last executing test programs:

5m18.645177129s ago: executing program 32 (id=177):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300001007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x9}, 0x28)

4m28.762217354s ago: executing program 33 (id=696):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m57.692921348s ago: executing program 34 (id=1273):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400030000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m36.78424319s ago: executing program 4 (id=1576):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x30, 0x30, 0x2e, 0x2e, 0x61, 0x61, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x8}, 0x28)

3m36.663568148s ago: executing program 4 (id=1579):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50)

3m36.663379429s ago: executing program 4 (id=1580):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd00fe05e8fe55a1bc0005000000000000000e41b0940900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0)

3m36.605660986s ago: executing program 4 (id=1581):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100))
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x24005001)

3m35.71450798s ago: executing program 4 (id=1592):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000190081054e81f782db0000070a000a000900142603600e1208001e0000050401a8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d302fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500d1d6e3ebd063a851270e98bebfeb789d005f5f188976000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43", 0xd8}], 0x1}, 0x0)

3m35.645456622s ago: executing program 4 (id=1594):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040)

3m23.094730627s ago: executing program 35 (id=1798):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000fe"], 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0xffffff00}}, 0x10, 0x0}, 0x4040005)

3m20.631249034s ago: executing program 36 (id=1594):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040)

3m11.955391594s ago: executing program 1 (id=1991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffb8, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fbdbdf250200000008000180de", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4004014)

3m11.872383571s ago: executing program 1 (id=1993):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)

3m11.812490822s ago: executing program 1 (id=1996):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800)

3m11.807105562s ago: executing program 1 (id=2000):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0xb, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1e078, 0xf067, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x1, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES16], 0x0, 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008040)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @nested={0x10, 0xcd, 0x0, 0x1, [@typed={0xb, 0x1, 0x0, 0x0, @str='@*{,-)\x00'}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

3m11.804800487s ago: executing program 7 (id=2001):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000021", 0x5}], 0x1}, 0xc010)

3m11.653391496s ago: executing program 7 (id=2002):
r0 = socket$key(0xf, 0x3, 0x2)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x42)

3m11.6410846s ago: executing program 6 (id=2006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0xfffffffffffffe56, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0)

3m11.564156422s ago: executing program 7 (id=2007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

3m11.563864259s ago: executing program 6 (id=2008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xb6, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0xffffffffffffffff}}, @TCA_GACT_PROB={0x7, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x16fc, 0x1}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x174}}, 0x0)

3m11.563677758s ago: executing program 7 (id=2009):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m11.505148284s ago: executing program 6 (id=2010):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40)

3m11.504919879s ago: executing program 7 (id=2011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000d0a01"], 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

3m11.504173426s ago: executing program 1 (id=2012):
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044004}, 0x800)

3m11.455466962s ago: executing program 7 (id=2013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x61, 0x0, 0xa4d4)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0xa109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(r0)

3m11.455008562s ago: executing program 6 (id=2014):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x31, 0x0, &(0x7f0000000080)="f8ad48cc8b007000b66f5a3608005b9900", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8d)

3m11.454568903s ago: executing program 1 (id=2015):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r0, 0x0, 0x4000010)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
socket$inet(0x2, 0x800, 0x480)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xfff5)

3m11.363422343s ago: executing program 6 (id=2016):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000760000000000000027040000980000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)

3m11.362656s ago: executing program 6 (id=2017):
r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x1c, 0x38, 0x107, 0x70bd2c, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="6df742"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x8}, 0x13e4a, 0x7, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20048080)
setsockopt$sock_attach_bpf(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
r3 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x40, 0x0, 0x13, 0x0, 0x5, 0x80842, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffff9a, 0x1, @perf_bp={&(0x7f0000000100)}, 0x8004, 0x3, 0x1, 0x4, 0xfffffffffffffff4, 0x6, 0xfffc, 0x0, 0xe3d8, 0x0, 0xfa7}, 0xffffffffffffffff, 0x2, r0, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x4a081a, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in=@empty, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x6}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x23, 0x9}]}, 0x10c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x900}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40)

2m55.157059029s ago: executing program 37 (id=2013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x61, 0x0, 0xa4d4)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0xa109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(r0)

2m54.331392714s ago: executing program 38 (id=2015):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda9354244"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r0, 0x0, 0x4000010)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
socket$inet(0x2, 0x800, 0x480)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xfff5)

2m51.214684299s ago: executing program 39 (id=2017):
r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x1c, 0x38, 0x107, 0x70bd2c, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="6df742"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x8}, 0x13e4a, 0x7, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20048080)
setsockopt$sock_attach_bpf(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
r3 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x40, 0x0, 0x13, 0x0, 0x5, 0x80842, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffff9a, 0x1, @perf_bp={&(0x7f0000000100)}, 0x8004, 0x3, 0x1, 0x4, 0xfffffffffffffff4, 0x6, 0xfffc, 0x0, 0xe3d8, 0x0, 0xfa7}, 0xffffffffffffffff, 0x2, r0, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x4a081a, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in=@empty, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x6}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x23, 0x9}]}, 0x10c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x900}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40)

2m34.555407581s ago: executing program 9 (id=2047):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)

2m34.4915303s ago: executing program 9 (id=2048):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000240)=@can={0x1d, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000600)="f83ffa67033baa339ca6c3716737", 0xe}, {0x0}], 0x2}, 0x40000)

2m34.414742102s ago: executing program 9 (id=2049):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_subtree(r0, 0x0, 0x12)

2m34.295125132s ago: executing program 9 (id=2050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040094}, 0xc000)

2m34.193853806s ago: executing program 9 (id=2051):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe6f4}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94)

2m34.134749487s ago: executing program 9 (id=2052):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000007"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040)

2m25.904407567s ago: executing program 8 (id=2164):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x3, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004804}, 0x20000000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpid()
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x40040)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4)

2m24.964417539s ago: executing program 8 (id=2167):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfffd}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000f0601020000000000000000050000030500010007"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10)

2m24.8549506s ago: executing program 8 (id=2171):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @fallback=0x37}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x4108}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080))

2m24.761775854s ago: executing program 8 (id=2173):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)

2m24.760467552s ago: executing program 8 (id=2174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe76}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0)

2m24.582952168s ago: executing program 8 (id=2179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x20004040)

2m24.438520845s ago: executing program 40 (id=2179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x20004040)

2m19.149728021s ago: executing program 41 (id=2052):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000007"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040)

1m42.701682893s ago: executing program 3 (id=2757):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1410, 0x1, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20004090)

1m42.634205186s ago: executing program 3 (id=2758):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x33, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

1m42.633877716s ago: executing program 3 (id=2759):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xb79, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m42.58236041s ago: executing program 3 (id=2760):
mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

1m42.521885982s ago: executing program 3 (id=2762):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0xe4880)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e58200339644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)

1m42.442498459s ago: executing program 3 (id=2763):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], &(0x7f0000000700), 0x0, 0x1}}, 0x40)

1m42.352865907s ago: executing program 42 (id=2763):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], &(0x7f0000000700), 0x0, 0x1}}, 0x40)

9.801934552s ago: executing program 0 (id=4007):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x5, 0x7fff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r9, 0x0, 0x800)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="48816a", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x42)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, 0x0, 0x8010)
openat$tun(0xffffffffffffff9c, 0x0, 0x280000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.427717403s ago: executing program 0 (id=4013):
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, 0x0)

9.365102569s ago: executing program 0 (id=4017):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

8.952327491s ago: executing program 0 (id=4018):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
socket$kcm(0x15, 0x5, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x14, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010)

8.430936223s ago: executing program 0 (id=4024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f0000000900)={'veth1_to_bond\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)

8.212941641s ago: executing program 0 (id=4027):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x8d}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}}, 0x0)

608.727004ms ago: executing program 2 (id=4116):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

607.63816ms ago: executing program 2 (id=4118):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25ff02000000000000dc8b850f238466cc00007a000000ad6e911b518184", 0x25}, {&(0x7f0000000080)="53b12d", 0x3}], 0x2}, 0x0)

532.799554ms ago: executing program 2 (id=4119):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000c8e4ad1dcce90dbb3c1e73ad7c33ae55000a2c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b4000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001940)={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x2, 0x0)

441.528659ms ago: executing program 5 (id=4122):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4a, 0x0, 0x0)

371.933007ms ago: executing program 5 (id=4123):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000008500000036000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

312.980001ms ago: executing program 5 (id=4124):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000040000000000000001000003"], 0x0, 0x58, 0x0, 0xa}, 0x28)

312.629853ms ago: executing program 2 (id=4125):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000340)=@can={0x1d, r2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="6ec7213690337aab88585c5b8baf46ae", 0x10}], 0x1}, 0x11)

312.42712ms ago: executing program 5 (id=4126):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x804, 0x489, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0xa0, 0x5a, 0x8, 0x2, 0x2, 0x2c9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000043000100000000000000001000000000140001"], 0x28}}, 0x40)

239.979489ms ago: executing program 2 (id=4127):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

239.68496ms ago: executing program 5 (id=4128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004500090000000000000000000300000008000200", @ANYRES8=r0], 0x1c}}, 0x0)

456.047µs ago: executing program 5 (id=4129):
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

0s ago: executing program 2 (id=4130):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000000401082abd7000fddbdf2502000000952988b503005a94de8e233e587beb01ce920289ea9b98c97f5c620a201ef633cab6b34a73b83ee0a77af9b1932637882e79f6824a512093e0ce51cab788d2b89b492729ce8dc5ff10cde12faa237372a68e6e7604d00d9cfbcf0124db7d8981000000000000bf8bf9dba7ea2174e7acc96176675ba8c263e020ed000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000b06010800000000000000000600000205000100070000002c0007801800018014800240fe8000000007000000000000000000bb060004404e21000005000700880000000900020073797a31000000976a7b4ef7419b7f842a3bfd08d254c83d744a43c9bbd00bd0c1ebeb"], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/15, 0xfb, 0xf, 0x0, 0x8}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xbb, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000480), 0x0, 0x0, 0xe0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x0, 0x0, 0x0, 0x9c51, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

634013][ T9567] netlink: zone id is out of range
[  178.664735][ T9567] netlink: zone id is out of range
[  178.670585][ T9567] netlink: get zone limit has 4 unknown bytes
[  178.679937][ T9567] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1448'.
[  179.599835][ T9597] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  180.528016][ T9624] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.531271][ T9624] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.634111][ T9628] netlink: 'syz.4.1473': attribute type 6 has an invalid length.
[  180.641006][ T9628] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.1473'.
[  180.649909][ T9628] netlink: 'syz.4.1473': attribute type 1 has an invalid length.
[  181.049825][ T9628] nbd0: detected capacity change from 0 to 339754496
[  181.079163][   T57] block nbd0: Receive control failed (result -104)
[  181.401484][ T9640] netlink: 'syz.5.1476': attribute type 10 has an invalid length.
[  181.467599][ T9640] team0: Device vxcan1 is of different type
[  181.912020][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'.
[  181.959406][ T9671] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1491'.
[  182.023173][ T9675] netlink: 'syz.5.1493': attribute type 29 has an invalid length.
[  182.032281][ T9675] netlink: 'syz.5.1493': attribute type 29 has an invalid length.
[  182.156632][ T5836] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  182.758802][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1514'.
[  183.367953][ T9744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1521'.
[  183.757457][ T9764] nbd: must specify at least one socket
[  184.977363][ T9818] netlink: 'syz.1.1550': attribute type 2 has an invalid length.
[  184.979891][ T9818] netlink: 'syz.1.1550': attribute type 8 has an invalid length.
[  184.982791][ T9818] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1550'.
[  185.210025][ T9831] netlink: 'syz.1.1557': attribute type 1 has an invalid length.
[  185.223000][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1556'.
[  185.225835][ T9833] netlink: 'syz.5.1556': attribute type 1 has an invalid length.
[  185.248092][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1556'.
[  185.591301][ T9846] netlink: 'syz.5.1563': attribute type 21 has an invalid length.
[  186.359331][ T9895] netlink: 'syz.4.1580': attribute type 5 has an invalid length.
[  187.327316][ T9936] netlink: 'syz.4.1592': attribute type 4 has an invalid length.
[  187.329778][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1592'.
[  187.844976][ T9950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1597'.
[  187.853748][ T9950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1597'.
[  187.991093][ T9955] netlink: 'syz.1.1599': attribute type 10 has an invalid length.
[  187.995606][ T9955] team0: Device vxcan1 is of different type
[  188.125380][ T9962] sctp: [Deprecated]: syz.1.1600 (pid 9962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  188.125380][ T9962] Use struct sctp_sack_info instead
[  189.158587][ T9990] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1615'.
[  189.293317][T10000] sctp: [Deprecated]: syz.5.1620 (pid 10000) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.293317][T10000] Use struct sctp_sack_info instead
[  189.365211][T10003] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1618'.
[  189.376407][T10003] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  189.428727][T10007] netlink: 'syz.5.1623': attribute type 21 has an invalid length.
[  189.432081][T10007] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1623'.
[  189.664372][T10016] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1627'.
[  189.670163][T10016] veth0_to_bond: invalid flags given to default FDB implementation
[  189.956904][T10025] netlink: 'syz.5.1631': attribute type 10 has an invalid length.
[  189.960446][T10025] batadv0: entered promiscuous mode
[  189.962830][T10025] batadv0: entered allmulticast mode
[  189.965852][T10025] bridge0: port 3(batadv0) entered blocking state
[  189.970140][T10025] bridge0: port 3(batadv0) entered disabled state
[  189.975883][T10025] bridge0: port 3(batadv0) entered blocking state
[  189.978793][T10025] bridge0: port 3(batadv0) entered forwarding state
[  190.276805][ T5846] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  190.279863][ T5846] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  190.855965][T10059] netlink: 'syz.1.1646': attribute type 1 has an invalid length.
[  190.862733][T10059] __nla_validate_parse: 1 callbacks suppressed
[  190.862792][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'.
[  190.869733][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'.
[  191.332243][T10069] netlink: 'syz.5.1650': attribute type 21 has an invalid length.
[  191.334981][T10069] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1650'.
[  191.514726][T10082] netlink: 127 bytes leftover after parsing attributes in process `syz.5.1656'.
[  191.741126][T10098] virt_wifi0 speed is unknown, defaulting to 1000
[  191.743564][T10098] virt_wifi0 speed is unknown, defaulting to 1000
[  191.747988][T10098] virt_wifi0 speed is unknown, defaulting to 1000
[  191.752712][T10098] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  191.764032][T10098] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  191.784364][T10098] virt_wifi0 speed is unknown, defaulting to 1000
[  191.787764][T10098] virt_wifi0 speed is unknown, defaulting to 1000
[  191.791661][T10098] virt_wifi0 speed is unknown, defaulting to 1000
[  191.794507][T10098] virt_wifi0 speed is unknown, defaulting to 1000
[  191.857537][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'.
[  191.948163][T10111] netlink: 'syz.1.1670': attribute type 10 has an invalid length.
[  191.950883][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1670'.
[  191.954214][T10111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.429930][T10119] netlink: 'syz.1.1673': attribute type 1 has an invalid length.
[  192.433191][T10119] netlink: 'syz.1.1673': attribute type 2 has an invalid length.
[  192.468756][T10121] netlink: 'syz.1.1674': attribute type 9 has an invalid length.
[  192.472670][T10121] netlink: 'syz.1.1674': attribute type 11 has an invalid length.
[  192.476068][T10121] netlink: 'syz.1.1674': attribute type 12 has an invalid length.
[  192.479373][T10121] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1674'.
[  192.483244][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'.
[  192.624761][T10126] netlink: 'syz.1.1676': attribute type 6 has an invalid length.
[  192.628170][T10126] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1676'.
[  193.865910][T10148] netlink: 400 bytes leftover after parsing attributes in process `syz.5.1684'.
[  194.934102][T10192] netlink: 'syz.5.1705': attribute type 1 has an invalid length.
[  195.178452][T10202] netlink: 'syz.1.1710': attribute type 1 has an invalid length.
[  196.118598][T10224] __nla_validate_parse: 1 callbacks suppressed
[  196.118609][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1719'.
[  196.549124][T10244] netlink: 'syz.1.1729': attribute type 21 has an invalid length.
[  196.551873][T10244] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1729'.
[  197.220138][T10286] netlink: 'syz.5.1748': attribute type 29 has an invalid length.
[  197.224055][T10286] netlink: 'syz.5.1748': attribute type 29 has an invalid length.
[  197.638488][ T5836] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  197.848358][T10335] netlink: 'syz.1.1772': attribute type 3 has an invalid length.
[  197.853732][T10335] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1772'.
[  197.884866][T10339] netlink: 'syz.1.1774': attribute type 1 has an invalid length.
[  197.923151][T10343] syzkaller0: entered promiscuous mode
[  197.925361][T10343] syzkaller0: entered allmulticast mode
[  197.993551][T10347] netlink: 'syz.1.1778': attribute type 10 has an invalid length.
[  198.036120][T10347] team0: Device vxcan1 is of different type
[  198.292639][T10361] netlink: 'syz.1.1783': attribute type 13 has an invalid length.
[  199.522309][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'.
[  199.821953][ T5846] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.849837][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  199.852420][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  199.865608][ T5846] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.938696][ T5846] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.021757][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  200.025775][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  200.030242][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  200.031187][ T5846] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.049326][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  200.054104][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  200.090687][T10396] : entered promiscuous mode
[  200.108536][T10393] virt_wifi0 speed is unknown, defaulting to 1000
[  200.237694][ T5846] bridge0: port 3(batadv0) entered disabled state
[  200.244887][ T5846] bridge_slave_1: left allmulticast mode
[  200.253091][ T5846] bridge_slave_1: left promiscuous mode
[  200.255887][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.263039][ T5846] bridge_slave_0: left allmulticast mode
[  200.265682][ T5846] bridge_slave_0: left promiscuous mode
[  200.268708][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.453966][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.460062][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.464146][ T5846] bond0 (unregistering): Released all slaves
[  200.570391][T10393] chnl_net:caif_netlink_parms(): no params data found
[  200.737901][T10393] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.744206][T10393] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.749040][T10393] bridge_slave_0: entered allmulticast mode
[  200.752535][T10393] bridge_slave_0: entered promiscuous mode
[  200.769902][T10393] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.773066][T10393] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.782246][T10393] bridge_slave_1: entered allmulticast mode
[  200.787026][T10393] bridge_slave_1: entered promiscuous mode
[  200.838970][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.853943][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.886811][T10393] team0: Port device team_slave_0 added
[  200.947013][T10393] team0: Port device team_slave_1 added
[  201.093815][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.098989][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.111706][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.119347][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.121872][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.133509][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.406915][T10393] hsr_slave_0: entered promiscuous mode
[  201.410447][T10393] hsr_slave_1: entered promiscuous mode
[  201.413168][T10393] debugfs: 'hsr0' already exists in 'hsr'
[  201.415387][T10393] Cannot create hsr debugfs directory
[  201.430275][ T5846] hsr_slave_0: left promiscuous mode
[  201.432752][ T5846] hsr_slave_1: left promiscuous mode
[  201.435729][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.439616][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.442473][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.445029][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.453040][ T5846] veth1_macvtap: left promiscuous mode
[  201.455024][ T5846] veth0_macvtap: left promiscuous mode
[  201.580918][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  201.592784][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  201.760200][T10434] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1810'.
[  201.852670][T10393] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  201.877611][T10393] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  201.893310][T10393] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  201.901361][T10393] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  202.043913][T10393] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.061832][T10393] 8021q: adding VLAN 0 to HW filter on device team0
[  202.086382][ T5842] Bluetooth: hci0: command tx timeout
[  202.131327][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.133902][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.168293][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.170696][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.352039][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.378480][T10474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.505017][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.512090][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.515477][T10393] veth0_vlan: entered promiscuous mode
[  202.518961][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.522939][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.524929][T10393] veth1_vlan: entered promiscuous mode
[  202.528886][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  202.573489][T10393] veth0_macvtap: entered promiscuous mode
[  202.581100][T10393] veth1_macvtap: entered promiscuous mode
[  202.608551][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.621586][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.647086][ T5846] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.654472][ T5846] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.659097][ T5846] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.662610][T10494] netlink: 'syz.1.1822': attribute type 6 has an invalid length.
[  202.668918][T10494] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1822'.
[  202.677142][ T5846] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.759998][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.762425][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.775482][T10487] chnl_net:caif_netlink_parms(): no params data found
[  202.809656][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.812712][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.884921][T10487] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.891623][T10487] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.896903][T10487] bridge_slave_0: entered allmulticast mode
[  202.899881][T10487] bridge_slave_0: entered promiscuous mode
[  202.916673][T10487] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.919716][T10487] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.922430][T10487] bridge_slave_1: entered allmulticast mode
[  202.935347][T10487] bridge_slave_1: entered promiscuous mode
[  202.977008][T10487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.983393][T10487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.992728][T10513] netlink: 'syz.1.1827': attribute type 2 has an invalid length.
[  203.010731][T10513] @;: entered promiscuous mode
[  203.016086][T10487] team0: Port device team_slave_0 added
[  203.022154][T10487] team0: Port device team_slave_1 added
[  203.062335][T10487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.064512][T10487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  203.080119][T10487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.085708][T10487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.088443][T10487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  203.099526][T10487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.135001][T10487] hsr_slave_0: entered promiscuous mode
[  203.138168][T10487] hsr_slave_1: entered promiscuous mode
[  203.141034][T10487] debugfs: 'hsr0' already exists in 'hsr'
[  203.143004][T10487] Cannot create hsr debugfs directory
[  203.358628][T10487] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  203.375796][T10487] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  203.390358][T10487] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  203.395004][T10487] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  203.463933][T10487] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.466415][T10487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.469410][T10487] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.472161][T10487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.586084][T10487] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.601170][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.605707][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.635045][T10487] 8021q: adding VLAN 0 to HW filter on device team0
[  203.653942][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.656336][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.663986][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.667456][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.684387][T10535] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1834'.
[  203.694144][T10535] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1834'.
[  203.970399][T10543] netlink: 'syz.6.1836': attribute type 10 has an invalid length.
[  203.988954][T10543] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.992196][T10543] bridge_slave_1: left allmulticast mode
[  203.994151][T10543] bridge_slave_1: left promiscuous mode
[  203.999045][T10543] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.017823][T10543] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  204.034526][T10487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.157856][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1838'.
[  204.184581][ T5836] Bluetooth: hci0: command tx timeout
[  204.215635][T10487] veth0_vlan: entered promiscuous mode
[  204.224037][T10487] veth1_vlan: entered promiscuous mode
[  204.228492][T10558] openvswitch: netlink: Message has 1 unknown bytes.
[  204.230643][T10558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.237746][T10555] delete_channel: no stack
[  204.268305][T10487] veth0_macvtap: entered promiscuous mode
[  204.285026][T10487] veth1_macvtap: entered promiscuous mode
[  204.300364][T10487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.312366][T10487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.325764][ T5846] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.339514][ T5846] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.342562][ T5846] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.354049][ T5846] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.397178][ T5836] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7
[  204.412652][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.425472][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.478771][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.482112][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.534384][T10570] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.1818'.
[  204.538637][T10570] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  204.566832][ T5836] Bluetooth: hci2: command tx timeout
[  204.666556][T10580] netlink: 'syz.7.1850': attribute type 2 has an invalid length.
[  204.669016][T10580] netlink: 'syz.7.1850': attribute type 3 has an invalid length.
[  204.673535][T10580] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1850'.
[  204.815987][T10587] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1852'.
[  205.122918][T10607] netlink: 'syz.6.1861': attribute type 29 has an invalid length.
[  205.138749][T10607] netlink: 'syz.6.1861': attribute type 29 has an invalid length.
[  205.148301][T10607] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1861'.
[  205.449954][T10623] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  205.536111][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1872'.
[  206.503140][ T5836] Bluetooth: hci0: command tx timeout
[  206.646421][ T5836] Bluetooth: hci2: command tx timeout
[  206.649843][T10647] netlink: 'syz.7.1880': attribute type 10 has an invalid length.
[  206.667631][T10647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.674330][T10647] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  206.683833][T10651] : renamed from dummy0 (while UP)
[  206.882647][T10665] netlink: 'syz.6.1889': attribute type 2 has an invalid length.
[  206.916569][T10665] netlink: 'syz.6.1889': attribute type 2 has an invalid length.
[  207.058663][T10676] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1892'.
[  207.344285][T10678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.953432][T10712] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  208.205267][T10732] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1918'.
[  208.405331][T10750] netlink: 63 bytes leftover after parsing attributes in process `syz.1.1926'.
[  208.514946][T10758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.566823][ T5836] Bluetooth: hci0: command tx timeout
[  208.736669][ T5836] Bluetooth: hci2: command tx timeout
[  208.861652][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1939'.
[  208.971090][T10787] validate_nla: 1 callbacks suppressed
[  208.971101][T10787] netlink: 'syz.7.1943': attribute type 4 has an invalid length.
[  209.579991][T10820] IPv6: NLM_F_CREATE should be specified when creating new route
[  210.570624][T10880] netlink: 'syz.7.1977': attribute type 10 has an invalid length.
[  210.607717][T10880] team0: Device ipvlan1 failed to register rx_handler
[  210.686847][T10880] syz.7.1977 (10880) used greatest stack depth: 18840 bytes left
[  210.706088][T10890] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.1978'.
[  210.819294][ T5836] Bluetooth: hci2: command tx timeout
[  210.903584][T10907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1983'.
[  211.055744][T10921] openvswitch: netlink: Actions may not be safe on all matching packets
[  211.132303][T10930] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1995'.
[  211.135468][T10930] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1995'.
[  211.142305][T10930] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1995'.
[  211.318439][T10948] netlink: zone id is out of range
[  211.321147][T10948] netlink: zone id is out of range
[  211.323956][T10948] netlink: zone id is out of range
[  211.326092][T10948] netlink: zone id is out of range
[  211.382997][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2006'.
[  211.393051][  T433] block nbd0: Possible stuck request ffff88810a920000: control (read@0,4096B). Runtime 30 seconds
[  215.361165][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.587987][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  227.592722][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  227.607080][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  227.611844][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  227.615345][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  227.656992][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  227.661986][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  227.673114][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  227.679518][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  227.683020][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  227.702247][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  227.705634][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  227.709154][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  227.712224][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  227.715152][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  229.686460][ T5842] Bluetooth: hci4: command tx timeout
[  229.766526][ T5836] Bluetooth: hci5: command tx timeout
[  229.769422][ T5842] Bluetooth: hci6: command tx timeout
[  231.766486][ T5842] Bluetooth: hci4: command tx timeout
[  231.847269][ T5836] Bluetooth: hci5: command tx timeout
[  231.849723][ T5842] Bluetooth: hci6: command tx timeout
[  232.437894][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.846803][ T5842] Bluetooth: hci4: command tx timeout
[  233.926596][ T5842] Bluetooth: hci6: command tx timeout
[  233.929210][ T5842] Bluetooth: hci5: command tx timeout
[  235.926451][ T5836] Bluetooth: hci4: command tx timeout
[  236.012485][ T5836] Bluetooth: hci5: command tx timeout
[  236.014808][ T5836] Bluetooth: hci6: command tx timeout
[  238.896756][T10979] syzkaller0: entered promiscuous mode
[  238.898603][T10979] syzkaller0: entered allmulticast mode
[  240.360029][ T5862] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.472344][ T5862] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.579949][ T5862] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.657486][ T5862] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.690817][T10987] chnl_net:caif_netlink_parms(): no params data found
[  240.695997][T10989] chnl_net:caif_netlink_parms(): no params data found
[  240.725029][T10991] chnl_net:caif_netlink_parms(): no params data found
[  240.910089][T10989] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.913085][T10989] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.916059][T10989] bridge_slave_0: entered allmulticast mode
[  240.920058][T10989] bridge_slave_0: entered promiscuous mode
[  240.922810][ T5862] bridge_slave_0: left allmulticast mode
[  240.924668][ T5862] bridge_slave_0: left promiscuous mode
[  240.928528][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.072601][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.078516][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.082936][ T5862] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  241.087485][ T5862] bond0 (unregistering): Released all slaves
[  241.091846][T10991] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.094317][T10991] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.097200][T10991] bridge_slave_0: entered allmulticast mode
[  241.100052][T10991] bridge_slave_0: entered promiscuous mode
[  241.102804][T10987] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.105313][T10987] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.110938][T10987] bridge_slave_0: entered allmulticast mode
[  241.113603][T10987] bridge_slave_0: entered promiscuous mode
[  241.117817][T10989] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.121175][T10989] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.124753][T10989] bridge_slave_1: entered allmulticast mode
[  241.128793][T10989] bridge_slave_1: entered promiscuous mode
[  241.147903][T10991] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.151096][T10991] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.154236][T10991] bridge_slave_1: entered allmulticast mode
[  241.160696][T10991] bridge_slave_1: entered promiscuous mode
[  241.164704][T10987] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.170342][T10987] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.173462][T10987] bridge_slave_1: entered allmulticast mode
[  241.177690][T10987] bridge_slave_1: entered promiscuous mode
[  241.269871][T10989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.301385][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.319171][T10989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.325024][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.341347][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.389874][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.435381][T10989] team0: Port device team_slave_0 added
[  241.446777][  T433] block nbd0: Possible stuck request ffff88810a920000: control (read@0,4096B). Runtime 60 seconds
[  241.453132][T10987] team0: Port device team_slave_0 added
[  241.464931][T10989] team0: Port device team_slave_1 added
[  241.468925][T10987] team0: Port device team_slave_1 added
[  241.474475][T10991] team0: Port device team_slave_0 added
[  241.482609][ T5862] hsr_slave_0: left promiscuous mode
[  241.485896][ T5862] hsr_slave_1: left promiscuous mode
[  241.492305][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.495414][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.499585][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.502671][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.511058][ T5862] veth1_macvtap: left promiscuous mode
[  241.513439][ T5862] veth0_macvtap: left promiscuous mode
[  241.515962][ T5862] veth1_vlan: left promiscuous mode
[  241.519809][ T5862] veth0_vlan: left promiscuous mode
[  241.672798][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  241.684461][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  241.837619][T10991] team0: Port device team_slave_1 added
[  241.889378][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.891806][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.901766][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.906864][T10989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.909067][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.918365][T10989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.940838][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.943280][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.951608][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.962305][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.964558][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.973900][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.986143][T10989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.990246][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.002177][T10989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.016508][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.018831][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.031244][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.119532][T10987] hsr_slave_0: entered promiscuous mode
[  242.122769][T10987] hsr_slave_1: entered promiscuous mode
[  242.125769][T10987] debugfs: 'hsr0' already exists in 'hsr'
[  242.128091][T10987] Cannot create hsr debugfs directory
[  242.146214][T10991] hsr_slave_0: entered promiscuous mode
[  242.149442][T10991] hsr_slave_1: entered promiscuous mode
[  242.151582][T10991] debugfs: 'hsr0' already exists in 'hsr'
[  242.153467][T10991] Cannot create hsr debugfs directory
[  242.166698][T10989] hsr_slave_0: entered promiscuous mode
[  242.169568][T10989] hsr_slave_1: entered promiscuous mode
[  242.171800][T10989] debugfs: 'hsr0' already exists in 'hsr'
[  242.173610][T10989] Cannot create hsr debugfs directory
[  242.417849][ T5862] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.490118][ T5862] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.516941][T10989] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  242.522940][T10989] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  242.535211][T10989] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  242.541146][T10989] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  242.567881][ T5862] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.637752][ T5862] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.662348][T10987] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  242.706830][T10987] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  242.715945][T10987] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  242.723596][T10987] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  242.798182][T10989] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.830574][ T5862] bridge_slave_1: left allmulticast mode
[  242.832549][ T5862] bridge_slave_1: left promiscuous mode
[  242.834448][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.838660][ T5862] bridge_slave_0: left allmulticast mode
[  242.840496][ T5862] bridge_slave_0: left promiscuous mode
[  242.842514][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.973361][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.978521][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.982704][ T5862] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  242.986657][ T5862] bond0 (unregistering): Released all slaves
[  243.011340][T10989] 8021q: adding VLAN 0 to HW filter on device team0
[  243.039323][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.041718][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.047330][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.049658][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.082860][T10989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  243.087394][T10989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.098275][T10987] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.148276][T10987] 8021q: adding VLAN 0 to HW filter on device team0
[  243.153640][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.155885][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.175752][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.178098][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.209298][T10987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  243.212747][T10987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.280372][T10989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.332006][ T5862] hsr_slave_0: left promiscuous mode
[  243.336993][ T5862] hsr_slave_1: left promiscuous mode
[  243.340441][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.343308][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.350049][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.352369][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.360540][ T5862] veth1_macvtap: left promiscuous mode
[  243.367186][ T5862] veth0_macvtap: left promiscuous mode
[  243.369019][ T5862] veth1_vlan: left promiscuous mode
[  243.370724][ T5862] veth0_vlan: left promiscuous mode
[  243.531012][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  243.558441][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  243.674918][T10987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.762247][T10989] veth0_vlan: entered promiscuous mode
[  243.769195][T10989] veth1_vlan: entered promiscuous mode
[  243.789925][T10989] veth0_macvtap: entered promiscuous mode
[  243.803229][T10989] veth1_macvtap: entered promiscuous mode
[  243.821984][T10989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.829680][T10989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.850086][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.854051][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.874217][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.888790][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.943746][T10987] veth0_vlan: entered promiscuous mode
[  243.954312][T10987] veth1_vlan: entered promiscuous mode
[  243.962427][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.965214][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.003516][T10987] veth0_macvtap: entered promiscuous mode
[  244.011370][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.015080][T10987] veth1_macvtap: entered promiscuous mode
[  244.027502][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.043235][T10987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.056201][T10987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.081109][ T5862] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.085351][ T5862] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.132580][ T5862] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.135643][ T5862] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.217246][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.219659][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.241287][ T6333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.244392][ T6333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.274920][ T5842] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10
[  244.274966][ T5842] Bluetooth: hci5: connection err: -111
[  244.659805][T11160] __nla_validate_parse: 5 callbacks suppressed
[  244.659817][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2029'.
[  245.449756][T11174] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2032'.
[  246.435914][T11183] delete_channel: no stack
[  246.553073][ T5862] bridge_slave_1: left allmulticast mode
[  246.554995][ T5862] bridge_slave_1: left promiscuous mode
[  246.575130][T11191] netlink: 'syz.9.2036': attribute type 21 has an invalid length.
[  246.575291][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.593094][ T5862] bridge_slave_0: left allmulticast mode
[  246.595085][ T5862] bridge_slave_0: left promiscuous mode
[  246.608037][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.915651][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.921893][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.927537][ T5862] bond0 (unregistering): Released all slaves
[  247.141122][T10991] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  247.159888][T10991] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  247.183851][T10991] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  247.219036][T10991] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  247.337380][ T5862] hsr_slave_0: left promiscuous mode
[  247.339897][ T5862] hsr_slave_1: left promiscuous mode
[  247.342592][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.345026][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.365842][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.368398][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.417114][ T5862] veth1_macvtap: left promiscuous mode
[  247.434299][ T5862] veth0_macvtap: left promiscuous mode
[  247.438013][ T5862] veth1_vlan: left promiscuous mode
[  247.449353][ T5862] veth0_vlan: left promiscuous mode
[  247.742408][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  247.759241][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  247.893738][T11215] : renamed from sit0 (while UP)
[  248.075326][T10991] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.104080][T10991] 8021q: adding VLAN 0 to HW filter on device team0
[  248.136955][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.139907][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.143514][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.146024][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.210738][T10991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.214696][T10991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.410973][T10991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.459726][T10991] veth0_vlan: entered promiscuous mode
[  248.466134][T10991] veth1_vlan: entered promiscuous mode
[  248.503327][T10991] veth0_macvtap: entered promiscuous mode
[  248.529394][T10991] veth1_macvtap: entered promiscuous mode
[  248.543252][T10991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.571785][T10991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.585129][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.630551][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.637693][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.641208][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.718080][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.720494][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.769256][ T6333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.772071][ T6333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.248230][T11193] Set syz1 is full, maxelem 65536 reached
[  249.311511][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2057'.
[  249.771980][T11300] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2061'.
[  250.579733][T11346] netlink: 'syz.0.2076': attribute type 21 has an invalid length.
[  251.379901][T11375] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  251.384903][T11375] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  251.427656][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'.
[  251.493176][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'.
[  252.698002][T11407] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.2102'.
[  252.841912][T11414] tap0: tun_chr_ioctl cmd 1074025677
[  252.844151][T11414] tap0: linktype set to 0
[  252.857824][T11414] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2105'.
[  253.408814][T11427] netlink: 'syz.8.2112': attribute type 39 has an invalid length.
[  254.424836][T11444] netlink: 'syz.0.2115': attribute type 6 has an invalid length.
[  254.429152][T11444] netlink: 3936 bytes leftover after parsing attributes in process `syz.0.2115'.
[  254.432289][T11444] netlink: 'syz.0.2115': attribute type 1 has an invalid length.
[  254.536928][T11444] nbd1: detected capacity change from 0 to 339754496
[  254.579296][   T56] block nbd1: Receive control failed (result -104)
[  254.581168][T11450] netlink: 'syz.8.2117': attribute type 21 has an invalid length.
[  254.585611][T11450] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2117'.
[  254.620421][ T5842] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4
[  254.707263][T11458] netlink: 192 bytes leftover after parsing attributes in process `syz.8.2121'.
[  254.944555][T11464] netlink: 'syz.0.2123': attribute type 3 has an invalid length.
[  254.952970][T11464] netlink: 'syz.0.2123': attribute type 3 has an invalid length.
[  254.974612][T11462] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.2123'.
[  255.628457][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2125'.
[  255.734070][T11477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2127'.
[  255.888364][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2132'.
[  256.002860][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  256.259555][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2142'.
[  256.264857][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'.
[  256.272927][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2142'.
[  256.647169][   T55] Bluetooth: hci6: command 0x0406 tx timeout
[  256.787338][T11532] netlink: 'syz.0.2154': attribute type 25 has an invalid length.
[  258.045362][T11557] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2166'.
[  258.099953][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2167'.
[  258.246608][ T5842] Bluetooth: hci3: command 0x0406 tx timeout
[  258.297199][T11578] netlink: 'syz.0.2175': attribute type 29 has an invalid length.
[  258.342922][T11578] netlink: 'syz.0.2175': attribute type 29 has an invalid length.
[  258.347602][T11578] netlink: 'syz.0.2175': attribute type 29 has an invalid length.
[  258.490741][ T5862] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.583364][ T5862] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.629030][T11590] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  258.659106][ T5862] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.684933][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.690144][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.693252][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.697744][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.704790][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  258.743152][ T5862] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.926074][ T5862] bridge_slave_1: left allmulticast mode
[  258.933420][ T5862] bridge_slave_1: left promiscuous mode
[  258.935638][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.947697][ T5862] bridge_slave_0: left allmulticast mode
[  258.949864][ T5862] bridge_slave_0: left promiscuous mode
[  258.952407][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.144230][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.153439][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.157754][ T5862] bond0 (unregistering): Released all slaves
[  259.197491][T11593] chnl_net:caif_netlink_parms(): no params data found
[  259.326045][T11593] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.328825][T11593] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.331864][T11593] bridge_slave_0: entered allmulticast mode
[  259.334605][T11593] bridge_slave_0: entered promiscuous mode
[  259.340999][T11593] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.344356][T11593] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.352692][T11593] bridge_slave_1: entered allmulticast mode
[  259.357918][T11593] bridge_slave_1: entered promiscuous mode
[  259.419141][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.424327][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.464033][T11593] team0: Port device team_slave_0 added
[  259.468073][T11593] team0: Port device team_slave_1 added
[  259.490919][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.493169][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.510742][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.521795][ T5862] hsr_slave_0: left promiscuous mode
[  259.524513][ T5862] hsr_slave_1: left promiscuous mode
[  259.527073][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.529675][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.533465][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.536094][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.548516][ T5862] veth1_macvtap: left promiscuous mode
[  259.550312][ T5862] veth0_macvtap: left promiscuous mode
[  259.552123][ T5862] veth1_vlan: left promiscuous mode
[  259.554161][ T5862] veth0_vlan: left promiscuous mode
[  260.502543][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  260.512428][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  260.610112][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.612307][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.620870][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.691297][T11593] hsr_slave_0: entered promiscuous mode
[  260.694250][T11593] hsr_slave_1: entered promiscuous mode
[  260.727292][ T5842] Bluetooth: hci0: command tx timeout
[  260.960430][T11640] __nla_validate_parse: 2 callbacks suppressed
[  260.960489][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2196'.
[  261.352998][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  261.355059][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  261.514572][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.584407][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.662089][T11687] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2204'.
[  261.677271][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.754712][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.954292][ T5862] bridge_slave_1: left allmulticast mode
[  261.956185][ T5862] bridge_slave_1: left promiscuous mode
[  261.958457][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.962843][ T5862] bridge_slave_0: left allmulticast mode
[  261.964850][ T5862] bridge_slave_0: left promiscuous mode
[  261.969248][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.112142][T11709] validate_nla: 1 callbacks suppressed
[  262.112153][T11709] netlink: 'syz.0.2211': attribute type 6 has an invalid length.
[  262.116889][T11709] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2211'.
[  262.157770][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.163609][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.170196][ T5862] bond0 (unregistering): Released all slaves
[  262.177448][T11710] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2211'.
[  262.198866][T11593] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  262.214485][T11593] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  262.228260][T11593] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  262.234834][ T5862] h[Ac(sj(: left promiscuous mode
[  262.246034][T11593] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  262.271403][ T5862] : left promiscuous mode
[  262.331515][ T5862] @;: left promiscuous mode
[  262.412057][T11593] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.469894][T11593] 8021q: adding VLAN 0 to HW filter on device team0
[  262.477602][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.480519][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.507860][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.510237][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.577867][T11593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.677084][ T5862] hsr_slave_0: left promiscuous mode
[  262.683661][ T5862] hsr_slave_1: left promiscuous mode
[  262.698609][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.701678][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.711704][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.714821][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.740089][ T5862] veth1_macvtap: left promiscuous mode
[  262.742429][ T5862] veth0_macvtap: left promiscuous mode
[  262.744917][ T5862] veth1_vlan: left promiscuous mode
[  262.751133][ T5862] veth0_vlan: left promiscuous mode
[  262.808535][ T5842] Bluetooth: hci0: command tx timeout
[  263.114699][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  263.125724][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  263.345693][T11593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.444224][T11593] veth0_vlan: entered promiscuous mode
[  263.482370][T11593] veth1_vlan: entered promiscuous mode
[  263.575150][T11593] veth0_macvtap: entered promiscuous mode
[  263.590470][T11593] veth1_macvtap: entered promiscuous mode
[  263.622346][T11593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.631914][T11593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.639374][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.673709][T11783] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  263.678601][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.689558][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.697846][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.771824][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.774326][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.801151][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.804018][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.027892][T11806] netlink: 'syz.3.2232': attribute type 1 has an invalid length.
[  264.054526][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  264.062784][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  264.077955][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  264.084108][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  264.088744][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.111343][T11811] netlink: 840 bytes leftover after parsing attributes in process `syz.3.2233'.
[  264.466862][T11824] C: renamed from team_slave_0 (while UP)
[  264.896590][ T5836] Bluetooth: hci0: command tx timeout
[  266.166694][ T5836] Bluetooth: hci1: command tx timeout
[  266.289372][T11824] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2236'.
[  266.414961][T11808] chnl_net:caif_netlink_parms(): no params data found
[  266.442817][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'.
[  266.576915][T11808] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.580635][T11808] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.583930][T11808] bridge_slave_0: entered allmulticast mode
[  266.589312][T11808] bridge_slave_0: entered promiscuous mode
[  266.594299][T11808] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.603537][T11808] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.607424][T11808] bridge_slave_1: entered allmulticast mode
[  266.617539][T11808] bridge_slave_1: entered promiscuous mode
[  266.662935][T11808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.670029][T11808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.734719][T11808] team0: Port device team_slave_0 added
[  266.746469][T11808] team0: Port device team_slave_1 added
[  266.788907][T11808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.791168][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.816517][T11808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.826740][T11808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.834446][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.853575][T11808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.905148][T11808] hsr_slave_0: entered promiscuous mode
[  266.912225][T11808] hsr_slave_1: entered promiscuous mode
[  266.923686][T11808] debugfs: 'hsr0' already exists in 'hsr'
[  266.928238][T11808] Cannot create hsr debugfs directory
[  267.016607][ T5836] Bluetooth: hci0: command tx timeout
[  267.137510][ T5254] udevd[5254]: worker [8074] /devices/virtual/block/nbd0 is taking a long time
[  267.910848][T11808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  267.925423][T11808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  267.957774][T11808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  267.972831][T11808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  268.135989][T11808] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.161583][T11808] 8021q: adding VLAN 0 to HW filter on device team0
[  268.201340][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.204022][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.238730][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.241326][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.247982][ T5836] Bluetooth: hci1: command tx timeout
[  268.262902][ T5836] Bluetooth: hci0: Malformed LE Event: 0x0d
[  268.520278][T11808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.554851][T11808] veth0_vlan: entered promiscuous mode
[  268.564069][T11808] veth1_vlan: entered promiscuous mode
[  268.609743][T11808] veth0_macvtap: entered promiscuous mode
[  268.614356][T11808] veth1_macvtap: entered promiscuous mode
[  268.625164][T11808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.633720][T11808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.643180][T11971] netlink: 'syz.0.2274': attribute type 19 has an invalid length.
[  268.645961][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.654279][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.668465][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.671438][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.763432][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.766213][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.799770][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.802853][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.133940][T12001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2282'.
[  269.144526][T12001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2282'.
[  269.150963][T12001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2282'.
[  269.290819][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'.
[  269.389614][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'.
[  269.471880][T12038] netlink: 'syz.3.2294': attribute type 2 has an invalid length.
[  269.479422][T12038] netlink: 'syz.3.2294': attribute type 5 has an invalid length.
[  269.481775][T12038] netlink: 'syz.3.2294': attribute type 2 has an invalid length.
[  269.484181][T12038] netlink: 'syz.3.2294': attribute type 5 has an invalid length.
[  269.605093][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'.
[  269.794626][T12061] netlink: 'syz.3.2302': attribute type 2 has an invalid length.
[  270.326477][ T5836] Bluetooth: hci1: command tx timeout
[  271.243622][T12128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2316'.
[  271.254836][T12128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2316'.
[  271.558976][  T433] block nbd0: Possible stuck request ffff88810a920000: control (read@0,4096B). Runtime 90 seconds
[  272.406667][ T5836] Bluetooth: hci1: command tx timeout
[  272.443936][T12173] netlink: 'syz.3.2329': attribute type 6 has an invalid length.
[  272.447076][T12173] __nla_validate_parse: 2 callbacks suppressed
[  272.447087][T12173] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2329'.
[  272.495762][T12178] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2328'.
[  272.546897][T12176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2330'.
[  272.748329][T12193] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2337'.
[  272.899701][T12205] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2343'.
[  273.081458][T12219] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  273.108911][T12221] netlink: 'syz.0.2351': attribute type 4 has an invalid length.
[  273.148445][T12224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.170432][T12225] netlink: set zone limit has 4 unknown bytes
[  273.608870][T12262] Dead loop on virtual device ip6_vti0, fix it urgently!
[  273.663545][T12266] netlink: 'syz.3.2374': attribute type 1 has an invalid length.
[  273.680712][T12266] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2374'.
[  273.685411][T12266] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2374'.
[  273.692782][T12266] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2374'.
[  273.924295][T12278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2378'.
[  273.937336][T12278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2378'.
[  274.527760][T12310] netlink: 'syz.2.2392': attribute type 21 has an invalid length.
[  274.560210][T12314] netlink: 'syz.2.2394': attribute type 21 has an invalid length.
[  275.126639][ T5836] Bluetooth: hci1: Opcode 0x206a failed: -110
[  275.129836][ T5842] Bluetooth: hci1: command 0x206a tx timeout
[  277.718427][T12334] netlink: 'syz.0.2401': attribute type 11 has an invalid length.
[  277.799210][T12341] netlink: 'syz.2.2403': attribute type 15 has an invalid length.
[  277.802924][T12341] netlink: 'syz.2.2403': attribute type 7 has an invalid length.
[  277.807067][T12341] __nla_validate_parse: 3 callbacks suppressed
[  277.807123][T12341] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2403'.
[  277.912002][T12340] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2404'.
[  277.951677][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'.
[  278.698715][T12360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2408'.
[  278.921184][T12376] netlink: 'syz.3.2418': attribute type 10 has an invalid length.
[  278.924708][T12376] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2418'.
[  280.652720][T12425] netlink: 'syz.3.2439': attribute type 39 has an invalid length.
[  280.679030][T12428] netlink: 'syz.2.2441': attribute type 10 has an invalid length.
[  280.681769][T12428] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2441'.
[  280.725396][T12428] bond0: entered promiscuous mode
[  280.729693][T12428] bond_slave_0: entered promiscuous mode
[  280.733514][T12428] bond_slave_1: entered promiscuous mode
[  280.743604][T12428] bridge0: port 3(bond0) entered blocking state
[  280.754010][T12428] bridge0: port 3(bond0) entered disabled state
[  280.762476][T12428] bond0: entered allmulticast mode
[  280.764966][T12428] bond_slave_0: entered allmulticast mode
[  280.769949][T12428] bond_slave_1: entered allmulticast mode
[  280.811531][T12428] bridge0: port 3(bond0) entered blocking state
[  280.815565][T12428] bridge0: port 3(bond0) entered forwarding state
[  281.126186][T12436] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2445'.
[  281.309071][T12448] netlink: 'syz.3.2451': attribute type 6 has an invalid length.
[  281.670182][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2460'.
[  281.898806][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2463'.
[  283.244989][T12524] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.2477'.
[  283.290841][T12526] netlink: 'syz.3.2478': attribute type 10 has an invalid length.
[  283.295784][T12526] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2478'.
[  283.824739][T12510] delete_channel: no stack
[  284.064474][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'.
[  284.086126][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'.
[  284.299425][T12585] netlink: 'syz.0.2494': attribute type 29 has an invalid length.
[  284.307373][T12585] netlink: 'syz.0.2494': attribute type 29 has an invalid length.
[  284.311234][T12585] netlink: 'syz.0.2494': attribute type 29 has an invalid length.
[  284.315171][T12585] netlink: 'syz.0.2494': attribute type 29 has an invalid length.
[  284.536474][T12601] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2502'.
[  285.492521][  T433] block nbd1: Possible stuck request ffff88810a950000: control (read@0,4096B). Runtime 30 seconds
[  285.804890][T12639] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2520'.
[  286.339107][T12662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2531'.
[  286.452081][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2536'.
[  286.820589][T12699] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2548'.
[  287.691281][T12723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2560'.
[  287.738597][T12727] netlink: 'syz.3.2562': attribute type 6 has an invalid length.
[  287.961968][T12741] bpf: Bad value for 'gid'
[  288.026690][T12746] nft_compat: unsupported protocol 5
[  288.404435][T12735] nbd: must specify an index to disconnect
[  288.613688][T12783] netlink: 'syz.2.2576': attribute type 21 has an invalid length.
[  288.614818][T12779] syzkaller0: entered promiscuous mode
[  288.618969][T12779] syzkaller0: entered allmulticast mode
[  288.692233][T12788] netlink: 'syz.2.2578': attribute type 21 has an invalid length.
[  288.709070][T12788] __nla_validate_parse: 3 callbacks suppressed
[  288.709091][T12788] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2578'.
[  288.958443][T12797] netlink: 'syz.3.2581': attribute type 1 has an invalid length.
[  289.110681][T12805] tunl0 speed is unknown, defaulting to 1000
[  289.123499][T12805] tunl0 speed is unknown, defaulting to 1000
[  289.133097][T12805] tunl0 speed is unknown, defaulting to 1000
[  289.962988][T12805] infiniband syz2: set active
[  289.964788][T12805] infiniband syz2: added tunl0
[  290.017152][T12805] RDS/IB: syz2: added
[  290.020493][T12805] smc: adding ib device syz2 with port count 1
[  290.023300][T12805] smc:    ib device syz2 port 1 has no pnetid
[  290.094777][T10489] tunl0 speed is unknown, defaulting to 1000
[  291.519342][ T5896] tunl0 speed is unknown, defaulting to 1000
[  291.522691][T12805] tunl0 speed is unknown, defaulting to 1000
[  291.555051][T12812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2588'.
[  291.586795][T12814] netlink: 'syz.2.2589': attribute type 2 has an invalid length.
[  291.589894][T12814] netlink: 'syz.2.2589': attribute type 8 has an invalid length.
[  291.592806][T12814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2589'.
[  291.739538][T12805] tunl0 speed is unknown, defaulting to 1000
[  291.805810][T12827] netlink: 'syz.0.2595': attribute type 6 has an invalid length.
[  291.904250][T12805] tunl0 speed is unknown, defaulting to 1000
[  291.971613][T12833] team0: entered promiscuous mode
[  291.973487][T12833] team_slave_0: entered promiscuous mode
[  291.978615][T12833] team_slave_1: entered promiscuous mode
[  291.981780][T12833] team0: entered allmulticast mode
[  291.983596][T12833] team_slave_0: entered allmulticast mode
[  291.986596][T12833] team_slave_1: entered allmulticast mode
[  292.005997][T12805] tunl0 speed is unknown, defaulting to 1000
[  292.119739][T12805] tunl0 speed is unknown, defaulting to 1000
[  292.322971][ T5842] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  292.542355][T12854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2608'.
[  292.545657][T12854] unsupported nlmsg_type 40
[  293.995628][T12907] netlink: 'syz.3.2631': attribute type 3 has an invalid length.
[  294.001154][T12907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2631'.
[  295.119411][T12968] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2658'.
[  295.123302][T12968] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2658'.
[  295.253372][T12976] bridge_slave_1: left allmulticast mode
[  295.255894][T12976] bridge_slave_1: left promiscuous mode
[  295.261328][T12976] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.272529][T12976] bridge_slave_0: left allmulticast mode
[  295.274352][T12976] bridge_slave_0: left promiscuous mode
[  295.276296][T12976] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.703375][T12995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  295.713759][   T33] audit: type=1107 audit(1774263171.999:2): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  295.716458][T12995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  297.776933][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'.
[  297.779877][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'.
[  297.791035][T13049] netlink: 'syz.2.2694': attribute type 9 has an invalid length.
[  297.859399][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2697'.
[  297.901504][T13058] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  298.186753][T13078] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2706'.
[  298.190553][T13078] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2706'.
[  298.476207][ T5842] Bluetooth: hci0: Malformed LE Event: 0x0d
[  298.553496][T13099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.022151][T13125] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2729'.
[  299.037615][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'.
[  299.040673][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'.
[  299.044465][T13127] netlink: 'syz.2.2730': attribute type 6 has an invalid length.
[  299.192032][T13137] netlink: 'syz.3.2735': attribute type 2 has an invalid length.
[  299.194997][T13137] netlink: 'syz.3.2735': attribute type 8 has an invalid length.
[  299.200271][T13137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2735'.
[  299.448320][T13164] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2746'.
[  300.247417][T13143] delete_channel: no stack
[  300.359240][T13185] netlink: 'syz.3.2758': attribute type 2 has an invalid length.
[  300.671505][ T5846] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.783061][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.785172][ T5846] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.792315][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.797233][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.802082][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.108395][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.151554][T13207] tunl0 speed is unknown, defaulting to 1000
[  301.646763][ T5846] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.275993][  T433] block nbd0: Possible stuck request ffff88810a920000: control (read@0,4096B). Runtime 120 seconds
[  302.311395][ T5846] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.397803][T13207] chnl_net:caif_netlink_parms(): no params data found
[  302.471924][T13207] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.474315][T13207] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.476793][T13207] bridge_slave_0: entered allmulticast mode
[  302.479787][T13207] bridge_slave_0: entered promiscuous mode
[  302.536193][T13207] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.538623][T13207] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.540994][T13207] bridge_slave_1: entered allmulticast mode
[  302.543627][T13207] bridge_slave_1: entered promiscuous mode
[  302.667960][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.672800][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.699409][T13233] delete_channel: no stack
[  303.127580][ T5836] Bluetooth: hci0: command tx timeout
[  303.621005][   T83] smc: removing ib device syz2
[  303.685021][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.699801][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.706913][ T5846] bond0 (unregistering): Released all slaves
[  303.763044][T11766] tunl0 speed is unknown, defaulting to 1000
[  303.781389][T11766] syz2: Port: 1 Link DOWN
[  303.842037][T13207] team0: Port device team_slave_0 added
[  303.858480][T13207] team0: Port device team_slave_1 added
[  303.912736][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.915052][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.945084][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.969022][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.971303][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.991754][T13262] netlink: 'syz.0.2788': attribute type 2 has an invalid length.
[  303.992866][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.151429][T13267] lo speed is unknown, defaulting to 1000
[  304.154756][T13207] hsr_slave_0: entered promiscuous mode
[  304.170941][T13207] hsr_slave_1: entered promiscuous mode
[  304.177059][T13207] debugfs: 'hsr0' already exists in 'hsr'
[  304.178884][T13207] Cannot create hsr debugfs directory
[  304.212434][T13267] lo speed is unknown, defaulting to 1000
[  304.239424][T13260] delete_channel: no stack
[  304.246400][T13267] lo speed is unknown, defaulting to 1000
[  304.522832][T13267] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  304.772865][T13267] lo speed is unknown, defaulting to 1000
[  304.838262][T13267] lo speed is unknown, defaulting to 1000
[  304.926984][T13267] lo speed is unknown, defaulting to 1000
[  304.931532][T13267] lo speed is unknown, defaulting to 1000
[  304.934523][T13267] lo speed is unknown, defaulting to 1000
[  304.938100][T13267] lo speed is unknown, defaulting to 1000
[  305.206579][ T5836] Bluetooth: hci0: command tx timeout
[  305.663205][ T5846] hsr_slave_0: left promiscuous mode
[  305.667192][ T5846] hsr_slave_1: left promiscuous mode
[  305.671016][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.674124][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.681206][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.684141][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.700164][ T5846] veth1_macvtap: left promiscuous mode
[  305.702712][ T5846] veth0_macvtap: left promiscuous mode
[  305.704977][ T5846] veth1_vlan: left promiscuous mode
[  305.707369][ T5846] veth0_vlan: left promiscuous mode
[  305.861783][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  305.870587][ T5846] team0 (unregistering): Port device C removed
[  306.210047][T13207] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  306.239360][T13207] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  306.280420][T13207] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  306.296680][T13344] netlink: 'syz.0.2813': attribute type 1 has an invalid length.
[  306.299891][T13344] netlink: 'syz.0.2813': attribute type 4 has an invalid length.
[  306.306115][T13207] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  306.310605][T13344] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2813'.
[  306.485747][T13207] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.500089][T13207] 8021q: adding VLAN 0 to HW filter on device team0
[  306.519627][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.522103][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.558200][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.560619][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.733928][T13207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.911053][T13402] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2828'.
[  307.050081][T13207] veth0_vlan: entered promiscuous mode
[  307.059687][T13207] veth1_vlan: entered promiscuous mode
[  307.060928][T13413] netlink: 'syz.0.2830': attribute type 2 has an invalid length.
[  307.065466][T13413] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2830'.
[  307.125303][T13207] veth0_macvtap: entered promiscuous mode
[  307.135778][T13207] veth1_macvtap: entered promiscuous mode
[  307.177313][T13207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.196331][T13207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.200032][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'.
[  307.209833][T11785] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.218476][T11785] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.235594][T11785] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.243806][T11785] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.287971][ T5836] Bluetooth: hci0: command tx timeout
[  307.334303][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.340198][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.361221][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.365409][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.392877][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'.
[  307.498972][T13440] netlink: 'syz.5.2766': attribute type 1 has an invalid length.
[  307.770935][T13467] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2846'.
[  307.862981][T13478] netlink: 'syz.5.2849': attribute type 11 has an invalid length.
[  307.865534][T13478] netlink: 199788 bytes leftover after parsing attributes in process `syz.5.2849'.
[  307.871238][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2849'.
[  307.965902][T13487] netlink: 'syz.0.2851': attribute type 2 has an invalid length.
[  307.969775][T13487] netlink: 'syz.0.2851': attribute type 2 has an invalid length.
[  308.234007][T13478] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  308.252100][T13490] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2854'.
[  308.463850][T13504] netlink: 'syz.0.2860': attribute type 13 has an invalid length.
[  308.476533][T13504] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2860'.
[  308.515242][T13502] syzkaller0: entered promiscuous mode
[  308.517733][T13502] syzkaller0: entered allmulticast mode
[  308.539294][T13504] syz_tun: refused to change device tx_queue_len
[  308.548149][T13504] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  308.727388][T13518] syzkaller0: tun_net_xmit 1280
[  308.894383][T13518] syzkaller0: create flow: hash 1576058949 index 1
[  309.024155][ T5836] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  309.290955][T13561] netlink: 'syz.0.2877': attribute type 39 has an invalid length.
[  309.339686][T13561] hsr_slave_1 (unregistering): left promiscuous mode
[  309.354383][T13501] syzkaller0: delete flow: hash 1576058949 index 1
[  309.370180][ T5836] Bluetooth: hci0: command tx timeout
[  310.336417][   T68] wlan1: Trigger new scan to find an IBSS to join
[  311.055092][T13585] netlink: 'syz.2.2886': attribute type 22 has an invalid length.
[  311.582190][T13607] __nla_validate_parse: 2 callbacks suppressed
[  311.582201][T13607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2897'.
[  311.608116][T13607] x_tables: ip_tables: udp match: only valid for protocol 17
[  311.691928][T13615] netlink: 'syz.5.2902': attribute type 39 has an invalid length.
[  311.752068][T13613] netlink: 'syz.0.2900': attribute type 10 has an invalid length.
[  311.819326][T13621] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2900'.
[  312.664649][T13621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.685471][T13621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.700140][T13621] bond0 (unregistering): Released all slaves
[  313.301768][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'.
[  313.319836][T13672] netlink: 'syz.0.2926': attribute type 21 has an invalid length.
[  313.352042][T13673] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2923'.
[  313.357453][T13673] bridge0: port 3(bond0) entered disabled state
[  313.372005][T13673] bond0 (unregistering): left allmulticast mode
[  313.374390][T13673] bond_slave_0: left allmulticast mode
[  313.377308][T13673] bond_slave_1: left allmulticast mode
[  313.379356][T13673] bridge0: port 3(bond0) entered disabled state
[  313.385745][T13673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.389983][T13673] bond_slave_0: left promiscuous mode
[  313.402562][T13673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.410666][T13673] bond_slave_1: left promiscuous mode
[  313.418322][T13673] bond0 (unregistering): Released all slaves
[  313.425907][T13675] net veth1_virt_wifi : renamed from virt_wifi0
[  314.025760][T13716] netlink: 'syz.2.2948': attribute type 6 has an invalid length.
[  314.030263][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'.
[  314.178320][T13724] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  314.220881][T13733] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2955'.
[  314.303343][T13743] netlink: 'syz.0.2959': attribute type 7 has an invalid length.
[  314.306044][T13743] netlink: 'syz.0.2959': attribute type 8 has an invalid length.
[  314.313187][T13743] netlink: 209816 bytes leftover after parsing attributes in process `syz.0.2959'.
[  314.523696][T13763] netlink: 'syz.0.2968': attribute type 10 has an invalid length.
[  315.367345][   T26] wlan1: Trigger new scan to find an IBSS to join
[  315.710724][  T433] block nbd1: Possible stuck request ffff88810a950000: control (read@0,4096B). Runtime 60 seconds
[  315.764142][T13789] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2978'.
[  315.940719][T13801] Cannot find set identified by id 29460 to match
[  316.109941][T13813] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2989'.
[  316.116470][T13813] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  316.156189][   T33] audit: type=1107 audit(1774263192.449:3): pid=13814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  316.202195][T13817] raw_sendmsg: syz.0.2991 forgot to set AF_INET. Fix it!
[  316.292729][   T83] wlan1: Creating new IBSS network, BSSID e2:c0:da:59:81:bc
[  317.019687][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  317.025298][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  317.030440][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  317.035007][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  317.039117][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  317.203644][ T5862] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.288530][ T5862] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.312284][T13831] lo speed is unknown, defaulting to 1000
[  317.526067][T13831] chnl_net:caif_netlink_parms(): no params data found
[  317.608548][T13846] sch_tbf: burst 35 is lower than device veth0_to_bridge mtu (1514) !
[  317.640985][ T5862] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.724029][ T5862] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.764535][T13831] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.774352][T13831] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.788600][T13831] bridge_slave_0: entered allmulticast mode
[  317.792893][T13831] bridge_slave_0: entered promiscuous mode
[  317.809217][T13831] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.812372][T13831] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.815728][T13831] bridge_slave_1: entered allmulticast mode
[  317.828735][T13831] bridge_slave_1: entered promiscuous mode
[  317.865078][T13831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.872520][T13831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.943585][T13831] team0: Port device team_slave_0 added
[  317.944418][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'.
[  317.955000][T13831] team0: Port device team_slave_1 added
[  318.034601][T13831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.048915][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.076963][T13831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.133238][T13831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.135581][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.147727][T13831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.188532][ T5862] bridge_slave_1: left allmulticast mode
[  318.190935][ T5862] bridge_slave_1: left promiscuous mode
[  318.193364][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.204893][ T5862] bridge_slave_0: left allmulticast mode
[  318.211735][ T5862] bridge_slave_0: left promiscuous mode
[  318.213780][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.443996][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.451428][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.456813][ T5862] bond0 (unregistering): Released all slaves
[  318.539918][T13831] hsr_slave_0: entered promiscuous mode
[  318.543251][T13831] hsr_slave_1: entered promiscuous mode
[  318.758988][T13896] delete_channel: no stack
[  318.808602][ T5862] hsr_slave_0: left promiscuous mode
[  318.811074][ T5862] hsr_slave_1: left promiscuous mode
[  318.823175][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.825956][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.831777][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.836890][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.844898][ T5862] veth1_macvtap: left promiscuous mode
[  318.848058][ T5862] veth0_macvtap: left promiscuous mode
[  318.850003][ T5862] veth1_vlan: left promiscuous mode
[  318.851696][ T5862] veth0_vlan: left promiscuous mode
[  319.127290][ T5842] Bluetooth: hci0: command tx timeout
[  319.446999][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  321.207013][ T5842] Bluetooth: hci0: command tx timeout
[  321.777080][ T5254] udevd[5254]: worker [8072] /devices/virtual/block/nbd1 is taking a long time
[  322.430937][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  322.729459][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  322.739289][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  322.981447][T13831] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  322.990048][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3041'.
[  322.993609][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3041'.
[  323.007201][T13831] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  323.012940][T13831] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  323.030625][T13831] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  323.287512][ T5842] Bluetooth: hci0: command tx timeout
[  324.220128][T13974] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.3049'.
[  324.905346][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3050'.
[  324.923162][T13831] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.958830][T13831] 8021q: adding VLAN 0 to HW filter on device team0
[  324.975689][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.978862][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.015989][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.018827][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.176112][T13987] lo speed is unknown, defaulting to 1000
[  325.221484][T13831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.347809][T14003] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3054'.
[  325.366425][ T5842] Bluetooth: hci0: command tx timeout
[  325.509548][T14016] syzkaller0: tun_chr_ioctl cmd 2147767519
[  325.584114][T13831] veth0_vlan: entered promiscuous mode
[  325.593326][T13831] veth1_vlan: entered promiscuous mode
[  325.631934][T13831] veth0_macvtap: entered promiscuous mode
[  325.648440][T13831] veth1_macvtap: entered promiscuous mode
[  325.664438][T14025] netlink: 'syz.0.3060': attribute type 29 has an invalid length.
[  325.669422][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3061'.
[  325.673205][T14021] netlink: 'syz.0.3060': attribute type 29 has an invalid length.
[  325.681400][T14021] netlink: 'syz.0.3060': attribute type 29 has an invalid length.
[  325.691327][T13831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.712919][T13831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.752215][T11785] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.755956][T11785] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.774293][T11785] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.791685][T11785] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.825685][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.828704][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.960801][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.964207][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.162592][T14047] netlink: 'syz.2.3066': attribute type 4 has an invalid length.
[  326.166211][T14047] netlink: 'syz.2.3066': attribute type 16 has an invalid length.
[  326.172964][T14047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3066'.
[  326.262745][T14054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3069'.
[  326.266551][T14054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3069'.
[  326.359012][T14063] netlink: 731 bytes leftover after parsing attributes in process `syz.5.3074'.
[  326.748396][T14096] netlink: 'syz.2.3085': attribute type 29 has an invalid length.
[  326.762288][T14089] netlink: 'syz.2.3085': attribute type 29 has an invalid length.
[  326.770396][T14089] netlink: 'syz.2.3085': attribute type 29 has an invalid length.
[  327.281358][T14133] tmpfs: Unknown parameter 'audit'
[  327.603490][T14158] netlink: 'syz.0.3116': attribute type 21 has an invalid length.
[  328.188003][T14184] __nla_validate_parse: 8 callbacks suppressed
[  328.188015][T14184] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3127'.
[  328.261856][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'.
[  328.310018][T14201] netlink: 'syz.2.3136': attribute type 10 has an invalid length.
[  328.312714][T14201] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3136'.
[  328.317817][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3135'.
[  328.320715][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3135'.
[  328.350241][T14203] netlink: 3936 bytes leftover after parsing attributes in process `syz.5.3137'.
[  328.353492][T14203] block nbd2: Unsupported socket: should be TCP or UNIX.
[  328.428674][T14216] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3142'.
[  328.545906][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'.
[  328.591280][T14237] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3150'.
[  328.819637][T14257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3160'.
[  329.392571][T14276] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.405213][T14276] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.427891][T14276] bridge0: entered allmulticast mode
[  329.471065][T14277] bridge_slave_1: left allmulticast mode
[  329.477730][T14277] bridge_slave_1: left promiscuous mode
[  329.485114][T14277] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.669644][T14277] bridge_slave_0: left allmulticast mode
[  329.671530][T14277] bridge_slave_0: left promiscuous mode
[  329.673437][T14277] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.839443][T14275] delete_channel: no stack
[  332.327394][  T433] block nbd0: Possible stuck request ffff88810a920000: control (read@0,4096B). Runtime 150 seconds
[  333.282434][ T5842] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  335.649007][T14353] validate_nla: 4 callbacks suppressed
[  335.649025][T14353] netlink: 'syz.2.3205': attribute type 21 has an invalid length.
[  335.658854][T14353] __nla_validate_parse: 3 callbacks suppressed
[  335.658864][T14353] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3205'.
[  335.663957][T14353] netlink: 'syz.2.3205': attribute type 4 has an invalid length.
[  335.666576][T14353] netlink: 'syz.2.3205': attribute type 3 has an invalid length.
[  335.669115][T14353] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3205'.
[  337.412584][T14411] netlink: 'syz.2.3231': attribute type 13 has an invalid length.
[  337.480799][T14414] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.3231'.
[  337.484666][T14414] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.3231'.
[  338.854177][T14413] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.3232'.
[  338.869664][T14411] gretap0: refused to change device tx_queue_len
[  338.872360][T14411] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  338.906796][ T5896] lo speed is unknown, defaulting to 1000
[  338.919199][ T5896] syz1: Port: 1 Link DOWN
[  339.343910][T14451] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3248'.
[  342.805081][T14487] netlink: 'syz.0.3264': attribute type 62 has an invalid length.
[  342.879380][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3267'.
[  342.889359][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3267'.
[  343.654860][T14524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.724063][T14527] netlink: 'syz.2.3283': attribute type 1 has an invalid length.
[  344.534284][T14549] netlink: 'syz.5.3293': attribute type 1 has an invalid length.
[  344.626377][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'.
[  344.732734][T14560] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3299'.
[  344.740038][T14560] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3299'.
[  344.837751][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3303'.
[  344.911430][T14577] lo speed is unknown, defaulting to 1000
[  344.914960][T14577] lo speed is unknown, defaulting to 1000
[  344.923603][T14577] lo speed is unknown, defaulting to 1000
[  345.145617][T14577] infiniband syz2: set down
[  345.147518][  T782] lo speed is unknown, defaulting to 1000
[  345.151955][T14577] infiniband syz2: added lo
[  345.178912][T14577] RDS/IB: syz2: added
[  345.180656][T14577] smc: adding ib device syz2 with port count 1
[  345.184647][T14577] smc:    ib device syz2 port 1 has no pnetid
[  345.189529][  T782] lo speed is unknown, defaulting to 1000
[  345.193908][T14577] lo speed is unknown, defaulting to 1000
[  345.605712][T14577] lo speed is unknown, defaulting to 1000
[  345.654935][T14611] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3319'.
[  345.732813][T14577] lo speed is unknown, defaulting to 1000
[  345.776941][  T433] block nbd1: Possible stuck request ffff88810a950000: control (read@0,4096B). Runtime 90 seconds
[  345.935420][T14577] lo speed is unknown, defaulting to 1000
[  346.068826][T14577] lo speed is unknown, defaulting to 1000
[  346.254712][T14632] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3327'.
[  346.259833][T14632] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3327'.
[  346.263754][T14632] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3327'.
[  346.409736][T14655] pim6reg1: entered promiscuous mode
[  346.411433][T14655] pim6reg1: entered allmulticast mode
[  346.463352][T14661] netlink: 'syz.5.3339': attribute type 10 has an invalid length.
[  346.474740][T14661] team0: Port device dummy0 added
[  346.482288][T14661] netlink: 'syz.5.3339': attribute type 10 has an invalid length.
[  346.493864][T14661] team0: Port device dummy0 removed
[  346.498786][T14661] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  346.798905][T14696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.599998][T14718] netlink: 'syz.5.3356': attribute type 4 has an invalid length.
[  347.878192][T14736] netlink: 'syz.5.3365': attribute type 7 has an invalid length.
[  347.880802][T14736] netlink: 'syz.5.3365': attribute type 7 has an invalid length.
[  347.965673][T14742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.211643][T14746] __nla_validate_parse: 3 callbacks suppressed
[  349.211662][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3370'.
[  349.434554][T14758] netlink: 'syz.0.3376': attribute type 9 has an invalid length.
[  349.437689][T14758] netlink: 'syz.0.3376': attribute type 11 has an invalid length.
[  349.440378][T14758] netlink: 'syz.0.3376': attribute type 12 has an invalid length.
[  349.443424][T14758] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3376'.
[  349.447170][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'.
[  349.755893][T14780] netlink: 'syz.0.3386': attribute type 1 has an invalid length.
[  349.759431][T14780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.873685][T14790] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3391'.
[  349.887143][T14790] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3391'.
[  350.570582][ T5836] Bluetooth: hci5: command 0x0406 tx timeout
[  350.646938][T14835] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  351.499143][T14875] netlink: 'syz.2.3429': attribute type 2 has an invalid length.
[  351.563774][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3431'.
[  352.297986][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3452'.
[  352.362304][T14929] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.3453'.
[  352.366104][T14929] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.3453'.
[  355.947467][T14954] netlink: 'syz.2.3463': attribute type 29 has an invalid length.
[  355.960705][T14954] netlink: 'syz.2.3463': attribute type 29 has an invalid length.
[  355.965813][T14954] netlink: 'syz.2.3463': attribute type 29 has an invalid length.
[  355.969337][T14954] netlink: 'syz.2.3463': attribute type 29 has an invalid length.
[  356.142592][T14962] netlink: 'syz.0.3468': attribute type 21 has an invalid length.
[  356.248917][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3471'.
[  356.433385][T14989] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3479'.
[  356.537589][T14987] netlink: 'syz.5.3478': attribute type 10 has an invalid length.
[  356.584795][T14995] netlink: 'syz.0.3483': attribute type 28 has an invalid length.
[  356.589478][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'.
[  356.695830][T15001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3485'.
[  356.748253][T14987] team0: Port device syz_tun added
[  357.056995][T15015] netlink: 'syz.2.3492': attribute type 1 has an invalid length.
[  357.060895][T15015] netlink: 'syz.2.3492': attribute type 2 has an invalid length.
[  357.064652][T15015] netlink: 'syz.2.3492': attribute type 1 has an invalid length.
[  357.140297][T15017] team0: Port device dummy0 added
[  357.613486][T15017] team0: Port device dummy0 removed
[  358.171400][T15042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3504'.
[  358.740145][T15083] delete_channel: no stack
[  358.744497][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3526'.
[  360.178632][T15114] delete_channel: no stack
[  360.381582][T15127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.435856][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.504867][T15139] netlink: 340 bytes leftover after parsing attributes in process `syz.0.3551'.
[  360.587471][T15147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3553'.
[  360.838270][T15159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3559'.
[  360.846194][T15161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3560'.
[  361.587345][T15171] syzkaller0: entered promiscuous mode
[  361.589905][T15171] syzkaller0: entered allmulticast mode
[  361.725508][T15175] __nla_validate_parse: 1 callbacks suppressed
[  361.725518][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3565'.
[  361.762540][T15178] syzkaller0: entered promiscuous mode
[  361.764508][T15178] syzkaller0: entered allmulticast mode
[  361.884957][T15179] validate_nla: 9 callbacks suppressed
[  361.884974][T15179] netlink: 'syz.5.3566': attribute type 3 has an invalid length.
[  362.209613][T15198] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3577'.
[  362.214448][T15198] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3577'.
[  362.738158][  T433] block nbd0: Possible stuck request ffff88810a920000: control (read@0,4096B). Runtime 180 seconds
[  364.722196][ T5254] udevd[5254]: worker [8074] /devices/virtual/block/nbd0 timeout; kill it
[  364.747282][ T5254] udevd[5254]: seq 13177 '/devices/virtual/block/nbd0' killed
[  365.991332][T15240] netlink: 'syz.2.3594': attribute type 21 has an invalid length.
[  365.994718][T15240] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3594'.
[  366.244094][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3605'.
[  366.273456][T15267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3607'.
[  366.325336][T15273] netlink: 'syz.5.3610': attribute type 21 has an invalid length.
[  366.328876][T15273] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3610'.
[  366.465476][T15287] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.3617'.
[  366.522694][ T5842] Bluetooth: hci6: Unable to find connection for big 0x00
[  366.525150][T15288] delete_channel: no stack
[  366.683239][T15293] netlink: 'syz.0.3620': attribute type 16 has an invalid length.
[  366.685888][T15293] netlink: 'syz.0.3620': attribute type 17 has an invalid length.
[  367.449354][T15293] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.453407][T15293] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.461585][T15293] team0: left promiscuous mode
[  367.463653][T15293] team_slave_0: left promiscuous mode
[  367.466061][T15293] team_slave_1: left promiscuous mode
[  367.470317][T15293] team0: left allmulticast mode
[  367.472910][T15293] team_slave_0: left allmulticast mode
[  367.474631][T15293] team_slave_1: left allmulticast mode
[  367.502251][T15293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.508057][T15293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.549299][T15293] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[  367.633930][T15307] syzkaller0: entered promiscuous mode
[  367.635648][T15307] syzkaller0: entered allmulticast mode
[  367.647783][ T5862] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.687433][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3628'.
[  367.723236][T15315] netlink: 5240 bytes leftover after parsing attributes in process `syz.5.3628'.
[  367.955681][T15326] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3632'.
[  369.478586][ T5862] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.486421][ T5862] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.496610][ T5862] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.542313][T15333] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  370.104643][T15379] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3653'.
[  370.260479][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'.
[  370.383211][T15400] xt_bpf: check failed: parse error
[  370.484183][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3667'.
[  370.943060][T15420] netlink: 'syz.5.3671': attribute type 29 has an invalid length.
[  370.957981][T15420] netlink: 'syz.5.3671': attribute type 29 has an invalid length.
[  371.166502][T15430] netlink: 'syz.0.3676': attribute type 1 has an invalid length.
[  371.224523][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'.
[  371.309226][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3684'.
[  371.714527][T15486] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  371.724987][T15486] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  372.086606][ T5842] Bluetooth: hci6: unexpected event 0x30 length: 151 > 3
[  372.280155][ T5862] tipc: Subscription rejected, illegal request
[  373.417731][T15544] netlink: 822 bytes leftover after parsing attributes in process `syz.2.3719'.
[  373.421867][T15544] bridge: RTM_NEWNEIGH with unconfigured vlan 265 on bridge0
[  375.061346][T15546] netlink: 'syz.0.3721': attribute type 27 has an invalid length.
[  375.408829][ T5842] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  375.898463][  T433] block nbd1: Possible stuck request ffff88810a950000: control (read@0,4096B). Runtime 120 seconds
[  376.360947][T15591] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3741'.
[  376.444067][T15589] netlink: 'syz.5.3739': attribute type 40 has an invalid length.
[  377.034314][T15632] netlink: 'syz.2.3757': attribute type 21 has an invalid length.
[  377.355053][ T5842] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  377.979580][T15669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.990349][T15668] delete_channel: no stack
[  378.178915][T15688] netlink: 'syz.2.3783': attribute type 29 has an invalid length.
[  378.183084][T15688] netlink: 'syz.2.3783': attribute type 29 has an invalid length.
[  378.392853][T15694] option changes via remount are deprecated (pid=15693 comm=syz.0.3786)
[  378.414703][T15694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3786'.
[  378.424155][T15694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3786'.
[  378.437961][T15694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3786'.
[  378.611504][T15701] Set syz0 is full, maxelem 0 reached
[  378.741451][ T5842] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[  379.305592][T15745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3808'.
[  379.346429][T15749] netlink: 'syz.0.3811': attribute type 3 has an invalid length.
[  379.349791][T15749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3811'.
[  379.391981][T15753] netlink: 'syz.5.3813': attribute type 7 has an invalid length.
[  379.399838][T15753] netlink: 'syz.5.3813': attribute type 8 has an invalid length.
[  379.456096][T15761] netlink: 'syz.2.3817': attribute type 61 has an invalid length.
[  379.460614][T15761] netlink: 'syz.2.3817': attribute type 62 has an invalid length.
[  379.527987][T15766] netlink: 'syz.0.3819': attribute type 6 has an invalid length.
[  379.530678][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'.
[  379.554282][T15768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3820'.
[  380.307347][T15776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  380.316137][T15776] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  380.365380][T15782] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3826'.
[  380.370141][T15782] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3826'.
[  380.443362][T15787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3828'.
[  381.340302][T15791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.348057][T15793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3831'.
[  381.352128][T15793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3831'.
[  381.442184][T15803] tap0: tun_chr_ioctl cmd 1074025677
[  381.444743][T15803] tap0: linktype set to 823
[  381.599189][T15813] validate_nla: 2 callbacks suppressed
[  381.599205][T15813] netlink: 'syz.5.3840': attribute type 21 has an invalid length.
[  381.913660][T15826] syzkaller0: entered promiscuous mode
[  381.916065][T15826] syzkaller0: entered allmulticast mode
[  381.984361][T15827] : renamed from syz_tun (while UP)
[  382.528085][T15840] netlink: 'syz.0.3852': attribute type 7 has an invalid length.
[  383.226512][T15848] netlink: 'syz.2.3855': attribute type 3 has an invalid length.
[  384.084311][T15862] __nla_validate_parse: 3 callbacks suppressed
[  384.084330][T15862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3862'.
[  384.138646][ T5842] Bluetooth: hci6: unexpected subevent 0x05 length: 150 > 12
[  384.170365][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  384.172675][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  384.318639][T15881] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3867'.
[  384.508573][T15888] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3872'.
[  384.624230][T15897] netlink: 'syz.5.3877': attribute type 5 has an invalid length.
[  384.627485][T15897] netlink: 'syz.5.3877': attribute type 5 has an invalid length.
[  384.708601][T15901] netlink: 'syz.2.3878': attribute type 12 has an invalid length.
[  384.712025][T15901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3878'.
[  384.809112][T15909] lo: entered allmulticast mode
[  384.820555][T15910] netlink: 'syz.0.3882': attribute type 6 has an invalid length.
[  384.826088][T15909] lo: entered promiscuous mode
[  384.828719][T15910] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3882'.
[  384.832592][T15909] lo: left allmulticast mode
[  385.124178][T15925] netlink: 'syz.2.3889': attribute type 1 has an invalid length.
[  385.211244][T15930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3892'.
[  385.226541][T15930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3892'.
[  386.167221][ T5836] Bluetooth: hci6: command 0x0406 tx timeout
[  386.249222][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  388.399082][T15979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3911'.
[  388.410052][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'.
[  388.439258][T15981] openvswitch: netlink: Message has 496 unknown bytes.
[  388.442209][T15981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.446654][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3911'.
[  389.828947][T16049] netlink: 'syz.2.3944': attribute type 37 has an invalid length.
[  389.831622][T16047] __nla_validate_parse: 2 callbacks suppressed
[  389.831632][T16047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3943'.
[  390.126442][T16072] netlink: 'syz.0.3953': attribute type 29 has an invalid length.
[  390.130418][T16072] netlink: 'syz.0.3953': attribute type 29 has an invalid length.
[  390.134684][T16071] netlink: 'syz.2.3954': attribute type 10 has an invalid length.
[  390.146607][T16071] netlink: 'syz.2.3954': attribute type 19 has an invalid length.
[  390.147481][T16072] netlink: 'syz.0.3953': attribute type 29 has an invalid length.
[  390.150526][T16071] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.3954'.
[  390.165150][T16072] netlink: 'syz.0.3953': attribute type 29 has an invalid length.
[  390.281296][T16087] netlink: 'syz.5.3961': attribute type 1 has an invalid length.
[  390.577093][T16091] netlink: 'syz.5.3962': attribute type 19 has an invalid length.
[  390.580169][T16091] netlink: 14524 bytes leftover after parsing attributes in process `syz.5.3962'.
[  390.893607][T16103] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  391.248982][T16120] netlink: 'syz.0.3976': attribute type 40 has an invalid length.
[  391.326898][T16126] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3972'.
[  392.280012][T16126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.293319][T16126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.302538][T16126] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  392.309848][T16126] bond0 (unregistering): Released all slaves
[  392.349170][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3980'.
[  392.611431][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'.
[  392.789730][T16177] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3995'.
[  392.793514][T16177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3995'.
[  393.157805][  T433] block nbd0: Possible stuck request ffff88810a920000: control (read@0,4096B). Runtime 210 seconds
[  393.263695][T16199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4006'.
[  393.268271][T16199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4006'.
[  393.286656][   T36] wlan1: Trigger new scan to find an IBSS to join
[  393.338270][T16204] tun0: tun_chr_ioctl cmd 1074025675
[  393.340634][T16204] tun0: persist disabled
[  394.918023][T16250] __nla_validate_parse: 3 callbacks suppressed
[  394.918038][T16250] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.4029'.
[  396.038119][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'.
[  396.569363][T16285] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4044'.
[  397.266439][T16313] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4057'.
[  397.269890][T16313] validate_nla: 1 callbacks suppressed
[  397.269899][T16313] netlink: 'syz.2.4057': attribute type 1 has an invalid length.
[  397.274648][T16313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4057'.
[  397.286577][ T1369] wlan1: Trigger new scan to find an IBSS to join
[  397.351447][ T5842] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[  397.829847][T16339] pimreg1: tun_chr_ioctl cmd 1074025677
[  397.835472][T16339] pimreg1: linktype set to 773
[  397.985581][T16345] tap0: tun_chr_ioctl cmd 1074025677
[  397.993134][T16345] tap0: linktype set to 776
[  398.262805][T16358] netlink: 'syz.2.4078': attribute type 9 has an invalid length.
[  398.265582][T16358] netlink: 'syz.2.4078': attribute type 11 has an invalid length.
[  398.281321][T16358] netlink: 'syz.2.4078': attribute type 12 has an invalid length.
[  398.284200][T16358] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4078'.
[  398.288689][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4078'.
[  398.804753][T16371] netlink: 'syz.2.4083': attribute type 29 has an invalid length.
[  398.808422][T16371] netlink: 'syz.2.4083': attribute type 29 has an invalid length.
[  398.812146][T16371] netlink: 'syz.2.4083': attribute type 29 has an invalid length.
[  398.815975][T16371] netlink: 'syz.2.4083': attribute type 29 has an invalid length.
[  398.913615][T16377] : renamed from veth0_to_bond (while UP)
[  399.075265][T16382] syzkaller0: entered promiscuous mode
[  399.078261][T16382] syzkaller0: entered allmulticast mode
[  399.286680][ T1369] wlan1: Creating new IBSS network, BSSID 46:bd:36:4b:47:14
[  401.209892][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4103'.
[  401.411799][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4111'.
[  401.415913][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4111'.
[  402.513946][T16449] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4121'.
[  405.297390][   T34] INFO: task syz.9.2052:11269 blocked for more than 143 seconds.
[  405.299982][   T34]       Not tainted syzkaller #0
[  405.301751][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  405.304787][   T34] task:syz.9.2052      state:D stack:24792 pid:11269 tgid:11268 ppid:10989  task_flags:0x400140 flags:0x00080002
[  405.326839][   T34] Call Trace:
[  405.328001][   T34]  <TASK>
[  405.328963][   T34]  __schedule+0x15dd/0x52d0
[  405.330436][   T34]  ? perf_trace_lock+0x32d/0x410
[  405.331996][   T34]  ? __pfx_perf_trace_lock+0x10/0x10
[  405.333695][   T34]  ? __pfx___schedule+0x10/0x10
[  405.335259][   T34]  ? schedule+0x90/0x360
[  405.356382][   T34]  ? schedule+0x90/0x360
[  405.357850][   T34]  schedule+0x164/0x360
[  405.359246][   T34]  schedule_preempt_disabled+0x13/0x30
[  405.376444][   T34]  __mutex_lock+0x7fe/0x1300
[  405.378065][   T34]  ? __mutex_lock+0x5ac/0x1300
[  405.379641][   T34]  ? nfsd_nl_listener_get_doit+0x10a/0x5e0
[  405.381788][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  405.383867][   T34]  ? __nlmsg_put+0xef/0x1b0
[  405.385734][   T34]  ? genlmsg_put+0x137/0x2e0
[  405.406373][   T34]  nfsd_nl_listener_get_doit+0x10a/0x5e0
[  405.408744][   T34]  ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0
[  405.421690][   T34]  genl_family_rcv_msg_doit+0x22a/0x330
[  405.424016][   T34]  ? __asan_memcpy+0x40/0x70
[  405.425968][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  405.442059][   T34]  genl_rcv_msg+0x61c/0x7a0
[  405.444040][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.456350][   T34]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  405.458396][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  405.459944][   T34]  netlink_rcv_skb+0x232/0x4b0
[  405.461550][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.488514][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  405.490757][   T34]  ? down_read+0x272/0x2e0
[  405.492610][   T34]  ? genl_rcv+0xd/0x40
[  405.494281][   T34]  genl_rcv+0x28/0x40
[  405.495909][   T34]  netlink_unicast+0x80f/0x9b0
[  405.518248][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  405.526325][   T34]  ? netlink_sendmsg+0x650/0xb40
[  405.528240][   T34]  ? skb_put+0x11b/0x210
[  405.529966][   T34]  netlink_sendmsg+0x813/0xb40
[  405.542259][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.544354][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  405.552709][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  405.555006][   T34]  ____sys_sendmsg+0x972/0x9f0
[  405.572788][   T34]  ? __pfx_perf_trace_lock+0x10/0x10
[  405.575012][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  405.583353][   T34]  ? import_iovec+0x73/0xa0
[  405.585341][   T34]  ___sys_sendmsg+0x2a5/0x360
[  405.596307][   T34]  ? perf_trace_run_bpf_submit+0xee/0x170
[  405.598720][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  405.600886][   T34]  ? __fget_files+0x2a/0x420
[  405.602768][   T34]  ? __fget_files+0x2a/0x420
[  405.636857][   T34]  ? __fget_files+0x3a0/0x420
[  405.638847][   T34]  __x64_sys_sendmsg+0x1bd/0x2a0
[  405.640887][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  405.643367][   T34]  ? rcu_is_watching+0x15/0xb0
[  405.645427][   T34]  do_syscall_64+0x14d/0xf80
[  405.696364][   T34]  ? trace_irq_disable+0x3b/0x150
[  405.700237][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.702332][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.718422][   T34] RIP: 0033:0x7ff64ff9c799
[  405.720287][   T34] RSP: 002b:00007ff650db8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.724082][   T34] RAX: ffffffffffffffda RBX: 00007ff650215fa0 RCX: 00007ff64ff9c799
[  405.746321][   T34] RDX: 0000000000008040 RSI: 0000200000000140 RDI: 0000000000000005
[  405.748873][   T34] RBP: 00007ff650032c99 R08: 0000000000000000 R09: 0000000000000000
[  405.751438][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.754159][   T34] R13: 00007ff650216038 R14: 00007ff650215fa0 R15: 00007ffd4563c198
[  405.766056][   T34]  </TASK>
[  405.768083][   T34] 
[  405.768083][   T34] Showing all locks held in the system:
[  405.785945][   T34] 1 lock held by khungtaskd/34:
[  405.805080][   T34]  #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  405.826748][   T34] 3 locks held by kworker/0:2/782:
[  405.828821][   T34]  #0: ffff888100692d48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  405.833070][   T34]  #1: ffffc900045d7c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  405.930655][   T34]  #2: ffffffff8e7bd3f8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1220
[  405.933992][   T34] 2 locks held by getty/5634:
[  405.935472][   T34]  #0: ffff888111e550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  405.938814][   T34]  #1: ffffc900032b02f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  405.941955][   T34] 1 lock held by udevd/8072:
[  405.943506][   T34]  #0: ffff88816a285358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  405.949268][   T34] 1 lock held by udevd/8074:
[  405.950754][   T34]  #0: ffff88816a22f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  405.953641][   T34] 2 locks held by syz.4.1594/9940:
[  405.955238][   T34]  #0: ffffffff8fc3ab70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.958285][   T34]  #1: ffffffff8ea857e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  405.961934][   T34] 1 lock held by syz-executor/10991:
[  405.963897][   T34]  #0: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  405.967586][   T34] 2 locks held by syz.9.2052/11269:
[  405.969182][   T34]  #0: ffffffff8fc3ab70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.971692][   T34]  #1: ffffffff8ea857e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0
[  405.975218][   T34] 1 lock held by syz.5.4129/16465:
[  405.977613][   T34]  #0: ffffffff8e7ce888 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  405.980912][   T34] 4 locks held by syz.5.4129/16466:
[  405.982806][   T34] 1 lock held by syz.2.4130/16467:
[  405.984449][   T34]  #0: ffffffff8e7ce888 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  405.987893][   T34] 
[  405.988719][   T34] =============================================
[  405.988719][   T34] 
[  405.991435][   T34] NMI backtrace for cpu 0
[  405.991447][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  405.991456][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  405.991460][   T34] Call Trace:
[  405.991465][   T34]  <TASK>
[  405.991470][   T34]  dump_stack_lvl+0xe8/0x150
[  405.991487][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  405.991497][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  405.991508][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  405.991518][   T34]  sys_info+0x135/0x170
[  405.991526][   T34]  watchdog+0xfd9/0x1030
[  405.991538][   T34]  ? watchdog+0x21a/0x1030
[  405.991551][   T34]  kthread+0x388/0x470
[  405.991558][   T34]  ? __pfx_watchdog+0x10/0x10
[  405.991568][   T34]  ? __pfx_kthread+0x10/0x10
[  405.991575][   T34]  ret_from_fork+0x51e/0xb90
[  405.991585][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  405.991594][   T34]  ? __switch_to+0xc7d/0x1450
[  405.991608][   T34]  ? __pfx_kthread+0x10/0x10
[  405.991619][   T34]  ret_from_fork_asm+0x1a/0x30
[  405.991642][   T34]  </TASK>
[  405.991646][   T34] Sending NMI from CPU 0 to CPUs 1:
[  406.028848][    C1] NMI backtrace for cpu 1
[  406.028863][    C1] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  406.028872][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  406.028877][    C1] Workqueue: bat_events batadv_purge_orig
[  406.028893][    C1] RIP: 0010:batadv_purge_orig_ref+0x138a/0x1460
[  406.028905][    C1] Code: eb 12 e8 39 2b 4b f6 48 8b bc 24 a0 00 00 00 e8 3c 1e 36 00 48 8b 84 24 98 00 00 00 42 0f b6 04 38 84 c0 48 8b 54 24 48 75 28 <48> 8b 74 24 68 48 ff c6 8b 02 48 89 74 24 68 48 39 c6 73 31 e8 fd
[  406.028911][    C1] RSP: 0018:ffffc9000678f960 EFLAGS: 00000246
[  406.028917][    C1] RAX: 0000000000000000 RBX: ffff8881ba8b4870 RCX: ffff888114410000
[  406.028923][    C1] RDX: ffff8881a42a9950 RSI: 000000000000010e RDI: 0000000000000000
[  406.028928][    C1] RBP: ffffc9000678fae0 R08: ffffffff90118bb7 R09: 1ffffffff2023176
[  406.028932][    C1] R10: dffffc0000000000 R11: ffffffff8b7a1330 R12: ffff8881bc900f08
[  406.028937][    C1] R13: ffff888110970318 R14: 1ffff1103751690e R15: dffffc0000000000
[  406.028942][    C1] FS:  0000000000000000(0000) GS:ffff8882a9463000(0000) knlGS:0000000000000000
[  406.028947][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  406.028952][    C1] CR2: 00007f76c00b66f9 CR3: 000000000e54c000 CR4: 00000000000006f0
[  406.028982][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  406.028988][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  406.028992][    C1] Call Trace:
[  406.028996][    C1]  <TASK>
[  406.029003][    C1]  ? __pfx_batadv_purge_orig_ref+0x10/0x10
[  406.029016][    C1]  batadv_purge_orig+0x19/0x60
[  406.029024][    C1]  ? process_scheduled_works+0xa25/0x1830
[  406.029034][    C1]  process_scheduled_works+0xb02/0x1830
[  406.029046][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  406.029055][    C1]  ? assign_work+0x3d5/0x5e0
[  406.029064][    C1]  worker_thread+0xa50/0xfc0
[  406.029076][    C1]  kthread+0x388/0x470
[  406.029083][    C1]  ? __pfx_worker_thread+0x10/0x10
[  406.029090][    C1]  ? __pfx_kthread+0x10/0x10
[  406.029096][    C1]  ret_from_fork+0x51e/0xb90
[  406.029105][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  406.029153][    C1]  ? __switch_to+0xc7d/0x1450
[  406.029164][    C1]  ? __pfx_kthread+0x10/0x10
[  406.029170][    C1]  ret_from_fork_asm+0x1a/0x30
[  406.029183][    C1]  </TASK>
[  406.116526][  T433] block nbd1: Possible stuck request ffff88810a950000: control (read@0,4096B). Runtime 150 seconds
[  406.116658][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  406.116670][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  406.116680][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  406.116685][   T34] Call Trace:
[  406.116689][   T34]  <TASK>
[  406.116693][   T34]  vpanic+0x56c/0xa60
[  406.116707][   T34]  ? __pfx___schedule+0x10/0x10
[  406.116719][   T34]  ? __pfx_vpanic+0x10/0x10
[  406.116732][   T34]  ? __pfx_console_unlock+0x10/0x10
[  406.116751][   T34]  panic+0xc5/0xd0
[  406.116765][   T34]  ? __pfx_panic+0x10/0x10
[  406.116780][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  406.116795][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  406.116813][   T34]  watchdog+0x1023/0x1030
[  406.116835][   T34]  ? watchdog+0x21a/0x1030
[  406.116854][   T34]  kthread+0x388/0x470
[  406.116867][   T34]  ? __pfx_watchdog+0x10/0x10
[  406.116882][   T34]  ? __pfx_kthread+0x10/0x10
[  406.116895][   T34]  ret_from_fork+0x51e/0xb90
[  406.116912][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  406.116926][   T34]  ? __switch_to+0xc7d/0x1450
[  406.116942][   T34]  ? __pfx_kthread+0x10/0x10
[  406.116954][   T34]  ret_from_fork_asm+0x1a/0x30
[  406.116981][   T34]  </TASK>
[  406.121781][   T34] Kernel Offset: disabled
