last executing test programs:

6m4.104295329s ago: executing program 0 (id=142):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8921, &(0x7f0000000080))

6m4.007407196s ago: executing program 0 (id=144):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)

6m3.951441992s ago: executing program 0 (id=146):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000000000003"], 0x50)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)

6m3.823632545s ago: executing program 0 (id=150):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

6m3.823156322s ago: executing program 0 (id=151):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

6m3.703784333s ago: executing program 0 (id=153):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfffffffd, 0x7}, 0x50)

5m48.512407139s ago: executing program 32 (id=153):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfffffffd, 0x7}, 0x50)

2m33.708521007s ago: executing program 2 (id=3247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

2m33.615494477s ago: executing program 2 (id=3248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001401200001708000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)

2m33.554749435s ago: executing program 2 (id=3251):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_create_chunk\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50)

2m33.414628008s ago: executing program 2 (id=3256):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777e403000000290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979981faac0930900000000000000420903fbc1", 0xde}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f", 0xb2}, {&(0x7f0000000740)="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", 0x344}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="5300138e06d44d863d4eedd1", 0xc}], 0x1, 0x0, 0x0, 0x900}, 0x0)

2m33.363577942s ago: executing program 2 (id=3259):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180))

2m33.313188908s ago: executing program 1 (id=3261):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}, 0x80ff}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0)

2m33.312651466s ago: executing program 1 (id=3263):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x2b, 0x107, 0xfffffffe, 0x0, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc010)

2m33.253412224s ago: executing program 1 (id=3265):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5, 0xa1}, 0x0, 0xb}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000200)={r0})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x5}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x5, 0x84)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0)

2m33.252427599s ago: executing program 2 (id=3267):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

2m33.185418846s ago: executing program 1 (id=3268):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014020000001208003f0041010000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0)

2m33.179377666s ago: executing program 1 (id=3270):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x27)

2m33.101376038s ago: executing program 1 (id=3271):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19c5a, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)="9e6c4d5aeb37236a123e", &(0x7f0000000240), 0xc, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0xd, 0x7, 0x0, 0x6, 0x7a5d4, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe0000001, 0x0, @perf_config_ext={0x80000001, 0x5}, 0x1000d2, 0x77f, 0x51, 0x9, 0x4, 0x852, 0x2, 0x0, 0x398980e4, 0x0, 0x8000ffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

2m17.702706675s ago: executing program 33 (id=3271):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19c5a, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)="9e6c4d5aeb37236a123e", &(0x7f0000000240), 0xc, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0xd, 0x7, 0x0, 0x6, 0x7a5d4, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe0000001, 0x0, @perf_config_ext={0x80000001, 0x5}, 0x1000d2, 0x77f, 0x51, 0x9, 0x4, 0x852, 0x2, 0x0, 0x398980e4, 0x0, 0x8000ffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

2m17.685798751s ago: executing program 34 (id=3267):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

2m0.290780549s ago: executing program 3 (id=3593):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc)

1m59.320565897s ago: executing program 3 (id=3613):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1m59.155027079s ago: executing program 3 (id=3616):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0)

1m58.931751208s ago: executing program 3 (id=3618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002b40)={0x14, 0x3a, 0x725, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4040800)

1m58.810800513s ago: executing program 3 (id=3619):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m57.604396771s ago: executing program 3 (id=3643):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb00001400a39020", 0xfeec}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1m41.709247741s ago: executing program 35 (id=3643):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb00001400a39020", 0xfeec}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

51.652286608s ago: executing program 4 (id=4423):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, 0x0, 0x0)

51.575714178s ago: executing program 4 (id=4425):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x4, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x20})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000440)={0x1, 0x80, 0xa6, 0x40, 0x4, 0x3, 0x0, 0x5, 0x7455dd1b1701fec6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000000c0), 0x9}, 0x9001, 0x1, 0x7, 0x6, 0x7, 0x6, 0x6, 0x0, 0x3ff, 0x0, 0x7f})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4044194)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0xb702, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x138}}, 0x0)

51.373320125s ago: executing program 4 (id=4434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x8800)

51.284633436s ago: executing program 4 (id=4437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a010400000000000000000a0000050900010073797a31000000001c0004801800018008000100647570000c000280080001400000000c0900020073797a32"], 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

51.225418004s ago: executing program 4 (id=4439):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000018000000000000000105000000080000000000000002000005000000780000000001000000000000000000000001"], 0x0, 0x66}, 0x20)

51.173278757s ago: executing program 4 (id=4442):
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(0x0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='(pu&\"0\t&&')
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xc, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0x80000000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
unlink(&(0x7f0000000200)='./cgroup\x00')
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x33a, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x19, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x40000400, &(0x7f00000003c0), 0x0, &(0x7f00000004c0), &(0x7f00000006c0), &(0x7f0000000700)="0b4d02a7fdd30532c5cc594bd97feb3374c7f19805401738b1b3eeb56f1bac5dd18f1327bcc36e804eeeb13cb69d42c228d7a825a8a0c5e6e9f034420102cd17c8088038ba872963380f697dd08434fb6c7720cc37b37995fc0f035f25792856e5dff8c4ffce94dbbe12cf58b2a5356fc559356ce292cdefb02fb240f0ec67fa92a91564ff6723209b3130f3485ae5d5eff009ce610e12c6fb2a991ec4a9ef580979fdaf9c92e1a5ecb603e0d24ee61e4767e08bedad17d7a56172c0ede3dd0a5a1c66aa17fd54ed0d3a48524f6fe1334ba7fcb8")

35.695206558s ago: executing program 36 (id=4442):
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(0x0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='(pu&\"0\t&&')
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xc, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0x80000000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
unlink(&(0x7f0000000200)='./cgroup\x00')
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x33a, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x19, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x40000400, &(0x7f00000003c0), 0x0, &(0x7f00000004c0), &(0x7f00000006c0), &(0x7f0000000700)="0b4d02a7fdd30532c5cc594bd97feb3374c7f19805401738b1b3eeb56f1bac5dd18f1327bcc36e804eeeb13cb69d42c228d7a825a8a0c5e6e9f034420102cd17c8088038ba872963380f697dd08434fb6c7720cc37b37995fc0f035f25792856e5dff8c4ffce94dbbe12cf58b2a5356fc559356ce292cdefb02fb240f0ec67fa92a91564ff6723209b3130f3485ae5d5eff009ce610e12c6fb2a991ec4a9ef580979fdaf9c92e1a5ecb603e0d24ee61e4767e08bedad17d7a56172c0ede3dd0a5a1c66aa17fd54ed0d3a48524f6fe1334ba7fcb8")

32.959277739s ago: executing program 6 (id=4586):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000007, 0x300)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x8080, 0x2, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

32.723537126s ago: executing program 6 (id=4587):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

32.669843314s ago: executing program 6 (id=4588):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x20}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)

32.553044588s ago: executing program 6 (id=4590):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

32.450216416s ago: executing program 6 (id=4592):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x91, @mcast1, 0x0, 0x1}, 0x80, 0x0}, 0x200008c1)

32.203219388s ago: executing program 6 (id=4598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)

32.069414816s ago: executing program 37 (id=4598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)

1.099477871s ago: executing program 8 (id=5050):
perf_event_open(&(0x7f0000000500)={0x2, 0x98, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

1.098856642s ago: executing program 7 (id=5051):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000005500000095000000000000009500a50500000000593d99973ab8bd84c7ae49ffb03398929787e599d43d73bfa7fbad380654b3dbd19705b578dd896a48070306cbb723154d92a6c9ba4e724ca3d4191cb23190858474249c9f0eb2c65e4ff70e1268d7aa51661c9062c9525f739b6e47126c7b84e972f425e4f09d46a0d1c17a5e0927153239042f0b6265561d1627a654effd7ef7500d875a3afdbde8a26f930cc2098b0027564c781f51a9b56eb8fd2f0cd67dcbb78e7c71b28f9599ef"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

1.046015247s ago: executing program 5 (id=5052):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8258000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/259, 0x103}], 0x1}, 0x0)
close(r0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)

1.045622757s ago: executing program 7 (id=5053):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0ffffff, 0x0, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="80005b", 0x3}, {&(0x7f00000000c0)="bb801d2b6ee7", 0x6}], 0x2, 0x0, 0x0, 0x900}, 0x0)

1.000851856s ago: executing program 8 (id=5054):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0xc0}]})

1.000686952s ago: executing program 7 (id=5055):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8992, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})

940.55478ms ago: executing program 7 (id=5056):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008004)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040005"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000a780)=@newtaction={0x48, 0x31, 0x103, 0x2, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x2000c888)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x4, <r5=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r5, 0x6, 0x10}, 0xc)
r6 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x83, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)

858.064971ms ago: executing program 8 (id=5057):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)

857.463139ms ago: executing program 8 (id=5058):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="0906e02a8e2aa7dcc466fd44e291d5b1d18e37133c1dc50fd7f1dd8d57a38a45f369d20e5f7ac0ce9e2d6c7822a52cb1d73e951e9c8146", 0x0}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b000000000000000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

425.221781ms ago: executing program 5 (id=5059):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33)

425.004106ms ago: executing program 5 (id=5060):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000010c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x0)

424.867784ms ago: executing program 5 (id=5061):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

102.818353ms ago: executing program 5 (id=5062):
socket$kcm(0x22, 0x2, 0x21)

64.240409ms ago: executing program 8 (id=5063):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="28000000130001000000000000000000100000000c0000000000000000000000080031"], 0x28}], 0x1}, 0x4000800)

44.694728ms ago: executing program 7 (id=5064):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f00000000c0), 0xb9)

667.69µs ago: executing program 5 (id=5065):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

354.102µs ago: executing program 8 (id=5066):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

0s ago: executing program 7 (id=5067):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x14)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4084, 0xff4}, {&(0x7f0000002080)=""/4078, 0xfee}, {&(0x7f0000001040)=""/4128, 0x1020}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000340)=""/171, 0xab}], 0x6}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit]}, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})

kernel console output (not intermixed with test programs):

0 0 0 0 0
[  163.347600][ T9115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  163.347718][ T9115] Node 0 DMA32: 699*4kB (UME) 429*8kB (UME) 319*16kB (UME) 555*32kB (UME) 183*64kB (UME) 64*128kB (UME) 14*256kB (UME) 7*512kB (UME) 7*1024kB (UME) 3*2048kB (UM) 30*4096kB (M) = 192356kB
[  163.347854][ T9115] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  163.348007][ T9115] Node 1 Normal: 510*4kB (ME) 316*8kB (ME) 243*16kB (ME) 581*32kB (UME) 199*64kB (UME) 25*128kB (UM) 11*256kB (UM) 5*512kB (ME) 8*1024kB (UME) 3*2048kB (UM) 60*4096kB (UM) = 308456kB
[  163.348189][ T9115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.348200][ T9115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.348210][ T9115] 56007 total pagecache pages
[  163.348217][ T9115] 0 pages in swap cache
[  163.348222][ T9115] Free swap  = 124996kB
[  163.348229][ T9115] Total swap = 124996kB
[  163.348236][ T9115] 786301 pages RAM
[  163.348242][ T9115] 0 pages HighMem/MovableOnly
[  163.348248][ T9115] 241329 pages reserved
[  163.348254][ T9115] 0 pages cma reserved
[  165.197093][ T9121] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.1310'.
[  165.349258][ T9124] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1312'.
[  165.353313][ T9124] netlink: zone id is out of range
[  165.364909][ T9124] netlink: zone id is out of range
[  165.374830][ T9124] netlink: zone id is out of range
[  165.379576][ T9124] netlink: zone id is out of range
[  165.381865][ T9124] netlink: zone id is out of range
[  165.384083][ T9124] netlink: zone id is out of range
[  165.406079][ T9124] netlink: zone id is out of range
[  165.429982][ T9124] netlink: zone id is out of range
[  165.432527][ T9124] netlink: zone id is out of range
[  165.491896][ T9124] netlink: zone id is out of range
[  165.849823][ T9155] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1326'.
[  166.081254][ T9161] netlink: 'syz.3.1329': attribute type 29 has an invalid length.
[  166.100282][ T9161] netlink: 'syz.3.1329': attribute type 10 has an invalid length.
[  166.228819][ T9161] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.251772][ T9161] team0: Port device bond0 added
[  166.315356][ T9174] syzkaller0: entered promiscuous mode
[  166.326611][ T9174] syzkaller0: entered allmulticast mode
[  166.369040][ T9182] netlink: 'syz.2.1339': attribute type 33 has an invalid length.
[  166.372082][ T9182] netlink: 'syz.2.1339': attribute type 3 has an invalid length.
[  166.374771][ T9182] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1339'.
[  166.465314][ T9188] netlink: 'syz.3.1342': attribute type 1 has an invalid length.
[  167.294338][ T9209] netlink: 'syz.3.1350': attribute type 62 has an invalid length.
[  167.488660][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1353'.
[  167.722957][ T9232] netlink: 'syz.3.1361': attribute type 19 has an invalid length.
[  167.725882][ T9232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1361'.
[  168.474592][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'.
[  168.703478][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'.
[  168.763403][ T9280] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1376'.
[  168.771090][ T9280] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1376'.
[  168.917211][ T9286] netlink: 'syz.2.1379': attribute type 10 has an invalid length.
[  169.058662][ T9293] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1383'.
[  169.993436][ T9325] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1395'.
[  170.199017][ T9325] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1395'.
[  170.418346][ T9344] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1404'.
[  170.422408][ T9344] net_ratelimit: 13 callbacks suppressed
[  170.422484][ T9344] openvswitch: netlink: Message has 4 unknown bytes.
[  171.190968][ T9374] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1414'.
[  171.430492][ T5942] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  171.590722][ T9395] netlink: 'syz.1.1427': attribute type 5 has an invalid length.
[  171.597869][ T9395] netlink: 'syz.1.1427': attribute type 7 has an invalid length.
[  171.601080][ T9395] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1427'.
[  172.013459][   T55] Bluetooth: hci0: adv larger than maximum supported
[  172.132411][ T9402] netlink: 'syz.3.1431': attribute type 27 has an invalid length.
[  172.140692][ T9402] netlink: 'syz.3.1431': attribute type 3 has an invalid length.
[  172.551864][ T9429] netlink: 'syz.1.1441': attribute type 1 has an invalid length.
[  172.702265][ T9446] lo speed is unknown, defaulting to 1000
[  172.705535][ T9446] wg0 speed is unknown, defaulting to 1000
[  172.835939][ T9458] netlink: 'syz.1.1451': attribute type 10 has an invalid length.
[  172.847310][ T9458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.457556][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  174.266734][ T9510] __nla_validate_parse: 6 callbacks suppressed
[  174.266753][ T9510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1475'.
[  175.831887][ T9551] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1494'.
[  176.042687][ T9554] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  176.046016][ T9554] netlink: 'syz.1.1495': attribute type 4 has an invalid length.
[  176.052681][ T9554] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1495'.
[  177.534085][ T9581] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1507'.
[  177.554909][ T9584] netlink: 'syz.3.1508': attribute type 13 has an invalid length.
[  177.557940][ T9584] netlink: 'syz.3.1508': attribute type 58 has an invalid length.
[  177.562093][ T9584] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1508'.
[  177.742631][ T9585] syzkaller0: entered promiscuous mode
[  177.745188][ T9585] syzkaller0: entered allmulticast mode
[  177.755397][ T9589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1511'.
[  179.409351][ T9592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1511'.
[  179.419062][ T9601] syzkaller0: tun_chr_ioctl cmd 1074025677
[  179.421711][ T9601] syzkaller0: linktype set to 801
[  179.827867][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'.
[  179.902417][ T9634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1531'.
[  179.905554][ T9639] netlink: 'syz.1.1533': attribute type 10 has an invalid length.
[  179.993957][ T9642] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1533'.
[  180.042068][ T9639] team0 (unregistering): Port device team_slave_0 removed
[  180.045220][ T9639] team0 (unregistering): Port device team_slave_1 removed
[  180.302482][ T9655] netlink: 798 bytes leftover after parsing attributes in process `syz.1.1538'.
[  181.349862][ T9707] netlink: 'syz.1.1564': attribute type 13 has an invalid length.
[  181.352650][ T9707] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1564'.
[  181.462613][ T9719] netlink: 'syz.2.1570': attribute type 10 has an invalid length.
[  181.467930][ T9719] veth1_vlan: entered allmulticast mode
[  181.475529][ T9719] team0: Device veth1_vlan failed to register rx_handler
[  181.548713][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'.
[  182.219559][ T9749] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1582'.
[  182.928214][ T9761] syzkaller0: entered promiscuous mode
[  182.930779][ T9761] syzkaller0: entered allmulticast mode
[  184.477657][ T9792] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1605'.
[  184.747682][ T9817] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1611'.
[  184.751674][ T9812] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1611'.
[  184.757399][ T9812] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1611'.
[  184.858154][ T9821] netlink: 'syz.2.1615': attribute type 10 has an invalid length.
[  184.890281][ T9821] team0: Port device geneve1 added
[  185.008726][ T9828] option changes via remount are deprecated (pid=9827 comm=syz.2.1618)
[  185.097964][ T9832] netlink: 'syz.2.1620': attribute type 21 has an invalid length.
[  185.101392][ T9832] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1620'.
[  186.329400][ T5936] Bluetooth: hci2: command 0x0406 tx timeout
[  186.332281][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  186.696592][ T9886] netdevsim netdevsim1 : renamed from netdevsim0
[  186.721741][ T9886] netdevsim netdevsim1 : left promiscuous mode
[  186.726393][ T9886] netdevsim netdevsim1 : left allmulticast mode
[  186.896841][ T9877] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  186.900398][ T9877] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.035616][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1648'.
[  187.378265][ T9877] syz.2.1639 (9877) used greatest stack depth: 18168 bytes left
[  187.450699][ T9923] netlink: 'syz.1.1661': attribute type 10 has an invalid length.
[  187.454111][ T9923] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1661'.
[  187.709132][ T9939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.757447][ T9942] option changes via remount are deprecated (pid=9940 comm=syz.2.1669)
[  187.830750][ T5942] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  187.836596][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  187.858644][ T9949] : entered promiscuous mode
[  187.902439][ T9951] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1674'.
[  187.951711][ T9956] netlink: 'syz.1.1676': attribute type 1 has an invalid length.
[  188.324698][ T9970] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1682'.
[  188.674386][ T9986] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  188.965829][ T9992] netlink: 'syz.3.1691': attribute type 27 has an invalid length.
[  189.560128][T10008] netlink: 'syz.3.1699': attribute type 3 has an invalid length.
[  189.562720][T10008] __nla_validate_parse: 3 callbacks suppressed
[  189.562728][T10008] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1699'.
[  189.593986][T10008] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1699'.
[  189.923658][T10031] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1708'.
[  190.202794][T10054] netlink: 'syz.1.1715': attribute type 1 has an invalid length.
[  191.005185][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'.
[  191.751102][T10129] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  191.807539][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'.
[  191.811064][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1751'.
[  191.814630][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1751'.
[  191.858626][T10136] pim6reg1: entered promiscuous mode
[  191.860861][T10136] pim6reg1: entered allmulticast mode
[  191.945658][T10143] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1755'.
[  192.173178][T10158] netlink: 'syz.2.1762': attribute type 2 has an invalid length.
[  192.176882][T10158] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1762'.
[  192.834508][T10197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.622919][T10233] netlink: 'syz.3.1797': attribute type 2 has an invalid length.
[  193.626059][T10233] netlink: 110008 bytes leftover after parsing attributes in process `syz.3.1797'.
[  193.798731][T10240] netlink: 'syz.2.1798': attribute type 39 has an invalid length.
[  193.804699][T10240] veth0_macvtap: left promiscuous mode
[  194.092323][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.094913][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  197.146235][T10267] ]X: renamed from veth0_vlan (while UP)
[  197.228241][T10271] lo speed is unknown, defaulting to 1000
[  197.233309][T10271] wg0 speed is unknown, defaulting to 1000
[  197.256172][T10277] netlink: 'syz.3.1816': attribute type 10 has an invalid length.
[  197.269167][ T9869] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  197.281964][T10277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.288315][T10277] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.353469][T10283] __nla_validate_parse: 1 callbacks suppressed
[  197.353486][T10283] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1818'.
[  198.510633][T10299] sit0: entered allmulticast mode
[  198.730296][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'.
[  198.802866][T10315] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  199.057380][T10326] sctp: [Deprecated]: syz.1.1834 (pid 10326) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.057380][T10326] Use struct sctp_sack_info instead
[  199.765030][T10341] netlink: 'syz.3.1841': attribute type 33 has an invalid length.
[  199.768097][T10341] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1841'.
[  199.771100][T10341] `: renamed from team0 (while UP)
[  200.213466][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1847'.
[  200.426395][T10364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1850'.
[  200.430202][T10361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1850'.
[  200.493152][T10367] netlink: 'syz.2.1853': attribute type 10 has an invalid length.
[  200.496518][T10367] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1853'.
[  200.590076][T10372] netlink: 'syz.1.1855': attribute type 29 has an invalid length.
[  200.593765][T10372] netlink: 'syz.1.1855': attribute type 29 has an invalid length.
[  201.303076][T10408] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1872'.
[  202.102223][T10417] netlink: 'syz.2.1876': attribute type 27 has an invalid length.
[  202.302934][T10429] netlink: 'syz.2.1882': attribute type 2 has an invalid length.
[  202.306211][T10429] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1882'.
[  202.869975][T10443] siw: device registration error -23
[  202.955889][T10392] Set syz1 is full, maxelem 65536 reached
[  203.082534][T10454] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1892'.
[  203.638246][T10481] netlink: 'syz.2.1904': attribute type 3 has an invalid length.
[  203.640754][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'.
[  204.081619][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'.
[  204.121725][T10504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1915'.
[  204.127642][T10504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1915'.
[  204.132186][T10504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1915'.
[  204.240180][T10514] netlink: 'syz.1.1920': attribute type 1 has an invalid length.
[  204.294127][T10520] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1923'.
[  204.525553][T10526] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1926'.
[  204.622602][T10532] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1929'.
[  204.632443][T10532] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1929'.
[  204.664980][T10535] netlink: 'syz.1.1930': attribute type 40 has an invalid length.
[  205.081154][T10550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.084801][T10550] IPv6: NLM_F_CREATE should be set when creating new route
[  205.087924][T10550] IPv6: NLM_F_CREATE should be set when creating new route
[  205.772688][T10586] bridge_slave_1: left allmulticast mode
[  205.774679][T10586] bridge_slave_1: left promiscuous mode
[  205.778400][T10586] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.858010][T10586] bridge_slave_0: left allmulticast mode
[  205.860269][T10586] bridge_slave_0: left promiscuous mode
[  205.864321][T10586] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.235517][T10597] netlink: 'syz.1.1957': attribute type 29 has an invalid length.
[  206.252459][T10598] netlink: 'syz.1.1957': attribute type 29 has an invalid length.
[  207.455353][T10625] netlink: 'syz.2.1970': attribute type 23 has an invalid length.
[  207.718966][T10641] netlink: 'syz.2.1976': attribute type 7 has an invalid length.
[  208.082232][T10659] netlink: 'syz.2.1984': attribute type 4 has an invalid length.
[  208.114992][T10659] .`: renamed from bond0 (while UP)
[  208.201750][T10667] __nla_validate_parse: 7 callbacks suppressed
[  208.201764][T10667] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1987'.
[  208.562990][T10677] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1992'.
[  209.332008][T10685] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1995'.
[  209.379561][T10693] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.1999'.
[  209.383103][T10693] netlink: 62239 bytes leftover after parsing attributes in process `syz.3.1999'.
[  209.451022][T10699] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2002'.
[  210.471114][T10747] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2025'.
[  210.478282][T10747] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2025'.
[  213.486137][T10770] netlink: 'syz.2.2035': attribute type 10 has an invalid length.
[  213.511923][T10770] wlan1: mtu less than device minimum
[  213.513698][T10770] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  213.543822][T10776] netlink: 'syz.2.2038': attribute type 2 has an invalid length.
[  213.546265][T10776] netlink: 'syz.2.2038': attribute type 1 has an invalid length.
[  213.551404][T10776] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2038'.
[  213.554412][T10776] nbd: couldn't find a device at index 149
[  213.574307][T10779] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2039'.
[  213.622394][T10784] netlink: 'syz.2.2042': attribute type 21 has an invalid length.
[  213.976599][T10798] syzkaller0: entered promiscuous mode
[  213.978988][T10798] syzkaller0: entered allmulticast mode
[  214.930228][T10815] netlink: 'syz.1.2052': attribute type 40 has an invalid length.
[  215.414296][T10823] ksmbd: Unknown IPC event: 1, ignore.
[  215.539763][T10829] netlink: 'syz.2.2059': attribute type 10 has an invalid length.
[  215.645861][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'.
[  216.501711][T10878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'.
[  216.523709][T10882] netlink: 'syz.1.2083': attribute type 3 has an invalid length.
[  216.528194][T10882] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2083'.
[  216.598152][T10889] syzkaller0: entered promiscuous mode
[  216.599941][T10889] syzkaller0: entered allmulticast mode
[  217.588847][T10901] veth1_macvtap: left promiscuous mode
[  217.622230][T10908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2093'.
[  218.370998][T10931] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2103'.
[  218.374088][T10931] nbd: must specify a size in bytes for the device
[  218.490205][T10933] openvswitch: netlink: Message has 8 unknown bytes.
[  218.493183][T10933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.889730][T10959] xt_l2tp: unknown flags: 51
[  219.130002][T10971] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2121'.
[  220.498922][T11028] netlink: 'syz.1.2146': attribute type 11 has an invalid length.
[  220.501440][T11028] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2146'.
[  220.508283][T11027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.570369][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'.
[  220.604508][T11033] delete_channel: no stack
[  220.681289][T11042] netlink: 'syz.1.2152': attribute type 21 has an invalid length.
[  220.788405][T11048] erspan0 speed is unknown, defaulting to 1000
[  220.790923][T11048] erspan0 speed is unknown, defaulting to 1000
[  220.794879][T11048] erspan0 speed is unknown, defaulting to 1000
[  220.806916][T11048] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  220.834548][T11048] erspan0 speed is unknown, defaulting to 1000
[  220.849575][T11048] erspan0 speed is unknown, defaulting to 1000
[  220.875559][T11048] erspan0 speed is unknown, defaulting to 1000
[  220.888006][T11048] erspan0 speed is unknown, defaulting to 1000
[  221.021666][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2158'.
[  221.105657][T11060] netlink: 'syz.2.2159': attribute type 21 has an invalid length.
[  221.280142][T11068] netlink: 'syz.2.2163': attribute type 11 has an invalid length.
[  221.283406][T11068] netlink: 'syz.2.2163': attribute type 11 has an invalid length.
[  221.297431][T11068] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2163'.
[  221.465454][T11079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2168'.
[  221.471675][T11079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2168'.
[  221.512714][T11081] netlink: 'syz.3.2169': attribute type 25 has an invalid length.
[  221.515275][T11081] netlink: 'syz.3.2169': attribute type 28 has an invalid length.
[  222.079776][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'.
[  222.268808][T11120] netlink: 'syz.2.2186': attribute type 10 has an invalid length.
[  222.282378][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.287585][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.291651][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.295346][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.340877][T11118] netlink: 'syz.3.2184': attribute type 40 has an invalid length.
[  222.774284][T11118] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.131669][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2199'.
[  223.159912][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2199'.
[  223.201896][T11148] netlink: 'syz.3.2199': attribute type 10 has an invalid length.
[  223.221484][T11148] bond0: (slave bond_slave_0): Releasing backup interface
[  223.262236][T11151] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  223.410123][T11162] lo: entered allmulticast mode
[  223.414272][T11162] lo: entered promiscuous mode
[  223.415814][T11162] lo: left allmulticast mode
[  223.420521][ T5971] lo speed is unknown, defaulting to 1000
[  223.422455][ T5971] s: Port: 1 Link ACTIVE
[  223.567299][T11177] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  223.570395][T11177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.820866][T11198] netlink: 'syz.1.2222': attribute type 2 has an invalid length.
[  223.823406][T11198] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  224.478614][T11229] __nla_validate_parse: 2 callbacks suppressed
[  224.478676][T11229] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2236'.
[  224.495970][T11229] C: renamed from team_slave_0
[  224.536308][T11229] netlink: 'syz.1.2236': attribute type 3 has an invalid length.
[  224.540708][T11229] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  224.959186][T11256] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2248'.
[  225.028666][T11263] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2251'.
[  225.235042][T11273] bridge_slave_1: left allmulticast mode
[  225.237506][T11273] bridge_slave_1: left promiscuous mode
[  225.240465][T11273] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.279377][T11273] bridge_slave_0: left allmulticast mode
[  225.281244][T11273] bridge_slave_0: left promiscuous mode
[  225.283077][T11273] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.015155][T11294] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  226.503546][T11317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2275'.
[  226.904704][T11329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.441031][T11354] netlink: 'syz.1.2289': attribute type 11 has an invalid length.
[  228.491834][T11372] veth0_vlan: entered allmulticast mode
[  229.990509][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'.
[  230.112565][T11415] netlink: 'syz.1.2315': attribute type 1 has an invalid length.
[  230.115688][T11415] netlink: 'syz.1.2315': attribute type 4 has an invalid length.
[  230.118335][T11415] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2315'.
[  230.572602][T11425] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2319'.
[  230.715955][T11436] netlink: 'syz.2.2322': attribute type 1 has an invalid length.
[  231.035177][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'.
[  231.043242][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'.
[  231.377667][T11466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.685897][T11482] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  231.913387][T11488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2346'.
[  232.519641][T11498] netlink: 'syz.2.2350': attribute type 10 has an invalid length.
[  232.522726][T11498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2350'.
[  232.527391][T11498] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  232.628849][T11500] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2351'.
[  232.721615][T11506] netlink: 872 bytes leftover after parsing attributes in process `syz.1.2354'.
[  232.726255][T11506] netlink: 872 bytes leftover after parsing attributes in process `syz.1.2354'.
[  234.358144][T11554] wg0 speed is unknown, defaulting to 1000
[  234.360675][T11554] wg0 speed is unknown, defaulting to 1000
[  234.363805][T11554] wg0 speed is unknown, defaulting to 1000
[  234.391613][T11554] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  234.442577][T11554] wg0 speed is unknown, defaulting to 1000
[  234.459801][T11554] wg0 speed is unknown, defaulting to 1000
[  234.463948][T11554] wg0 speed is unknown, defaulting to 1000
[  234.468119][T11554] wg0 speed is unknown, defaulting to 1000
[  234.586034][T11569] netlink: 'syz.1.2383': attribute type 21 has an invalid length.
[  234.589394][T11569] IPv6: NLM_F_CREATE should be specified when creating new route
[  234.618958][T11571] netlink: 'syz.3.2382': attribute type 3 has an invalid length.
[  234.681882][T11577] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  235.082907][T11599] xt_policy: too many policy elements
[  235.372176][T11625] __nla_validate_parse: 3 callbacks suppressed
[  235.372228][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'.
[  235.520458][T11638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.443605][T11672] sit0: entered allmulticast mode
[  236.475883][T11672] sit0: entered promiscuous mode
[  236.661611][T11684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.435536][ T9869] Bluetooth: hci1: Unable to find connection for big 0x00
[  237.450318][T11707] netlink: 'syz.1.2441': attribute type 39 has an invalid length.
[  237.603447][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'.
[  237.617747][T11713] syzkaller0: entered promiscuous mode
[  237.619993][T11713] syzkaller0: entered allmulticast mode
[  237.739108][T11722] cgroup: Unknown subsys name 'uid'
[  238.990643][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2455'.
[  239.003174][T11737] siw: device registration error -23
[  239.419994][T11753] netlink: 'syz.3.2463': attribute type 11 has an invalid length.
[  239.422837][T11753] netlink: 'syz.3.2463': attribute type 11 has an invalid length.
[  239.604922][T11769] : port 1(vlan0) entered blocking state
[  239.613423][T11769] : port 1(vlan0) entered disabled state
[  239.615581][T11769] vlan0: entered allmulticast mode
[  239.619096][T11769] vlan0: entered promiscuous mode
[  239.840056][T11779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2475'.
[  239.919794][T11784] netlink: 809 bytes leftover after parsing attributes in process `syz.2.2477'.
[  239.922751][T11784] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2477'.
[  240.139606][T11792] netlink: 'syz.2.2481': attribute type 3 has an invalid length.
[  240.142947][T11792] netlink: 'syz.2.2481': attribute type 8 has an invalid length.
[  240.146156][T11792] netlink: 'syz.2.2481': attribute type 6 has an invalid length.
[  240.153768][T11792] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.2481'.
[  240.254859][T11794] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  241.241648][T11828] sit0: entered allmulticast mode
[  241.263774][T11828] sit0: entered promiscuous mode
[  241.282220][T11832] netlink: 'syz.1.2498': attribute type 39 has an invalid length.
[  242.972499][T11867] netlink: 'syz.1.2512': attribute type 21 has an invalid length.
[  242.975402][T11867] netlink: 'syz.1.2512': attribute type 6 has an invalid length.
[  242.978681][T11867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2512'.
[  243.172140][T11884] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2521'.
[  243.583439][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2532'.
[  243.708676][T11917] netlink: 'syz.2.2535': attribute type 8 has an invalid length.
[  243.711815][T11917] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2535'.
[  243.764146][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  243.995404][T11924] netlink: 16370 bytes leftover after parsing attributes in process `syz.2.2538'.
[  244.150723][T11928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2540'.
[  244.424984][T11934] lo speed is unknown, defaulting to 1000
[  244.429463][T11934] erspan0 speed is unknown, defaulting to 1000
[  244.433317][T11934] wg0 speed is unknown, defaulting to 1000
[  244.637126][T11952] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2551'.
[  244.763954][T11960] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2555'.
[  244.771617][T11958] netlink: 'syz.3.2554': attribute type 2 has an invalid length.
[  244.774735][T11958] netlink: 'syz.3.2554': attribute type 1 has an invalid length.
[  244.961119][T11970] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2560'.
[  244.965859][T11970] netlink: 'syz.1.2560': attribute type 13 has an invalid length.
[  244.969675][T11970] netlink: 'syz.1.2560': attribute type 17 has an invalid length.
[  244.972291][T11970] lo: left promiscuous mode
[  244.981506][T11970] sit0: left allmulticast mode
[  244.992412][T11970] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.030460][T11970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.041497][   T10] erspan0 speed is unknown, defaulting to 1000
[  245.043951][   T10] syz2: Port: 1 Link ACTIVE
[  245.191984][T11979] netlink: 'syz.2.2563': attribute type 10 has an invalid length.
[  245.230537][T11979] team0: Device ipvlan1 failed to register rx_handler
[  245.426232][T11984] : entered promiscuous mode
[  245.532592][ T9869] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  246.602025][T12059] tc_dump_action: action bad kind
[  247.255411][T12107] syzkaller1: tun_chr_ioctl cmd 1074812117
[  248.000516][T12155] netlink: 'syz.3.2638': attribute type 3 has an invalid length.
[  248.003104][T12155] netlink: 'syz.3.2638': attribute type 2 has an invalid length.
[  248.005519][T12155] __nla_validate_parse: 10 callbacks suppressed
[  248.005525][T12155] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.2638'.
[  248.090882][T12163] netlink: 'syz.2.2641': attribute type 1 has an invalid length.
[  248.093815][T12163] netlink: 'syz.2.2641': attribute type 4 has an invalid length.
[  248.102234][T12163] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2641'.
[  248.105746][T12163] netlink: 'syz.2.2641': attribute type 1 has an invalid length.
[  248.110687][T12163] netlink: 'syz.2.2641': attribute type 4 has an invalid length.
[  248.113335][T12163] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2641'.
[  248.137265][T12165] lo speed is unknown, defaulting to 1000
[  248.141064][T12165] erspan0 speed is unknown, defaulting to 1000
[  248.144654][T12165] wg0 speed is unknown, defaulting to 1000
[  248.323451][T12177] netlink: 'syz.3.2642': attribute type 39 has an invalid length.
[  248.820299][T12182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2648'.
[  248.823190][T12182] netlink: 46 bytes leftover after parsing attributes in process `syz.2.2648'.
[  248.826057][T12182] netlink: 46 bytes leftover after parsing attributes in process `syz.2.2648'.
[  249.281709][T12210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2661'.
[  249.285494][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'.
[  249.387790][T12218] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2665'.
[  249.549252][T12235] syzkaller0: entered promiscuous mode
[  249.551015][T12235] syzkaller0: entered allmulticast mode
[  250.872752][ T5960] bridge0: port 3(dummy0) entered disabled state
[  250.876799][ T5960] bridge_slave_1: left allmulticast mode
[  250.878649][ T5960] bridge_slave_1: left promiscuous mode
[  250.880482][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.907024][ T5960] bridge_slave_0: left allmulticast mode
[  250.908842][ T5960] bridge_slave_0: left promiscuous mode
[  250.910665][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.931060][T12243] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2676'.
[  251.202399][T12253] netlink: 'syz.2.2680': attribute type 64 has an invalid length.
[  251.315947][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.321180][ T5960] bond0 (unregistering): (slave 4@0): Releasing backup interface
[  251.325281][ T5960] bond0 (unregistering): Released all slaves
[  251.362079][T12266] netlink: 'syz.3.2686': attribute type 27 has an invalid length.
[  251.941650][ T5960] hsr_slave_0: left promiscuous mode
[  251.944495][ T5960] hsr_slave_1: left promiscuous mode
[  251.951041][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.953766][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.961036][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.963549][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.969454][ T5960] batman_adv: batadv0: Interface deactivated: vlan1
[  251.971961][ T5960] batman_adv: batadv0: Removing interface: vlan1
[  251.995336][ T5960] veth1_macvtap: left promiscuous mode
[  251.998089][ T5960] veth0_macvtap: left promiscuous mode
[  252.000926][ T5960] veth1_vlan: left promiscuous mode
[  252.003526][ T5960] veth0_vlan: left promiscuous mode
[  252.225461][T12291] netlink: 'syz.2.2696': attribute type 10 has an invalid length.
[  252.732859][ T5960] team0 (unregistering): Port device team_slave_1 removed
[  252.825924][ T5960] team0 (unregistering): Port device team_slave_0 removed
[  253.436010][T12306] syzkaller0: entered promiscuous mode
[  253.452455][T12306] syzkaller0: entered allmulticast mode
[  253.704786][T12325] netlink: 'syz.3.2710': attribute type 26 has an invalid length.
[  253.945392][T12334] __nla_validate_parse: 4 callbacks suppressed
[  253.945408][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2714'.
[  255.295288][T12354] netlink: 'syz.2.2724': attribute type 2 has an invalid length.
[  255.408116][T12366] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2729'.
[  255.461572][T12373] netlink: 'syz.2.2733': attribute type 10 has an invalid length.
[  255.538507][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.541079][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.582253][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'.
[  255.585894][T12380] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2736'.
[  255.811949][T12393] netlink: 'syz.2.2742': attribute type 3 has an invalid length.
[  255.815282][T12393] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2742'.
[  255.861795][T12396] netlink: 'syz.2.2743': attribute type 2 has an invalid length.
[  255.865110][T12396] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.2743'.
[  255.981911][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'.
[  255.998792][T12403] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2745'.
[  256.480105][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'.
[  256.484169][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'.
[  256.742283][T12414] netlink: 'syz.1.2751': attribute type 2 has an invalid length.
[  257.060465][T12432] openvswitch: netlink: IP tunnel dst address not specified
[  257.641016][T12462] netlink: 'syz.1.2773': attribute type 21 has an invalid length.
[  258.158531][T12508] netlink: 'syz.3.2796': attribute type 21 has an invalid length.
[  258.632816][T12522] netlink: 'syz.2.2801': attribute type 10 has an invalid length.
[  258.995695][T12530] __nla_validate_parse: 8 callbacks suppressed
[  258.995711][T12530] netlink: 948 bytes leftover after parsing attributes in process `syz.1.2806'.
[  259.194637][T12542] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2812'.
[  259.422527][T12561] option changes via remount are deprecated (pid=12555 comm=syz.1.2819)
[  259.443723][T12563] netlink: 'syz.2.2821': attribute type 10 has an invalid length.
[  259.448486][T12563] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  259.753512][T12572] netlink: 'syz.2.2824': attribute type 19 has an invalid length.
[  261.433236][T12631] netlink: 'syz.1.2846': attribute type 2 has an invalid length.
[  261.671200][T12629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.854891][T12642] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.2851'.
[  261.972918][T12650] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2853'.
[  262.184030][T12663] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2858'.
[  262.208005][T12667] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2862'.
[  263.093340][T12684] netlink: 'syz.3.2869': attribute type 2 has an invalid length.
[  263.096672][T12684] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2869'.
[  263.603697][T12712] netlink: 'syz.1.2882': attribute type 21 has an invalid length.
[  263.843224][T12732] netlink: 'syz.3.2890': attribute type 7 has an invalid length.
[  265.376007][T12794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2918'.
[  265.381677][T12789] delete_channel: no stack
[  265.469089][T12801] C: renamed from team_slave_0 (while UP)
[  265.472480][T12801] netlink: 'syz.3.2921': attribute type 8 has an invalid length.
[  265.475220][T12801] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  265.844820][T12813] netlink: 'syz.2.2924': attribute type 10 has an invalid length.
[  266.173190][T12823] netlink: 'syz.1.2932': attribute type 21 has an invalid length.
[  266.175653][T12823] IPv6: NLM_F_CREATE should be specified when creating new route
[  266.178252][T12823] IPv6: Can't replace route, no match found
[  266.182221][T12821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2931'.
[  266.219810][T12821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2931'.
[  266.588433][T12851] : renamed from dummy0 (while UP)
[  266.605778][T12851] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2945'.
[  267.381933][T12891] syzkaller1: tun_chr_ioctl cmd 1074025677
[  267.385465][T12891] syzkaller1: linktype set to 823
[  267.846452][ T5942] Bluetooth: hci1: command 0x0406 tx timeout
[  267.849912][T12905] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  268.072754][T12898] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2965'.
[  268.275718][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'.
[  268.299797][ T9869] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[  268.305979][ T9869] Bluetooth: hci2: unexpected event for opcode 0x1004
[  268.512154][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'.
[  268.514930][T12939] netlink: 'syz.2.2981': attribute type 2 has an invalid length.
[  268.519744][T12939] netlink: 'syz.2.2981': attribute type 2 has an invalid length.
[  268.523011][T12939] netlink: 'syz.2.2981': attribute type 1 has an invalid length.
[  268.527227][T12939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2981'.
[  268.620018][T12937] netlink: 'syz.1.2980': attribute type 2 has an invalid length.
[  268.865369][T12958] netlink: 'syz.1.2990': attribute type 1 has an invalid length.
[  268.868665][T12958] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2990'.
[  268.872353][T12958] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  268.982870][T12964] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2993'.
[  268.988624][T12963] netlink: 'syz.1.2992': attribute type 10 has an invalid length.
[  269.140249][T12972] netlink: 'syz.3.2997': attribute type 23 has an invalid length.
[  269.424874][T12990] Set syz1 is full, maxelem 65536 reached
[  271.717979][T13081] __nla_validate_parse: 4 callbacks suppressed
[  271.717995][T13081] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3042'.
[  271.780305][T13085] validate_nla: 1 callbacks suppressed
[  271.780322][T13085] netlink: 'syz.1.3045': attribute type 28 has an invalid length.
[  271.923269][T13099] netlink: 'syz.3.3051': attribute type 1 has an invalid length.
[  271.926502][T13099] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3051'.
[  271.973535][T13102] netlink: 'syz.3.3052': attribute type 21 has an invalid length.
[  271.976206][T13102] netlink: 'syz.3.3052': attribute type 4 has an invalid length.
[  271.980918][T13102] netlink: 14453 bytes leftover after parsing attributes in process `syz.3.3052'.
[  272.013569][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'.
[  272.329244][ T9869] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  272.333042][ T9869] Bluetooth: hci2: Injecting HCI hardware error event
[  272.336675][ T5942] Bluetooth: hci2: hardware error 0x00
[  272.338088][T13129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3065'.
[  273.823101][T13163] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3079'.
[  273.905968][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3081'.
[  273.910054][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3081'.
[  273.913994][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3081'.
[  274.050349][T13176] sctp: [Deprecated]: syz.3.3083 (pid 13176) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.050349][T13176] Use struct sctp_sack_info instead
[  274.170725][T13184] netlink: 'syz.1.3086': attribute type 27 has an invalid length.
[  274.174785][T13184] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3086'.
[  274.406575][ T5942] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  275.152430][T13225] netlink: 'syz.2.3107': attribute type 2 has an invalid length.
[  275.200363][T13227] netlink: 'syz.3.3108': attribute type 4 has an invalid length.
[  275.565748][T13260] syzkaller0: entered promiscuous mode
[  275.569803][T13260] syzkaller0: entered allmulticast mode
[  275.978520][T13308] openvswitch: netlink: IP tunnel dst address not specified
[  276.051450][T13313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  276.054994][T13313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.781903][T13323] __nla_validate_parse: 2 callbacks suppressed
[  276.781957][T13323] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3144'.
[  276.792032][T13323] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  277.008117][T13331] netlink: 'syz.3.3149': attribute type 22 has an invalid length.
[  277.010571][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'.
[  277.041171][T13335] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3150'.
[  277.080352][T13337] netlink: 'syz.3.3151': attribute type 21 has an invalid length.
[  277.083085][T13337] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3151'.
[  277.088415][T13337] netlink: 'syz.3.3151': attribute type 4 has an invalid length.
[  277.091043][T13337] netlink: 'syz.3.3151': attribute type 5 has an invalid length.
[  277.094782][T13337] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3151'.
[  278.517426][T13383] netlink: 'syz.3.3172': attribute type 21 has an invalid length.
[  278.582670][T13388] netlink: 'syz.3.3174': attribute type 21 has an invalid length.
[  278.589874][T13387] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3173'.
[  278.746592][T13394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3175'.
[  278.750819][T13393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3175'.
[  278.921640][T13393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  279.065312][T13398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3176'.
[  279.203123][T13406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3180'.
[  280.288336][T13444] netlink: 'syz.2.3197': attribute type 11 has an invalid length.
[  280.349349][T13455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.929882][T13498] netlink: 'syz.2.3223': attribute type 21 has an invalid length.
[  282.095223][T13498] __nla_validate_parse: 4 callbacks suppressed
[  282.095248][T13498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3223'.
[  282.102491][T13498] netlink: 'syz.2.3223': attribute type 1 has an invalid length.
[  282.250172][T13512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3227'.
[  282.253423][T13507] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3227'.
[  282.258559][T13512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3227'.
[  282.529181][T13526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.560515][T13528] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3236'.
[  282.749620][T13538] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3240'.
[  282.841313][T13545] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3245'.
[  283.190456][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3254'.
[  283.259481][T13577] netlink: 'syz.3.3258': attribute type 13 has an invalid length.
[  283.261970][T13577] netlink: 'syz.3.3258': attribute type 58 has an invalid length.
[  283.274507][T13577] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3258'.
[  283.280562][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'.
[  283.314497][T13585] openvswitch: netlink: IP tunnel dst address not specified
[  283.341098][T13588] netlink: 'syz.1.3263': attribute type 1 has an invalid length.
[  283.381914][T13592] netlink: 'syz.1.3265': attribute type 10 has an invalid length.
[  283.439204][T13598] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  283.458699][T13595] siw: device registration error -23
[  283.620008][T13609] tc_dump_action: action bad kind
[  284.430755][T13627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  284.434689][T13627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.310446][T13630] erspan0 speed is unknown, defaulting to 1000
[  285.314048][T13630] wg0 speed is unknown, defaulting to 1000
[  285.413908][T13636] netlink: zone id is out of range
[  285.415568][T13636] netlink: zone id is out of range
[  285.418750][T13636] netlink: zone id is out of range
[  285.420923][T13636] netlink: zone id is out of range
[  285.423061][T13636] netlink: zone id is out of range
[  285.425204][T13636] netlink: zone id is out of range
[  285.429691][T13636] netlink: zone id is out of range
[  287.820118][T13681] net_ratelimit: 77 callbacks suppressed
[  287.820195][T13681] netlink: zone id is out of range
[  287.824288][T13681] netlink: zone id is out of range
[  287.826013][T13681] netlink: zone id is out of range
[  287.827967][T13681] netlink: zone id is out of range
[  287.834746][T13681] netlink: del zone limit has 4 unknown bytes
[  287.849579][T13681] __nla_validate_parse: 4 callbacks suppressed
[  287.849634][T13681] netlink: 16094 bytes leftover after parsing attributes in process `syz.3.3303'.
[  288.043744][T13686] netlink: 'syz.3.3305': attribute type 3 has an invalid length.
[  288.255625][T13693] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3308'.
[  289.709899][T13713] netlink: 'syz.3.3316': attribute type 1 has an invalid length.
[  289.712984][T13713] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3316'.
[  290.949084][T13727] delete_channel: no stack
[  291.051215][T13732] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  291.054977][T13732] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  291.950873][T13740] netlink: 'syz.3.3326': attribute type 21 has an invalid length.
[  291.953914][T13740] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3326'.
[  292.185011][T13742] : entered promiscuous mode
[  292.875856][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'.
[  292.908770][T13767] netlink: 'syz.3.3339': attribute type 1 has an invalid length.
[  293.325190][T13772] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3341'.
[  295.028347][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'.
[  295.276804][T13805] netlink: 'syz.3.3356': attribute type 12 has an invalid length.
[  295.279929][T13805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3356'.
[  295.638734][T13816] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3361'.
[  296.518206][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3372'.
[  296.521470][T13838] netlink: 'syz.3.3372': attribute type 2 has an invalid length.
[  296.875466][T13850] hsr0: entered promiscuous mode
[  297.102662][T13862] netlink: 'syz.3.3384': attribute type 4 has an invalid length.
[  297.105923][T13862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3384'.
[  297.434151][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3389'.
[  297.938079][T13881] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3393'.
[  298.274072][T13892] syzkaller0: entered promiscuous mode
[  298.275841][T13892] syzkaller0: entered allmulticast mode
[  299.171845][ T9869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.177985][ T9869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.186618][ T9869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.190686][ T9869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.193927][ T9869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  299.248617][ T9869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.261782][ T9869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.269516][ T9869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.285784][ T9869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.294973][ T9869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.533920][T13895] erspan0 speed is unknown, defaulting to 1000
[  299.541090][T13895] wg0 speed is unknown, defaulting to 1000
[  299.541885][T13899] erspan0 speed is unknown, defaulting to 1000
[  299.564597][T13899] wg0 speed is unknown, defaulting to 1000
[  299.750488][T13907] syzkaller1: tun_chr_ioctl cmd 1074812118
[  299.754382][T13907] netlink: 'syz.3.3402': attribute type 3 has an invalid length.
[  299.758034][T13907] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3402'.
[  299.875685][T13899] chnl_net:caif_netlink_parms(): no params data found
[  299.924942][T13895] chnl_net:caif_netlink_parms(): no params data found
[  300.000425][T13899] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.003159][T13899] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.006196][T13899] bridge_slave_0: entered allmulticast mode
[  300.010458][T13899] bridge_slave_0: entered promiscuous mode
[  300.026658][T13899] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.029426][T13899] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.032147][T13899] bridge_slave_1: entered allmulticast mode
[  300.035665][T13899] bridge_slave_1: entered promiscuous mode
[  300.112684][T13899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.117524][T13895] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.119772][T13895] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.122020][T13895] bridge_slave_0: entered allmulticast mode
[  300.124753][T13895] bridge_slave_0: entered promiscuous mode
[  300.131294][T13899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.135145][T13895] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.138751][T13895] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.141665][T13895] bridge_slave_1: entered allmulticast mode
[  300.144834][T13895] bridge_slave_1: entered promiscuous mode
[  300.206272][T13895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.218697][T13899] team0: Port device team_slave_0 added
[  300.222942][T13895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.242352][T13899] team0: Port device team_slave_1 added
[  300.288242][T13895] team0: Port device team_slave_0 added
[  300.297814][T13899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.300111][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.308377][T13899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.315468][T13899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.319660][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.328808][T13899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.334173][T13895] team0: Port device team_slave_1 added
[  300.408896][T13895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.411154][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.424266][T13895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.436773][T13899] hsr_slave_0: entered promiscuous mode
[  300.440629][T13899] hsr_slave_1: entered promiscuous mode
[  300.445063][T13895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.450259][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.461717][T13895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.532218][T13895] hsr_slave_0: entered promiscuous mode
[  300.535514][T13895] hsr_slave_1: entered promiscuous mode
[  300.539085][T13895] debugfs: 'hsr0' already exists in 'hsr'
[  300.541374][T13895] Cannot create hsr debugfs directory
[  300.631337][T13939] openvswitch: netlink: Message has 1 unknown bytes.
[  300.634079][T13939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.806257][T13899] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  300.818873][T13899] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  300.842086][T13899] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  300.894944][T13899] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  300.920147][T13895] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  300.931213][T13895] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  300.942764][T13895] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  300.959080][T13895] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  301.076168][T13899] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.101210][T13899] 8021q: adding VLAN 0 to HW filter on device team0
[  301.111586][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.113892][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.124300][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.127107][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.134565][T13895] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.160286][T13895] 8021q: adding VLAN 0 to HW filter on device team0
[  301.169847][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.172846][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.188084][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.191036][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.287307][ T9869] Bluetooth: hci3: command tx timeout
[  301.334967][T13899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.361724][T13895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.370185][ T9869] Bluetooth: hci4: command tx timeout
[  301.528272][T13899] veth0_vlan: entered promiscuous mode
[  301.540542][T13895] veth0_vlan: entered promiscuous mode
[  301.544392][T13899] veth1_vlan: entered promiscuous mode
[  301.554124][T13895] veth1_vlan: entered promiscuous mode
[  301.579173][T13899] veth0_macvtap: entered promiscuous mode
[  301.588566][T13899] veth1_macvtap: entered promiscuous mode
[  301.601537][T13895] veth0_macvtap: entered promiscuous mode
[  301.615688][T13895] veth1_macvtap: entered promiscuous mode
[  301.632125][T13895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.639881][T13899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.653311][T13895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.658864][T13899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.377010][ T5934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.399953][ T5934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.404268][ T5934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.430441][ T5934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.438480][ T5934] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.446242][ T5934] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.452420][ T5934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.455280][ T5934] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.546551][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.551202][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.578234][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.585713][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.613253][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.615633][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.618657][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.621288][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.735720][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3419'.
[  303.366648][ T9869] Bluetooth: hci3: command tx timeout
[  303.446670][ T9869] Bluetooth: hci4: command tx timeout
[  305.446831][ T9869] Bluetooth: hci3: command tx timeout
[  305.528520][ T9869] Bluetooth: hci4: command tx timeout
[  306.088883][T13987] syz.4.3399: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  306.106422][T13987] CPU: 0 UID: 0 PID: 13987 Comm: syz.4.3399 Not tainted syzkaller #0 PREEMPT(full) 
[  306.106436][T13987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.106443][T13987] Call Trace:
[  306.106446][T13987]  <TASK>
[  306.106451][T13987]  dump_stack_lvl+0x189/0x250
[  306.106468][T13987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.106497][T13987]  ? __pfx__printk+0x10/0x10
[  306.106510][T13987]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  306.106521][T13987]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  306.106531][T13987]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  306.106541][T13987]  warn_alloc+0x214/0x310
[  306.106557][T13987]  ? __pfx_warn_alloc+0x10/0x10
[  306.106572][T13987]  ? __get_vm_area_node+0x28f/0x300
[  306.106583][T13987]  ? hash_netportnet_create+0x354/0xf90
[  306.106598][T13987]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  306.106623][T13987]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  306.106633][T13987]  ? hash_netportnet_create+0x354/0xf90
[  306.106645][T13987]  ? __get_vm_area_node+0x28f/0x300
[  306.106656][T13987]  ? hash_netportnet_create+0x354/0xf90
[  306.106667][T13987]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  306.106678][T13987]  ? hash_netportnet_create+0x354/0xf90
[  306.106703][T13987]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  306.106717][T13987]  ? rcu_is_watching+0x15/0xb0
[  306.106730][T13987]  ? hash_netportnet_create+0x354/0xf90
[  306.106740][T13987]  ? hash_netportnet_create+0x354/0xf90
[  306.106750][T13987]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  306.106763][T13987]  ? hash_netportnet_create+0x354/0xf90
[  306.106774][T13987]  ? hash_netportnet_create+0x2fa/0xf90
[  306.106787][T13987]  hash_netportnet_create+0x354/0xf90
[  306.106802][T13987]  ? __nla_parse+0x40/0x60
[  306.106814][T13987]  ? __pfx_hash_netportnet_create+0x10/0x10
[  306.106826][T13987]  ip_set_create+0xa97/0x1940
[  306.106836][T13987]  ? ip_set_create+0x4a2/0x1940
[  306.106850][T13987]  ? __pfx_ip_set_create+0x10/0x10
[  306.106876][T13987]  nfnetlink_rcv_msg+0xb4d/0x1130
[  306.106887][T13987]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  306.106906][T13987]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  306.106914][T13987]  ? kasan_save_free_info+0x46/0x50
[  306.106936][T13987]  ? perf_trace_preemptirq_template+0xa3/0x340
[  306.106947][T13987]  ? kasan_quarantine_put+0x3d/0x220
[  306.106964][T13987]  netlink_rcv_skb+0x208/0x470
[  306.106977][T13987]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  306.106987][T13987]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  306.107003][T13987]  ? bpf_lsm_capable+0x9/0x20
[  306.107013][T13987]  ? security_capable+0x7e/0x2e0
[  306.107028][T13987]  nfnetlink_rcv+0x26a/0x2520
[  306.107039][T13987]  ? __dev_queue_xmit+0x1d79/0x3b50
[  306.107054][T13987]  ? __dev_queue_xmit+0x27b/0x3b50
[  306.107068][T13987]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  306.107077][T13987]  ? __pfx___dev_queue_xmit+0x10/0x10
[  306.107092][T13987]  ? ref_tracker_free+0x63a/0x7d0
[  306.107104][T13987]  ? __asan_memcpy+0x40/0x70
[  306.107112][T13987]  ? __pfx_ref_tracker_free+0x10/0x10
[  306.107130][T13987]  ? skb_clone+0x246/0x3a0
[  306.107140][T13987]  ? __netlink_deliver_tap+0x807/0x850
[  306.107150][T13987]  ? netlink_deliver_tap+0x2e/0x1b0
[  306.107164][T13987]  ? netlink_deliver_tap+0x2e/0x1b0
[  306.107178][T13987]  netlink_unicast+0x82f/0x9e0
[  306.107193][T13987]  ? __pfx_netlink_unicast+0x10/0x10
[  306.107203][T13987]  ? netlink_sendmsg+0x642/0xb30
[  306.107213][T13987]  ? skb_put+0x11b/0x210
[  306.107226][T13987]  netlink_sendmsg+0x805/0xb30
[  306.107241][T13987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.107253][T13987]  ? aa_sock_msg_perm+0xf1/0x1d0
[  306.107266][T13987]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  306.107275][T13987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.107286][T13987]  __sock_sendmsg+0x21c/0x270
[  306.107298][T13987]  ____sys_sendmsg+0x505/0x830
[  306.107309][T13987]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.107321][T13987]  ? import_iovec+0x74/0xa0
[  306.107331][T13987]  ___sys_sendmsg+0x21f/0x2a0
[  306.107341][T13987]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.107366][T13987]  ? __fget_files+0x2a/0x420
[  306.107377][T13987]  ? __fget_files+0x3a0/0x420
[  306.107392][T13987]  __x64_sys_sendmsg+0x19b/0x260
[  306.107402][T13987]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  306.107414][T13987]  ? rcu_is_watching+0x15/0xb0
[  306.107424][T13987]  ? do_syscall_64+0xbe/0x3b0
[  306.107438][T13987]  do_syscall_64+0xfa/0x3b0
[  306.107461][T13987]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.107472][T13987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.107499][T13987]  ? exc_page_fault+0x9f/0xf0
[  306.107511][T13987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.107518][T13987] RIP: 0033:0x7f09dd78ebe9
[  306.107528][T13987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.107535][T13987] RSP: 002b:00007f09db9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.107544][T13987] RAX: ffffffffffffffda RBX: 00007f09dd9c5fa0 RCX: 00007f09dd78ebe9
[  306.107550][T13987] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  306.107556][T13987] RBP: 00007f09dd811e19 R08: 0000000000000000 R09: 0000000000000000
[  306.107560][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.107565][T13987] R13: 00007f09dd9c6038 R14: 00007f09dd9c5fa0 R15: 00007ffdca530468
[  306.107579][T13987]  </TASK>
[  306.107658][T13987] Mem-Info:
[  306.366598][T13987] active_anon:19860 inactive_anon:0 isolated_anon:0
[  306.366598][T13987]  active_file:16064 inactive_file:38350 isolated_file:0
[  306.366598][T13987]  unevictable:1768 dirty:230 writeback:0
[  306.366598][T13987]  slab_reclaimable:10527 slab_unreclaimable:88572
[  306.366598][T13987]  mapped:28406 shmem:2445 pagetables:1195
[  306.366598][T13987]  sec_pagetables:0 bounce:0
[  306.366598][T13987]  kernel_misc_reclaimable:0
[  306.366598][T13987]  free:175748 free_pcp:20447 free_cma:0
[  306.405705][T13987] Node 0 active_anon:38052kB inactive_anon:0kB active_file:14216kB inactive_file:110884kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40484kB dirty:220kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7100kB pagetables:2740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  306.446417][T13987] Node 1 active_anon:41388kB inactive_anon:0kB active_file:50040kB inactive_file:42516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:73140kB dirty:700kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5240kB pagetables:2040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  306.477336][T13987] Node 0 DMA free:3968kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:384kB free_cma:0kB
[  306.491402][T13987] lowmem_reserve[]: 0 811 811 811 811
[  306.493279][T13987] Node 0 DMA32 free:39752kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38052kB inactive_anon:0kB active_file:14216kB inactive_file:110884kB unevictable:3536kB writepending:220kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:31328kB local_pcp:11744kB free_cma:0kB
[  306.509721][T13987] lowmem_reserve[]: 0 0 0 0 0
[  306.511567][T13987] Node 1 DMA32 free:446588kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:12020kB local_pcp:11904kB free_cma:0kB
[  306.522874][T13987] lowmem_reserve[]: 0 0 854 854 854
[  306.524668][T13987] Node 1 Normal free:212684kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41388kB inactive_anon:0kB active_file:50040kB inactive_file:42516kB unevictable:3536kB writepending:700kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38556kB local_pcp:17312kB free_cma:0kB
[  306.537342][T13987] lowmem_reserve[]: 0 0 0 0 0
[  306.539050][T13987] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 3964kB
[  306.543497][T13987] Node 0 DMA32: 80*4kB (UM) 194*8kB (ME) 121*16kB (UME) 72*32kB (ME) 25*64kB (ME) 8*128kB (ME) 7*256kB (UME) 11*512kB (UME) 9*1024kB (M) 3*2048kB (M) 2*4096kB (M) = 39712kB
[  306.549805][T13987] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 5*2048kB (UM) 105*4096kB (UM) = 446588kB
[  306.554917][T13987] Node 1 Normal: 615*4kB (UME) 220*8kB (UME) 105*16kB (UME) 50*32kB (UME) 44*64kB (UME) 37*128kB (UM) 34*256kB (UM) 19*512kB (UME) 11*1024kB (UM) 6*2048kB (UM) 38*4096kB (UM) = 212684kB
[  306.563506][T13987] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  306.570627][T13987] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  306.573685][T13987] 56887 total pagecache pages
[  306.575336][T13987] 28 pages in swap cache
[  306.579024][T13987] Free swap  = 124864kB
[  306.580329][T13987] Total swap = 124996kB
[  306.581584][T13987] 786301 pages RAM
[  306.582698][T13987] 0 pages HighMem/MovableOnly
[  306.584240][T13987] 241329 pages reserved
[  306.590106][T13987] 0 pages cma reserved
[  306.798625][T14030] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  306.808971][T14030] syzkaller0: entered promiscuous mode
[  306.810628][T14030] syzkaller0: entered allmulticast mode
[  306.853037][T14032] netlink: 16054 bytes leftover after parsing attributes in process `syz.5.3437'.
[  306.877499][T13987] syz.4.3399 (13987) used greatest stack depth: 16808 bytes left
[  306.945019][T14036] netlink: 'syz.5.3439': attribute type 10 has an invalid length.
[  307.537059][ T9869] Bluetooth: hci3: command tx timeout
[  307.619116][ T9869] Bluetooth: hci4: command tx timeout
[  307.931947][T14036] macvlan0: entered promiscuous mode
[  307.933685][T14036] macvlan0: entered allmulticast mode
[  307.938240][T14036] veth1_vlan: entered allmulticast mode
[  307.952279][T14036] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  308.147939][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'.
[  308.168551][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'.
[  308.176857][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3452'.
[  308.181205][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3452'.
[  308.185184][T14063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3452'.
[  308.223988][T14068] netlink: 'syz.3.3454': attribute type 9 has an invalid length.
[  308.227846][T14068] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.3454'.
[  308.819096][ T9869] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  309.267044][T14114] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3477'.
[  309.442064][T14112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3476'.
[  309.451941][T14116] netlink: 'syz.3.3478': attribute type 6 has an invalid length.
[  310.722929][T14188] delete_channel: no stack
[  310.724484][T14188] delete_channel: no stack
[  310.790492][T14192] netlink: 'syz.4.3514': attribute type 29 has an invalid length.
[  310.803686][T14192] netlink: 'syz.4.3514': attribute type 29 has an invalid length.
[  312.209752][T14228] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3528'.
[  312.214600][T14228] hsr_slave_0: left promiscuous mode
[  312.230084][T14228] hsr_slave_1: left promiscuous mode
[  312.370155][T14232] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3530'.
[  313.125382][T14290] netlink: 'syz.5.3558': attribute type 10 has an invalid length.
[  313.130216][T14290] veth1_macvtap: left promiscuous mode
[  313.251898][T14296] netlink: 182 bytes leftover after parsing attributes in process `syz.5.3561'.
[  313.308592][T14304] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  313.336812][T14306] netlink: 'syz.3.3567': attribute type 21 has an invalid length.
[  314.473314][T14325] netlink: 'syz.5.3574': attribute type 23 has an invalid length.
[  314.994071][T14334] netlink: 'syz.4.3576': attribute type 12 has an invalid length.
[  315.004559][T14334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3576'.
[  315.135721][T14340] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3578'.
[  315.470538][T14353] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3584'.
[  316.254540][T14364] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3590'.
[  316.257600][T14364] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3590'.
[  316.290362][T14366] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.3591'.
[  316.512397][ T9869] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  316.836062][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3598'.
[  316.978801][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.981303][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.012828][T14397] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  317.394587][T14417] __nla_validate_parse: 3 callbacks suppressed
[  317.394605][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3613'.
[  318.773360][T14459] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3635'.
[  319.018820][T14472] ref_ctr_offset mismatch. inode: 0x171 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  319.523539][T14485] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.3648'.
[  319.607067][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3649'.
[  323.044311][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1396996675 wd_nsec: 1396996699
[  324.696380][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3665'.
[  327.742283][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3184884063 wd_nsec: 3184884179
[  329.456315][    C1] sched: DL replenish lagged too much
[  330.762470][T14562] IPv6: NLM_F_CREATE should be specified when creating new route
[  330.768438][T14562] netlink: 'syz.5.3682': attribute type 2 has an invalid length.
[  330.771753][T14562] netlink: 199816 bytes leftover after parsing attributes in process `syz.5.3682'.
[  335.211891][ T9869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  335.215470][ T9869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  335.220414][ T9869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  335.223267][ T9869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  335.225824][ T9869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  335.284547][T14575] erspan0 speed is unknown, defaulting to 1000
[  335.288060][T14575] wg0 speed is unknown, defaulting to 1000
[  335.557407][T14575] chnl_net:caif_netlink_parms(): no params data found
[  335.669339][T14575] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.671752][T14575] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.674040][T14575] bridge_slave_0: entered allmulticast mode
[  335.678997][T14575] bridge_slave_0: entered promiscuous mode
[  335.682250][T14575] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.684609][T14575] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.688290][T14575] bridge_slave_1: entered allmulticast mode
[  335.691004][T14575] bridge_slave_1: entered promiscuous mode
[  335.714254][T14575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.720287][T14575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.772552][T14575] team0: Port device team_slave_0 added
[  335.781699][T14575] team0: Port device team_slave_1 added
[  335.864023][T14575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.872107][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.894940][T14575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.901186][T14575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.903974][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.921069][T14575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.969717][T14575] hsr_slave_0: entered promiscuous mode
[  335.972070][T14575] hsr_slave_1: entered promiscuous mode
[  335.974205][T14575] debugfs: 'hsr0' already exists in 'hsr'
[  335.976020][T14575] Cannot create hsr debugfs directory
[  336.105751][T14575] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  336.114371][T14575] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  336.120476][T14575] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  336.132517][T14575] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  336.185406][T14575] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.188383][T14575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.191326][T14575] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.193664][T14575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.249561][T14575] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.266069][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.269648][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.280288][T14575] 8021q: adding VLAN 0 to HW filter on device team0
[  336.301038][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.303955][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.308285][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.311209][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.465382][T14575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.698612][T14575] veth0_vlan: entered promiscuous mode
[  336.703950][T14575] veth1_vlan: entered promiscuous mode
[  336.733486][T14575] veth0_macvtap: entered promiscuous mode
[  336.738113][T14575] veth1_macvtap: entered promiscuous mode
[  336.742132][T14662] netlink: 'syz.4.3718': attribute type 1 has an invalid length.
[  336.789822][T14575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.797152][T14575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.803566][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.807944][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.812690][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.836089][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.923208][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3722'.
[  336.953109][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.955570][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.983005][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.985624][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.133769][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3729'.
[  337.287133][ T9869] Bluetooth: hci5: command tx timeout
[  337.349211][T14697] erspan0 speed is unknown, defaulting to 1000
[  337.352160][T14697] wg0 speed is unknown, defaulting to 1000
[  338.233139][T14739] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3749'.
[  338.290369][T14740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.293238][T14740] IPv6: NLM_F_CREATE should be set when creating new route
[  338.295587][T14740] IPv6: NLM_F_CREATE should be set when creating new route
[  338.890727][T14756] netlink: 'syz.6.3759': attribute type 21 has an invalid length.
[  338.898902][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3759'.
[  339.376526][ T9869] Bluetooth: hci5: command tx timeout
[  339.704889][T14777] netlink: 'syz.4.3764': attribute type 1 has an invalid length.
[  339.708757][T14777] netlink: 'syz.4.3764': attribute type 2 has an invalid length.
[  340.213953][T14802] syzkaller0: entered promiscuous mode
[  340.215880][T14802] syzkaller0: entered allmulticast mode
[  340.221522][T14802] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  341.468161][ T9869] Bluetooth: hci5: command tx timeout
[  341.535440][T14844] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3795'.
[  343.536463][ T9869] Bluetooth: hci5: command tx timeout
[  344.728588][T14861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.851412][T14867] netlink: 'syz.4.3806': attribute type 58 has an invalid length.
[  344.854491][T14867] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3806'.
[  345.097741][T14877] netlink: 42496 bytes leftover after parsing attributes in process `syz.4.3810'.
[  345.236537][T14888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3815'.
[  345.567985][ T9869] Bluetooth: hci5: unexpected event 0x01 length: 151 > 1
[  345.773551][T14911] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.3825'.
[  345.785966][T14911] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  345.793447][T14911] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  345.870886][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3827'.
[  345.928699][T14913] netlink: 'syz.4.3826': attribute type 10 has an invalid length.
[  345.931550][T14913] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3826'.
[  345.971257][T14920] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3829'.
[  346.161583][T14928] netlink: 'syz.5.3831': attribute type 29 has an invalid length.
[  346.190389][T14928] netlink: 'syz.5.3831': attribute type 29 has an invalid length.
[  346.196861][T14930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.228521][T14932] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  346.256426][T14935] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3837'.
[  346.633739][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3848'.
[  346.637114][T14961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.040808][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3852'.
[  347.078439][T14976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.351334][T14994] netlink: 'syz.4.3863': attribute type 12 has an invalid length.
[  347.379861][T15002] netlink: 'syz.6.3867': attribute type 20 has an invalid length.
[  347.382401][T15002] IPv6: NLM_F_CREATE should be specified when creating new route
[  347.870730][T15048] netlink: 'syz.5.3887': attribute type 2 has an invalid length.
[  347.964698][T15058] netlink: 'syz.6.3892': attribute type 21 has an invalid length.
[  349.644272][T15071] netlink: 'syz.4.3898': attribute type 7 has an invalid length.
[  350.180534][T15094] __nla_validate_parse: 8 callbacks suppressed
[  350.180545][T15094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3908'.
[  350.481819][T15119] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3919'.
[  350.583696][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3915'.
[  350.911920][T15135] netlink: 'syz.4.3925': attribute type 10 has an invalid length.
[  350.914950][T15135] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3925'.
[  350.947719][T15137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3927'.
[  350.951347][T15137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3927'.
[  351.019912][T15141] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3928'.
[  351.032687][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3928'.
[  351.035975][T15141] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3928'.
[  351.043692][T15141] netlink: 'syz.4.3928': attribute type 2 has an invalid length.
[  351.049325][T15141] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3928'.
[  351.232942][T15152] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  351.235439][T15152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.575064][T15180] syzkaller0: entered promiscuous mode
[  351.584578][T15180] syzkaller0: entered allmulticast mode
[  351.707833][T15188] netlink: 'syz.4.3951': attribute type 3 has an invalid length.
[  351.985484][T15206] netlink: 'syz.4.3959': attribute type 3 has an invalid length.
[  353.661294][T15239] netlink: 'syz.4.3974': attribute type 21 has an invalid length.
[  355.445924][T15268] __nla_validate_parse: 8 callbacks suppressed
[  355.445935][T15268] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.3985'.
[  355.451753][T15268] netlink: 'syz.4.3985': attribute type 2 has an invalid length.
[  355.454183][T15268] netlink: 62135 bytes leftover after parsing attributes in process `syz.4.3985'.
[  355.465459][T15270] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.3986'.
[  355.531848][T15278] netlink: 'syz.5.3989': attribute type 27 has an invalid length.
[  355.554537][T15280] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3991'.
[  355.670118][T15289] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3993'.
[  355.676808][T15286] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3993'.
[  355.682795][T15289] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3993'.
[  355.983605][T15310] delete_channel: no stack
[  357.249299][T15341] netlink: 'syz.5.4014': attribute type 4 has an invalid length.
[  358.630099][T15369] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.4022'.
[  359.582008][T15378] netlink: 'syz.5.4028': attribute type 10 has an invalid length.
[  359.584857][T15378] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4028'.
[  359.714000][T15378] veth1_vlan (unregistering): left allmulticast mode
[  359.734307][T15378] bond0: (slave macvlan0): Releasing backup interface
[  359.867680][   T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  359.966911][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'.
[  360.539541][T15417] C: renamed from team_slave_0 (while UP)
[  360.565597][T15417] __nla_validate_parse: 1 callbacks suppressed
[  360.565675][T15417] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4045'.
[  361.461606][T15417] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode
[  361.471093][T15433] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode
[  361.780247][T15485] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4075'.
[  361.800795][T15486] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4074'.
[  361.804577][T15488] netlink: 'syz.4.4076': attribute type 1 has an invalid length.
[  361.810358][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4074'.
[  362.275008][ T9869] Bluetooth: hci4: adv larger than maximum supported
[  362.275039][ T9869] Bluetooth: hci4: Unknown advertising packet type: 0x73
[  362.988795][T15549] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4101'.
[  362.994536][T15549] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4101'.
[  363.080572][T15553] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  364.392138][T15594] netlink: 'syz.5.4122': attribute type 10 has an invalid length.
[  364.929987][T15599] netlink: 'syz.4.4123': attribute type 11 has an invalid length.
[  364.933563][T15599] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4123'.
[  364.939546][T15598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.742190][T15623] netlink: 'syz.6.4133': attribute type 1 has an invalid length.
[  366.505038][T15636] erspan0 speed is unknown, defaulting to 1000
[  366.510517][T15636] wg0 speed is unknown, defaulting to 1000
[  366.644267][T15640] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4139'.
[  366.648292][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4139'.
[  366.651875][T15640] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4139'.
[  366.655869][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4139'.
[  366.892752][T15650] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.4141'.
[  366.899030][T15647] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.4141'.
[  366.910873][T15650] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.4141'.
[  367.179638][ T9869] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  367.320264][T15676] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4153'.
[  367.551970][ T9869] Bluetooth: hci4: command 0x206a tx timeout
[  367.558763][ T5942] Bluetooth: hci4: Opcode 0x206a failed: -110
[  367.668529][T15688] syzkaller0: entered promiscuous mode
[  367.670786][T15688] syzkaller0: entered allmulticast mode
[  367.834473][T15699] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4164'.
[  367.877041][T15701] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4165'.
[  369.235114][T15716] netlink: 'syz.6.4170': attribute type 2 has an invalid length.
[  369.239479][T15716] netlink: 'syz.6.4170': attribute type 8 has an invalid length.
[  369.554996][T15743] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  370.468380][T15780] C: renamed from team_slave_0 (while UP)
[  370.861833][T15787] mac80211_hwsim hwsim28 .3c: renamed from wlan1
[  371.942724][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.945146][T15823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.950197][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.952576][T15823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.235972][T15835] __nla_validate_parse: 7 callbacks suppressed
[  372.235986][T15835] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.4222'.
[  373.237509][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4227'.
[  373.382763][T15855] netlink: 'syz.5.4231': attribute type 11 has an invalid length.
[  373.385453][T15855] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4231'.
[  373.759715][T15862] netlink: 'syz.5.4234': attribute type 3 has an invalid length.
[  373.763262][T15862] netlink: 'syz.5.4234': attribute type 1 has an invalid length.
[  373.767082][T15862] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4234'.
[  373.841909][T15870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4237'.
[  374.065799][ T5942] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18
[  374.250440][T15903] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4252'.
[  374.254876][T15903] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4252'.
[  374.595701][T15911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4255'.
[  374.629021][T15913] netlink: 'syz.4.4256': attribute type 4 has an invalid length.
[  374.664605][T15917] openvswitch: netlink: Unknown key attributes 1
[  375.295953][T15947] syzkaller0: entered promiscuous mode
[  375.302663][T15947] syzkaller0: entered allmulticast mode
[  376.086438][ T9869] Bluetooth: hci5: command tx timeout
[  377.670316][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4287'.
[  377.828479][T15987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4289'.
[  377.957849][T15998] netlink: 'syz.6.4294': attribute type 10 has an invalid length.
[  377.961506][T15998] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4294'.
[  377.965124][T15998] bond0: entered promiscuous mode
[  377.975364][T15998] bond_slave_0: entered promiscuous mode
[  377.979352][T15998] bond_slave_1: entered promiscuous mode
[  377.982223][T15998] bridge0: port 3(bond0) entered blocking state
[  377.984980][T15998] bridge0: port 3(bond0) entered disabled state
[  378.000456][T15998] bond0: entered allmulticast mode
[  378.002797][T15998] bond_slave_0: entered allmulticast mode
[  378.005252][T15998] bond_slave_1: entered allmulticast mode
[  378.013926][T15998] bridge0: port 3(bond0) entered blocking state
[  378.017247][T15998] bridge0: port 3(bond0) entered forwarding state
[  378.250207][T16011] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  378.410690][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.414436][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.424448][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4305'.
[  379.551511][T16071] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.554888][T16071] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.560539][T16071] bridge0: entered allmulticast mode
[  379.717820][T16071] bridge_slave_1: left allmulticast mode
[  379.723327][T16071] bridge_slave_1: left promiscuous mode
[  379.730746][T16071] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.793686][T16071] bridge_slave_0: left allmulticast mode
[  379.808076][T16071] bridge_slave_0: left promiscuous mode
[  379.815211][T16071] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.063698][ T9869] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6
[  380.672446][T16111] net veth1_virt_wifi : renamed from virt_wifi0
[  380.725857][T16111] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  380.769221][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4351'.
[  380.790462][T16118] netlink: 'syz.4.4350': attribute type 6 has an invalid length.
[  381.122584][T16146] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  381.134654][T16146] syzkaller0: entered promiscuous mode
[  381.139973][T16146] syzkaller0: entered allmulticast mode
[  382.524964][T16174] netlink: 'syz.5.4373': attribute type 2 has an invalid length.
[  383.112778][T16180] netlink: 'syz.5.4376': attribute type 29 has an invalid length.
[  383.115756][T16181] netlink: 'syz.5.4376': attribute type 29 has an invalid length.
[  383.119795][T16182] netlink: 'syz.5.4376': attribute type 29 has an invalid length.
[  383.188200][T16186] netlink: 'syz.4.4378': attribute type 1 has an invalid length.
[  383.508762][T16220] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4395'.
[  383.577864][T16223] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4397'.
[  383.759783][T16233] netlink: 'syz.5.4401': attribute type 23 has an invalid length.
[  384.213924][T16259] netlink: 15231 bytes leftover after parsing attributes in process `syz.6.4412'.
[  384.261268][T16261] netlink: 'syz.5.4413': attribute type 10 has an invalid length.
[  384.263788][T16261] netlink: 'syz.5.4413': attribute type 19 has an invalid length.
[  384.266476][T16261] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4413'.
[  384.782140][T16275] netlink: 'syz.4.4420': attribute type 4 has an invalid length.
[  384.784967][T16275] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4420'.
[  384.916062][T16278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4421'.
[  385.134467][T16285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4425'.
[  385.139995][T16285] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  385.601640][T16327] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4446'.
[  385.829163][T16339] netlink: 202232 bytes leftover after parsing attributes in process `syz.5.4452'.
[  385.834158][T16339] netlink: zone id is out of range
[  385.836169][T16339] netlink: zone id is out of range
[  386.164939][ T9869] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6
[  386.718197][T16319] erspan0 speed is unknown, defaulting to 1000
[  386.722253][T16319] wg0 speed is unknown, defaulting to 1000
[  386.903606][T16370] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4465'.
[  390.342309][T16473] __nla_validate_parse: 4 callbacks suppressed
[  390.342326][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4512'.
[  390.349564][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4512'.
[  390.353053][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4512'.
[  390.388994][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4513'.
[  390.391749][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4513'.
[  390.467203][T16481] validate_nla: 2 callbacks suppressed
[  390.467218][T16481] netlink: 'syz.5.4516': attribute type 10 has an invalid length.
[  390.472812][T16481] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4516'.
[  390.479462][T16481] dummy0: entered promiscuous mode
[  390.485957][T16479] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4515'.
[  390.729111][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4523'.
[  391.472555][T16526] netlink: 208344 bytes leftover after parsing attributes in process `syz.6.4536'.
[  391.476234][T16526] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  391.479583][T16526] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  391.532557][T16531] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4537'.
[  392.399395][T16544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.710130][T16561] netlink: 'syz.5.4550': attribute type 2 has an invalid length.
[  392.793352][T16565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.796411][T16565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.801938][T16565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.804816][T16565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.077932][T16577] netlink: 'syz.5.4557': attribute type 41 has an invalid length.
[  401.203498][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  401.208263][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  401.213077][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  401.221949][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  401.225396][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  401.257581][T16599] erspan0 speed is unknown, defaulting to 1000
[  401.260550][T16599] wg0 speed is unknown, defaulting to 1000
[  401.401741][T16599] chnl_net:caif_netlink_parms(): no params data found
[  401.533225][T16599] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.535587][T16599] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.542184][T16622] netlink: 'syz.5.4574': attribute type 21 has an invalid length.
[  401.542421][T16599] bridge_slave_0: entered allmulticast mode
[  401.543270][T16599] bridge_slave_0: entered promiscuous mode
[  401.552669][T16622] __nla_validate_parse: 4 callbacks suppressed
[  401.552724][T16622] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4574'.
[  401.571727][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4574'.
[  401.586908][T16599] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.589814][T16599] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.592923][T16599] bridge_slave_1: entered allmulticast mode
[  401.600721][T16599] bridge_slave_1: entered promiscuous mode
[  402.876777][T16599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.883594][T16599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.934649][T16599] team0: Port device team_slave_0 added
[  402.938597][T16599] team0: Port device team_slave_1 added
[  402.989827][T16599] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.992024][T16599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.013782][T16599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.027640][T16599] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.029839][T16599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.038618][T16599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.095125][T16599] hsr_slave_0: entered promiscuous mode
[  403.101329][T16599] hsr_slave_1: entered promiscuous mode
[  403.103663][T16599] debugfs: 'hsr0' already exists in 'hsr'
[  403.105449][T16599] Cannot create hsr debugfs directory
[  403.259062][T16599] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  403.283265][T16599] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  403.286534][ T9869] Bluetooth: hci1: command tx timeout
[  403.290304][T16599] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  403.296007][T16599] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  403.359352][T16599] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.392076][T16599] 8021q: adding VLAN 0 to HW filter on device team0
[  403.416477][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.419337][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.428685][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.431609][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.530775][T16650] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4583'.
[  403.615703][T16657] netlink: 'syz.6.4585': attribute type 3 has an invalid length.
[  403.646952][T16599] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.829651][T16599] veth0_vlan: entered promiscuous mode
[  403.835435][T16599] veth1_vlan: entered promiscuous mode
[  403.860373][T16599] veth0_macvtap: entered promiscuous mode
[  403.864594][T16599] veth1_macvtap: entered promiscuous mode
[  403.888503][T16599] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.894812][T16599] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.905771][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.909888][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.923637][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.936577][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.019661][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.022459][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.064662][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.068554][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.143843][T16677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.146808][T16677] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.159413][T16677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.162179][T16677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.747815][ T5942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  404.751807][ T5942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  404.754650][ T5942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  404.758872][ T5942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  404.761543][ T5942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  404.788480][T16694] erspan0 speed is unknown, defaulting to 1000
[  404.792062][T16694] wg0 speed is unknown, defaulting to 1000
[  404.924625][T16694] chnl_net:caif_netlink_parms(): no params data found
[  405.014429][T16694] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.019664][T16694] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.021895][T16694] bridge_slave_0: entered allmulticast mode
[  405.024727][T16694] bridge_slave_0: entered promiscuous mode
[  405.029896][T16694] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.032348][T16694] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.034742][T16694] bridge_slave_1: entered allmulticast mode
[  405.040130][T16694] bridge_slave_1: entered promiscuous mode
[  405.066491][T16694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.073024][T16694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.099077][T16694] team0: Port device team_slave_0 added
[  405.102868][T16694] team0: Port device team_slave_1 added
[  405.127953][T16694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.130633][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.142516][T16694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.151416][T16705] : entered promiscuous mode
[  405.154404][T16694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.161488][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.169646][T16694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.247261][T16707] syzkaller0: entered promiscuous mode
[  405.249455][T16707] syzkaller0: entered allmulticast mode
[  405.255372][T16694] hsr_slave_0: entered promiscuous mode
[  405.260525][T16694] hsr_slave_1: entered promiscuous mode
[  405.262804][T16694] debugfs: 'hsr0' already exists in 'hsr'
[  405.264604][T16694] Cannot create hsr debugfs directory
[  405.376653][ T9869] Bluetooth: hci1: command tx timeout
[  406.714704][T16694] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  406.723671][T16694] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  406.730726][T16694] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  406.739522][T16694] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  406.808043][ T9869] Bluetooth: hci5: command tx timeout
[  406.828823][T16694] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.844250][T16694] 8021q: adding VLAN 0 to HW filter on device team0
[  406.851619][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.854048][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.863008][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.865473][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.952341][T16728] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4609'.
[  406.959261][T16728] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4609'.
[  407.006124][T16694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.043485][T16732] netlink: 'syz.7.4609': attribute type 21 has an invalid length.
[  407.046107][T16732] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4609'.
[  407.052227][T16732] netlink: 'syz.7.4609': attribute type 4 has an invalid length.
[  407.054791][T16732] netlink: 'syz.7.4609': attribute type 5 has an invalid length.
[  407.059391][T16732] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4609'.
[  407.194943][T16694] veth0_vlan: entered promiscuous mode
[  407.207248][T16694] veth1_vlan: entered promiscuous mode
[  407.234893][T16694] veth0_macvtap: entered promiscuous mode
[  407.240020][T16694] veth1_macvtap: entered promiscuous mode
[  407.250665][T16694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.259383][T16694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.266940][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.271539][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.275907][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.280767][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.356691][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.365599][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.384240][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.387330][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.446888][ T9869] Bluetooth: hci1: command tx timeout
[  407.449622][T16740] netlink: 160 bytes leftover after parsing attributes in process `syz.8.4599'.
[  407.474534][T16740] netlink: 'syz.8.4599': attribute type 10 has an invalid length.
[  407.515579][T16740] batman_adv: batadv0: Adding interface: netdevsim0
[  407.518182][T16740] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.526465][T16740] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  407.644947][T16743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4610'.
[  407.648670][T16743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4610'.
[  407.652111][T16743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4610'.
[  407.944460][T16751] netlink: 824 bytes leftover after parsing attributes in process `syz.5.4614'.
[  408.134316][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4619'.
[  408.155943][T16762] openvswitch: netlink: nsh attr 165 is out of range max 3
[  408.163915][T16762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.893637][ T9869] Bluetooth: hci5: command tx timeout
[  409.034828][T16795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.038530][T16796] netlink: 'syz.5.4634': attribute type 11 has an invalid length.
[  409.090570][T16798] netlink: 'syz.5.4635': attribute type 10 has an invalid length.
[  409.135826][T16804] : entered promiscuous mode
[  409.526527][ T9869] Bluetooth: hci1: command tx timeout
[  409.952247][T16813] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  409.955410][T16813] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  410.002530][T16812] xt_time: unknown flags 0xf4
[  410.399281][T16835] netlink: 'syz.8.4651': attribute type 21 has an invalid length.
[  410.517371][T16845] netlink: 'syz.7.4656': attribute type 2 has an invalid length.
[  410.967135][ T9869] Bluetooth: hci5: command tx timeout
[  411.249661][T16882] netlink: 'syz.7.4673': attribute type 1 has an invalid length.
[  411.252300][T16882] netlink: 'syz.7.4673': attribute type 1 has an invalid length.
[  411.616207][T16908] erspan0 speed is unknown, defaulting to 1000
[  411.619371][T16908] wg0 speed is unknown, defaulting to 1000
[  412.185060][T16932] netlink: 'syz.5.4689': attribute type 12 has an invalid length.
[  412.191815][T16932] __nla_validate_parse: 9 callbacks suppressed
[  412.191825][T16932] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4689'.
[  412.449926][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4694'.
[  412.545225][T16944] netlink: 'syz.7.4693': attribute type 10 has an invalid length.
[  412.567435][T16942] syzkaller0: entered promiscuous mode
[  412.570282][T16942] syzkaller0: entered allmulticast mode
[  412.712824][T16944] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  412.910017][T16960] netlink: 'syz.7.4700': attribute type 21 has an invalid length.
[  413.057107][ T9869] Bluetooth: hci5: command tx timeout
[  414.127695][T16960] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4700'.
[  414.401044][T16978] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4706'.
[  414.422479][T16978] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  414.658335][T16991] rdma_rxe: rxe_newlink: failed to add erspan0
[  416.041643][T17041] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.4726'.
[  417.241543][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4736'.
[  417.288566][T17075] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4738'.
[  417.293734][T17071] erspan0 speed is unknown, defaulting to 1000
[  417.300429][T17071] wg0 speed is unknown, defaulting to 1000
[  417.328319][T17078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.493311][T17092] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.4743'.
[  417.560633][T17098] netlink: 'syz.7.4747': attribute type 10 has an invalid length.
[  417.563549][T17098] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4747'.
[  417.567754][T17098] team0: entered promiscuous mode
[  417.569457][T17098] team_slave_0: entered promiscuous mode
[  417.571316][T17098] team_slave_1: entered promiscuous mode
[  417.573198][T17098] team0: entered allmulticast mode
[  417.574903][T17098] team_slave_0: entered allmulticast mode
[  417.577772][T17098] team_slave_1: entered allmulticast mode
[  417.580192][T17098] bridge0: port 3(team0) entered blocking state
[  417.582250][T17098] bridge0: port 3(team0) entered disabled state
[  417.585892][T17098] bridge0: port 3(team0) entered blocking state
[  417.588023][T17098] bridge0: port 3(team0) entered forwarding state
[  418.589610][T17103] netlink: 144 bytes leftover after parsing attributes in process `syz.8.4750'.
[  418.734214][T17113] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4755'.
[  418.804390][   T33] audit: type=1107 audit(1757018507.275:3): pid=17116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  418.809288][T17119] netlink: 'syz.7.4756': attribute type 2 has an invalid length.
[  418.816783][T17119] netlink: 'syz.7.4756': attribute type 1 has an invalid length.
[  418.925023][T17126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.997508][T17134] netlink: 763 bytes leftover after parsing attributes in process `syz.8.4765'.
[  419.073766][T17141] netlink: 'syz.7.4768': attribute type 29 has an invalid length.
[  419.081634][T17141] netlink: 'syz.7.4768': attribute type 29 has an invalid length.
[  419.191159][T17149] netlink: 'syz.8.4772': attribute type 1 has an invalid length.
[  419.193490][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4772'.
[  419.196102][T17149] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4772'.
[  419.244985][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4771'.
[  420.254938][T17182] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  420.300104][T17188] netlink: 'syz.5.4790': attribute type 21 has an invalid length.
[  420.373913][T17192] netlink: 'syz.5.4792': attribute type 12 has an invalid length.
[  420.587700][T17193] delete_channel: no stack
[  420.757018][T17211] netlink: 'syz.8.4801': attribute type 8 has an invalid length.
[  420.871454][T17223] netlink: 'syz.5.4807': attribute type 21 has an invalid length.
[  421.257919][T17238] syzkaller0: entered promiscuous mode
[  421.260253][T17238] syzkaller0: entered allmulticast mode
[  421.448352][   T55] Bluetooth: hci4: command 0x206a tx timeout
[  421.450881][ T5235] Bluetooth: hci3: command 0x0406 tx timeout
[  422.865110][T17298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.171156][T17314] __nla_validate_parse: 9 callbacks suppressed
[  423.171283][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4848'.
[  423.334741][T17319] validate_nla: 7 callbacks suppressed
[  423.334781][T17319] netlink: 'syz.5.4849': attribute type 10 has an invalid length.
[  423.463762][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4853'.
[  423.510278][T17328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.715963][T17343] netlink: 'syz.7.4859': attribute type 21 has an invalid length.
[  423.719616][T17343] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4859'.
[  423.722546][T17343] netlink: 'syz.7.4859': attribute type 4 has an invalid length.
[  423.761914][T17344] netlink: 'syz.8.4861': attribute type 21 has an invalid length.
[  423.765001][T17344] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4861'.
[  423.769189][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4861'.
[  424.671389][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4867'.
[  424.682665][T17358] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  424.703316][T17358] netlink: 'syz.5.4867': attribute type 10 has an invalid length.
[  424.783392][T17358] dummy0: left promiscuous mode
[  424.865854][T17358] team0: Port device dummy0 added
[  425.015558][T17371] netlink: 'syz.7.4872': attribute type 21 has an invalid length.
[  425.194103][T17382] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4876'.
[  425.319895][T17386] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4878'.
[  425.520748][T17404] netlink: 'syz.8.4886': attribute type 13 has an invalid length.
[  425.530976][T17404] gretap0: refused to change device tx_queue_len
[  425.534453][T17404] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  425.809787][T17419] netlink: 'syz.8.4892': attribute type 29 has an invalid length.
[  425.814595][T17419] netlink: 'syz.8.4892': attribute type 29 has an invalid length.
[  425.819102][T17419] netlink: 'syz.8.4892': attribute type 29 has an invalid length.
[  426.111167][T17430] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4897'.
[  426.833486][T17456] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.859675][T17456] bond0: entered promiscuous mode
[  426.861850][T17456] bond_slave_0: entered promiscuous mode
[  426.903797][T17456] bond_slave_1: entered promiscuous mode
[  426.924908][T17456] bond0: entered allmulticast mode
[  426.927269][T17456] bond_slave_0: entered allmulticast mode
[  426.931095][T17456] bond_slave_1: entered allmulticast mode
[  426.961764][T17456] team0: Port device bond0 added
[  427.221096][T17486] syz.7.4914 (17486) used obsolete PPPIOCDETACH ioctl
[  427.294061][T17490] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4920'.
[  428.280316][T17548] __nla_validate_parse: 8 callbacks suppressed
[  428.280328][T17548] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4946'.
[  428.417584][T17557] validate_nla: 6 callbacks suppressed
[  428.417596][T17557] netlink: 'syz.8.4950': attribute type 13 has an invalid length.
[  428.421877][T17557] netlink: 24859 bytes leftover after parsing attributes in process `syz.8.4950'.
[  428.505861][T17565] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  428.561169][T17569] netlink: 160 bytes leftover after parsing attributes in process `syz.8.4956'.
[  428.623126][T17574] netlink: 'syz.8.4956': attribute type 10 has an invalid length.
[  428.689107][T17575] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.4955'.
[  431.049936][T17599] syzkaller0: entered promiscuous mode
[  431.051803][T17599] syzkaller0: entered allmulticast mode
[  431.221094][T17607] netlink: 'syz.5.4972': attribute type 10 has an invalid length.
[  431.279242][ T5942] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  431.808866][T17621] netlink: 'syz.7.4975': attribute type 39 has an invalid length.
[  432.114079][   T33] audit: type=1107 audit(1757018520.495:4): pid=17626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  432.785619][T17667] netlink: 160 bytes leftover after parsing attributes in process `syz.8.4997'.
[  432.837268][T17667] netlink: 'syz.8.4997': attribute type 10 has an invalid length.
[  432.922379][T17677] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5001'.
[  432.925217][T17677] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5001'.
[  432.929681][T17677] netlink: 'syz.5.5001': attribute type 5 has an invalid length.
[  432.932485][T17677] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5001'.
[  432.935012][T17678] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5002'.
[  432.939201][T17678] netlink: 6 bytes leftover after parsing attributes in process `syz.7.5002'.
[  433.223341][T17693] netlink: 'syz.7.5010': attribute type 29 has an invalid length.
[  433.282607][T17699] netlink: 'syz.7.5012': attribute type 1 has an invalid length.
[  433.693383][T17712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.890195][T17727] netlink: 'syz.8.5025': attribute type 3 has an invalid length.
[  433.893645][T17727] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5025'.
[  434.009795][   T33] audit: type=1107 audit(1757018522.485:5): pid=17734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  434.592433][T17752] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5036'.
[  434.613334][T17754] netlink: 294 bytes leftover after parsing attributes in process `syz.5.5037'.
[  434.978930][T17766] netlink: 'syz.7.5042': attribute type 1 has an invalid length.
[  435.267487][T17779] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5048'.
[  435.672821][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5056'.
[  435.675651][T17796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.548937][T17808] delete_channel: no stack
[  436.624020][T17817] netlink: 'syz.8.5066': attribute type 21 has an invalid length.
[  436.652794][   T34] INFO: task kworker/u8:3:5902 blocked for more than 144 seconds.
[  436.655339][   T34]       Not tainted syzkaller #0
[  436.666726][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  436.679734][   T34] task:kworker/u8:3    state:D stack:23224 pid:5902  tgid:5902  ppid:2      task_flags:0x4208060 flags:0x00004000
[  436.710567][   T34] Workqueue: netns cleanup_net
[  436.712577][   T34] Call Trace:
[  436.713929][   T34]  <TASK>
[  436.715141][   T34]  __schedule+0x1798/0x4cc0
[  436.734919][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.742214][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.744171][   T34]  ? __pfx___schedule+0x10/0x10
[  436.746081][   T34]  ? schedule+0x91/0x360
[  436.766662][   T34]  schedule+0x165/0x360
[  436.768418][   T34]  schedule_preempt_disabled+0x13/0x30
[  436.778963][T17820] netlink: 'syz.7.5067': attribute type 10 has an invalid length.
[  436.782599][   T34]  __mutex_lock+0x7e6/0x1360
[  436.784498][   T34]  ? __mutex_lock+0x5b6/0x1360
[  436.800412][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  436.802627][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  436.804623][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  436.815369][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  436.817415][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  436.819033][   T34]  ? _raw_spin_unlock+0x28/0x50
[  436.820764][   T34]  rdma_dev_change_netns+0x39/0x300
[  436.822362][   T34]  rdma_dev_exit_net+0x203/0x340
[  436.824037][   T34]  ? __pfx___might_resched+0x10/0x10
[  436.825897][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  436.828339][   T34]  ? net_generic+0x1e/0x240
[  436.830408][   T34]  ? mutex_is_locked+0x17/0x50
[  436.832429][   T34]  ? rtnl_is_locked+0x15/0x20
[  436.834481][   T34]  ops_undo_list+0x49a/0x990
[  436.836525][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  436.838826][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  436.840773][   T34]  cleanup_net+0x4c5/0x800
[  436.842576][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  436.844579][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  436.846809][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  436.849190][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  436.851536][   T34]  process_scheduled_works+0xae1/0x17b0
[  436.853823][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  436.857723][   T34]  worker_thread+0x8a0/0xda0
[  436.859880][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  436.862593][   T34]  ? __kthread_parkme+0x7b/0x200
[  436.865919][   T34]  kthread+0x711/0x8a0
[  436.867564][   T34]  ? __pfx_worker_thread+0x10/0x10
[  436.869777][   T34]  ? __pfx_kthread+0x10/0x10
[  436.871783][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  436.873923][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.876068][   T34]  ? __pfx_kthread+0x10/0x10
[  436.878871][   T34]  ret_from_fork+0x3fc/0x770
[  436.882419][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  436.884164][   T34]  ? __switch_to_asm+0x39/0x70
[  436.885763][   T34]  ? __switch_to_asm+0x33/0x70
[  436.888860][   T34]  ? __pfx_kthread+0x10/0x10
[  436.891188][   T34]  ret_from_fork_asm+0x1a/0x30
[  436.893243][   T34]  </TASK>
[  436.916889][   T34] INFO: task syz.2.3267:13595 blocked for more than 144 seconds.
[  436.919463][   T34]       Not tainted syzkaller #0
[  436.921127][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  436.923914][   T34] task:syz.2.3267      state:D stack:21800 pid:13595 tgid:13593 ppid:5933   task_flags:0x400140 flags:0x00004006
[  436.928952][   T34] Call Trace:
[  436.930436][   T34]  <TASK>
[  436.931612][   T34]  __schedule+0x1798/0x4cc0
[  436.933211][   T34]  ? perf_trace_lock+0x2f8/0x3b0
[  436.934897][   T34]  ? __pfx___schedule+0x10/0x10
[  436.942255][   T34]  ? schedule+0x91/0x360
[  436.943775][   T34]  ? schedule+0x91/0x360
[  436.945239][   T34]  schedule+0x165/0x360
[  436.948109][T17820] bond0: (slave bond_slave_0): Releasing backup interface
[  436.948612][   T34]  schedule_timeout+0x9a/0x270
[  436.952986][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  436.954984][   T34]  ? wait_for_completion+0x267/0x5d0
[  436.958977][   T34]  wait_for_completion+0x2bf/0x5d0
[  436.961182][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  436.963369][   T34]  ? up_write+0x1c4/0x420
[  436.964861][   T34]  ? remove_client_context+0xc0/0x1e0
[  436.969273][   T34]  disable_device+0x1c6/0x320
[  436.970800][   T34]  ? __pfx_disable_device+0x10/0x10
[  436.972507][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  436.974353][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  436.976420][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  436.978691][   T34]  nldev_dellink+0x2d1/0x320
[  436.980303][   T34]  ? irqentry_enter+0x3d/0x60
[  436.981875][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  436.983681][   T34]  ? apparmor_capable+0x137/0x1b0
[  436.985386][   T34]  ? bpf_lsm_capable+0x9/0x20
[  436.987031][   T34]  ? security_capable+0x7e/0x2e0
[  436.988895][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  436.990622][   T34]  rdma_nl_rcv+0x6ae/0x980
[  436.992158][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  436.993785][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.995405][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  436.997191][   T34]  netlink_unicast+0x82f/0x9e0
[  436.998969][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  437.000732][   T34]  ? netlink_sendmsg+0x642/0xb30
[  437.002366][   T34]  ? skb_put+0x11b/0x210
[  437.004297][   T34]  netlink_sendmsg+0x805/0xb30
[  437.005889][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.007665][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  437.009553][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  437.011325][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.013089][   T34]  __sock_sendmsg+0x21c/0x270
[  437.014657][   T34]  ____sys_sendmsg+0x505/0x830
[  437.016363][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.018297][   T34]  ? import_iovec+0x74/0xa0
[  437.019823][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  437.021400][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.023188][   T34]  ? __fget_files+0x2a/0x420
[  437.024737][   T34]  ? __fget_files+0x3a0/0x420
[  437.026402][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  437.028297][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.030107][   T34]  ? do_syscall_64+0xbe/0x3b0
[  437.031701][   T34]  do_syscall_64+0xfa/0x3b0
[  437.033217][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.035202][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  437.037362][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.039496][   T34] RIP: 0033:0x7f866f78ebe9
[  437.041197][   T34] RSP: 002b:00007f866d9ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.043948][   T34] RAX: ffffffffffffffda RBX: 00007f866f9c5fa0 RCX: 00007f866f78ebe9
[  437.046962][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  437.050411][   T34] RBP: 00007f866f811e19 R08: 0000000000000000 R09: 0000000000000000
[  437.053054][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.056853][   T34] R13: 00007f866f9c6038 R14: 00007f866f9c5fa0 R15: 00007fffa46ff3b8
[  437.060063][   T34]  </TASK>
[  437.061336][   T34] INFO: task syz.1.3271:13604 blocked for more than 144 seconds.
[  437.064409][   T34]       Not tainted syzkaller #0
[  437.068053][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  437.071412][   T34] task:syz.1.3271      state:D stack:24824 pid:13604 tgid:13603 ppid:5939   task_flags:0x400140 flags:0x00004004
[  437.075042][   T34] Call Trace:
[  437.076097][   T34]  <TASK>
[  437.077660][   T34]  __schedule+0x1798/0x4cc0
[  437.079127][   T34]  ? __pfx___schedule+0x10/0x10
[  437.080659][   T34]  ? schedule+0x91/0x360
[  437.082011][   T34]  schedule+0x165/0x360
[  437.083332][   T34]  schedule_preempt_disabled+0x13/0x30
[  437.085036][   T34]  __mutex_lock+0x7e6/0x1360
[  437.086525][   T34]  ? __mutex_lock+0x5b6/0x1360
[  437.088080][   T34]  ? __ib_unregister_device+0x284/0x3f0
[  437.089816][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  437.091419][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  437.093287][   T34]  ? __up_read+0x280/0x680
[  437.094679][   T34]  ? __pfx___up_read+0x10/0x10
[  437.096195][   T34]  __ib_unregister_device+0x284/0x3f0
[  437.097939][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  437.099788][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  437.101559][   T34]  nldev_dellink+0x2d1/0x320
[  437.103206][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  437.105091][   T34]  ? apparmor_capable+0x137/0x1b0
[  437.107854][   T34]  ? bpf_lsm_capable+0x9/0x20
[  437.109342][   T34]  ? security_capable+0x7e/0x2e0
[  437.110883][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  437.112504][   T34]  rdma_nl_rcv+0x6ae/0x980
[  437.113964][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  437.115523][   T34]  ? __pfx_perf_trace_lock+0x10/0x10
[  437.117269][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  437.118895][   T34]  netlink_unicast+0x82f/0x9e0
[  437.120414][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  437.122323][   T34]  ? netlink_sendmsg+0x642/0xb30
[  437.123934][   T34]  ? skb_put+0x11b/0x210
[  437.125287][   T34]  netlink_sendmsg+0x805/0xb30
[  437.127027][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.128800][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  437.130435][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  437.132186][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.134120][   T34]  __sock_sendmsg+0x21c/0x270
[  437.136123][   T34]  ____sys_sendmsg+0x505/0x830
[  437.138220][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.140469][   T34]  ? import_iovec+0x74/0xa0
[  437.142426][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  437.144429][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.146672][   T34]  ? __fget_files+0x2a/0x420
[  437.148681][   T34]  ? __fget_files+0x2a/0x420
[  437.150545][   T34]  ? __fget_files+0x3a0/0x420
[  437.152192][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  437.153837][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.155656][   T34]  ? do_syscall_64+0xbe/0x3b0
[  437.157539][   T34]  do_syscall_64+0xfa/0x3b0
[  437.159140][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.161145][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  437.163236][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.165215][   T34] RIP: 0033:0x7f733a38ebe9
[  437.167272][   T34] RSP: 002b:00007f733b1c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.170037][   T34] RAX: ffffffffffffffda RBX: 00007f733a5c5fa0 RCX: 00007f733a38ebe9
[  437.172636][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c
[  437.175207][   T34] RBP: 00007f733a411e19 R08: 0000000000000000 R09: 0000000000000000
[  437.179248][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.181842][   T34] R13: 00007f733a5c6038 R14: 00007f733a5c5fa0 R15: 00007ffc364591c8
[  437.184374][   T34]  </TASK>
[  437.185564][   T34] 
[  437.185564][   T34] Showing all locks held in the system:
[  437.193804][   T34] 1 lock held by khungtaskd/34:
[  437.201908][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  437.233688][T17820] bond_slave_0: left promiscuous mode
[  437.236562][   T34] 2 locks held by getty/5672:
[  437.238068][   T34]  #0: ffff8880215080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  437.241105][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  437.244253][   T34] 4 locks held by kworker/u8:3/5902:
[  437.245907][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  437.249376][   T34]  #1: ffffc9000323fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  437.251462][T17820] bond_slave_0: left allmulticast mode
[  437.252650][   T34]  #2: ffffffff8f52ae30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  437.252680][   T34]  #3: ffff888108598700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  437.252711][   T34] 2 locks held by syz.2.3267/13595:
[  437.252717][   T34]  #0: ffffffff99e66858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  437.252739][   T34]  #1: ffff888108598700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  437.270064][   T34] 2 locks held by syz.1.3271/13604:
[  437.271929][   T34]  #0: ffffffff99e66858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  437.274906][   T34]  #1: ffff888108598700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  437.279104][   T34] 2 locks held by syz.4.4442/16319:
[  437.280737][   T34]  #0: ffffffff8f52ae30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  437.283680][   T34]  #1: ffff888108598700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  437.290512][   T34] 2 locks held by syz.7.5067/17820:
[  437.292150][   T34] 1 lock held by syz.7.5067/17823:
[  437.293749][   T34]  #0: ffffffff8f537c88 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410
[  437.296869][   T34] 
[  437.297654][   T34] =============================================
[  437.297654][   T34] 
[  437.300295][   T34] NMI backtrace for cpu 1
[  437.300304][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  437.300313][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.300318][   T34] Call Trace:
[  437.300322][   T34]  <TASK>
[  437.300326][   T34]  dump_stack_lvl+0x189/0x250
[  437.300340][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.300349][   T34]  ? __pfx__printk+0x10/0x10
[  437.300366][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  437.300377][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  437.300387][   T34]  ? __pfx__printk+0x10/0x10
[  437.300400][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  437.300413][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  437.300423][   T34]  watchdog+0xf93/0xfe0
[  437.300437][   T34]  ? watchdog+0x1de/0xfe0
[  437.300449][   T34]  kthread+0x711/0x8a0
[  437.300461][   T34]  ? __pfx_watchdog+0x10/0x10
[  437.300470][   T34]  ? __pfx_kthread+0x10/0x10
[  437.300480][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.300490][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.300499][   T34]  ? __pfx_kthread+0x10/0x10
[  437.300509][   T34]  ret_from_fork+0x3fc/0x770
[  437.300519][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  437.300530][   T34]  ? __switch_to_asm+0x39/0x70
[  437.300538][   T34]  ? __switch_to_asm+0x33/0x70
[  437.300546][   T34]  ? __pfx_kthread+0x10/0x10
[  437.300556][   T34]  ret_from_fork_asm+0x1a/0x30
[  437.300573][   T34]  </TASK>
[  437.300576][   T34] Sending NMI from CPU 1 to CPUs 0:
[  437.348709][    C0] NMI backtrace for cpu 0
[  437.348727][    C0] CPU: 0 UID: 0 PID: 17820 Comm: syz.7.5067 Not tainted syzkaller #0 PREEMPT(full) 
[  437.348744][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.348753][    C0] RIP: 0010:perf_tp_event+0x12f/0x1380
[  437.348773][    C0] Code: 89 df e8 c4 c5 33 00 4c 8b 23 4d 85 e4 0f 95 c0 49 83 c4 a0 0f 95 c1 84 c8 75 0a e8 6b 5d d0 ff e9 c9 04 00 00 48 8b 44 24 08 <4c> 8d b0 88 00 00 00 48 8d 84 24 80 00 00 00 4c 8d 68 08 48 83 c0
[  437.348784][    C0] RSP: 0018:ffffc90000006600 EFLAGS: 00000002
[  437.348797][    C0] RAX: ffff88804b032ad0 RBX: ffffe8ff1464dda8 RCX: 0000000000000001
[  437.348807][    C0] RDX: ffff8880200a5640 RSI: 0000000000010102 RDI: ffffe8ff146b94a4
[  437.348817][    C0] RBP: ffffc90000006888 R08: ffffc900000067cf R09: 0000000000000000
[  437.348826][    C0] R10: ffffc900000067c0 R11: fffff52000000cfa R12: ffff8880241b9f40
[  437.348835][    C0] R13: ffffe8ff146b94a0 R14: ffffc90000006680 R15: dffffc0000000000
[  437.348845][    C0] FS:  00007f8286ec66c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  437.348856][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  437.348865][    C0] CR2: 00005555875a65c8 CR3: 0000000040986000 CR4: 00000000000006f0
[  437.348895][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  437.348904][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  437.348916][    C0] Call Trace:
[  437.348922][    C0]  <IRQ>
[  437.348940][    C0]  ? __pfx_perf_tp_event+0x10/0x10
[  437.349037][    C0]  ? tracing_gen_ctx_irq_test+0xc6/0x160
[  437.349055][    C0]  ? perf_swevent_event+0x113/0x5e0
[  437.349080][    C0]  ? __pfx_perf_swevent_event+0x10/0x10
[  437.349091][    C0]  ? perf_tp_event+0x664/0x1380
[  437.349129][    C0]  perf_trace_run_bpf_submit+0xee/0x170
[  437.349155][    C0]  perf_trace_lock+0x2f8/0x3b0
[  437.349182][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  437.349203][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.349221][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.349235][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.349249][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.349265][    C0]  lock_release+0x3b2/0x3e0
[  437.349283][    C0]  ? deref_stack_reg+0x19f/0x230
[  437.349306][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.349319][    C0]  unwind_next_frame+0x19a9/0x2390
[  437.349344][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.349361][    C0]  ? qlist_free_all+0x97/0x140
[  437.349383][    C0]  ? qlist_free_all+0x97/0x140
[  437.349400][    C0]  perf_callchain_kernel+0x469/0x5c0
[  437.349428][    C0]  ? __pfx_perf_callchain_kernel+0x10/0x10
[  437.349454][    C0]  ? kasan_quarantine_reduce+0x148/0x160
[  437.349480][    C0]  ? get_callchain_entry+0x189/0x3c0
[  437.349506][    C0]  get_perf_callchain+0x3f3/0x6b0
[  437.349524][    C0]  ? tracing_gen_ctx_irq_test+0xc6/0x160
[  437.349547][    C0]  ? __pfx_get_perf_callchain+0x10/0x10
[  437.349569][    C0]  ? tracing_gen_ctx_irq_test+0xc6/0x160
[  437.349585][    C0]  ? __perf_event_header__init_id+0x3c5/0x480
[  437.349613][    C0]  perf_prepare_sample+0x475/0x2390
[  437.349644][    C0]  ? perf_event_output_forward+0x8f/0x430
[  437.349664][    C0]  ? __pfx_perf_prepare_sample+0x10/0x10
[  437.349701][    C0]  perf_event_output_forward+0x151/0x430
[  437.349723][    C0]  ? perf_event_output_forward+0x8f/0x430
[  437.349742][    C0]  ? __pfx_perf_event_output_forward+0x10/0x10
[  437.349786][    C0]  ? __perf_event_account_interrupt+0x179/0x250
[  437.349806][    C0]  __perf_event_overflow+0x7cf/0xe10
[  437.349837][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  437.349853][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  437.349889][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  437.349919][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  437.350005][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  437.350028][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  437.350047][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  437.350072][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  437.350092][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  437.350110][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  437.350154][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  437.350163][    C0]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  437.350195][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  437.350242][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  437.350260][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  437.350277][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  437.350290][    C0] RIP: 0010:unwind_next_frame+0x1312/0x2390
[  437.350304][    C0] Code: 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 <49> 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48
[  437.350314][    C0] RSP: 0018:ffffc90000007698 EFLAGS: 00000246
[  437.350325][    C0] RAX: 0000000000000000 RBX: ffffffff901196d8 RCX: dffffc0000000000
[  437.350333][    C0] RDX: ffffffff901196d8 RSI: ffffffff90baac76 RDI: ffffffff8be33220
[  437.350342][    C0] RBP: ffffffff901196d8 R08: 0000000000000001 R09: ffffffff8172c195
[  437.350350][    C0] R10: ffffc900000072c8 R11: ffffffff81ac3930 R12: ffffffff8965f09a
[  437.350359][    C0] R13: ffffffff901196d8 R14: ffffc90000007768 R15: ffffffff901196d8
[  437.350371][    C0]  ? dev_set_mac_address+0x12a/0x260
[  437.350392][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  437.350408][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.350435][    C0]  ? unwind_next_frame+0xd4/0x2390
[  437.350459][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.350476][    C0]  ? dev_set_mac_address+0x12b/0x260
[  437.350501][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  437.350519][    C0]  arch_stack_walk+0x11c/0x150
[  437.350543][    C0]  ? dev_set_mac_address+0x12b/0x260
[  437.350567][    C0]  stack_trace_save+0x9c/0xe0
[  437.350582][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  437.350603][    C0]  ? perf_trace_lock+0x2f8/0x3b0
[  437.350628][    C0]  kasan_save_track+0x3e/0x80
[  437.350643][    C0]  ? kasan_save_track+0x3e/0x80
[  437.350657][    C0]  ? kasan_save_free_info+0x46/0x50
[  437.350669][    C0]  ? __kasan_slab_free+0x5b/0x80
[  437.350682][    C0]  ? kmem_cache_free+0x18f/0x400
[  437.350697][    C0]  ? mac80211_hwsim_beacon_tx+0x3f0/0x860
[  437.350710][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  437.350727][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  437.350746][    C0]  ? mac80211_hwsim_beacon+0xbb/0x1c0
[  437.350762][    C0]  ? __hrtimer_run_queues+0x52c/0xc60
[  437.350773][    C0]  ? hrtimer_run_softirq+0x187/0x2b0
[  437.350785][    C0]  ? handle_softirqs+0x286/0x870
[  437.350797][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  437.350808][    C0]  ? irq_exit_rcu+0x9/0x30
[  437.350818][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  437.350831][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  437.350842][    C0]  ? memset_orig+0x33/0xb0
[  437.350856][    C0]  ? perf_tp_event+0xb7/0x1380
[  437.350866][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  437.350876][    C0]  ? perf_trace_lock+0x2f8/0x3b0
[  437.350887][    C0]  ? lock_release+0x3b2/0x3e0
[  437.350903][    C0]  ? unwind_next_frame+0x19a9/0x2390
[  437.350915][    C0]  ? arch_stack_walk+0x11c/0x150
[  437.350928][    C0]  ? stack_trace_save+0x9c/0xe0
[  437.350940][    C0]  ? save_stack+0xf5/0x1f0
[  437.350954][    C0]  ? __reset_page_owner+0x71/0x1f0
[  437.350998][    C0]  ? __free_frozen_pages+0xbc4/0xd30
[  437.351016][    C0]  ? __slab_free+0x303/0x3c0
[  437.351027][    C0]  ? qlist_free_all+0x97/0x140
[  437.351040][    C0]  ? kasan_quarantine_reduce+0x148/0x160
[  437.351058][    C0]  ? __kasan_slab_alloc+0x22/0x80
[  437.351090][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  437.351106][    C0]  ? __alloc_skb+0x112/0x2d0
[  437.351128][    C0]  ? rtmsg_ifinfo_build_skb+0x84/0x260
[  437.351143][    C0]  ? rtnetlink_event+0x1b7/0x270
[  437.351159][    C0]  ? notifier_call_chain+0x1b6/0x3e0
[  437.351172][    C0]  ? netif_set_mac_address+0x37c/0x4c0
[  437.351183][    C0]  ? dev_set_mac_address+0x12b/0x260
[  437.351243][    C0]  ? mac80211_hwsim_beacon_tx+0x3f0/0x860
[  437.351257][    C0]  kasan_save_free_info+0x46/0x50
[  437.351271][    C0]  __kasan_slab_free+0x5b/0x80
[  437.351289][    C0]  kmem_cache_free+0x18f/0x400
[  437.351317][    C0]  mac80211_hwsim_beacon_tx+0x3f0/0x860
[  437.351333][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  437.351363][    C0]  __iterate_interfaces+0x2ab/0x590
[  437.351385][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  437.351399][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  437.351422][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  437.351435][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  437.351460][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  437.351478][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  437.351493][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  437.351533][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  437.351560][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  437.351580][    C0]  handle_softirqs+0x286/0x870
[  437.351600][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  437.351620][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  437.351640][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  437.351662][    C0]  __irq_exit_rcu+0xca/0x1f0
[  437.351676][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  437.351705][    C0]  irq_exit_rcu+0x9/0x30
[  437.351716][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  437.351733][    C0]  </IRQ>
[  437.351738][    C0]  <TASK>
[  437.351745][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  437.351759][    C0] RIP: 0010:memset_orig+0x33/0xb0
[  437.351774][    C0] Code: 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[  437.351785][    C0] RSP: 0018:ffffc90002abdcf8 EFLAGS: 00000202
[  437.351796][    C0] RAX: 0000000000000000 RBX: ffffe8ff1464dda8 RCX: 0000000000000001
[  437.351804][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffc90002abde00
[  437.351811][    C0] RBP: ffffc90002abdf68 R08: ffffc90002abde7f R09: 0000000000000000
[  437.351819][    C0] R10: ffffc90002abdd80 R11: fffff52000557bd0 R12: 000000000000002c
[  437.351827][    C0] R13: ffffe8ff146b1d38 R14: ffffc90002abdd80 R15: dffffc0000000000
[  437.351863][    C0]  perf_tp_event+0xb7/0x1380
[  437.351887][    C0]  ? __pfx_perf_tp_event+0x10/0x10
[  437.351938][    C0]  ? __pfx_perf_swevent_event+0x10/0x10
[  437.351958][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  437.352013][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  437.352039][    C0]  perf_trace_run_bpf_submit+0xee/0x170
[  437.352063][    C0]  perf_trace_lock+0x2f8/0x3b0
[  437.352087][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  437.352113][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.352136][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.352151][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.352167][    C0]  lock_release+0x3b2/0x3e0
[  437.352184][    C0]  ? unwind_next_frame+0x19ae/0x2390
[  437.352196][    C0]  ? deref_stack_reg+0x19f/0x230
[  437.352217][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.352230][    C0]  unwind_next_frame+0x19a9/0x2390
[  437.352255][    C0]  ? unwind_next_frame+0xa5/0x2390
[  437.352273][    C0]  ? stack_trace_save+0x9c/0xe0
[  437.352293][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  437.352309][    C0]  arch_stack_walk+0x11c/0x150
[  437.352333][    C0]  ? save_stack+0xf5/0x1f0
[  437.352357][    C0]  stack_trace_save+0x9c/0xe0
[  437.352372][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  437.352405][    C0]  save_stack+0xf5/0x1f0
[  437.352422][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  437.352437][    C0]  ? __pfx_save_stack+0x10/0x10
[  437.352451][    C0]  ? lock_acquire+0x175/0x360
[  437.352490][    C0]  ? page_ext_put+0x97/0xc0
[  437.352518][    C0]  __reset_page_owner+0x71/0x1f0
[  437.352540][    C0]  __free_frozen_pages+0xbc4/0xd30
[  437.352576][    C0]  __slab_free+0x303/0x3c0
[  437.352597][    C0]  ? __phys_addr+0xd3/0x180
[  437.352622][    C0]  qlist_free_all+0x97/0x140
[  437.352644][    C0]  kasan_quarantine_reduce+0x148/0x160
[  437.352666][    C0]  __kasan_slab_alloc+0x22/0x80
[  437.352687][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  437.352705][    C0]  ? rtnl_prop_list_size+0x1ba/0x1e0
[  437.352720][    C0]  ? __alloc_skb+0x112/0x2d0
[  437.352747][    C0]  __alloc_skb+0x112/0x2d0
[  437.352775][    C0]  rtmsg_ifinfo_build_skb+0x84/0x260
[  437.352805][    C0]  rtnetlink_event+0x1b7/0x270
[  437.352832][    C0]  notifier_call_chain+0x1b6/0x3e0
[  437.352857][    C0]  netif_set_mac_address+0x37c/0x4c0
[  437.352882][    C0]  ? __pfx_netif_set_mac_address+0x10/0x10
[  437.352905][    C0]  ? netif_close+0x169/0x210
[  437.352923][    C0]  ? __pfx_netif_close+0x10/0x10
[  437.352951][    C0]  dev_set_mac_address+0x12b/0x260
[  437.353007][    C0]  __bond_release_one+0xce8/0x10e0
[  437.353043][    C0]  ? __pfx___bond_release_one+0x10/0x10
[  437.353084][    C0]  ? __pfx___dev_change_flags+0x10/0x10
[  437.353103][    C0]  ? mutex_is_locked+0x17/0x50
[  437.353128][    C0]  do_set_master+0x312/0x6d0
[  437.353154][    C0]  do_setlink+0xcf0/0x41c0
[  437.353192][    C0]  ? __pfx_do_setlink+0x10/0x10
[  437.353228][    C0]  ? __lock_acquire+0xab9/0xd20
[  437.353254][    C0]  ? __mutex_trylock_common+0x153/0x260
[  437.353275][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  437.353299][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  437.353321][    C0]  ? irqentry_enter+0x3d/0x60
[  437.353340][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  437.353377][    C0]  ? irqentry_exit+0x74/0x90
[  437.353394][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.353424][    C0]  ? rtnl_newlink+0x11e9/0x1c70
[  437.353451][    C0]  rtnl_newlink+0x160b/0x1c70
[  437.353489][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  437.353509][    C0]  ? __pfx_perf_tp_event+0x10/0x10
[  437.353570][    C0]  ? perf_swevent_event+0x113/0x5e0
[  437.353591][    C0]  ? irqentry_exit+0x74/0x90
[  437.353604][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.353623][    C0]  ? rcu_read_unlock+0x87/0xa0
[  437.353642][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  437.353662][    C0]  ? perf_trace_lock+0x2f8/0x3b0
[  437.353684][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  437.353707][    C0]  ? rcu_read_unlock+0x87/0xa0
[  437.353743][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  437.353761][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  437.353785][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  437.353802][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  437.353822][    C0]  ? perf_trace_run_bpf_submit+0xee/0x170
[  437.353858][    C0]  netlink_rcv_skb+0x208/0x470
[  437.353879][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  437.353899][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.353937][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  437.353998][    C0]  netlink_unicast+0x82f/0x9e0
[  437.354031][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  437.354051][    C0]  ? netlink_sendmsg+0x642/0xb30
[  437.354067][    C0]  ? skb_put+0x11b/0x210
[  437.354092][    C0]  netlink_sendmsg+0x805/0xb30
[  437.354130][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.354165][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.354186][    C0]  __sock_sendmsg+0x21c/0x270
[  437.354208][    C0]  ____sys_sendmsg+0x505/0x830
[  437.354230][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.354258][    C0]  ? import_iovec+0x74/0xa0
[  437.354281][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  437.354299][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.354348][    C0]  ? __fget_files+0x2a/0x420
[  437.354388][    C0]  ? __fget_files+0x2a/0x420
[  437.354404][    C0]  ? __fget_files+0x3a0/0x420
[  437.354440][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  437.354459][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.354513][    C0]  do_syscall_64+0xfa/0x3b0
[  437.354532][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.354544][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  437.354565][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.354577][    C0] RIP: 0033:0x7f8285f8ebe9
[  437.354591][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.354602][    C0] RSP: 002b:00007f8286ec6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.354615][    C0] RAX: ffffffffffffffda RBX: 00007f82861c5fa0 RCX: 00007f8285f8ebe9
[  437.354624][    C0] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008
[  437.354632][    C0] RBP: 00007f8286011e19 R08: 0000000000000000 R09: 0000000000000000
[  437.354640][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.354646][    C0] R13: 00007f82861c6038 R14: 00007f82861c5fa0 R15: 00007ffd7fc58218
[  437.354678][    C0]  </TASK>
[  437.357169][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  437.357179][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  437.357189][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.357195][   T34] Call Trace:
[  437.357199][   T34]  <TASK>
[  437.357204][   T34]  dump_stack_lvl+0x99/0x250
[  437.357217][   T34]  ? __asan_memcpy+0x40/0x70
[  437.357227][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.357236][   T34]  ? __pfx__printk+0x10/0x10
[  437.357253][   T34]  vpanic+0x281/0x750
[  437.357264][   T34]  ? __pfx_vpanic+0x10/0x10
[  437.357273][   T34]  ? preempt_schedule+0xae/0xc0
[  437.357284][   T34]  ? preempt_schedule_common+0x83/0xd0
[  437.357297][   T34]  panic+0xb9/0xc0
[  437.357306][   T34]  ? __pfx_panic+0x10/0x10
[  437.357315][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  437.357330][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  437.357341][   T34]  watchdog+0xfd2/0xfe0
[  437.357355][   T34]  ? watchdog+0x1de/0xfe0
[  437.357368][   T34]  kthread+0x711/0x8a0
[  437.357379][   T34]  ? __pfx_watchdog+0x10/0x10
[  437.357389][   T34]  ? __pfx_kthread+0x10/0x10
[  437.357400][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.357410][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.357419][   T34]  ? __pfx_kthread+0x10/0x10
[  437.357429][   T34]  ret_from_fork+0x3fc/0x770
[  437.357439][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  437.357450][   T34]  ? __switch_to_asm+0x39/0x70
[  437.357459][   T34]  ? __switch_to_asm+0x33/0x70
[  437.357467][   T34]  ? __pfx_kthread+0x10/0x10
[  437.357477][   T34]  ret_from_fork_asm+0x1a/0x30
[  437.357495][   T34]  </TASK>
[  437.961114][   T34] Kernel Offset: disabled
[  437.962481][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:42:05  Registers:
info registers vcpu 0

CPU#0
RAX=00000000ffffff05 RBX=0000000000000002 RCX=00000000ffffffff RDX=0000000000000002
RSI=0000000000000000 RDI=ffff8880200a5640 RBP=0000000000000000 RSP=ffffc90002abf970
R8 =0000000000000000 R9 =ffffffff8190ced7 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffffffffffffff05 R13=0000000000000002 R14=ffff8880200a6130 R15=0000000000000000
RIP=ffffffff819d6552 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8286ec66c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8286ec5fc8 CR3=0000000040986000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8286197498 00007f8286197470 XMM03=00007f82861974a8 00007f82861974a0
XMM04=00007f8286cfd100 00007f8286197460 XMM05=00007f8286197478 00007f82861974c0
XMM06=00007f82861974b8 00007f82861974b0 XMM07=00007f82861974a8 00007f82861974a0
XMM08=0000000000000000 00007f8286012ee7 XMM09=0000000000000000 00007f8286012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff90333d01 RCX=9c75e578b3fc7500 RDX=ffffc9000299f901
RSI=ffffffff8be33260 RDI=ffffffff8be33220 RBP=dffffc0000000000 RSP=ffffc9000299f7d0
R8 =ffffc9000299f978 R9 =0000000000000000 R10=ffffc9000299f9d8 R11=fffff52000533f3d
R12=ffffc9000299f988 R13=ffffffff8172c195 R14=ffffffff8e139ea0 R15=ffffffff8172c195
RIP=ffffffff81a65e35 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f517fa98ba8 CR3=0000000040984000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
