last executing test programs:

4m37.075360198s ago: executing program 0 (id=2784):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000090601c6cdbbadccbcf08f31560200000000000000000200ffff200007800c00018008000140e000000208000a40000000020500030002"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608"], 0x150}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

4m37.028896804s ago: executing program 0 (id=2785):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000064009d"], 0xfe33)

4m37.028628616s ago: executing program 0 (id=2786):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

4m36.916660293s ago: executing program 0 (id=2787):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)

4m36.768310155s ago: executing program 0 (id=2792):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

4m36.687148902s ago: executing program 0 (id=2794):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/243, 0xf3}, {0x0}], 0x2, &(0x7f0000000600)=""/252, 0xfc}, 0x100)
close(r0)

4m21.406621157s ago: executing program 32 (id=2794):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/243, 0xf3}, {0x0}], 0x2, &(0x7f0000000600)=""/252, 0xfc}, 0x100)
close(r0)

2m56.277385801s ago: executing program 3 (id=4437):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a020000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

2m56.277253769s ago: executing program 3 (id=4438):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="f6ecf2d478a86eca2e6bea075d1e9d27080c1ea53cd831d365c43ae12da23b0345166f23598dab804e04", 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

2m56.215257128s ago: executing program 3 (id=4439):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(r1)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

2m56.135227455s ago: executing program 3 (id=4441):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x122)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x80000000, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x700}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

2m56.134976976s ago: executing program 3 (id=4442):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m56.057407164s ago: executing program 3 (id=4443):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)

2m40.945353118s ago: executing program 33 (id=4443):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)

2m28.388182567s ago: executing program 4 (id=4801):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a00142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

2m28.387848s ago: executing program 2 (id=4802):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0xb, 0x0, 0x0)

2m28.326741002s ago: executing program 2 (id=4803):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x3, 0x0, 0xffff0000, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$kcm(0x21, 0x2, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90)
socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

2m28.326461882s ago: executing program 4 (id=4804):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

2m28.166327627s ago: executing program 2 (id=4805):
r0 = socket$kcm(0x2, 0x3, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
socket(0x10, 0x3, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x24}], 0x1}, 0x0)

2m28.164554716s ago: executing program 2 (id=4807):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m28.099095933s ago: executing program 4 (id=4808):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x80, 0x0}, 0x20000000)

2m27.760063293s ago: executing program 4 (id=4813):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000040)}, 0x40010)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="cc1800000800000085000000ae0000009500"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="140000002b", 0x5}], 0x1}, 0x480c0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000004c0)='\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="140000003800a334717f8064c15494f90b24fc600f", 0x15}], 0x1}, 0x4044)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="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", 0x10c}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94)

2m27.045488712s ago: executing program 4 (id=4818):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m27.032621437s ago: executing program 2 (id=4819):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000021c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640a", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8084)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)

2m26.806768957s ago: executing program 4 (id=4820):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$unix(r4, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$inet(r0, 0x0, 0x81)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2m26.644227352s ago: executing program 34 (id=4820):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$unix(r4, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$inet(r0, 0x0, 0x81)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2m26.595225457s ago: executing program 2 (id=4822):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)

2m26.561647183s ago: executing program 35 (id=4822):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)

1m40.817072432s ago: executing program 6 (id=5403):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})

1m40.816603686s ago: executing program 6 (id=5405):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0x0)

1m40.765752473s ago: executing program 6 (id=5406):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m40.765252627s ago: executing program 6 (id=5407):
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000000100), 0x120)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000001140)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f00000011c0)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}, 0x440c0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_devices(r6, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0)

1m40.357567722s ago: executing program 6 (id=5416):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0x13, 0x0, 0x0)

1m40.285815357s ago: executing program 6 (id=5417):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0)
sendmsg$kcm(r0, 0x0, 0x4040000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r4, 0x0, 0x24000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0))
socket$kcm(0x2, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0x1, 0x58, &(0x7f0000000ac0)}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2a, 0x3, 0x10, &(0x7f00000002c0))
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)

1m25.253643125s ago: executing program 36 (id=5417):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0)
sendmsg$kcm(r0, 0x0, 0x4040000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r4, 0x0, 0x24000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0))
socket$kcm(0x2, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0x1, 0x58, &(0x7f0000000ac0)}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2a, 0x3, 0x10, &(0x7f00000002c0))
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)

52.582650822s ago: executing program 7 (id=6278):
r0 = syz_open_procfs$namespace(0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0xfc7, 0x4}, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

52.43506281s ago: executing program 7 (id=6281):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48)

52.328961995s ago: executing program 7 (id=6284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0xb}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

52.32866709s ago: executing program 7 (id=6285):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080)

52.246232822s ago: executing program 7 (id=6286):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

52.24602596s ago: executing program 7 (id=6287):
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x4d}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef)
socket$kcm(0xa, 0x2, 0x88)
socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)

37.216646679s ago: executing program 37 (id=6287):
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x4d}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef)
socket$kcm(0xa, 0x2, 0x88)
socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)

3.190659015s ago: executing program 8 (id=6978):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}]}, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

1.524371813s ago: executing program 8 (id=6979):
r0 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, 0x0, 0x0)

1.471716639s ago: executing program 8 (id=6981):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18d, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8000859)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)

1.131811212s ago: executing program 8 (id=6986):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x800)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r5, 0x0, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc000)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

1.131672935s ago: executing program 5 (id=6987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x8, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000000c0)=0x2, &(0x7f0000000300), 0x2}, 0x20)

1.131589503s ago: executing program 5 (id=6988):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a11000005"], 0x18}}, 0x0)

1.131387745s ago: executing program 1 (id=6989):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.061512562s ago: executing program 5 (id=6990):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x15efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x200020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r3, 0x6, 0x22, &(0x7f0000000200)=r2, 0x4)

1.06138375s ago: executing program 1 (id=6991):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="2d637075202082"], 0xb)

971.341652ms ago: executing program 1 (id=6992):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb2"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f08847", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

895.012016ms ago: executing program 5 (id=6993):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f0000000340)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

894.637243ms ago: executing program 5 (id=6994):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000400dfff07000022769bd4d66ed9fccd", @ANYRES64, @ANYRES32, @ANYRES16, @ANYBLOB="00000200000000000000000000000000000000000000000000000000766f0cce3487b1a25c4bb3e259d90c0ec08b01b5618a25c1b50809722099c8266d45ad30991fd8477d9494733a68d49e99d49328f9cc5db85f3bdaa08c9688f7b1d9a57eb18e5ea9440896c195caa7e5268b6ed306e5f5b4b9a4b1697989ea3a469c50f9db74d16a1fc379ec7bf3cc1c91d9d9d6b08a2008dbbbe0d129564d9f0f12843bff7d984d3a53041ba3fdde1fee92f2db327d364703d6175ad7"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000076b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff000007010000f8ffffffb702000008000000b703000000000020850000000400000095652eae2e6144b3456399772a4c5b450e12116f8e37e5cc07fab6f8a1d112abf08c2837c52ac0329bb95a2a162363d4e576116f908931d9c40e2f4bce4726037e5d8c9c507c6ebab2258494e5ff13585ef6491cac21699d9fa49e23397d1eb6d585db3fb1e5d89e444b9472cb48ca895bc7698f010000001686e75638b8983d1aaf7db40c0fd347a18874a4826968c786532c3fad970e8314c21e5796bb93bd6672312cb832d1cdafab68d077fcf8e4500b7b7dc459def6875d00000000000000000000108fa21fdea212cb60b5bc5b7dc24bedb49999e1b22dfb3c10080e7bf54d955ecf58a447bc578d39bb499cc821070f2646dec3778d99d3ebc459abd3c409dc90f6c2571440d7173e8b83ad3b463b3878e34fd75b5b856d4e5223a5e1067aa9bb10cdb835e5bbd5c33bfedb8b81c5254f25a258f91a52933b470d65ed42fff87cb27b372d79c7726a22bf19102ec533a6c97066d7038c3792604ff1f27aad95f5383308d95d6432af0ee1ca9acce72611d9ef1d3d10108e607956e737640c5531b78822410f900c54b64d05dbb6afa7e05c19a52e8a10110aca9bb03d4eb6d2195e671f1aaceef3ffe4621313f5dee0100f33083d528c52ae3b6dce18de53aee26db2bd226e52e239bfc5bf0a2fa27878241daff111995ba23ab954c6b9f0df19e3c29db3ee51bd951b5768b218756ea41a61af30de9d5d63b9f341c98a5fe2a208f13a7b5b2f64a672a8387a809b2b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x621, 0x5}, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x9)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000070a00006a0a00fe0000000c850000003e000000b70000000000012995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}, 0x143}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

92.026545ms ago: executing program 1 (id=6995):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20)

91.733988ms ago: executing program 1 (id=6996):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

519.323µs ago: executing program 1 (id=6997):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000900010053"], 0xb4}}, 0x0)

310.665µs ago: executing program 8 (id=6998):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$TUNSETIFF(r0, 0xb701, 0x0)

162.861µs ago: executing program 5 (id=6999):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)

0s ago: executing program 8 (id=7000):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19c5a, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90600fc60", 0x14}], 0x1}, 0x800)

kernel console output (not intermixed with test programs):

12429] veth1_macvtap: entered allmulticast mode
[  237.418982][T12447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2803'.
[  237.559320][T12459] openvswitch: netlink: IP tunnel dst address not specified
[  237.821147][T12477] netlink: 'syz.2.2818': attribute type 1 has an invalid length.
[  238.699518][T12483] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2821'.
[  239.015936][T12494] netlink: 'syz.1.2826': attribute type 17 has an invalid length.
[  241.074411][T12508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.385524][T12518] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2835'.
[  241.568990][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'.
[  242.778575][T12545] netlink: 'syz.1.2846': attribute type 1 has an invalid length.
[  242.781273][T12545] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2846'.
[  242.788978][T12545] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  243.594842][T12573] netlink: 'syz.1.2859': attribute type 13 has an invalid length.
[  243.597970][T12573] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.2859'.
[  244.060509][T12601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2872'.
[  244.065134][T12601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2872'.
[  244.588829][T12610] netlink: 'syz.2.2876': attribute type 2 has an invalid length.
[  245.090124][T12622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2882'.
[  245.187738][T12626] netlink: 'syz.2.2884': attribute type 29 has an invalid length.
[  245.191892][T12626] netlink: 'syz.2.2884': attribute type 29 has an invalid length.
[  245.196643][T12626] netlink: 'syz.2.2884': attribute type 29 has an invalid length.
[  245.237223][T12628] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2885'.
[  245.441221][T12638] netlink: 'syz.1.2890': attribute type 21 has an invalid length.
[  245.456332][T12638] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2890'.
[  247.051922][T12663] netlink: 'syz.2.2898': attribute type 11 has an invalid length.
[  247.056371][T12663] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2898'.
[  247.212195][T12661] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2898'.
[  247.231581][T12661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.761344][T12678] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2905'.
[  248.148262][T12694] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2911'.
[  248.252211][T12697] netlink: 'syz.2.2911': attribute type 1 has an invalid length.
[  248.258948][T12697] netlink: 'syz.2.2911': attribute type 2 has an invalid length.
[  248.366376][T12703] netlink: 'syz.1.2916': attribute type 11 has an invalid length.
[  248.368878][T12703] netlink: 'syz.1.2916': attribute type 5 has an invalid length.
[  248.371758][T12703] netlink: 4112 bytes leftover after parsing attributes in process `syz.1.2916'.
[  249.017103][T12715] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2922'.
[  249.020875][T12715] bond_slave_1: entered promiscuous mode
[  249.023588][T12715] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  249.026767][T12715] batadv_slave_0: entered promiscuous mode
[  249.423528][T12731] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2930'.
[  250.285923][T12765] option changes via remount are deprecated (pid=12762 comm=syz.2.2944)
[  250.556351][T12770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.589467][T12772] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2947'.
[  250.963538][   T55] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  251.047307][T12794] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2957'.
[  251.157916][T12808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2964'.
[  251.256522][T12812] netlink: 'syz.2.2966': attribute type 21 has an invalid length.
[  251.703160][T12816] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  252.724466][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.734943][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.738763][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.746187][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.753510][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.869442][T12826] lo speed is unknown, defaulting to 1000
[  252.872265][T12826] wg0 speed is unknown, defaulting to 1000
[  253.052590][T12826] chnl_net:caif_netlink_parms(): no params data found
[  253.160677][T12851] netlink: 'syz.2.2980': attribute type 29 has an invalid length.
[  253.181816][T12851] netlink: 'syz.2.2980': attribute type 29 has an invalid length.
[  253.207265][T12826] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.211409][T12826] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.211526][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2982'.
[  253.215535][T12826] bridge_slave_0: entered allmulticast mode
[  253.221392][T12826] bridge_slave_0: entered promiscuous mode
[  253.226149][T12826] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.228633][T12826] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.231091][T12826] bridge_slave_1: entered allmulticast mode
[  253.234463][T12826] bridge_slave_1: entered promiscuous mode
[  253.267573][T12826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.272165][T12826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.400915][T12826] team0: Port device team_slave_0 added
[  253.428701][T12826] team0: Port device team_slave_1 added
[  253.454531][T12826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.458127][T12864] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2985'.
[  253.461599][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.481551][T12826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.529681][T12826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.537027][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.545964][T12826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.569715][ T5871] bond0: left allmulticast mode
[  253.571760][ T5871] bond_slave_0: left allmulticast mode
[  253.575056][ T5871] bond_slave_1: left allmulticast mode
[  253.577385][ T5871] bond0: left promiscuous mode
[  253.579077][ T5871] bond_slave_0: left promiscuous mode
[  253.581444][ T5871] bond_slave_1: left promiscuous mode
[  253.585414][ T5871] bridge0: port 3(bond0) entered disabled state
[  253.588750][ T5871] bridge_slave_1: left allmulticast mode
[  253.590617][ T5871] bridge_slave_1: left promiscuous mode
[  253.592519][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.050577][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.056400][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.061132][ T5871] bond0 (unregistering): Released all slaves
[  254.090396][T12877] netlink: 802 bytes leftover after parsing attributes in process `syz.1.2991'.
[  254.137614][T12826] hsr_slave_0: entered promiscuous mode
[  254.141060][T12826] hsr_slave_1: entered promiscuous mode
[  254.147652][T12826] debugfs: 'hsr0' already exists in 'hsr'
[  254.150291][T12826] Cannot create hsr debugfs directory
[  254.157186][ T5871] : left promiscuous mode
[  254.161741][T12880] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2992'.
[  254.492198][ T5871] hsr_slave_0: left promiscuous mode
[  254.495431][ T5871] hsr_slave_1: left promiscuous mode
[  254.498281][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.501812][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.824336][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  254.844507][ T5818] Bluetooth: hci2: command tx timeout
[  254.850668][ T5871] team0 (unregistering): Port device C removed
[  255.080781][T12826] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  255.096352][T12826] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  255.115281][T12826] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  255.120854][T12826] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  255.134792][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3006'.
[  255.139173][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3006'.
[  255.214579][T12920] netlink: 'syz.1.3008': attribute type 3 has an invalid length.
[  255.238613][T12826] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.263858][T12826] 8021q: adding VLAN 0 to HW filter on device team0
[  255.274551][T10810] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.277318][T10810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.300276][T10810] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.303774][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.411221][T12826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.487834][T12826] veth0_vlan: entered promiscuous mode
[  255.497635][T12826] veth1_vlan: entered promiscuous mode
[  255.521624][T12826] veth0_macvtap: entered promiscuous mode
[  255.533981][T12826] veth1_macvtap: entered promiscuous mode
[  255.559660][T12826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.564714][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.571234][T12826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.574913][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.607988][T12944] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3018'.
[  255.615984][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.620068][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.625256][T12944] hsr_slave_1: left promiscuous mode
[  255.734287][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.750276][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.822527][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.836107][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.886306][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.896620][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.182302][T12964] xt_l2tp: unknown flags: 51
[  256.558420][T12984] netlink: 'syz.2.3035': attribute type 21 has an invalid length.
[  256.561043][T12984] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3035'.
[  256.574720][T12984] netlink: 'syz.2.3035': attribute type 5 has an invalid length.
[  256.577379][T12984] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3035'.
[  256.956002][ T5818] Bluetooth: hci2: command tx timeout
[  257.050306][T13023] netlink: 'syz.1.3052': attribute type 28 has an invalid length.
[  257.083548][T13025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3051'.
[  257.492768][ T5818] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  257.566508][T13048] netlink: 'syz.2.3064': attribute type 10 has an invalid length.
[  257.581640][T13048] batman_adv: batadv0: Adding interface: 
[  257.591372][T13052] netlink: 'syz.1.3066': attribute type 2 has an invalid length.
[  257.593002][T13048] batman_adv: batadv0: The MTU of interface  is too small (149) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.604629][T13048] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  258.493260][T13086] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  258.498486][T13088] netlink: 'syz.2.3082': attribute type 10 has an invalid length.
[  258.525942][T13088] bond0: (slave bond_slave_0): Releasing backup interface
[  258.688245][T13102] __nla_validate_parse: 8 callbacks suppressed
[  258.688290][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'.
[  258.698924][T13102] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3089'.
[  258.707420][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'.
[  258.713031][T13102] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3089'.
[  258.976862][T13114] netlink: 'syz.2.3094': attribute type 3 has an invalid length.
[  258.979919][T13108] lo speed is unknown, defaulting to 1000
[  259.012806][ T5818] Bluetooth: hci2: command tx timeout
[  259.389097][T13124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3097'.
[  259.586234][T13133] netlink: 822 bytes leftover after parsing attributes in process `syz.2.3102'.
[  259.788453][T13147] netlink: 'syz.2.3108': attribute type 9 has an invalid length.
[  259.795982][T13149] netlink: 'syz.3.3109': attribute type 6 has an invalid length.
[  259.797307][T13147] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3108'.
[  259.801760][T13149] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3109'.
[  259.837723][T13153] netlink: 'syz.3.3111': attribute type 2 has an invalid length.
[  259.840689][T13153] netlink: 85376 bytes leftover after parsing attributes in process `syz.3.3111'.
[  260.138285][T13170] netlink: 'syz.2.3119': attribute type 11 has an invalid length.
[  260.141269][T13170] netlink: 8420 bytes leftover after parsing attributes in process `syz.2.3119'.
[  260.333949][T13184] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  260.570054][T13196] netlink: 'syz.1.3131': attribute type 11 has an invalid length.
[  261.069492][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.082809][ T5818] Bluetooth: hci2: command tx timeout
[  261.317950][T13243] siw: device registration error -23
[  261.340267][T13247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.339778][T13287] validate_nla: 2 callbacks suppressed
[  263.339996][T13287] netlink: 'syz.3.3171': attribute type 27 has an invalid length.
[  263.345218][T13287] netlink: 'syz.3.3171': attribute type 3 has an invalid length.
[  263.554574][T13297] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  263.556991][T13297] D`: hsr_addr_subst_dest: Unknown node
[  263.697168][T13299] __nla_validate_parse: 8 callbacks suppressed
[  263.697181][T13299] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3175'.
[  263.713418][T13299] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3175'.
[  264.355208][T13347] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058)
[  264.578734][T13367] netlink: 'syz.2.3203': attribute type 22 has an invalid length.
[  264.679964][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3207'.
[  264.739077][T13379] netlink: 'syz.2.3209': attribute type 4 has an invalid length.
[  264.778261][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'.
[  264.880768][ T5818] Bluetooth: hci1: adv larger than maximum supported
[  264.880792][ T5818] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  264.883199][ T5818] Bluetooth: hci1: Malformed LE Event: 0x0d
[  265.180274][T13408] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3222'.
[  265.211629][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3223'.
[  265.346678][T13414] lo speed is unknown, defaulting to 1000
[  265.421487][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'.
[  265.677539][T13432] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  265.694023][T13430] netlink: 'syz.1.3231': attribute type 10 has an invalid length.
[  265.925862][T13442] lo speed is unknown, defaulting to 1000
[  266.604739][T13476] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3250'.
[  268.583863][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'.
[  268.587111][T13515] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3265'.
[  269.729923][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'.
[  269.814045][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3275'.
[  270.459894][T13557] lo speed is unknown, defaulting to 1000
[  270.747692][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'.
[  271.845318][T13572] lo speed is unknown, defaulting to 1000
[  272.281267][T13612] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3303'.
[  272.336206][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3305'.
[  272.446778][T13620] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  272.450199][T13620] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  272.720972][T13646] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  272.772228][T13652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3321'.
[  272.887933][T13656] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3323'.
[  273.442748][T13669] netlink: 'syz.3.3329': attribute type 3 has an invalid length.
[  273.445463][T13669] netlink: 'syz.3.3329': attribute type 1 has an invalid length.
[  273.448435][T13669] netlink: 191264 bytes leftover after parsing attributes in process `syz.3.3329'.
[  273.632902][T13688] netlink: 'syz.1.3338': attribute type 10 has an invalid length.
[  273.635744][T13688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3338'.
[  273.718946][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'.
[  275.299628][T13773] __nla_validate_parse: 2 callbacks suppressed
[  275.299641][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3376'.
[  275.307567][T13773] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  275.310378][T13773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.390355][T13779] netlink: 'syz.1.3378': attribute type 12 has an invalid length.
[  275.393924][T13779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3378'.
[  275.584969][T13794] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3386'.
[  275.795685][T13797] netlink: 'syz.1.3387': attribute type 39 has an invalid length.
[  276.685115][T13805] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3391'.
[  277.450852][T13810] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3393'.
[  277.509633][T13812] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3394'.
[  277.527835][T13816] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3396'.
[  277.562335][T13820] netlink: 'syz.2.3398': attribute type 10 has an invalid length.
[  277.570929][T13820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  277.907271][T13833] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3403'.
[  278.261902][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3409'.
[  278.456521][T13848] netlink: 'syz.3.3410': attribute type 1 has an invalid length.
[  280.260228][T13943] netlink: 'syz.1.3454': attribute type 3 has an invalid length.
[  280.349292][T13954] __nla_validate_parse: 4 callbacks suppressed
[  280.349302][T13954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3458'.
[  280.451673][T13959] syzkaller1: tun_chr_ioctl cmd 1074025677
[  280.454367][T13959] syzkaller1: linktype set to 823
[  280.619302][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'.
[  280.648701][ T5818] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  280.708133][T13972] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3466'.
[  280.738653][T13974] netlink: 'syz.2.3468': attribute type 10 has an invalid length.
[  280.796235][T13978] xt_l2tp: missing protocol rule (udp|l2tpip)
[  280.850974][T13984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3471'.
[  281.013837][T13987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3471'.
[  281.019768][T13987] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3471'.
[  281.023718][T13987] netlink: 'syz.1.3471': attribute type 5 has an invalid length.
[  281.027304][T13987] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3471'.
[  281.657641][T14028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.769963][T14034] netlink: 'syz.3.3492': attribute type 6 has an invalid length.
[  281.920556][T14044] netlink: 'syz.1.3497': attribute type 29 has an invalid length.
[  281.937547][T14044] netlink: 'syz.1.3497': attribute type 29 has an invalid length.
[  281.950563][T14044] netlink: 'syz.1.3497': attribute type 29 has an invalid length.
[  281.987263][T14051] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3501'.
[  282.158494][T14069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3507'.
[  282.230621][T14073] netlink: 'syz.1.3509': attribute type 1 has an invalid length.
[  282.233175][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3509'.
[  282.387006][T14089] netlink: 'syz.2.3517': attribute type 5 has an invalid length.
[  282.847369][T14121] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  282.850193][T14121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.480726][T14169] validate_nla: 1 callbacks suppressed
[  283.480736][T14169] netlink: 'syz.2.3554': attribute type 21 has an invalid length.
[  284.559479][T14207] netlink: 'syz.2.3571': attribute type 2 has an invalid length.
[  285.140332][T14221] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.144495][T14221] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.148438][T14221] bridge0: entered allmulticast mode
[  285.212506][T14221] bridge_slave_1: left allmulticast mode
[  285.215543][T14221] bridge_slave_1: left promiscuous mode
[  285.220716][T14221] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.276422][T14221] bridge_slave_0: left allmulticast mode
[  285.278978][T14221] bridge_slave_0: left promiscuous mode
[  285.289064][T14221] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.960624][T14262] __nla_validate_parse: 17 callbacks suppressed
[  285.960639][T14262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3597'.
[  285.980762][T14262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3597'.
[  285.986456][T14262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3597'.
[  286.009510][T14268] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  286.028525][T14270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.051593][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3602'.
[  286.234484][T14295] netlink: 'syz.1.3613': attribute type 11 has an invalid length.
[  286.237166][T14295] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.3613'.
[  286.509538][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.722390][T14315] netlink: 'syz.2.3623': attribute type 23 has an invalid length.
[  286.726412][T14315] netlink: 'syz.2.3623': attribute type 6 has an invalid length.
[  287.105734][T14337] tmpfs: Bad value for 'gid'
[  287.108557][T14337] tmpfs: Bad value for 'gid'
[  287.258769][T14345] netlink: 'syz.2.3634': attribute type 1 has an invalid length.
[  287.261429][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'.
[  287.305039][T14349] tmpfs: Bad value for 'uid'
[  287.307069][T14349] tmpfs: Bad value for 'uid'
[  287.661769][T14363] netlink: 488 bytes leftover after parsing attributes in process `syz.1.3643'.
[  287.666829][T14363] netlink: 488 bytes leftover after parsing attributes in process `syz.1.3643'.
[  287.692045][T14366] netlink: 'syz.1.3644': attribute type 16 has an invalid length.
[  287.697803][T14366] netlink: 'syz.1.3644': attribute type 17 has an invalid length.
[  288.222881][T14401] : left promiscuous mode
[  288.569146][T14429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3667'.
[  288.745886][T14436] netlink: 'syz.3.3669': attribute type 10 has an invalid length.
[  288.800491][T14445] netlink: 'syz.3.3669': attribute type 11 has an invalid length.
[  288.804569][T14445] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3669'.
[  288.968959][T14436] team0: Port device wlan1 added
[  289.007766][T14454] netlink: 'syz.1.3678': attribute type 2 has an invalid length.
[  289.374941][T14432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.637420][T14516] tap0: tun_chr_ioctl cmd 1074025677
[  289.639646][T14516] tap0: linktype set to 805
[  289.986706][T14532] netlink: 'syz.1.3715': attribute type 29 has an invalid length.
[  289.992161][T14532] netlink: 'syz.1.3715': attribute type 29 has an invalid length.
[  290.002234][T14532] netlink: 'syz.1.3715': attribute type 29 has an invalid length.
[  290.171866][T14539] @: renamed from bond_slave_0
[  290.356976][T14542] netlink: 'syz.2.3718': attribute type 21 has an invalid length.
[  290.362016][T14542] netlink: 'syz.2.3718': attribute type 4 has an invalid length.
[  291.429602][T14589] __nla_validate_parse: 7 callbacks suppressed
[  291.429612][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'.
[  291.748885][T14610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3748'.
[  293.865671][T14646] netlink: 'syz.1.3764': attribute type 21 has an invalid length.
[  293.868949][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3764'.
[  293.872415][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3764'.
[  293.955990][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'.
[  293.959935][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'.
[  293.966962][T14651] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3766'.
[  293.980765][T14650] netlink: 360 bytes leftover after parsing attributes in process `syz.3.3765'.
[  294.060774][T14657] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3768'.
[  294.066427][T14657] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3768'.
[  294.079004][T14658] openvswitch: netlink: EtherType 50a is less than min 600
[  294.278340][T14666] netlink: 'syz.3.3773': attribute type 29 has an invalid length.
[  294.297718][T14669] netlink: 'syz.3.3773': attribute type 29 has an invalid length.
[  294.307388][T14666] netlink: 'syz.3.3773': attribute type 29 has an invalid length.
[  294.487188][T14683] netlink: 'syz.3.3773': attribute type 29 has an invalid length.
[  294.593248][T14690] netlink: 'syz.1.3784': attribute type 3 has an invalid length.
[  295.035750][T14728] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  295.112003][T14734] netlink: 'syz.1.3806': attribute type 39 has an invalid length.
[  295.401353][T14753] openvswitch: netlink: Multiple metadata blocks provided
[  295.800972][T14766] netlink: 'syz.3.3819': attribute type 27 has an invalid length.
[  296.208896][T14784] netlink: 'syz.2.3829': attribute type 9 has an invalid length.
[  296.336613][T14790] netlink: 'syz.2.3832': attribute type 6 has an invalid length.
[  296.691469][T14811] __nla_validate_parse: 4 callbacks suppressed
[  296.691485][T14811] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3840'.
[  297.380577][T14827] syzkaller0: tun_chr_ioctl cmd 1074025677
[  297.386759][T14827] syzkaller0: Linktype set failed because interface is up
[  297.392433][   T13] syzkaller0: tun_net_xmit 76
[  297.402087][   T13] syzkaller0: tun_net_xmit 48
[  297.413111][   T10] syzkaller0: tun_net_xmit 76
[  298.606271][T14864] netlink: ct family unspecified
[  298.610729][T14864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.620113][T14866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.625595][T14866] team0: Port device batadv0 added
[  299.209918][T14869] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3866'.
[  299.339514][T14881] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3871'.
[  301.370856][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3874'.
[  301.487897][T14897] tQ6\bY4: renamed from lo (while UP)
[  301.576139][T14905] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3882'.
[  302.017044][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'.
[  302.017316][T14917] validate_nla: 3 callbacks suppressed
[  302.017329][T14917] netlink: 'syz.1.3886': attribute type 21 has an invalid length.
[  302.017346][T14917] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3886'.
[  302.061172][T14903] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3881'.
[  302.071075][T14917] netlink: 'syz.1.3886': attribute type 5 has an invalid length.
[  302.076546][T14917] netlink: 'syz.1.3886': attribute type 6 has an invalid length.
[  302.079500][T14917] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3886'.
[  302.539770][T14944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3895'.
[  302.544874][T14938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3895'.
[  302.594305][T14946] netlink: 'syz.1.3899': attribute type 2 has an invalid length.
[  302.597365][T14946] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.3899'.
[  302.600791][T14946] nbd: socks must be embedded in a SOCK_ITEM attr
[  302.674877][T14952] netlink: 'syz.3.3901': attribute type 2 has an invalid length.
[  302.678112][T14952] netlink: 130532 bytes leftover after parsing attributes in process `syz.3.3901'.
[  302.714656][T14960] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3904'.
[  302.721002][T14960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3904'.
[  303.279442][T14993] netlink: 'syz.1.3921': attribute type 12 has an invalid length.
[  303.422179][T15004] netlink: 'syz.1.3925': attribute type 11 has an invalid length.
[  303.429907][T15004] netlink: 'syz.1.3925': attribute type 11 has an invalid length.
[  303.872157][T15012] netlink: 'syz.1.3928': attribute type 1 has an invalid length.
[  304.127472][T15029] netlink: 'syz.1.3936': attribute type 21 has an invalid length.
[  304.531202][T15056] netlink: 'syz.1.3949': attribute type 1 has an invalid length.
[  304.695772][T15067] netlink: 'syz.2.3954': attribute type 6 has an invalid length.
[  305.796648][T15102] sock: sock_timestamping_bind_phc: sock not bind to device
[  307.624435][T15171] validate_nla: 6 callbacks suppressed
[  307.624446][T15171] netlink: 'syz.3.3999': attribute type 12 has an invalid length.
[  307.632768][T15171] __nla_validate_parse: 14 callbacks suppressed
[  307.632778][T15171] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3999'.
[  307.676348][T15177] netlink: 'syz.1.4002': attribute type 7 has an invalid length.
[  307.686610][T15179] netlink: 'syz.2.4003': attribute type 27 has an invalid length.
[  307.689255][T15179] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4003'.
[  308.042034][T15203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4015'.
[  308.559066][T15218] netlink: 'syz.1.4021': attribute type 21 has an invalid length.
[  308.825053][T15235] xt_socket: unknown flags 0x40
[  309.761073][T15250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.773362][T15249] netlink: 'syz.3.4034': attribute type 4 has an invalid length.
[  309.776177][T15249] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4034'.
[  309.858733][T15249] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4034'.
[  309.862453][T15249] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  309.901488][T15260] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4039'.
[  313.271626][T15284] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4049'.
[  313.399605][T15286] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4050'.
[  313.460942][T15290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4051'.
[  313.468577][T15290] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4051'.
[  313.472334][T15290] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4051'.
[  313.508583][T15292] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  313.660416][T15304] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  314.133264][T15320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4066'.
[  314.907348][T15340] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4075'.
[  315.623228][T15362] netlink: 'syz.2.4085': attribute type 10 has an invalid length.
[  315.638836][T15362] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  315.755326][T15374] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4091'.
[  317.017274][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  317.020083][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  318.195552][T15443] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4122'.
[  318.203315][T15443] netlink: 'syz.3.4122': attribute type 4 has an invalid length.
[  318.208478][T15443] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4122'.
[  318.253562][T15443] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  318.273276][T15453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.345368][T15461] netlink: 'syz.3.4130': attribute type 10 has an invalid length.
[  318.354082][T15461] veth1_vlan: entered allmulticast mode
[  318.370731][T15463] netlink: 'syz.1.4131': attribute type 1 has an invalid length.
[  318.378433][T15465] __nla_validate_parse: 1 callbacks suppressed
[  318.378443][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4132'.
[  318.409041][T15467] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.122159][T15519] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4156'.
[  319.189885][T15525] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4159'.
[  319.299158][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4161'.
[  319.317531][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4161'.
[  320.355559][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4181'.
[  320.466403][T15583] vcan0 speed is unknown, defaulting to 1000
[  320.469590][T15583] vcan0 speed is unknown, defaulting to 1000
[  320.476950][T15583] vcan0 speed is unknown, defaulting to 1000
[  320.762136][T15583] infiniband syz1: set active
[  320.765185][   T10] vcan0 speed is unknown, defaulting to 1000
[  320.768030][T15583] infiniband syz1: added vcan0
[  320.867563][T15583] RDS/IB: syz1: added
[  320.870345][T15583] smc: adding ib device syz1 with port count 1
[  320.873701][T15583] smc:    ib device syz1 port 1 has pnetid 
[  320.877922][   T10] vcan0 speed is unknown, defaulting to 1000
[  320.884509][T15583] vcan0 speed is unknown, defaulting to 1000
[  321.131695][T15590] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4185'.
[  321.176310][T15592] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  321.379005][T15583] vcan0 speed is unknown, defaulting to 1000
[  321.391649][T15606] netlink: 'syz.2.4193': attribute type 5 has an invalid length.
[  321.429496][T15607] sctp: [Deprecated]: syz.1.4191 (pid 15607) Use of struct sctp_assoc_value in delayed_ack socket option.
[  321.429496][T15607] Use struct sctp_sack_info instead
[  321.538284][T15583] vcan0 speed is unknown, defaulting to 1000
[  321.695959][T15621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4200'.
[  322.771014][T15653] openvswitch: netlink: Unknown key attributes 1
[  322.811908][T15657] netlink: 'syz.1.4217': attribute type 3 has an invalid length.
[  322.815916][T15657] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.4217'.
[  323.165426][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4226'.
[  323.790688][T15688] netlink: 'syz.1.4230': attribute type 8 has an invalid length.
[  324.287910][T15697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4234'.
[  325.580805][T15734] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4248'.
[  325.920434][T15751] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4255'.
[  326.104254][T15755] xt_HMARK: proto mask must be zero with L3 mode
[  326.123901][T15749] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4254'.
[  326.127308][T15749] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  326.129980][T15749] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  326.168881][T15754] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4256'.
[  326.229003][T15759] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4258'.
[  326.382496][T15765] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  326.548326][T15768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4261'.
[  327.536823][T15799] netlink: 'syz.1.4273': attribute type 29 has an invalid length.
[  327.543392][T15797] netlink: 'syz.3.4271': attribute type 1 has an invalid length.
[  327.546045][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4271'.
[  327.688881][T15806] netlink: 'syz.1.4276': attribute type 10 has an invalid length.
[  327.900841][T15821] netlink: 'syz.2.4282': attribute type 5 has an invalid length.
[  327.913570][T15821] netlink: 'syz.2.4282': attribute type 5 has an invalid length.
[  328.110051][T15827] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4285'.
[  328.995605][T15851] netlink: 'syz.3.4293': attribute type 10 has an invalid length.
[  329.005457][T15851] geneve0: entered promiscuous mode
[  329.016948][T15851] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  329.442094][T15859] netlink: 'syz.1.4297': attribute type 33 has an invalid length.
[  329.445474][T15859] netlink: 'syz.1.4297': attribute type 3 has an invalid length.
[  329.448714][T15859] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.4297'.
[  329.628605][T15878] xt_l2tp: v2 tid > 0xffff: 327812
[  330.557028][T15889] openvswitch: netlink: IP tunnel TTL not specified.
[  330.837869][T15905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4317'.
[  330.855342][T15905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4317'.
[  330.942297][T15905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4317'.
[  331.034299][T15915] netlink: 'syz.2.4322': attribute type 32 has an invalid length.
[  331.037140][T15915] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4322'.
[  331.073543][T15918] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  331.251017][ T5818] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  331.381304][T15939] IPv6: : Disabled Multicast RS
[  331.413162][T15928] netlink: 'syz.2.4328': attribute type 1 has an invalid length.
[  331.415742][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4328'.
[  331.526477][T15946] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4336'.
[  331.570720][T15949] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4337'.
[  331.697178][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'.
[  331.816178][T15969] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4347'.
[  332.828886][T16018] syzkaller0: entered promiscuous mode
[  332.843512][T16010] netlink: 'syz.3.4365': attribute type 6 has an invalid length.
[  334.188018][T16063] netlink: 'syz.3.4388': attribute type 10 has an invalid length.
[  334.226964][T16063] team0: Port device geneve1 added
[  334.260678][T16069] netlink: 'syz.1.4391': attribute type 10 has an invalid length.
[  334.265245][T16069] vcan0: entered promiscuous mode
[  334.267771][T16069] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  335.011022][T16085] sit0: entered allmulticast mode
[  335.469679][T16094] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  335.594825][T16100] __nla_validate_parse: 5 callbacks suppressed
[  335.594834][T16100] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4402'.
[  335.600490][T16100] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.4402'.
[  336.307756][T16130] lo speed is unknown, defaulting to 1000
[  336.312239][T16130] vcan0 speed is unknown, defaulting to 1000
[  336.534972][T16133] netlink: 'syz.3.4416': attribute type 29 has an invalid length.
[  336.549795][T16133] netlink: 'syz.3.4416': attribute type 29 has an invalid length.
[  336.557995][T16133] netlink: 'syz.3.4416': attribute type 29 has an invalid length.
[  337.089262][T16161] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4425'.
[  337.567915][T16184] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.4437'.
[  337.571952][T16184] veth0_to_bond: default FDB implementation only supports local addresses
[  338.313299][T16196] netlink: 'syz.2.4444': attribute type 1 has an invalid length.
[  339.616851][T16219] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4453'.
[  339.620899][T16219] netlink: 'syz.1.4453': attribute type 1 has an invalid length.
[  339.689756][T16221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4454'.
[  339.900383][T16229] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4458'.
[  340.740000][T16267] netlink: 'syz.1.4475': attribute type 7 has an invalid length.
[  340.927824][T16279] netlink: 'syz.1.4481': attribute type 21 has an invalid length.
[  340.931033][T16279] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4481'.
[  341.089782][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4485'.
[  341.094189][T16288] lo speed is unknown, defaulting to 1000
[  341.203889][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4488'.
[  341.216464][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4488'.
[  341.464660][T16298] lo speed is unknown, defaulting to 1000
[  341.468357][T16298] vcan0 speed is unknown, defaulting to 1000
[  344.479606][T16356] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4516'.
[  344.489778][T16356] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4516'.
[  344.506304][T16356] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4516'.
[  344.585580][T16360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4518'.
[  345.176992][   T33] audit: type=1107 audit(1759329235.322:5): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lJ$'
[  345.731838][T16392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4532'.
[  346.266850][T16410] netlink: 'syz.1.4540': attribute type 3 has an invalid length.
[  346.269670][T16410] netlink: 'syz.1.4540': attribute type 1 has an invalid length.
[  347.694555][T16421] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.4545'.
[  347.698700][T16421] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  348.265686][T16434] netlink: 'syz.1.4549': attribute type 4 has an invalid length.
[  348.284271][T16434] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4549'.
[  348.308520][T16434] A link change request failed with some changes committed already. Interface D` may have been left with an inconsistent configuration, please check.
[  348.595672][T16442] netlink: 'syz.2.4555': attribute type 10 has an invalid length.
[  348.598982][T16442] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4555'.
[  348.748703][T16451] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4558'.
[  349.223130][T16478] netlink: 'syz.2.4572': attribute type 2 has an invalid length.
[  349.233796][T16478] netlink: 'syz.2.4572': attribute type 8 has an invalid length.
[  349.237113][T16478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4572'.
[  350.050524][T16478] lo speed is unknown, defaulting to 1000
[  350.059812][T16478] vcan0 speed is unknown, defaulting to 1000
[  350.484791][T16490] netlink: 'syz.1.4576': attribute type 29 has an invalid length.
[  350.504387][T16490] netlink: 'syz.1.4576': attribute type 29 has an invalid length.
[  350.514622][T16490] netlink: 'syz.1.4576': attribute type 29 has an invalid length.
[  351.053063][T16516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4589'.
[  351.091111][T16520] netlink: 'syz.1.4590': attribute type 7 has an invalid length.
[  351.128443][T16520] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4590'.
[  351.478236][T16518] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  353.289813][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  353.296217][T16538] netlink: 'syz.2.4600': attribute type 1 has an invalid length.
[  353.305449][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  353.309645][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  353.314954][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  353.320171][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  353.366810][T16540] lo speed is unknown, defaulting to 1000
[  353.370504][T16540] vcan0 speed is unknown, defaulting to 1000
[  353.456644][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.535752][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.566690][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'.
[  353.615780][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.660386][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.780897][T16560] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4609'.
[  353.796878][T16568] netlink: 'syz.2.4612': attribute type 7 has an invalid length.
[  353.910241][T16540] chnl_net:caif_netlink_parms(): no params data found
[  353.995191][T16575] siw: device registration error -23
[  354.001640][T16571] syzkaller0: entered promiscuous mode
[  354.004502][T16571] syzkaller0: entered allmulticast mode
[  354.197584][   T13] team0: Port device geneve1 removed
[  354.206968][   T13] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  354.334893][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.339149][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.343158][   T13] bond0 (unregistering): Released all slaves
[  355.403836][   T55] Bluetooth: hci2: command tx timeout
[  355.578715][T16540] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.581054][T16540] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.583601][T16540] bridge_slave_0: entered allmulticast mode
[  355.586374][T16540] bridge_slave_0: entered promiscuous mode
[  355.592379][T16540] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.602428][T16540] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.611184][T16540] bridge_slave_1: entered allmulticast mode
[  355.620351][T16540] bridge_slave_1: entered promiscuous mode
[  355.667623][T16540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.700907][T16540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.763088][   T13] team0: Port device wlan1 removed
[  355.770156][T16540] team0: Port device team_slave_0 added
[  355.775440][T16540] team0: Port device team_slave_1 added
[  355.810193][T16540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.816891][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.831662][T16540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.865499][T16540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.870858][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.883796][T16540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.976175][T16540] hsr_slave_0: entered promiscuous mode
[  355.979470][T16540] hsr_slave_1: entered promiscuous mode
[  356.109285][   T13] hsr_slave_0: left promiscuous mode
[  356.118773][   T13] hsr_slave_1: left promiscuous mode
[  356.121815][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.125710][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.130545][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.135373][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.150981][   T13] veth1_macvtap: left promiscuous mode
[  356.153661][   T13] veth0_macvtap: left promiscuous mode
[  356.156358][   T13] veth0_vlan: left promiscuous mode
[  356.556293][   T13] team0 (unregistering): Port device team_slave_1 removed
[  356.597977][   T13] team0 (unregistering): Port device team_slave_0 removed
[  356.948610][   T13] team0 (unregistering): Port device batadv0 removed
[  357.043007][ T9200] smc: removing ib device syz1
[  357.109539][    T9] vcan0 speed is unknown, defaulting to 1000
[  357.133004][    T9] syz1: Port: 1 Link DOWN
[  357.482726][   T55] Bluetooth: hci2: command tx timeout
[  357.674017][T16540] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  357.948180][T16649] netlink: 'syz.2.4647': attribute type 3 has an invalid length.
[  357.951684][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4647'.
[  357.995935][T16651] netlink: 'syz.2.4648': attribute type 21 has an invalid length.
[  357.999275][T16651] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4648'.
[  358.079802][T16540] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  358.088240][T16540] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  358.093457][T16540] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  358.171465][T16659] netlink: 'syz.2.4649': attribute type 10 has an invalid length.
[  358.213238][T16661] netlink: 'syz.1.4650': attribute type 1 has an invalid length.
[  358.216712][T16661] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4650'.
[  358.225153][T16540] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.238131][T16540] 8021q: adding VLAN 0 to HW filter on device team0
[  358.246687][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.249480][ T9200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.274323][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.277250][ T9200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.380706][T16540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.502164][T16540] veth0_vlan: entered promiscuous mode
[  358.507708][T16540] veth1_vlan: entered promiscuous mode
[  358.524668][T16540] veth0_macvtap: entered promiscuous mode
[  358.529073][T16540] veth1_macvtap: entered promiscuous mode
[  358.550892][T16540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.557336][T16540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.566888][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.569686][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.582513][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.592099][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.782295][ T9200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.785538][ T9200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.813827][ T9200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.818091][ T9200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.003472][T16716] netlink: 'syz.1.4669': attribute type 21 has an invalid length.
[  359.007289][T16716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4669'.
[  359.065742][T16717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4670'.
[  359.207698][T16721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4672'.
[  359.286090][T16722] IPv6: NLM_F_CREATE should be specified when creating new route
[  359.289735][T16722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  359.292969][T16722] IPv6: NLM_F_CREATE should be set when creating new route
[  359.563541][   T55] Bluetooth: hci2: command tx timeout
[  359.875662][T16738] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  360.150378][T16757] sctp: [Deprecated]: syz.2.4687 (pid 16757) Use of struct sctp_assoc_value in delayed_ack socket option.
[  360.150378][T16757] Use struct sctp_sack_info instead
[  360.851837][T16791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  361.042800][T16805] : renamed from vlan0
[  361.506849][T16825] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4721'.
[  361.644233][   T55] Bluetooth: hci2: command tx timeout
[  361.845134][T16846] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4731'.
[  361.859572][T16846] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4731'.
[  361.889524][T16848] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.4732'.
[  361.899338][T16848] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  361.903244][T16848] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  362.154426][T16864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4736'.
[  362.158563][T16859] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4736'.
[  362.164682][T16859] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4736'.
[  362.262062][   T55] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10
[  363.171747][T16912] netlink: 'syz.1.4759': attribute type 3 has an invalid length.
[  363.174584][T16912] netlink: 'syz.1.4759': attribute type 1 has an invalid length.
[  363.177829][T16912] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  364.035926][T16946] netlink: 'syz.2.4773': attribute type 4 has an invalid length.
[  364.039009][T16946] netlink: 'syz.2.4773': attribute type 1 has an invalid length.
[  364.043946][T16946] netlink: 'syz.2.4773': attribute type 2 has an invalid length.
[  364.048530][T16946] __nla_validate_parse: 4 callbacks suppressed
[  364.048541][T16946] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.4773'.
[  364.183796][T16955] openvswitch: netlink: EtherType 50a is less than min 600
[  364.283198][   T55] Bluetooth: hci2: command tx timeout
[  364.396966][T16963] netlink: 'syz.4.4781': attribute type 10 has an invalid length.
[  364.400963][T16963] team0: Device dummy0 is up. Set it down before adding it as a team port
[  364.710432][T16970] raw_sendmsg: syz.1.4784 forgot to set AF_INET. Fix it!
[  365.398005][T17001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.444899][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'.
[  365.489534][T17008] netlink: 'syz.4.4801': attribute type 21 has an invalid length.
[  365.961033][T17033] netlink: 'syz.4.4813': attribute type 27 has an invalid length.
[  365.966599][T17033] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4813'.
[  367.054948][ T5871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.134540][ T5871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.220706][ T5871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.310973][ T5871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.504580][ T5871] bridge_slave_1: left allmulticast mode
[  367.507088][ T5871] bridge_slave_1: left promiscuous mode
[  367.509614][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.526447][T17059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  367.530012][T17059] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  367.533599][T17059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  367.537860][T17059] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  367.538539][ T5871] bridge_slave_0: left allmulticast mode
[  367.541433][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4825'.
[  367.548876][T17061] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4825'.
[  367.549671][ T5871] bridge_slave_0: left promiscuous mode
[  367.553354][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4825'.
[  367.558458][T17059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  367.561315][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.630919][T17059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  367.640246][T17059] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  367.644393][T17059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  367.656243][T17059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  367.665429][T17059] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  367.704197][T17065] netlink: 628 bytes leftover after parsing attributes in process `syz.1.4826'.
[  368.084607][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.104968][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.109445][ T5871] bond0 (unregistering): Released all slaves
[  368.141482][T17062] lo speed is unknown, defaulting to 1000
[  368.156295][T17057] lo speed is unknown, defaulting to 1000
[  368.403991][T17079] syzkaller0: entered promiscuous mode
[  368.405845][T17079] syzkaller0: entered allmulticast mode
[  368.430772][T17062] chnl_net:caif_netlink_parms(): no params data found
[  369.421939][T17057] chnl_net:caif_netlink_parms(): no params data found
[  369.469020][ T5871] hsr_slave_0: left promiscuous mode
[  369.471676][ T5871] hsr_slave_1: left promiscuous mode
[  369.474586][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.477113][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.480808][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.485389][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.496306][ T5871] veth1_macvtap: left promiscuous mode
[  369.498441][ T5871] veth0_macvtap: left promiscuous mode
[  369.500684][ T5871] veth1_vlan: left promiscuous mode
[  369.505095][ T5871] veth0_vlan: left promiscuous mode
[  369.645494][   T55] Bluetooth: hci0: command tx timeout
[  369.727135][   T55] Bluetooth: hci2: command tx timeout
[  369.845894][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  369.869796][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  370.199730][T17062] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.203979][T17062] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.207157][T17062] bridge_slave_0: entered allmulticast mode
[  370.210951][T17062] bridge_slave_0: entered promiscuous mode
[  370.230581][T17062] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.242502][T17062] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.247088][T17062] bridge_slave_1: entered allmulticast mode
[  370.250975][T17062] bridge_slave_1: entered promiscuous mode
[  370.288679][T17091] netlink: 'syz.1.4833': attribute type 39 has an invalid length.
[  370.326953][T17062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.360007][T17091] bond0: (slave syz_tun): Releasing backup interface
[  370.394458][T17062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.397538][T17057] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.400269][T17057] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.403255][T17057] bridge_slave_0: entered allmulticast mode
[  370.406372][T17057] bridge_slave_0: entered promiscuous mode
[  370.445478][T17057] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.448617][T17057] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.454959][T17057] bridge_slave_1: entered allmulticast mode
[  370.458993][T17057] bridge_slave_1: entered promiscuous mode
[  370.486747][T17062] team0: Port device team_slave_0 added
[  370.505313][T17062] team0: Port device team_slave_1 added
[  370.512302][T17057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.537342][T17057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.583882][T17062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.586589][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.600561][T17062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.607001][T17057] team0: Port device team_slave_0 added
[  370.610460][T17057] team0: Port device team_slave_1 added
[  370.646297][T17062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.648930][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.658687][T17062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.668908][T17057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.671598][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.682251][T17057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.688205][T17057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.692252][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.705604][T17057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.769758][T17062] hsr_slave_0: entered promiscuous mode
[  370.773677][T17062] hsr_slave_1: entered promiscuous mode
[  370.820370][T17057] hsr_slave_0: entered promiscuous mode
[  370.825845][T17057] hsr_slave_1: entered promiscuous mode
[  370.828738][T17057] debugfs: 'hsr0' already exists in 'hsr'
[  370.831184][T17057] Cannot create hsr debugfs directory
[  370.859316][ T5871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.964072][ T5871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.029955][ T5871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.105316][ T5871] batman_adv: batadv0: Removing interface: 
[  371.109359][ T5871] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.178701][T17116] netlink: 495 bytes leftover after parsing attributes in process `syz.1.4842'.
[  371.207888][T17062] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  371.226399][T17062] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  371.239239][T17062] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  371.248033][T17062] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  371.317432][ T5871] bridge_slave_1: left allmulticast mode
[  371.319864][ T5871] bridge_slave_1: left promiscuous mode
[  371.322450][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.327849][ T5871] bridge_slave_0: left allmulticast mode
[  371.330189][ T5871] bridge_slave_0: left promiscuous mode
[  371.332926][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.724107][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.733548][   T55] Bluetooth: hci0: command tx timeout
[  371.742526][ T5871] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  371.758550][ T5871] bond0 (unregistering): Released all slaves
[  371.814396][   T55] Bluetooth: hci2: command tx timeout
[  372.085680][T17126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.139207][T17057] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  372.144322][T17057] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  372.151848][T17057] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  372.161355][T17057] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  372.281484][T17062] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.344626][T17062] 8021q: adding VLAN 0 to HW filter on device team0
[  372.356475][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.359601][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.369980][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.373218][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.453061][T17057] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.472175][T17062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  372.475692][T17062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.549056][T17057] 8021q: adding VLAN 0 to HW filter on device team0
[  372.566912][T10810] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.569344][T10810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.575734][T10810] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.578199][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.588725][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.592025][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.598051][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.601315][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.612421][ T5871] veth1_macvtap: left promiscuous mode
[  372.726382][T17153] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4851'.
[  373.066722][    T9] infiniband syz0: ib_query_port failed (-19)
[  373.085061][T17057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.089431][T17057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  373.142171][T17062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.209216][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'.
[  373.250391][T17164] : entered promiscuous mode
[  373.332216][T17057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.439045][T17062] veth0_vlan: entered promiscuous mode
[  373.459799][T17062] veth1_vlan: entered promiscuous mode
[  373.483922][T17062] veth0_macvtap: entered promiscuous mode
[  373.489599][T17062] veth1_macvtap: entered promiscuous mode
[  373.504996][T17062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.527054][T17062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.576214][T17101] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.582880][T17101] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.602833][ T5830] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.606535][ T5830] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.676709][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.679785][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.710420][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.720181][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.805131][   T55] Bluetooth: hci0: command tx timeout
[  373.818233][T17057] veth0_vlan: entered promiscuous mode
[  373.839170][T17057] veth1_vlan: entered promiscuous mode
[  373.886259][   T55] Bluetooth: hci2: command tx timeout
[  373.914791][T17057] veth0_macvtap: entered promiscuous mode
[  373.924677][T17057] veth1_macvtap: entered promiscuous mode
[  373.958776][T17057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.980309][T17183] netlink: 1042 bytes leftover after parsing attributes in process `syz.6.4857'.
[  373.998130][T17057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.008522][T17101] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.015755][T17101] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.019540][T17101] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.030206][T17101] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.114130][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.116694][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.161471][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.164519][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.230031][   T55] Bluetooth: hci2: unknown advertising packet type: 0x65
[  374.230068][   T55] Bluetooth: hci2: Dropping invalid advertising data
[  374.236251][   T55] Bluetooth: hci2: Malformed LE Event: 0x02
[  374.270619][T17204] netlink: 'syz.6.4867': attribute type 2 has an invalid length.
[  374.274931][T17204] netlink: 'syz.6.4867': attribute type 11 has an invalid length.
[  374.278358][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4867'.
[  374.705065][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4880'.
[  374.869262][T17249] netlink: 'syz.6.4886': attribute type 11 has an invalid length.
[  374.872110][T17249] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.4886'.
[  374.934982][T17253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.883181][   T55] Bluetooth: hci0: command tx timeout
[  375.962833][   T55] Bluetooth: hci2: command tx timeout
[  377.969233][T17255] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4889'.
[  378.099369][T17267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.207275][T17281] openvswitch: netlink: IPv6 tunnel dst address is zero
[  378.449680][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.452522][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  378.616288][T17311] netlink: 'syz.1.4916': attribute type 8 has an invalid length.
[  379.611248][T17319] syzkaller0: entered promiscuous mode
[  379.613404][T17319] syzkaller0: entered allmulticast mode
[  379.619499][T17324] netlink: 'syz.1.4920': attribute type 10 has an invalid length.
[  381.158595][T17363] netlink: 'syz.1.4938': attribute type 6 has an invalid length.
[  381.161080][T17363] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4938'.
[  381.550204][T17371] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  381.691297][T17386] openvswitch: netlink: Key type 50 is out of range max 32
[  382.600468][T17414] tap0: tun_chr_ioctl cmd 1074025680
[  382.779718][   T55] Bluetooth: hci2: Malformed Event: 0x2f
[  382.951062][   T55] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  383.188130][T17444] netlink: 'syz.5.4975': attribute type 4 has an invalid length.
[  383.364685][T17448] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4977'.
[  383.480796][T17458] netlink: 'syz.1.4982': attribute type 11 has an invalid length.
[  383.549841][T17463] netlink: 825 bytes leftover after parsing attributes in process `syz.5.4984'.
[  383.553203][T17463] netlink: 130144 bytes leftover after parsing attributes in process `syz.5.4984'.
[  383.745918][T17433] delete_channel: no stack
[  384.374457][T17522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5007'.
[  384.708130][T17553] netlink: 202232 bytes leftover after parsing attributes in process `syz.1.5021'.
[  384.715626][T17553] netlink: zone id is out of range
[  384.717908][T17553] netlink: zone id is out of range
[  384.861968][T17567] netlink: 'syz.6.5025': attribute type 2 has an invalid length.
[  384.869106][T17567] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.5025'.
[  384.872503][T17569] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5026'.
[  384.918399][T17571] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.5027'.
[  384.923735][T17571] openvswitch: netlink: Message has 4 unknown bytes.
[  385.267254][T17586] veth1_macvtap: left promiscuous mode
[  385.276013][T17586] macsec0: entered allmulticast mode
[  385.296497][T17586] veth1_macvtap: entered promiscuous mode
[  385.299082][T17586] veth1_macvtap: entered allmulticast mode
[  385.301604][T17586] macsec0: entered promiscuous mode
[  385.311647][T17591] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5036'.
[  385.316613][T17591] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5036'.
[  385.616870][   T55] Bluetooth: hci1: unknown advertising packet type: 0x5f
[  385.630441][T17615] xt_l2tp: missing protocol rule (udp|l2tpip)
[  385.807545][T17628] netlink: 'syz.1.5054': attribute type 3 has an invalid length.
[  385.810990][T17628] netlink: 'syz.1.5054': attribute type 1 has an invalid length.
[  385.953370][   T55] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7
[  386.093081][T17649] netlink: 'syz.5.5062': attribute type 21 has an invalid length.
[  386.099131][T17649] IPv6: NLM_F_CREATE should be specified when creating new route
[  386.109891][T17649] IPv6: Can't replace route, no match found
[  386.578601][T17678] netlink: 'syz.6.5077': attribute type 1 has an invalid length.
[  389.240405][T17707] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  389.244539][T17707] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  389.277248][T17709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  389.279951][T17709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.283431][T17709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.286274][T17709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.630778][T17722] netlink: 'syz.1.5097': attribute type 10 has an invalid length.
[  389.638046][T17722] __nla_validate_parse: 7 callbacks suppressed
[  389.638059][T17722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5097'.
[  389.654613][T17722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.722030][T17728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5100'.
[  389.734606][T17728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5100'.
[  389.801694][   T55] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  390.263050][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5110'.
[  390.291093][T17757] netlink: ct family unspecified
[  390.293451][T17757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.338693][T17761] netlink: 'syz.5.5114': attribute type 1 has an invalid length.
[  390.399533][T17759] netlink: 'syz.1.5113': attribute type 10 has an invalid length.
[  390.427751][T17759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5113'.
[  390.433362][T17759] batadv0: entered promiscuous mode
[  390.437424][T17759] batadv0: entered allmulticast mode
[  390.507628][T17759] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  390.829056][T17788] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5126'.
[  391.203920][T17807] netlink: 'syz.5.5135': attribute type 7 has an invalid length.
[  391.235830][T17809] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.5136'.
[  391.239250][T17809] netlink: 61827 bytes leftover after parsing attributes in process `syz.5.5136'.
[  394.384864][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5147'.
[  394.412378][T17837] netlink: 'syz.1.5149': attribute type 4 has an invalid length.
[  394.418082][T17839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.733506][T17872] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.5165'.
[  397.255666][T17931] vxcan1: entered allmulticast mode
[  397.716587][T17939] netlink: 'syz.1.5192': attribute type 10 has an invalid length.
[  397.737714][T17939] batadv0: left promiscuous mode
[  397.740020][T17939] batadv0: left allmulticast mode
[  398.122102][T17939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.417887][T17939] batadv0: entered promiscuous mode
[  398.427496][T17939] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  398.807817][T17978] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5209'.
[  398.923238][T17990] syzkaller0: entered promiscuous mode
[  398.925454][T17990] syzkaller0: entered allmulticast mode
[  398.933627][T17992] netlink: 'syz.5.5215': attribute type 21 has an invalid length.
[  398.997161][T17996] netlink: 'syz.5.5217': attribute type 1 has an invalid length.
[  399.679355][T18024] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5229'.
[  399.728084][T18026] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5231'.
[  400.492175][T18045] netlink: 'syz.1.5240': attribute type 4 has an invalid length.
[  400.515767][T18045] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5240'.
[  400.534266][T18050] netlink: 'syz.6.5241': attribute type 1 has an invalid length.
[  400.639167][T18061] netlink: 'syz.1.5247': attribute type 2 has an invalid length.
[  400.647354][T18061] netlink: 'syz.1.5247': attribute type 9 has an invalid length.
[  400.649959][T18061] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5247'.
[  400.744777][T18073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5253'.
[  400.930272][T18087] netlink: 'syz.1.5256': attribute type 21 has an invalid length.
[  400.937414][T18087] netlink: 'syz.1.5256': attribute type 6 has an invalid length.
[  400.940704][T18087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5256'.
[  401.342462][T18103] netlink: 'syz.6.5266': attribute type 10 has an invalid length.
[  401.349020][T18103] team0: Device hsr_slave_0 failed to register rx_handler
[  401.496695][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5270'.
[  401.576663][T18116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5272'.
[  401.580211][T18116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5272'.
[  401.585135][T18116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5272'.
[  401.716842][T18125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5276'.
[  401.729316][T18128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5277'.
[  401.733642][T18129] C: renamed from team_slave_0 (while UP)
[  402.249326][T18154] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  402.899739][T18196] validate_nla: 7 callbacks suppressed
[  402.899751][T18196] netlink: 'syz.6.5307': attribute type 1 has an invalid length.
[  402.905923][T18196] netlink: 'syz.6.5307': attribute type 2 has an invalid length.
[  402.970161][T18201] netlink: 'syz.1.5309': attribute type 9 has an invalid length.
[  402.976778][T18201] netlink: 'syz.1.5309': attribute type 11 has an invalid length.
[  403.708811][T18248] IPv6: NLM_F_CREATE should be specified when creating new route
[  405.710900][T18282] netlink: 'syz.6.5342': attribute type 11 has an invalid length.
[  406.452002][T18286] netlink: 'syz.6.5344': attribute type 8 has an invalid length.
[  406.455594][T18286] netlink: 'syz.6.5344': attribute type 6 has an invalid length.
[  406.458976][T18286] __nla_validate_parse: 16 callbacks suppressed
[  406.458988][T18286] netlink: 144448 bytes leftover after parsing attributes in process `syz.6.5344'.
[  406.965790][T18312] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5354'.
[  406.970753][T18312] netlink: 'syz.5.5354': attribute type 2 has an invalid length.
[  406.977001][T18312] netlink: 'syz.5.5354': attribute type 8 has an invalid length.
[  406.980085][T18312] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5354'.
[  410.497439][T18336] IPv6: NLM_F_CREATE should be specified when creating new route
[  410.695170][T18347] syzkaller0: entered promiscuous mode
[  410.698264][T18347] syzkaller0: entered allmulticast mode
[  410.782838][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5375'.
[  410.811699][   T55] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  412.101824][T18379] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5384'.
[  412.471732][T18394] delete_channel: no stack
[  412.504007][T18394] delete_channel: no stack
[  412.555708][T18400] netlink: 'syz.6.5392': attribute type 2 has an invalid length.
[  412.582245][T18396] netlink: 'syz.5.5390': attribute type 6 has an invalid length.
[  412.612992][T18396] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5390'.
[  412.799271][T18407] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  412.843992][T17059] Bluetooth: hci0: command tx timeout
[  412.959618][T18414] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5398'.
[  413.150810][T18434] : renamed from veth0_to_bond (while UP)
[  414.909444][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5423'.
[  415.296933][T18498] netlink: 'syz.1.5436': attribute type 4 has an invalid length.
[  415.299715][T18498] netlink: 14333 bytes leftover after parsing attributes in process `syz.1.5436'.
[  415.339983][T18501] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.5437'.
[  415.469754][T18512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.522567][T18518] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5445'.
[  415.526653][T18518] netlink: 46 bytes leftover after parsing attributes in process `syz.5.5445'.
[  415.529689][T18518] netlink: 46 bytes leftover after parsing attributes in process `syz.5.5445'.
[  415.610450][T18523] netlink: 'syz.5.5449': attribute type 29 has an invalid length.
[  415.614468][T18523] netlink: 'syz.5.5449': attribute type 29 has an invalid length.
[  415.617809][T18523] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5449'.
[  416.314015][T18542] veth0_vlan: entered allmulticast mode
[  416.428124][T18542] veth0_vlan: left promiscuous mode
[  416.435477][T18542] veth0_vlan: entered promiscuous mode
[  416.663430][T18554] netlink: 'syz.1.5461': attribute type 10 has an invalid length.
[  416.792189][T18556] netlink: 'syz.5.5463': attribute type 46 has an invalid length.
[  418.560643][T18634] netlink: 'syz.1.5497': attribute type 1 has an invalid length.
[  418.565581][T18634] netlink: 'syz.1.5497': attribute type 1 has an invalid length.
[  419.289135][T18682] syzkaller0: entered promiscuous mode
[  419.291136][T18682] syzkaller0: entered allmulticast mode
[  420.484293][T18686] tap0: tun_chr_ioctl cmd 1074025677
[  420.486131][T18686] tap0: linktype set to 0
[  421.917048][T18716] netlink: 'syz.5.5534': attribute type 15 has an invalid length.
[  422.021137][T18726] __nla_validate_parse: 3 callbacks suppressed
[  422.021148][T18726] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5539'.
[  422.028579][T18726] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5539'.
[  422.074357][T18729] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5541'.
[  422.078652][T18729] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5541'.
[  422.225583][T18735] netlink: 'syz.5.5543': attribute type 29 has an invalid length.
[  422.229900][T18735] netlink: 'syz.5.5543': attribute type 29 has an invalid length.
[  422.237946][T18735] netlink: 'syz.5.5543': attribute type 29 has an invalid length.
[  422.241900][T18735] netlink: 'syz.5.5543': attribute type 29 has an invalid length.
[  422.256046][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5544'.
[  422.413407][T18744] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5547'.
[  422.491143][T18749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5549'.
[  422.495411][T18749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5549'.
[  422.546785][T18753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5551'.
[  423.812589][T18814] netlink: 'syz.5.5579': attribute type 46 has an invalid length.
[  423.820590][T18814] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5579'.
[  423.859762][T18816] netlink: 'syz.5.5581': attribute type 2 has an invalid length.
[  424.449687][T18853] netlink: 'syz.5.5599': attribute type 2 has an invalid length.
[  426.101294][T18895] netlink: 'syz.5.5616': attribute type 13 has an invalid length.
[  427.235361][T18936] nftables ruleset with unbound set
[  427.352308][T18946] netlink: 'syz.1.5641': attribute type 10 has an invalid length.
[  427.881476][T18988] netlink: 'syz.1.5660': attribute type 10 has an invalid length.
[  427.908103][T17101] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.069447][T18997] __nla_validate_parse: 6 callbacks suppressed
[  428.069462][T18997] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5664'.
[  428.077604][T18996] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5664'.
[  428.081517][T18996] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5664'.
[  428.124263][T18999] netlink: 'syz.1.5665': attribute type 2 has an invalid length.
[  428.127555][T18999] netlink: 'syz.1.5665': attribute type 4 has an invalid length.
[  428.130406][T18999] netlink: 'syz.1.5665': attribute type 2 has an invalid length.
[  428.134684][T18999] netlink: 196436 bytes leftover after parsing attributes in process `syz.1.5665'.
[  428.138655][T18999] netlink: 'syz.1.5665': attribute type 1 has an invalid length.
[  428.226865][T19005] xt_socket: unknown flags 0x40
[  428.937897][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  428.942960][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  428.947258][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  428.952354][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  428.957424][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  429.221658][T19019] chnl_net:caif_netlink_parms(): no params data found
[  429.270613][T19019] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.273847][T19019] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.276633][T19019] bridge_slave_0: entered allmulticast mode
[  429.279457][T19019] bridge_slave_0: entered promiscuous mode
[  429.284054][T19019] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.286856][T19019] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.289339][T19019] bridge_slave_1: entered allmulticast mode
[  429.292442][T19019] bridge_slave_1: entered promiscuous mode
[  429.315225][T19019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.321776][T19019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.343877][T19019] team0: Port device team_slave_0 added
[  429.347491][T19019] team0: Port device team_slave_1 added
[  429.390468][T19019] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.393803][T19019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.403626][T19019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.409431][T19019] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.411773][T19019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.426885][T19019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.528023][T19019] hsr_slave_0: entered promiscuous mode
[  429.531662][T19019] hsr_slave_1: entered promiscuous mode
[  429.539004][T19019] debugfs: 'hsr0' already exists in 'hsr'
[  429.541579][T19019] Cannot create hsr debugfs directory
[  429.739779][T19019] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  429.749449][T19019] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  429.761448][T19019] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  429.772333][T19019] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  429.891505][T19019] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.918324][T19019] 8021q: adding VLAN 0 to HW filter on device team0
[  429.929185][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.932272][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.946589][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.949694][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.135885][T19019] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.287119][T19019] veth0_vlan: entered promiscuous mode
[  430.297601][T19019] veth1_vlan: entered promiscuous mode
[  430.326084][T19019] veth0_macvtap: entered promiscuous mode
[  430.330516][T19019] veth1_macvtap: entered promiscuous mode
[  430.342459][T19019] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.351356][T19019] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.369664][T17111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.383470][T17111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.387407][T17111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.400736][T17111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.467621][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.470977][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.493459][T19084] netlink: 'syz.5.5692': attribute type 29 has an invalid length.
[  430.501936][T19084] netlink: 'syz.5.5692': attribute type 29 has an invalid length.
[  430.510456][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.516034][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.003773][   T55] Bluetooth: hci3: command tx timeout
[  431.351658][   T55] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  431.352470][   T55] Bluetooth: hci1: unexpected event for opcode 0x0000
[  431.663166][T19136] openvswitch: netlink: Key type 29 is not supported
[  432.902469][T19155] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5723'.
[  432.908967][T19155] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5723'.
[  432.966174][   T55] Bluetooth: hci1: Malformed LE Event: 0x1d
[  433.082793][   T55] Bluetooth: hci3: command tx timeout
[  433.390138][T19162] netlink: 'syz.5.5726': attribute type 1 has an invalid length.
[  433.781618][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5739'.
[  433.789827][T19185] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5736'.
[  434.032785][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5748'.
[  434.428496][T19227] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  434.437214][T19227] syzkaller0: entered promiscuous mode
[  434.439250][T19227] syzkaller0: entered allmulticast mode
[  435.164839][   T55] Bluetooth: hci3: command tx timeout
[  435.414520][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  435.419257][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  435.422848][T17059] Bluetooth: hci1: hardware error 0x00
[  436.098072][T19231] netlink: 'syz.1.5757': attribute type 5 has an invalid length.
[  436.230931][T19239] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5761'.
[  436.280936][T19243] netlink: 'syz.7.5763': attribute type 33 has an invalid length.
[  436.285130][T19243] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5763'.
[  436.850642][T19273] netlink: 'syz.5.5774': attribute type 10 has an invalid length.
[  436.872545][T19273] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  436.922361][T19281] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  436.976345][T19283] tc_dump_action: action bad kind
[  437.081705][T19289] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5781'.
[  437.243100][   T55] Bluetooth: hci3: command tx timeout
[  437.484774][T17059] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  437.727875][T19315] netlink: 'syz.1.5792': attribute type 29 has an invalid length.
[  437.735372][T19315] netlink: 'syz.1.5792': attribute type 29 has an invalid length.
[  437.749597][T19315] netlink: 'syz.1.5792': attribute type 29 has an invalid length.
[  437.753643][T19315] netlink: 'syz.1.5792': attribute type 29 has an invalid length.
[  437.834786][T19319] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5795'.
[  438.011226][T19339] openvswitch: netlink: IPv4 tun info is not correct
[  438.687994][T19400] rdma_rxe: rxe_newlink: failed to add lo
[  440.225800][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  440.227891][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  440.615864][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5850'.
[  440.700378][T19447] netlink: 'syz.1.5855': attribute type 3 has an invalid length.
[  440.704966][T19447] netlink: 'syz.1.5855': attribute type 1 has an invalid length.
[  440.707692][T19447] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.5855'.
[  441.427898][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5868'.
[  441.526596][T19485] netlink: 'syz.5.5869': attribute type 4 has an invalid length.
[  441.855202][T17059] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6
[  442.125759][T19513] netlink: 'syz.5.5883': attribute type 14 has an invalid length.
[  442.359805][T19525] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5888'.
[  442.370462][T19525] openvswitch: netlink: Message has 4 unknown bytes.
[  442.519654][T19537] netlink: 'syz.1.5894': attribute type 13 has an invalid length.
[  442.668593][T19545] bpf: Bad value for 'mode'
[  442.671528][T19537] bond_slave_1: left promiscuous mode
[  442.674122][T19537] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  442.677609][T19537] batadv_slave_0: left promiscuous mode
[  443.215655][T19537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.326302][T19537] veth1_macvtap: left allmulticast mode
[  443.448532][T17111] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.451802][T17111] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.466086][T17111] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.495309][T19563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.576768][T19574] macvtap0: refused to change device tx_queue_len
[  443.681226][T19583] netlink: 'syz.5.5914': attribute type 1 has an invalid length.
[  443.984517][T19600] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5922'.
[  444.054277][T19604] netlink: 'syz.7.5924': attribute type 2 has an invalid length.
[  444.064578][T19604] netlink: 119 bytes leftover after parsing attributes in process `syz.7.5924'.
[  444.306813][T19618] netlink: 'syz.5.5931': attribute type 3 has an invalid length.
[  444.309409][T19618] netlink: 199752 bytes leftover after parsing attributes in process `syz.5.5931'.
[  444.942543][   T33] audit: type=1107 audit(1759329335.082:6): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  445.117532][T19648] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5944'.
[  445.225796][T19660] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5951'.
[  445.231750][T19660] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.261149][T19660] bridge_slave_0 (unregistering): left allmulticast mode
[  445.264089][T19660] bridge_slave_0 (unregistering): left promiscuous mode
[  445.266543][T19660] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.429594][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5951'.
[  446.507301][T19716] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5974'.
[  446.927154][T19736] netlink: 'syz.7.5982': attribute type 3 has an invalid length.
[  446.930393][T19736] netlink: 'syz.7.5982': attribute type 1 has an invalid length.
[  446.935555][T19736] netlink: 'syz.7.5982': attribute type 2 has an invalid length.
[  446.938607][T19736] netlink: 'syz.7.5982': attribute type 8 has an invalid length.
[  446.941634][T19736] netlink: 'syz.7.5982': attribute type 10 has an invalid length.
[  446.947383][T19736] netlink: 'syz.7.5982': attribute type 11 has an invalid length.
[  446.950509][T19736] netlink: 198236 bytes leftover after parsing attributes in process `syz.7.5982'.
[  447.034397][T19738] netlink: 'syz.7.5983': attribute type 1 has an invalid length.
[  447.191165][T19746] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5987'.
[  447.441738][T19766] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5996'.
[  447.450575][T19766] hsr_slave_0: left promiscuous mode
[  447.457360][T19766] hsr_slave_1: left promiscuous mode
[  448.462355][T19828] netlink: 'syz.1.6026': attribute type 21 has an invalid length.
[  449.586302][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6041'.
[  450.118601][T17059] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  450.227162][T19903] netlink: 'syz.1.6057': attribute type 10 has an invalid length.
[  450.347375][T19914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6063'.
[  450.351780][T19914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6063'.
[  450.356083][T19914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6063'.
[  450.815327][T19927] netlink: 'syz.7.6069': attribute type 29 has an invalid length.
[  450.916380][T19932] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.920612][T19932] team0: Port device bond0 added
[  451.666420][T19962] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6083'.
[  453.436321][T20028] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6111'.
[  453.746524][T20044] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.6120'.
[  453.781963][T20046] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6122'.
[  453.835801][T20051] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6124'.
[  453.929780][T20059] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6128'.
[  454.909966][T20119] validate_nla: 1 callbacks suppressed
[  454.909975][T20119] netlink: 'syz.5.6155': attribute type 3 has an invalid length.
[  454.912087][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6156'.
[  454.919429][T20119] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6155'.
[  454.920243][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6156'.
[  454.947226][T20122] netlink: 'syz.7.6157': attribute type 2 has an invalid length.
[  454.949843][T20122] netlink: 'syz.7.6157': attribute type 1 has an invalid length.
[  454.952342][T20122] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.6157'.
[  454.959059][T20122] block nbd5: not configured, cannot reconfigure
[  455.092415][T20138] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  455.311811][T20151] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  455.698661][T20164] sit0: entered promiscuous mode
[  455.702086][T20164] sit0: entered allmulticast mode
[  456.986934][T20214] : renamed from hsr0
[  457.508245][T20243] netlink: 'syz.5.6210': attribute type 4 has an invalid length.
[  459.352336][T20291] __nla_validate_parse: 1 callbacks suppressed
[  459.352346][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6234'.
[  459.359474][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6234'.
[  459.569065][T20300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.432108][T20342] bpf: Bad value for 'gid'
[  460.497850][T20343] : entered promiscuous mode
[  460.500989][T20349] netlink: 'syz.7.6259': attribute type 4 has an invalid length.
[  460.531501][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6260'.
[  460.531811][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6261'.
[  460.539233][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6260'.
[  460.545322][T20353] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6261'.
[  460.595334][T20359] netlink: 'syz.7.6264': attribute type 25 has an invalid length.
[  460.897027][T20368] can: request_module (can-proto-0) failed.
[  461.266306][T20389] netlink: 13 bytes leftover after parsing attributes in process `syz.7.6276'.
[  462.610935][T20446] netlink: del zone limit has 4 unknown bytes
[  463.358112][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6312'.
[  463.939945][T20496] nft_compat: unsupported protocol 0
[  463.979270][T20498] netlink: 'syz.5.6324': attribute type 46 has an invalid length.
[  463.986519][T20498] netlink: 'syz.5.6324': attribute type 19 has an invalid length.
[  464.648469][T20520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6333'.
[  464.757780][T20522] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6334'.
[  465.368861][T20550] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6346'.
[  466.727769][T20573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6354'.
[  466.736619][T20570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6354'.
[  466.754166][T20573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6354'.
[  466.906936][T20570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  466.965467][T20581] bridge_slave_1: left allmulticast mode
[  466.967568][T20581] bridge_slave_1: left promiscuous mode
[  466.969867][T20581] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.016029][T20583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6360'.
[  467.092272][T20588] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6363'.
[  467.096084][T20588] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6363'.
[  467.955646][T20624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6380'.
[  468.138632][T20622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  468.141855][T20622] IPv6: NLM_F_CREATE should be set when creating new route
[  468.144316][T20622] IPv6: NLM_F_CREATE should be set when creating new route
[  469.680993][T20657] __nla_validate_parse: 1 callbacks suppressed
[  469.681071][T20657] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6394'.
[  469.914521][T20674] netlink: 'syz.1.6401': attribute type 3 has an invalid length.
[  469.918431][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6401'.
[  469.923466][T20674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6401'.
[  470.370712][T20699] netlink: 1000 bytes leftover after parsing attributes in process `syz.1.6413'.
[  470.549416][T20710] netlink: 'syz.5.6418': attribute type 46 has an invalid length.
[  471.575223][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6426'.
[  472.060588][T20752] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6436'.
[  473.436842][T20764] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6441'.
[  473.440711][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6441'.
[  474.294879][T20790] netlink: 'syz.5.6452': attribute type 10 has an invalid length.
[  474.402501][T20790] team0: Device ipvlan1 failed to register rx_handler
[  474.778963][T20811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.818392][T20814] pim6reg1: entered allmulticast mode
[  474.859522][T20818] sit0: entered allmulticast mode
[  474.868619][T20818] sit0: entered promiscuous mode
[  476.587297][T20854] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  476.591435][T20855] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  476.953716][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  476.958079][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  476.961978][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  476.968424][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  476.973107][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  477.180644][T20871] chnl_net:caif_netlink_parms(): no params data found
[  477.314939][T20871] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.319174][T20871] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.322400][T20871] bridge_slave_0: entered allmulticast mode
[  477.329649][T20871] bridge_slave_0: entered promiscuous mode
[  477.334642][T20871] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.337644][T20871] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.340644][T20871] bridge_slave_1: entered allmulticast mode
[  477.351024][T20871] bridge_slave_1: entered promiscuous mode
[  477.403303][T20871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.409494][T20871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.449194][T20871] team0: Port device team_slave_0 added
[  477.464472][T20871] team0: Port device team_slave_1 added
[  477.545958][T20871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.548890][T20871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.565915][T20871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.570772][T20871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.576456][T20871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.587928][T20871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.630672][T20871] hsr_slave_0: entered promiscuous mode
[  477.633183][T20871] hsr_slave_1: entered promiscuous mode
[  477.635448][T20871] debugfs: 'hsr0' already exists in 'hsr'
[  477.637395][T20871] Cannot create hsr debugfs directory
[  477.748280][T20871] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  477.752714][T20871] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  477.757190][T20871] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  477.761945][T20871] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  477.829291][T20871] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.842170][T20871] 8021q: adding VLAN 0 to HW filter on device team0
[  477.851290][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.853755][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.865017][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.867692][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.896891][T20871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  478.021805][T20871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.210268][T20871] veth0_vlan: entered promiscuous mode
[  478.222989][T20871] veth1_vlan: entered promiscuous mode
[  478.250504][T20871] veth0_macvtap: entered promiscuous mode
[  478.256536][T20871] veth1_macvtap: entered promiscuous mode
[  478.272223][T20871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.281445][T20871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.289431][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.293617][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.297718][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.301264][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.381418][  T712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.386508][  T712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.424772][ T9200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.428034][ T9200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.552418][T20926] netlink: 'syz.5.6502': attribute type 27 has an invalid length.
[  478.557004][T20926] netlink: 'syz.5.6502': attribute type 4 has an invalid length.
[  478.560031][T20926] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6502'.
[  479.002896][T17059] Bluetooth: hci4: command tx timeout
[  479.023399][T20943] netlink: 'syz.1.6510': attribute type 3 has an invalid length.
[  479.026398][T20943] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6510'.
[  479.353436][T20965] netlink: 'syz.5.6518': attribute type 14 has an invalid length.
[  479.537456][T20968] ref_ctr_offset mismatch. inode: 0x3a7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  479.766953][T20981] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6527'.
[  480.618995][T21032] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6552'.
[  480.773307][T21044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6555'.
[  481.083460][T17059] Bluetooth: hci4: command tx timeout
[  481.705508][T21094] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.6579'.
[  481.960156][T21116] netlink: 'syz.8.6590': attribute type 1 has an invalid length.
[  482.059797][T21122] netlink: 'syz.1.6594': attribute type 21 has an invalid length.
[  482.068839][T21122] netlink: 'syz.1.6594': attribute type 4 has an invalid length.
[  482.071877][T21122] netlink: 14453 bytes leftover after parsing attributes in process `syz.1.6594'.
[  482.204700][T21138] netlink: 'syz.1.6601': attribute type 10 has an invalid length.
[  482.306803][T21146] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  482.598000][T21165] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.6614'.
[  483.162901][T17059] Bluetooth: hci4: command tx timeout
[  483.859477][T17059] Bluetooth: hci4: Malformed LE Event: 0x0d
[  483.906573][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6632'.
[  484.850044][T21229] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6641'.
[  484.854294][T21229] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6641'.
[  484.857915][T21229] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6641'.
[  485.041484][T21240] netlink: 'syz.5.6647': attribute type 23 has an invalid length.
[  485.220148][T21257] siw: device registration error -23
[  485.243002][T17059] Bluetooth: hci4: command tx timeout
[  485.555916][T21285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6668'.
[  485.611800][T21287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6668'.
[  485.828153][T21295] netlink: 'syz.1.6673': attribute type 2 has an invalid length.
[  485.831287][T21295] netlink: 'syz.1.6673': attribute type 1 has an invalid length.
[  485.835596][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6673'.
[  485.841167][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6672'.
[  486.017080][T21312] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6680'.
[  486.046949][T21314] netlink: 'syz.1.6681': attribute type 1 has an invalid length.
[  486.112287][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6683'.
[  486.746674][T20871] cgroup: fork rejected by pids controller in /syz8
[  487.275586][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  487.282793][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  487.286344][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  487.289729][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  487.292280][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  487.483838][T21378] chnl_net:caif_netlink_parms(): no params data found
[  487.577413][T17059] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[  487.607291][T21378] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.614552][T21378] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.617175][T21378] bridge_slave_0: entered allmulticast mode
[  487.619955][T21378] bridge_slave_0: entered promiscuous mode
[  487.626992][T21378] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.629903][T21378] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.634352][T21378] bridge_slave_1: entered allmulticast mode
[  487.638245][T21378] bridge_slave_1: entered promiscuous mode
[  487.671898][T21378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.678646][T21378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.718558][T21378] team0: Port device team_slave_0 added
[  487.728637][T21378] team0: Port device team_slave_1 added
[  487.759099][T21378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.762102][T21378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.774363][T21378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.782437][T21378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.785764][T21378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.797119][T21378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.886024][T21378] hsr_slave_0: entered promiscuous mode
[  487.888677][T21378] hsr_slave_1: entered promiscuous mode
[  487.890967][T21378] debugfs: 'hsr0' already exists in 'hsr'
[  487.893332][T21378] Cannot create hsr debugfs directory
[  487.895729][T21403] : renamed from gre0
[  488.583612][T21378] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.849944][T21378] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.918469][T21378] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.977107][T21378] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.080011][T21378] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  489.093262][T21378] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  489.098796][T21378] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  489.104033][T21378] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  489.167378][T21378] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.179233][T21378] 8021q: adding VLAN 0 to HW filter on device team0
[  489.185900][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.188647][ T9200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.195421][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.198148][ T9200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.302021][T21378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.332873][T17059] Bluetooth: hci4: command tx timeout
[  489.420542][T21378] veth0_vlan: entered promiscuous mode
[  489.426817][T21378] veth1_vlan: entered promiscuous mode
[  489.450863][T21378] veth0_macvtap: entered promiscuous mode
[  489.461856][T21378] veth1_macvtap: entered promiscuous mode
[  489.479394][T21378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.488994][T21378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.499260][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.508548][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.882528][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.903621][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.412873][T21462] Bluetooth: hci4: command tx timeout
[  492.502108][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.509061][T21465] netlink: 'syz.5.6733': attribute type 21 has an invalid length.
[  492.509762][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.512377][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6733'.
[  492.548759][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.553675][T21467] netlink: 'syz.5.6735': attribute type 10 has an invalid length.
[  492.556990][T21467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.556990][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.565859][T21467] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.573646][T21467] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  492.966782][T21490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6744'.
[  493.164174][T21462] Bluetooth: hci0: command 0x0406 tx timeout
[  493.166714][T21462] Bluetooth: hci2: command 0x0406 tx timeout
[  493.483892][ T5818] Bluetooth: hci4: command tx timeout
[  493.699945][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6753'.
[  494.121923][T21533] netlink: 'syz.5.6762': attribute type 1 has an invalid length.
[  494.491146][T21551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6770'.
[  494.528161][T21542] netlink: 'syz.8.6766': attribute type 13 has an invalid length.
[  495.157164][T21542] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.161204][T21542] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.256299][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.268240][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.435523][T17111] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.451517][T17111] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.465042][T17111] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.468991][T17111] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.568916][T17059] Bluetooth: hci4: command tx timeout
[  496.113428][T21604] sctp: [Deprecated]: syz.5.6795 (pid 21604) Use of int in max_burst socket option deprecated.
[  496.113428][T21604] Use struct sctp_assoc_value instead
[  496.276711][T21591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'.
[  496.884123][T21628] wg2: entered allmulticast mode
[  496.889381][T21628] wg2: entered promiscuous mode
[  497.299546][T21631] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6807'.
[  498.125625][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6822'.
[  500.558250][T21736] netlink: 'syz.1.6852': attribute type 2 has an invalid length.
[  500.721529][T21743] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6855'.
[  501.125048][T21743] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6855'.
[  501.330933][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  501.334311][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  501.620324][T21763] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6862'.
[  504.788330][T21806] netlink: 'syz.5.6882': attribute type 10 has an invalid length.
[  505.021083][T21806] bond0: (slave netdevsim0): Releasing backup interface
[  505.482202][T21816] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6886'.
[  506.025000][T21828] netlink: 'syz.8.6891': attribute type 15 has an invalid length.
[  506.448945][T21845] netlink: 'syz.8.6899': attribute type 27 has an invalid length.
[  506.454822][T21845] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6899'.
[  506.457821][T21845] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  506.560694][T21841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6897'.
[  507.776975][T21908] netlink: 'syz.5.6925': attribute type 4 has an invalid length.
[  507.780525][T21908] netlink: 182632 bytes leftover after parsing attributes in process `syz.5.6925'.
[  507.901190][T21912] netlink: 'syz.5.6927': attribute type 11 has an invalid length.
[  507.905991][T21912] netlink: 'syz.5.6927': attribute type 11 has an invalid length.
[  508.124696][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6931'.
[  508.128543][T21920] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6931'.
[  508.361555][T21932] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.6936'.
[  509.199908][T21963] delete_channel: no stack
[  509.338314][T21974] xt_HMARK: spi-set and port-set can't be combined
[  509.403784][T21977] dummy0: entered allmulticast mode
[  509.959949][T22016] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6971'.
[  512.491693][T22047] netlink: 'syz.5.6984': attribute type 1 has an invalid length.
[  512.497925][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6984'.
[  513.877545][T22082] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6999'.
[  514.022749][ T5871] unregister_netdevice: waiting for lo to become free. Usage count = 3
[  514.026574][ T5871] ref_tracker: netdev@ffff888110282610 has 1/1 users at
[  514.026574][ T5871]      ib_device_set_netdev+0x31f/0x6d0
[  514.026574][ T5871]      siw_newlink+0x40c/0xd70
[  514.026574][ T5871]      nldev_newlink+0x4a5/0x5a0
[  514.026574][ T5871]      rdma_nl_rcv+0x6ae/0x980
[  514.026574][ T5871]      netlink_unicast+0x82f/0x9e0
[  514.026574][ T5871]      netlink_sendmsg+0x805/0xb30
[  514.026574][ T5871]      __sock_sendmsg+0x21c/0x270
[  514.026574][ T5871]      ____sys_sendmsg+0x505/0x830
[  514.026574][ T5871]      ___sys_sendmsg+0x21f/0x2a0
[  514.026574][ T5871]      __x64_sys_sendmsg+0x19b/0x260
[  514.026574][ T5871]      do_syscall_64+0xfa/0x3b0
[  514.026574][ T5871]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.026574][ T5871] 
[  514.063664][T22088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7002'.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  514.133838][T22088] openvswitch: netlink: Missing key (keys=40, expected=100)
[  514.194253][T22093] netlink: 180 bytes leftover after parsing attributes in process `syz.8.7004'.
[  519.883390][   T34] INFO: task kworker/u9:2:53 blocked for more than 143 seconds.
[  519.887383][   T34]       Not tainted syzkaller #0
[  519.889484][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.895512][   T34] task:kworker/u9:2    state:D stack:21712 pid:53    tgid:53    ppid:2      task_flags:0x4208160 flags:0x00080000
[  519.901930][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  519.904982][   T34] Call Trace:
[  519.906586][   T34]  <TASK>
[  519.909372][   T34]  __schedule+0x1798/0x4cc0
[  519.911403][   T34]  ? __lock_acquire+0xab9/0xd20
[  519.913587][   T34]  ? __pfx___schedule+0x10/0x10
[  519.915644][   T34]  ? schedule+0x91/0x360
[  519.917442][   T34]  schedule+0x165/0x360
[  519.919208][   T34]  schedule_timeout+0x9a/0x270
[  519.921226][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  519.923484][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.925402][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.927511][   T34]  ? wait_for_completion+0x267/0x5d0
[  519.929658][   T34]  wait_for_completion+0x2bf/0x5d0
[  519.931774][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  519.934169][   T34]  ? up_write+0x1c4/0x420
[  519.935945][   T34]  ? remove_client_context+0xc0/0x1e0
[  519.938131][   T34]  disable_device+0x1c6/0x320
[  519.939849][   T34]  ? __pfx_disable_device+0x10/0x10
[  519.941628][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  519.943957][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.945764][   T34]  ib_unregister_work+0x19/0x30
[  519.947379][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  519.949307][   T34]  process_scheduled_works+0xae1/0x17b0
[  519.951163][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  519.953785][   T34]  worker_thread+0x8a0/0xda0
[  519.955389][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  519.957609][   T34]  ? __kthread_parkme+0x7b/0x200
[  519.959360][   T34]  kthread+0x711/0x8a0
[  519.960741][   T34]  ? __pfx_worker_thread+0x10/0x10
[  519.962437][   T34]  ? __pfx_kthread+0x10/0x10
[  519.964433][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.966318][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.968218][   T34]  ? __pfx_kthread+0x10/0x10
[  519.970118][   T34]  ret_from_fork+0x439/0x7d0
[  519.972013][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  519.974194][   T34]  ? __switch_to_asm+0x39/0x70
[  519.976153][   T34]  ? __switch_to_asm+0x33/0x70
[  519.977969][   T34]  ? __pfx_kthread+0x10/0x10
[  519.979499][   T34]  ret_from_fork_asm+0x1a/0x30
[  519.981071][   T34]  </TASK>
[  519.982181][   T34] 
[  519.982181][   T34] Showing all locks held in the system:
[  519.985422][   T34] 1 lock held by khungtaskd/34:
[  519.987198][   T34]  #0: ffffffff8dd3a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  519.990342][   T34] 3 locks held by kworker/u9:2/53:
[  519.992019][   T34]  #0: ffff88801b7cf948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  519.996476][   T34]  #1: ffffc900007bfbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  520.001392][   T34]  #2: ffff888036554700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  520.006935][   T34] 2 locks held by getty/5648:
[  520.008553][   T34]  #0: ffff888026bde0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  520.011686][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  520.015420][   T34] 3 locks held by kworker/u8:4/5871:
[  520.017279][   T34]  #0: ffff88801aef7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  520.020835][   T34]  #1: ffffc900041efbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  520.024781][   T34]  #2: ffffffff8f0c21f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[  520.027890][   T34] 2 locks held by syz.6.5417/18455:
[  520.029589][   T34]  #0: ffffffff8f0c21f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  520.032578][   T34]  #1: ffff888036554700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  520.036916][   T34] 2 locks held by syz.7.6287/20415:
[  520.038619][   T34]  #0: ffffffff8f0c21f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  520.041640][   T34]  #1: ffff888036554700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  520.045725][   T34] 
[  520.046760][   T34] =============================================
[  520.046760][   T34] 
[  520.050132][   T34] NMI backtrace for cpu 0
[  520.050142][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  520.050151][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  520.050156][   T34] Call Trace:
[  520.050160][   T34]  <TASK>
[  520.050163][   T34]  dump_stack_lvl+0x189/0x250
[  520.050175][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  520.050183][   T34]  ? __pfx__printk+0x10/0x10
[  520.050193][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  520.050204][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  520.050213][   T34]  ? __pfx__printk+0x10/0x10
[  520.050221][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  520.050228][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  520.050239][   T34]  watchdog+0xf93/0xfe0
[  520.050248][   T34]  ? watchdog+0x1de/0xfe0
[  520.050256][   T34]  kthread+0x711/0x8a0
[  520.050266][   T34]  ? __pfx_watchdog+0x10/0x10
[  520.050272][   T34]  ? __pfx_kthread+0x10/0x10
[  520.050281][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  520.050291][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.050296][   T34]  ? __pfx_kthread+0x10/0x10
[  520.050305][   T34]  ret_from_fork+0x439/0x7d0
[  520.050314][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  520.050322][   T34]  ? __switch_to_asm+0x39/0x70
[  520.050331][   T34]  ? __switch_to_asm+0x33/0x70
[  520.050338][   T34]  ? __pfx_kthread+0x10/0x10
[  520.050347][   T34]  ret_from_fork_asm+0x1a/0x30
[  520.050361][   T34]  </TASK>
[  520.050363][   T34] Sending NMI from CPU 0 to CPUs 1:
[  520.104042][    C1] NMI backtrace for cpu 1
[  520.104057][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  520.104071][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  520.104077][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  520.104094][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 be 10 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  520.104103][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  520.104113][    C1] RAX: c698703691cf0400 RBX: ffffffff81953917 RCX: c698703691cf0400
[  520.104122][    C1] RDX: 0000000000000001 RSI: ffffffff8d53a1aa RDI: ffffffff8b9ec2e0
[  520.104129][    C1] RBP: ffffc90000177f20 R08: ffff888136632fdb R09: 1ffff11026cc65fb
[  520.104136][    C1] R10: dffffc0000000000 R11: ffffed1026cc65fc R12: ffffffff8f5cd530
[  520.104143][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  520.104149][    C1] FS:  0000000000000000(0000) GS:ffff8881a4173000(0000) knlGS:0000000000000000
[  520.104158][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  520.104166][    C1] CR2: 000055bbaa3a5c48 CR3: 000000010f78c000 CR4: 00000000000006f0
[  520.104198][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  520.104207][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  520.104213][    C1] Call Trace:
[  520.104217][    C1]  <TASK>
[  520.104223][    C1]  default_idle+0x13/0x20
[  520.104234][    C1]  default_idle_call+0x73/0xb0
[  520.104247][    C1]  do_idle+0x1e7/0x510
[  520.104261][    C1]  ? __pfx_do_idle+0x10/0x10
[  520.104270][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.104285][    C1]  cpu_startup_entry+0x44/0x60
[  520.104297][    C1]  start_secondary+0x101/0x110
[  520.104308][    C1]  common_startup_64+0x13e/0x147
[  520.104327][    C1]  </TASK>
[  520.105503][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  520.176075][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  520.179253][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  520.182673][   T34] Call Trace:
[  520.184098][   T34]  <TASK>
[  520.185224][   T34]  dump_stack_lvl+0x99/0x250
[  520.186787][   T34]  ? __asan_memcpy+0x40/0x70
[  520.188396][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  520.190508][   T34]  ? __pfx__printk+0x10/0x10
[  520.192358][   T34]  vpanic+0x281/0x750
[  520.194045][   T34]  ? __pfx_vpanic+0x10/0x10
[  520.195727][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  520.198065][   T34]  ? preempt_schedule+0xae/0xc0
[  520.200123][   T34]  ? preempt_schedule_common+0x83/0xd0
[  520.202470][   T34]  panic+0xb9/0xc0
[  520.204107][   T34]  ? __pfx_panic+0x10/0x10
[  520.206026][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  520.208311][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  520.210943][   T34]  watchdog+0xfd2/0xfe0
[  520.212740][   T34]  ? watchdog+0x1de/0xfe0
[  520.214547][   T34]  kthread+0x711/0x8a0
[  520.216303][   T34]  ? __pfx_watchdog+0x10/0x10
[  520.218340][   T34]  ? __pfx_kthread+0x10/0x10
[  520.220282][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  520.222478][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.224728][   T34]  ? __pfx_kthread+0x10/0x10
[  520.226692][   T34]  ret_from_fork+0x439/0x7d0
[  520.228544][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  520.230451][   T34]  ? __switch_to_asm+0x39/0x70
[  520.232427][   T34]  ? __switch_to_asm+0x33/0x70
[  520.234397][   T34]  ? __pfx_kthread+0x10/0x10
[  520.236328][   T34]  ret_from_fork_asm+0x1a/0x30
[  520.238330][   T34]  </TASK>
[  520.240444][   T34] Kernel Offset: disabled
[  520.242279][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:36:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900041eeeb0
R8 =ffff888106c10237 R9 =1ffff11020d82046 R10=dffffc0000000000 R11=ffffffff850cc110
R12=dffffc0000000000 R13=ffffffff995a191c R14=ffffffff99894000 R15=0000000000000000
RIP=ffffffff850cc18c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8d73000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555779705c8 CR3=00000000389ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9f0d212e7b
XMM06=0000000000000000 00007f9f0d212e75 XMM07=0000000000000000 00007f9f0d212e89
XMM08=0000000000000000 00007f9f0d212f0f XMM09=0000000000000000 00007f9f0d212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8b39fd97 RCX=27124c41884c9700 RDX=0000000000000000
RSI=ffffffff8b39fd97 RDI=1ffffffff32ffc0f RBP=ffffffff848dd284 RSP=ffffc900001e0a00
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1eb9aa7
R12=0000000000000000 R13=ffffffff997fe078 R14=ffffffff997fe078 R15=0000000000000001
RIP=ffffffff82230a46 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f26ef2896c0 ffffffff 00c00000
GS =0000 ffff8881a4173000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=0000000043742000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=ffffffffffff0404 c00304100004b003
XMM02=0168cc00080004e0 0300100004d0030f XMM03=0322080280030010 0004800401080006
XMM04=074a0000000000dd 0010910056000006 XMM05=0107f8e610000280 0401000000080606
XMM06=017ce4074a000000 0000dd0010910056 XMM07=0000060322080280 0300100004800401
XMM08=0800060168cc0008 0004e00300100004 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
