kB shmem:4632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9412kB pagetables:1856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  152.429665][ T8320] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  152.443854][ T8320] lowmem_reserve[]: 0 811 811 811 811
[  152.445148][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.445965][ T8320] Node 0 
[  152.451707][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.455714][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  152.458601][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  152.461432][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  152.480179][ T8363] : entered promiscuous mode
[  152.502266][ T8320] DMA32 free:176284kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13276kB inactive_anon:0kB active_file:38804kB inactive_file:88616kB unevictable:3536kB writepending:188kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:32536kB local_pcp:12772kB free_cma:0kB
[  152.514205][ T8320] lowmem_reserve[]: 0 0 0 0 0
[  152.515753][ T8320] Node 1 DMA32 free:429720kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80kB inactive_anon:4kB active_file:512kB inactive_file:0kB unevictable:0kB writepending:8kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:25684kB local_pcp:11656kB free_cma:0kB
[  152.529300][ T8320] lowmem_reserve[]: 0 0 854 854 854
[  152.532069][ T8320] Node 1 Normal free:283020kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63808kB inactive_anon:4kB active_file:15148kB inactive_file:64416kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:28108kB local_pcp:15468kB free_cma:0kB
[  152.542356][ T8320] lowmem_reserve[]: 0 0 0 0 0
[  152.543946][ T8320] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  152.549722][ T8320] Node 0 DMA32: 2737*4kB (UME) 267*8kB (ME) 178*16kB (UME) 148*32kB (UME) 99*64kB (ME) 68*128kB (M) 20*256kB (UM) 8*512kB (UME) 2*1024kB (M) 3*2048kB (UME) 30*4096kB (M) = 175996kB
[  152.555850][ T8320] Node 1 DMA32: 15*4kB (UM) 11*8kB (UM) 12*16kB (UE) 7*32kB (UM) 2*64kB (U) 2*128kB (UE) 5*256kB (UME) 5*512kB (UE) 5*1024kB (UME) 5*2048kB (UME) 100*4096kB (UM) = 429748kB
[  152.562599][ T8320] Node 1 Normal: 238*4kB (M) 188*8kB (UME) 67*16kB (ME) 16*32kB (UME) 129*64kB (UM) 93*128kB (UME) 69*256kB (UM) 59*512kB (UME) 54*1024kB (UM) 8*2048kB (U) 34*4096kB (UM) = 283016kB
[  152.569035][ T8320] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  152.571810][ T8320] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  152.574693][ T8320] 54369 total pagecache pages
[  152.576113][ T8320] 25 pages in swap cache
[  152.577484][ T8320] Free swap  = 124844kB
[  152.578780][ T8320] Total swap = 124996kB
[  152.580804][ T8320] 786301 pages RAM
[  152.582073][ T8320] 0 pages HighMem/MovableOnly
[  152.583528][ T8320] 241329 pages reserved
[  152.584816][ T8320] 0 pages cma reserved
[  152.634757][ T8364] chnl_net:caif_netlink_parms(): no params data found
[  152.730201][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.732513][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.735831][ T8364] bridge_slave_0: entered allmulticast mode
[  152.739555][ T8364] bridge_slave_0: entered promiscuous mode
[  152.743177][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.745542][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.747966][ T8364] bridge_slave_1: entered allmulticast mode
[  152.750893][ T8364] bridge_slave_1: entered promiscuous mode
[  152.773834][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.780218][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.802293][ T8364] team0: Port device team_slave_0 added
[  152.806342][ T8364] team0: Port device team_slave_1 added
[  152.848807][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.851356][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.861387][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.867855][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.870051][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.880097][ T8377] TCP: TCP_TX_DELAY enabled
[  152.881665][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.932925][ T8364] hsr_slave_0: entered promiscuous mode
[  152.940721][ T8364] hsr_slave_1: entered promiscuous mode
[  152.945850][ T8364] debugfs: 'hsr0' already exists in 'hsr'
[  152.947972][ T8364] Cannot create hsr debugfs directory
[  153.103759][ T8320] syz.2.916 (8320) used greatest stack depth: 15760 bytes left
[  153.115187][ T8364] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  153.120264][ T8364] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  153.135454][ T8364] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  153.144152][ T8364] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  153.200558][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.203011][ T8364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.205492][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.207818][ T8364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.260911][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.272012][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.274835][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.286565][ T8364] 8021q: adding VLAN 0 to HW filter on device team0
[  153.306222][  T412] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.308447][  T412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.313655][  T412] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.315940][  T412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.435277][ T8401] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.944'.
[  153.445999][ T8400] syzkaller1: tun_chr_ioctl cmd 1074025677
[  153.451288][ T8400] syzkaller1: linktype set to 823
[  153.516210][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.655617][ T8364] veth0_vlan: entered promiscuous mode
[  153.663844][ T8364] veth1_vlan: entered promiscuous mode
[  153.684393][ T8364] veth0_macvtap: entered promiscuous mode
[  153.689285][ T8364] veth1_macvtap: entered promiscuous mode
[  153.711252][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.731379][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.743863][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.747716][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.753955][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.756600][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.823872][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.826344][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.854447][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.857921][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.977066][ T8431] net_ratelimit: 81 callbacks suppressed
[  153.977078][ T8431] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  154.028175][ T8428] netlink: 84 bytes leftover after parsing attributes in process `syz.5.932'.
[  154.286141][ T8444] syzkaller0: entered promiscuous mode
[  154.291046][ T8444] syzkaller0: entered allmulticast mode
[  154.528410][ T5233] Bluetooth: hci0: command tx timeout
[  156.607909][ T5233] Bluetooth: hci0: command tx timeout
[  158.492655][ T8457] hsr0: entered promiscuous mode
[  158.565855][ T8467] netlink: 'syz.5.969': attribute type 4 has an invalid length.
[  158.568390][ T8467] netlink: 152 bytes leftover after parsing attributes in process `syz.5.969'.
[  158.576212][ T8467] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  158.660224][ T8471] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.970'.
[  158.687998][ T5233] Bluetooth: hci0: command tx timeout
[  159.224314][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.986'.
[  159.418685][ T8511] syzkaller1: tun_chr_ioctl cmd 1074812118
[  159.425077][ T8511] netlink: 'syz.4.990': attribute type 3 has an invalid length.
[  159.428463][ T8511] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.990'.
[  159.491668][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.988'.
[  159.623459][ T8518] netlink: 14 bytes leftover after parsing attributes in process `syz.4.992'.
[  160.136674][ T8561] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1012'.
[  160.253269][ T8567] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1015'.
[  160.299261][ T5233] Bluetooth: hci2: Malformed HCI Event
[  160.432261][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1019'.
[  160.769708][ T5233] Bluetooth: hci0: command tx timeout
[  161.493467][ T8598] netlink: 'syz.5.1027': attribute type 13 has an invalid length.
[  161.496716][ T8598] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.1027'.
[  161.605046][ T8609] openvswitch: netlink: Message has 1 unknown bytes.
[  161.605118][ T8610] netlink: 'syz.2.1032': attribute type 3 has an invalid length.
[  161.611173][ T8610] netlink: 'syz.2.1032': attribute type 4 has an invalid length.
[  161.617676][ T8609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.643398][ T8612] netlink: 'syz.5.1034': attribute type 1 has an invalid length.
[  161.647633][ T1102] wlan1: Trigger new scan to find an IBSS to join
[  161.648112][ T8612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.749427][ T8622] netlink: 'syz.5.1039': attribute type 1 has an invalid length.
[  161.754013][ T8617] netlink: 'syz.2.1035': attribute type 10 has an invalid length.
[  161.765325][ T8617] macvlan0: entered promiscuous mode
[  161.771349][ T8617] macvlan0: entered allmulticast mode
[  161.827613][ T8617] veth1_vlan: entered allmulticast mode
[  161.884921][ T8617] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  162.372559][ T8654] netlink: 'syz.5.1053': attribute type 16 has an invalid length.
[  163.169643][ T8665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.636955][ T8701] __nla_validate_parse: 2 callbacks suppressed
[  163.636966][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'.
[  163.721173][ T8707] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  163.751796][ T8707] syzkaller0: entered promiscuous mode
[  163.753916][ T8707] syzkaller0: entered allmulticast mode
[  165.857428][ T6037] wlan1: Trigger new scan to find an IBSS to join
[  166.534525][ T8760] netlink: 16182 bytes leftover after parsing attributes in process `syz.4.1102'.
[  166.760440][  T412] wlan1: Creating new IBSS network, BSSID e6:09:4f:bf:c3:d0
[  167.119219][ T8783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'.
[  167.642773][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1045191455 wd_nsec: 1045191456
[  168.105722][ T8802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.108938][ T8802] IPv6: NLM_F_CREATE should be set when creating new route
[  168.111872][ T8802] IPv6: NLM_F_CREATE should be set when creating new route
[  168.114652][ T8802] IPv6: NLM_F_CREATE should be set when creating new route
[  168.306308][ T8819] xt_time: unknown flags 0xf4
[  168.373352][ T8825] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1131'.
[  168.542898][ T8835] Set syz1 is full, maxelem 65536 reached
[  169.266585][ T8874] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1155'.
[  169.305061][ T8874] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1155'.
[  169.461115][ T5233] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  169.465609][ T8886] openvswitch: netlink: Flow key attr not present in new flow.
[  169.758615][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1166'.
[  169.761838][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1166'.
[  169.764941][ T8899] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1166'.
[  169.927170][ T8912] netlink: 'syz.5.1172': attribute type 9 has an invalid length.
[  169.931963][ T8912] netlink: 204732 bytes leftover after parsing attributes in process `syz.5.1172'.
[  169.986826][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1174'.
[  170.024749][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1176'.
[  170.459808][ T8948] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1189'.
[  170.716460][ T8954] netlink: 'syz.5.1192': attribute type 6 has an invalid length.
[  171.282285][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1199'.
[  171.493848][ T8984] C: renamed from team_slave_0 (while UP)
[  171.499839][ T8984] netlink: 'syz.5.1206': attribute type 4 has an invalid length.
[  171.503420][ T8984] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  172.174689][ T9010] netlink: 'syz.2.1217': attribute type 29 has an invalid length.
[  172.236216][ T9010] netlink: 'syz.2.1217': attribute type 29 has an invalid length.
[  174.172339][ T9091] hsr_slave_0: left promiscuous mode
[  174.175664][ T9091] hsr_slave_1: left promiscuous mode
[  175.374861][ T9174] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  175.634635][ T9196] __nla_validate_parse: 6 callbacks suppressed
[  175.634689][ T9196] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1303'.
[  175.648025][ T9197] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1299'.
[  176.410583][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'.
[  176.557462][ T5233] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[  176.731972][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'.
[  176.821410][ T9229] netlink: 'syz.4.1318': attribute type 21 has an invalid length.
[  176.862101][ T9227] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1317'.
[  177.146752][ T9245] netlink: 'syz.2.1326': attribute type 10 has an invalid length.
[  177.172916][ T9245] veth1_macvtap: left promiscuous mode
[  177.847676][ T9265] netlink: 'syz.4.1334': attribute type 23 has an invalid length.
[  177.909821][ T9268] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1336'.
[  177.913461][ T9268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1336'.
[  183.106489][ T9300] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1350'.
[  183.166618][ T9303] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1351'.
[  183.176297][ T9303] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  183.257063][ T9305] ref_ctr_offset mismatch. inode: 0x6c3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  186.490695][ T9349] tmpfs: Bad value for 'mode'
[  186.500907][ T9351] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.1373'.
[  186.626055][ T9356] tc_dump_action: action bad kind
[  186.664405][ T9358] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1376'.
[  186.723223][ T9361] netlink: 'syz.2.1377': attribute type 28 has an invalid length.
[  186.812320][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'.
[  186.820976][ T9353] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1374'.
[  187.302530][ T9381] netlink: 'syz.4.1385': attribute type 5 has an invalid length.
[  187.304967][ T9381] netlink: 'syz.4.1385': attribute type 15 has an invalid length.
[  187.996888][ T9405] netlink: 'syz.4.1395': attribute type 10 has an invalid length.
[  188.112112][ T9405] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  188.811904][ T9428] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1404'.
[  189.302481][ T9448] nft_compat: unsupported protocol 0
[  189.591556][ T9451] syzkaller0: entered promiscuous mode
[  189.595277][ T9451] syzkaller0: entered allmulticast mode
[  190.704859][ T9460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.031046][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  192.138672][ T9497] IPv6: NLM_F_CREATE should be specified when creating new route
[  192.144065][ T9497] netlink: 'syz.4.1434': attribute type 2 has an invalid length.
[  192.147432][ T9497] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.1434'.
[  193.148694][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.155314][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.160110][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.163750][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.166521][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.320052][ T9527] chnl_net:caif_netlink_parms(): no params data found
[  193.424551][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.426953][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.430090][ T9527] bridge_slave_0: entered allmulticast mode
[  193.432941][ T9527] bridge_slave_0: entered promiscuous mode
[  193.436274][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.437167][ T9548] siw: device registration error -23
[  193.443126][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.445393][ T9527] bridge_slave_1: entered allmulticast mode
[  193.449927][ T9527] bridge_slave_1: entered promiscuous mode
[  193.474210][ T9527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.479352][ T9527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.503909][ T9527] team0: Port device team_slave_0 added
[  193.507872][ T9527] team0: Port device team_slave_1 added
[  193.543081][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.545372][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.559390][ T9527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.567328][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.569613][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.578101][ T9527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.641149][ T9527] hsr_slave_0: entered promiscuous mode
[  193.643485][ T9527] hsr_slave_1: entered promiscuous mode
[  193.645863][ T9527] debugfs: 'hsr0' already exists in 'hsr'
[  193.667898][ T9527] Cannot create hsr debugfs directory
[  194.052194][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.054184][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.062710][ T9527] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  194.082787][ T9527] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  194.093989][ T9527] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  194.117907][ T9527] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  194.166426][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.168616][ T9527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.170853][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.173070][ T9527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.209286][ T9527] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.213199][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.216334][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.241524][ T9527] 8021q: adding VLAN 0 to HW filter on device team0
[  194.249863][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.252796][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.262791][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.265689][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.410708][ T9527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.249944][   T54] Bluetooth: hci0: command tx timeout
[  196.035026][ T9527] veth0_vlan: entered promiscuous mode
[  196.054664][ T9527] veth1_vlan: entered promiscuous mode
[  196.079747][ T9527] veth0_macvtap: entered promiscuous mode
[  196.086279][ T9527] veth1_macvtap: entered promiscuous mode
[  196.117111][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.134798][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.171281][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.175151][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.178525][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.182266][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.312726][ T6037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.315940][ T6037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.343705][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.346849][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.494814][ T9617] netlink: 'syz.4.1480': attribute type 1 has an invalid length.
[  196.741859][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'.
[  196.769990][ T6039] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  197.328809][   T54] Bluetooth: hci0: command tx timeout
[  199.407838][   T54] Bluetooth: hci0: command tx timeout
[  200.088160][ T9667] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1494'.
[  200.143962][ T9668] netlink: 'syz.4.1494': attribute type 1 has an invalid length.
[  200.148323][ T9668] netlink: 'syz.4.1494': attribute type 2 has an invalid length.
[  201.488031][   T54] Bluetooth: hci0: command tx timeout
[  201.585903][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1526'.
[  202.063731][ T9761] netlink: 'syz.6.1539': attribute type 21 has an invalid length.
[  202.067008][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1539'.
[  202.206788][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1544'.
[  202.616585][ T9776] openvswitch: netlink: Missing valid actions attribute.
[  202.622887][ T9776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.372030][   T54] Bluetooth: hci0: unexpected event 0x01 length: 151 > 1
[  203.522224][ T9802] syzkaller0: entered promiscuous mode
[  203.530279][ T9802] syzkaller0: entered allmulticast mode
[  203.539815][ T9802] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  203.596972][ T9815] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1562'.
[  203.707519][ T9819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1566'.
[  203.720813][ T9821] netlink: 'syz.6.1565': attribute type 58 has an invalid length.
[  203.723664][ T9821] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1565'.
[  203.761276][ T9826] Set syz1 is full, maxelem 65536 reached
[  203.944624][ T9837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.357517][   T54] Bluetooth: hci2: Unable to find connection for big 0x00
[  204.380883][ T9864] netlink: 'syz.6.1582': attribute type 10 has an invalid length.
[  204.383582][ T9864] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1582'.
[  204.443700][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'.
[  204.859166][ T9892] netlink: 'syz.6.1594': attribute type 29 has an invalid length.
[  204.863060][ T9892] netlink: 'syz.6.1594': attribute type 29 has an invalid length.
[  205.146672][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1597'.
[  205.150602][ T9898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.285782][ T9911] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1603'.
[  205.530958][ T9925] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1609'.
[  205.613494][ T9931] netlink: 'syz.6.1612': attribute type 2 has an invalid length.
[  205.627163][ T9929] netlink: 'syz.4.1610': attribute type 12 has an invalid length.
[  205.642333][ T9933] netlink: 'syz.6.1613': attribute type 20 has an invalid length.
[  205.645612][ T9933] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.720775][ T9941] netlink: 'syz.2.1615': attribute type 21 has an invalid length.
[  205.745562][ T9943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.748580][ T9943] IPv6: NLM_F_CREATE should be set when creating new route
[  205.751149][ T9943] IPv6: NLM_F_CREATE should be set when creating new route
[  205.753792][ T9943] IPv6: NLM_F_CREATE should be set when creating new route
[  206.151998][ T9983] netlink: zone id is out of range
[  206.154111][ T9983] netlink: zone id is out of range
[  206.156149][ T9983] netlink: zone id is out of range
[  206.162143][ T9983] netlink: zone id is out of range
[  206.163812][ T9983] netlink: zone id is out of range
[  206.492034][ T9996] netlink: 'syz.2.1643': attribute type 11 has an invalid length.
[  207.296642][T10039] __nla_validate_parse: 7 callbacks suppressed
[  207.296653][T10039] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.1664'.
[  207.319463][T10041] netlink: 42496 bytes leftover after parsing attributes in process `syz.4.1665'.
[  208.220440][T10065] netlink: 'syz.4.1674': attribute type 1 has an invalid length.
[  208.223161][T10065] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1674'.
[  208.380826][T10072] net_ratelimit: 82 callbacks suppressed
[  208.380837][T10072] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  208.443951][T10078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.492036][T10080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1681'.
[  208.651788][T10091] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1686'.
[  208.736510][T10097] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1689'.
[  208.784133][T10101] netlink: 'syz.4.1691': attribute type 1 has an invalid length.
[  209.341013][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1705'.
[  210.120586][T10143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1708'.
[  210.344822][T10152] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1712'.
[  210.351131][T10152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.391816][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1713'.
[  210.583946][T10161] netlink: 'syz.2.1714': attribute type 7 has an invalid length.
[  210.702610][T10168] netlink: 'syz.6.1719': attribute type 10 has an invalid length.
[  210.936029][T10184] : renamed from hsr0 (while UP)
[  211.519960][T10208] warn_alloc: 1 callbacks suppressed
[  211.519974][T10208] syz.2.1738: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  211.536565][T10208] CPU: 1 UID: 0 PID: 10208 Comm: syz.2.1738 Not tainted syzkaller #0 PREEMPT(full) 
[  211.536580][T10208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.536586][T10208] Call Trace:
[  211.536590][T10208]  <TASK>
[  211.536594][T10208]  dump_stack_lvl+0x189/0x250
[  211.536610][T10208]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.536620][T10208]  ? __pfx__printk+0x10/0x10
[  211.536631][T10208]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  211.536643][T10208]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  211.536653][T10208]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  211.536664][T10208]  warn_alloc+0x214/0x310
[  211.536677][T10208]  ? stack_depot_save_flags+0x40/0x860
[  211.536689][T10208]  ? __pfx_warn_alloc+0x10/0x10
[  211.536701][T10208]  ? kasan_save_track+0x4f/0x80
[  211.536710][T10208]  ? xskq_create+0x56/0x170
[  211.536727][T10208]  ? xsk_init_queue+0xb0/0x110
[  211.536737][T10208]  ? xsk_setsockopt+0x57b/0x8d0
[  211.536745][T10208]  ? do_sock_setsockopt+0x17c/0x1b0
[  211.536757][T10208]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  211.536767][T10208]  ? do_syscall_64+0xfa/0x3b0
[  211.536777][T10208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.536788][T10208]  __vmalloc_node_range_noprof+0x125/0x12f0
[  211.536813][T10208]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  211.536827][T10208]  ? __kasan_kmalloc+0x93/0xb0
[  211.536838][T10208]  vmalloc_user_noprof+0xad/0xf0
[  211.536849][T10208]  ? xskq_create+0xbf/0x170
[  211.536859][T10208]  xskq_create+0xbf/0x170
[  211.536870][T10208]  xsk_init_queue+0xb0/0x110
[  211.536880][T10208]  xsk_setsockopt+0x57b/0x8d0
[  211.536890][T10208]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.536899][T10208]  ? __pfx_aa_sk_perm+0x10/0x10
[  211.536911][T10208]  ? __fget_files+0x2a/0x420
[  211.536922][T10208]  ? aa_sock_opt_perm+0xff/0x1b0
[  211.536935][T10208]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  211.536943][T10208]  ? __pfx_xsk_setsockopt+0x10/0x10
[  211.536952][T10208]  do_sock_setsockopt+0x17c/0x1b0
[  211.536966][T10208]  __x64_sys_setsockopt+0x13f/0x1b0
[  211.536980][T10208]  do_syscall_64+0xfa/0x3b0
[  211.536989][T10208]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.536999][T10208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.537006][T10208]  ? exc_page_fault+0x9f/0xf0
[  211.537017][T10208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.537024][T10208] RIP: 0033:0x7f6127d8ebe9
[  211.537032][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.537038][T10208] RSP: 002b:00007f6128bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  211.537048][T10208] RAX: ffffffffffffffda RBX: 00007f6127fc5fa0 RCX: 00007f6127d8ebe9
[  211.537053][T10208] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  211.537058][T10208] RBP: 00007f6127e11e19 R08: 0000000000000004 R09: 0000000000000000
[  211.537063][T10208] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  211.537068][T10208] R13: 00007f6127fc6038 R14: 00007f6127fc5fa0 R15: 00007fffcffa95e8
[  211.537081][T10208]  </TASK>
[  211.537086][T10208] Mem-Info:
[  211.651940][T10208] active_anon:18358 inactive_anon:0 isolated_anon:0
[  211.651940][T10208]  active_file:13729 inactive_file:38286 isolated_file:0
[  211.651940][T10208]  unevictable:1768 dirty:276 writeback:0
[  211.651940][T10208]  slab_reclaimable:5961 slab_unreclaimable:71306
[  211.651940][T10208]  mapped:18035 shmem:2455 pagetables:1099
[  211.651940][T10208]  sec_pagetables:0 bounce:0
[  211.651940][T10208]  kernel_misc_reclaimable:0
[  211.651940][T10208]  free:248874 free_pcp:24605 free_cma:0
[  211.670232][T10208] Node 0 active_anon:10724kB inactive_anon:0kB active_file:39200kB inactive_file:88664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45316kB dirty:904kB writeback:0kB shmem:5184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3376kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  211.681424][T10208] Node 1 active_anon:62708kB inactive_anon:0kB active_file:15716kB inactive_file:64480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26824kB dirty:200kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9936kB pagetables:1884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  211.693567][T10208] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  211.702494][T10208] lowmem_reserve[]: 0 811 811 811 811
[  211.707682][T10208] Node 0 DMA32 free:237876kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10724kB inactive_anon:0kB active_file:39200kB inactive_file:88664kB unevictable:3536kB writepending:904kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:46736kB local_pcp:19400kB free_cma:0kB
[  211.722748][T10208] lowmem_reserve[]: 0 0 0 0 0
[  211.724410][T10208] Node 1 DMA32 free:440040kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:512kB inactive_file:0kB unevictable:0kB writepending:8kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17096kB local_pcp:10556kB free_cma:0kB
[  211.735448][T10208] lowmem_reserve[]: 0 0 854 854 854
[  211.739976][T10208] Node 1 Normal free:301836kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62708kB inactive_anon:0kB active_file:15204kB inactive_file:64480kB unevictable:3536kB writepending:192kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35020kB local_pcp:17336kB free_cma:0kB
[  211.752481][T10208] lowmem_reserve[]: 0 0 0 0 0
[  211.754503][T10208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  211.764084][T10208] Node 0 DMA32: 2115*4kB (UME) 845*8kB (UME) 660*16kB (UME) 346*32kB (UME) 150*64kB (UME) 83*128kB (UME) 24*256kB (UME) 5*512kB (M) 8*1024kB (UM) 6*2048kB (UME) 37*4096kB (UM) = 237812kB
[  211.771423][T10208] Node 1 DMA32: 16*4kB (UM) 11*8kB (UM) 11*16kB (UE) 15*32kB (UM) 5*64kB (U) 3*128kB (UE) 5*256kB (UME) 4*512kB (UE) 5*1024kB (UME) 6*2048kB (UME) 102*4096kB (UM) = 440040kB
[  211.780834][T10208] Node 1 Normal: 379*4kB (UME) 324*8kB (UME) 242*16kB (UME) 155*32kB (UME) 194*64kB (UME) 116*128kB (UME) 88*256kB (UM) 61*512kB (UME) 63*1024kB (UME) 10*2048kB (UME) 30*4096kB (UM) = 301836kB
[  211.787095][T10208] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.790156][T10208] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  211.793841][T10208] 54475 total pagecache pages
[  211.795871][T10208] 5 pages in swap cache
[  211.800363][T10208] Free swap  = 124976kB
[  211.802081][T10208] Total swap = 124996kB
[  211.803493][T10208] 786301 pages RAM
[  211.804827][T10208] 0 pages HighMem/MovableOnly
[  211.806409][T10208] 241329 pages reserved
[  211.807940][T10208] 0 pages cma reserved
[  214.855464][T10234] __nla_validate_parse: 4 callbacks suppressed
[  214.855537][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'.
[  214.885468][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1753'.
[  214.926293][T10246] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1755'.
[  214.998516][T10254] netlink: 'syz.6.1758': attribute type 3 has an invalid length.
[  215.001055][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1758'.
[  215.084406][T10258] syzkaller0: entered promiscuous mode
[  215.086165][T10258] syzkaller0: entered allmulticast mode
[  215.104211][T10260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1762'.
[  215.629108][T10299] netlink: 'syz.4.1777': attribute type 39 has an invalid length.
[  216.433200][T10327] netlink: 'syz.2.1789': attribute type 27 has an invalid length.
[  217.245543][T10354] netlink: 'syz.4.1803': attribute type 21 has an invalid length.
[  217.255307][T10354] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1803'.
[  217.263550][T10354] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1803'.
[  219.508194][T10371] netlink: 'syz.4.1809': attribute type 4 has an invalid length.
[  219.945393][T10388] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.1814'.
[  219.951077][T10388] netlink: 'syz.2.1814': attribute type 2 has an invalid length.
[  219.957522][T10388] netlink: 62135 bytes leftover after parsing attributes in process `syz.2.1814'.
[  220.556328][T10389] delete_channel: no stack
[  220.723680][T10404] syzkaller0: entered promiscuous mode
[  220.725433][T10404] syzkaller0: entered allmulticast mode
[  222.409175][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'.
[  222.503276][T10447] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1840'.
[  222.659326][T10462] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  222.691815][T10465] netlink: 'syz.2.1848': attribute type 10 has an invalid length.
[  222.694909][T10465] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1848'.
[  222.726704][T10465] : port 1(vlan0) entered disabled state
[  222.826896][T10465] vlan0 (unregistering): left allmulticast mode
[  222.831412][T10465] veth0_vlan (unregistering): left allmulticast mode
[  222.835550][T10465] vlan0 (unregistering): left promiscuous mode
[  222.843089][T10465] : port 1(vlan0) entered disabled state
[  222.901343][T10465] veth1_vlan (unregistering): left allmulticast mode
[  222.913457][T10465] bond0: (slave macvlan0): Releasing backup interface
[  222.932846][T10475] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1852'.
[  222.936798][T10474] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1852'.
[  223.166385][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.302764][T10491] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1859'.
[  223.645174][   T54] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  224.742676][T10562] netlink: 'syz.6.1889': attribute type 1 has an invalid length.
[  225.901809][T10576] C: renamed from team_slave_0 (while UP)
[  225.906037][T10576] netlink: 'syz.4.1896': attribute type 3 has an invalid length.
[  225.910766][T10576] netlink: 'syz.4.1896': attribute type 1 has an invalid length.
[  225.913906][T10576] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1896'.
[  225.922066][T10577] netlink: 'syz.2.1895': attribute type 29 has an invalid length.
[  225.983587][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'.
[  225.987769][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'.
[  226.116581][T10595] netlink: 'syz.4.1904': attribute type 11 has an invalid length.
[  226.123748][T10595] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1904'.
[  226.133407][T10594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.499082][T10619] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1914'.
[  226.502020][T10619] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1914'.
[  227.043430][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1926'.
[  227.231444][T10662] netlink: 'syz.6.1934': attribute type 1 has an invalid length.
[  228.127428][   T54] Bluetooth: hci0: Opcode 0x206a failed: -110
[  228.127954][ T5233] Bluetooth: hci0: command 0x206a tx timeout
[  228.152030][T10685] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1938'.
[  228.155561][T10680] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1938'.
[  228.162811][T10685] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1938'.
[  228.298250][T10695] netlink: 'syz.2.1944': attribute type 1 has an invalid length.
[  229.449261][T10741] netlink: 'syz.6.1966': attribute type 291 has an invalid length.
[  229.611452][ T5233] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  229.692872][T10757] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  229.740836][   T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  231.065333][T10804] __nla_validate_parse: 7 callbacks suppressed
[  231.065343][T10804] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1991'.
[  231.291245][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1994'.
[  231.678037][T10843] netlink: 'syz.2.2002': attribute type 12 has an invalid length.
[  231.681209][T10843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2002'.
[  231.718561][T10843] C: renamed from team_slave_0 (while UP)
[  231.760619][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2005'.
[  231.770683][T10843] netlink: 'syz.2.2002': attribute type 1 has an invalid length.
[  231.773773][T10843] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2002'.
[  231.824090][T10843] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  231.879500][T10861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2010'.
[  231.937097][T10867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2014'.
[  231.945965][T10867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2014'.
[  231.950841][T10867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2014'.
[  232.116786][T10878] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  232.220848][T10875] syzkaller0: entered promiscuous mode
[  232.222944][T10875] syzkaller0: entered allmulticast mode
[  232.267616][T10881] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2019'.
[  234.232188][ T5233] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  235.432094][   T33] audit: type=1107 audit(1757018461.235:4): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  235.677454][T10979] netlink: 'syz.4.2064': attribute type 3 has an invalid length.
[  235.680704][T10979] netlink: 'syz.4.2064': attribute type 1 has an invalid length.
[  235.719809][T10982] netlink: 'syz.2.2065': attribute type 11 has an invalid length.
[  235.751025][T10984] openvswitch: netlink: Unknown key attributes 1
[  236.289101][   T54] Bluetooth: hci4: command tx timeout
[  237.502373][T11035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.505554][T11035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.540751][T11035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.543297][T11035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.930418][T11051] __nla_validate_parse: 6 callbacks suppressed
[  237.930429][T11051] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2095'.
[  238.060707][T11067] netlink: 'syz.6.2103': attribute type 6 has an invalid length.
[  238.063120][T11067] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2103'.
[  238.399551][T11089] netlink: 'syz.4.2114': attribute type 10 has an invalid length.
[  238.402712][T11089] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2114'.
[  238.406774][T11089] bond0: entered promiscuous mode
[  238.409042][T11089] bond_slave_0: entered promiscuous mode
[  238.411584][T11089] bond_slave_1: entered promiscuous mode
[  238.414140][T11089] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  238.423259][T11089] bridge0: port 3(bond0) entered blocking state
[  238.425913][T11089] bridge0: port 3(bond0) entered disabled state
[  238.430687][T11089] bond0: entered allmulticast mode
[  238.432318][T11089] bond_slave_0: entered allmulticast mode
[  238.434088][T11089] bond_slave_1: entered allmulticast mode
[  238.436008][T11089] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  238.440632][T11089] bridge0: port 3(bond0) entered blocking state
[  238.442655][T11089] bridge0: port 3(bond0) entered forwarding state
[  238.941963][T11123] netlink: 'syz.4.2129': attribute type 4 has an invalid length.
[  238.982575][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2128'.
[  240.078738][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2139'.
[  240.249129][T11151] netlink: 64707 bytes leftover after parsing attributes in process `syz.6.2140'.
[  240.908955][T11153] bridge0: port 3(bond0) entered disabled state
[  240.911663][T11153] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.915201][T11153] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.918812][T11153] bridge0: entered allmulticast mode
[  240.947770][T11153] bond0: left allmulticast mode
[  240.950616][T11153] bond_slave_0: left allmulticast mode
[  240.954420][T11153] bond_slave_1: left allmulticast mode
[  240.959454][T11153] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  240.973592][T11153] bridge0: port 3(bond0) entered disabled state
[  241.163271][T11153] bridge_slave_1: left allmulticast mode
[  241.166293][T11153] bridge_slave_1: left promiscuous mode
[  241.173649][T11153] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.225665][T11153] bridge_slave_0: left allmulticast mode
[  241.233628][T11153] bridge_slave_0: left promiscuous mode
[  241.238894][T11153] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.669497][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2152'.
[  241.706501][T11177] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2153'.
[  241.715213][T11177] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2153'.
[  241.805146][   T54] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[  242.271735][T11209] syzkaller0: entered promiscuous mode
[  242.275648][T11209] syzkaller0: entered allmulticast mode
[  244.151794][T11275] netlink: 'syz.4.2197': attribute type 6 has an invalid length.
[  244.563959][T11291] netlink: 'syz.6.2205': attribute type 29 has an invalid length.
[  244.578910][T11291] netlink: 'syz.6.2205': attribute type 29 has an invalid length.
[  244.582776][T11291] netlink: 'syz.6.2205': attribute type 29 has an invalid length.
[  244.590994][T11293] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2206'.
[  244.594052][T11293] netlink: zone id is out of range
[  244.595769][T11293] netlink: zone id is out of range
[  244.599666][T11293] netlink: get zone limit has 8 unknown bytes
[  245.160296][T11303] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  245.385310][T11322] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2219'.
[  245.841272][T11347] netlink: 'syz.6.2226': attribute type 2 has an invalid length.
[  246.945029][T11390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2248'.
[  247.066273][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2250'.
[  247.093752][T11394] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  247.279652][T11412] netlink: 'syz.4.2258': attribute type 10 has an invalid length.
[  247.282115][T11412] netlink: 'syz.4.2258': attribute type 19 has an invalid length.
[  247.284631][T11412] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2258'.
[  247.344391][ T5233] Bluetooth: hci4: command 0x0406 tx timeout
[  247.991110][T11443] netlink: 'syz.6.2271': attribute type 4 has an invalid length.
[  247.995577][T11443] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2271'.
[  248.252629][T11452] netlink: 15231 bytes leftover after parsing attributes in process `syz.6.2274'.
[  249.135705][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'.
[  249.254669][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2297'.
[  249.258759][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2297'.
[  249.359632][T11501] netlink: 'syz.6.2299': attribute type 10 has an invalid length.
[  249.452263][   T54] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6
[  249.865906][T11516] __nla_validate_parse: 1 callbacks suppressed
[  249.865917][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'.
[  249.899737][T11521] netlink: 202232 bytes leftover after parsing attributes in process `syz.2.2308'.
[  249.902569][T11521] netlink: zone id is out of range
[  249.904162][T11521] netlink: zone id is out of range
[  250.245276][T11545] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2317'.
[  250.766138][T11582] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2336'.
[  251.446984][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'.
[  251.452725][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'.
[  251.457135][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'.
[  251.497415][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  251.613698][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'.
[  251.617742][T11626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.720613][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'.
[  251.723658][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'.
[  253.763949][T11647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.889893][T11655] netlink: 'syz.6.2368': attribute type 10 has an invalid length.
[  253.892311][T11655] dummy0: entered promiscuous mode
[  254.354159][   T54] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  254.795886][T11720] syzkaller0: entered promiscuous mode
[  254.800527][T11720] syzkaller0: entered allmulticast mode
[  255.500743][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.502847][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.367334][ T5233] Bluetooth: hci4: command 0x0406 tx timeout
[  256.512561][T11739] __nla_validate_parse: 4 callbacks suppressed
[  256.512573][T11739] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2403'.
[  256.523721][T11736] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2403'.
[  256.531663][T11736] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2403'.
[  256.865971][T11755] netlink: 'syz.2.2411': attribute type 41 has an invalid length.
[  256.976720][T11760] netlink: 208344 bytes leftover after parsing attributes in process `syz.4.2413'.
[  256.981536][T11760] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  256.984247][T11760] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  257.199215][T11771] netlink: 'syz.4.2418': attribute type 2 has an invalid length.
[  257.201660][T11771] netlink: 130532 bytes leftover after parsing attributes in process `syz.4.2418'.
[  257.515690][T11783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2424'.
[  257.524465][T11783] unsupported nlmsg_type 40
[  257.584507][T11791] netlink: 'syz.4.2428': attribute type 29 has an invalid length.
[  257.706177][T11796] netlink: 'syz.2.2431': attribute type 29 has an invalid length.
[  257.785163][T11806] netlink: 'syz.2.2434': attribute type 12 has an invalid length.
[  257.788918][T11806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2434'.
[  258.989140][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'.
[  258.991979][T11833] openvswitch: netlink: nsh attr 165 is out of range max 3
[  258.994224][T11833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.097163][   T54] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  259.199444][T11851] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2455'.
[  259.205324][T11851] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2455'.
[  260.668105][   T27] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  260.808673][T11889] netlink: 'syz.6.2471': attribute type 21 has an invalid length.
[  260.898731][T11895] netlink: 'syz.6.2474': attribute type 21 has an invalid length.
[  261.200208][T11916] netlink: 'syz.6.2484': attribute type 2 has an invalid length.
[  261.515907][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.650216][T11941] siw: device registration error -23
[  261.819825][T11964] __nla_validate_parse: 7 callbacks suppressed
[  261.819836][T11964] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2504'.
[  261.872966][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.894665][T11973] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  261.897287][T11973] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  261.976626][T11973] xt_time: unknown flags 0xf4
[  262.100227][ T5710] unregister_netdevice: waiting for erspan0 to become free. Usage count = 3
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  262.109037][ T5710] ref_tracker: netdev@ffff888112c20610 has 1/1 users at
[  262.109037][ T5710]      ib_device_set_netdev+0x31f/0x6d0
[  262.109037][ T5710]      siw_newlink+0x40c/0xd70
[  262.109037][ T5710]      nldev_newlink+0x4a5/0x5a0
[  262.109037][ T5710]      rdma_nl_rcv+0x6ae/0x980
[  262.109037][ T5710]      netlink_unicast+0x82f/0x9e0
[  262.109037][ T5710]      netlink_sendmsg+0x805/0xb30
[  262.109037][ T5710]      __sock_sendmsg+0x21c/0x270
[  262.109037][ T5710]      ____sys_sendmsg+0x505/0x830
[  262.109037][ T5710]      ___sys_sendmsg+0x21f/0x2a0
[  262.109037][ T5710]      __x64_sys_sendmsg+0x19b/0x260
[  262.109037][ T5710]      do_syscall_64+0xfa/0x3b0
[  262.109037][ T5710]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.109037][ T5710] 
[  262.170658][T11991] netlink: 'syz.2.2516': attribute type 21 has an invalid length.
[  262.173170][T11991] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2516'.

VM DIAGNOSIS:
20:41:28  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd400018afb1 RBX=ffffea0000c57d88 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000012a44 RDI=00000000000315f6 RBP=ffffc90002d0f890 RSP=ffffc90002d0f5e0
R8 =ffffea0000c57e73 R9 =1ffffd400018afce R10=dffffc0000000000 R11=fffff9400018afcf
R12=0000555584000000 R13=0000555583f36000 R14=ffffea0000c57e48 R15=ffff888104d29580
RIP=ffffffff82093e59 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd0a2ef7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fd0a23976c3 00007fd0a23976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0100100025800401 0000000806060168
XMM06=d200080025e00300 100025d0030fffff XMM07=ffffffff0425c003 04100025b0031810
XMM08=003ab00300501be6 24ef1a78ec5b5a3a XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007820000 RBX=1ffff1102132325a RCX=ffff88810f663980 RDX=0000000000010000
RSI=ffff888109918000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0dc0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=ffffffff86998c30
R12=dffffc0000000000 R13=ffff8881099192d0 R14=ffff888109918000 R15=dffffc0000000000
RIP=ffffffff86998c78 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558c7b6500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4edf4e3fc8 CR3=0000000022852000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4ede797498 00007f4ede797470 XMM03=00007f4ede7974a8 00007f4ede7974a0
XMM04=00007f4edf2fd100 00007f4ede797460 XMM05=00007f4ede797478 00007f4ede7974c0
XMM06=00007f4ede7974b8 00007f4ede7974b0 XMM07=00007f4ede7974a8 00007f4ede7974a0
XMM08=0000000000000000 00007f4ede612ee7 XMM09=0000000000000000 00007f4ede612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
