last executing test programs:

7m27.685558199s ago: executing program 32 (id=690):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x2, 0x8}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3506, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

6m55.492615082s ago: executing program 33 (id=964):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b6}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xe40, 0x7}, 0x410, 0x3, 0x10001, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x28}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000070000008500000054004f00009500020000000000a813d91c5e113a292eda80ba8941e914b2aa751c9c45fe3f818df704e709c8bea351c9f9c9d9d8726bd29e00"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x50, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x28, 0x6, "bbdbacd37391dccb6ec55569a34b3f423d5e5ed1f918527862b3867572d4b9940d575e5a"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000)
sendmsg$nl_generic(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x124, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}, 0x100040, 0x0, 0x1, 0x0, 0x0, 0x400002, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c0300001900010000000000000000001d01090062001180ea35ac2439fc44fe83cf3e1cfbdcf0c26d280744b1115dd59a"], 0x35c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf)

6m48.258587554s ago: executing program 4 (id=1244):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x401, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x40880)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12)

6m47.451314832s ago: executing program 4 (id=1254):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)

6m47.230676513s ago: executing program 4 (id=1255):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

6m47.230428468s ago: executing program 4 (id=1256):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x18200, 0x7fff, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2002000, 0x0)

6m46.967205856s ago: executing program 4 (id=1257):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)

6m46.7243699s ago: executing program 4 (id=1265):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

6m46.511654994s ago: executing program 34 (id=1265):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

3m31.443869313s ago: executing program 2 (id=4271):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@allocspi={0x1ac, 0x16, 0x1, 0x70bd2a, 0x25dfdbfd, {{{@in=@multicast2, @in=@multicast1, 0x4e20, 0x0, 0x4e23, 0x9, 0x2, 0x0, 0x0, 0x11}, {@in=@local, 0x4d6, 0x6c}, @in6=@mcast1, {0x8, 0x101, 0x3164, 0x4, 0x0, 0x80000001, 0x3, 0x7}, {0x6, 0x8, 0xfc, 0x9}, {0xa1, 0x1, 0xb}, 0x70bd27, 0x3501, 0x2, 0x4, 0x40, 0xab98a783b4acd403}, 0x6, 0x59d8}, [@tfcpad={0x8, 0x16, 0xc98b}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@private=0xa010102, 0x4e21, 0x0, 0x4e20, 0x7fff, 0x2, 0xa0, 0x20, 0x1d}, {0x5b, 0x7, 0x3, 0x7, 0x0, 0x9, 0x5, 0x4}, {0xffffffff, 0x0, 0x1, 0x24}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20008015}, 0x40)

3m31.312868939s ago: executing program 2 (id=4272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={&(0x7f0000000000)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4020080}, 0x4c000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x21000000, 0x0, 0x4048011}, 0x8010)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x1, 0x0, 0x9d, 0x0, 0x401, 0x100, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x262108eb9df8686, @perf_config_ext={0x5, 0x7c}, 0x200, 0x3, 0x10, 0x3, 0x7ff, 0xffff3ebc, 0x4, 0x0, 0x1, 0x0, 0x68}, 0xffffffffffffffff, 0x10, r2, 0x2)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x38, 0x0, 0x52)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r6, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a94c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080)
recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000250001012570318fd09c895a880000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0)

3m31.172348552s ago: executing program 2 (id=4275):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000100)=0x8000000000000000, 0x12)
bpf$ITER_CREATE(0xb, &(0x7f0000000400), 0x42)

3m31.065077079s ago: executing program 2 (id=4276):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x0, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

3m30.958154192s ago: executing program 2 (id=4278):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1d4}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x30}], 0x1}, 0x0)

3m30.723349408s ago: executing program 2 (id=4283):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000900)={'wlan1\x00', @random="0e65925bf900"})

3m30.643065674s ago: executing program 35 (id=4283):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000900)={'wlan1\x00', @random="0e65925bf900"})

3m25.134852114s ago: executing program 6 (id=4354):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

3m25.064938022s ago: executing program 6 (id=4355):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1282, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0)

3m24.895494571s ago: executing program 6 (id=4359):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

3m22.973066734s ago: executing program 6 (id=4361):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x109}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

3m22.845817243s ago: executing program 6 (id=4364):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)={[], [{@obj_type={'obj_type', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}]})

3m22.746284506s ago: executing program 6 (id=4368):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000200)='./cgroup\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)

3m7.482735721s ago: executing program 36 (id=4368):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000200)='./cgroup\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)

2m42.866219011s ago: executing program 7 (id=4806):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000000), 0x4)

2m42.773461015s ago: executing program 7 (id=4807):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x700}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m42.692900742s ago: executing program 7 (id=4808):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m42.434921123s ago: executing program 7 (id=4812):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)

2m42.342974466s ago: executing program 7 (id=4813):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b9040220080211000000040000a11800f674ae9f000100000e1208000f0100810401a80016ea1f000440032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c108006f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e1060000000000000080bb9ad805d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef8f", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

2m42.170913818s ago: executing program 7 (id=4816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0)

2m42.07668228s ago: executing program 37 (id=4816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0)

1m25.337670027s ago: executing program 8 (id=6141):
socket$kcm(0x1e, 0x4, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4)

1m24.794912995s ago: executing program 8 (id=6142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m24.542970473s ago: executing program 8 (id=6144):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r1, 0x0, 0xff8a)

1m21.772701851s ago: executing program 8 (id=6149):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x18, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1"], 0x0}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000080000000000000000800120002000200000000000000000030002b000203"], 0xa0}}, 0x0)

1m21.673534273s ago: executing program 8 (id=6151):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2050061, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3})
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x76, 0x2001ef7}, 0x117fa, 0x4, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0xe0ffff}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0007000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e0800000700", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r7, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
r8 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, 0x0)
socket$kcm(0xa, 0x2, 0x73)

1m19.91719019s ago: executing program 8 (id=6178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdbff, {0x15}, [@typed={0xb, 0x15e, 0x0, 0x0, @binary="f81c4442d16b3e"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)

1m10.565072925s ago: executing program 5 (id=6309):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m10.50484678s ago: executing program 5 (id=6310):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x7, &(0x7f0000000040), 0x4)

1m10.504388467s ago: executing program 5 (id=6311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

1m10.438613557s ago: executing program 5 (id=6312):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x214527, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000009}, 0x0, 0x3, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x296, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff272, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0)

1m10.204518704s ago: executing program 5 (id=6317):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x6, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

1m10.074681007s ago: executing program 5 (id=6319):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33)

1m4.706013213s ago: executing program 38 (id=6178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdbff, {0x15}, [@typed={0xb, 0x15e, 0x0, 0x0, @binary="f81c4442d16b3e"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)

1m2.59621684s ago: executing program 3 (id=6356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010200000000006000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005000000000006000440000000000500010007000000050004"], 0x5c}}, 0x0)

1m2.524229409s ago: executing program 3 (id=6357):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a80000012", 0x2d}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x18, 0x25, 0x109, 0x70bd22, 0xfffffffc, {0x5d}, [@nested={0x4, 0x14d}]}, 0x18}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200))
mount$bpf(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0x23, 0x5, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

1m2.373731501s ago: executing program 3 (id=6358):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f00000000c0), 0xb9)

1m2.373493366s ago: executing program 3 (id=6359):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0xe}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

1m2.373233969s ago: executing program 3 (id=6360):
mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0)

1m2.296298061s ago: executing program 3 (id=6361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880180001801400108004000b8008000100ac1414bb04004e00080002"], 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008094)

54.978299616s ago: executing program 39 (id=6319):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33)

47.134807251s ago: executing program 40 (id=6361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880180001801400108004000b8008000100ac1414bb04004e00080002"], 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008094)

1.089853652s ago: executing program 1 (id=7145):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x200, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

940.442781ms ago: executing program 1 (id=7148):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xba4ee230eabac5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3ab, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x3, 0x80, 0x1, 0x1}, 0x0, 0x1, r0, 0x0)
ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040))

880.240556ms ago: executing program 1 (id=7151):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x78, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f00000008c0), 0x43)

879.918732ms ago: executing program 9 (id=7153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x17, 0x0, 0x1, [@nested={0x4, 0x19}, @generic=')']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc040)

808.751413ms ago: executing program 1 (id=7154):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0xd, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20)
close(r1)

808.456604ms ago: executing program 9 (id=7155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x18, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)

808.223481ms ago: executing program 0 (id=7156):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

807.916843ms ago: executing program 1 (id=7157):
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}, 0x0)

721.116161ms ago: executing program 1 (id=7158):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x11, 0xa, 0xe, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040080)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc40, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe)

720.745534ms ago: executing program 9 (id=7159):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0}}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xd0, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_DELAY_DIST={0xd, 0x2, "80d3898fbb602d80a8"}, @TCA_NETEM_LOSS={0x3a, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x44, 0x2, {0xfffffff9, 0x7, 0x1, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x9, 0xfffffffe}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffffc, 0x492c, 0x0, 0xffffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2c, 0x0, 0x1, 0x8, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0xc1b, 0x4, 0x8cbb, 0x1}}]}]}}}]}, 0x102}}, 0x4000010)

659.703432ms ago: executing program 0 (id=7160):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0xa, 0x2, 0x3a)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x9, 0x7fff, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x9a)

539.617562ms ago: executing program 9 (id=7161):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x1}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28)

498.263711ms ago: executing program 9 (id=7162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}]}]}, 0x2c}}, 0x0)

494.110131ms ago: executing program 0 (id=7163):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$key(0xf, 0x3, 0x2)
perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$kcm(0x22, 0x2, 0x21)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000100100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)

441.172467ms ago: executing program 9 (id=7164):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x32, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_clone(0x10c0280, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

123.403068ms ago: executing program 0 (id=7165):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

122.644997ms ago: executing program 0 (id=7166):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xd, &(0x7f00000000c0), 0x10)

0s ago: executing program 0 (id=7167):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x10, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xc, 0x522}, 0x105141, 0x4, 0x0, 0x7, 0x3, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0xffffffffffffd8d}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

kernel console output (not intermixed with test programs):

pe 2 family 0 port 6081 - 0
[  372.214996][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4335'.
[  372.348039][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.355483][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.402010][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.404558][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.501818][T16630] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4337'.
[  372.601229][T16646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.778298][T16658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4349'.
[  372.781848][T16658] netlink: 'syz.3.4349': attribute type 1 has an invalid length.
[  372.784859][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4349'.
[  374.065383][ T5001] Bluetooth: hci0: command tx timeout
[  375.405028][T16688] nftables ruleset with unbound set
[  375.436568][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4362'.
[  375.512817][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4365'.
[  375.534827][T16694] sysfs: Unknown parameter 'obj_type'
[  375.655288][T16704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.138938][ T5001] Bluetooth: hci0: command tx timeout
[  379.075340][T16728] netlink: 'syz.3.4377': attribute type 4 has an invalid length.
[  379.079168][T16728] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.4377'.
[  380.247965][T16741] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4382'.
[  380.451747][T16748] netlink: 'syz.5.4385': attribute type 39 has an invalid length.
[  380.814736][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4388'.
[  381.454921][T16763] netlink: 62619 bytes leftover after parsing attributes in process `syz.3.4392'.
[  381.755527][T16779] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4397'.
[  382.063398][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4405'.
[  382.068054][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4405'.
[  382.132217][T16800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4407'.
[  382.791273][T16836] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4422'.
[  382.995895][T16848] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4426'.
[  383.120532][T16860] netlink: 11910 bytes leftover after parsing attributes in process `syz.5.4431'.
[  383.153263][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4432'.
[  383.492356][T16882] netlink: 'syz.3.4440': attribute type 1 has an invalid length.
[  384.213890][T16896] netlink: 'syz.5.4445': attribute type 13 has an invalid length.
[  384.222177][T16896] gretap0: refused to change device tx_queue_len
[  384.224447][T16896] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  384.292633][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  384.295341][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  384.693789][T16914] netlink: 'syz.5.4454': attribute type 1 has an invalid length.
[  384.696850][T16914] netlink: 'syz.5.4454': attribute type 2 has an invalid length.
[  385.280400][T16936] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  385.441360][T16948] netlink: 'syz.3.4468': attribute type 13 has an invalid length.
[  385.991680][T16975] netlink: 'syz.5.4480': attribute type 4 has an invalid length.
[  386.011617][T16975] __nla_validate_parse: 6 callbacks suppressed
[  386.011632][T16975] netlink: 14552 bytes leftover after parsing attributes in process `syz.5.4480'.
[  386.281147][T16979] mac80211_hwsim hwsim19 ..c: renamed from wlan1
[  386.549965][   T33] audit: type=1107 audit(1778660413.021:5): pid=16981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  386.564362][T16982] sctp: [Deprecated]: syz.5.4483 (pid 16982) Use of struct sctp_assoc_value in delayed_ack socket option.
[  386.564362][T16982] Use struct sctp_sack_info instead
[  386.812794][T17001] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4492'.
[  386.816288][T17001] veth0_to_bond: default FDB implementation only supports local addresses
[  386.888228][T17005] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.4494'.
[  387.587594][T17031] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4506'.
[  388.317093][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4514'.
[  388.325309][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4514'.
[  388.657417][T17059] openvswitch: netlink: Key type 30 is not supported
[  388.925565][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4527'.
[  388.970288][T17081] netlink: 'syz.5.4530': attribute type 19 has an invalid length.
[  388.973247][T17081] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4530'.
[  389.083391][T17087] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4533'.
[  389.093386][T17087] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4533'.
[  389.260404][T17099] netlink: 'syz.3.4538': attribute type 15 has an invalid length.
[  389.822082][T17119] netlink: 'syz.5.4547': attribute type 10 has an invalid length.
[  389.832258][T17119] 8021q: adding VLAN 0 to HW filter on device team0
[  389.839984][T17119] bridge0: port 3(team0) entered blocking state
[  389.848999][T17119] bridge0: port 3(team0) entered disabled state
[  389.853446][T17119] team0: entered allmulticast mode
[  389.855599][T17119] team_slave_0: entered allmulticast mode
[  389.860541][T17119] team_slave_1: entered allmulticast mode
[  389.862790][T17119] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[  389.884800][T17119] team0: entered promiscuous mode
[  389.888518][T17119] team_slave_0: entered promiscuous mode
[  389.891583][T17119] team_slave_1: entered promiscuous mode
[  389.894358][T17119] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  390.033488][   T33] audit: type=1107 audit(1778660416.511:6): pid=17122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  390.985768][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  390.998236][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  391.006464][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  391.031492][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  391.046036][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  391.268410][ T5736] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.389914][ T5736] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.459489][T17134] gretap0 speed is unknown, defaulting to 1000
[  391.536655][ T5736] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.595553][T17160] netlink: 'syz.3.4561': attribute type 27 has an invalid length.
[  391.602438][T17160] netlink: 'syz.3.4561': attribute type 3 has an invalid length.
[  391.618103][T17160] __nla_validate_parse: 1 callbacks suppressed
[  391.618244][T17160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4561'.
[  391.645750][ T5736] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.872110][ T5736] bridge_slave_1: left allmulticast mode
[  391.875645][ T5736] bridge_slave_1: left promiscuous mode
[  391.879266][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.936158][ T5736] bridge_slave_0: left allmulticast mode
[  391.938518][ T5736] bridge_slave_0: left promiscuous mode
[  391.941340][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.213878][ T5736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.219505][ T5736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.225509][ T5736] bond0 (unregistering): Released all slaves
[  392.959545][ T5357] 8021q: adding VLAN 0 to HW filter on device eth17
[  393.070018][T17134] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.073317][T17134] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.083163][T17134] bridge_slave_0: entered allmulticast mode
[  393.086441][T17134] bridge_slave_0: entered promiscuous mode
[  393.096212][T17134] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.099878][T17134] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.104531][T17134] bridge_slave_1: entered allmulticast mode
[  393.144883][T17134] bridge_slave_1: entered promiscuous mode
[  393.167463][   T54] Bluetooth: hci3: command tx timeout
[  393.539076][ T5736] hsr_slave_0: left promiscuous mode
[  393.558450][ T5736] hsr_slave_1: left promiscuous mode
[  393.561075][ T5736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.563863][ T5736] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.575019][ T5736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.580040][ T5736] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.590969][ T5736] veth1_macvtap: left promiscuous mode
[  393.593595][ T5736] veth0_macvtap: left promiscuous mode
[  393.597947][ T5736] veth1_vlan: left promiscuous mode
[  393.602360][ T5736] veth0_vlan: left promiscuous mode
[  393.751146][T17231] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4584'.
[  393.754652][T17231] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4584'.
[  393.946946][ T5736] team0 (unregistering): Port device team_slave_1 removed
[  393.962933][ T5736] team0 (unregistering): Port device team_slave_0 removed
[  394.179221][ T5357] 8021q: adding VLAN 0 to HW filter on device eth18
[  394.203564][T17134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.220135][T17134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.267525][T17248] netlink: 'syz.3.4592': attribute type 12 has an invalid length.
[  394.276211][T17134] team0: Port device team_slave_0 added
[  394.286629][T17134] team0: Port device team_slave_1 added
[  394.370775][T17134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.379775][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.395491][T17253] netlink: 'syz.3.4593': attribute type 27 has an invalid length.
[  394.399551][T17134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.407131][T17134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.409863][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.420919][T17134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.529150][T17134] hsr_slave_0: entered promiscuous mode
[  394.534406][T17134] hsr_slave_1: entered promiscuous mode
[  394.541887][T17134] debugfs: 'hsr0' already exists in 'hsr'
[  394.545504][T17134] Cannot create hsr debugfs directory
[  395.014638][T17134] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  395.052379][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  395.065594][T17134] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  395.082157][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  395.092315][T17134] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  395.106834][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4603'.
[  395.114927][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  395.126213][T17134] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  395.150275][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  395.184243][ T5357] 8021q: adding VLAN 0 to HW filter on device eth19
[  395.248469][   T54] Bluetooth: hci3: command tx timeout
[  395.344572][T17134] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.384368][T17134] 8021q: adding VLAN 0 to HW filter on device team0
[  395.406133][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.409051][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.441275][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.444138][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.532686][T17310] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.4612'.
[  395.609118][   T54] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  395.705948][ T5357] 8021q: adding VLAN 0 to HW filter on device eth20
[  395.912684][T17134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.054443][T17134] veth0_vlan: entered promiscuous mode
[  396.061187][T17134] veth1_vlan: entered promiscuous mode
[  396.085314][T17134] veth0_macvtap: entered promiscuous mode
[  396.093458][T17134] veth1_macvtap: entered promiscuous mode
[  396.110767][T17134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.121966][T17134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.131049][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.140459][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.147149][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.153250][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.242377][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.249245][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.278511][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.281649][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.552221][T17368] gretap0 speed is unknown, defaulting to 1000
[  397.042382][T17387] netlink: 'syz.7.4630': attribute type 37 has an invalid length.
[  397.327421][   T54] Bluetooth: hci3: command tx timeout
[  397.855158][T17391] netlink: 'syz.3.4632': attribute type 29 has an invalid length.
[  397.862399][T17391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4632'.
[  398.453593][T17424] netlink: 'syz.7.4648': attribute type 9 has an invalid length.
[  398.462637][T17424] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.4648'.
[  398.680874][T17432] IPv6: Can't replace route, no match found
[  399.411512][   T54] Bluetooth: hci3: command tx timeout
[  399.446327][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4664'.
[  399.474710][T17461] netlink: 'syz.3.4664': attribute type 6 has an invalid length.
[  399.477988][T17461] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4664'.
[  399.514492][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4667'.
[  399.598790][T17470] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4667'.
[  400.075621][ T5658] bridge_slave_1: left allmulticast mode
[  400.154237][ T5658] bridge_slave_1: left promiscuous mode
[  400.156034][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.187785][ T5658] bridge_slave_0: left allmulticast mode
[  400.192169][ T5658] bridge_slave_0: left promiscuous mode
[  400.193941][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.283725][   T54] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4
[  400.421887][   T27] smbdirect: ib_dev[syz0] removed
[  400.481129][ T5658] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  400.555438][T17490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.591297][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.596339][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.604514][ T5658] bond0 (unregistering): Released all slaves
[  400.627983][ T9741] gretap0 speed is unknown, defaulting to 1000
[  400.629808][ T9741] infiniband syz0: ib_query_port failed (-19)
[  400.645928][T17494] netlink: 14556 bytes leftover after parsing attributes in process `syz.7.4677'.
[  400.685725][ T5658] m1: left promiscuous mode
[  400.787367][ T5658] tipc: Left network mode
[  400.902803][T17502] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4681'.
[  401.409845][ T1113] wlan1: Trigger new scan to find an IBSS to join
[  401.446806][ T5658] hsr_slave_0: left promiscuous mode
[  401.451970][ T5658] hsr_slave_1: left promiscuous mode
[  401.456769][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.461951][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.475582][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.478208][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.491912][ T5658] veth1_macvtap: left promiscuous mode
[  401.494144][ T5658] veth0_macvtap: left promiscuous mode
[  401.495842][ T5658] veth1_vlan: left promiscuous mode
[  401.751404][ T5658] team0 (unregistering): Port device team_slave_1 removed
[  401.761556][ T5658] team0 (unregistering): Port device team_slave_0 removed
[  402.018554][T17537] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.4688'.
[  402.616634][T17562] netlink: 'syz.7.4695': attribute type 1 has an invalid length.
[  402.657170][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4695'.
[  403.519620][T17621] netlink: 'syz.7.4713': attribute type 1 has an invalid length.
[  403.773555][T17632] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4716'.
[  403.834059][T17635] netlink: 'syz.3.4717': attribute type 3 has an invalid length.
[  403.838370][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4717'.
[  403.842176][T17635] netlink: 'syz.3.4717': attribute type 3 has an invalid length.
[  403.850218][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4717'.
[  403.854243][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4717'.
[  403.993793][T17639] xt_bpf: check failed: parse error
[  403.997386][   T54] Bluetooth: hci1: Malformed LE Event: 0x0d
[  404.449273][   T26] wlan1: Trigger new scan to find an IBSS to join
[  404.996221][T17665] netlink: 'syz.5.4729': attribute type 1 has an invalid length.
[  405.003632][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4729'.
[  405.200731][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4734'.
[  405.205461][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4737'.
[  405.472584][   T54] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8
[  405.842949][ T3299] wlan1: Creating new IBSS network, BSSID a6:bc:77:26:cf:5d
[  406.424740][T17724] netlink: 'syz.3.4754': attribute type 21 has an invalid length.
[  406.441761][T17726] tmpfs: Bad value for 'mode'
[  406.442819][T17724] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4754'.
[  406.448611][T17724] netlink: 'syz.3.4754': attribute type 4 has an invalid length.
[  406.756620][T17743] netlink: 'syz.5.4761': attribute type 6 has an invalid length.
[  406.827659][T17746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4762'.
[  409.807112][T17770] netlink: 'syz.5.4767': attribute type 10 has an invalid length.
[  409.811414][T17770] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4767'.
[  410.175558][T17783] syzkaller0: entered promiscuous mode
[  410.177805][T17783] syzkaller0: entered allmulticast mode
[  410.380027][T17792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4772'.
[  412.739096][T17790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.882414][T17822] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4785'.
[  413.886719][T17822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.660400][T17134] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  414.671708][T17134] CPU: 0 UID: 0 PID: 17134 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  414.671731][T17134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  414.671741][T17134] Call Trace:
[  414.671747][T17134]  <TASK>
[  414.671753][T17134]  dump_stack_lvl+0xe8/0x150
[  414.671776][T17134]  dump_header+0xd3/0x4c0
[  414.671800][T17134]  oom_kill_process+0x3ab/0x970
[  414.671825][T17134]  out_of_memory+0x106c/0x1410
[  414.671844][T17134]  ? try_charge_memcg+0xbb9/0x1570
[  414.671861][T17134]  ? __pfx___mutex_lock+0x10/0x10
[  414.671882][T17134]  ? __pfx_out_of_memory+0x10/0x10
[  414.671900][T17134]  ? do_raw_spin_unlock+0x4d/0x210
[  414.671947][T17134]  try_charge_memcg+0xc77/0x1570
[  414.671977][T17134]  ? __pfx_try_charge_memcg+0x10/0x10
[  414.671990][T17134]  ? percpu_ref_tryget+0x15/0x180
[  414.672022][T17134]  ? charge_memcg+0x23/0x2b0
[  414.672040][T17134]  charge_memcg+0x1a2/0x2b0
[  414.672056][T17134]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  414.672070][T17134]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  414.672087][T17134]  __swap_cache_prepare_and_add+0xdc/0x700
[  414.672112][T17134]  ? page_rmappable_folio+0x9a/0x170
[  414.672135][T17134]  swap_cache_alloc_folio+0xf1/0x240
[  414.672157][T17134]  swap_cluster_readahead+0x355/0x670
[  414.672181][T17134]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  414.672212][T17134]  ? get_vma_policy+0x27b/0x3c0
[  414.672230][T17134]  swapin_readahead+0x196/0xc50
[  414.672252][T17134]  ? swap_table_get+0x1e/0x260
[  414.672274][T17134]  ? __pfx_swapin_readahead+0x10/0x10
[  414.672295][T17134]  ? swap_table_get+0x1e/0x260
[  414.672311][T17134]  ? swap_table_get+0x1e/0x260
[  414.672351][T17134]  ? swap_table_get+0x1e/0x260
[  414.672371][T17134]  ? swap_table_get+0x216/0x260
[  414.672390][T17134]  ? swap_cache_get_folio+0x2e4/0x2f0
[  414.672414][T17134]  do_swap_page+0x555/0x5120
[  414.672438][T17134]  ? __pte_offset_map+0x29/0x240
[  414.672458][T17134]  ? __pte_offset_map+0x29/0x240
[  414.672485][T17134]  ? do_swap_page+0x128/0x5120
[  414.672502][T17134]  ? __pfx_do_swap_page+0x10/0x10
[  414.672519][T17134]  ? __pte_offset_map+0x1ae/0x240
[  414.672541][T17134]  ? pte_offset_map_rw_nolock+0xea/0x160
[  414.672563][T17134]  handle_mm_fault+0x12d2/0x3170
[  414.672594][T17134]  ? handle_mm_fault+0xee/0x3170
[  414.672619][T17134]  ? __pfx_handle_mm_fault+0x10/0x10
[  414.672637][T17134]  ? lock_vma_under_rcu+0x45a/0x500
[  414.672676][T17134]  do_user_addr_fault+0xa73/0x1340
[  414.672699][T17134]  ? rcu_is_watching+0x15/0xb0
[  414.672716][T17134]  ? trace_page_fault_user+0x84/0x1e0
[  414.672733][T17134]  exc_page_fault+0x6a/0xc0
[  414.672750][T17134]  asm_exc_page_fault+0x26/0x30
[  414.672765][T17134] RIP: 0033:0x7f84b4f5d60e
[  414.672781][T17134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  414.672793][T17134] RSP: 002b:00007ffde1bf92d8 EFLAGS: 00010246
[  414.672807][T17134] RAX: 0000000000000000 RBX: 000055555727e500 RCX: 00007f84b4f5d60e
[  414.672816][T17134] RDX: 00007ffde1bf9330 RSI: 0000000000000000 RDI: 0000000000000000
[  414.672824][T17134] RBP: 00007ffde1bf939c R08: 0000000000000000 R09: 0000000000000000
[  414.672833][T17134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  414.672842][T17134] R13: 00000000000927c0 R14: 0000000000065096 R15: 00007ffde1bf93f0
[  414.672864][T17134]  </TASK>
[  414.675709][T17134] memory: usage 307200kB, limit 307200kB, failcnt 135
[  414.809043][T17134] memory+swap: usage 307316kB, limit 9007199254740988kB, failcnt 0
[  414.812288][T17134] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  414.815197][T17134] Memory cgroup stats for /syz7:
[  414.815298][T17134] cache 0
[  414.819590][T17134] rss 0
[  414.820792][T17134] rss_huge 0
[  414.822009][T17134] shmem 0
[  414.823265][T17134] mapped_file 0
[  414.824619][T17134] dirty 0
[  414.825889][T17134] writeback 0
[  414.827155][T17134] workingset_refault_anon 1
[  414.829147][T17134] workingset_refault_file 0
[  414.831125][T17134] swap 118784
[  414.832701][T17134] swapcached 143360
[  414.834405][T17134] pgpgin 35213
[  414.835714][T17134] pgpgout 35210
[  414.837173][T17134] pgfault 7840
[  414.849092][T17134] pgmajfault 0
[  414.850440][T17134] inactive_anon 0
[  414.855934][T17134] active_anon 12288
[  414.857599][T17134] inactive_file 0
[  414.860803][T17134] active_file 0
[  414.863166][T17134] unevictable 0
[  414.864655][T17134] hierarchical_memory_limit 314572800
[  414.866867][T17134] hierarchical_memsw_limit 9223372036854771712
[  414.869431][T17134] total_cache 0
[  414.870851][T17134] total_rss 0
[  414.872185][T17134] total_rss_huge 0
[  414.873631][T17134] total_shmem 0
[  414.874973][T17134] total_mapped_file 0
[  414.876517][T17134] total_dirty 0
[  414.878679][T17134] total_writeback 0
[  414.880629][T17134] total_workingset_refault_anon 1
[  414.882794][T17134] total_workingset_refault_file 0
[  414.885091][T17134] total_swap 118784
[  414.890730][T17134] total_swapcached 143360
[  414.894118][T17134] total_pgpgin 35213
[  414.916053][T17134] total_pgpgout 35210
[  414.917974][T17134] total_pgfault 7840
[  414.920307][T17134] total_pgmajfault 0
[  414.923142][T17134] total_inactive_anon 0
[  414.926178][T17134] total_active_anon 12288
[  414.929448][T17134] total_inactive_file 0
[  414.931906][T17134] total_active_file 0
[  414.933761][T17134] total_unevictable 0
[  414.935748][T17134] anon_cost 0
[  414.937142][T17134] file_cost 0
[  414.938774][T17134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4787,pid=17825,uid=0
[  414.944773][T17134] Memory cgroup out of memory: Killed process 17825 (syz.7.4787) total-vm:104280kB, anon-rss:1240kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  415.148477][T17845] netlink: 1735 bytes leftover after parsing attributes in process `syz.5.4795'.
[  415.155469][T17849] openvswitch: netlink: Missing key (keys=800040, expected=2000)
[  416.260825][ T5658] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.349079][ T5001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  416.359839][ T5001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  416.363658][ T5001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  416.367075][ T5001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  416.370415][ T5001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  416.443698][ T5658] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.570809][ T5658] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.688411][ T5658] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.056432][ T5658] bridge_slave_1: left allmulticast mode
[  417.063842][ T5658] bridge_slave_1: left promiscuous mode
[  417.067753][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.079411][ T5658] bridge_slave_0: left allmulticast mode
[  417.092641][ T5658] bridge_slave_0: left promiscuous mode
[  417.102778][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.545783][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  417.552759][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  417.556597][ T5658] bond0 (unregistering): Released all slaves
[  417.562448][T17915] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4823'.
[  417.571084][ T5357] 8021q: adding VLAN 0 to HW filter on device eth21
[  417.657816][T17929] netlink: 'syz.3.4828': attribute type 1 has an invalid length.
[  417.934172][ T5357] 8021q: adding VLAN 0 to HW filter on device eth22
[  418.079757][T17893] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.085182][T17893] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.089912][T17893] bridge_slave_0: entered allmulticast mode
[  418.095997][T17893] bridge_slave_0: entered promiscuous mode
[  418.106760][ T5658] hsr_slave_0: left promiscuous mode
[  418.111260][ T5658] hsr_slave_1: left promiscuous mode
[  418.114052][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.116866][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.121213][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.124073][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.142310][ T5658] veth1_macvtap: left promiscuous mode
[  418.144474][ T5658] veth0_macvtap: left promiscuous mode
[  418.146630][ T5658] veth1_vlan: left promiscuous mode
[  418.149309][ T5658] veth0_vlan: left promiscuous mode
[  418.406542][ T5658] team0 (unregistering): Port device team_slave_1 removed
[  418.416377][ T5658] team0 (unregistering): Port device team_slave_0 removed
[  418.447505][   T54] Bluetooth: hci0: command tx timeout
[  418.533143][T17893] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.536264][T17893] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.540790][T17893] bridge_slave_1: entered allmulticast mode
[  418.546412][T17893] bridge_slave_1: entered promiscuous mode
[  418.623297][T17893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.636487][T17893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.743815][T17893] team0: Port device team_slave_0 added
[  418.774296][T17893] team0: Port device team_slave_1 added
[  418.828782][T17893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.831356][T17893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.840758][T17893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.845672][T17893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.858485][T17893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.869762][T17893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.977064][T17893] hsr_slave_0: entered promiscuous mode
[  418.981887][T17893] hsr_slave_1: entered promiscuous mode
[  419.078197][ T5357] 8021q: adding VLAN 0 to HW filter on device eth23
[  419.225202][T17979] syzkaller0: entered promiscuous mode
[  419.713268][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4844'.
[  420.533766][   T54] Bluetooth: hci0: command tx timeout
[  421.567936][ T5357] 8021q: adding VLAN 0 to HW filter on device eth24
[  421.634442][T18006] netlink: 'syz.5.4851': attribute type 6 has an invalid length.
[  421.729545][T17893] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  421.755668][T17893] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  421.765997][T17893] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  421.774366][T17893] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  421.776948][T17893] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  421.785436][T17893] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  421.793780][T17893] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  421.801799][T17893] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  421.941708][T17893] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.962156][T17893] 8021q: adding VLAN 0 to HW filter on device team0
[  421.970747][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.973508][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.984657][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.987323][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.276927][T17893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.597467][T17893] veth0_vlan: entered promiscuous mode
[  422.605962][T17893] veth1_vlan: entered promiscuous mode
[  422.607994][   T54] Bluetooth: hci0: command tx timeout
[  422.644813][T17893] veth0_macvtap: entered promiscuous mode
[  422.652570][T17893] veth1_macvtap: entered promiscuous mode
[  422.665160][T17893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.678526][T17893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.686624][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.691727][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.703697][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.710024][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.808945][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.819407][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.863970][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.870033][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.115636][T18067] C: renamed from veth1_to_team
[  423.126548][T18067] netlink: 'syz.3.4866': attribute type 1 has an invalid length.
[  423.139301][T18067] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4866'.
[  423.284949][T18073] syzkaller0: entered promiscuous mode
[  423.286886][T18073] syzkaller0: entered allmulticast mode
[  423.321564][T18073] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4869'.
[  423.626369][T18088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  423.753635][T18097] nftables ruleset with unbound chain
[  423.863094][T18101] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4879'.
[  424.170897][T18117] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4885'.
[  424.621283][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4893'.
[  424.697338][   T54] Bluetooth: hci0: command tx timeout
[  424.743901][T18143] syzkaller0: entered promiscuous mode
[  424.750686][T18143] syzkaller0: entered allmulticast mode
[  425.092412][T18152] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4901'.
[  425.112957][T18154] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4902'.
[  425.269122][T18157] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.346703][T18157] bridge_slave_0 (unregistering): left allmulticast mode
[  425.355489][T18157] bridge_slave_0 (unregistering): left promiscuous mode
[  425.360454][T18157] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.647696][T18175] syzkaller0: tun_chr_ioctl cmd 2148553947
[  426.964129][T18232] netlink: 'syz.3.4937': attribute type 2 has an invalid length.
[  427.008892][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4938'.
[  427.052932][T18239] netlink: 14752 bytes leftover after parsing attributes in process `syz.3.4941'.
[  427.061791][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4941'.
[  427.439848][T18268] netlink: 'syz.3.4954': attribute type 1 has an invalid length.
[  427.672839][T18283] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  427.808618][T18291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.446500][T18339] mac80211_hwsim hwsim42 : renamed from wlan0
[  429.589662][T18359] __nla_validate_parse: 5 callbacks suppressed
[  429.589680][T18359] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4994'.
[  429.592523][T18360] netlink: 'syz.3.4993': attribute type 1 has an invalid length.
[  429.852637][T18380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.306374][T18415] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  430.412436][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5025'.
[  430.459990][T18432] netlink: 'syz.3.5027': attribute type 2 has an invalid length.
[  430.462372][T18432] netlink: 'syz.3.5027': attribute type 1 has an invalid length.
[  430.465247][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5027'.
[  430.497125][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5028'.
[  433.939404][T18491] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.5045'.
[  433.999318][T18501] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5049'.
[  434.004362][T18501] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5049'.
[  434.009912][T18501] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5049'.
[  434.030646][T18504] openvswitch: netlink: Tunnel attr 163 out of range max 16
[  434.175614][T18522] netlink: 'syz.5.5055': attribute type 17 has an invalid length.
[  434.194276][T18522] 8021q: adding VLAN 0 to HW filter on device .`
[  434.203374][T18522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.291122][T18522] bond_slave_0: entered promiscuous mode
[  434.305556][T18522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.327838][T18522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.335774][T18522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  434.340147][T18522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.357750][T18522] veth1_macvtap: left promiscuous mode
[  434.365489][T18522] veth0_macvtap: entered promiscuous mode
[  434.375310][T18522] veth1_macvtap: entered promiscuous mode
[  434.383518][T18522] 8021q: adding VLAN 0 to HW filter on device 
[  434.388309][T18522] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  434.392422][T18522] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  434.707059][T18524] netlink: 'syz.5.5055': attribute type 4 has an invalid length.
[  434.712361][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.717574][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.720891][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.780105][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5058'.
[  434.824705][T18536] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.5059'.
[  435.184128][T18568] netlink: 'syz.3.5077': attribute type 1 has an invalid length.
[  435.566927][T18605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5092'.
[  435.573719][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5092'.
[  435.651983][T18609] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.5095'.
[  435.681582][T18611] netlink: 'syz.5.5094': attribute type 41 has an invalid length.
[  435.851153][T18631] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  435.855613][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5106'.
[  435.919253][T18637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5108'.
[  436.076757][T18654] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5116'.
[  436.288343][T18664] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.5120'.
[  436.297464][T18664] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.5120'.
[  436.372959][T18668] netlink: 'syz.5.5121': attribute type 29 has an invalid length.
[  436.375790][T18666] netlink: 'syz.5.5121': attribute type 29 has an invalid length.
[  436.380055][T18668] netlink: 'syz.5.5121': attribute type 29 has an invalid length.
[  438.054199][T18707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.113435][T18714] netlink: 'syz.5.5142': attribute type 4 has an invalid length.
[  438.173052][T18716] netlink: 'syz.5.5142': attribute type 2 has an invalid length.
[  438.176276][T18716] tipc: Started in network mode
[  438.178904][T18716] tipc: Node identity ffffffff, cluster identity 4711
[  438.181119][T18716] tipc: Node number set to 4294967295
[  438.186450][T18714] netlink: 'syz.5.5142': attribute type 23 has an invalid length.
[  438.403075][T18732] veth0_vlan: entered allmulticast mode
[  438.444303][T18732] veth0_vlan: left promiscuous mode
[  438.450529][T18732] veth0_vlan: entered promiscuous mode
[  438.558053][T18736] IPv6: NLM_F_CREATE should be specified when creating new route
[  438.560579][T18736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  438.563169][T18736] IPv6: NLM_F_CREATE should be set when creating new route
[  438.836657][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  438.840625][T18754] batman_adv: batadv0: Removing interface: batadv_slave_0
[  438.874882][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  438.878608][T18754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.889729][T18818] __nla_validate_parse: 5 callbacks suppressed
[  439.889921][T18818] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5191'.
[  439.905010][T18821] netlink: 'syz.5.5192': attribute type 6 has an invalid length.
[  439.911046][T18821] netlink: 360 bytes leftover after parsing attributes in process `syz.5.5192'.
[  439.917079][T18823] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5193'.
[  440.064337][T18838] netlink: 4456 bytes leftover after parsing attributes in process `syz.8.5200'.
[  440.119679][T18847] netlink: 'syz.5.5203': attribute type 6 has an invalid length.
[  440.123050][T18847] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5203'.
[  441.250797][T18886] netlink: 'syz.8.5223': attribute type 7 has an invalid length.
[  441.253013][T18886] netlink: 'syz.8.5223': attribute type 8 has an invalid length.
[  441.255774][T18886] netlink: 209816 bytes leftover after parsing attributes in process `syz.8.5223'.
[  441.293764][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5224'.
[  441.404051][T18894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5225'.
[  442.386027][T18911] netlink: 196 bytes leftover after parsing attributes in process `syz.8.5233'.
[  442.472457][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5236'.
[  443.085944][T18921] netlink: 'syz.5.5238': attribute type 3 has an invalid length.
[  443.200076][T18947] syzkaller0: entered promiscuous mode
[  445.554807][T18958] __nla_validate_parse: 1 callbacks suppressed
[  445.554817][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5254'.
[  445.559437][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5254'.
[  445.562092][T18958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5254'.
[  445.729685][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  445.732199][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  445.952517][T18991] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.5265'.
[  446.050961][T18998] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5269'.
[  446.233594][T19003] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5271'.
[  446.278827][T19006] netlink: 'syz.8.5273': attribute type 21 has an invalid length.
[  446.283330][T19006] netlink: 'syz.8.5273': attribute type 4 has an invalid length.
[  446.288170][T19006] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5273'.
[  446.302858][T19009] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5274'.
[  446.574140][T19029] netlink: 'syz.3.5283': attribute type 10 has an invalid length.
[  446.584496][T19029] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  446.751382][T19042] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5284'.
[  446.755269][T19031] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5284'.
[  447.255516][T19066] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  448.863446][T19155] netlink: 'syz.3.5343': attribute type 1 has an invalid length.
[  449.460675][T19174] ': renamed from hsr0 (while UP)
[  449.545589][T19180] IPv6: NLM_F_CREATE should be specified when creating new route
[  449.674727][   T33] audit: type=1107 audit(1778660476.151:7): pid=19189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  449.815099][   T54] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  449.949406][T19205] netlink: 'syz.8.5366': attribute type 9 has an invalid length.
[  450.323451][T19236] netlink: 'syz.3.5377': attribute type 29 has an invalid length.
[  450.326531][T19236] netlink: 'syz.3.5377': attribute type 29 has an invalid length.
[  451.371414][T19251] netlink: 'syz.8.5383': attribute type 2 has an invalid length.
[  451.380182][T19251] netlink: 'syz.8.5383': attribute type 1 has an invalid length.
[  451.555816][T19267] __nla_validate_parse: 14 callbacks suppressed
[  451.555827][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5392'.
[  451.563003][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5392'.
[  452.011001][T19287] netlink: 'syz.3.5400': attribute type 8 has an invalid length.
[  452.014197][T19287] netem: change failed
[  452.313345][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5405'.
[  452.316781][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5405'.
[  452.472941][T19309] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5410'.
[  452.482537][T19315] netlink: 'syz.8.5413': attribute type 2 has an invalid length.
[  452.581879][T19318] bridge0: port 3(ip6gretap0) entered blocking state
[  452.584629][T19318] bridge0: port 3(ip6gretap0) entered disabled state
[  452.589753][T19318] ip6gretap0: entered allmulticast mode
[  452.601616][T19318] ip6gretap0: entered promiscuous mode
[  452.619016][T19318] bridge0: port 3(ip6gretap0) entered blocking state
[  452.623141][T19318] bridge0: port 3(ip6gretap0) entered forwarding state
[  452.777695][T19332] netlink: 'syz.3.5421': attribute type 3 has an invalid length.
[  452.783815][T19332] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.5421'.
[  453.245358][T19364] netlink: 'syz.5.5435': attribute type 2 has an invalid length.
[  453.262147][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5435'.
[  453.409089][T19366] netlink: 'syz.8.5437': attribute type 2 has an invalid length.
[  453.412265][T19366] netlink: 'syz.8.5437': attribute type 8 has an invalid length.
[  453.414854][T19366] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5437'.
[  453.578939][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5449'.
[  453.693470][T19403] netlink: 'syz.3.5453': attribute type 1 has an invalid length.
[  453.699053][T19403] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5453'.
[  454.097746][   T54] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[  454.622375][T19461] netlink: 'syz.5.5480': attribute type 21 has an invalid length.
[  454.895686][T19454] wg1 speed is unknown, defaulting to 1000
[  455.012944][T19454] wg1 speed is unknown, defaulting to 1000
[  455.109437][T19454] wg1 speed is unknown, defaulting to 1000
[  455.585931][T19454] infiniband syz2: set active
[  455.587770][ T5659] wg1 speed is unknown, defaulting to 1000
[  455.591596][T19454] infiniband syz2: added wg1
[  455.596706][T19454] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  455.602993][T19454] infiniband syz2: Couldn't open port 1
[  455.610792][T19454] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  455.616789][T19454] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  455.623759][T19454] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  455.628198][T19497] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  455.679720][T19454] RDS/IB: syz2: added
[  455.687873][T19454] smc: adding ib device syz2 with port count 1
[  455.697057][T19454] smc:    ib device syz2 port 1 has no pnetid
[  455.705713][ T5659] wg1 speed is unknown, defaulting to 1000
[  455.713614][T19454] wg1 speed is unknown, defaulting to 1000
[  456.079786][T19454] wg1 speed is unknown, defaulting to 1000
[  456.400542][T19454] wg1 speed is unknown, defaulting to 1000
[  456.585053][T19517] netlink: 'syz.5.5503': attribute type 21 has an invalid length.
[  456.590015][T19517] IPv6: NLM_F_CREATE should be specified when creating new route
[  456.592844][T19517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.595639][T19517] IPv6: NLM_F_CREATE should be set when creating new route
[  456.598740][T19517] IPv6: NLM_F_CREATE should be set when creating new route
[  456.601579][T19517] IPv6: NLM_F_CREATE should be set when creating new route
[  456.610179][T19517] netlink: 'syz.5.5503': attribute type 21 has an invalid length.
[  456.613107][T19517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.997161][T19504] syzkaller0: entered promiscuous mode
[  456.999632][T19504] syzkaller0: entered allmulticast mode
[  458.057488][ T5001] Bluetooth: hci1: command 0x0406 tx timeout
[  459.424604][   T54] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  460.053256][T19564] can: request_module (can-proto-4) failed.
[  460.455129][T19574] __nla_validate_parse: 7 callbacks suppressed
[  460.455140][T19574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5523'.
[  460.656859][T19589] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5532'.
[  461.224770][T19638] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  461.672061][T19664] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5565'.
[  462.808269][T19700] netlink: 'syz.5.5581': attribute type 2 has an invalid length.
[  462.938930][T19709] openvswitch: netlink: IPv6 tunnel dst address is zero
[  463.359351][T19715] : entered promiscuous mode
[  464.039336][T19752] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5603'.
[  464.175631][T19764] openvswitch: netlink: IP tunnel dst address not specified
[  464.207134][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5610'.
[  464.467544][T19789] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  465.435256][T19811] netlink: 'syz.8.5628': attribute type 1 has an invalid length.
[  465.738770][T19847] netlink: 'syz.3.5643': attribute type 22 has an invalid length.
[  465.741058][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5643'.
[  465.930721][T19860] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5649'.
[  466.311310][T19893] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5661'.
[  466.830284][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  466.832429][   T54] Bluetooth: hci2: connection err: -111
[  467.600555][T19944] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5677'.
[  467.637867][T19948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5679'.
[  467.644902][T19948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5679'.
[  467.656137][T19948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5679'.
[  467.768980][T19961] netlink: 'syz.8.5685': attribute type 21 has an invalid length.
[  467.773675][T19961] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5685'.
[  467.914389][T19975] netlink: 'syz.3.5691': attribute type 1 has an invalid length.
[  467.979313][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5691'.
[  468.140398][T19983] netlink: zone id is out of range
[  468.142719][T19983] netlink: zone id is out of range
[  468.144875][T19983] netlink: zone id is out of range
[  468.146986][T19983] netlink: zone id is out of range
[  468.154102][T19983] sctp: [Deprecated]: syz.3.5693 (pid 19983) Use of struct sctp_assoc_value in delayed_ack socket option.
[  468.154102][T19983] Use struct sctp_sack_info instead
[  468.450479][T19989] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.5696'.
[  468.483670][T19993] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  468.576476][T20004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.112765][T20101] pim6reg1: entered promiscuous mode
[  470.114482][T20101] pim6reg1: entered allmulticast mode
[  470.268415][T20106] netlink: 'syz.8.5746': attribute type 10 has an invalid length.
[  470.272518][T20106] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  470.278177][T20106] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  470.283146][T20106] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  471.039326][T20133] __nla_validate_parse: 3 callbacks suppressed
[  471.039338][T20133] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.5759'.
[  471.051402][T20133] openvswitch: netlink: Missing key (keys=40, expected=100)
[  471.399569][T20149] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5767'.
[  471.534427][T20159] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5770'.
[  471.607332][T20164] netlink: 'syz.3.5772': attribute type 21 has an invalid length.
[  471.610406][T20164] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5772'.
[  471.711509][T20168] syzkaller0: entered promiscuous mode
[  471.714015][T20168] syzkaller0: entered allmulticast mode
[  471.975138][T20182] netlink: 'syz.8.5780': attribute type 21 has an invalid length.
[  471.977745][T20181] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.5781'.
[  471.987898][T20181] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  474.027464][T20186] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.5783'.
[  474.264745][T20200] openvswitch: netlink: IP tunnel dst address not specified
[  474.642111][T20217] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  474.985231][T20221] netlink: 'syz.3.5799': attribute type 6 has an invalid length.
[  474.990740][T20221] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.5799'.
[  474.994989][T20221] netlink: 'syz.3.5799': attribute type 1 has an invalid length.
[  475.110895][   T55] block nbd2: Receive control failed (result -107)
[  475.152610][T20221] nbd2: detected capacity change from 0 to 339754496
[  475.174351][T20230] block nbd2: Dead connection, failed to find a fallback
[  475.183782][T20230] block nbd2: shutting down sockets
[  475.185733][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.193536][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.197600][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.200660][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.203448][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.210590][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.213299][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.216111][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.221161][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.226958][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.231100][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.236324][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.241368][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.252754][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.259975][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.264421][T20236] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  475.268784][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.281438][T20230] ldm_validate_partition_table(): Disk read failed.
[  475.286680][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.293582][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.296245][T20230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  475.301263][T20230] Buffer I/O error on dev nbd2, logical block 0, async page read
[  475.304057][T20230] Dev nbd2: unable to read RDB block 0
[  475.315975][T20230]  nbd2: unable to read partition table
[  475.343110][T20230] ldm_validate_partition_table(): Disk read failed.
[  475.349214][T20230] Dev nbd2: unable to read RDB block 0
[  475.352647][T20230]  nbd2: unable to read partition table
[  475.453261][T20249] tap0: tun_chr_ioctl cmd 1074025681
[  475.881285][T20272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  476.043909][T20285] netlink: 'syz.8.5827': attribute type 12 has an invalid length.
[  476.047060][T20285] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5827'.
[  476.112671][T20288] pim6reg1: entered promiscuous mode
[  476.115816][T20288] pim6reg1: entered allmulticast mode
[  476.171251][T20283] netlink: 'syz.3.5826': attribute type 29 has an invalid length.
[  476.175016][T20286] netlink: 'syz.3.5826': attribute type 29 has an invalid length.
[  476.182277][T20283] netlink: 'syz.3.5826': attribute type 29 has an invalid length.
[  476.437549][T20302] netlink: 'syz.5.5835': attribute type 4 has an invalid length.
[  476.449402][T20302] netlink: 'syz.5.5835': attribute type 2 has an invalid length.
[  476.460312][T20302] netlink: 5156 bytes leftover after parsing attributes in process `syz.5.5835'.
[  477.497843][   T31] wlan1: Trigger new scan to find an IBSS to join
[  478.094262][T20361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5860'.
[  478.098674][T20361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5860'.
[  478.267720][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5864'.
[  480.447626][   T26] wlan1: Trigger new scan to find an IBSS to join
[  481.253090][T20394] netlink: 34 bytes leftover after parsing attributes in process `syz.3.5873'.
[  481.269354][T20390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5871'.
[  481.286454][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5871'.
[  481.726347][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5885'.
[  481.806150][T20423] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5886'.
[  481.823870][T20425] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5887'.
[  481.880792][   T54] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7
[  481.957567][T20429] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.992260][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5891'.
[  482.054209][T20437] netlink: 'syz.3.5893': attribute type 13 has an invalid length.
[  482.109733][T20441] syzkaller0: entered promiscuous mode
[  482.112958][T20441] syzkaller0: entered allmulticast mode
[  482.400455][T20460] netlink: 'syz.3.5904': attribute type 2 has an invalid length.
[  482.406702][T20460] netlink: 'syz.3.5904': attribute type 3 has an invalid length.
[  482.437691][T20460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5904'.
[  482.479154][T20460] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5904'.
[  482.613799][T20478] netlink: 'syz.3.5913': attribute type 1 has an invalid length.
[  482.733728][T20485] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5915'.
[  482.969916][T20497] netlink: 'syz.8.5922': attribute type 2 has an invalid length.
[  482.974597][T20497] netlink: 'syz.8.5922': attribute type 2 has an invalid length.
[  482.984177][T20499] netlink: 'syz.5.5923': attribute type 16 has an invalid length.
[  482.996402][T20499] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5923'.
[  483.218735][T20507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5927'.
[  483.503087][   T31] wlan1: Trigger new scan to find an IBSS to join
[  483.684354][T20535] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5939'.
[  483.942045][   T31] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  484.037765][T20545] netlink: 'syz.5.5942': attribute type 9 has an invalid length.
[  484.357138][T20566] netlink: 'syz.3.5951': attribute type 11 has an invalid length.
[  485.323624][T20620] sctp: [Deprecated]: syz.3.5971 (pid 20620) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.323624][T20620] Use struct sctp_sack_info instead
[  485.353209][T20622] veth0_to_bond: entered promiscuous mode
[  485.453055][T20628] syzkaller0: entered promiscuous mode
[  485.458650][T20628] syzkaller0: entered allmulticast mode
[  485.579000][T20634] netlink: 'syz.8.5978': attribute type 10 has an invalid length.
[  485.585463][T20634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.602627][T20634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.624296][T20634] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link
[  485.723228][T20600] wg1 speed is unknown, defaulting to 1000
[  485.816868][T20644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.115477][T20657] netlink: 'syz.8.5988': attribute type 1 has an invalid length.
[  487.158916][T20693] __nla_validate_parse: 5 callbacks suppressed
[  487.158934][T20693] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6004'.
[  487.163573][T20693] netlink: 'syz.5.6004': attribute type 1 has an invalid length.
[  487.408266][T20704] netlink: 'syz.5.6010': attribute type 27 has an invalid length.
[  487.411625][T20704] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6010'.
[  487.452629][T20708] bpf: Bad value for 'mode'
[  487.762570][T20729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6022'.
[  487.783304][T20730] gretap0 speed is unknown, defaulting to 1000
[  487.785675][T20730] gretap0 speed is unknown, defaulting to 1000
[  487.833858][T20730] gretap0 speed is unknown, defaulting to 1000
[  487.862699][T20730] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  487.870617][T20730] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  487.876896][T20730] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  488.102650][T20737] netlink: 'syz.5.6024': attribute type 29 has an invalid length.
[  488.110044][T20730] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  488.120674][T20737] netlink: 'syz.5.6024': attribute type 29 has an invalid length.
[  488.305692][T20739] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6026'.
[  488.454533][T20730] gretap0 speed is unknown, defaulting to 1000
[  488.460495][T20730] gretap0 speed is unknown, defaulting to 1000
[  488.472044][T20730] gretap0 speed is unknown, defaulting to 1000
[  488.588255][T20755] IPv6: NLM_F_CREATE should be specified when creating new route
[  488.591362][T20755] IPv6: NLM_F_REPLACE set, but no existing node found!
[  488.847102][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6030'.
[  489.526191][T20797] netlink: 'syz.5.6050': attribute type 27 has an invalid length.
[  489.560028][T20799] netlink: 'syz.5.6051': attribute type 21 has an invalid length.
[  489.562563][T20799] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6051'.
[  489.565452][T20799] netlink: 'syz.5.6051': attribute type 1 has an invalid length.
[  489.812818][T20814] netlink: 'syz.5.6058': attribute type 33 has an invalid length.
[  489.824480][T20814] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6058'.
[  490.066898][T20826] netlink: 'syz.3.6064': attribute type 1 has an invalid length.
[  490.106939][T20828] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6065'.
[  490.414291][T17893] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  490.429854][T17893] CPU: 0 UID: 0 PID: 17893 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  490.429876][T17893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  490.429885][T17893] Call Trace:
[  490.429892][T17893]  <TASK>
[  490.429898][T17893]  dump_stack_lvl+0xe8/0x150
[  490.429920][T17893]  dump_header+0xd3/0x4c0
[  490.429945][T17893]  oom_kill_process+0x3ab/0x970
[  490.429970][T17893]  out_of_memory+0x106c/0x1410
[  490.429989][T17893]  ? try_charge_memcg+0xbb9/0x1570
[  490.430006][T17893]  ? __pfx___mutex_lock+0x10/0x10
[  490.430028][T17893]  ? __pfx_out_of_memory+0x10/0x10
[  490.430044][T17893]  ? do_raw_spin_unlock+0x4d/0x210
[  490.430071][T17893]  try_charge_memcg+0xc77/0x1570
[  490.430101][T17893]  ? __pfx_try_charge_memcg+0x10/0x10
[  490.430114][T17893]  ? percpu_ref_tryget+0x15/0x180
[  490.430152][T17893]  ? charge_memcg+0x23/0x2b0
[  490.430167][T17893]  charge_memcg+0x1a2/0x2b0
[  490.430180][T17893]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  490.430193][T17893]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  490.430209][T17893]  __swap_cache_prepare_and_add+0xdc/0x700
[  490.430232][T17893]  ? page_rmappable_folio+0x9a/0x170
[  490.430253][T17893]  swap_cache_alloc_folio+0xf1/0x240
[  490.430275][T17893]  swap_cluster_readahead+0x355/0x670
[  490.430300][T17893]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  490.430331][T17893]  ? get_vma_policy+0x27b/0x3c0
[  490.430349][T17893]  swapin_readahead+0x196/0xc50
[  490.430371][T17893]  ? swap_table_get+0x1e/0x260
[  490.430394][T17893]  ? __pfx_swapin_readahead+0x10/0x10
[  490.430416][T17893]  ? swap_table_get+0x1e/0x260
[  490.430433][T17893]  ? swap_table_get+0x1e/0x260
[  490.430450][T17893]  ? swap_table_get+0x1e/0x260
[  490.430469][T17893]  ? swap_table_get+0x216/0x260
[  490.430489][T17893]  ? swap_cache_get_folio+0x2e4/0x2f0
[  490.430514][T17893]  do_swap_page+0x555/0x5120
[  490.430538][T17893]  ? __pte_offset_map+0x29/0x240
[  490.430560][T17893]  ? __pte_offset_map+0x29/0x240
[  490.430587][T17893]  ? do_swap_page+0x128/0x5120
[  490.430606][T17893]  ? __pfx_do_swap_page+0x10/0x10
[  490.430622][T17893]  ? __pte_offset_map+0x1ae/0x240
[  490.430645][T17893]  ? pte_offset_map_rw_nolock+0xea/0x160
[  490.430668][T17893]  handle_mm_fault+0x12d2/0x3170
[  490.430699][T17893]  ? handle_mm_fault+0xee/0x3170
[  490.430725][T17893]  ? __pfx_handle_mm_fault+0x10/0x10
[  490.430743][T17893]  ? lock_vma_under_rcu+0x45a/0x500
[  490.430785][T17893]  do_user_addr_fault+0xa73/0x1340
[  490.430834][T17893]  ? rcu_is_watching+0x15/0xb0
[  490.430854][T17893]  ? trace_page_fault_user+0x84/0x1e0
[  490.430872][T17893]  exc_page_fault+0x6a/0xc0
[  490.430889][T17893]  asm_exc_page_fault+0x26/0x30
[  490.430903][T17893] RIP: 0033:0x7fcbe9f5d60e
[  490.430918][T17893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  490.430929][T17893] RSP: 002b:00007fff693c17f8 EFLAGS: 00010246
[  490.430941][T17893] RAX: 0000000000000000 RBX: 00005555858e4500 RCX: 00007fcbe9f5d60e
[  490.430951][T17893] RDX: 00007fff693c1850 RSI: 0000000000000000 RDI: 0000000000000000
[  490.430959][T17893] RBP: 00007fff693c18bc R08: 0000000000000000 R09: 0000000000000000
[  490.430967][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  490.430975][T17893] R13: 00000000000927c0 R14: 000000000007787d R15: 00007fff693c1910
[  490.430998][T17893]  </TASK>
[  490.431005][T17893] memory: usage 307200kB, limit 307200kB, failcnt 196
[  490.586146][T17893] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0
[  490.605622][T17893] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  490.623813][T17893] Memory cgroup stats for /syz8:
[  490.623923][T17893] cache 0
[  490.631741][T17893] rss 0
[  490.634609][T17893] rss_huge 0
[  490.635861][T17893] shmem 0
[  490.638888][T17893] mapped_file 0
[  490.640195][T17893] dirty 0
[  490.643432][T17893] writeback 0
[  490.648051][T17893] workingset_refault_anon 3
[  490.652875][T17893] workingset_refault_file 0
[  490.659354][T17893] swap 122880
[  490.660775][T17893] swapcached 147456
[  490.684430][T17893] pgpgin 15694
[  490.688911][T17893] pgpgout 15693
[  490.690245][T17893] pgfault 48250
[  490.697378][T17893] pgmajfault 3
[  490.698639][T17893] inactive_anon 0
[  490.700127][T17893] active_anon 4096
[  490.701576][T17893] inactive_file 0
[  490.703042][T17893] active_file 0
[  490.704419][T17893] unevictable 0
[  490.705828][T17893] hierarchical_memory_limit 314572800
[  490.718969][T17893] hierarchical_memsw_limit 9223372036854771712
[  490.722137][T17893] total_cache 0
[  490.723561][T17893] total_rss 0
[  490.729343][T17893] total_rss_huge 0
[  490.732514][T17893] total_shmem 0
[  490.733941][T17893] total_mapped_file 0
[  490.744395][T17893] total_dirty 0
[  490.745802][T17893] total_writeback 0
[  490.752712][T20849] netlink: 'syz.5.6074': attribute type 58 has an invalid length.
[  490.753612][T17893] total_workingset_refault_anon 3
[  490.759468][T20849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6074'.
[  490.765604][T17893] total_workingset_refault_file 0
[  490.771731][T17893] total_swap 122880
[  490.777298][T17893] total_swapcached 147456
[  490.780551][T17893] total_pgpgin 15694
[  490.781973][T17893] total_pgpgout 15693
[  490.785037][T17893] total_pgfault 48250
[  490.794617][T17893] total_pgmajfault 3
[  490.796172][T17893] total_inactive_anon 0
[  490.809756][T17893] total_active_anon 4096
[  490.813079][T17893] total_inactive_file 0
[  490.817494][T17893] total_active_file 0
[  490.820638][T17893] total_unevictable 0
[  490.825364][T17893] anon_cost 0
[  490.826674][T17893] file_cost 0
[  490.835131][T17893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6056,pid=20809,uid=0
[  490.850056][T17893] Memory cgroup out of memory: Killed process 20809 (syz.8.6056) total-vm:102232kB, anon-rss:1244kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  491.084490][T20859] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6077'.
[  491.654556][T20892] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  492.363466][T20956] __nla_validate_parse: 4 callbacks suppressed
[  492.363480][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6124'.
[  492.513101][T20958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'.
[  492.555089][T20962] can: request_module (can-proto-3) failed.
[  492.702827][T20976] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6132'.
[  492.706340][T20976] tc_dump_action: action bad kind
[  492.759624][T20978] syzkaller0: entered promiscuous mode
[  492.761801][T20978] syzkaller0: entered allmulticast mode
[  496.391355][T21000] bridge0: port 3(gretap0) entered disabled state
[  496.394094][T21000] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.401131][T21000] bridge0: entered allmulticast mode
[  496.592458][T21017] validate_nla: 2 callbacks suppressed
[  496.592474][T21017] netlink: 'syz.3.6150': attribute type 6 has an invalid length.
[  496.607432][T21017] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6150'.
[  496.786971][T21024] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6153'.
[  497.052808][T21031] : entered promiscuous mode
[  497.624502][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6166'.
[  498.556639][T21084] netlink: 'syz.3.6181': attribute type 1 has an invalid length.
[  498.940747][T21094] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6185'.
[  498.957366][T21094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  498.992566][T21096] netlink: 'syz.3.6187': attribute type 3 has an invalid length.
[  499.054968][T21098] netlink: 'syz.5.6188': attribute type 12 has an invalid length.
[  499.059555][T21098] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.6188'.
[  499.364877][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6193'.
[  500.540646][T21119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.015352][T21129] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6202'.
[  501.030287][T21129] unsupported nlmsg_type 40
[  501.783294][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6209'.
[  501.799230][T21144] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6209'.
[  502.247844][T21167] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 18
[  502.771267][   T54] Bluetooth: hci2: unexpected subevent 0x18 length: 150 > 19
[  502.774262][   T54] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  503.898839][T21240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6254'.
[  505.256035][T21281] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6272'.
[  505.926046][T21322] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6287'.
[  505.996612][T21322] veth1_to_bridge: entered allmulticast mode
[  506.079071][T21328] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6294'.
[  506.485405][T21345] : entered promiscuous mode
[  506.490478][T21345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  506.494066][T21345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  507.206600][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  507.208842][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  507.681464][T21355] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.6305'.
[  507.687519][T21355] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.6305'.
[  509.064129][   T54] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  512.280648][T21428] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6339'.
[  513.732993][ T5001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  513.739730][ T5001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  513.745560][ T5001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  513.748980][ T5001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  513.753726][ T5001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  514.216188][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6350'.
[  514.371147][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.442253][T21469] netem: incorrect ge model size
[  514.446349][T21469] netem: change failed
[  514.501611][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.558223][T21444] wg1 speed is unknown, defaulting to 1000
[  514.628393][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.969339][T21444] gretap0 speed is unknown, defaulting to 1000
[  515.656805][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.709520][T21444] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.713773][T21444] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.716514][T21444] bridge_slave_0: entered allmulticast mode
[  515.726638][T21444] bridge_slave_0: entered promiscuous mode
[  515.736701][T21444] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.745760][T21444] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.749504][T21444] bridge_slave_1: entered allmulticast mode
[  515.767829][T21444] bridge_slave_1: entered promiscuous mode
[  515.810213][ T5001] Bluetooth: hci3: command tx timeout
[  515.885209][T21444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.911682][T21444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.940149][T21490] openvswitch: netlink: IP tunnel dst address not specified
[  515.983133][T21444] team0: Port device team_slave_0 added
[  516.054636][T21444] team0: Port device team_slave_1 added
[  516.183844][T21444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.192580][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.217648][T21444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.264241][T21444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.268423][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.287678][T21444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.388298][   T12] ip6gretap0: left allmulticast mode
[  516.389971][   T12] ip6gretap0: left promiscuous mode
[  516.393023][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[  516.399937][   T12] bridge_slave_1: left allmulticast mode
[  516.403930][   T12] bridge_slave_1: left promiscuous mode
[  516.408218][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.419261][   T12] bridge_slave_0: left allmulticast mode
[  516.428168][   T12] bridge_slave_0: left promiscuous mode
[  516.430014][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.778262][   T31] smbdirect: ib_dev[syz0] removed
[  516.896123][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.910595][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.919322][   T12] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface
[  516.930746][   T12] bond0 (unregistering): Released all slaves
[  517.003209][ T2352] gretap0 speed is unknown, defaulting to 1000
[  517.005084][ T2352] infiniband syz0: ib_query_port failed (-19)
[  517.011604][T21444] hsr_slave_0: entered promiscuous mode
[  517.028053][T21444] hsr_slave_1: entered promiscuous mode
[  517.069634][   T12] : left promiscuous mode
[  517.312663][ T9738] wg1 speed is unknown, defaulting to 1000
[  517.314014][ T5357] 8021q: adding VLAN 0 to HW filter on device eth25
[  517.326178][ T9738] syz2: Port: 1 Link DOWN
[  517.343460][ T9738] wg1 speed is unknown, defaulting to 1000
[  517.716651][T21444] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.746889][T21444] 8021q: adding VLAN 0 to HW filter on device team0
[  517.772857][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.775359][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.790038][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.792419][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.803078][ T5357] 8021q: adding VLAN 0 to HW filter on device eth26
[  517.887793][ T5001] Bluetooth: hci3: command tx timeout
[  518.219268][ T5357] 8021q: adding VLAN 0 to HW filter on device eth27
[  518.343589][T21444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.570465][T21444] veth0_vlan: entered promiscuous mode
[  518.591035][T21444] veth1_vlan: entered promiscuous mode
[  518.599509][ T5357] 8021q: adding VLAN 0 to HW filter on device eth28
[  518.626011][T21444] veth0_macvtap: entered promiscuous mode
[  518.636656][T21444] veth1_macvtap: entered promiscuous mode
[  518.660416][T21444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.673321][T21444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.771619][   T12] hsr_slave_0: left promiscuous mode
[  518.775353][   T12] hsr_slave_1: left promiscuous mode
[  518.779650][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.782252][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.793012][   T12] veth1_macvtap: left promiscuous mode
[  518.794961][   T12] veth0_macvtap: left promiscuous mode
[  518.799137][   T12] veth1_vlan: left promiscuous mode
[  518.801024][   T12] veth0_vlan: left promiscuous mode
[  519.300909][   T12] team0 (unregistering): Port device team_slave_1 removed
[  519.352027][   T12] team0 (unregistering): Port device team_slave_0 removed
[  519.680040][ T1113] smc: removing ib device syz2
[  519.741949][ T1113] smbdirect: ib_dev[syz2] removed
[  519.977554][ T5001] Bluetooth: hci3: command tx timeout
[  520.173526][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.177738][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.296654][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.304473][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.048596][ T5001] Bluetooth: hci3: command tx timeout
[  523.545371][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  523.558317][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  523.563277][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  523.566807][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  523.570477][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  523.689415][ T9101] .`: (slave syz_tun): Releasing backup interface
[  523.716077][T21582] netlink: 'syz.9.6375': attribute type 10 has an invalid length.
[  523.873206][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.979117][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.136877][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): left promiscuous mode
[  524.140076][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): left allmulticast mode
[  524.153172][   T12] team0: Port device netdevsim1 removed
[  524.160168][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.405660][T21604] aD: renamed from lo (while UP)
[  524.543192][T21608] netlink: 'syz.9.6384': attribute type 10 has an invalid length.
[  525.541083][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6385'.
[  525.572772][   T12] team0: left allmulticast mode
[  525.579321][   T12] team_slave_0: left allmulticast mode
[  525.583386][   T12] team_slave_1: left allmulticast mode
[  525.597533][   T12] team0: left promiscuous mode
[  525.599570][   T12] team_slave_0: left promiscuous mode
[  525.601970][   T12] team_slave_1: left promiscuous mode
[  525.606011][   T12] bridge0: port 3(team0) entered disabled state
[  525.623199][   T12] bridge_slave_1: left allmulticast mode
[  525.631816][   T12] bridge_slave_1: left promiscuous mode
[  525.634382][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.642363][   T12] bridge_slave_0: left allmulticast mode
[  525.647659][   T54] Bluetooth: hci0: command tx timeout
[  525.657693][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.107158][   T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.113852][   T12] .` (unregistering): (slave c@0): Releasing backup interface
[  526.118632][   T12] .` (unregistering): Released all slaves
[  526.241438][   T12] : left promiscuous mode
[  526.337018][   T12] tipc: Left network mode
[  526.573404][ T5357] 8021q: adding VLAN 0 to HW filter on device eth29
[  526.670703][T21578] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.673507][T21578] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.676289][T21578] bridge_slave_0: entered allmulticast mode
[  526.681729][T21578] bridge_slave_0: entered promiscuous mode
[  526.688790][T21578] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.691955][T21578] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.694767][T21578] bridge_slave_1: entered allmulticast mode
[  526.701193][T21578] bridge_slave_1: entered promiscuous mode
[  526.758863][T21578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.769920][T21578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.841857][T21578] team0: Port device team_slave_0 added
[  526.856253][ T5357] 8021q: adding VLAN 0 to HW filter on device eth30
[  526.875412][T21578] team0: Port device team_slave_1 added
[  526.919339][T21578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.921533][T21578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.930235][T21578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.934891][T21578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.937661][T21578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.948415][T21578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.132827][T21578] hsr_slave_0: entered promiscuous mode
[  527.138734][T21578] hsr_slave_1: entered promiscuous mode
[  527.151412][T21578] debugfs: 'hsr0' already exists in 'hsr'
[  527.159180][T21578] Cannot create hsr debugfs directory
[  527.373006][ T5357] 8021q: adding VLAN 0 to HW filter on device eth31
[  527.694650][ T5357] 8021q: adding VLAN 0 to HW filter on device eth32
[  527.727864][   T54] Bluetooth: hci0: command tx timeout
[  528.005631][T21578] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.055449][T21578] 8021q: adding VLAN 0 to HW filter on device team0
[  528.071255][  T798] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.074042][  T798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.101941][  T798] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.104116][  T798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.504881][T21578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.774135][T21578] veth0_vlan: entered promiscuous mode
[  528.799830][   T12] hsr_slave_0: left promiscuous mode
[  528.803394][   T12] hsr_slave_1: left promiscuous mode
[  528.842682][   T12] veth1_macvtap: left promiscuous mode
[  528.850840][   T12] veth0_macvtap: left promiscuous mode
[  528.959734][T21703] netlink: 'syz.9.6397': attribute type 1 has an invalid length.
[  528.963347][T21703] netlink: 'syz.9.6397': attribute type 2 has an invalid length.
[  529.105425][   T12] team0 (unregistering): Port device team_slave_1 removed
[  529.136395][   T12] team0 (unregistering): Port device team_slave_0 removed
[  529.141673][ T6047] smc: removing ib device syz1
[  529.421131][T21578] veth1_vlan: entered promiscuous mode
[  529.473698][T21578] veth0_macvtap: entered promiscuous mode
[  529.486351][T21578] veth1_macvtap: entered promiscuous mode
[  529.500315][ T6047] smbdirect: ib_dev[syz1] removed
[  529.506257][T21578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.526817][T21578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.701807][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.706497][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.807346][   T54] Bluetooth: hci0: command tx timeout
[  529.861760][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.872254][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.121807][T21735] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[  530.121807][T21735] 3UH5rBn
[  530.429410][T21754] netlink: 'syz.1.6400': attribute type 11 has an invalid length.
[  530.437558][T21754] netlink: 'syz.1.6400': attribute type 6 has an invalid length.
[  530.443865][T21754] netlink: 134564 bytes leftover after parsing attributes in process `syz.1.6400'.
[  530.604566][T21765] netlink: 'syz.1.6402': attribute type 15 has an invalid length.
[  530.823724][T21715] syz.9.6398 (21715) used greatest stack depth: 18048 bytes left
[  530.863969][T21779] veth1_macvtap: left promiscuous mode
[  530.865803][T21779] macsec0: entered allmulticast mode
[  530.879090][T21779] veth1_macvtap: entered promiscuous mode
[  530.883075][T21779] veth1_macvtap: entered allmulticast mode
[  530.888191][T21779] macsec0: entered promiscuous mode
[  531.310854][T21795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6410'.
[  531.465129][ T5001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  531.470158][ T5001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  531.473619][ T5001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  531.478356][ T5001] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  531.480915][ T5001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  531.749080][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6413'.
[  531.757380][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6413'.
[  531.764267][T21812] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6413'.
[  531.781614][T21812] netlink: 'syz.1.6413': attribute type 3 has an invalid length.
[  531.788814][T21812] netlink: 'syz.1.6413': attribute type 2 has an invalid length.
[  531.793232][T21812] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6413'.
[  531.801245][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6413'.
[  531.887626][   T54] Bluetooth: hci0: command tx timeout
[  533.573453][   T54] Bluetooth: hci2: command tx timeout
[  534.949190][T21801] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.951606][T21801] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.953800][T21801] bridge_slave_0: entered allmulticast mode
[  534.956299][T21801] bridge_slave_0: entered promiscuous mode
[  534.960101][T21801] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.962338][T21801] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.964651][T21801] bridge_slave_1: entered allmulticast mode
[  534.968021][T21801] bridge_slave_1: entered promiscuous mode
[  534.999052][T21801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.004965][T21801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.028713][T21801] team0: Port device team_slave_0 added
[  535.034346][T21801] team0: Port device team_slave_1 added
[  535.068127][T21801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.083867][T21801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.116839][T21801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.131253][T21801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.134097][T21801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.151527][T21801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.275149][T21801] hsr_slave_0: entered promiscuous mode
[  535.278807][T21801] hsr_slave_1: entered promiscuous mode
[  535.283436][T21801] debugfs: 'hsr0' already exists in 'hsr'
[  535.285896][T21801] Cannot create hsr debugfs directory
[  535.413778][T21870] netlink: 'syz.1.6427': attribute type 29 has an invalid length.
[  535.432736][T21874] netlink: 'syz.1.6427': attribute type 29 has an invalid length.
[  535.441849][T21878] netlink: 'syz.1.6427': attribute type 29 has an invalid length.
[  535.518166][T21881] netlink: 'syz.9.6430': attribute type 1 has an invalid length.
[  535.523648][T21881] netlink: 'syz.9.6430': attribute type 1 has an invalid length.
[  535.604802][T21801] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.607709][T21801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.610691][T21801] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.614162][T21801] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.648184][   T54] Bluetooth: hci2: command tx timeout
[  535.766956][T21801] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.815613][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.828334][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.913398][T21801] 8021q: adding VLAN 0 to HW filter on device team0
[  535.992528][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.996851][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.042951][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.046000][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.626831][T21801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.812550][T21950] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  536.909218][T21801] veth0_vlan: entered promiscuous mode
[  536.924683][T21801] veth1_vlan: entered promiscuous mode
[  536.965989][T21801] veth0_macvtap: entered promiscuous mode
[  536.984326][T21801] veth1_macvtap: entered promiscuous mode
[  536.985494][T21962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.008164][T21801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.018438][T21801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.061941][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6454'.
[  537.142929][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.150119][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.154975][T21972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6456'.
[  537.162123][T21972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6456'.
[  537.183467][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.187047][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.565553][T21994] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6464'.
[  537.728575][   T54] Bluetooth: hci2: command tx timeout
[  537.775802][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6465'.
[  538.202989][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6471'.
[  538.267452][T22014] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  538.858672][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6484'.
[  538.907514][T22036] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.912031][T22036] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.923557][T22036] bridge0: entered allmulticast mode
[  539.389741][T22054] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1'
[  539.750285][T22072] openvswitch: netlink: Key type 142 is out of range max 32
[  539.813241][   T54] Bluetooth: hci2: command tx timeout
[  539.952458][T22076] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.6502'.
[  540.184756][T22088] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6508'.
[  540.330121][T22092] netlink: 'syz.1.6510': attribute type 2 has an invalid length.
[  540.364909][T22092] tmpfs: Bad value for 'uid'
[  540.366625][T22092] tmpfs: Bad value for 'uid'
[  540.648309][T22077] syz.0.6504 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  540.659250][T22077] CPU: 0 UID: 0 PID: 22077 Comm: syz.0.6504 Not tainted syzkaller #0 PREEMPT(full) 
[  540.659264][T22077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  540.659271][T22077] Call Trace:
[  540.659276][T22077]  <TASK>
[  540.659280][T22077]  dump_stack_lvl+0xe8/0x150
[  540.659304][T22077]  dump_header+0xd3/0x4c0
[  540.659326][T22077]  oom_kill_process+0x3ab/0x970
[  540.659344][T22077]  out_of_memory+0x106c/0x1410
[  540.659354][T22077]  ? try_charge_memcg+0xbb9/0x1570
[  540.659365][T22077]  ? __pfx___mutex_lock+0x10/0x10
[  540.659378][T22077]  ? __pfx_out_of_memory+0x10/0x10
[  540.659388][T22077]  ? do_raw_spin_unlock+0x4d/0x210
[  540.659425][T22077]  try_charge_memcg+0xc77/0x1570
[  540.659441][T22077]  ? __pfx_try_charge_memcg+0x10/0x10
[  540.659448][T22077]  ? percpu_ref_tryget+0x15/0x180
[  540.659466][T22077]  ? charge_memcg+0x23/0x2b0
[  540.659475][T22077]  charge_memcg+0x1a2/0x2b0
[  540.659484][T22077]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  540.659492][T22077]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  540.659501][T22077]  __swap_cache_prepare_and_add+0xdc/0x700
[  540.659515][T22077]  ? page_rmappable_folio+0x9a/0x170
[  540.659529][T22077]  swap_cache_alloc_folio+0xf1/0x240
[  540.659541][T22077]  swap_cluster_readahead+0x355/0x670
[  540.659554][T22077]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  540.659575][T22077]  ? get_vma_policy+0x27b/0x3c0
[  540.659586][T22077]  swapin_readahead+0x196/0xc50
[  540.659598][T22077]  ? swap_table_get+0x1e/0x260
[  540.659610][T22077]  ? __pfx_swapin_readahead+0x10/0x10
[  540.659621][T22077]  ? swap_table_get+0x1e/0x260
[  540.659630][T22077]  ? swap_table_get+0x1e/0x260
[  540.659639][T22077]  ? swap_table_get+0x1e/0x260
[  540.659649][T22077]  ? swap_table_get+0x216/0x260
[  540.659659][T22077]  ? swap_cache_get_folio+0x2e4/0x2f0
[  540.659671][T22077]  do_swap_page+0x555/0x5120
[  540.659685][T22077]  ? __pte_offset_map+0x29/0x240
[  540.659697][T22077]  ? __pte_offset_map+0x29/0x240
[  540.659712][T22077]  ? do_swap_page+0x128/0x5120
[  540.659722][T22077]  ? __pfx_do_swap_page+0x10/0x10
[  540.659731][T22077]  ? __pte_offset_map+0x1ae/0x240
[  540.659743][T22077]  ? pte_offset_map_rw_nolock+0xea/0x160
[  540.659756][T22077]  handle_mm_fault+0x12d2/0x3170
[  540.659773][T22077]  ? handle_mm_fault+0xee/0x3170
[  540.659787][T22077]  ? __pfx_handle_mm_fault+0x10/0x10
[  540.659799][T22077]  ? lock_vma_under_rcu+0x45a/0x500
[  540.659833][T22077]  do_user_addr_fault+0xa73/0x1340
[  540.659852][T22077]  ? rcu_is_watching+0x15/0xb0
[  540.659864][T22077]  ? trace_page_fault_user+0x84/0x1e0
[  540.659874][T22077]  exc_page_fault+0x6a/0xc0
[  540.659882][T22077]  asm_exc_page_fault+0x26/0x30
[  540.659891][T22077] RIP: 0033:0x7f09ba06a750
[  540.659900][T22077] Code: c4 4c 0f 42 e0 83 3d 7a d6 3a 00 00 0f 8e d9 fd ff ff e8 f3 7d fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 3e af ed 00 e8 03 00 00 48 8d 1d 3f b8 3a 00 e8 8a 31 13 00
[  540.659907][T22077] RSP: 002b:00007ffe85629180 EFLAGS: 00010202
[  540.659915][T22077] RAX: 0000000000083f5c RBX: 00007f09ba417da0 RCX: 0000000000083d60
[  540.659920][T22077] RDX: 00000000000001fc RSI: 00007ffe85629160 RDI: 0000000000000001
[  540.659925][T22077] RBP: 00007f09ba417da0 R08: 000000001e4c6f4f R09: 3fffffffffffffff
[  540.659931][T22077] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000083f9c
[  540.659936][T22077] R13: 00007f09ba415fac R14: 0000000000083c8d R15: 00007ffe85629280
[  540.659949][T22077]  </TASK>
[  540.659953][T22077] memory: usage 307200kB, limit 307200kB, failcnt 2903
[  540.887333][T22077] memory+swap: usage 301068kB, limit 9007199254740988kB, failcnt 0
[  540.890424][T22077] kmem: usage 300032kB, limit 9007199254740988kB, failcnt 0
[  540.893312][T22077] Memory cgroup stats for /syz0:
[  540.893422][T22077] cache 0
[  540.896652][T22077] rss 0
[  540.899669][T22077] rss_huge 0
[  540.901561][T22077] shmem 0
[  540.902732][T22077] mapped_file 0
[  540.905690][T22077] dirty 0
[  540.906921][T22077] writeback 0
[  540.908919][T22077] workingset_refault_anon 7
[  540.910448][T22077] workingset_refault_file 0
[  540.912088][T22077] swap 110592
[  540.913265][T22077] swapcached 151552
[  540.914669][T22077] pgpgin 15690
[  540.915825][T22077] pgpgout 15688
[  540.918543][T22077] pgfault 37274
[  540.919954][T22077] pgmajfault 7
[  540.921250][T22077] inactive_anon 0
[  540.922679][T22077] active_anon 8192
[  540.924209][T22077] inactive_file 0
[  540.925898][T22077] active_file 0
[  540.929969][T22077] unevictable 0
[  540.931068][T22077] hierarchical_memory_limit 314572800
[  540.933515][T22077] hierarchical_memsw_limit 9223372036854771712
[  540.935848][T22077] total_cache 0
[  540.937075][T22077] total_rss 0
[  540.940144][T22077] total_rss_huge 0
[  540.943512][T22077] total_shmem 0
[  540.946780][T22077] total_mapped_file 0
[  540.951983][T22077] total_dirty 0
[  540.955049][T22077] total_writeback 0
[  540.956266][T22077] total_workingset_refault_anon 7
[  540.972775][T22077] total_workingset_refault_file 0
[  540.983282][T22077] total_swap 110592
[  540.990086][T22077] total_swapcached 151552
[  540.998581][T22077] total_pgpgin 15690
[  541.005562][T22077] total_pgpgout 15688
[  541.013310][T22077] total_pgfault 37274
[  541.016477][T22077] total_pgmajfault 7
[  541.019836][T22077] total_inactive_anon 0
[  541.022091][T22077] total_active_anon 8192
[  541.024371][T22077] total_inactive_file 0
[  541.025822][T22077] total_active_file 0
[  541.028066][T22077] total_unevictable 0
[  541.029364][T22077] anon_cost 0
[  541.030797][T22077] file_cost 0
[  541.030967][T22105] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6514'.
[  541.031869][T22077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6504,pid=22077,uid=0
[  541.040040][T22077] Memory cgroup out of memory: Killed process 22077 (syz.0.6504) total-vm:102160kB, anon-rss:1236kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  541.787787][T22149] openvswitch: netlink: IPv6 tunnel dst address is zero
[  542.028888][T22164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.534780][T22180] netlink: 'syz.0.6538': attribute type 27 has an invalid length.
[  542.547311][T22180] __nla_validate_parse: 1 callbacks suppressed
[  542.547328][T22180] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6538'.
[  542.658199][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6540'.
[  542.667695][T22183] netlink: 59 bytes leftover after parsing attributes in process `syz.9.6540'.
[  543.077012][T22195] netlink: 'syz.9.6546': attribute type 10 has an invalid length.
[  543.080898][T22195] ipvlan0: entered allmulticast mode
[  543.083155][T22195] veth0_vlan: entered allmulticast mode
[  543.089304][T22195] team0: Device ipvlan0 failed to register rx_handler
[  543.385645][T22203] netlink: 'syz.1.6550': attribute type 21 has an invalid length.
[  543.388594][T22203] netlink: 'syz.1.6550': attribute type 6 has an invalid length.
[  544.506426][T22230] netlink: 'syz.9.6561': attribute type 1 has an invalid length.
[  544.512074][T22230] netlink: 'syz.9.6561': attribute type 2 has an invalid length.
[  544.576817][T22233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6562'.
[  544.801917][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6568'.
[  544.993362][T22259] netlink: 'syz.1.6573': attribute type 1 has an invalid length.
[  545.168528][T22268] netlink: 'syz.1.6578': attribute type 2 has an invalid length.
[  545.222021][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6580'.
[  545.225516][T22272] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6580'.
[  545.357754][T22284] netlink: 'syz.9.6586': attribute type 27 has an invalid length.
[  545.366975][T22284] netlink: 2418 bytes leftover after parsing attributes in process `syz.9.6586'.
[  545.660949][T22300] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6593'.
[  545.765185][T22308] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6596'.
[  547.216011][T22355] netlink: 'syz.9.6616': attribute type 10 has an invalid length.
[  547.306554][T22355] veth0_vlan: left promiscuous mode
[  547.325124][T22355] veth0_vlan: entered promiscuous mode
[  547.345443][T22355] team0: Device veth0_vlan failed to register rx_handler
[  547.791549][T22388] validate_nla: 2 callbacks suppressed
[  547.791567][T22388] netlink: 'syz.1.6631': attribute type 10 has an invalid length.
[  547.803428][T22388] __nla_validate_parse: 5 callbacks suppressed
[  547.803441][T22388] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.6631'.
[  547.845915][T22390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6632'.
[  548.354016][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6646'.
[  548.864988][T22451] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6658'.
[  548.896818][T22454] netlink: 'syz.0.6659': attribute type 11 has an invalid length.
[  548.904921][T22454] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6659'.
[  549.417681][T22476] netlink: 'syz.9.6669': attribute type 10 has an invalid length.
[  549.510565][T22476] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.531785][T22476] team0: Port device bond0 added
[  549.541602][T22480] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6670'.
[  549.905039][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6681'.
[  550.015675][T22512] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6685'.
[  550.076645][T22516] netlink: 'syz.1.6687': attribute type 29 has an invalid length.
[  550.081914][T22516] netlink: 'syz.1.6687': attribute type 3 has an invalid length.
[  550.084467][T22516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6687'.
[  550.346309][T22510] netlink: 'syz.9.6684': attribute type 2 has an invalid length.
[  550.352285][T22510] netlink: 'syz.9.6684': attribute type 8 has an invalid length.
[  550.355211][T22510] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6684'.
[  550.369938][T22531] netlink: 'syz.1.6693': attribute type 11 has an invalid length.
[  550.524016][T22541] netlink: 'syz.0.6697': attribute type 2 has an invalid length.
[  550.801472][T22557] openvswitch: netlink: IP tunnel TTL not specified.
[  550.925540][T22568] netlink: 'syz.0.6709': attribute type 21 has an invalid length.
[  551.174263][T22578] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  551.181358][T22578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.476616][T22639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.351986][T22689] __nla_validate_parse: 1 callbacks suppressed
[  555.351996][T22689] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6767'.
[  555.571071][T22704] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.6774'.
[  555.705587][T22714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6779'.
[  555.719401][T22714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6779'.
[  555.831904][T22716] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6780'.
[  555.844401][T22716] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6780'.
[  556.059322][T22728] netem: change failed
[  556.392934][T22749] validate_nla: 2 callbacks suppressed
[  556.392945][T22749] netlink: 'syz.9.6795': attribute type 1 has an invalid length.
[  556.596750][   T54] Bluetooth: hci3: SCO packet for unknown connection handle 8
[  556.613199][T22760] netlink: 'syz.1.6801': attribute type 6 has an invalid length.
[  556.681465][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6803'.
[  559.824210][T22780] openvswitch: netlink: IP tunnel dst address not specified
[  559.834286][T22780] netlink: 'syz.1.6810': attribute type 10 has an invalid length.
[  560.075663][T22790] netlink: 'syz.0.6814': attribute type 21 has an invalid length.
[  560.206967][T22780] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  560.232283][T22790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6814'.
[  560.361259][T22800] netlink: 'syz.9.6816': attribute type 10 has an invalid length.
[  560.380930][T22800] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6816'.
[  560.393207][T22800] veth1_virt_wifi: entered promiscuous mode
[  560.401156][T22800] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  560.404513][T22800] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  560.452758][T22800] veth1_virt_wifi: entered allmulticast mode
[  560.462501][T22800] veth1_virt_wifi: left allmulticast mode
[  560.603766][T22817] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6826'.
[  560.752257][T22831] netlink: 'syz.0.6833': attribute type 10 has an invalid length.
[  560.771848][T22831] mac80211_hwsim hwsim67 wlan1: entered allmulticast mode
[  560.911735][T22836] bridge_slave_1: left allmulticast mode
[  560.937328][T22836] bridge_slave_1: left promiscuous mode
[  560.943967][T22836] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.022884][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6836'.
[  561.032789][T22836] bridge_slave_0: left allmulticast mode
[  561.047384][T22836] bridge_slave_0: left promiscuous mode
[  561.049989][T22836] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.323619][T22842] netlink: 'syz.1.6837': attribute type 2 has an invalid length.
[  562.022493][   T54] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  562.022573][   T54] Bluetooth: hci3: connection err: -111
[  562.321990][T22896] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6863'.
[  562.357126][T22901] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6864'.
[  562.455216][T22909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6866'.
[  562.672359][T22918] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6869'.
[  562.872451][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6873'.
[  562.890837][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'.
[  562.951616][T22935] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6878'.
[  563.288173][T22944] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  563.300394][T22944] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  563.324776][T22944] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  563.838840][T22944] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  564.666200][T23009] mac80211_hwsim hwsim62 ..c: renamed from wlan1
[  565.422861][T23024] __nla_validate_parse: 2 callbacks suppressed
[  565.422878][T23024] netlink: 16255 bytes leftover after parsing attributes in process `syz.9.6915'.
[  565.423767][T23019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6913'.
[  565.581254][T23029] netlink: 400 bytes leftover after parsing attributes in process `syz.9.6916'.
[  565.828869][T23033] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6918'.
[  566.029863][T23053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.162933][T23059] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.6929'.
[  566.313200][T23065] netlink: 'syz.9.6932': attribute type 2 has an invalid length.
[  566.318466][T23065] netlink: 'syz.9.6932': attribute type 1 has an invalid length.
[  566.323541][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6932'.
[  566.465828][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6936'.
[  566.503151][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6936'.
[  566.838586][   T54] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11
[  567.016994][T23117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'.
[  567.503091][T23143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  567.556075][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6969'.
[  568.015730][T23169] C: renamed from veth1_to_team (while UP)
[  568.023104][T23169] netlink: 'syz.0.6978': attribute type 4 has an invalid length.
[  568.037406][T23169] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  568.114309][T23178] netlink: 'syz.0.6982': attribute type 1 has an invalid length.
[  568.116677][T23178] netlink: 'syz.0.6982': attribute type 2 has an invalid length.
[  568.635530][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  568.639429][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  569.350353][T23248] netlink: 'syz.1.7003': attribute type 10 has an invalid length.
[  569.404108][T23248] veth0_vlan: left promiscuous mode
[  569.413574][T23248] veth0_vlan: entered promiscuous mode
[  569.415724][T23250] netlink: 'syz.0.7004': attribute type 1 has an invalid length.
[  569.428732][T23248] team0: Device veth0_vlan failed to register rx_handler
[  570.851928][   T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  570.855559][   T54] Bluetooth: hci3: Injecting HCI hardware error event
[  570.859629][   T54] Bluetooth: hci3: hardware error 0x00
[  570.980346][ T5001] Bluetooth: hci2: unexpected event 0x3d length: 15 > 14
[  572.455524][T23347] sock: sock_set_timeout: `syz.1.7043' (pid 23347) tries to set negative timeout
[  572.907756][T23375] netlink: 'syz.1.7054': attribute type 29 has an invalid length.
[  572.913368][T23375] netlink: 'syz.1.7054': attribute type 29 has an invalid length.
[  572.923510][T23375] netlink: 'syz.1.7054': attribute type 32 has an invalid length.
[  572.931008][T23375] __nla_validate_parse: 5 callbacks suppressed
[  572.931023][T23375] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7054'.
[  572.938078][   T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  573.333308][T23394] syz.1.7063: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  573.341397][T23394] CPU: 1 UID: 0 PID: 23394 Comm: syz.1.7063 Not tainted syzkaller #0 PREEMPT(full) 
[  573.341431][T23394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  573.341445][T23394] Call Trace:
[  573.341455][T23394]  <TASK>
[  573.341464][T23394]  dump_stack_lvl+0xe8/0x150
[  573.341490][T23394]  warn_alloc+0x249/0x340
[  573.341510][T23394]  ? stack_trace_save+0xa9/0x100
[  573.341539][T23394]  ? __pfx_warn_alloc+0x10/0x10
[  573.341562][T23394]  ? kasan_save_track+0x4f/0x80
[  573.341577][T23394]  ? kasan_save_track+0x3e/0x80
[  573.341594][T23394]  ? __kasan_kmalloc+0x93/0xb0
[  573.341611][T23394]  ? __kmalloc_cache_noprof+0x31c/0x660
[  573.341628][T23394]  ? xskq_create+0x56/0x170
[  573.341672][T23394]  ? xsk_setsockopt+0x603/0x990
[  573.341695][T23394]  ? do_sock_setsockopt+0x17c/0x1b0
[  573.341721][T23394]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  573.341745][T23394]  ? do_syscall_64+0x15f/0xf80
[  573.341795][T23394]  __vmalloc_node_range_noprof+0x132/0x1750
[  573.341844][T23394]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  573.341876][T23394]  ? __kasan_kmalloc+0x93/0xb0
[  573.341896][T23394]  vmalloc_user_noprof+0xad/0xe0
[  573.341916][T23394]  ? xskq_create+0xbf/0x170
[  573.341938][T23394]  xskq_create+0xbf/0x170
[  573.341965][T23394]  xsk_init_queue+0x8a/0xe0
[  573.341990][T23394]  xsk_setsockopt+0x603/0x990
[  573.342035][T23394]  ? __pfx_xsk_setsockopt+0x10/0x10
[  573.342061][T23394]  ? __pfx_aa_sk_perm+0x10/0x10
[  573.342089][T23394]  ? __fget_files+0x2a/0x420
[  573.342113][T23394]  ? aa_sock_opt_perm+0xff/0x1a0
[  573.342150][T23394]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  573.342168][T23394]  ? __pfx_xsk_setsockopt+0x10/0x10
[  573.342194][T23394]  do_sock_setsockopt+0x17c/0x1b0
[  573.342224][T23394]  __x64_sys_setsockopt+0x13d/0x1b0
[  573.342252][T23394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.342273][T23394]  do_syscall_64+0x15f/0xf80
[  573.342298][T23394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.342317][T23394] RIP: 0033:0x7f0811f9cdd9
[  573.342337][T23394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.342354][T23394] RSP: 002b:00007f08101f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  573.342377][T23394] RAX: ffffffffffffffda RBX: 00007f0812215fa0 RCX: 00007f0811f9cdd9
[  573.342393][T23394] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  573.342406][T23394] RBP: 00007f0812032d69 R08: 0000000000000004 R09: 0000000000000000
[  573.342419][T23394] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  573.342433][T23394] R13: 00007f0812216038 R14: 00007f0812215fa0 R15: 00007ffc9c58b998
[  573.342459][T23394]  </TASK>
[  573.346789][T23394] Mem-Info:
[  573.457599][T23394] active_anon:16137 inactive_anon:0 isolated_anon:0
[  573.457599][T23394]  active_file:20483 inactive_file:38555 isolated_file:0
[  573.457599][T23394]  unevictable:1768 dirty:236 writeback:0
[  573.457599][T23394]  slab_reclaimable:23513 slab_unreclaimable:90632
[  573.457599][T23394]  mapped:18077 shmem:2377 pagetables:1952
[  573.457599][T23394]  sec_pagetables:0 bounce:0
[  573.457599][T23394]  kernel_misc_reclaimable:0
[  573.457599][T23394]  free:1083865 free_pcp:20753 free_cma:0
[  573.475922][T23394] Node 0 active_anon:29100kB inactive_anon:0kB active_file:32272kB inactive_file:19596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45836kB dirty:240kB writeback:0kB shmem:4460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8184kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  573.490980][T23394] Node 1 active_anon:36268kB inactive_anon:0kB active_file:49660kB inactive_file:134624kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26448kB dirty:704kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6016kB pagetables:2856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  573.504453][T23394] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  573.516140][T23394] lowmem_reserve[]: 0 1587 2117 2117 2117
[  573.519098][T23394] Node 0 DMA32 free:1468696kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14536kB inactive_anon:0kB active_file:9044kB inactive_file:112kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625300kB mlocked:0kB bounce:0kB free_pcp:22644kB local_pcp:13820kB free_cma:0kB
[  573.532414][T23394] lowmem_reserve[]: 0 0 530 530 530
[  573.534799][T23394] Node 0 Normal free:58112kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16148kB inactive_anon:0kB active_file:23228kB inactive_file:19484kB unevictable:3536kB writepending:240kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:4268kB local_pcp:1568kB free_cma:0kB
[  573.547855][T23394] lowmem_reserve[]: 0 0 0 0 0
[  573.549972][T23394] Node 1 Normal free:2790220kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36268kB inactive_anon:0kB active_file:49660kB inactive_file:134624kB unevictable:3536kB writepending:704kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:56728kB local_pcp:23088kB free_cma:0kB
[  573.565111][T23394] lowmem_reserve[]: 0 0 0 0 0
[  573.567181][T23394] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  573.573527][T23394] Node 0 DMA32: 16*4kB (UM) 31*8kB (UM) 164*16kB (UM) 248*32kB (UME) 121*64kB (UM) 121*128kB (UME) 80*256kB (UM) 46*512kB (UM) 10*1024kB (UM) 9*2048kB (UM) 332*4096kB (UME) = 1466680kB
[  573.581113][T23394] Node 0 Normal: 710*4kB (U) 605*8kB (U) 468*16kB (UE) 296*32kB (U) 279*64kB (U) 57*128kB (U) 18*256kB (U) 3*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 57984kB
[  573.588322][T23394] Node 1 Normal: 1103*4kB (UME) 1032*8kB (UME) 1743*16kB (UME) 169*32kB (UME) 555*64kB (UME) 240*128kB (UME) 107*256kB (UME) 65*512kB (UME) 38*1024kB (UME) 23*2048kB (UM) 618*4096kB (UM) = 2790220kB
[  573.596068][T23394] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  573.599939][T23394] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  573.603837][T23394] 61415 total pagecache pages
[  573.605848][T23394] 0 pages in swap cache
[  573.607931][T23394] Free swap  = 124996kB
[  573.609803][T23394] Total swap = 124996kB
[  573.611500][T23394] 1834877 pages RAM
[  573.613094][T23394] 0 pages HighMem/MovableOnly
[  573.615010][T23394] 390253 pages reserved
[  573.616607][T23394] 0 pages cma reserved
[  573.894522][   T54] Bluetooth: hci0: adv larger than maximum supported
[  573.894571][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[  574.193563][T23416] netlink: 'syz.1.7071': attribute type 10 has an invalid length.
[  574.196117][T23416] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7071'.
[  574.202277][T23416] veth1_virt_wifi: entered promiscuous mode
[  574.211584][T23420] netlink: 'syz.9.7072': attribute type 6 has an invalid length.
[  574.214651][T23416] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  574.214664][T23420] netlink: 3936 bytes leftover after parsing attributes in process `syz.9.7072'.
[  574.217137][T23416] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  574.221474][T23420] netlink: 'syz.9.7072': attribute type 1 has an invalid length.
[  574.221509][T23420] block nbd3: Unsupported socket: should be TCP or UNIX.
[  574.234820][T23416] veth1_virt_wifi: entered allmulticast mode
[  574.311335][T23416] veth1_virt_wifi: left allmulticast mode
[  574.794921][T23458] netlink: 'syz.0.7082': attribute type 1 has an invalid length.
[  574.853455][T23465] netlink: 'syz.9.7084': attribute type 2 has an invalid length.
[  574.857129][T23465] netlink: 'syz.9.7084': attribute type 1 has an invalid length.
[  574.864967][T23465] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.7084'.
[  574.902630][T23470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  575.035447][T23480] blkio.reset_stats is deprecated
[  575.061528][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7088'.
[  575.077836][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7088'.
[  575.107970][T23476] netlink: 'syz.9.7087': attribute type 10 has an invalid length.
[  575.138282][T23476] macvlan1: entered promiscuous mode
[  575.146843][T23476] macvlan1: entered allmulticast mode
[  575.255869][T23490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7093'.
[  575.262197][T23476] veth1_vlan: entered allmulticast mode
[  575.282355][T23476] team0: Port device macvlan1 added
[  575.377866][T23498] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7097'.
[  575.397919][T23498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7097'.
[  575.618397][T23510] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7102'.
[  575.706353][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  575.841392][T23518] proc: Unknown parameter 'fowner<00000000000000000000'
[  576.904585][T23564] gretap0: refused to change device tx_queue_len
[  576.906823][T23564] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  577.454243][T23620] openvswitch: netlink: Message has 1 unknown bytes.
[  577.456286][T23620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.659397][T23630] syzkaller0: entered promiscuous mode
[  577.662761][T23630] syzkaller0: entered allmulticast mode
[  578.657988][T23642] ------------[ cut here ]------------
[  578.665331][T23642] !valid_signal(sig)
[  578.665345][T23642] WARNING: kernel/signal.c:2174 at do_notify_parent+0xd18/0xe30, CPU#0: syz.9.7164/23642
[  578.670514][T23642] Modules linked in:
[  578.672357][T23642] CPU: 0 UID: 0 PID: 23642 Comm: syz.9.7164 Not tainted syzkaller #0 PREEMPT(full) 
[  578.675760][T23642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  578.679339][T23642] RIP: 0010:do_notify_parent+0xd18/0xe30
[  578.681001][T23642] Code: c6 05 30 23 90 0e 01 48 c7 c7 00 3b cb 8b be a3 08 00 00 48 c7 c2 80 3c cb 8b e8 03 8f 17 00 e9 2e fa ff ff e8 f9 54 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 e8 54 3b 00 90 0f 0b 90 e9 db
[  578.687792][T23642] RSP: 0018:ffffc900075c79e0 EFLAGS: 00010093
[  578.689535][T23642] RAX: ffffffff818a6c77 RBX: dffffc0000000000 RCX: ffff88811a828000
[  578.691988][T23642] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040
[  578.695108][T23642] RBP: ffffc900075c7b30 R08: 0000000000000003 R09: 0000000000000004
[  578.698030][T23642] R10: dffffc0000000000 R11: fffff52000eb8f58 R12: ffff888102f24390
[  578.700963][T23642] R13: ffff88811a828000 R14: 0000000000000080 R15: 1ffff92000eb8f44
[  578.703900][T23642] FS:  0000000000000000(0000) GS:ffff88818dc89000(0000) knlGS:0000000000000000
[  578.707243][T23642] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.709716][T23642] CR2: 00007f09ba1ea4c0 CR3: 0000000108d6e000 CR4: 00000000000006f0
[  578.712560][T23642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  578.715005][T23642] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  578.717924][T23642] Call Trace:
[  578.719188][T23642]  <TASK>
[  578.720315][T23642]  ? do_raw_spin_lock+0x12b/0x2f0
[  578.722224][T23642]  ? __pfx_do_notify_parent+0x10/0x10
[  578.724265][T23642]  ? do_raw_write_lock+0x11d/0x260
[  578.726230][T23642]  ? do_exit+0x79d/0x22c0
[  578.727904][T23642]  ? __pfx_do_raw_write_lock+0x10/0x10
[  578.729958][T23642]  ? lockdep_hardirqs_on+0x7a/0x110
[  578.731954][T23642]  ? kill_orphaned_pgrp+0x170/0x610
[  578.733965][T23642]  do_exit+0x13f1/0x22c0
[  578.735595][T23642]  ? __pfx_do_exit+0x10/0x10
[  578.737392][T23642]  do_group_exit+0x21b/0x2d0
[  578.739120][T23642]  ? _raw_spin_unlock_irq+0x23/0x50
[  578.741086][T23642]  get_signal+0x1284/0x1330
[  578.742859][T23642]  arch_do_signal_or_restart+0xbc/0x840
[  578.744986][T23642]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  578.747323][T23642]  irqentry_exit+0x289/0x760
[  578.748902][T23642]  ? trace_irq_disable+0x3b/0x140
[  578.750415][T23642]  asm_exc_page_fault+0x26/0x30
[  578.751863][T23642] RIP: 0033:0x7f33de452877
[  578.753509][T23642] Code: Unable to access opcode bytes at 0x7f33de45284d.
[  578.756048][T23642] RSP: 002b:00007f33df3be0a0 EFLAGS: 00010206
[  578.758385][T23642] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f33de59cdd9
[  578.761418][T23642] RDX: 00007f33df3be0c0 RSI: 00007f33df3be1f0 RDI: 000000000000000b
[  578.764349][T23642] RBP: 00007f33de632d69 R08: 0000000000000000 R09: 0000000000000000
[  578.767433][T23642] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  578.770309][T23642] R13: 00007f33de816038 R14: 00007f33de815fa0 R15: 00007ffec4af7ef8
[  578.773277][T23642]  </TASK>
[  578.774538][T23642] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  578.777293][T23642] CPU: 0 UID: 0 PID: 23642 Comm: syz.9.7164 Not tainted syzkaller #0 PREEMPT(full) 
[  578.780757][T23642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  578.784524][T23642] Call Trace:
[  578.785810][T23642]  <TASK>
[  578.786941][T23642]  vpanic+0x56c/0xa60
[  578.788477][T23642]  ? __pfx__printk+0x10/0x10
[  578.790246][T23642]  ? __pfx_vpanic+0x10/0x10
[  578.791940][T23642]  ? is_bpf_text_address+0x292/0x2b0
[  578.793876][T23642]  ? is_bpf_text_address+0x26/0x2b0
[  578.795844][T23642]  panic+0xc5/0xd0
[  578.797240][T23642]  ? __pfx_panic+0x10/0x10
[  578.798840][T23642]  __warn+0x315/0x4c0
[  578.800395][T23642]  ? do_notify_parent+0xd18/0xe30
[  578.802283][T23642]  ? do_notify_parent+0xd18/0xe30
[  578.804165][T23642]  __report_bug+0x29a/0x540
[  578.805991][T23642]  ? task_work_run+0x1d9/0x270
[  578.807822][T23642]  ? do_exit+0x70f/0x22c0
[  578.809484][T23642]  ? do_group_exit+0x21b/0x2d0
[  578.811286][T23642]  ? do_notify_parent+0xd18/0xe30
[  578.813179][T23642]  ? __pfx___report_bug+0x10/0x10
[  578.815060][T23642]  ? do_notify_parent+0xd18/0xe30
[  578.816964][T23642]  report_bug+0x16a/0x220
[  578.818599][T23642]  ? do_notify_parent+0xd18/0xe30
[  578.820491][T23642]  ? do_notify_parent+0xd1a/0xe30
[  578.822411][T23642]  handle_bug+0x9c/0x200
[  578.824006][T23642]  exc_invalid_op+0x1a/0x50
[  578.825756][T23642]  asm_exc_invalid_op+0x1a/0x20
[  578.827591][T23642] RIP: 0010:do_notify_parent+0xd18/0xe30
[  578.829680][T23642] Code: c6 05 30 23 90 0e 01 48 c7 c7 00 3b cb 8b be a3 08 00 00 48 c7 c2 80 3c cb 8b e8 03 8f 17 00 e9 2e fa ff ff e8 f9 54 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 e8 54 3b 00 90 0f 0b 90 e9 db
[  578.836881][T23642] RSP: 0018:ffffc900075c79e0 EFLAGS: 00010093
[  578.839170][T23642] RAX: ffffffff818a6c77 RBX: dffffc0000000000 RCX: ffff88811a828000
[  578.842211][T23642] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040
[  578.845273][T23642] RBP: ffffc900075c7b30 R08: 0000000000000003 R09: 0000000000000004
[  578.848454][T23642] R10: dffffc0000000000 R11: fffff52000eb8f58 R12: ffff888102f24390
[  578.851776][T23642] R13: ffff88811a828000 R14: 0000000000000080 R15: 1ffff92000eb8f44
[  578.854851][T23642]  ? do_notify_parent+0xd17/0xe30
[  578.856877][T23642]  ? do_raw_spin_lock+0x12b/0x2f0
[  578.858925][T23642]  ? __pfx_do_notify_parent+0x10/0x10
[  578.861076][T23642]  ? do_raw_write_lock+0x11d/0x260
[  578.862943][T23642]  ? do_exit+0x79d/0x22c0
[  578.864649][T23642]  ? __pfx_do_raw_write_lock+0x10/0x10
[  578.866783][T23642]  ? lockdep_hardirqs_on+0x7a/0x110
[  578.868731][T23642]  ? kill_orphaned_pgrp+0x170/0x610
[  578.870818][T23642]  do_exit+0x13f1/0x22c0
[  578.872550][T23642]  ? __pfx_do_exit+0x10/0x10
[  578.874329][T23642]  do_group_exit+0x21b/0x2d0
[  578.876169][T23642]  ? _raw_spin_unlock_irq+0x23/0x50
[  578.878104][T23642]  get_signal+0x1284/0x1330
[  578.879845][T23642]  arch_do_signal_or_restart+0xbc/0x840
[  578.881997][T23642]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  578.884493][T23642]  irqentry_exit+0x289/0x760
[  578.886372][T23642]  ? trace_irq_disable+0x3b/0x140
[  578.888373][T23642]  asm_exc_page_fault+0x26/0x30
[  578.890281][T23642] RIP: 0033:0x7f33de452877
[  578.892016][T23642] Code: Unable to access opcode bytes at 0x7f33de45284d.
[  578.894788][T23642] RSP: 002b:00007f33df3be0a0 EFLAGS: 00010206
[  578.897070][T23642] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f33de59cdd9
[  578.900056][T23642] RDX: 00007f33df3be0c0 RSI: 00007f33df3be1f0 RDI: 000000000000000b
[  578.903049][T23642] RBP: 00007f33de632d69 R08: 0000000000000000 R09: 0000000000000000
[  578.906154][T23642] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  578.909282][T23642] R13: 00007f33de816038 R14: 00007f33de815fa0 R15: 00007ffec4af7ef8
[  578.912450][T23642]  </TASK>
[  578.914409][T23642] Kernel Offset: disabled
[  578.915993][T23642] Rebooting in 86400 seconds..
