last executing test programs:

2m10.981625117s ago: executing program 1 (id=846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m10.981037708s ago: executing program 1 (id=847):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="16", 0x1}], 0x1}, 0xc0004)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x205, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r8, r7})
sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="9b", 0x34000}], 0x1}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xb, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="4eb6d12378fe30f3b30f8e6053ff6e06c17379c7c6944672c57d7938636fd80846d142fff1376c6445ab7a5a356586b3a7720a889999c9670e44a89a742792f405", @ANYRESOCT=r2, @ANYRESHEX=r5, @ANYBLOB="84a602608194568b0414dc88c27ffd31a68d2ce4b138e21b1e04f2ed1dd2fb9a1da84c5cee", @ANYRES32=r3], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000dcb2bc4d5591848d4ecef0cb4d4575611d8f6148d7d97ac251a78e70763adb39bd69b2f4443d49ab4f54b53479a4234646ed117117bcb8caea3a8016b3f2148cd831f63c1dd00f182335d357e5694a79858b65acb5b7725b2084d2310404e4d1ee8325e41e6300068a993653de76845c7255d1dbaae623efee2eb7fc77c2687680be357c4a6050ec540a72", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000030d5796800", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000050000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='mm_page_free_batched\x00', r13, 0x0, 0x7fff}, 0x18)

2m10.739709404s ago: executing program 1 (id=848):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x8}, 0x29, 0x0, 0x0, 0x1, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8927, &(0x7f0000000040)='\xd0\xb4\'')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)

2m9.756312221s ago: executing program 1 (id=852):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)="27050200160014000600002fb96dbcf706e10500070088a8000081006c95dbf3900e9fc821093377eec8e7193e65345790b68b71ac5d742aa124001a5ac96393dae7c7f11326e8ce07d1b0443f93fda6318fd800caab3a60a049f41926d3fca26e600753a9a8e4628aec0373c2d7547ec3be7e3fa425414cffbf31a85b", 0x7d}], 0x1}, 0x4040804)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000003080002402de8387c28000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100e766010000"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

2m9.382961582s ago: executing program 1 (id=854):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x60, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x3, 0x11)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000700800018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, 0x0}, 0x20000884)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x20}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="020e006e0600000026bd7000fcdbdf2504000400070000002a0700000000000002000000000000000200"], 0x30}}, 0x400)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x40)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x15)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x107, 0x2, &(0x7f00000000c0), 0x10)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/14], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

2m9.184832776s ago: executing program 1 (id=856):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400dfff070000000100000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x8000000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x2, r1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x2, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000000}, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

1m54.042060554s ago: executing program 32 (id=856):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400dfff070000000100000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x8000000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x2, r1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x2, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000000}, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

15.675316329s ago: executing program 3 (id=2101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x110, 0x4, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "f8ecd4feb9a66ffac57b244085bc8d7cd2105d3d5aa5d3bf819a5f9cab877f637a3397ec602ee7ab86b8086c83fdd04b6e4abb667a4660f83886dadfdbb0f401ec0ac69abe85dc0ffc9b0f"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x110}, 0x1, 0x800000000000000, 0x0, 0x40}, 0x8010)

15.558788519s ago: executing program 3 (id=2103):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000001040)=""/4083, 0xff3}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000000380)=""/210, 0x93}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)

15.557145441s ago: executing program 3 (id=2104):
r0 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x100)

15.489590135s ago: executing program 3 (id=2105):
socket$kcm(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x6}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xfd, 0x7, 0x54, 0x2, 0x0, 0x96, 0x8c23c, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x8a00, 0x1, 0x401, 0x5, 0x2, 0xb, 0x10, 0x0, 0x7f, 0x0, 0xc}, r3, 0x0, 0xffffffffffffffff, 0x1)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x28, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x9, 0x1, 0x0, 0x1, [@generic="81cf721aed"]}]}, 0x28}], 0x1}, 0x40404)
ioctl$TUNGETVNETLE(r4, 0x4008744b, &(0x7f0000000180))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x15, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100)

15.111086531s ago: executing program 3 (id=2108):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$kcm(0x29, 0x7, 0x0)
recvmsg$kcm(r1, &(0x7f00000013c0)={&(0x7f0000000000), 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/135, 0x87}, {&(0x7f0000001240)=""/119, 0x77}, {&(0x7f00000012c0)=""/126, 0x7e}], 0x7}, 0x142)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001400)={r0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048080}, 0x4060011)
r3 = perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x0, 0x0, 0x8, 0x61, 0x0, 0x4, 0xe248, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001540), 0xc}, 0x2100, 0x5, 0x10000, 0x4, 0x96, 0x3, 0x8, 0x0, 0x1000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x1a, &(0x7f0000001600)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @ldst={0x3, 0x1, 0x4, 0x3, 0x8, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000001700)='GPL\x00', 0x4, 0x81, &(0x7f0000001740)=""/129, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001800)={0x3, 0xc, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x32f0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001b40)={&(0x7f0000001940)="ca31e4d39d006da556840c631ec22b784bbba78e1e", &(0x7f0000001980)=""/63, &(0x7f00000019c0)="7a44d17e7eb40349cc423b5262bdb704463d13d659d03e3cb28ccb2ea5cdbe063912bd9d165abcda8324ec7d00f58fdb6630b6636d9df60ab0f41ea556b927ec9887f30b503e26bfa617e1", &(0x7f0000001a40)="d8d03520cefc17655676476d7aa3dae6c6801539dc7213eeef754bfc22a13417579c6551f279751f578366bcff8955c5291aee4e6b69d31bb54c21715b1f0ce87132f8e380ffd7c0fe5de463b77627ee48194340942a87d6257336ba450cba1c208029dbda4dabeef28fda7f57ff94392cf33e832d42c01552d226d0a051a245b25bfd49bb74ad4ac0748e8f0d9b061a75ead91003fd2b51519a2798fe591070bcfaf00aca6c1b5809b51e3624fcb626ca74387e4610df158c8dd39e54d1412d287e0d5e027f88d633b6ab8f9252cf6d65446f9ea65c05f22da9d46367dc03f78ac6c3a783", 0x3, 0xffffffffffffffff, 0x4}, 0x38)
bpf$ENABLE_STATS(0x20, &(0x7f0000001b80), 0x4)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz1\x00', 0x1ff)
close(r5)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@generic={&(0x7f0000001c00)='./file0\x00', 0x0, 0xc}, 0x18)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001c80)='cgroup.procs\x00', 0x2, 0x0)
r7 = syz_clone(0x14940200, &(0x7f0000001cc0)="801341299112a051dcd07cdab1849d9c50931e624113f572179ff3f26d926bbebd16167cb8b9a5803bca5a18d9e6e801b887359f4da458217252ec5912ebec105f301b7f2627fed74f95c931d983cab8ddd943cd2579473befb22a0fb615576f7c067fd2e0b691a21941276628b52cae433fc8febb104ce546761923a6b92180eb38dce9ad00d829ca840090591f7e50829b6e0e0120ba4c88980e851b04802deb89f7009dc775ece16021b2a385b5ebf35224d2bdfd6ed38733734eef2d4991b739f18b8cd891ed3fa039df0973279936b272b792bb6aa24f808760cee02aaf8af8e02acf7fc437c3c5b4b27d81ffd35c519f14c96f5f16", 0xf8, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="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")
write$cgroup_pid(r6, &(0x7f0000002e40)=r7, 0x12)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002f40)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000002ec0)={0x3, 0x80, 0x3, 0x8, 0x5, 0x7, 0x0, 0xff, 0x40790, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000002e80), 0x1}, 0x4300, 0x60, 0x9b1, 0x9, 0x97fe, 0x7fff, 0x6, 0x0, 0x20000, 0x0, 0x7}, r8, 0x4, r3, 0x8)
getpid()
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002f80)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup(r9, &(0x7f0000002fc0)='syz1\x00', 0x200002, 0x0)
sendmsg$AUDIT_SET(r2, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0xd6f8ce14ee1d6c9f}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x3c, 0x3e9, 0x0, 0x70bd2b, 0x25dfdbfd, {0x28, 0x0, 0x0, 0x0, 0x4, 0xa, 0x2, 0x10001, 0x0, 0x3, 0x401}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004890}, 0x8000)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000003140)=@o_path={&(0x7f0000003100)='./file0\x00', 0x0, 0x4000, r5}, 0x18)
r10 = openat$cgroup_subtree(r4, &(0x7f0000003180), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f00000031c0)={[{0x2d, 'memory'}, {0x2d, 'net_cls'}, {0x2b, 'cpuacct'}]}, 0x1a)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20020003}, 0x40001)
perf_event_open(&(0x7f0000003340)={0x3, 0x80, 0xa6, 0x0, 0x2, 0x5, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000003300), 0x2}, 0x20, 0x1, 0xc62, 0x2, 0x4, 0x401, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x6, r3, 0x8)
socket$kcm(0x29, 0x6, 0x0)

14.998341165s ago: executing program 3 (id=2109):
syz_clone(0x40000, &(0x7f0000000380)="2995ff619674a62b468be4aeb46cb06862acb0db285977beb25fec894842b40f5344f8f853b5aac22f4bbe78069f4b1ff8fc89d7e7f717c883cb3f815eba646019384140695bda8b29bd61956f0037d8b2798f71325423a52c81d4ee3c14b3f640f6e30907c60f5eab0e7a7aa3222c609de2b45189c2dbcd2753b47e1c0b19e06515b12f640ff87db929f8762ab9b8c602cf822016931230fb77bbef2602804d9e85929a31b201276f70221b66cf4cbaa07c67a97e37bef7c8d185de69", 0xfffffffffffffef0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)="0bb963427b2d0bcb8d971b76db92436b001327dfab29760a06a1bcc4645a403730344e56298dfb0efc91")
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004bc, 0x0, 0x2, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004700)=""/4062, 0xfde}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f0000000040)=""/94, 0x5e}], 0x4}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)

480.592161ms ago: executing program 2 (id=2254):
socket$nl_audit(0x10, 0x3, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x4, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x4, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x5392f5b1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xe9}]}, 0x1c}}, 0x40040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf33c9f7b987", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf33c9f7b987", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

351.016341ms ago: executing program 2 (id=2255):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000240)=""/30, 0x1e}], 0x9, &(0x7f00000002c0)=""/15, 0xf}, 0x10000)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa104000000000007010000f8ffffffb702002e63"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000640)={0x4, <r3=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ac0)=r3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

254.608192ms ago: executing program 2 (id=2256):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
close(0x3)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001a0081024e81f782db4cb904021d0800fe0055a1150015000200142603600e12080009007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r7, 0x0, 0x3}, 0x18)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0xc8, 0x1, 0x8, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x0, 0x15, 0x0, 0x0)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000071c"], 0x30}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa104000000000007010000f8ffffffb702002e63"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

251.780333ms ago: executing program 0 (id=2257):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000041000511d25a80648c63940d0324fc60040035400c000200020000000080000000040180060410004500", 0x2e}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f", 0x407}], 0x2}, 0x24008040)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x400000000002, 0x6}, 0x8224, 0x3, 0x200, 0x6, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x5, 0x5811c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r2, 0x0, 0x3}, 0x18)

129.531994ms ago: executing program 2 (id=2258):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000400)=0xffffffffffffffff, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa104000000000007010000f8ffffffb702002e63"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket(0x1d, 0x2, 0x6)
recvmsg$can_j1939(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES64=r5, @ANYRES16], 0xfdef)

128.617459ms ago: executing program 0 (id=2259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a0000080009"], 0x2c}, 0x1, 0x600000000000000, 0x0, 0x20040000}, 0x44000)

127.205114ms ago: executing program 0 (id=2260):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000001040)=""/4083, 0xff3}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000000380)=""/210, 0x93}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x6558)

68.292139ms ago: executing program 0 (id=2261):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x50) (async)
recvmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)=""/264, 0x108}, {&(0x7f0000000380)=""/161, 0xa1}], 0x2}, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00'})

67.110605ms ago: executing program 2 (id=2262):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x44011}, 0xc084)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x891}, 0x40000)
r2 = syz_clone(0x0, &(0x7f00000002c0)="7ae21adbbd7dd034a431dba80c2416a2e49a2587fd53f00e94951337d4907bd306277c5cb2dda2795626e9bc4d70096153a12abbcf45f2a30c1a600ab4179fdac5e3e008c49a8bb9c85f8b31cd0c600a8a0f50f6d6afd65f09fbcb163bbe0b378f158bf9c6aba78db72b687d9ca363ab4808710e463b9afdf8c8", 0x7a, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="616aa0b7b003e97734ca89ee682876e86152cbeea0c097a398fe0e8062dedfbbd8d8b78d2de5787522665a07f871b4fff22d81b0631e0bdf04fef1b06ae164680a68a485c5b015876fcbeb8baf676e0689fb74ad3fe6b071183a7458978c551276bdefb60e21d1fafa9c9589456f4b3d7c")
r3 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3, 0x6, 0x8, 0x5, 0x0, 0x10000, 0x48804, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xa945, 0x0, @perf_config_ext={0x2, 0x1}, 0x100, 0x0, 0x0, 0x5, 0x3, 0x9, 0x7f, 0x0, 0x101, 0x0, 0x200}, r2, 0xc, 0xffffffffffffffff, 0xa)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f6, 0x20, 0x70bd26, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004010}, 0x408c0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xd}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x85, 0x70397e04, 0x0, 0x9450, 0xfbd, 0x9]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048000}, 0x4001)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={&(0x7f00000006c0)=@isdn={0x22, 0x31, 0x9, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="986b868b82250aee962317429fa9f919e9bb2a660c29b07e5bc5237b624c6594cab1fa058aea970e5d966b89eb877f0566b78ad72b7f1942032f6051d5ac3d947719cd048ed7d4d70e64ccf7821d18540c75fc835e582c7ea7e21b37d15123a34aec59dbd13c1ecdc0823b135bf42c88f0a66ab79279b6dfd3689f04dab93e95d6de527a6df981ebfac0a72f5d9734942cf4d579a4c93156476b5324ee4adb10a220f7e0d86c43a93a871d7271d6cb69a8ed5da8a1c7f08180ba9ca5983122903de3c58a88a17f654530fe7b2321e4eef2134d5db8375a", 0xd7}, {&(0x7f0000000840)="5b92355f65c46bbb6790e5fae7eadb31e482bd332ec143b0b86f6cc8c71322a370edd36796f382cbd3ea6c94ac8599f876b8859be1c36b233d719a0b63686f7bc4b442bf98bcad814952cfb1dc18d500560c5573ce2cdead26be80f7c3b744885fc24276ca", 0x65}], 0x2, &(0x7f0000000900)=[{0x18, 0x29, 0x1fef, "e926f3e7"}], 0x18}, 0x80080)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000009c0)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x1}, 0x15, 0x8, 0x8, 0x7, 0xe, 'syz0\x00', "103e1574975a42817cdddcd5cb645ec9790bfe0e75f4e0e3a71d9a1d2118a418", "675dbaa9ad9f4cddeafdb2aacd76e58cfb3db758f098d6fdde8208eaf98e4a96", [{0x7fff, 0x8, {0x1, 0x6}}, {0x8, 0x5, {0x1, 0x6}}, {0x3ff, 0x8, {0x1, 0xa}}, {0xe819, 0x5, {0x1, 0x5}}, {0x1, 0xf, {0x1, 0xac}}, {0x8, 0xd, {0x1}}, {0x9, 0xfffc, {0x2, 0x8e3}}, {0xfff, 0x400, {0x1, 0x5}}, {0x8, 0x6, {0x2, 0x8}}, {0x1000, 0xd7a9, {0x67bad170365860c, 0x7}}, {0x1, 0xf4bc, {0x0, 0xffffffff}}, {0x3b, 0x8, {0x0, 0x2}}, {0x5, 0xbf, {0x3, 0xfffffff9}}, {0x9c9, 0xfff, {0x1, 0x9}}, {0x9, 0x0, {0x3, 0x4}}, {0x9, 0xd2f7, {0x1, 0x8}}, {0x6, 0x81, {0x3, 0x6}}, {0x3e72, 0x8000, {0x1, 0x6}}, {0x8, 0x5, {0x2, 0x80000001}}, {0x8, 0x2, {0x1, 0x1}}, {0xef, 0x5, {0x0, 0x3}}, {0x7, 0x4, {0x0, 0x5}}, {0x80, 0x3, {0x0, 0x5}}, {0x800, 0x5, {0x2, 0x65c}}, {0xb, 0x1, {0x0, 0x839}}, {0x45, 0x939f, {0x1, 0x10}}, {0x2, 0x4, {0x1, 0x8}}, {0x7, 0xf8f, {0x1, 0x903}}, {0xfff9, 0xa298, {0x0, 0x4}}, {0x7, 0x8, {0x2, 0x2}}, {0x8e4b, 0x3, {0x0, 0xca}}, {0x81, 0x3, {0x23c0b04e350f56de}}, {0x0, 0x3ff, {0x3, 0x6f}}, {0x3, 0xffff, {0x1, 0x4}}, {0x3a, 0x6, {0x0, 0x9}}, {0x5a7d, 0x8, {0x0, 0x8}}, {0x7fff, 0x7ff, {0x0, 0x5}}, {0x0, 0x0, {0x0, 0x3}}, {0x7fff, 0x8, {0x2, 0x1}}, {0x8, 0x3ff, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x8, 0x95, 0x6, 0x6, 0x2, 'syz0\x00', "9993aa7a0fb51f874efed02bd79ea47c8d98c62c6c79d054e9cc2015e2ef025d", "b866298eba0b1672895e077c18ca4dafd11f20c21bcb4a11d60786687b2a3d78", [{0x3, 0xfff9, {0x1, 0x7f8}}, {0x8, 0x6, {0x2, 0xffff}}, {0xfffe, 0x3, {0x220c94e57098d930, 0x4}}, {0xbc, 0x7, {0x0, 0xa}}, {0x82, 0xb, {0x1, 0x636}}, {0x3, 0x800, {0x0, 0x2}}, {0x6, 0x3, {0x2, 0x1000}}, {0x6, 0x7, {0x3, 0x3}}, {0x4, 0x0, {0x1, 0x100}}, {0x8, 0x9, {0x0, 0x8}}, {0x2, 0x4, {0x1, 0x5}}, {0x1, 0x5, {0x1, 0x7}}, {0x6, 0x5, {0x1, 0x1}}, {0xe, 0x7, {0x3, 0x4}}, {0x9, 0xff80, {0x3, 0xfffffff7}}, {0xe, 0x800, {0x0, 0x800}}, {0x3, 0x7, {0x1, 0x9b8f}}, {0x0, 0xd58, {0x1, 0x4}}, {0x3, 0x9, {0x3, 0x8}}, {0x3, 0x5, {0x3, 0x1400000}}, {0x1, 0x9, {0x2, 0x7}}, {0x0, 0x7ff, {0x2, 0x2}}, {0x5a7}, {0x6, 0x1, {0x0, 0x8}}, {0x1b1a, 0x5, {0xabc8b8603f196ce1, 0x1}}, {0x4, 0x80, {0x0, 0x5}}, {0x6, 0x0, {0x0, 0x81}}, {0x9, 0x3, {0x3, 0x81}}, {0x8000, 0x21, {0x1, 0xc4}}, {0xffff, 0x7, {0x3, 0x8001}}, {0x1, 0x4, {0x4, 0x9}}, {0x3, 0x7, {0x0, 0x1}}, {0x1111, 0x9, {0x0, 0x7}}, {0x6e0, 0xffff, {0x2, 0xffff}}, {0x40, 0x3, {0x1, 0x3}}, {0x100, 0x8001, {0x3, 0x4}}, {0x9, 0x7, {0x1, 0x2}}, {0x923, 0x1ff, {0x0, 0x774d}}, {0x4d71, 0x7, {0x0, 0x8}}, {0x4, 0xfff, {0x1, 0xf16a}}]}}}, {{0x254, 0x1, {{0x0, 0xdeb}, 0x9, 0x8, 0x3, 0x4, 0xc, 'syz1\x00', "d9ff321143e1edd6b69b609f5878f3ee1372a36cb0a9721d6a102f2589b19f1b", "9341e0e8e2cb472a70fe84111b697f8cbd599793eecb108fc4d3446044301750", [{0xb2, 0x309c, {0x2, 0x2}}, {0xfffa, 0x1, {0x2, 0x3}}, {0xf801, 0x1, {0x3, 0xe}}, {0x3, 0x214, {0x2, 0x4}}, {0xf, 0xb95f, {0x0, 0x5}}, {0x6, 0x7fff, {0x2}}, {0x7, 0x3ff, {0x2, 0x10}}, {0x2, 0x0, {0x2, 0x8}}, {0x6, 0x1, {0x0, 0xff}}, {0x7917, 0x0, {0x0, 0xfffffffb}}, {0x9, 0x1, {0x1, 0x10}}, {0x8000, 0x7b6, {0x3, 0x8}}, {0x5, 0x8, {0x2, 0x6}}, {0x1000, 0xce, {0x0, 0x80000001}}, {0x100, 0x1, {0x0, 0x7}}, {0x8f, 0x6, {0x0, 0x7}}, {0x7ff, 0x8, {0x1, 0x8}}, {0x200, 0xfff, {0x1, 0x9}}, {0x5, 0x9, {0x1, 0x800}}, {0x6d, 0x5, {0x0, 0xf852}}, {0x1, 0x2, {0x3, 0x2}}, {0x0, 0x8, {0x0, 0x8001}}, {0x800, 0x2, {0x2, 0x100}}, {0x6, 0x4, {0x2, 0x7fffffff}}, {0x9, 0x0, {0x3, 0x4}}, {0x2, 0xff, {0x2, 0x3}}, {0xfff8, 0x3, {0x3, 0x4}}, {0x6f, 0x100, {0x2, 0x400}}, {0xfffe, 0x8fb5, {0x1, 0x28a}}, {0xdea, 0x3b7, {0x2, 0xcb}}, {0xfffa, 0x2, {0x2, 0xb}}, {0x7, 0x8, {0x2, 0x6}}, {0x4, 0x0, {0x2, 0x3}}, {0x200, 0x71db, {0x0, 0xfffffff7}}, {0x8, 0x8, {0x2, 0x3}}, {0x4, 0x9, {0x2}}, {0x0, 0x4, {0x3, 0x12}}, {0x1000, 0x3, {0x1, 0x809}}, {0x18, 0x9, {0x3, 0x4}}, {0x6, 0x6, {0x2, 0x6}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0xc5}, 0x120)
sendmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="194efa46ecd249b5c28a42f0fc738f13ad7c775d6a73632abdda0fde158d8096fbb4c26d724e5ca15b50f2ff13c9c9465a84993a28b3acdfd120ce310281546757cc4b3b65c027485efabc32cb3fc4cfd5c66d0dde02", 0x56}, {&(0x7f0000001200)="9b8a375d63a312d11762e20222e465d86ae85a011342a550bce6bc8002540cf35e54ab286dde0b63259854bc4c3274b577d5a1e0324ddd61827c0910dc2caca1eadb5ffc778098577f42f76693e7c1278c819b66acde7a5c63a3bf4ccd0aba65a2a46136a131c70c6c1211b919eef86773845211598f2fa25fa6c1e23d5902066661cfb9200ed17726924a4fe189cabe873cca09cc3a70d3d0a9c5a6d37db6ffd7588fa195d44d565d54", 0xaa}, {&(0x7f00000012c0)="882dc8d7274e494d1611152053a4661e275f0cf1f1ae87a5dc621292869fe1de5ffaa7807681db175ff6eca3fa1c5a002e89cc0ee7ca169c28f3a7b23e6f482ce8f4676778b5459756535289f1", 0x4d}, {&(0x7f0000001340)="ce6df69fd92d23fdfa53b2622afb859bbd85d8be3d0de1d9a74b54512ee1555bb873365b56f2526009fc7dee84d0d283b03b5d21fc268a5733a0cf014ddf773852318b3e3ccbd5518ccc2776308285d006147f3e5cbe2e1229c4abdf796605b7b721c960cc2746610ae206ddeeda3d3995bddc5f1839ed41e64d98913995b415b1b3a3bb0b02abd04d82456ed564c5974519f98a3f9310f5532f7925b732bf75be6b4582020b1e4a44717e7046f0ac0cbf0624c38a2583f38ee9847127250c3240950fd04e4752aed92251ea1894b9cff11b6a017aea13f553b5e53d566a76d46b48f12ed5129327c963d32f9b771d3495", 0xf1}, {&(0x7f0000001440)="2830c128028dd8292ef826fcf9dd0035baad718cee70a14ccfde97e7a690f73890d5a0b310a8d02ac0956ee8c57a60e89c529a6170a20016bfa02fb2fc13c3295a69bc1ba663811628ad847e62825c", 0x4f}, {&(0x7f00000014c0)="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", 0xff}, {&(0x7f00000015c0)="0e4e15c08671d96d73c9e9d4e29897ff3211145ededaa36e0c77510575940505eed2c3bd9008a942dfa970ec175794c91e794d09ef18d7415c53ebe2a40d2e4486844823bd6cf28dcda3ab18579698da6d1c4bbf105d2e351814a66644333dc1c6d5263643fcb54805c2256093184e3454398a272222d57cc80046c4ed65cac2e0cc7ec3fc6dcc5373a385c0031202ac01532b8e2c37f5f0aecf631497cf2fee6423ea575d7192172bcb82c15ee1295d5140f194aa471a0b6be4acd2391729233f160d796da04e0aa110595c1362bc547ffaca1251070986433992026fd5b2d5aaefeea9", 0xe4}], 0x7}, 0x50850)
r5 = gettid()
perf_event_open(&(0x7f0000001780)={0x0, 0x80, 0xff, 0x8, 0x7, 0x80, 0x0, 0x6, 0x7747d276807e527b, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0xb14d, 0x8000000000000000}, 0x2, 0x9, 0x5, 0x6, 0x1, 0x7, 0x1, 0x0, 0x1, 0x0, 0x6f}, r5, 0x5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000001880)={0x3, 0x80, 0xa, 0xa, 0x0, 0x81, 0x0, 0x6, 0x40100, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000001840), 0x6}, 0x104088, 0x288c, 0x8, 0x9, 0xb4, 0x7c1, 0x3, 0x0, 0x4, 0x0, 0x9})
sendmsg$sock(r1, &(0x7f0000001cc0)={&(0x7f0000001900)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001980)="74b7707b75f58587be2b9cf2ea26a4c9a6466c622b7cf115afdcc19cb1e81d6ee5f1b578e01c65beabea70c1cdf739dfcaca3c7af80a0539bac120d7cf73735a0a0ea9eb5a5a8c470c876e6f7d8d512ce8cca268da8a4d5362324e709d85989dc0e46e0d701843d51b46d812446f109a558c1ea30a0ea480f52dbfc6ae1e871a18417987f7d624a2a4ad7149e59e9a7762f77c5ab3eb9fdc641a0feba4b29c124eacb6f70c6c3835ae9fb1dbbfd5ca84b0e647afadcbac0c38c6c45dac9ae76eb849feaf4e0099aed74b6e5fbb14340e1e7f28e812f8", 0xd6}, {&(0x7f0000001a80)="fde281bd6e431578adc22c5c9efd6e147a7b51c5eb91f48f2fc6783c828dbcfc8a42be159d4240af2ed235ebbb5531f3d6fd71bbd14511b91f66ce9a6ef3381f6d2a435b645e", 0x46}, {&(0x7f0000001b00)="65778864c5c3c124317dcd98ff1720d4fdeca74abe49b05b6979ae4a31704444b8a5bfef425d487b2d962c3416e9df307476a1e202b86ea70cbbddbec1e79b9b11d9fcd8cada47a0c1dd236125c1fcb3cad6a692a8775b68e3a004d7962fcbde79d3f642353cb2fbe0b482f0f6bdc4f1bf443faee00032c4348a15000258fb4a792d5f454d0461f7192a9fe036e11e851f9e9a748a149c09db21f04a78e7b40100f2a86284e8b810b1cfac89a6fe902b118bfa73876c09a9423868e7", 0xbc}], 0x3, &(0x7f0000001c00)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0xac89}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}, 0x4000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40040)
r7 = syz_clone(0x10000000, &(0x7f0000001ec0)="116fd84dc8853677b02c8287df4ff98d8b18d4f97aaa906439225f55a50e3e151ff72831b0aceda69c4d36899575f62c5950e4f168afff4ef1b7411f49f04e060728d95b5a310a31fdfd005d7857ac322cd452b267ed60642b54c934e0", 0x5d, &(0x7f0000001f40), &(0x7f0000001f80), &(0x7f0000001fc0)="d4e7a98f5c9817503582e3fab7795505492b9c8de103162addce72301459ff8bfc0ad34d5fef354aceade9548852f3c0899295209647d555dc64")
perf_event_open(&(0x7f0000001e40)={0x4, 0x80, 0x2, 0xf, 0x4, 0x7, 0x0, 0x10001, 0x40002, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x8e, 0x3}, 0x800, 0x8, 0xfff, 0x5, 0x9cbe, 0x100, 0xfff9, 0x0, 0x4, 0x0, 0x1}, r7, 0xc, r3, 0x9)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000002240)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002040)={0x1ac, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0xff}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xf7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x1}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xd, 0xf0}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x7}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x29}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xdb}]}}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x7fff, 0x3, 0xfffff001, 0x7, 0x6, 0xf]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x6, 0x4, 0x3, 0x2, 0x401]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x7f, 0xd]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
getpid()
r8 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg$kcm(r4, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)=""/123, 0x7b}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/90, 0x5a}], 0x3, &(0x7f00000033c0)=""/94, 0x5e}, 0x10040)
sendmsg$nl_route_sched(r8, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)=@gettaction={0x20, 0x32, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005b80)={0xffffffffffffffff, 0xe0, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000058c0)=[0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000005900)=[0x0], &(0x7f0000005940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000005980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000059c0), &(0x7f0000005a00), 0x8, 0x85, 0x8, 0x8, &(0x7f0000005a40)}}, 0x10)
sendmsg$inet(r6, &(0x7f0000005e00)={&(0x7f0000003580)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005840)=[{&(0x7f00000035c0)="1a73cb8b56c70f8ddea97d0fafe171e01658aba9034755c5d1a39530e969e43d76ca80616fea2097c2fddf6035c353a618723c530ac7910e34812df9164eced99ae1540e514abd7568f65785bcf15b23e882a356621fc938069151afa42855ed35eeab32e945", 0x66}, {&(0x7f0000003640)="488d8ed1d6cfe7e95cd1d324a19e14b9557f18688b41b74c8d60d3112050657d5eaf40f4290db17ef2aa80f0c687c8673737edcc293c32a669715e8bfa081764960cfacb45b2ff852f15b5b6bc196b011746f70e1e97f17194dfc6336c72d650000f80873b497797afb3bf717cf9663070ea85495a0f7c9530f79fcc2c7012dd408e3af5298c9b29", 0x88}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="0015f06f1f5cccedcd60bbfca04d84fcd53642885dbae43d6c52f16cc4206a01719f72499dbf09a06ce3be22cd8ca4905a6ab165e603197068ce0350be47814a9d742ee3b9a3c59b16e8ad62314452fe4aaf65c19a9f9353670c636ec0fafeb5ced4be78c1d5dd6b2a5f25992370f3f47382038307ea42fd831e2871f88e83bd94606de63ee45b50633710f417e8e415e8ac01abf44a075a1da11e12a6ca2d908efa548c2ca953ebda20af84f631de2687089d2f2028d0f8b3e9481af2ee0c4b97913c2e595c587627eb96412f35748876ead2a3af04f984f8d905b8f46da8137ffd4ec2ece6753f96436c2eff7f83b1833aa0b6a78c7ffaefede39f6207d349aa56f041875e7a8bef1bbf46c62ab3d84dc94c9ce00ef801cb7c48b52a7a25aafcaf1c6f630a1ec81e5150d27d04c879efc31ef3aca6919143de54a5cdb2339541cd271713e7c7e1082b63b1d1256417e0416d7ee1d59b6d16e66bb35ed13bbc21ccea7b9adda6ebdf2319417a0457b2c9687164b790a4787bf91c526a73f3b3a1ac0dfe4649074638ed9a2ecb71801789371f503335be0734cc80687b7eee11354db103c8d150bb55da94d5065245873599bb9648916c23b8d16a837cf743aa9cdcf2e9bda9028f44db8f2240fb5b2656c089901cb1b104f22b18657d4153d9d2f77768f7e3fcb80a04707822cbd57aa0ab7c0159d6b1eb9f7376118535770c3aee3d6d0f704d974ce5882a028710e7b3df15cd7c95c398a7e6acb8fdf39e8ca15284d315673485840329194d573a71a51fd8cd6334a2945f455905f939baeeb1d0a6e00594ca99add0498f58d06292060f8a658db4259d4e45e59b29969a642dd1b18cdaadc268ced2e30c01e2cd11f2645548357e1a123dd090de62e405c9523bb20e24c031105b391beade0e044e1e5212f30160b970153c3e58754cbb1e8bb71ad8f4f8d0d4efe12eb1acce7c38c09a0f4ca25b25b8c7b94854cf0508145cf3117c6b25fc9682de6a8df370ebb72da060f9d3ffa686ad6c4d88b1c4b9ef87c4a7c7757802153b031f2f4d62563c86d3a26cb2ff3e195a281617424f5c6474f537a9abacc18b0b4ff86c43635cfe14d71d5e96e068008095007a190fd2a879f00e6e2ad50bea843e28dbee727b157774f634d70fec2c5e8abc1e87f66bb96ff3e2c4b4d87439d8cb7458857dea3d2952874e6d848eba87916fac972c1a0ce8f75112c3073f14b80e8cabc6dd6ee72e796d919bd3af8ee517870d87268dcac00ed3b852544739638da20de32a5ef58c702f5fb5b55174efafdee99c11a4451b466925dbc842c29b79ed0f7eda649c60f936fbad8f66e7bb5b958c83e88a9e05aa15aa29494604dbe1fbc25927b7d17dcd58c80d0f9d78909f30d500e6238c633a9ea743db46df73479b18fa32db4226a614dafd337f36e1bb6b9aad3c738b8937d76a3d03ba93f4effd1d6988d791fd2f8c803a17d07a5c75d27564870df8db06c1da08986facdc10b840767535286902802a20dcd9fe159da4a61c414c4e0defdcee17d4c7f630cf02dfe95d700c65ecf43b9b65c413ac4eddf98efc89242c67c097beba1bdb9f10bb7233a814ceecfec4cda787a0e7fb65c78a9f656a103ab24c83f9cf5833910f30d465c19832e999dc36edf4e9a67ebc939c469d1910c5335134f3804fff44383f37baffa4ab54a6abf7d901669007811417a6183f926d118610a96ff834b99f68966f50fa7c035af24b29445c84d56bbf5da75ff0090d2fdc7c883e20f9b1ab890fe3053442df752ea007fc4c5b1bb2a01164b55067fa417f09d2ce086f17106d18692a75332699837ac662bb824c3d44cc22729d33850facf7a537ae5359c703c5e5503e3a993b0094daae1e1d1929986a052f65bcec10caf6a323f1140135ccf108737dd221af5b8fed55ed211e47e7452f45c1e4029d95a0e85df0cf62a5bb215deafb9efb4ac6567726ba9c719f8ad58205508dbefa6defa2b37125252440b5fc1a7ae18430e72492e5fbb7bd4e2db8cbd17b0825cb5e900f612dc172f315191930da43624d81beb9823ad690b4e5d764d40c8da2a5b86fff19161f9e942ddaf514ff6d0bdba321e359fedd4b40adefbdfc1bbb8bd61345a0717dc0127879a28806547d7a3d8f9231dab30fa890952621884a5088499a09694abfe8d409c21eebc952b060303d2c9838b5c3cbad9df001f3c97ade3b44adc30d67976348009df3da431a01ddd8ba0743af3ef2899c04ac09dda17537e34370208d9265b541929ce1718b6301ebc7292359d3d06dd07a2e7bfe070af91a9993a7e9e2101c6451ce06d7bf148e1dcfb7b8d84c45351a20a86be3d6a4bc25ceefe7d397ac29e0014bb72eba8f3f258dcb7cb186c2caca5df6486888d0611efff85adc2c86c02d16153bdde0f41a07f9f5d375da104feda316a35506aa23e43f78d45ed9e74c27187f78a2f88b677360f69f001184651ecc3f5f243920585f9cf03c8c90ec7c1512b0562f0454670d00398917fc7da514c040a2161ab1cb71821381daf848e8c85026c5339ff73440740bcfdac669e92168372a5bbfc2e641e69c916d6f6233440c41fc70ccd5d1876df120913c0223a5a7fce4e4504ade5961f9283c60ea7c998009e04bbc17a3d8eb40bc7ba94505c6a648ed486ccce20abd95319371e33e8639a4a3af24a18d73e0fb4e29361f54e987c36b3a5ccec186c206650c311349fbff70e6a67c12a551ff7d0e04edc04593e530b0741bcb5935c9b0bd90b3bb8fbbd2d0741a8a372cf10b55e67cfb736e055c5cd720e07d8abaf057e5a3d87fcb704b8e1141505071795b663371cf797122a91ed00661f3f856161367c52635c51b1be6ba41a96a077df181ecf34ade1a35e0e42b5e55d0b2f81d62674b8aef92bf2ef11ae57967328a2b044d586bad2dbf2c243253d645afa33f8d21ef795b96c3167d3797679b6508253f9a6eb8b0102301095db7fba3e81627de6fe0a3b47cc62eae51625e8dd9708b3bad37e5f17fa2ba085331d305b1ac4135ffa450b20724b16f9b9ea99c0a0fa3f64bf55e1e802f882c6d1e8d60e53b37ed63e58d7e1ff2dd6106853b3aa67b8e05b6a4febbb04da7094d881bb4f5e9c11f0ba069a202d830c7a23bd81cb6215fec0a9161218c09ea4ecf7c248451c584b33ec88d17d7bfd3633496346e9a5a72a92f32e90d99eb19b671e7e60d754068423aca1ef95a736d614c8a95a118862292c5ee88f0002212634f42120b8907764c5e187a0a0c314a1cc20c536fd8acedf0d7415bdadd36d5d24621909c4c72020062273fb8d5463ea5c72bde3db90f9adf8e3273df79620376a270b8bffa01f961cc2a5b34c623d35839610b63b1e94fb1f66b5d49c93d06d0c46b132aff5b830c16a680cdb9cfc8803cf328084625b81110c60e39d3705cdccb5b6090def1ab3463bb5892628d71849c39f35ee8532d577e9fe8b124c6efc14557cf1a930775b642168e7b5430568854099fbe8ce02a7d9ab4e66f68a8211e0f0e08ba2774b6917f7b749fa7c5ad8dfef41db2f831c1d3dd75e7e2005f833f9e9164f6f55d61d8b561463208995cff5deefa8b5f74bd7647278b638c40a31dd56855efd6e137e02378aa17acd3f2867eda7a3ffc955c5dc8598be810698d223ca289dd2ac804d394afc0274b28c5e71397720116a7d8367132a1b1da7e640eab291ed794d02301a4b46838fa9449beb74bdbc03dec83e55517097669a707ffb78e32be5bce4cb6fd815bf008f82e21b63ed346b42a60d1658153ad8de5f4fbd31238d8ac85b3d9008a21a4fceaed937432f6c698033046a31c6b68b56497ce3b98dddb7510329c382154657753744024a4e5a88a1f4322ee27070e1d0f38aab9280f516bce162a22ea67ed941a18bcbcb9ab12c9ca6b0287de9af5ce2ff21bab8c5403ee2f1f24b86af306d4ddc089c4dacb0b718363177cb41cf67fb0a2a98779a2ef742093c817b0c98d3cbd074659ae850c1036ce4171849936209721c203a35ecc0581489b25567163a8e4ccc2b8711024389c7134067dbd5a1364df37cff9a5e8417fea12008f2bfb2448dfb19940ca365db762e8f02ca5685b0df89901ca5764c7b338e1fed02215a7b4c3c90b0afe0b6a48bf23f8585b3827ddca754246db1fb8b72ac3f8a43a28f3cb8abc26b250f2e74664410c74699b0700608f032cf2f1c79165fd71ff51328b89bdd03047fb8ec5c4c12907966a1da27e2339ab37cfe5040e2c59c86ef5c1dee68f759de130567723df27f030233b5ef0f7e3171d49890375fecfbddf70fd823fb48f549feb3d571b879dc4a11b18cdc39f06e194f45f12e63aa52d0a2f7126d638f6b327382fd09f9e2e7cfd2032365ddc17556268ac81c7c74dbce62441fccd2420b6205657fdc75425100d3872c22b236a531d670581997527954cafc5f46f643c25c985045dfff5323a8bf3b83cc865b519ef30a118949786609a44523b4e9377747b0953fa2310013b8ab9327f35d7006b95e828d46e1c53d3b880a660ecc5de0cb448f2c691ee9cf5995614a757da35e64489e4c20a4809f574ad643051be18dbdfec2fdd4b77bb157a75bbda9389745e6205575c117bbeaa62867216d09fda787e7d841064e091db1b1c82a6d2e16387d6b9dcdb2afde0b112d520254b836b150de3e18d34bba2eb29482661190def27327b604d8ab7c0bf1807936b4204c3abc73d7f7f550929cd35194d805f80f11fc378a3fde7c9c119e4ebb44d4e1999d000743277ecc94e2b57dbf270eee9d0ac0b2444861deb0d9003140d5083b5e8451f28d989e5b0f1dbb2432f759619ebb6c8b9fa25f1c70de303193076430ebf639efb40d7e6d6090bfad164e95d10971bd3470ed542be3657acee61174bf78f717cb920c545a222d09013930a402394d7b19c8a71b1a4ee2c20957a5c86097376b17be69b25f338369bdd097129ebbfe23244b4e3162c758b37901c6f9d5c957e5c6e70a01c357417059bae50e046e120549d353c3b28d83615440f4e318f0815d7c9a122406b09551aaddd2186db879807ffab73f2322ca13c5bd4b01ee93d3723c040240fb3bf562936a9118f7caffb7bad418dabafd197c2f6f7340fd51ed34f19efc7dd0eb9f13d1f49a4443230b61a8a78a776bb862e9c545e32257d3d7097487b600ebab0afab1ce2d1ef8a977c397f3bc0c48adefc0a236a05ad8dcc13eef78a99c41f440b03364f8d525b6321cc4a7c089f3492ef2f3bcd320e7dc6b7722a45d52968cf44901eb18d3ab64badd9823bb93a6d386f805507036e7d495d5db6fa8967e3de7a1fd9d142c23c2262a652947b33ab53d37aed195705a05f3bec863ed8f4176800446a0f51479ec72a678442dfbc6f082d97acfc9b15be5296694664c72ad71d728c2aeb672866754d9ebc8bac6b4a617e027fdd2edf9eb6668537dcf6eaad47a716f83567399248a03c7a1d52a0ce5e22dd9c4c7ab069f52e78ffbda66d3d8bedb4459dca15725cf58d2cf519c4bebfccc65e459527b0473e9afb17ad6318a7b076c3b5774014a570ebf7950617cf79c8b63e8725d5b3365eb9b8fe90c9ed58131558a3ca859fad908b91f57162853929f7b7839da7eb2c6496ffc269d1ee60e9ca22acbb1bdf29d1dcb7b162c137f8d3589d6e344222fb6bd6b20b20692c48eab2afcb9e1c5a33111657dceb5174c6e293504f155181a0c05ee72a7b513cb64ea4dfd677679cbc3282fb5b81972b6f14efa6815b49d71043e3874a8881df4098402bb73cbea9960433f3", 0x1000}, {&(0x7f0000005700)="18033e07068772719cdd26c98558b09fa481fc5b0bf1061a9f81e8ab391af22360397f383368d3c3cf11a40fad1a398714e664bd8bed2cc0928a49ccae3bf8ce4673a132c393ce591e8834be2e4f3684ce13da7aa37fcb70ae484f3d466e09e090b9e40c4a73d4617e4cc9", 0x6b}, {&(0x7f0000005780)="a5b9d725a3ff5f5016a185aeb10bfb46aa409b851a0a0c8cb39fa473", 0x1c}, {&(0x7f00000057c0)="59d3801c767648405cc8cfd8a246ee0fa63825581cfc3e2854d139594fc1195817c01d72e6a4ef3b6f5dbfd99f35ea1172cfaa4728530d1db4792ce96d2109a1f0a00a967fca18e2dda170b4a26d0bdbf0caafe42ce6897111e5f42d542e5dc8d185e9666f0032a033bc129484e9c51e4185f5ba4ec0ee482e25b9", 0x7b}], 0x7, &(0x7f0000005c80)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x5b, 0x0, 0x8, [0x0, 0x6, 0x0, 0xfffffffc, 0x2, 0x5a, 0x6]}, @noop]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0xa5, 0x3, 0x7, [{@broadcast, 0x1}, {@multicast1, 0x9}]}, @rr={0x7, 0x2b, 0x47, [@broadcast, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, @loopback, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0x4, [{@loopback, 0x1}, {@broadcast, 0x5}, {@remote, 0x2}, {@rand_addr=0x3, 0x5}, {@private=0xa010101, 0x2}, {@loopback, 0x7}, {@broadcast, 0x40}, {@multicast2, 0x81}, {@loopback}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xf5, 0x3, 0x8, [{@remote, 0x9}, {@remote, 0x9}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}], 0x148}, 0x844)

66.965525ms ago: executing program 0 (id=2263):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x110, 0x4, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "f8ecd4feb9a66ffac57b244085bc8d7cd2105d3d5aa5d3bf819a5f9cab877f637a3397ec602ee7ab86b8086c83fdd04b6e4abb667a4660f83886dadfdbb0f401ec0ac69abe85dc0ffc9b0f"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x110}, 0x1, 0x0, 0x900, 0x40}, 0x8010)

720.231µs ago: executing program 2 (id=2264):
socket$kcm(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x6}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4008744b, &(0x7f0000000180))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x15, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4)
recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100)

128.491µs ago: executing program 0 (id=2265):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2}, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffb7}, 0x801)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a44000000090a010400000000001300000a0000000900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000200002080008407380776c140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x2000040)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1d02d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x7, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="f3080000fc000100fcc5c49c48374790e50f00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0xe, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00', 0xd, 0x1006, &(0x7f0000002080)=""/4102, 0x0, 0x73}, 0x94)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d", 0xa7}, {&(0x7f0000000740)="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", 0x344}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="5300138e06d44d863d4eedd1", 0xc}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x870bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xa, 0x6}, {0x4, 0x5}}}, 0x24}}, 0x20040004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@call={0x85, 0x0, 0x0, 0x37}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x0, 0x9, 0x1, 0xffffffffffffffc0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x0)

0s ago: executing program 33 (id=2109):
syz_clone(0x40000, &(0x7f0000000380)="2995ff619674a62b468be4aeb46cb06862acb0db285977beb25fec894842b40f5344f8f853b5aac22f4bbe78069f4b1ff8fc89d7e7f717c883cb3f815eba646019384140695bda8b29bd61956f0037d8b2798f71325423a52c81d4ee3c14b3f640f6e30907c60f5eab0e7a7aa3222c609de2b45189c2dbcd2753b47e1c0b19e06515b12f640ff87db929f8762ab9b8c602cf822016931230fb77bbef2602804d9e85929a31b201276f70221b66cf4cbaa07c67a97e37bef7c8d185de69", 0xfffffffffffffef0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)="0bb963427b2d0bcb8d971b76db92436b001327dfab29760a06a1bcc4645a403730344e56298dfb0efc91")
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004bc, 0x0, 0x2, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004700)=""/4062, 0xfde}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f0000000040)=""/94, 0x5e}], 0x4}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61154' (ED25519) to the list of known hosts.
syzkaller login: [   48.873084][ T5827] cgroup: Unknown subsys name 'net'
[   48.939772][ T5827] cgroup: Unknown subsys name 'cpuset'
[   48.944324][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.567546][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.111252][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.115606][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.119099][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.122993][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.126435][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.144586][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.148650][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.152009][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.156152][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.159657][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.214015][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.221913][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.225541][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.229491][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.233090][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.445601][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   55.466737][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   55.619933][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.623232][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.626301][ T5840] bridge_slave_0: entered allmulticast mode
[   55.629999][ T5840] bridge_slave_0: entered promiscuous mode
[   55.646935][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.649773][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.652559][ T5844] bridge_slave_0: entered allmulticast mode
[   55.657200][ T5844] bridge_slave_0: entered promiscuous mode
[   55.661170][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.664052][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.667787][ T5844] bridge_slave_1: entered allmulticast mode
[   55.671232][ T5844] bridge_slave_1: entered promiscuous mode
[   55.674404][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.677388][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.680366][ T5840] bridge_slave_1: entered allmulticast mode
[   55.683852][ T5840] bridge_slave_1: entered promiscuous mode
[   55.742002][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.748829][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.754386][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.760821][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   55.769040][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.808236][ T5840] team0: Port device team_slave_0 added
[   55.827850][ T5844] team0: Port device team_slave_0 added
[   55.831511][ T5840] team0: Port device team_slave_1 added
[   55.862055][ T5844] team0: Port device team_slave_1 added
[   55.906503][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.909265][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.920055][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.926224][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.929153][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.940091][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.956262][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.959001][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.969330][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.974348][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.977450][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.987423][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.006816][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.009636][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.012441][ T5848] bridge_slave_0: entered allmulticast mode
[   56.016169][ T5848] bridge_slave_0: entered promiscuous mode
[   56.027110][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.029952][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.032743][ T5848] bridge_slave_1: entered allmulticast mode
[   56.036778][ T5848] bridge_slave_1: entered promiscuous mode
[   56.076904][ T5840] hsr_slave_0: entered promiscuous mode
[   56.079813][ T5840] hsr_slave_1: entered promiscuous mode
[   56.096130][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.122191][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.129611][ T5844] hsr_slave_0: entered promiscuous mode
[   56.132504][ T5844] hsr_slave_1: entered promiscuous mode
[   56.135415][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   56.137970][ T5844] Cannot create hsr debugfs directory
[   56.194492][ T5848] team0: Port device team_slave_0 added
[   56.225191][ T5848] team0: Port device team_slave_1 added
[   56.267733][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.270462][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.281358][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.295813][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.298547][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.308760][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.417197][ T5848] hsr_slave_0: entered promiscuous mode
[   56.420048][ T5848] hsr_slave_1: entered promiscuous mode
[   56.422652][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   56.425453][ T5848] Cannot create hsr debugfs directory
[   56.521021][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.529151][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.541100][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.559374][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.632194][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.642734][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.661155][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.668346][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.722435][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.734355][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.744749][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.757116][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.799473][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.839387][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.843842][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.866338][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.869207][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.883664][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.886630][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.898303][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   56.918119][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.920955][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.937001][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.939838][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.952900][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.960717][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.986537][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.017808][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.039182][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.042121][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.071350][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.074276][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.153793][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.221765][ T5844] veth0_vlan: entered promiscuous mode
[   57.225566][ T5842] Bluetooth: hci0: command tx timeout
[   57.225595][   T54] Bluetooth: hci1: command tx timeout
[   57.244379][ T5844] veth1_vlan: entered promiscuous mode
[   57.277566][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.285359][   T54] Bluetooth: hci2: command tx timeout
[   57.293725][ T5844] veth0_macvtap: entered promiscuous mode
[   57.300363][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.311843][ T5844] veth1_macvtap: entered promiscuous mode
[   57.349454][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.359627][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.367375][ T5840] veth0_vlan: entered promiscuous mode
[   57.380501][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.384081][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.392985][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.397344][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.404082][ T5840] veth1_vlan: entered promiscuous mode
[   57.421795][ T5848] veth0_vlan: entered promiscuous mode
[   57.458773][ T5848] veth1_vlan: entered promiscuous mode
[   57.469273][ T5840] veth0_macvtap: entered promiscuous mode
[   57.474216][ T5840] veth1_macvtap: entered promiscuous mode
[   57.507063][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.509409][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.510181][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.516171][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.558899][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.562639][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.566692][ T2251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.569852][ T2251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.573316][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.588769][ T5848] veth0_macvtap: entered promiscuous mode
[   57.594391][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.607393][ T5848] veth1_macvtap: entered promiscuous mode
[   57.657754][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.668752][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.681263][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.697315][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.700443][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.730614][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.747872][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.752852][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.756846][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.760981][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.770855][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.820790][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.823913][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.868448][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.871645][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.878891][   T33] audit: type=1107 audit(1756944404.015:2): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   57.950614][    C0] hrtimer: interrupt took 24768 ns
[   58.063426][ T5913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.255175][ T5918] warning: `syz.0.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.111198][ T5931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.285710][   T54] Bluetooth: hci1: command tx timeout
[   59.319788][   T54] Bluetooth: hci0: command tx timeout
[   59.365364][   T54] Bluetooth: hci2: command tx timeout
[   59.618858][ T5942] netlink: 'syz.2.15': attribute type 29 has an invalid length.
[   59.643689][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[   59.650726][ T5942] netlink: 'syz.2.15': attribute type 29 has an invalid length.
[   60.160152][ T5954] netlink: 'syz.1.20': attribute type 29 has an invalid length.
[   60.397194][ T5966] netlink: 180 bytes leftover after parsing attributes in process `syz.0.24'.
[   60.582802][ T5954] netlink: 'syz.1.20': attribute type 29 has an invalid length.
[   61.121732][ T5987] netlink: 'syz.0.30': attribute type 21 has an invalid length.
[   61.128510][ T5987] netlink: 'syz.0.30': attribute type 4 has an invalid length.
[   61.132453][ T5987] netlink: 152 bytes leftover after parsing attributes in process `syz.0.30'.
[   61.139785][ T5987] netlink: 'syz.0.30': attribute type 33 has an invalid length.
[   61.143652][ T5987] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.30'.
[   61.269502][ T5991] netlink: 'syz.0.31': attribute type 21 has an invalid length.
[   61.273485][ T5990] netlink: 'syz.0.31': attribute type 21 has an invalid length.
[   61.350831][ T5993] netlink: 'syz.2.32': attribute type 29 has an invalid length.
[   61.366541][ T5842] Bluetooth: hci1: command tx timeout
[   61.369548][   T54] Bluetooth: hci0: command tx timeout
[   61.446508][   T54] Bluetooth: hci2: command tx timeout
[   61.881421][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'.
[   63.059798][ T6035] xt_time: invalid argument - start or stop time greater than 23:59:59
[   63.170321][ T6046] netlink: 144 bytes leftover after parsing attributes in process `syz.0.44'.
[   63.445256][ T5842] Bluetooth: hci1: command tx timeout
[   63.447109][   T54] Bluetooth: hci0: command tx timeout
[   63.525388][   T54] Bluetooth: hci2: command tx timeout
[   63.609468][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'.
[   63.614295][ T6070] netlink: 68 bytes leftover after parsing attributes in process `syz.0.52'.
[   63.706980][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   63.707070][   T54] Bluetooth: hci2: connection err: -111
[   64.958622][ T6101] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.601345][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.072421][ T6135] netlink: 324 bytes leftover after parsing attributes in process `syz.1.70'.
[   71.741859][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.744570][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   73.581878][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2096865319 wd_nsec: 2096865397
[   74.600584][ T1088] sched: DL replenish lagged too much
[   77.788822][ T6233] =======================================================
[   77.788822][ T6233] WARNING: The mand mount option has been deprecated and
[   77.788822][ T6233]          and is ignored by this kernel. Remove the mand
[   77.788822][ T6233]          option from the mount to silence this warning.
[   77.788822][ T6233] =======================================================
[   77.824432][ T6237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.99'.
[   78.857285][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   81.034699][ T6273] validate_nla: 6 callbacks suppressed
[   81.034708][ T6273] netlink: 'syz.1.109': attribute type 29 has an invalid length.
[   81.073750][ T6273] netlink: 'syz.1.109': attribute type 29 has an invalid length.
[   81.286244][   T47] cfg80211: failed to load regulatory.db
[   81.410943][ T6299] netlink: 'syz.2.114': attribute type 3 has an invalid length.
[   81.413562][ T6299] netlink: 155676 bytes leftover after parsing attributes in process `syz.2.114'.
[   81.643810][ T6310] netlink: 180 bytes leftover after parsing attributes in process `syz.2.120'.
[   81.658378][ T6310] netlink: 'syz.2.120': attribute type 2 has an invalid length.
[   81.665824][ T6310] netlink: 164 bytes leftover after parsing attributes in process `syz.2.120'.
[   81.697591][ T6310] netlink: 'syz.2.120': attribute type 2 has an invalid length.
[   81.703927][ T6310] netlink: 164 bytes leftover after parsing attributes in process `syz.2.120'.
[   81.810749][ T6313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.032344][ T6320] netlink: 'syz.0.124': attribute type 21 has an invalid length.
[   82.154297][ T6324] netlink: 76 bytes leftover after parsing attributes in process `syz.2.126'.
[   82.639172][ T6341] netlink: 68 bytes leftover after parsing attributes in process `syz.2.128'.
[   82.777562][ T6348] netlink: 160 bytes leftover after parsing attributes in process `syz.1.130'.
[   83.751640][ T6382] netlink: 'syz.1.140': attribute type 3 has an invalid length.
[   84.350213][ T6393] delete_channel: no stack
[   84.496022][   T36] wlan1: Trigger new scan to find an IBSS to join
[   84.519333][ T6408] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.147'.
[   84.524250][ T6408] nft_compat: unsupported protocol 5
[   84.917714][ T6431] netlink: 'syz.2.153': attribute type 2 has an invalid length.
[   84.942222][ T6433] netlink: 156 bytes leftover after parsing attributes in process `syz.1.154'.
[   85.084093][ T6436] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   85.705545][ T6454] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   85.717362][ T6454] netlink: 14 bytes leftover after parsing attributes in process `syz.1.161'.
[   85.721351][ T6454] hsr0: entered promiscuous mode
[   85.731478][ T6454] hsr0: entered allmulticast mode
[   85.733337][ T6454] hsr_slave_0: entered allmulticast mode
[   85.736186][ T6454] hsr_slave_1: entered allmulticast mode
[   85.769797][ T6458] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   86.130378][ T6474] netlink: 'syz.1.167': attribute type 1 has an invalid length.
[   86.134537][ T6474] netlink: 5 bytes leftover after parsing attributes in process `syz.1.167'.
[   86.240614][ T6481] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   86.726845][ T6506] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   87.548868][ T1226] wlan1: Trigger new scan to find an IBSS to join
[   88.279821][ T6533] netlink: 'syz.0.185': attribute type 29 has an invalid length.
[   88.319858][ T6533] netlink: 'syz.0.185': attribute type 29 has an invalid length.
[   88.323733][ T6533] netlink: 'syz.0.185': attribute type 29 has an invalid length.
[   88.478138][   T64] wlan1: Creating new IBSS network, BSSID 6e:7b:ee:b2:26:c8
[   89.155635][ T6542] netlink: 703 bytes leftover after parsing attributes in process `syz.1.188'.
[   89.815668][ T6546] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.189'.
[   89.933873][ T6549] xt_time: invalid argument - start or stop time greater than 23:59:59
[   90.587506][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'.
[   90.591430][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   90.728484][ T6573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.197'.
[   90.742430][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   91.160858][ T6591] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.202'.
[   91.314061][ T6596] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   91.448816][ T6602] netlink: 'syz.1.206': attribute type 21 has an invalid length.
[   91.451382][ T6602] netlink: 176 bytes leftover after parsing attributes in process `syz.1.206'.
[   91.510237][ T6602] netlink: 84 bytes leftover after parsing attributes in process `syz.1.206'.
[   91.539477][ T6604] netlink: 67 bytes leftover after parsing attributes in process `syz.2.207'.
[   91.844261][ T6618] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   92.178436][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   92.336874][ T6649] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   93.131454][ T6660] Zero length message leads to an empty skb
[   93.575378][ T6664] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   93.839633][ T6671] netlink: 'syz.0.230': attribute type 10 has an invalid length.
[   93.844240][ T6671] veth1_vlan: entered allmulticast mode
[   94.211792][ T6681] netlink: 'syz.0.233': attribute type 29 has an invalid length.
[   94.243075][ T6681] netlink: 'syz.0.233': attribute type 10 has an invalid length.
[   94.247501][ T6681] netlink: 104 bytes leftover after parsing attributes in process `syz.0.233'.
[   94.251790][ T6681] netlink: 'syz.0.233': attribute type 29 has an invalid length.
[   94.258397][ T6681] netlink: 'syz.0.233': attribute type 29 has an invalid length.
[   94.441956][ T6691] netlink: 'syz.0.236': attribute type 2 has an invalid length.
[   94.444540][ T6691] netlink: 'syz.0.236': attribute type 4 has an invalid length.
[   94.788765][ T6696] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   94.826074][ T6698] netlink: 'syz.2.238': attribute type 29 has an invalid length.
[   95.290267][ T6744] __nla_validate_parse: 1 callbacks suppressed
[   95.290283][ T6744] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.251'.
[   95.299071][ T6746] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.251'.
[   96.028644][ T6759] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.032416][ T6759] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.113850][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 2366
[   96.287608][ T6778] netlink: 14 bytes leftover after parsing attributes in process `syz.0.262'.
[   96.287748][ T6777] netlink: 14 bytes leftover after parsing attributes in process `syz.0.262'.
[   96.295945][ T6777] hsr_slave_0: left promiscuous mode
[   96.304243][ T6777] hsr_slave_1: left promiscuous mode
[   97.102655][ T6800] netlink: 17 bytes leftover after parsing attributes in process `syz.1.268'.
[   97.106855][ T6800] netlink: zone id is out of range
[   97.109026][ T6800] netlink: zone id is out of range
[   97.110894][ T6800] netlink: zone id is out of range
[   97.112729][ T6800] netlink: zone id is out of range
[   97.115170][ T6800] netlink: zone id is out of range
[   97.117309][ T6800] netlink: zone id is out of range
[   97.119108][ T6800] netlink: zone id is out of range
[   97.120849][ T6800] netlink: zone id is out of range
[   97.122806][ T6800] netlink: zone id is out of range
[   97.125727][ T6800] netlink: zone id is out of range
[   97.329834][ T6803] validate_nla: 3 callbacks suppressed
[   97.329842][ T6803] netlink: 'syz.1.269': attribute type 2 has an invalid length.
[   97.334197][ T6803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.269'.
[   97.919967][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   97.919994][   T54] Bluetooth: hci2: connection err: -111
[   98.383376][ T6867] netlink: 'syz.1.290': attribute type 2 has an invalid length.
[   98.387825][ T6867] netlink: 120 bytes leftover after parsing attributes in process `syz.1.290'.
[   98.577053][ T6861] netlink: 88 bytes leftover after parsing attributes in process `syz.0.284'.
[   98.931802][ T6881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.293'.
[   98.934097][ T6882] netlink: 'syz.0.294': attribute type 2 has an invalid length.
[   98.938273][ T6881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.293'.
[   99.140095][ T6911] netlink: 'syz.2.303': attribute type 29 has an invalid length.
[   99.153302][ T6913] netlink: 'syz.1.302': attribute type 2 has an invalid length.
[   99.168126][ T6909] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   99.876093][ T6944] netlink: 'syz.1.310': attribute type 2 has an invalid length.
[  100.097562][ T6954] lo speed is unknown, defaulting to 1000
[  100.102482][ T6954] lo speed is unknown, defaulting to 1000
[  100.121491][ T6954] lo speed is unknown, defaulting to 1000
[  100.149550][ T6954] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  100.185693][ T6954] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  100.362799][ T6954] lo speed is unknown, defaulting to 1000
[  100.391946][ T6954] lo speed is unknown, defaulting to 1000
[  100.401609][ T6954] lo speed is unknown, defaulting to 1000
[  100.413080][ T6981] netlink: 'syz.0.323': attribute type 5 has an invalid length.
[  100.427418][ T6981] netlink: 'syz.0.323': attribute type 29 has an invalid length.
[  100.430752][ T6981] netlink: 'syz.0.323': attribute type 29 has an invalid length.
[  100.433468][ T6981] netlink: 'syz.0.323': attribute type 29 has an invalid length.
[  100.834745][ T7000] __nla_validate_parse: 7 callbacks suppressed
[  100.837818][ T7000] netlink: 14 bytes leftover after parsing attributes in process `syz.0.331'.
[  100.852154][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'.
[  101.525010][   T27] wlan1: Trigger new scan to find an IBSS to join
[  101.626045][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'.
[  101.636205][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'.
[  101.665060][ T7060] macvlan0: entered promiscuous mode
[  101.667723][ T7060] macvlan0: entered allmulticast mode
[  101.669616][ T7060] veth1_vlan: entered allmulticast mode
[  101.920149][ T7077] Illegal XDP return value 4294967274 on prog  (id 269) dev N/A, expect packet loss!
[  101.939605][ T7077] netlink: 120 bytes leftover after parsing attributes in process `syz.2.359'.
[  102.003653][ T7081] netlink: 4420 bytes leftover after parsing attributes in process `syz.2.361'.
[  102.150046][   T54] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  102.150134][   T54] Bluetooth: hci0: connection err: -111
[  102.316973][ T7101] netlink: 76 bytes leftover after parsing attributes in process `syz.1.367'.
[  103.125924][ T7123] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  103.129586][ T7124] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  103.236116][ T7129] netlink: 164 bytes leftover after parsing attributes in process `syz.2.374'.
[  103.326265][ T7143] net_ratelimit: 21 callbacks suppressed
[  103.326275][ T7143] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  103.375479][ T7140] validate_nla: 1 callbacks suppressed
[  103.375521][ T7140] netlink: 'syz.0.378': attribute type 1 has an invalid length.
[  103.380139][ T7140] netlink: 5 bytes leftover after parsing attributes in process `syz.0.378'.
[  103.937911][ T7172] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  103.953312][ T7170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.050390][ T7176] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.389'.
[  104.178450][ T7176] netlink: 'syz.2.389': attribute type 6 has an invalid length.
[  104.403041][ T7188] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  104.454178][ T7190] openvswitch: netlink: Key type 16144 is out of range max 32
[  104.724686][ T7198] netlink: 'syz.2.399': attribute type 23 has an invalid length.
[  105.122236][ T7215] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  105.533788][ T7237] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  106.374594][ T7252] xt_policy: too many policy elements
[  106.467980][ T7261] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  106.496830][ T7258] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[  106.499776][ T7258] __nla_validate_parse: 5 callbacks suppressed
[  106.499841][ T7258] netlink: 5 bytes leftover after parsing attributes in process `syz.1.418'.
[  106.549065][ T7269] netlink: 'syz.2.421': attribute type 29 has an invalid length.
[  106.567381][ T7269] netlink: 'syz.2.421': attribute type 29 has an invalid length.
[  106.669300][ T7282] netlink: 'syz.0.425': attribute type 7 has an invalid length.
[  106.725649][ T7284] netlink: 52 bytes leftover after parsing attributes in process `syz.0.426'.
[  106.782661][ T7293] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  106.971288][ T7305] netlink: 'syz.2.433': attribute type 3 has an invalid length.
[  106.974359][ T7305] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[  106.983626][ T7305] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.433'.
[  107.318259][ T7323] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  108.582912][ T7358] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  108.610515][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[  108.614379][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  108.619833][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[  108.623668][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  110.425829][ T7398] TCP: TCP_TX_DELAY enabled
[  111.047351][ T7407] lo speed is unknown, defaulting to 1000
[  111.115127][ T7414] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  111.152176][ T7416] netlink: 'syz.1.464': attribute type 2 has an invalid length.
[  111.155675][ T7416] netlink: 120 bytes leftover after parsing attributes in process `syz.1.464'.
[  111.217025][   T54] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  111.221796][ T7418] netlink: 'syz.1.465': attribute type 29 has an invalid length.
[  111.228104][ T7418] netlink: 'syz.1.465': attribute type 29 has an invalid length.
[  111.231161][ T7418] netlink: 'syz.1.465': attribute type 29 has an invalid length.
[  111.396614][ T7425] netlink: 'syz.0.467': attribute type 29 has an invalid length.
[  111.401370][ T7425] netlink: 'syz.0.467': attribute type 29 has an invalid length.
[  111.405209][ T7425] netlink: 'syz.0.467': attribute type 29 has an invalid length.
[  111.451322][ T7431] netlink: 'syz.2.469': attribute type 29 has an invalid length.
[  111.454579][ T7431] netlink: 'syz.2.469': attribute type 29 has an invalid length.
[  111.475477][ T7431] netlink: 'syz.2.469': attribute type 29 has an invalid length.
[  111.513261][ T7435] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  111.571605][ T7442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.474'.
[  111.579808][ T7442] openvswitch: netlink: Missing key (keys=40, expected=80)
[  111.658353][ T7449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.743053][ T7458] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  111.818653][ T7469] netlink: 68 bytes leftover after parsing attributes in process `syz.0.483'.
[  112.126623][ T7476] netlink: 824 bytes leftover after parsing attributes in process `syz.0.484'.
[  112.465919][ T7486] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  113.240761][ T7514] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  113.852318][ T7530] netlink: 177 bytes leftover after parsing attributes in process `syz.2.503'.
[  113.858380][ T7530] netlink: 68 bytes leftover after parsing attributes in process `syz.2.503'.
[  113.964592][ T7535] veth0_vlan: entered allmulticast mode
[  113.990565][ T7538] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  114.205066][ T7549] x_tables: ip_tables: realm.0 match: invalid size 16 (kernel) != (user) 24
[  114.279410][ T7557] team0: Device ipvlan1 failed to register rx_handler
[  114.299965][ T7556] team0: Device ipvlan1 failed to register rx_handler
[  114.313420][ T7557] syz.2.513 (7557) used greatest stack depth: 20144 bytes left
[  114.371307][ T7560] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  114.467784][ T7564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.516'.
[  114.578579][ T7570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.518'.
[  115.156597][ T7581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.520'.
[  115.172018][ T7580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.520'.
[  115.299276][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'.
[  115.303118][ T7588] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  116.438347][ T7647] syzkaller0: entered promiscuous mode
[  116.440230][ T7647] syzkaller0: entered allmulticast mode
[  116.597316][ T7658] openvswitch: netlink: Key type 29 is not supported
[  117.462148][ T7680] validate_nla: 15 callbacks suppressed
[  117.462158][ T7680] netlink: 'syz.2.545': attribute type 2 has an invalid length.
[  117.470742][ T7680] netlink: 'syz.2.545': attribute type 1 has an invalid length.
[  117.479154][ T7681] netlink: 'syz.1.542': attribute type 2 has an invalid length.
[  117.484360][ T7681] __nla_validate_parse: 4 callbacks suppressed
[  117.484368][ T7681] netlink: 164 bytes leftover after parsing attributes in process `syz.1.542'.
[  117.531206][ T7688] netlink: 'syz.1.542': attribute type 2 has an invalid length.
[  117.533833][ T7688] netlink: 164 bytes leftover after parsing attributes in process `syz.1.542'.
[  117.582952][ T7692] netlink: 'syz.2.548': attribute type 17 has an invalid length.
[  117.829419][ T7673] netlink: 180 bytes leftover after parsing attributes in process `syz.1.542'.
[  117.852801][   T24] lo speed is unknown, defaulting to 1000
[  118.003419][ T7710] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  118.228841][ T7714] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.555'.
[  118.316882][ T7716] tmpfs: Bad value for 'uid'
[  118.320515][ T7716] tmpfs: Bad value for 'uid'
[  118.446865][ T7719] netlink: 'syz.0.557': attribute type 3 has an invalid length.
[  118.450967][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  118.945423][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'.
[  119.013020][ T7734] netlink: 'syz.1.561': attribute type 2 has an invalid length.
[  119.018090][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'.
[  119.238204][ T7744] netlink: 26 bytes leftover after parsing attributes in process `syz.0.563'.
[  119.819999][ T7755] netlink: 'syz.0.568': attribute type 1 has an invalid length.
[  119.823169][ T7755] netlink: 5 bytes leftover after parsing attributes in process `syz.0.568'.
[  119.842019][ T7757] @: renamed from bond_slave_0 (while UP)
[  119.999317][ T7766] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  120.957168][ T7778] netlink: 'syz.2.576': attribute type 10 has an invalid length.
[  120.970476][ T7778] team0: Cannot enslave team device to itself
[  120.974183][ T7778] netlink: 'syz.2.576': attribute type 2 has an invalid length.
[  120.978099][ T7778] netlink: 120 bytes leftover after parsing attributes in process `syz.2.576'.
[  122.752444][ T7807] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  122.922705][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'.
[  122.925635][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'.
[  123.381852][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'.
[  123.386774][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'.
[  123.498185][ T7839] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  123.519277][ T7841] tmpfs: Bad value for 'uid'
[  123.520832][ T7841] tmpfs: Bad value for 'uid'
[  124.263483][ T7862] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  124.397481][ T7865] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  124.509272][ T7868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.602'.
[  124.513327][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.602'.
[  124.525573][ T7868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.602'.
[  124.585276][ T7868] netlink: 348 bytes leftover after parsing attributes in process `syz.0.602'.
[  124.678054][ T7870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.603'.
[  124.710110][ T7870] netlink: 'syz.1.603': attribute type 2 has an invalid length.
[  124.712864][ T7870] netlink: 164 bytes leftover after parsing attributes in process `syz.1.603'.
[  125.252109][ T7892] netlink: 'syz.2.610': attribute type 1 has an invalid length.
[  125.291786][ T7900] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  125.364269][ T7902] tmpfs: Bad value for 'uid'
[  125.366115][ T7902] tmpfs: Bad value for 'uid'
[  125.454701][ T7915] netlink: 'syz.0.617': attribute type 27 has an invalid length.
[  125.457239][ T7915] netlink: 'syz.0.617': attribute type 3 has an invalid length.
[  125.488648][ T7919] netlink: 'syz.2.618': attribute type 29 has an invalid length.
[  125.492378][ T7919] netlink: 'syz.2.618': attribute type 29 has an invalid length.
[  125.496151][ T7919] netlink: 'syz.2.618': attribute type 29 has an invalid length.
[  125.523830][ T7921] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  125.554479][ T7925] netlink: 'syz.2.621': attribute type 21 has an invalid length.
[  125.558010][ T7925] netlink: 'syz.2.621': attribute type 4 has an invalid length.
[  125.571250][ T7923] netlink: 'syz.0.620': attribute type 2 has an invalid length.
[  125.943324][   T54] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  126.026527][ T7948] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  126.811051][ T7972] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  126.924616][ T7982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  127.239962][ T7994] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  127.306230][ T7991] delete_channel: no stack
[  128.158620][ T8049] tmpfs: Unknown parameter 'uid9'
[  128.203746][ T8051] __nla_validate_parse: 9 callbacks suppressed
[  128.203755][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.660'.
[  128.221332][ T8051] netlink: 68 bytes leftover after parsing attributes in process `syz.2.660'.
[  128.863039][ T8071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.668'.
[  128.866523][ T8071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.668'.
[  128.870071][ T8071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.668'.
[  129.939096][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'.
[  129.942387][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'.
[  130.057583][ T8132] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  130.210436][ T8144] validate_nla: 10 callbacks suppressed
[  130.210448][ T8144] netlink: 'syz.1.689': attribute type 29 has an invalid length.
[  130.216151][ T8144] netlink: 'syz.1.689': attribute type 29 has an invalid length.
[  130.236809][ T8144] syzkaller0: entered promiscuous mode
[  130.238698][ T8144] syzkaller0: entered allmulticast mode
[  130.241623][ T8144] netlink: 'syz.1.689': attribute type 29 has an invalid length.
[  130.248139][ T8144] netlink: 'syz.1.689': attribute type 29 has an invalid length.
[  131.042505][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.045711][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.049803][ T8153] bridge0: entered allmulticast mode
[  131.241638][ T8153] bridge_slave_1: left allmulticast mode
[  131.256363][ T8153] bridge_slave_1: left promiscuous mode
[  131.327443][ T8160] netlink: 'syz.0.691': attribute type 3 has an invalid length.
[  131.331430][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.445724][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  131.577756][ T8153] bridge_slave_0: left allmulticast mode
[  131.582634][ T8153] bridge_slave_0: left promiscuous mode
[  131.589661][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.517175][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.519946][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.001088][ T8194] netlink: 'syz.1.704': attribute type 29 has an invalid length.
[  133.014825][ T8194] netlink: 'syz.1.704': attribute type 29 has an invalid length.
[  133.047022][ T8194] netlink: 'syz.1.704': attribute type 29 has an invalid length.
[  133.052401][ T8198] netlink: 'syz.1.704': attribute type 29 has an invalid length.
[  133.244779][ T8208] netlink: 'syz.2.706': attribute type 1 has an invalid length.
[  133.770198][ T8191] delete_channel: no stack
[  134.267630][ T8286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.717'.
[  134.270924][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.717'.
[  134.274372][ T8286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.717'.
[  135.339050][ T8347] netlink: 180 bytes leftover after parsing attributes in process `syz.1.723'.
[  135.344962][ T8347] validate_nla: 1 callbacks suppressed
[  135.344970][ T8347] netlink: 'syz.1.723': attribute type 2 has an invalid length.
[  135.349753][ T8347] netlink: 164 bytes leftover after parsing attributes in process `syz.1.723'.
[  135.361556][ T8347] netlink: 'syz.1.723': attribute type 2 has an invalid length.
[  135.364072][ T8347] netlink: 164 bytes leftover after parsing attributes in process `syz.1.723'.
[  135.900508][ T8378] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  136.528223][ T8385] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  136.580868][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'.
[  136.598283][ T8389] tmpfs: Unknown parameter 'mo000000000004-k'
[  136.661205][ T8391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.736'.
[  136.683216][ T8391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.736'.
[  136.724162][ T8393] netlink: 180 bytes leftover after parsing attributes in process `syz.1.737'.
[  138.168837][ T8434] netlink: 'syz.1.747': attribute type 29 has an invalid length.
[  138.288162][ T8436] netlink: 'syz.1.747': attribute type 29 has an invalid length.
[  139.568097][ T8461] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  139.892261][ T8484] xt_time: invalid argument - start or stop time greater than 23:59:59
[  139.966154][ T8489] __nla_validate_parse: 3 callbacks suppressed
[  139.966163][ T8489] netlink: 52 bytes leftover after parsing attributes in process `syz.0.764'.
[  139.997901][ T8493] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.766'.
[  140.000839][ T8493] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.766'.
[  140.004032][ T8493] netlink: 'syz.0.766': attribute type 10 has an invalid length.
[  140.008631][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.766'.
[  140.041989][ T8497] netlink: 'syz.1.767': attribute type 29 has an invalid length.
[  140.049393][ T8497] netlink: 'syz.1.767': attribute type 29 has an invalid length.
[  140.052210][ T8497] netlink: 'syz.1.767': attribute type 29 has an invalid length.
[  140.055394][ T8497] netlink: 'syz.1.767': attribute type 29 has an invalid length.
[  140.166638][ T8507] netlink: 180 bytes leftover after parsing attributes in process `syz.1.770'.
[  140.171205][ T8508] netlink: 180 bytes leftover after parsing attributes in process `syz.1.770'.
[  140.182865][ T8505] netlink: 'syz.1.770': attribute type 2 has an invalid length.
[  140.202834][ T8505] netlink: 164 bytes leftover after parsing attributes in process `syz.1.770'.
[  140.223775][ T8507] netlink: 164 bytes leftover after parsing attributes in process `syz.1.770'.
[  140.648662][ T8526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'.
[  140.656672][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'.
[  140.734615][ T8528] validate_nla: 1 callbacks suppressed
[  140.734630][ T8528] netlink: 'syz.0.778': attribute type 6 has an invalid length.
[  140.896821][ T8542] netlink: 'syz.2.783': attribute type 3 has an invalid length.
[  140.900193][ T8542] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  142.102779][ T8570] syz.0.795 (8570) used greatest stack depth: 18920 bytes left
[  142.522271][ T8601] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  142.549247][ T8603] netlink: 'syz.0.804': attribute type 1 has an invalid length.
[  142.560197][ T8605] netlink: 'syz.2.805': attribute type 1 has an invalid length.
[  142.562790][ T8605] netlink: 'syz.2.805': attribute type 4 has an invalid length.
[  142.660868][ T8610] netlink: 'syz.0.806': attribute type 39 has an invalid length.
[  143.048512][ T8624] netlink: 'syz.2.811': attribute type 4 has an invalid length.
[  143.057232][ T8624] netlink: 'syz.2.811': attribute type 1 has an invalid length.
[  143.069182][ T8627] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  143.279017][ T8639] netlink: 'syz.1.815': attribute type 2 has an invalid length.
[  143.478927][ T8640] syzkaller0: entered promiscuous mode
[  143.480822][ T8640] syzkaller0: entered allmulticast mode
[  144.194664][ T8660] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  144.238293][ T8662] syzkaller0: entered promiscuous mode
[  144.241255][ T8662] syzkaller0: entered allmulticast mode
[  144.273476][ T8662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.350815][ T8691] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  145.393424][ T8693] __nla_validate_parse: 18 callbacks suppressed
[  145.393439][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'.
[  145.978761][ T8716] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  146.040957][ T8719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.836'.
[  146.044809][ T8719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.836'.
[  146.049556][ T8719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.836'.
[  146.130903][ T8732] netlink: 52 bytes leftover after parsing attributes in process `syz.2.839'.
[  146.191100][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'.
[  146.349989][ T8745] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  146.561579][ T8753] syzkaller0: entered promiscuous mode
[  146.565219][ T8753] syzkaller0: entered allmulticast mode
[  146.613914][ T8757] netlink: 'syz.0.845': attribute type 11 has an invalid length.
[  146.624043][ T8757] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.845'.
[  146.749732][ T8749] validate_nla: 1 callbacks suppressed
[  146.749849][ T8749] netlink: 'syz.2.844': attribute type 39 has an invalid length.
[  147.068634][ T8765] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.848'.
[  147.513845][ T8767] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  147.820314][ T8772] netlink: 'syz.2.851': attribute type 3 has an invalid length.
[  147.823335][ T8772] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.851'.
[  147.908718][ T8770] netlink: 'syz.0.850': attribute type 2 has an invalid length.
[  147.911921][ T8770] netlink: 'syz.0.850': attribute type 8 has an invalid length.
[  147.914475][ T8770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.850'.
[  148.340565][ T8781] sysfs: Unknown parameter 'subj_type'
[  148.617786][ T8787] netlink: 'syz.0.857': attribute type 2 has an invalid length.
[  148.621168][ T8787] nbd: must specify at least one socket
[  148.937643][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.719052][ T8811] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[  150.722142][ T8811] __nla_validate_parse: 2 callbacks suppressed
[  150.722150][ T8811] netlink: 5 bytes leftover after parsing attributes in process `syz.0.865'.
[  150.797767][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'.
[  150.801369][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  150.871534][ T8814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.963832][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  152.423201][ T8837] macvlan0: entered promiscuous mode
[  152.425829][ T8837] macvlan0: entered allmulticast mode
[  152.427676][ T8837] veth1_vlan: entered allmulticast mode
[  153.430988][ T8859] netlink: 180 bytes leftover after parsing attributes in process `syz.0.882'.
[  153.441119][ T8859] netlink: 'syz.0.882': attribute type 2 has an invalid length.
[  153.444437][ T8859] netlink: 164 bytes leftover after parsing attributes in process `syz.0.882'.
[  153.485044][ T8865] netlink: 104 bytes leftover after parsing attributes in process `syz.2.883'.
[  153.509612][ T8867] netlink: 208 bytes leftover after parsing attributes in process `syz.0.884'.
[  153.796570][ T8883] netlink: 'syz.2.889': attribute type 22 has an invalid length.
[  153.799737][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'.
[  153.833391][ T8885] syz.2.889 uses obsolete (PF_INET,SOCK_PACKET)
[  153.839514][ T8883] netlink: 'syz.2.889': attribute type 1 has an invalid length.
[  153.842181][ T8883] netlink: 'syz.2.889': attribute type 2 has an invalid length.
[  155.372862][ T8917] netlink: 830 bytes leftover after parsing attributes in process `syz.0.897'.
[  155.385818][ T8917] bond_slave_0: entered promiscuous mode
[  155.388448][ T8917] bond_slave_1: entered promiscuous mode
[  155.588006][ T8932] syzkaller1: tun_chr_ioctl cmd 2148553947
[  155.592009][ T8931] syzkaller1: tun_chr_ioctl cmd 1074025673
[  156.097058][ T8939] netlink: 52 bytes leftover after parsing attributes in process `syz.2.903'.
[  156.285589][   T10] lo speed is unknown, defaulting to 1000
[  156.285843][ T8943] netlink: 264 bytes leftover after parsing attributes in process `syz.2.905'.
[  156.288212][   T10] syz2: Port: 1 Link DOWN
[  156.291059][ T8943] netlink: 56 bytes leftover after parsing attributes in process `syz.2.905'.
[  156.297440][  T792] lo speed is unknown, defaulting to 1000
[  156.300475][ T8948] tmpfs: Unknown parameter 'uid'
[  156.459314][ T8956] netlink: 'syz.2.909': attribute type 1 has an invalid length.
[  156.461885][ T8956] netlink: 'syz.2.909': attribute type 4 has an invalid length.
[  156.464450][ T8956] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.909'.
[  156.884817][ T8971] netlink: 'syz.0.913': attribute type 29 has an invalid length.
[  156.888993][ T8971] netlink: 'syz.0.913': attribute type 29 has an invalid length.
[  156.938253][ T8975] netlink: 96 bytes leftover after parsing attributes in process `syz.0.915'.
[  157.997372][ T8996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  158.000543][ T8996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  158.409180][ T9016] netlink: 180 bytes leftover after parsing attributes in process `syz.2.925'.
[  158.413616][ T9016] netlink: 'syz.2.925': attribute type 2 has an invalid length.
[  158.417071][ T9016] netlink: 164 bytes leftover after parsing attributes in process `syz.2.925'.
[  159.162678][ T9032] netlink: 'syz.2.931': attribute type 29 has an invalid length.
[  159.194570][ T9032] netlink: 'syz.2.931': attribute type 29 has an invalid length.
[  159.199393][ T9032] netlink: 'syz.2.931': attribute type 29 has an invalid length.
[  159.227606][ T9033] netlink: 'syz.0.932': attribute type 1 has an invalid length.
[  159.230298][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'.
[  161.244535][ T9064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.941'.
[  161.257378][ T9065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.941'.
[  161.333406][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'.
[  161.339364][ T9074] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  161.405927][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'.
[  161.408945][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'.
[  161.469293][ T9080] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.946'.
[  161.517725][ T9085] netlink: 'syz.2.948': attribute type 6 has an invalid length.
[  161.520316][ T9085] netlink: 168 bytes leftover after parsing attributes in process `syz.2.948'.
[  161.618349][ T9087] netlink: 'syz.0.949': attribute type 12 has an invalid length.
[  161.620925][ T9087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.949'.
[  163.791376][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  163.801740][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  163.814140][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  163.833430][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  163.842691][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  164.690135][ T9147] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  164.701450][ T9140] lo speed is unknown, defaulting to 1000
[  164.761674][ T5852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.817920][ T9158] netlink: 'syz.2.969': attribute type 2 has an invalid length.
[  164.821450][ T9158] netlink: 120 bytes leftover after parsing attributes in process `syz.2.969'.
[  164.823375][ T5852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.916889][ T5852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.953778][ T9140] chnl_net:caif_netlink_parms(): no params data found
[  165.392808][ T5852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.548877][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.551416][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.554483][ T9140] bridge_slave_0: entered allmulticast mode
[  165.559002][ T9140] bridge_slave_0: entered promiscuous mode
[  165.568737][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'.
[  165.580309][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.583565][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.586928][ T9140] bridge_slave_1: entered allmulticast mode
[  165.590378][ T9140] bridge_slave_1: entered promiscuous mode
[  165.618403][ T5852] bridge_slave_1: left allmulticast mode
[  165.622028][ T5852] bridge_slave_1: left promiscuous mode
[  165.625168][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.629880][ T5852] bridge_slave_0: left allmulticast mode
[  165.631924][ T5852] bridge_slave_0: left promiscuous mode
[  165.634778][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.749958][ T5842] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  165.750561][ T5842] Bluetooth: hci1: connection err: -111
[  165.922294][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.931260][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.935352][ T5842] Bluetooth: hci3: command tx timeout
[  165.938293][ T5852] bond0 (unregistering): Released all slaves
[  165.954030][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.969733][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.019638][ T9140] team0: Port device team_slave_0 added
[  166.023064][ T9140] team0: Port device team_slave_1 added
[  166.051017][ T9193] netlink: 'syz.2.978': attribute type 2 has an invalid length.
[  166.054012][ T9193] netlink: 'syz.2.978': attribute type 8 has an invalid length.
[  166.059024][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.061406][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.071305][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.076394][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.078773][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.088528][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.134532][ T9140] hsr_slave_0: entered promiscuous mode
[  166.138629][ T9140] hsr_slave_1: entered promiscuous mode
[  166.141062][ T9140] debugfs: 'hsr0' already exists in 'hsr'
[  166.143276][ T9140] Cannot create hsr debugfs directory
[  166.205914][ T5852] hsr_slave_0: left promiscuous mode
[  166.208473][ T5852] hsr_slave_1: left promiscuous mode
[  166.210766][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.213289][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.222828][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.227253][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.240834][ T5852] veth1_macvtap: left promiscuous mode
[  166.242821][ T5852] veth0_macvtap: left promiscuous mode
[  166.244914][ T5852] veth1_vlan: left allmulticast mode
[  166.246945][ T5852] veth1_vlan: left promiscuous mode
[  166.249015][ T5852] veth0_vlan: left promiscuous mode
[  166.414466][ T9199] netlink: 'syz.2.980': attribute type 32 has an invalid length.
[  166.569314][ T9210] netlink: 'syz.2.982': attribute type 1 has an invalid length.
[  166.571999][ T9210] netlink: 'syz.2.982': attribute type 4 has an invalid length.
[  166.574538][ T9210] __nla_validate_parse: 1 callbacks suppressed
[  166.574545][ T9210] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.982'.
[  166.609487][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  166.627331][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  166.669995][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'.
[  166.790360][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'.
[  167.078487][ T9140] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  167.083045][ T9140] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  167.088025][ T9140] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  167.096203][ T9140] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  167.147214][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.168668][ T9140] 8021q: adding VLAN 0 to HW filter on device team0
[  167.178931][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.182157][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.189001][ T9237] netlink: 'syz.2.988': attribute type 6 has an invalid length.
[  167.192429][ T9237] netlink: 164 bytes leftover after parsing attributes in process `syz.2.988'.
[  167.193562][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.198636][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.308791][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.340020][ T9140] veth0_vlan: entered promiscuous mode
[  167.347159][ T9140] veth1_vlan: entered promiscuous mode
[  167.364722][ T9140] veth0_macvtap: entered promiscuous mode
[  167.369246][ T9140] veth1_macvtap: entered promiscuous mode
[  167.379034][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.385751][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.391368][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.395811][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.400099][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.403797][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.441793][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.444434][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.459192][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.462312][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.004999][ T5842] Bluetooth: hci3: command tx timeout
[  168.437790][ T9261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.992'.
[  168.446017][ T9261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.992'.
[  168.480657][ T9265] netlink: 'syz.3.993': attribute type 29 has an invalid length.
[  168.488124][ T9265] netlink: 'syz.3.993': attribute type 29 has an invalid length.
[  168.493911][ T9265] netlink: 'syz.3.993': attribute type 29 has an invalid length.
[  168.539648][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.995'.
[  168.554588][ T9272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'.
[  168.562301][ T9272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'.
[  168.574554][ T9275] netlink: 108 bytes leftover after parsing attributes in process `syz.2.996'.
[  170.085064][ T5842] Bluetooth: hci3: command tx timeout
[  171.112049][ T9357] validate_nla: 1 callbacks suppressed
[  171.112059][ T9357] netlink: 'syz.3.1017': attribute type 21 has an invalid length.
[  171.423253][ T9363] netlink: 'syz.3.1018': attribute type 10 has an invalid length.
[  171.478195][ T9364] netlink: 'syz.3.1018': attribute type 11 has an invalid length.
[  171.479703][ T9363] team0: Port device wlan1 added
[  171.495240][ T9362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.241473][ T5842] Bluetooth: hci3: command tx timeout
[  172.302683][ T9392] __nla_validate_parse: 6 callbacks suppressed
[  172.303066][ T9392] netlink: 175064 bytes leftover after parsing attributes in process `syz.2.1026'.
[  173.080565][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'.
[  173.085575][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  173.172633][ T9423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1034'.
[  173.179409][ T9423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1034'.
[  173.183683][ T9423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1034'.
[  173.270754][ T9429] nft_compat: unsupported protocol 1
[  173.302402][ T9432] netlink: 'syz.0.1037': attribute type 29 has an invalid length.
[  173.318512][ T9432] netlink: 'syz.0.1037': attribute type 29 has an invalid length.
[  173.324496][ T9432] netlink: 'syz.0.1037': attribute type 29 has an invalid length.
[  173.439273][ T9434] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1038'.
[  173.500932][ T9438] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1039'.
[  173.613104][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'.
[  173.624961][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'.
[  174.234704][ T9485] netlink: 'syz.2.1054': attribute type 13 has an invalid length.
[  174.301534][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.305556][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.428064][ T9485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.444251][ T9485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.522548][ T9485] veth1_vlan: left allmulticast mode
[  174.654756][ T5852] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.675452][ T5852] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.679133][ T5852] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.682743][ T5852] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.933149][ T9528] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  175.938720][ T9528] netlink: 'syz.0.1067': attribute type 3 has an invalid length.
[  176.640162][ T9546] netlink: 'syz.2.1070': attribute type 2 has an invalid length.
[  176.679332][ T5842] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  176.821434][ T9564] netlink: 'syz.3.1075': attribute type 64 has an invalid length.
[  176.829509][ T9566] netlink: 'syz.0.1076': attribute type 1 has an invalid length.
[  176.911085][ T9576] openvswitch: netlink: Message has 16 unknown bytes.
[  178.271950][ T9605] openvswitch: netlink: Message has 16 unknown bytes.
[  178.492208][ T9608] __nla_validate_parse: 11 callbacks suppressed
[  178.492287][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'.
[  178.812373][ T9621] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1091'.
[  178.832968][ T9621] netlink: 'syz.2.1091': attribute type 2 has an invalid length.
[  178.841460][ T9621] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1091'.
[  178.858989][ T9621] netlink: 'syz.2.1091': attribute type 2 has an invalid length.
[  178.866554][ T9621] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1091'.
[  179.258699][ T9633] openvswitch: netlink: Message has 16 unknown bytes.
[  179.440215][ T9635] netlink: 'syz.3.1095': attribute type 21 has an invalid length.
[  179.445780][ T9635] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1095'.
[  180.117347][ T9648] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1098'.
[  180.418236][ T9660] openvswitch: netlink: Key 7 has unexpected len 2 expected 12
[  180.513129][ T9663] netlink: 'syz.0.1103': attribute type 1 has an invalid length.
[  180.554497][ T9667] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1105'.
[  180.656811][ T5842] Bluetooth: hci2: command 0x0406 tx timeout
[  180.659717][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  180.809420][ T9681] netlink: 'syz.2.1109': attribute type 3 has an invalid length.
[  180.853301][ T9686] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  181.125284][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'.
[  181.128336][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'.
[  181.339376][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'.
[  181.913324][ T9707] netlink: 'syz.0.1117': attribute type 21 has an invalid length.
[  181.916417][ T9707] netlink: 'syz.0.1117': attribute type 4 has an invalid length.
[  182.022270][ T9715] netlink: 'syz.0.1117': attribute type 29 has an invalid length.
[  182.033370][ T9715] netlink: 'syz.0.1117': attribute type 29 has an invalid length.
[  182.040290][ T9715] netlink: 'syz.0.1117': attribute type 29 has an invalid length.
[  182.060574][ T5233] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  182.060603][ T5233] Bluetooth: hci1: connection err: -111
[  182.178274][ T9723] : entered promiscuous mode
[  182.188933][ T9723] netlink: 'syz.0.1121': attribute type 10 has an invalid length.
[  182.196294][ T9723] ipvlan1: entered promiscuous mode
[  182.203005][ T9723] ipvlan1: entered allmulticast mode
[  182.463427][ T9723] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  182.587366][ T9741] netlink: 'syz.0.1128': attribute type 29 has an invalid length.
[  182.591559][ T9741] netlink: 'syz.0.1128': attribute type 29 has an invalid length.
[  182.595533][ T9741] netlink: 'syz.0.1128': attribute type 29 has an invalid length.
[  182.662331][ T9743] xt_time: invalid argument - start or stop time greater than 23:59:59
[  183.209924][ T9766] netlink: 'syz.0.1136': attribute type 2 has an invalid length.
[  183.371526][ T9778] netlink: 'syz.3.1141': attribute type 11 has an invalid length.
[  183.543407][ T9778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.845877][ T9795] bond0: entered promiscuous mode
[  183.851355][ T9795] bond_slave_0: entered promiscuous mode
[  183.853922][ T9795] bond_slave_1: entered promiscuous mode
[  183.865771][ T9795] bond0: entered allmulticast mode
[  183.867994][ T9795] bond_slave_0: entered allmulticast mode
[  183.875251][ T9795] bond_slave_1: entered allmulticast mode
[  184.455851][ T9802] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  185.426712][ T9815] __nla_validate_parse: 6 callbacks suppressed
[  185.426726][ T9815] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1152'.
[  185.551344][ T9820] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  185.591719][ T9820] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1154'.
[  185.596496][ T9819] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1154'.
[  185.641289][ T9830] openvswitch: netlink: EtherType 50a is less than min 600
[  185.711021][ T9833] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  186.588630][ T9859] openvswitch: netlink: Key type 6150 is out of range max 32
[  186.619275][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'.
[  186.668300][ T9868] lo speed is unknown, defaulting to 1000
[  186.681289][ T9870] raw_sendmsg: syz.2.1168 forgot to set AF_INET. Fix it!
[  186.793754][ T9890] netlink: 'syz.0.1172': attribute type 11 has an invalid length.
[  186.796937][ T9890] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1172'.
[  186.847773][ T9889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.900518][ T9898] openvswitch: netlink: Key type 8198 is out of range max 32
[  186.961111][ T9902] validate_nla: 8 callbacks suppressed
[  186.961123][ T9902] netlink: 'syz.3.1176': attribute type 29 has an invalid length.
[  187.605849][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1184'.
[  187.611312][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'.
[  187.796939][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'.
[  188.696637][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'.
[  188.700672][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'.
[  189.493238][ T9964] proc: Unknown parameter 'uid'
[  189.525520][   T26] wlan1: Trigger new scan to find an IBSS to join
[  190.211826][ T9990] openvswitch: netlink: Missing key (keys=240, expected=2000)
[  190.221696][ T9992] netlink: 'syz.3.1202': attribute type 29 has an invalid length.
[  190.224541][ T9992] netlink: 'syz.3.1202': attribute type 29 has an invalid length.
[  190.232193][ T9992] netlink: 'syz.3.1202': attribute type 29 has an invalid length.
[  190.397261][ T9994] netlink: 'syz.3.1203': attribute type 10 has an invalid length.
[  190.458459][ T9994] team0: Device ipvlan1 failed to register rx_handler
[  190.609035][T10014] netlink: 'syz.2.1210': attribute type 10 has an invalid length.
[  190.611638][T10014] __nla_validate_parse: 2 callbacks suppressed
[  190.611645][T10014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1210'.
[  190.622292][T10014] batman_adv: batadv0: Adding interface: hsr_slave_1
[  190.624462][T10014] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.633477][T10014] batman_adv: batadv0: Interface activated: hsr_slave_1
[  190.638555][T10014] netlink: 'syz.2.1210': attribute type 29 has an invalid length.
[  190.641699][T10014] netlink: 'syz.2.1210': attribute type 29 has an invalid length.
[  190.646170][T10014] netlink: 'syz.2.1210': attribute type 1 has an invalid length.
[  190.650661][T10014] netlink: 'syz.2.1210': attribute type 29 has an invalid length.
[  190.754536][T10019] openvswitch: netlink: Missing key (keys=240, expected=2000)
[  190.821222][T10030] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1213'.
[  190.910926][T10033] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1215'.
[  191.033100][T10038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1216'.
[  191.568283][T10052] openvswitch: netlink: Missing key (keys=240, expected=200000)
[  191.657984][ T5233] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  191.771022][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.049920][T10087] validate_nla: 4 callbacks suppressed
[  192.049929][T10087] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  192.057386][T10087] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  192.061139][T10087] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  192.314354][T10095] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1234'.
[  192.574966][ T7005] wlan1: Creating new IBSS network, BSSID aa:15:71:dd:45:f1
[  192.772975][T10100] netlink: 'syz.2.1236': attribute type 29 has an invalid length.
[  192.776184][T10100] netlink: 'syz.2.1236': attribute type 29 has an invalid length.
[  192.779514][T10100] netlink: 'syz.2.1236': attribute type 29 has an invalid length.
[  192.820917][T10102] netlink: 'syz.2.1237': attribute type 26 has an invalid length.
[  192.890629][T10108] openvswitch: netlink: Missing key (keys=240, expected=10000000)
[  193.503177][T10124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.568237][T10128] openvswitch: netlink: Missing key (keys=240, expected=100)
[  193.613530][T10130] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1247'.
[  193.717501][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'.
[  193.720662][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'.
[  193.919897][T10139] lo speed is unknown, defaulting to 1000
[  193.938213][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.940299][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.079200][T10155] netlink: 'syz.2.1256': attribute type 29 has an invalid length.
[  194.083155][T10155] netlink: 'syz.2.1256': attribute type 29 has an invalid length.
[  194.089179][T10155] netlink: 'syz.2.1256': attribute type 29 has an invalid length.
[  194.098658][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1254'.
[  194.242259][T10162] netlink: 'syz.0.1258': attribute type 11 has an invalid length.
[  194.248859][T10162] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1258'.
[  194.302956][T10173] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  194.330239][T10162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.420452][T10184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.013039][T10197] lo speed is unknown, defaulting to 1000
[  196.179714][T10220] __nla_validate_parse: 3 callbacks suppressed
[  196.179723][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'.
[  196.809618][T10234] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1278'.
[  196.859268][T10238] netlink: 'syz.2.1280': attribute type 11 has an invalid length.
[  196.870147][T10238] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1280'.
[  196.961763][T10240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.315131][T10245] validate_nla: 11 callbacks suppressed
[  197.315141][T10245] netlink: 'syz.0.1281': attribute type 21 has an invalid length.
[  197.523462][T10256] netlink: 'syz.3.1283': attribute type 5 has an invalid length.
[  197.527109][T10256] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1283'.
[  197.572395][T10260] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  197.863959][T10274] netlink: 'syz.2.1290': attribute type 11 has an invalid length.
[  197.867494][T10274] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1290'.
[  197.928993][T10278] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  197.957448][T10281] xt_time: invalid argument - start or stop time greater than 23:59:59
[  198.018967][T10293] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1297'.
[  198.483048][T10305] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  198.935639][T10314] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1305'.
[  199.539411][T10334] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1312'.
[  199.585933][T10338] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  199.613126][ T9669] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  199.613194][ T9669] Bluetooth: hci3: connection err: -111
[  199.790274][T10343] netlink: 'syz.3.1316': attribute type 3 has an invalid length.
[  199.795015][T10343] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1316'.
[  200.592933][T10349] netlink: 'syz.0.1318': attribute type 29 has an invalid length.
[  200.597163][T10349] netlink: 'syz.0.1318': attribute type 29 has an invalid length.
[  200.600212][T10349] netlink: 'syz.0.1318': attribute type 29 has an invalid length.
[  200.658484][T10355] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1320'.
[  200.869687][T10369] netlink: 'syz.2.1325': attribute type 29 has an invalid length.
[  200.873807][T10369] netlink: 'syz.2.1325': attribute type 29 has an invalid length.
[  200.990567][T10371] netlink: 'syz.2.1325': attribute type 21 has an invalid length.
[  201.024678][T10373] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  201.308691][T10386] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1330'.
[  201.771514][T10391] netlink: 'syz.2.1332': attribute type 11 has an invalid length.
[  201.777226][T10391] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1332'.
[  201.821810][T10391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.939898][T10401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  201.979474][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'.
[  202.039385][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'.
[  202.043534][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'.
[  202.048199][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'.
[  202.412024][T10435] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  202.442521][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'.
[  202.447911][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  202.554233][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  202.750281][T10439] validate_nla: 6 callbacks suppressed
[  202.750296][T10439] netlink: 'syz.0.1347': attribute type 29 has an invalid length.
[  202.755953][T10439] netlink: 'syz.0.1347': attribute type 29 has an invalid length.
[  202.759293][T10439] netlink: 'syz.0.1347': attribute type 29 has an invalid length.
[  203.002928][T10450] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  203.083018][T10461] netlink: 'syz.3.1355': attribute type 11 has an invalid length.
[  203.087077][T10461] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1355'.
[  203.130967][T10460] xt_time: invalid argument - start or stop time greater than 23:59:59
[  203.157003][T10459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.470440][T10480] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  203.640733][T10489] netlink: 'syz.3.1364': attribute type 11 has an invalid length.
[  203.651326][T10487] netlink: 'syz.2.1363': attribute type 2 has an invalid length.
[  203.684511][T10487] netlink: 'syz.2.1363': attribute type 2 has an invalid length.
[  203.786054][T10488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.800857][T10493] netlink: 'syz.2.1365': attribute type 29 has an invalid length.
[  203.806777][T10493] netlink: 'syz.2.1365': attribute type 29 has an invalid length.
[  203.821127][T10493] netlink: 'syz.2.1365': attribute type 29 has an invalid length.
[  204.932682][T10530] netlink: 'syz.2.1377': attribute type 2 has an invalid length.
[  204.936169][T10530] netlink: 'syz.2.1377': attribute type 1 has an invalid length.
[  204.939641][T10530] nbd: couldn't find device at index 81926
[  204.987581][T10530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.697634][T10576] netlink: 'syz.2.1395': attribute type 11 has an invalid length.
[  205.738893][T10576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.833176][T10579] delete_channel: no stack
[  206.099759][T10597] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  206.236388][T10604] syzkaller0: entered promiscuous mode
[  206.238426][T10604] syzkaller0: entered allmulticast mode
[  206.313734][T10624] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  207.380702][T10660] netlink: 'syz.0.1422': attribute type 11 has an invalid length.
[  207.384210][T10660] __nla_validate_parse: 18 callbacks suppressed
[  207.384224][T10660] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1422'.
[  207.446860][T10660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.503589][T10669] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  207.573989][T10676] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1424'.
[  207.672968][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'.
[  207.678919][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  207.831428][T10686] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1430'.
[  207.892008][T10686] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1430'.
[  208.088543][T10686] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1430'.
[  208.215280][T10679] validate_nla: 15 callbacks suppressed
[  208.215295][T10679] netlink: 'syz.3.1429': attribute type 29 has an invalid length.
[  208.221408][T10681] netlink: 'syz.3.1429': attribute type 29 has an invalid length.
[  208.226492][T10683] netlink: 'syz.3.1429': attribute type 29 has an invalid length.
[  208.304181][T10666] delete_channel: no stack
[  208.331344][T10694] netlink: 'syz.2.1432': attribute type 29 has an invalid length.
[  208.344729][T10694] netlink: 'syz.2.1432': attribute type 29 has an invalid length.
[  208.359366][T10694] netlink: 'syz.2.1432': attribute type 29 has an invalid length.
[  208.363987][T10695] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1431'.
[  208.636824][T10703] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  208.747506][T10713] netlink: 'syz.2.1439': attribute type 29 has an invalid length.
[  208.751812][T10713] netlink: 'syz.2.1439': attribute type 29 has an invalid length.
[  208.755305][T10713] netlink: 'syz.2.1439': attribute type 29 has an invalid length.
[  209.762408][T10730] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1445'.
[  209.996045][T10745] netlink: 'syz.0.1453': attribute type 29 has an invalid length.
[  210.032381][T10752] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  210.322896][T10778] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1464'.
[  210.377522][T10781] delete_channel: no stack
[  210.379739][T10781] delete_channel: no stack
[  210.411547][T10779] sit0: entered allmulticast mode
[  210.473377][T10783] sit0: entered promiscuous mode
[  211.911891][T10804] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  211.918063][T10805] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  212.463025][T10838] __nla_validate_parse: 6 callbacks suppressed
[  212.463044][T10838] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1488'.
[  213.173067][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'.
[  213.314361][T10864] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1496'.
[  213.370718][T10866] validate_nla: 5 callbacks suppressed
[  213.370727][T10866] netlink: 'syz.0.1497': attribute type 2 has an invalid length.
[  213.383356][T10866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1497'.
[  213.388103][T10866] netlink: 'syz.0.1497': attribute type 2 has an invalid length.
[  213.390810][T10866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1497'.
[  213.399764][T10868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1498'.
[  213.611769][T10874] netlink: 'syz.0.1499': attribute type 21 has an invalid length.
[  213.614450][T10874] IPv6: NLM_F_CREATE should be specified when creating new route
[  213.697218][T10879] siw: device registration error -23
[  213.708049][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'.
[  213.860964][T10891] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1507'.
[  213.891924][T10893] netlink: 'syz.0.1508': attribute type 7 has an invalid length.
[  213.894660][T10893] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1508'.
[  213.921270][T10895] netlink: 'syz.0.1509': attribute type 29 has an invalid length.
[  213.926939][T10895] netlink: 'syz.0.1509': attribute type 29 has an invalid length.
[  213.930302][T10895] netlink: 'syz.0.1509': attribute type 29 has an invalid length.
[  214.283225][T10898] netlink: 'syz.0.1510': attribute type 10 has an invalid length.
[  214.289668][T10898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1510'.
[  214.292939][T10898] dummy0: entered promiscuous mode
[  214.297407][T10898] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  214.828785][T10916] netlink: 'syz.0.1516': attribute type 2 has an invalid length.
[  214.837939][T10916] netlink: 'syz.0.1516': attribute type 2 has an invalid length.
[  216.425127][T10961] openvswitch: netlink: Message has 8 unknown bytes.
[  216.758749][T10985] openvswitch: netlink: Message has 8 unknown bytes.
[  217.122819][T11017] openvswitch: netlink: Message has 8 unknown bytes.
[  217.360074][T11034] syzkaller0: entered promiscuous mode
[  217.362095][T11034] syzkaller0: entered allmulticast mode
[  218.431065][T11051] openvswitch: netlink: Message has 8 unknown bytes.
[  218.499012][T11057] __nla_validate_parse: 9 callbacks suppressed
[  218.499027][T11057] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1566'.
[  218.650838][T11064] validate_nla: 25 callbacks suppressed
[  218.650855][T11064] netlink: 'syz.0.1569': attribute type 1 has an invalid length.
[  218.670634][T11064] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1569'.
[  218.757107][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'.
[  218.760721][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'.
[  218.859623][T11080] netlink: 'syz.2.1576': attribute type 29 has an invalid length.
[  218.863887][T11080] netlink: 'syz.2.1576': attribute type 29 has an invalid length.
[  218.868839][T11080] netlink: 'syz.2.1576': attribute type 29 has an invalid length.
[  219.277177][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'.
[  219.871881][T11110] netlink: 'syz.0.1585': attribute type 29 has an invalid length.
[  219.876030][T11112] netlink: 'syz.2.1586': attribute type 1 has an invalid length.
[  219.877015][T11110] netlink: 'syz.0.1585': attribute type 29 has an invalid length.
[  219.882984][T11112] netlink: 'syz.2.1586': attribute type 29 has an invalid length.
[  219.889537][T11112] netlink: 'syz.2.1586': attribute type 29 has an invalid length.
[  219.893275][T11112] netlink: 'syz.2.1586': attribute type 29 has an invalid length.
[  220.292981][T11129] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1594'.
[  220.477851][T11135] openvswitch: netlink: Message has 8 unknown bytes.
[  220.500729][T11137] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1596'.
[  220.643799][ T8328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  220.908972][T11173] netlink: 197860 bytes leftover after parsing attributes in process `syz.0.1611'.
[  220.914600][T11174] openvswitch: netlink: Message has 8 unknown bytes.
[  220.956952][T11179] bridge_slave_1: left allmulticast mode
[  220.959451][T11179] bridge_slave_1: left promiscuous mode
[  220.961999][T11179] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.967231][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1611'.
[  220.972249][T11179] bridge_slave_0: left allmulticast mode
[  220.974722][T11179] bridge_slave_0: left promiscuous mode
[  220.979868][T11179] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.249721][T11193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.443899][T11206] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1623'.
[  222.938906][T11254] openvswitch: netlink: Message has 8 unknown bytes.
[  224.082456][T11277] openvswitch: netlink: Message has 8 unknown bytes.
[  224.095633][T11275] __nla_validate_parse: 2 callbacks suppressed
[  224.095690][T11275] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'.
[  224.124141][T11275] validate_nla: 22 callbacks suppressed
[  224.124230][T11275] netlink: 'syz.3.1646': attribute type 29 has an invalid length.
[  224.130858][T11275] netlink: 'syz.3.1646': attribute type 29 has an invalid length.
[  224.246407][T11284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1650'.
[  224.282403][T11286] netlink: 'syz.3.1651': attribute type 29 has an invalid length.
[  224.295666][T11286] netlink: 'syz.3.1651': attribute type 29 has an invalid length.
[  224.318754][T11288] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1652'.
[  224.375933][T11290] netlink: 'syz.3.1653': attribute type 10 has an invalid length.
[  224.378513][T11290] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1653'.
[  224.437083][T11294] netlink: 731 bytes leftover after parsing attributes in process `syz.2.1654'.
[  225.203363][T11297] netlink: 'syz.2.1655': attribute type 39 has an invalid length.
[  225.228926][T11302] openvswitch: netlink: Message has 8 unknown bytes.
[  225.301087][T11307] sctp: [Deprecated]: syz.3.1659 (pid 11307) Use of struct sctp_assoc_value in delayed_ack socket option.
[  225.301087][T11307] Use struct sctp_sack_info instead
[  225.459303][T11316] netlink: 'syz.0.1661': attribute type 1 has an invalid length.
[  225.461995][T11316] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1661'.
[  225.486701][T11317] netlink: 'syz.0.1661': attribute type 1 has an invalid length.
[  225.489880][T11317] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1661'.
[  225.631029][T11325] netlink: 'syz.3.1664': attribute type 10 has an invalid length.
[  225.634072][T11325] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1664'.
[  225.717831][T11328] netlink: 'syz.0.1665': attribute type 10 has an invalid length.
[  225.726629][T11328] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1665'.
[  225.798378][T11337] openvswitch: netlink: Message has 8 unknown bytes.
[  226.748938][T11358] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.1674'.
[  226.967739][T11362] openvswitch: netlink: Message has 8 unknown bytes.
[  227.100392][T11368] lo speed is unknown, defaulting to 1000
[  229.197956][T11408] validate_nla: 11 callbacks suppressed
[  229.197971][T11408] netlink: 'syz.3.1689': attribute type 29 has an invalid length.
[  229.203223][T11415] netlink: 'syz.0.1690': attribute type 29 has an invalid length.
[  229.208806][T11416] netlink: 'syz.0.1690': attribute type 29 has an invalid length.
[  229.211599][T11417] netlink: 'syz.0.1690': attribute type 29 has an invalid length.
[  229.254768][T11423] netlink: 'syz.3.1692': attribute type 29 has an invalid length.
[  229.258281][T11423] netlink: 'syz.3.1692': attribute type 29 has an invalid length.
[  229.282993][T11426] __nla_validate_parse: 4 callbacks suppressed
[  229.283002][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'.
[  229.290528][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'.
[  229.462559][T11435] sctp: [Deprecated]: syz.0.1695 (pid 11435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  229.462559][T11435] Use struct sctp_sack_info instead
[  229.471485][   T33] audit: type=1107 audit(1756944575.605:3): pid=11430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q/sa%Rl
[  229.471485][   T33] 4!:~Ћ 	'
[  229.543814][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'.
[  229.547405][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'.
[  230.316231][T11444] netlink: 'syz.0.1699': attribute type 29 has an invalid length.
[  230.536858][T11459] netlink: 'syz.3.1702': attribute type 29 has an invalid length.
[  230.540792][T11459] netlink: 'syz.3.1702': attribute type 29 has an invalid length.
[  230.545003][T11459] netlink: 'syz.3.1702': attribute type 29 has an invalid length.
[  230.591886][T11462] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1704'.
[  230.807503][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'.
[  230.902591][T11469] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1706'.
[  231.072799][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'.
[  231.611847][T11509] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1720'.
[  231.734018][T11515] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1722'.
[  233.487242][T11572] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  233.708036][T11590] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  234.208765][T11605] validate_nla: 24 callbacks suppressed
[  234.208778][T11605] netlink: 'syz.2.1752': attribute type 29 has an invalid length.
[  234.215676][T11605] netlink: 'syz.2.1752': attribute type 29 has an invalid length.
[  234.378676][T11621] __nla_validate_parse: 5 callbacks suppressed
[  234.378690][T11621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1757'.
[  234.387167][T11621] netlink: 'syz.3.1757': attribute type 29 has an invalid length.
[  234.390894][T11621] netlink: 'syz.3.1757': attribute type 29 has an invalid length.
[  234.395207][T11621] netlink: 'syz.3.1757': attribute type 29 has an invalid length.
[  234.767865][T11639] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  234.881648][T11646] wg2: entered allmulticast mode
[  235.004790][T11646] wg2: entered promiscuous mode
[  235.502973][T11655] delete_channel: no stack
[  235.625164][T11663] netlink: 'syz.2.1773': attribute type 29 has an invalid length.
[  235.629390][T11663] netlink: 'syz.2.1773': attribute type 29 has an invalid length.
[  235.732024][T11665] netlink: 'syz.0.1774': attribute type 29 has an invalid length.
[  235.737173][T11665] netlink: 'syz.0.1774': attribute type 29 has an invalid length.
[  235.789517][T11667] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1775'.
[  235.909367][T11678] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1780'.
[  235.947763][T11680] netlink: 'syz.0.1781': attribute type 29 has an invalid length.
[  235.958644][T11682] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1782'.
[  235.962237][T11682] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1782'.
[  235.970239][T11682] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1782'.
[  235.974028][T11683] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1782'.
[  236.003858][T11682] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1782'.
[  236.021958][T11683] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1782'.
[  236.111885][T11700] pim6reg1: entered promiscuous mode
[  236.114206][T11700] pim6reg1: entered allmulticast mode
[  236.481243][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'.
[  236.703887][T11736] macsec0: entered allmulticast mode
[  236.706953][T11737] veth1_macvtap: entered allmulticast mode
[  236.709552][T11737] macsec0: entered promiscuous mode
[  238.607009][T11835] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  239.038594][T11862] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  239.540513][T11883] validate_nla: 33 callbacks suppressed
[  239.540527][T11883] netlink: 'syz.0.1856': attribute type 29 has an invalid length.
[  239.547755][T11883] netlink: 'syz.0.1856': attribute type 29 has an invalid length.
[  239.551296][T11883] netlink: 'syz.0.1856': attribute type 29 has an invalid length.
[  239.743484][T11887] netlink: 'syz.0.1858': attribute type 2 has an invalid length.
[  239.747463][T11887] __nla_validate_parse: 10 callbacks suppressed
[  239.747537][T11887] netlink: 85376 bytes leftover after parsing attributes in process `syz.0.1858'.
[  239.778936][T11890] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  239.814712][T11896] netlink: 'syz.3.1862': attribute type 29 has an invalid length.
[  239.826722][T11896] netlink: 'syz.3.1862': attribute type 29 has an invalid length.
[  239.931420][T11902] netlink: 'syz.3.1865': attribute type 29 has an invalid length.
[  239.934805][T11902] netlink: 'syz.3.1865': attribute type 29 has an invalid length.
[  239.940933][T11902] netlink: 'syz.3.1865': attribute type 29 has an invalid length.
[  240.099588][T11914] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1869'.
[  240.103710][T11912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1869'.
[  240.333196][T11925] netlink: 'syz.2.1872': attribute type 29 has an invalid length.
[  240.550625][T11935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.738388][   T12] tipc: Subscription rejected, illegal request
[  240.801256][T11956] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1882'.
[  240.819896][T11958] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  241.095825][T11974] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1884'.
[  241.101074][T11974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.274250][T11980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1890'.
[  242.516913][T11981] delete_channel: no stack
[  242.588257][T11987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.708171][T11984] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.1892'.
[  243.801282][T12025] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  243.916508][T12034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.921264][T12034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1906'.
[  244.249429][T12039] netlink: 14453 bytes leftover after parsing attributes in process `syz.0.1908'.
[  244.637062][T12056] validate_nla: 20 callbacks suppressed
[  244.637072][T12056] netlink: 'syz.2.1915': attribute type 29 has an invalid length.
[  244.642572][T12058] netlink: 'syz.0.1916': attribute type 29 has an invalid length.
[  244.650390][T12058] netlink: 'syz.0.1916': attribute type 29 has an invalid length.
[  244.657262][T12056] netlink: 'syz.2.1915': attribute type 29 has an invalid length.
[  244.662612][T12056] netlink: 'syz.2.1915': attribute type 29 has an invalid length.
[  244.782673][T12076] netlink: 'syz.0.1922': attribute type 29 has an invalid length.
[  244.820315][T12078] xt_time: invalid argument - start or stop time greater than 23:59:59
[  244.883193][T12083] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1925'.
[  244.892658][T12083] netlink: 'syz.3.1925': attribute type 29 has an invalid length.
[  244.896869][T12083] netlink: 'syz.3.1925': attribute type 29 has an invalid length.
[  245.246440][T12094] netlink: 'syz.3.1927': attribute type 29 has an invalid length.
[  245.270538][T12095] netlink: 'syz.3.1927': attribute type 29 has an invalid length.
[  245.523655][T12098] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1928'.
[  246.677978][T12124] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1936'.
[  247.142252][T12127] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  248.118567][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'.
[  248.414012][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'.
[  249.732725][T12216] validate_nla: 16 callbacks suppressed
[  249.732739][T12216] netlink: 'syz.0.1964': attribute type 29 has an invalid length.
[  249.762127][T12218] netlink: 'syz.0.1964': attribute type 29 has an invalid length.
[  249.762127][T12216] wg0 speed is unknown, defaulting to 1000
[  249.769336][T12216] wg0 speed is unknown, defaulting to 1000
[  249.772109][T12216] wg0 speed is unknown, defaulting to 1000
[  249.791732][T12216] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  249.821043][T12217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1964'.
[  249.830152][T12216] wg0 speed is unknown, defaulting to 1000
[  249.835396][T12216] wg0 speed is unknown, defaulting to 1000
[  249.839437][T12216] wg0 speed is unknown, defaulting to 1000
[  249.936886][T12225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1967'.
[  250.659742][T12227] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  250.711627][T12230] netlink: 'syz.3.1969': attribute type 29 has an invalid length.
[  250.717043][T12230] netlink: 'syz.3.1969': attribute type 29 has an invalid length.
[  250.720593][T12230] netlink: 'syz.3.1969': attribute type 29 has an invalid length.
[  250.901626][T12239] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  251.654179][T12254] netlink: 'syz.2.1977': attribute type 29 has an invalid length.
[  251.662864][T12254] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1977'.
[  251.698230][T12249] syzkaller0: entered promiscuous mode
[  251.700913][T12249] syzkaller0: entered allmulticast mode
[  251.704736][T12256] netlink: 'syz.3.1978': attribute type 29 has an invalid length.
[  251.710268][T12256] netlink: 'syz.3.1978': attribute type 29 has an invalid length.
[  251.713951][T12256] netlink: 'syz.3.1978': attribute type 29 has an invalid length.
[  251.811205][T12258] netlink: 'syz.3.1979': attribute type 5 has an invalid length.
[  251.814410][T12258] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1979'.
[  252.831763][T12276] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  252.896887][T12277] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1984'.
[  253.108954][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'.
[  253.290586][T12295] syzkaller0: entered promiscuous mode
[  253.292420][T12295] syzkaller0: entered allmulticast mode
[  254.405759][T12315] siw: device registration error -23
[  254.412755][T12315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1998'.
[  254.523511][T12320] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1999'.
[  255.134083][T12324] validate_nla: 3 callbacks suppressed
[  255.134094][T12324] netlink: 'syz.3.2000': attribute type 29 has an invalid length.
[  255.289007][T12328] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  255.368327][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.371131][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.371836][T12336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2006'.
[  255.397853][T12342] netlink: 'syz.0.2007': attribute type 29 has an invalid length.
[  255.441964][T12348] netlink: 'syz.0.2010': attribute type 29 has an invalid length.
[  255.445182][T12348] netlink: 'syz.0.2010': attribute type 29 has an invalid length.
[  255.448028][T12348] netlink: 'syz.0.2010': attribute type 29 has an invalid length.
[  255.480213][T12352] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  255.503507][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2013'.
[  255.511296][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  255.604979][T12359] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2015'.
[  255.712010][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  255.930703][T12361] netlink: 'syz.3.2016': attribute type 29 has an invalid length.
[  255.971693][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'.
[  256.055830][T12367] netlink: 'syz.0.2019': attribute type 29 has an invalid length.
[  256.060887][T12367] netlink: 'syz.0.2019': attribute type 29 has an invalid length.
[  256.064584][T12367] netlink: 'syz.0.2019': attribute type 29 has an invalid length.
[  256.267481][T12381] netlink: 'syz.3.2023': attribute type 29 has an invalid length.
[  256.308093][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2025'.
[  256.314800][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2025'.
[  256.325123][T12390] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  256.437303][T12391] delete_channel: no stack
[  256.524605][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2033'.
[  256.568336][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2033'.
[  256.651441][T12412] nftables ruleset with unbound chain
[  256.712192][T12412] xt_l2tp: unknown flags: 51
[  257.778017][T12462] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  259.024510][T12497] syzkaller0: entered promiscuous mode
[  259.028158][T12497] syzkaller0: entered allmulticast mode
[  259.804107][T12541] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  260.412962][T12546] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  260.846633][T12557] validate_nla: 27 callbacks suppressed
[  260.846643][T12557] netlink: 'syz.3.2075': attribute type 29 has an invalid length.
[  260.974167][T12571] netlink: 'syz.0.2080': attribute type 29 has an invalid length.
[  260.985242][T12568] netlink: 'syz.0.2080': attribute type 29 has an invalid length.
[  260.987963][T12571] netlink: 'syz.0.2080': attribute type 29 has an invalid length.
[  260.990982][T12568] netlink: 'syz.0.2080': attribute type 29 has an invalid length.
[  261.175807][T12577] netlink: 'syz.3.2084': attribute type 29 has an invalid length.
[  261.203138][T12575] __nla_validate_parse: 4 callbacks suppressed
[  261.203197][T12575] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2083'.
[  261.230410][T12575] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2083'.
[  261.233716][T12575] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  261.245611][T12575] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  261.263021][T12575] netlink: 'syz.0.2083': attribute type 2 has an invalid length.
[  261.273106][T12575] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2083'.
[  261.273748][T12584] netlink: 'syz.2.2078': attribute type 29 has an invalid length.
[  261.283103][T12584] netlink: 'syz.2.2078': attribute type 29 has an invalid length.
[  261.477050][T12602] netlink: 'syz.2.2091': attribute type 29 has an invalid length.
[  261.529893][T12605] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  262.133041][T12642] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2105'.
[  262.796213][T12661] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  263.191993][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'.
[  263.195106][T12680] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2119'.
[  263.199010][T12680] bridge_slave_0: entered allmulticast mode
[  263.201419][T12680] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2119'.
[  263.474197][T12684] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  263.513238][T12687] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2121'.
[  263.923856][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'.
[  264.384023][T12721] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2134'.
[  265.249557][T12733] delete_channel: no stack
[  265.377802][T12752] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  265.938411][T12779] validate_nla: 34 callbacks suppressed
[  265.938425][T12779] netlink: 'syz.2.2157': attribute type 46 has an invalid length.
[  266.033652][T12783] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  266.401534][T12791] netlink: 'syz.0.2161': attribute type 29 has an invalid length.
[  266.407381][T12791] netlink: 'syz.0.2161': attribute type 29 has an invalid length.
[  266.510569][T12797] __nla_validate_parse: 4 callbacks suppressed
[  266.510579][T12797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2164'.
[  266.517681][T12797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2164'.
[  266.525437][T12797] netlink: 'syz.0.2164': attribute type 23 has an invalid length.
[  266.565209][T12799] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  266.602431][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'.
[  266.868530][T12804] netlink: 'syz.0.2167': attribute type 29 has an invalid length.
[  266.922495][T12805] netlink: 'syz.0.2167': attribute type 29 has an invalid length.
[  266.935713][T12804] netlink: 'syz.0.2167': attribute type 29 has an invalid length.
[  267.014483][T12807] netlink: 'syz.0.2168': attribute type 21 has an invalid length.
[  268.181872][T12826] netlink: 'syz.0.2174': attribute type 29 has an invalid length.
[  268.187293][T12826] netlink: 'syz.0.2174': attribute type 29 has an invalid length.
[  268.387539][T12834] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2178'.
[  268.641209][T12853] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  268.715338][T12854] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.2182'.
[  268.719029][T12854] nbd: must specify a size in bytes for the device
[  268.823718][T12863] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  269.680067][T12872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.686085][T12872] tmpfs: Bad value for 'uid'
[  269.688367][T12872] tmpfs: Bad value for 'uid'
[  269.875743][T12882] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2194'.
[  270.062923][T12887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2195'.
[  271.166198][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'.
[  271.196986][T12895] validate_nla: 13 callbacks suppressed
[  271.196996][T12895] netlink: 'syz.2.2197': attribute type 21 has an invalid length.
[  271.201704][T12895] netlink: 'syz.2.2197': attribute type 1 has an invalid length.
[  271.266179][T12898] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  271.488999][T12906] netlink: 'syz.2.2201': attribute type 29 has an invalid length.
[  271.492386][T12906] netlink: 'syz.2.2201': attribute type 29 has an invalid length.
[  271.703829][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'.
[  271.709219][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'.
[  271.782123][T12931] netlink: 'syz.2.2208': attribute type 29 has an invalid length.
[  271.786146][T12931] netlink: 'syz.2.2208': attribute type 29 has an invalid length.
[  271.788929][T12931] netlink: 'syz.2.2208': attribute type 29 has an invalid length.
[  273.040012][T12964] netlink: 'syz.2.2216': attribute type 29 has an invalid length.
[  273.043026][T12964] netlink: 'syz.2.2216': attribute type 29 has an invalid length.
[  273.045978][T12964] netlink: 'syz.2.2216': attribute type 29 has an invalid length.
[  273.170809][   T33] audit: type=1107 audit(1756944619.305:4): pid=12972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':8=5MHCIT2x'!{x5	E&'
[  273.279558][T12975] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2219'.
[  273.283119][ T9669] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  273.540206][T12980] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  274.154077][T12994] syzkaller0: entered promiscuous mode
[  274.156496][T12994] syzkaller0: entered allmulticast mode
[  274.521155][T13000] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  274.980163][T13007] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2230'.
[  275.048020][   T33] audit: type=1107 audit(1756944621.185:5): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2|o1hY"
[  275.048020][   T33] !qyMrNACh_v'
[  275.111194][T13018] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  275.318578][T13025] tmpfs: Unknown parameter 'uid'
[  275.893952][T13042] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2243'.
[  275.898336][T13041] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2243'.
[  275.956779][T13045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2243'.
[  275.960613][T13042] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2243'.
[  276.174586][T13072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2251'.
[  276.974088][T13072] batman_adv: batadv0: Adding interface: hsr_slave_1
[  276.979399][T13072] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.988979][T13072] batman_adv: batadv0: Interface activated: hsr_slave_1
[  277.043621][T13075] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  277.340652][T13089] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2257'.
[  277.343680][T13089] netlink: zone id is out of range
[  277.345493][T13089] netlink: zone id is out of range
[  277.347552][T13089] netlink: zone id is out of range
[  277.349792][T13089] netlink: zone id is out of range
[  277.351948][T13089] netlink: zone id is out of range
[  277.354112][T13089] netlink: zone id is out of range
[  277.356574][T13089] netlink: zone id is out of range
[  277.480748][T13095] validate_nla: 83 callbacks suppressed
[  277.480762][T13095] netlink: 'syz.0.2260': attribute type 29 has an invalid length.
[  277.486647][T13095] netlink: 'syz.0.2260': attribute type 29 has an invalid length.
[  277.490271][T13095] netlink: 'syz.0.2260': attribute type 29 has an invalid length.
[  277.521880][T13097] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  277.525136][   T29] wlan1: Trigger new scan to find an IBSS to join
[  280.485409][ T1088] wlan1: Trigger new scan to find an IBSS to join
[  283.535077][   T64] wlan1: Trigger new scan to find an IBSS to join
[  284.436461][ T2251] wlan1: Creating new IBSS network, BSSID 66:f0:92:7e:62:85
[  288.165089][ T5233] Bluetooth: hci3: command 0x0406 tx timeout
[  314.441408][ T1088] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  316.818827][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.821346][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  345.366423][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  376.291141][ T6725] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  378.247759][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.249944][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  407.216001][ T6725] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  417.285287][   T34] INFO: task syz.3.2109:12652 blocked for more than 143 seconds.
[  417.288665][   T34]       Not tainted syzkaller #0
[  417.292186][   T34]       Blocked by coredump.
[  417.294604][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  417.298420][   T34] task:syz.3.2109      state:D stack:25992 pid:12652 tgid:12651 ppid:9140   task_flags:0x40054c flags:0x00004000
[  417.303410][   T34] Call Trace:
[  417.304962][   T34]  <TASK>
[  417.306264][   T34]  __schedule+0x1798/0x4cc0
[  417.308251][   T34]  ? __lock_acquire+0xab9/0xd20
[  417.310356][   T34]  ? __lock_acquire+0xab9/0xd20
[  417.312494][   T34]  ? __pfx___schedule+0x10/0x10
[  417.314630][   T34]  ? schedule+0x91/0x360
[  417.316584][   T34]  schedule+0x165/0x360
[  417.318389][   T34]  schedule_preempt_disabled+0x13/0x30
[  417.320733][   T34]  rwsem_down_write_slowpath+0x872/0xfe0
[  417.323151][   T34]  ? rwsem_down_write_slowpath+0x472/0xfe0
[  417.325768][   T34]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  417.328398][   T34]  ? __lock_acquire+0xab9/0xd20
[  417.330463][   T34]  ? exit_mmap+0x28e/0xb50
[  417.332344][   T34]  down_write+0x1ab/0x1f0
[  417.334149][   T34]  ? __pfx_down_write+0x10/0x10
[  417.336245][   T34]  exit_mmap+0x28e/0xb50
[  417.338063][   T34]  ? uprobe_clear_state+0x20f/0x290
[  417.340302][   T34]  ? __pfx_exit_mmap+0x10/0x10
[  417.342389][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  417.344793][   T34]  ? __pfx_exit_aio+0x10/0x10
[  417.346896][   T34]  ? uprobe_clear_state+0x274/0x290
[  417.349089][   T34]  __mmput+0x118/0x420
[  417.350840][   T34]  exit_mm+0x1da/0x2c0
[  417.352646][   T34]  ? __pfx_exit_mm+0x10/0x10
[  417.355146][   T34]  ? rcu_is_watching+0x15/0xb0
[  417.357235][   T34]  do_exit+0x648/0x2300
[  417.359020][   T34]  ? do_raw_spin_lock+0x121/0x290
[  417.361166][   T34]  ? __pfx_do_exit+0x10/0x10
[  417.363169][   T34]  do_group_exit+0x21c/0x2d0
[  417.366618][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.368686][   T34]  get_signal+0x1286/0x1340
[  417.370504][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  417.372595][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  417.375033][   T34]  ? perf_trace_preemptirq_template+0xa3/0x340
[  417.377327][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  417.379374][   T34]  exit_to_user_mode_loop+0x75/0x110
[  417.381396][   T34]  do_syscall_64+0x2bd/0x3b0
[  417.383207][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.385373][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.387746][   T34]  ? exc_page_fault+0x9f/0xf0
[  417.389593][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.391910][   T34] RIP: 0033:0x7fd08078ebe9
[  417.393637][   T34] RSP: 002b:00007fd0815d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  417.397567][   T34] RAX: fffffffffffffe00 RBX: 00007fd0809c5fa8 RCX: 00007fd08078ebe9
[  417.400613][   T34] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd0809c5fa8
[  417.403586][   T34] RBP: 00007fd0809c5fa0 R08: 0000000000000000 R09: 0000000000000000
[  417.406905][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  417.409909][   T34] R13: 00007fd0809c6038 R14: 00007fffbd432320 R15: 00007fffbd432408
[  417.412945][   T34]  </TASK>
[  417.414140][   T34] INFO: task syz.3.2109:12653 blocked for more than 143 seconds.
[  417.417191][   T34]       Not tainted syzkaller #0
[  417.419120][   T34]       Blocked by coredump.
[  417.420914][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  417.424153][   T34] task:syz.3.2109      state:D stack:20560 pid:12653 tgid:12653 ppid:12652  task_flags:0x40064c flags:0x00004002
[  417.429558][   T34] Call Trace:
[  417.430850][   T34]  <TASK>
[  417.432030][   T34]  __schedule+0x1798/0x4cc0
[  417.433787][   T34]  ? __lock_acquire+0xab9/0xd20
[  417.435716][   T34]  ? __lock_acquire+0xab9/0xd20
[  417.437589][   T34]  ? __pfx___schedule+0x10/0x10
[  417.439519][   T34]  ? schedule+0x91/0x360
[  417.441189][   T34]  schedule+0x165/0x360
[  417.442835][   T34]  schedule_preempt_disabled+0x13/0x30
[  417.445196][   T34]  rwsem_down_write_slowpath+0x872/0xfe0
[  417.447415][   T34]  ? rwsem_down_write_slowpath+0x472/0xfe0
[  417.449718][   T34]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  417.452127][   T34]  ? __lock_acquire+0xab9/0xd20
[  417.454050][   T34]  ? exit_mmap+0x28e/0xb50
[  417.456072][   T34]  down_write+0x1ab/0x1f0
[  417.457784][   T34]  ? __pfx_down_write+0x10/0x10
[  417.459715][   T34]  exit_mmap+0x28e/0xb50
[  417.461380][   T34]  ? uprobe_clear_state+0x20f/0x290
[  417.463444][   T34]  ? __pfx_exit_mmap+0x10/0x10
[  417.465642][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  417.467851][   T34]  ? __pfx_exit_aio+0x10/0x10
[  417.469717][   T34]  ? uprobe_clear_state+0x274/0x290
[  417.471737][   T34]  __mmput+0x118/0x420
[  417.473355][   T34]  exit_mm+0x1da/0x2c0
[  417.475065][   T34]  ? __pfx_exit_mm+0x10/0x10
[  417.476889][   T34]  ? hrtimer_try_to_cancel+0x3d9/0x420
[  417.479012][   T34]  ? rcu_is_watching+0x15/0xb0
[  417.480898][   T34]  do_exit+0x648/0x2300
[  417.482541][   T34]  ? __pfx_do_exit+0x10/0x10
[  417.484359][   T34]  do_group_exit+0x21c/0x2d0
[  417.486260][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.488296][   T34]  get_signal+0x1286/0x1340
[  417.490116][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  417.492322][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  417.494748][   T34]  ? local_irq_enable_exit_to_user+0x5/0x10
[  417.497141][   T34]  irqentry_exit_to_user_mode+0x81/0x120
[  417.499347][   T34]  exc_page_fault+0x9f/0xf0
[  417.501133][   T34]  asm_exc_page_fault+0x26/0x30
[  417.503048][   T34] RIP: 0033:0x0
[  417.504443][   T34] RSP: 002b:0000200000000278 EFLAGS: 00010217
[  417.507522][   T34] RAX: 0000000000000000 RBX: 00007fd0809c5fa0 RCX: 00007fd08078ebe9
[  417.510549][   T34] RDX: 00002000000002c0 RSI: 0000200000000270 RDI: 0000000000040000
[  417.513630][   T34] RBP: 00007fd080811e19 R08: 0000200000000440 R09: 0000200000000440
[  417.516725][   T34] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000
[  417.519732][   T34] R13: 00007fd0809c6038 R14: 00007fd0809c5fa0 R15: 00007fffbd432408
[  417.522698][   T34]  </TASK>
[  417.523916][   T34] 
[  417.523916][   T34] Showing all locks held in the system:
[  417.527046][   T34] 1 lock held by khungtaskd/34:
[  417.528931][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  417.532710][   T34] 2 locks held by getty/5670:
[  417.534555][   T34]  #0: ffff88801edf60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  417.539195][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  417.542968][   T34] 1 lock held by syz-executor/5827:
[  417.545013][   T34]  #0: ffff888104b11760 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0
[  417.548550][   T34] 2 locks held by kworker/u9:5/8328:
[  417.550545][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  417.555060][   T34]  #1: ffffc900072f7bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  417.560510][   T34] 1 lock held by syz.3.2109/12652:
[  417.562449][   T34]  #0: ffff888104b16d60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50
[  417.565902][   T34] 1 lock held by syz.3.2109/12653:
[  417.567839][   T34]  #0: ffff888104b157e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50
[  417.571213][   T34] 
[  417.572162][   T34] =============================================
[  417.572162][   T34] 
[  417.575378][   T34] NMI backtrace for cpu 0
[  417.575388][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  417.575399][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  417.575405][   T34] Call Trace:
[  417.575410][   T34]  <TASK>
[  417.575415][   T34]  dump_stack_lvl+0x189/0x250
[  417.575453][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.575465][   T34]  ? __pfx__printk+0x10/0x10
[  417.575484][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  417.575498][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  417.575510][   T34]  ? __pfx__printk+0x10/0x10
[  417.575525][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  417.575541][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  417.575553][   T34]  watchdog+0xf93/0xfe0
[  417.575569][   T34]  ? watchdog+0x1de/0xfe0
[  417.575585][   T34]  kthread+0x711/0x8a0
[  417.575599][   T34]  ? __pfx_watchdog+0x10/0x10
[  417.575611][   T34]  ? __pfx_kthread+0x10/0x10
[  417.575624][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  417.575636][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.575647][   T34]  ? __pfx_kthread+0x10/0x10
[  417.575659][   T34]  ret_from_fork+0x3fc/0x770
[  417.575671][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  417.575684][   T34]  ? __switch_to_asm+0x39/0x70
[  417.575695][   T34]  ? __switch_to_asm+0x33/0x70
[  417.575705][   T34]  ? __pfx_kthread+0x10/0x10
[  417.575717][   T34]  ret_from_fork_asm+0x1a/0x30
[  417.575737][   T34]  </TASK>
[  417.575741][   T34] Sending NMI from CPU 0 to CPUs 1:
[  417.631456][    C1] NMI backtrace for cpu 1
[  417.631467][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  417.631474][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  417.631478][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  417.631490][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 e6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  417.631495][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  417.631502][    C1] RAX: abe95b6630ac6900 RBX: ffffffff819683a8 RCX: abe95b6630ac6900
[  417.631507][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6a5f RDI: ffffffff8be33300
[  417.631511][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  417.631515][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38030
[  417.631519][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  417.631523][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  417.631528][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  417.631533][    C1] CR2: 00007ffe2b484ff8 CR3: 000000000df36000 CR4: 00000000000006f0
[  417.631562][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[  417.631568][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  417.631571][    C1] Call Trace:
[  417.631575][    C1]  <TASK>
[  417.631578][    C1]  default_idle+0x13/0x20
[  417.631584][    C1]  default_idle_call+0x74/0xb0
[  417.631590][    C1]  do_idle+0x1e8/0x510
[  417.631598][    C1]  ? __pfx_do_idle+0x10/0x10
[  417.631606][    C1]  cpu_startup_entry+0x44/0x60
[  417.631612][    C1]  start_secondary+0x101/0x110
[  417.631621][    C1]  common_startup_64+0x13e/0x147
[  417.631632][    C1]  </TASK>
[  417.632360][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  417.701398][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  417.704937][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  417.708836][   T34] Call Trace:
[  417.710155][   T34]  <TASK>
[  417.711325][   T34]  dump_stack_lvl+0x99/0x250
[  417.713144][   T34]  ? __asan_memcpy+0x40/0x70
[  417.714974][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.717000][   T34]  ? __pfx__printk+0x10/0x10
[  417.718835][   T34]  vpanic+0x281/0x750
[  417.720377][   T34]  ? __pfx_vpanic+0x10/0x10
[  417.722183][   T34]  ? preempt_schedule+0xae/0xc0
[  417.724199][   T34]  ? preempt_schedule_common+0x83/0xd0
[  417.726350][   T34]  panic+0xb9/0xc0
[  417.727836][   T34]  ? __pfx_panic+0x10/0x10
[  417.729609][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  417.731713][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  417.734105][   T34]  watchdog+0xfd2/0xfe0
[  417.735745][   T34]  ? watchdog+0x1de/0xfe0
[  417.737446][   T34]  kthread+0x711/0x8a0
[  417.739042][   T34]  ? __pfx_watchdog+0x10/0x10
[  417.740864][   T34]  ? __pfx_kthread+0x10/0x10
[  417.742674][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  417.744712][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.746750][   T34]  ? __pfx_kthread+0x10/0x10
[  417.748560][   T34]  ret_from_fork+0x3fc/0x770
[  417.750358][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  417.752379][   T34]  ? __switch_to_asm+0x39/0x70
[  417.754290][   T34]  ? __switch_to_asm+0x33/0x70
[  417.756161][   T34]  ? __pfx_kthread+0x10/0x10
[  417.757974][   T34]  ret_from_fork_asm+0x1a/0x30
[  417.759834][   T34]  </TASK>
[  417.761842][   T34] Kernel Offset: disabled
[  417.763548][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:12:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ea0 RBP=ffffffff8172c195 RSP=ffffc900072f7398
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900072f7558 R11=ffffffff81ac3930
R12=0000000000000002 R13=ffffffff8e139ea0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5bb8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000000df36000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc9000068f890 RSP=ffffc9000068f6b8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854efaa0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efb17 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe2b484ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9956812e53
XMM06=0000000000000000 00007f9956812e4d XMM07=0000000000000000 00007f9956812e61
XMM08=0000000000000000 00007f9956812ee7 XMM09=0000000000000000 00007f9956812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
