last executing test programs:

4m40.230833739s ago: executing program 0 (id=233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040092}, 0x100440d0)

4m40.171750368s ago: executing program 0 (id=235):
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0x8, 0x7, 0x5f, 0x5, 0x0, 0x4, 0x4a401, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xcf, 0x1, @perf_config_ext={0x9, 0x7}, 0x1, 0xfffffffffffffffc, 0xd7, 0x6, 0x6, 0xffff, 0x8, 0x0, 0x3b, 0x0, 0x2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080))

4m40.101841558s ago: executing program 0 (id=237):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x10, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, 0x0, 0x0}, 0x20)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x100000}, 0x50)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@alg, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000006c0)}, 0x10000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, 0x0, 0x0)

4m39.031585056s ago: executing program 0 (id=245):
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33)

4m38.966770606s ago: executing program 0 (id=247):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

4m38.89873593s ago: executing program 0 (id=251):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000af43e5"], 0x48)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

4m23.699393611s ago: executing program 32 (id=251):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000af43e5"], 0x48)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

2m37.821041992s ago: executing program 2 (id=1728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

2m37.754289999s ago: executing program 2 (id=1730):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2m37.753946658s ago: executing program 2 (id=1731):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xffffffff, 0x0, 0x1}, 0x48)

2m37.697411195s ago: executing program 2 (id=1733):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m37.466906904s ago: executing program 2 (id=1735):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "22d4ba0c226aefacfc"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

2m37.225948393s ago: executing program 2 (id=1736):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1405, 0x1, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20048044}, 0x40000)

2m37.12070092s ago: executing program 33 (id=1736):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1405, 0x1, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20048044}, 0x40000)

9.445357775s ago: executing program 1 (id=3716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x48, 0x32, 0x109, 0x70bd26, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0)

9.444462743s ago: executing program 1 (id=3718):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000001d80)={0x8, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_bp={0x0, 0x3}, 0x14187, 0x3, 0xfffffc00, 0x5, 0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000039c0)=""/4104, 0x1008}, {&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000016c0)=""/262, 0x106}, {&(0x7f0000001600)=""/149, 0x95}, {&(0x7f00000038c0)=""/115, 0x73}], 0x7}, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402090000e8fe55a1180015000600142603600000000401a80016000a001040319a4707c5ee6f83b94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70300000040fad95667e006dcdf969b3ef35ce3bb9ad809d58bd0fdcaed0bffec29002a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000440005041c827c8245afef87b9a2125c0fcbb4095452741", 0xda}], 0x1}, 0x4008000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0200"/18, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001cc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x448}, 0x1, 0x0, 0x0, 0x40000}, 0x20004054)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x34, &(0x7f0000000240)=""/52, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xf, 0x6, 0xb}, 0x10, 0x178c7, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0x4, 0x9}, {0x2, 0x1, 0xc}], 0x10, 0x6}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000000794f70df00000000000000"])
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r8 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4)

8.528728171s ago: executing program 1 (id=3741):
r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x942, 0x4, 0x200, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(r1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x14}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x5, 0x10, 0x2, 0x7f, 0x0, 0x3e, 0x424, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x9}, 0x2, 0x4, 0x8960, 0x3, 0x1000000010001, 0x7, 0x53d, 0x0, 0xc, 0x0, 0xbec})
write$cgroup_type(r2, &(0x7f0000000280), 0x9)

8.270798618s ago: executing program 1 (id=3745):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19c5a, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0)

8.068684023s ago: executing program 1 (id=3748):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0x4, 0xea}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

7.970110696s ago: executing program 1 (id=3750):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0x15, &(0x7f0000001180)=ANY=[@ANYBLOB="180000002f05000068d7a0e383196b1f0e9fb13b2d0b9a00000000ff010000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018440000fdffffff00000000000000001832000002000000000000000000000018300000010000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001380)='syzkaller\x00', 0x80e, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2e0fc, 0xffffffffffffffff, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b00)="140000003600fb50e35d3c4a0ed898a00a0c8c00", 0x14}], 0x1}, 0x4044880)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010000}, 0x20040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})

3.149321486s ago: executing program 3 (id=3824):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3a, 0x301, 0x70bd25, 0xfffffff8, {0xb}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40548d3}, 0x0)

458.924456ms ago: executing program 3 (id=3835):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0)

372.08458ms ago: executing program 3 (id=3836):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@ld, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8}, 0x94)

316.168559ms ago: executing program 4 (id=3837):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

315.597972ms ago: executing program 3 (id=3838):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000d00), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x800)

314.333698ms ago: executing program 4 (id=3839):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x80, 0x0}, 0x0)

274.080687ms ago: executing program 4 (id=3840):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000066000000000000001800000000000000000000000000000095000000000000eed60300001000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

258.825371ms ago: executing program 3 (id=3841):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000002000000000000110000000000000000020000000100001302000000020000000000000000"], 0x0, 0x52}, 0x28)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000580)=r2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000000400000010e300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
recvmsg(r1, &(0x7f00000006c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000140)=[{}, {&(0x7f0000000500)=""/114, 0x72}], 0x2, &(0x7f00000005c0)=""/221, 0xdd}, 0x2000)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840)

209.97084ms ago: executing program 4 (id=3842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a80000000060a0b0400000000000000000200000054000480500001800a100100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c000580090001006d657461000000000c000280080002400000001a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xa8}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900782093ee31e2e39700000900010073797a30000000000800054000000021340000001e0a05010000000000000000070000070900020073797a21000000000900010073797a3000"], 0xb8}}, 0x40008)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)

130.023563ms ago: executing program 3 (id=3843):
r0 = getpid()
socket$kcm(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x9, 0x0, 0x37, 0x81, 0x0, 0x400000000, 0x50000, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x114, 0x9, 0x6, 0x7, 0x4, 0x2, 0x1000, 0x0, 0xffffffff, 0x0, 0x10000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xa)
sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000dc0)="8ad4", 0x5dc}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800)
syz_open_procfs$namespace(r0, &(0x7f0000001e40)='ns/time\x00')

78.163239ms ago: executing program 4 (id=3844):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000000000702000000", 0x18}], 0x1}, 0x0)

0s ago: executing program 4 (id=3845):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4001040)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4040)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

0][ T6851] team0: Port device team_slave_0 added
[   97.948266][ T6851] team0: Port device team_slave_1 added
[   97.961144][ T5678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.034657][ T5678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.043493][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.046564][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.064991][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.071682][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.074420][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.087453][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.114765][ T5678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.206794][ T6851] hsr_slave_0: entered promiscuous mode
[   98.211604][ T6851] hsr_slave_1: entered promiscuous mode
[   98.214620][ T6851] debugfs: 'hsr0' already exists in 'hsr'
[   98.216941][ T6851] Cannot create hsr debugfs directory
[   98.418124][ T5678] bridge_slave_1: left allmulticast mode
[   98.428626][ T5678] bridge_slave_1: left promiscuous mode
[   98.431801][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.444963][ T5678] bridge_slave_0: left allmulticast mode
[   98.447361][ T5678] bridge_slave_0: left promiscuous mode
[   98.450312][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.780887][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.787085][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.795578][ T5678] bond0 (unregistering): Released all slaves
[   98.930681][ T6851] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.939506][ T6851] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.946321][ T6851] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.981498][ T6851] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.075875][ T6918] netlink: 'syz.2.438': attribute type 2 has an invalid length.
[   99.093322][ T6918] k*: entered promiscuous mode
[   99.123120][ T5678] hsr_slave_0: left promiscuous mode
[   99.125350][ T5678] hsr_slave_1: left promiscuous mode
[   99.127656][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.133354][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.139644][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.142466][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.171113][ T5678] veth1_macvtap: left promiscuous mode
[   99.172902][ T5678] veth0_macvtap: left promiscuous mode
[   99.174750][ T5678] veth1_vlan: left promiscuous mode
[   99.176676][ T5678] veth0_vlan: left promiscuous mode
[   99.523389][   T54] Bluetooth: hci3: command tx timeout
[   99.723093][ T5678] team0 (unregistering): Port device team_slave_1 removed
[   99.755817][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  100.173127][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.235459][ T6851] 8021q: adding VLAN 0 to HW filter on device team0
[  100.249670][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.252503][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.283371][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.285886][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.351426][ T6943] nftables ruleset with unbound set
[  100.410914][ T6851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.426809][ T6948] netlink: 'syz.2.447': attribute type 7 has an invalid length.
[  100.553219][ T6956] __nla_validate_parse: 1 callbacks suppressed
[  100.553235][ T6956] netlink: 104 bytes leftover after parsing attributes in process `syz.1.448'.
[  100.661800][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.669383][ T6963] netlink: 'syz.1.449': attribute type 2 has an invalid length.
[  100.734167][ T6851] veth0_vlan: entered promiscuous mode
[  100.771052][ T6851] veth1_vlan: entered promiscuous mode
[  100.820419][ T6851] veth0_macvtap: entered promiscuous mode
[  100.829446][ T6851] veth1_macvtap: entered promiscuous mode
[  100.844860][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.861263][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.876427][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.881642][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.896297][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.901759][ T5678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.035592][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.051489][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.133192][  T756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.142228][  T756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.588591][   T54] Bluetooth: hci3: command tx timeout
[  101.849441][ T7012] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[  102.177637][ T7039] : entered promiscuous mode
[  102.183711][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'.
[  102.217004][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'.
[  102.233340][ T7044] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.477'.
[  102.304244][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'.
[  103.581922][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.490'.
[  103.584748][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'.
[  103.587394][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.490'.
[  103.594541][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'.
[  103.667820][   T54] Bluetooth: hci3: command tx timeout
[  103.676330][ T7084] netlink: 'syz.3.493': attribute type 4 has an invalid length.
[  103.679053][ T7084] netlink: 152 bytes leftover after parsing attributes in process `syz.3.493'.
[  103.683641][ T7084] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  104.220779][ T7106] netlink: 'syz.1.502': attribute type 9 has an invalid length.
[  104.327265][ T7109] netlink: 'syz.1.503': attribute type 21 has an invalid length.
[  104.330101][ T7109] netlink: 'syz.1.503': attribute type 5 has an invalid length.
[  104.333367][ T7109] netlink: 'syz.1.503': attribute type 6 has an invalid length.
[  104.543548][ T7121] netlink: 'syz.2.507': attribute type 10 has an invalid length.
[  104.741070][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.956224][ T7143] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  105.020299][ T7142] netlink: 'syz.1.519': attribute type 1 has an invalid length.
[  105.480526][ T7171] netlink: 'syz.2.531': attribute type 4 has an invalid length.
[  105.587104][ T7183] __nla_validate_parse: 7 callbacks suppressed
[  105.587118][ T7183] netlink: 180 bytes leftover after parsing attributes in process `syz.2.538'.
[  105.752801][   T54] Bluetooth: hci3: command tx timeout
[  105.833610][ T7192] netlink: 26 bytes leftover after parsing attributes in process `syz.3.542'.
[  107.716387][ T7225] netlink: 'syz.1.555': attribute type 29 has an invalid length.
[  107.725710][ T7225] netlink: 'syz.1.555': attribute type 29 has an invalid length.
[  107.732911][ T7225] netlink: 500 bytes leftover after parsing attributes in process `syz.1.555'.
[  108.872489][ T7247] netlink: 80 bytes leftover after parsing attributes in process `syz.2.565'.
[  108.875825][ T7247] netlink: 80 bytes leftover after parsing attributes in process `syz.2.565'.
[  108.951532][ T7256] netlink: 148 bytes leftover after parsing attributes in process `syz.1.568'.
[  109.292925][   T54] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  109.696886][ T5850] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4
[  109.824334][ T7288] netlink: 104 bytes leftover after parsing attributes in process `syz.3.582'.
[  110.083865][ T7298] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  110.216011][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.590'.
[  110.237096][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.590'.
[  110.520930][ T7312] -1: renamed from syzkaller0
[  112.039065][ T7386] netlink: 'syz.1.615': attribute type 22 has an invalid length.
[  112.053402][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  112.471814][ T7401] netlink: 'syz.3.623': attribute type 2 has an invalid length.
[  112.501982][ T7401] netlink: 'syz.3.623': attribute type 8 has an invalid length.
[  112.504490][ T7401] netlink: 132 bytes leftover after parsing attributes in process `syz.3.623'.
[  112.546881][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'.
[  112.553439][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.623'.
[  112.766767][ T7419] netlink: 17 bytes leftover after parsing attributes in process `syz.1.627'.
[  112.807365][ T7422] netlink: 168 bytes leftover after parsing attributes in process `syz.3.629'.
[  113.536272][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.704966][ T7465] netlink: 'syz.1.647': attribute type 13 has an invalid length.
[  113.714924][ T7465] netlink: 'syz.1.647': attribute type 17 has an invalid length.
[  115.043599][ T7465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.476910][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'.
[  115.480266][ T7499] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  115.482775][ T7499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.537884][ T7491] netlink: 'syz.1.659': attribute type 29 has an invalid length.
[  115.621900][ T7508] netlink: 176 bytes leftover after parsing attributes in process `syz.1.667'.
[  115.786866][ T5850] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28
[  115.791304][ T5850] Bluetooth: hci0: Unable to find connection with handle 0x0000
[  116.232719][ T7543] netlink: 26 bytes leftover after parsing attributes in process `syz.3.680'.
[  116.262629][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'.
[  117.186792][ T7595] __nla_validate_parse: 4 callbacks suppressed
[  117.186849][ T7595] netlink: 152 bytes leftover after parsing attributes in process `syz.2.703'.
[  117.628824][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.707'.
[  117.675269][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.707'.
[  118.140108][ T7622] bpf: Bad value for 'mode'
[  118.449135][ T7640] netlink: 'syz.3.722': attribute type 37 has an invalid length.
[  119.323495][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[  120.845880][ T7678] syz.2.737 (7678) used greatest stack depth: 19648 bytes left
[  121.445140][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'.
[  125.123241][ T7714] netlink: 830 bytes leftover after parsing attributes in process `syz.3.750'.
[  127.971374][ T7731] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.757'.
[  127.975169][ T7731] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.757'.
[  128.079089][ T7738] netlink: 'syz.2.761': attribute type 21 has an invalid length.
[  128.081794][ T7738] netlink: 100 bytes leftover after parsing attributes in process `syz.2.761'.
[  129.351961][ T7753] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.767'.
[  129.381627][ T7755] netlink: 'syz.2.768': attribute type 27 has an invalid length.
[  129.437082][ T7759] netlink: 'syz.2.770': attribute type 2 has an invalid length.
[  129.542962][ T7766] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.774'.
[  129.603291][ T7774] netlink: 'syz.3.776': attribute type 32 has an invalid length.
[  129.616806][ T7777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.777'.
[  129.827650][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'.
[  129.832883][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'.
[  129.914896][ T7799] netlink: 277 bytes leftover after parsing attributes in process `syz.3.780'.
[  129.926294][ T7806] sctp: [Deprecated]: syz.1.782 (pid 7806) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.926294][ T7806] Use struct sctp_sack_info instead
[  130.083465][ T7810] netlink: 'syz.3.785': attribute type 39 has an invalid length.
[  131.275649][ T7850] netlink: 'syz.2.801': attribute type 1 has an invalid length.
[  131.868586][ T7891] delete_channel: no stack
[  131.942027][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.823'.
[  131.945318][ T7897] openvswitch: netlink: Missing key (keys=40, expected=100)
[  132.064590][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'.
[  132.182091][ T7910] erspan0 speed is unknown, defaulting to 1000
[  132.236400][ T7916] netlink: 348 bytes leftover after parsing attributes in process `syz.1.832'.
[  132.270741][ T7910] erspan0 speed is unknown, defaulting to 1000
[  132.296640][ T7910] erspan0 speed is unknown, defaulting to 1000
[  132.371312][ T7916] siw: device registration error -23
[  132.479601][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'.
[  132.699927][ T7921] netlink: 84 bytes leftover after parsing attributes in process `syz.3.834'.
[  132.718145][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.720359][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.214559][ T7910] infiniband syz2: set active
[  133.218749][ T5895] erspan0 speed is unknown, defaulting to 1000
[  133.224520][ T7910] infiniband syz2: added erspan0
[  133.235658][ T7910] syz2: rxe_create_cq: returned err = -12
[  133.240116][ T7910] infiniband syz2: Couldn't create ib_mad CQ
[  133.242749][ T7910] infiniband syz2: Couldn't open port 1
[  133.298876][ T7910] RDS/IB: syz2: added
[  133.301036][ T7910] smc: adding ib device syz2 with port count 1
[  133.309702][ T7910] smc:    ib device syz2 port 1 has pnetid 
[  133.314604][ T5895] erspan0 speed is unknown, defaulting to 1000
[  133.320972][ T7910] erspan0 speed is unknown, defaulting to 1000
[  133.327655][ T7943] openvswitch: netlink: Flow actions attr not present in new flow.
[  133.488677][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'.
[  133.568686][ T7910] erspan0 speed is unknown, defaulting to 1000
[  133.880374][ T5850] Bluetooth: hci3: Dropping invalid advertising data
[  133.882846][ T5850] Bluetooth: hci3: Malformed LE Event: 0x02
[  135.722152][ T7910] erspan0 speed is unknown, defaulting to 1000
[  136.726763][ T7998] syzkaller0: entered promiscuous mode
[  136.729092][ T7998] syzkaller0: entered allmulticast mode
[  137.079658][ T8015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.874'.
[  137.134185][ T8019] netlink: 'syz.1.876': attribute type 4 has an invalid length.
[  137.547589][ T8036] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.883'.
[  137.573600][ T8036] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  137.580081][ T8036] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  137.689620][   T33] audit: type=1107 audit(1758911447.309:2): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  137.966066][ T8052] netlink: 17 bytes leftover after parsing attributes in process `syz.2.892'.
[  137.971100][ T8052] netlink: zone id is out of range
[  137.973860][ T8052] netlink: zone id is out of range
[  137.976770][ T8052] netlink: zone id is out of range
[  137.983425][ T8052] netlink: zone id is out of range
[  137.986118][ T8052] netlink: zone id is out of range
[  137.989229][ T8052] netlink: zone id is out of range
[  137.992112][ T8052] netlink: zone id is out of range
[  137.994851][ T8052] netlink: zone id is out of range
[  138.183050][ T8053] syz.2.892 (8053) used obsolete PPPIOCDETACH ioctl
[  139.332640][ T8062] syz.1.896 uses obsolete (PF_INET,SOCK_PACKET)
[  139.532938][ T8070] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.895'.
[  139.671660][ T8078] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.902'.
[  139.724359][ T8081] netlink: 492 bytes leftover after parsing attributes in process `syz.1.903'.
[  140.172078][ T8061] delete_channel: no stack
[  140.412090][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.909'.
[  140.863875][ T8115] netlink: 'syz.1.915': attribute type 3 has an invalid length.
[  140.866450][ T8115] netlink: 150428 bytes leftover after parsing attributes in process `syz.1.915'.
[  140.952473][ T8119] netlink: 'syz.1.918': attribute type 27 has an invalid length.
[  140.955989][ T8119] netlink: 'syz.1.918': attribute type 3 has an invalid length.
[  140.962947][ T8119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.918'.
[  141.027623][ T8123] netlink: 'syz.1.920': attribute type 21 has an invalid length.
[  141.035263][ T8123] netlink: 'syz.1.920': attribute type 6 has an invalid length.
[  141.041292][ T8123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.920'.
[  142.972585][ T8160] netlink: 'syz.2.935': attribute type 21 has an invalid length.
[  142.992138][ T8160] __nla_validate_parse: 1 callbacks suppressed
[  142.992165][ T8160] netlink: 168 bytes leftover after parsing attributes in process `syz.2.935'.
[  143.074197][ T8166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.939'.
[  143.179464][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'.
[  143.182658][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'.
[  143.294313][ T8175] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.943'.
[  143.400884][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'.
[  143.407824][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'.
[  143.495328][ T8181] netlink: 'syz.3.945': attribute type 10 has an invalid length.
[  143.498674][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.521945][ T8181] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.213254][ T8181] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  144.432805][ T8193] xt_policy: neither incoming nor outgoing policy selected
[  144.524076][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'.
[  144.729486][ T8211] netlink: 'syz.3.959': attribute type 21 has an invalid length.
[  144.732392][ T8211] netlink: 'syz.3.959': attribute type 1 has an invalid length.
[  144.734846][ T8211] netlink: 144 bytes leftover after parsing attributes in process `syz.3.959'.
[  144.960053][ T8230] sock: sock_timestamping_bind_phc: sock not bind to device
[  145.198179][ T5850] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  145.198425][ T5850] Bluetooth: hci3: connection err: -111
[  145.352211][ T8259] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.982'.
[  145.543948][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.185895][ T8286] tap0: tun_chr_ioctl cmd 1074025678
[  146.188271][ T8286] tap0: group set to 0
[  147.744275][ T8348] netlink: 'syz.2.1019': attribute type 10 has an invalid length.
[  147.766980][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.777002][ T8348] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  147.996183][ T8367] netlink: 'syz.1.1028': attribute type 21 has an invalid length.
[  148.116738][ T8371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  148.122137][ T8371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.269455][ T8387] netlink: 'syz.2.1036': attribute type 1 has an invalid length.
[  148.335622][ T8389] syzkaller0: tun_chr_ioctl cmd 2147767506
[  148.407757][ T8391] netlink: 'syz.2.1038': attribute type 2 has an invalid length.
[  148.410181][ T8391] __nla_validate_parse: 14 callbacks suppressed
[  148.410190][ T8391] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.1038'.
[  148.535770][ T8396] erspan0 speed is unknown, defaulting to 1000
[  149.398501][ T8425] netlink: 'syz.2.1052': attribute type 1 has an invalid length.
[  149.401766][ T8425] net_ratelimit: 77 callbacks suppressed
[  149.401796][ T8425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.173976][ T8451] syzkaller0: entered promiscuous mode
[  150.176480][ T8451] syzkaller0: entered allmulticast mode
[  150.485592][ T8458] sctp: [Deprecated]: syz.1.1065 (pid 8458) Use of int in maxseg socket option.
[  150.485592][ T8458] Use struct sctp_assoc_value instead
[  150.573257][ T8461] netlink: 'syz.1.1066': attribute type 13 has an invalid length.
[  150.576003][ T8461] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1066'.
[  150.658923][ T8456] veth1_macvtap: left promiscuous mode
[  150.660856][ T8456] macsec0: entered promiscuous mode
[  150.680758][ T8459] tap0: tun_chr_ioctl cmd 1074025677
[  150.683262][ T8459] tap0: linktype set to 0
[  150.810391][ T8468] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1069'.
[  150.815998][ T8467] netlink: 'syz.2.1068': attribute type 13 has an invalid length.
[  150.828695][ T8467] netlink: 'syz.2.1068': attribute type 58 has an invalid length.
[  150.830984][ T8467] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1068'.
[  150.919139][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[  150.976301][ T8481] netlink: 'syz.1.1070': attribute type 10 has an invalid length.
[  150.979248][ T8481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1070'.
[  150.983086][ T8481] ipvlan1: entered promiscuous mode
[  150.985031][ T8481] ipvlan1: entered allmulticast mode
[  150.986998][ T8481] veth0_vlan: entered allmulticast mode
[  150.993170][ T8481] bridge0: port 3(ipvlan1) entered blocking state
[  150.995544][ T8481] bridge0: port 3(ipvlan1) entered disabled state
[  151.004205][ T8481] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  151.014721][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'.
[  151.090751][ T8484] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  151.331231][ T8494] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1079'.
[  152.212535][ T8495] delete_channel: no stack
[  152.904625][ T8516] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1088'.
[  152.996444][ T8523] xt_time: unknown flags 0xf4
[  153.383045][ T8551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1105'.
[  153.806208][ T8564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1110'.
[  154.045663][ T8572] netlink: 'syz.3.1114': attribute type 10 has an invalid length.
[  154.069471][ T8572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1114'.
[  154.073815][ T8572] batadv0: entered promiscuous mode
[  154.076371][ T8572] batadv0: entered allmulticast mode
[  154.184785][ T8572] bridge0: port 3(batadv0) entered blocking state
[  154.201334][ T8572] bridge0: port 3(batadv0) entered disabled state
[  154.293079][ T8572] bridge0: port 3(batadv0) entered blocking state
[  154.296202][ T8572] bridge0: port 3(batadv0) entered forwarding state
[  154.448792][ T5875] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  154.452851][ T5875] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  154.511339][ T8588] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1121'.
[  154.620235][ T8596] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1125'.
[  154.762933][ T8601] netlink: 'syz.2.1127': attribute type 2 has an invalid length.
[  154.766826][ T8601] netlink: 'syz.2.1127': attribute type 1 has an invalid length.
[  154.772052][ T8601] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1127'.
[  154.776633][ T8601] block nbd5: not configured, cannot reconfigure
[  155.047090][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'.
[  155.095443][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'.
[  155.246643][ T8625] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  155.281065][ T8635] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1142'.
[  155.355878][ T8634] syzkaller0: entered promiscuous mode
[  155.360429][ T8634] syzkaller0: entered allmulticast mode
[  155.470999][ T8647] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1149'.
[  157.041447][ T8674] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1161'.
[  157.263743][ T8688] netlink: 'syz.2.1167': attribute type 11 has an invalid length.
[  157.334792][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.030019][ T8722] netlink: 'syz.1.1179': attribute type 1 has an invalid length.
[  158.040533][ T8722] netlink: 'syz.1.1179': attribute type 2 has an invalid length.
[  158.339693][ T8725] syz.2.1180 (8725) used greatest stack depth: 17576 bytes left
[  158.997207][ T8757] netlink: 'syz.3.1194': attribute type 17 has an invalid length.
[  159.014142][ T8762] openvswitch: netlink: IP tunnel dst address not specified
[  159.057580][ T8764] netlink: 'syz.2.1198': attribute type 7 has an invalid length.
[  159.112317][ T8768] _Z`Ԁ@S!: entered promiscuous mode
[  159.145876][ T8771] netlink: 'syz.1.1201': attribute type 12 has an invalid length.
[  159.152551][ T8771] __nla_validate_parse: 3 callbacks suppressed
[  159.152559][ T8771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1201'.
[  159.290774][ T5850] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  159.836679][ T8814] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1220'.
[  159.839587][ T8814] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1220'.
[  159.958511][ T8820] syzkaller0: entered promiscuous mode
[  159.961710][ T8820] syzkaller0: entered allmulticast mode
[  160.842230][ T8825] netlink: 'syz.1.1225': attribute type 1 has an invalid length.
[  160.844855][ T8825] netlink: 'syz.1.1225': attribute type 2 has an invalid length.
[  162.396474][ T8822] netlink: 'syz.3.1224': attribute type 29 has an invalid length.
[  162.399974][ T8847] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1234'.
[  162.461785][ T8849] raw_sendmsg: syz.3.1235 forgot to set AF_INET. Fix it!
[  162.484787][ T8849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1235'.
[  162.570905][ T8849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1235'.
[  163.083573][ T8849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1235'.
[  163.515922][ T8869] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1243'.
[  163.764328][ T8881] netlink: 'syz.1.1247': attribute type 33 has an invalid length.
[  163.766888][ T8881] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1247'.
[  163.787980][ T8881] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP)
[  163.844855][ T8881] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  163.854058][ T8883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1248'.
[  164.714104][ T8902] __nla_validate_parse: 2 callbacks suppressed
[  164.714115][ T8902] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1257'.
[  164.785584][ T8908] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1260'.
[  164.995459][ T8927] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1270'.
[  165.113760][ T8936] netlink: 'syz.3.1275': attribute type 28 has an invalid length.
[  165.116157][ T8936] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1275'.
[  165.167770][ T8942] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1277'.
[  165.669255][ T8968] netlink: 'syz.1.1288': attribute type 3 has an invalid length.
[  165.672291][ T8968] netlink: 'syz.1.1288': attribute type 3 has an invalid length.
[  165.675222][ T8968] netlink: 130500 bytes leftover after parsing attributes in process `syz.1.1288'.
[  165.744949][ T8973] netlink: 'syz.1.1290': attribute type 39 has an invalid length.
[  166.739022][ T8973] veth0_macvtap: left promiscuous mode
[  166.764602][ T8966] erspan0 speed is unknown, defaulting to 1000
[  167.003958][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'.
[  167.007046][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'.
[  167.014225][ T8982] netlink: 531 bytes leftover after parsing attributes in process `syz.1.1294'.
[  167.880718][ T9021] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1312'.
[  170.119255][ T9010] syz.2.1307: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  170.125627][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.2.1307 Not tainted syzkaller #0 PREEMPT(full) 
[  170.125640][ T9010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.125646][ T9010] Call Trace:
[  170.125651][ T9010]  <TASK>
[  170.125656][ T9010]  dump_stack_lvl+0x189/0x250
[  170.125671][ T9010]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.125680][ T9010]  ? __pfx__printk+0x10/0x10
[  170.125691][ T9010]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  170.125701][ T9010]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  170.125710][ T9010]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  170.125720][ T9010]  warn_alloc+0x214/0x310
[  170.125732][ T9010]  ? __pfx_warn_alloc+0x10/0x10
[  170.125744][ T9010]  ? __get_vm_area_node+0x28f/0x300
[  170.125752][ T9010]  ? hash_ipportip_create+0x358/0xfe0
[  170.125765][ T9010]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  170.125786][ T9010]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  170.125794][ T9010]  ? hash_ipportip_create+0x358/0xfe0
[  170.125805][ T9010]  ? __get_vm_area_node+0x28f/0x300
[  170.125813][ T9010]  ? hash_ipportip_create+0x358/0xfe0
[  170.125824][ T9010]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  170.125831][ T9010]  ? hash_ipportip_create+0x358/0xfe0
[  170.125845][ T9010]  ? do_syscall_64+0xfa/0x3b0
[  170.125868][ T9010]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  170.125902][ T9010]  ? rcu_is_watching+0x15/0xb0
[  170.125913][ T9010]  ? hash_ipportip_create+0x358/0xfe0
[  170.125923][ T9010]  ? hash_ipportip_create+0x358/0xfe0
[  170.125933][ T9010]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  170.125941][ T9010]  ? hash_ipportip_create+0x358/0xfe0
[  170.125951][ T9010]  ? hash_ipportip_create+0x2fe/0xfe0
[  170.125963][ T9010]  hash_ipportip_create+0x358/0xfe0
[  170.125977][ T9010]  ? __nla_parse+0x40/0x60
[  170.125987][ T9010]  ? __pfx_hash_ipportip_create+0x10/0x10
[  170.125999][ T9010]  ip_set_create+0xa97/0x1940
[  170.126007][ T9010]  ? ip_set_create+0x4a2/0x1940
[  170.126020][ T9010]  ? __pfx_ip_set_create+0x10/0x10
[  170.126043][ T9010]  nfnetlink_rcv_msg+0xb4d/0x1130
[  170.126052][ T9010]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  170.126069][ T9010]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  170.126076][ T9010]  ? kasan_save_free_info+0x46/0x50
[  170.126100][ T9010]  ? perf_trace_preemptirq_template+0xa3/0x340
[  170.126111][ T9010]  ? kasan_quarantine_put+0x3d/0x220
[  170.126129][ T9010]  netlink_rcv_skb+0x208/0x470
[  170.126140][ T9010]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  170.126149][ T9010]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  170.126163][ T9010]  ? bpf_lsm_capable+0x9/0x20
[  170.126170][ T9010]  ? security_capable+0x7e/0x2e0
[  170.126182][ T9010]  nfnetlink_rcv+0x26a/0x2520
[  170.126192][ T9010]  ? __dev_queue_xmit+0x1d79/0x3b50
[  170.126204][ T9010]  ? __dev_queue_xmit+0x27b/0x3b50
[  170.126216][ T9010]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  170.126224][ T9010]  ? __pfx___dev_queue_xmit+0x10/0x10
[  170.126237][ T9010]  ? ref_tracker_free+0x63a/0x7d0
[  170.126246][ T9010]  ? __asan_memcpy+0x40/0x70
[  170.126256][ T9010]  ? __pfx_ref_tracker_free+0x10/0x10
[  170.126263][ T9010]  ? __skb_clone+0x63/0x7a0
[  170.126277][ T9010]  ? __skb_clone+0x483/0x7a0
[  170.126290][ T9010]  ? skb_clone+0x246/0x3a0
[  170.126298][ T9010]  ? __netlink_deliver_tap+0x807/0x850
[  170.126307][ T9010]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.126319][ T9010]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.126332][ T9010]  netlink_unicast+0x82f/0x9e0
[  170.126344][ T9010]  ? __pfx_netlink_unicast+0x10/0x10
[  170.126353][ T9010]  ? netlink_sendmsg+0x642/0xb30
[  170.126362][ T9010]  ? skb_put+0x11b/0x210
[  170.126373][ T9010]  netlink_sendmsg+0x805/0xb30
[  170.126387][ T9010]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.126397][ T9010]  ? aa_sock_msg_perm+0xf1/0x1d0
[  170.126408][ T9010]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  170.126417][ T9010]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.126427][ T9010]  __sock_sendmsg+0x21c/0x270
[  170.126438][ T9010]  ____sys_sendmsg+0x505/0x830
[  170.126451][ T9010]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.126466][ T9010]  ? import_iovec+0x74/0xa0
[  170.126479][ T9010]  ___sys_sendmsg+0x21f/0x2a0
[  170.126491][ T9010]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.126518][ T9010]  ? __fget_files+0x2a/0x420
[  170.126526][ T9010]  ? __fget_files+0x3a0/0x420
[  170.126538][ T9010]  __x64_sys_sendmsg+0x19b/0x260
[  170.126551][ T9010]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  170.126566][ T9010]  ? rcu_is_watching+0x15/0xb0
[  170.126575][ T9010]  ? do_syscall_64+0xbe/0x3b0
[  170.126586][ T9010]  do_syscall_64+0xfa/0x3b0
[  170.126595][ T9010]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.126604][ T9010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.126611][ T9010]  ? exc_page_fault+0x9f/0xf0
[  170.126621][ T9010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.126628][ T9010] RIP: 0033:0x7f5ded98ec29
[  170.126637][ T9010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.126644][ T9010] RSP: 002b:00007f5dee781038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.126653][ T9010] RAX: ffffffffffffffda RBX: 00007f5dedbd5fa0 RCX: 00007f5ded98ec29
[  170.126658][ T9010] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  170.126662][ T9010] RBP: 00007f5deda11e41 R08: 0000000000000000 R09: 0000000000000000
[  170.126667][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.126671][ T9010] R13: 00007f5dedbd6038 R14: 00007f5dedbd5fa0 R15: 00007ffed1e69068
[  170.126683][ T9010]  </TASK>
[  170.126686][ T9010] Mem-Info:
[  170.309957][ T9010] active_anon:13346 inactive_anon:47 isolated_anon:0
[  170.309957][ T9010]  active_file:3020 inactive_file:44616 isolated_file:0
[  170.309957][ T9010]  unevictable:1768 dirty:169 writeback:0
[  170.309957][ T9010]  slab_reclaimable:9912 slab_unreclaimable:68267
[  170.309957][ T9010]  mapped:18046 shmem:2451 pagetables:1141
[  170.309957][ T9010]  sec_pagetables:0 bounce:0
[  170.309957][ T9010]  kernel_misc_reclaimable:0
[  170.309957][ T9010]  free:230110 free_pcp:24988 free_cma:0
[  170.324532][ T9010] Node 0 active_anon:20608kB inactive_anon:68kB active_file:11180kB inactive_file:152012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38128kB dirty:556kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4540kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  170.333944][ T9010] Node 1 active_anon:32776kB inactive_anon:120kB active_file:900kB inactive_file:26452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34056kB dirty:120kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6940kB pagetables:2228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  170.343613][ T9010] Node 0 DMA free:14976kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:384kB free_cma:0kB
[  170.352455][ T9010] lowmem_reserve[]: 0 811 811 811 811
[  170.354338][ T9010] Node 0 DMA32 free:66828kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20608kB inactive_anon:68kB active_file:11180kB inactive_file:152012kB unevictable:3536kB writepending:556kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:37800kB local_pcp:20660kB free_cma:0kB
[  170.364995][ T9010] lowmem_reserve[]: 0 0 0 0 0
[  170.366425][ T9010] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  170.376489][ T9010] lowmem_reserve[]: 0 0 854 854 854
[  170.383953][ T9010] Node 1 Normal free:379952kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32776kB inactive_anon:120kB active_file:900kB inactive_file:26452kB unevictable:3536kB writepending:120kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:61952kB local_pcp:19008kB free_cma:0kB
[  170.394657][ T9010] lowmem_reserve[]: 0 0 0 0 0
[  170.396913][ T9010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (U) = 14976kB
[  170.401559][ T9010] Node 0 DMA32: 440*4kB (UME) 390*8kB (UME) 240*16kB (UME) 182*32kB (ME) 120*64kB (ME) 92*128kB (UME) 14*256kB (M) 7*512kB (UME) 1*1024kB (U) 4*2048kB (UM) 4*4096kB (U) = 66768kB
[  170.407319][ T9010] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  170.412951][ T9010] Node 1 Normal: 1173*4kB (UME) 595*8kB (UME) 461*16kB (UM) 10*32kB (M) 10*64kB (UME) 17*128kB (UME) 50*256kB (UME) 16*512kB (UME) 13*1024kB (UM) 7*2048kB (UM) 76*4096kB (UM) = 379900kB
[  170.419345][ T9010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  170.422551][ T9010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  170.425451][ T9010] 50087 total pagecache pages
[  170.426912][ T9010] 0 pages in swap cache
[  170.428620][ T9010] Free swap  = 124996kB
[  170.430241][ T9010] Total swap = 124996kB
[  170.431571][ T9010] 786301 pages RAM
[  170.432899][ T9010] 0 pages HighMem/MovableOnly
[  170.434654][ T9010] 241359 pages reserved
[  170.436154][ T9010] 0 pages cma reserved
[  170.922767][ T9054] netlink: 'syz.3.1323': attribute type 13 has an invalid length.
[  170.927778][ T9054] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1323'.
[  171.055358][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1329'.
[  171.320533][ T9078] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1336'.
[  171.427335][ T9091] netlink: 'syz.3.1339': attribute type 21 has an invalid length.
[  171.436308][ T9091] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.757255][ T9109] netlink: 'syz.3.1349': attribute type 1 has an invalid length.
[  174.760601][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'.
[  174.922359][ T9120] sctp: [Deprecated]: syz.2.1353 (pid 9120) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.922359][ T9120] Use struct sctp_sack_info instead
[  175.038995][ T9122] netlink: 'syz.3.1355': attribute type 10 has an invalid length.
[  176.717916][ T9155] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1365'.
[  176.717915][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.015897][ T9158] netlink: 'syz.1.1370': attribute type 21 has an invalid length.
[  177.229925][ T9163] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1371'.
[  177.476722][ T9165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.482314][ T9165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.495593][ T9165] bridge0: port 3(batadv0) entered disabled state
[  177.516525][ T9165] bridge0: port 3(batadv0) entered disabled state
[  178.028586][ T9186] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1380'.
[  178.032203][ T9186] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1380'.
[  178.035769][ T9186] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1380'.
[  178.728697][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1020926746 wd_nsec: 1020926665
[  178.887112][ T9207] netlink: 'syz.1.1387': attribute type 3 has an invalid length.
[  178.900583][ T9207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1387'.
[  179.377038][ T9239] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1403'.
[  179.536088][ T9241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1404'.
[  180.519067][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'.
[  180.664955][ T9297] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  180.779907][ T9302] openvswitch: netlink: Invalid VLAN frame
[  180.951421][ T9297] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  182.877402][ T9341] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1446'.
[  184.660099][ T9384] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  184.664510][ T9384] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.003233][ T9389] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  185.105741][ T9397] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  185.113047][ T9395] openvswitch: netlink: Flow actions attr not present in new flow.
[  185.117494][ T9395] syzkaller0: entered promiscuous mode
[  185.443180][ T9403] Set syz1 is full, maxelem 6117 reached
[  185.558757][ T9410] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1479'.
[  185.681076][ T9419] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1483'.
[  187.183427][ T9439] netlink: 'syz.3.1491': attribute type 11 has an invalid length.
[  187.187202][ T9439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1491'.
[  187.375505][ T9448] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1496'.
[  189.429466][ T9471] netlink: 'syz.1.1507': attribute type 1 has an invalid length.
[  189.432978][ T9471] netlink: 376 bytes leftover after parsing attributes in process `syz.1.1507'.
[  189.770476][ T9493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.180264][ T9514] netlink: 'syz.3.1526': attribute type 10 has an invalid length.
[  190.327534][ T9523] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1529'.
[  190.907125][ T5237] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  191.109125][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  191.114558][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[  191.287520][ T9561] netlink: 'syz.3.1542': attribute type 21 has an invalid length.
[  191.290597][ T9561] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1542'.
[  191.293888][ T9561] netlink: 'syz.3.1542': attribute type 5 has an invalid length.
[  191.296406][ T9561] netlink: 'syz.3.1542': attribute type 6 has an invalid length.
[  191.299788][ T9561] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1542'.
[  191.704880][ T9578] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1550'.
[  193.225013][ T9593] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1557'.
[  193.232411][ T9593] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1557'.
[  193.362317][ T9609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1563'.
[  193.637220][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'.
[  193.749988][ T9625] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1570'.
[  193.753326][ T9625] netlink: zone id is out of range
[  193.755333][ T9625] netlink: zone id is out of range
[  193.757463][ T9625] netlink: zone id is out of range
[  193.761871][ T9625] netlink: zone id is out of range
[  193.763932][ T9625] netlink: zone id is out of range
[  193.765722][ T9625] netlink: zone id is out of range
[  193.767333][ T9625] netlink: zone id is out of range
[  193.778054][ T9625] netlink: zone id is out of range
[  193.780117][ T9625] netlink: zone id is out of range
[  194.152837][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.154856][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.602508][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1594'.
[  194.607257][ T9677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1594'.
[  194.627508][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1594'.
[  195.069142][ T9697] netlink: 'syz.2.1602': attribute type 21 has an invalid length.
[  195.291042][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'.
[  195.294866][ T9715] net_ratelimit: 15 callbacks suppressed
[  195.294879][ T9715] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  195.753562][ T9740] IPv6: NLM_F_CREATE should be specified when creating new route
[  196.815826][ T9788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.861567][ T9792] netlink: 376 bytes leftover after parsing attributes in process `syz.1.1646'.
[  196.865540][ T9792] netlink: 376 bytes leftover after parsing attributes in process `syz.1.1646'.
[  196.878727][ T9788] netdevsim netdevsim3 : renamed from netdevsim0
[  197.388223][ T9822] netlink: 'syz.1.1659': attribute type 21 has an invalid length.
[  197.923052][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'.
[  197.928301][ T9846] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1671'.
[  197.945603][ T9847] siw: device registration error -23
[  198.237537][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'.
[  198.714803][ T9865] netlink: 'syz.2.1674': attribute type 10 has an invalid length.
[  199.110512][ T9876] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1683'.
[  200.071166][ T9900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1691'.
[  200.235432][ T9918] sock: sock_set_timeout: `syz.1.1703' (pid 9918) tries to set negative timeout
[  200.353288][ T9925] netlink: 'syz.3.1706': attribute type 2 has an invalid length.
[  200.367947][ T9925] netlink: 'syz.3.1706': attribute type 8 has an invalid length.
[  200.370914][ T9925] netlink: 'syz.3.1706': attribute type 9 has an invalid length.
[  200.374044][ T9925] netlink: 'syz.3.1706': attribute type 10 has an invalid length.
[  200.377618][ T9925] netlink: 'syz.3.1706': attribute type 11 has an invalid length.
[  200.381040][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'.
[  200.405295][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'.
[  200.481450][ T9933] netlink: 'syz.3.1710': attribute type 10 has an invalid length.
[  200.500449][ T9933] bridge0: port 3() entered blocking state
[  200.504525][ T9933] bridge0: port 3() entered disabled state
[  200.511519][ T9933] netdevsim netdevsim3 : entered allmulticast mode
[  200.612603][ T9933] netdevsim netdevsim3 : entered promiscuous mode
[  201.516289][ T9947] netlink: 'syz.3.1714': attribute type 2 has an invalid length.
[  201.520015][ T9947] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1714'.
[  201.523764][ T9947] nbd: must specify a device to reconfigure
[  202.979799][ T9963] 0: renamed from bond_slave_1 (while UP)
[  202.986517][ T9974] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1726'.
[  202.995976][ T9974] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1726'.
[  204.374177][T10013] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1741'.
[  204.494120][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.498590][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.502801][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.506708][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.510738][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.580492][T10017] erspan0 speed is unknown, defaulting to 1000
[  204.924494][T10017] chnl_net:caif_netlink_parms(): no params data found
[  204.943531][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'.
[  205.032258][T10017] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.035263][T10017] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.039596][T10017] bridge_slave_0: entered allmulticast mode
[  205.043909][T10017] bridge_slave_0: entered promiscuous mode
[  205.050468][T10017] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.053560][T10017] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.056506][T10017] bridge_slave_1: entered allmulticast mode
[  205.067443][T10017] bridge_slave_1: entered promiscuous mode
[  205.109343][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.121366][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.164115][T10017] team0: Port device team_slave_0 added
[  205.169265][T10017] team0: Port device team_slave_1 added
[  205.210445][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.213221][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.223620][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.230638][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.233346][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.244276][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.326284][T10017] hsr_slave_0: entered promiscuous mode
[  205.330027][T10017] hsr_slave_1: entered promiscuous mode
[  205.333037][T10017] debugfs: 'hsr0' already exists in 'hsr'
[  205.335393][T10017] Cannot create hsr debugfs directory
[  205.526092][T10017] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  205.535902][T10017] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  205.543144][T10017] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  205.553549][T10017] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  205.597160][T10017] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.600179][T10017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.603205][T10017] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.606053][T10017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.693213][T10017] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.719464][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.724301][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.750880][T10017] 8021q: adding VLAN 0 to HW filter on device team0
[  205.780532][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.783480][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.797790][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.800866][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.963102][T10017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.130032][T10017] veth0_vlan: entered promiscuous mode
[  206.149120][T10017] veth1_vlan: entered promiscuous mode
[  206.199107][T10017] veth0_macvtap: entered promiscuous mode
[  206.205207][T10017] veth1_macvtap: entered promiscuous mode
[  206.226896][T10017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.243155][T10017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.257412][ T5678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.267043][ T5678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.279494][ T5678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.295551][ T5678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.547977][   T54] Bluetooth: hci1: command tx timeout
[  207.053599][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.059973][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.078178][T10098] netlink: 'syz.1.1767': attribute type 10 has an invalid length.
[  207.112381][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.115831][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.180104][T10097] netlink: 'syz.3.1768': attribute type 11 has an invalid length.
[  207.192006][T10097] netlink: 8420 bytes leftover after parsing attributes in process `syz.3.1768'.
[  207.270426][T10108] cgroup2: Unknown parameter 'u'
[  207.447162][T10120] netlink: 'syz.4.1778': attribute type 5 has an invalid length.
[  207.453304][T10120] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1778'.
[  207.487091][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1779'.
[  207.564320][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1779'.
[  207.625597][T10132] netlink: 294 bytes leftover after parsing attributes in process `syz.3.1783'.
[  207.755035][T10137] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1785'.
[  208.088549][T10159] netlink: 'syz.4.1795': attribute type 21 has an invalid length.
[  208.359355][T10168] bpf: Bad value for 'mode'
[  208.628753][   T54] Bluetooth: hci1: command tx timeout
[  209.092950][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'.
[  209.923510][T10213] netlink: 'syz.4.1819': attribute type 21 has an invalid length.
[  209.926465][T10213] netlink: 'syz.4.1819': attribute type 15 has an invalid length.
[  209.931446][T10213] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1819'.
[  209.935349][T10213] IPv6: NLM_F_CREATE should be specified when creating new route
[  209.940906][T10213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.944225][T10213] IPv6: NLM_F_CREATE should be set when creating new route
[  209.947445][T10213] IPv6: NLM_F_CREATE should be set when creating new route
[  209.949947][T10213] IPv6: NLM_F_CREATE should be set when creating new route
[  210.195241][T10219] netlink: 'syz.1.1821': attribute type 21 has an invalid length.
[  210.371311][T10232] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1826'.
[  210.707848][   T54] Bluetooth: hci1: command tx timeout
[  212.787793][   T54] Bluetooth: hci1: command tx timeout
[  213.464125][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1831'.
[  213.474131][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1831'.
[  213.574367][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'.
[  213.974403][T10267] netlink: 'syz.4.1845': attribute type 29 has an invalid length.
[  214.005670][T10271] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1846'.
[  214.244523][T10281] netlink: 'syz.1.1850': attribute type 11 has an invalid length.
[  214.247335][T10281] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1850'.
[  215.162447][T10291] netlink: 'syz.3.1854': attribute type 10 has an invalid length.
[  215.380600][T10291] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  215.541037][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'.
[  215.544805][T10302] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  215.548408][T10302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.753752][T10310] netlink: 'syz.1.1863': attribute type 2 has an invalid length.
[  215.757180][T10310] netlink: 'syz.1.1863': attribute type 1 has an invalid length.
[  215.770843][T10310] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1863'.
[  215.774534][T10310] nbd: couldn't find a device at index 16
[  216.184411][T10332] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1874'.
[  216.187212][T10332] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1874'.
[  216.380707][T10352] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1884'.
[  216.743320][T10379] netlink: 'syz.4.1896': attribute type 10 has an invalid length.
[  217.181123][   T54] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  217.216641][   T54] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  217.337797][T10403] netlink: 'syz.1.1907': attribute type 32 has an invalid length.
[  217.786869][T10436] netlink: 'syz.1.1923': attribute type 1 has an invalid length.
[  217.792971][T10436] netlink: 'syz.1.1923': attribute type 2 has an invalid length.
[  217.962979][T10448] netlink: 'syz.4.1929': attribute type 10 has an invalid length.
[  219.079656][T10475] netdevsim netdevsim3 : left allmulticast mode
[  219.082710][T10475] netdevsim netdevsim3 : left promiscuous mode
[  219.087054][T10475] bridge0: port 3() entered disabled state
[  219.118693][T10479] netlink: 'syz.1.1941': attribute type 4 has an invalid length.
[  219.121300][T10479] netlink: 'syz.1.1941': attribute type 1 has an invalid length.
[  219.134180][T10479] __nla_validate_parse: 9 callbacks suppressed
[  219.134190][T10479] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1941'.
[  219.146997][T10475] bridge_slave_1: left allmulticast mode
[  219.153528][T10475] bridge_slave_1: left promiscuous mode
[  219.158467][T10475] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.190008][T10484] netlink: 'syz.1.1944': attribute type 10 has an invalid length.
[  219.197600][T10475] bridge_slave_0: left allmulticast mode
[  219.201530][T10475] bridge_slave_0: left promiscuous mode
[  219.205416][T10475] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.308748][T10484] macvlan0: entered promiscuous mode
[  219.348654][T10484] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  219.861982][ T5678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.941093][T10516] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1956'.
[  220.001770][ T5678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.076864][ T5678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.142818][ T5678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.269940][ T5678] bridge_slave_1: left allmulticast mode
[  220.274914][ T5678] bridge_slave_1: left promiscuous mode
[  220.282237][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.293165][ T5678] bridge_slave_0: left allmulticast mode
[  220.295467][ T5678] bridge_slave_0: left promiscuous mode
[  220.299287][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.465473][ T1095] smc: removing ib device syz2
[  220.698316][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.709977][ T5678] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  220.716160][ T5678] bond0 (unregistering): Released all slaves
[  220.732025][ T5912] erspan0 speed is unknown, defaulting to 1000
[  220.735506][  T976] erspan0 speed is unknown, defaulting to 1000
[  220.743824][ T5912] syz2: Port: 1 Link DOWN
[  221.042173][T10563] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  221.070477][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1974'.
[  221.343238][T10571] netlink: 'syz.3.1977': attribute type 10 has an invalid length.
[  221.346617][T10571] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1977'.
[  221.828279][ T5850] Bluetooth: hci3: command 0x0406 tx timeout
[  221.983711][T10595] sctp: [Deprecated]: syz.4.1987 (pid 10595) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.983711][T10595] Use struct sctp_sack_info instead
[  223.214125][T10640] netlink: 'syz.1.1999': attribute type 25 has an invalid length.
[  223.327212][T10644] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  223.366284][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'.
[  223.370287][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2005'.
[  223.373999][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2005'.
[  223.381786][T10644] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  223.553683][T10662] tap0: tun_chr_ioctl cmd 1074025672
[  223.556022][T10662] tap0: ignored: set checksum enabled
[  223.659663][T10671] netlink: set zone limit has 8 unknown bytes
[  223.701001][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2016'.
[  223.993693][T10689] netlink: 'syz.3.2023': attribute type 9 has an invalid length.
[  223.996233][T10689] netlink: 211924 bytes leftover after parsing attributes in process `syz.3.2023'.
[  224.044515][T10693] netlink: 'syz.3.2024': attribute type 3 has an invalid length.
[  224.064584][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'.
[  224.069919][T10693] netlink: 'syz.3.2024': attribute type 3 has an invalid length.
[  224.182104][   T54] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  224.212005][T10705] __nla_validate_parse: 2 callbacks suppressed
[  224.212022][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2029'.
[  224.224821][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2029'.
[  225.397579][T10729] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2037'.
[  226.015811][T10761] netlink: 182 bytes leftover after parsing attributes in process `syz.1.2050'.
[  226.054597][T10760] netlink: 'syz.1.2050': attribute type 10 has an invalid length.
[  226.156694][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'.
[  226.197077][   T54] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  226.257206][T10760] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  226.267013][T10763] : entered promiscuous mode
[  226.695155][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2061'.
[  227.707512][T10816] delete_channel: no stack
[  227.910616][T10824] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  228.005972][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2078'.
[  228.099707][T10835] netlink: 'syz.4.2081': attribute type 64 has an invalid length.
[  228.153796][T10840] netlink: 'syz.4.2083': attribute type 21 has an invalid length.
[  228.210141][T10843] siw: device registration error -23
[  228.238059][   T54] Bluetooth: hci1: command tx timeout
[  228.383192][T10849] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2087'.
[  228.387273][T10849] netlink: zone id is out of range
[  228.402824][T10849] netlink: zone id is out of range
[  228.407463][T10849] netlink: get zone limit has 8 unknown bytes
[  228.531938][T10860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2092'.
[  228.541558][T10860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2092'.
[  228.734400][T10867] netlink: 'syz.4.2095': attribute type 11 has an invalid length.
[  228.802183][T10874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.960139][T10894] __nla_validate_parse: 2 callbacks suppressed
[  229.960155][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2103'.
[  230.020531][ T9547] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  230.023954][ T9547] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  230.027248][ T9547] CPU: 1 UID: 0 PID: 9547 Comm: kworker/u11:4 Not tainted syzkaller #0 PREEMPT(full) 
[  230.027260][ T9547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.027266][ T9547] Workqueue: hci3 hci_rx_work
[  230.027282][ T9547] Call Trace:
[  230.027287][ T9547]  <TASK>
[  230.027292][ T9547]  dump_stack_lvl+0x189/0x250
[  230.027307][ T9547]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.027317][ T9547]  ? __pfx__printk+0x10/0x10
[  230.027333][ T9547]  ? kernfs_path_from_node+0x250/0x290
[  230.027344][ T9547]  ? kernfs_path_from_node+0x2f/0x290
[  230.027357][ T9547]  sysfs_create_dir_ns+0x259/0x280
[  230.027368][ T9547]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  230.027379][ T9547]  ? do_raw_spin_unlock+0x4d/0x240
[  230.027392][ T9547]  kobject_add_internal+0x59f/0xb40
[  230.027409][ T9547]  kobject_add+0x155/0x220
[  230.027423][ T9547]  ? __pfx_kobject_add+0x10/0x10
[  230.027433][ T9547]  ? _raw_spin_unlock+0x28/0x50
[  230.027444][ T9547]  ? get_device_parent+0x366/0x3a0
[  230.027458][ T9547]  device_add+0x408/0xb50
[  230.027471][ T9547]  hci_conn_add_sysfs+0xd5/0x1e0
[  230.027487][ T9547]  le_conn_complete_evt+0xc3a/0x1220
[  230.027506][ T9547]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  230.027516][ T9547]  ? __pfx_bt_warn+0x10/0x10
[  230.027522][ T9547]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  230.027535][ T9547]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  230.027544][ T9547]  ? skb_pull_data+0xfb/0x200
[  230.027555][ T9547]  hci_le_conn_complete_evt+0x187/0x450
[  230.027569][ T9547]  hci_event_packet+0x78f/0x1200
[  230.027580][ T9547]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  230.027592][ T9547]  ? __pfx_hci_event_packet+0x10/0x10
[  230.027601][ T9547]  ? kcov_remote_start+0x4d3/0x7f0
[  230.027612][ T9547]  ? lockdep_hardirqs_on+0x90/0x150
[  230.027623][ T9547]  ? hci_send_to_monitor+0xe2/0x570
[  230.027635][ T9547]  hci_rx_work+0x46a/0xe80
[  230.027648][ T9547]  ? process_scheduled_works+0x9ef/0x17b0
[  230.027657][ T9547]  process_scheduled_works+0xae1/0x17b0
[  230.027698][ T9547]  ? __pfx_process_scheduled_works+0x10/0x10
[  230.027717][ T9547]  worker_thread+0x8a0/0xda0
[  230.027727][ T9547]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  230.027742][ T9547]  ? __kthread_parkme+0x7b/0x200
[  230.027756][ T9547]  kthread+0x711/0x8a0
[  230.027769][ T9547]  ? __pfx_worker_thread+0x10/0x10
[  230.027777][ T9547]  ? __pfx_kthread+0x10/0x10
[  230.027788][ T9547]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.027797][ T9547]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.027805][ T9547]  ? __pfx_kthread+0x10/0x10
[  230.027816][ T9547]  ret_from_fork+0x439/0x7d0
[  230.027826][ T9547]  ? __pfx_ret_from_fork+0x10/0x10
[  230.027838][ T9547]  ? __switch_to_asm+0x39/0x70
[  230.027846][ T9547]  ? __switch_to_asm+0x33/0x70
[  230.027855][ T9547]  ? __pfx_kthread+0x10/0x10
[  230.027865][ T9547]  ret_from_fork_asm+0x1a/0x30
[  230.027886][ T9547]  </TASK>
[  230.128533][ T9547] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  230.133539][ T9547] Bluetooth: hci3: failed to register connection device
[  230.317525][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  231.109645][T10922] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  231.333453][T10934] sit0: entered promiscuous mode
[  231.558150][T10954] netlink: 'syz.4.2130': attribute type 5 has an invalid length.
[  232.602069][T11014] netlink: 'syz.4.2152': attribute type 27 has an invalid length.
[  232.605234][T11014] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2152'.
[  233.643821][T11081] netlink: 'syz.1.2178': attribute type 10 has an invalid length.
[  233.647985][T11081] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  233.710454][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2180'.
[  233.752515][T11093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'.
[  233.825273][T11099] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  233.875614][T11099] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  234.296988][T11104] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  234.389850][T11124] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2197'.
[  234.564369][T11124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.577585][T11124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.604264][T11124] bond0 (unregistering): Released all slaves
[  236.819314][T11231] netlink: 'syz.4.2247': attribute type 11 has an invalid length.
[  236.822771][T11233] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2243'.
[  236.823584][T11231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2247'.
[  237.001633][T11239] netlink: 'syz.4.2249': attribute type 1 has an invalid length.
[  237.191056][T11222] delete_channel: no stack
[  237.398500][T11259] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2258'.
[  237.408805][T11259] netlink: 'syz.4.2258': attribute type 4 has an invalid length.
[  237.679015][T11274] netlink: 'syz.3.2264': attribute type 1 has an invalid length.
[  237.898992][T11287] netlink: 'syz.4.2269': attribute type 21 has an invalid length.
[  238.728485][T11325] netlink: 'syz.4.2286': attribute type 11 has an invalid length.
[  238.731598][T11325] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.2286'.
[  239.491771][T11323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.996588][T11346] netlink: 16370 bytes leftover after parsing attributes in process `syz.3.2295'.
[  240.031747][T11349] sctp: [Deprecated]: syz.1.2293 (pid 11349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.031747][T11349] Use struct sctp_sack_info instead
[  240.504507][T11368] netlink: 'syz.4.2304': attribute type 1 has an invalid length.
[  240.507363][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'.
[  240.760556][T11377] syzkaller0: entered promiscuous mode
[  240.762794][T11377] syzkaller0: entered allmulticast mode
[  242.080272][T11388] netlink: 'syz.4.2312': attribute type 1 has an invalid length.
[  242.101638][T11388] netlink: 'syz.4.2312': attribute type 2 has an invalid length.
[  244.521248][T11397] netlink: 'syz.3.2315': attribute type 13 has an invalid length.
[  244.524380][T11397] netlink: 'syz.3.2315': attribute type 17 has an invalid length.
[  244.577456][T11397] gretap0: refused to change device tx_queue_len
[  244.585037][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2313'.
[  244.589496][T11397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  244.634607][T11400] netlink: 'syz.1.2316': attribute type 21 has an invalid length.
[  244.637170][T11400] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2316'.
[  245.181090][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2322'.
[  245.185131][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2322'.
[  245.242204][T11412] tap0: tun_chr_ioctl cmd 21731
[  245.285857][T11412] tap0: tun_chr_ioctl cmd 2147767521
[  245.807660][T11444] netlink: 'syz.1.2335': attribute type 10 has an invalid length.
[  245.833373][T11444] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  247.120405][T11469] C: renamed from team_slave_0 (while UP)
[  247.513505][T11480] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.516703][T11480] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.528363][T11480] bridge0: entered allmulticast mode
[  247.554780][T11480] bridge_slave_1: left allmulticast mode
[  247.560613][T11480] bridge_slave_1: left promiscuous mode
[  247.563868][T11480] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.575722][T11480] bridge_slave_0: left allmulticast mode
[  247.581293][T11480] bridge_slave_0: left promiscuous mode
[  247.584076][T11480] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.978881][T11496] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  248.165919][T11508] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  248.214424][T11512] netlink: 'syz.1.2361': attribute type 6 has an invalid length.
[  248.217601][T11512] netlink: 'syz.1.2361': attribute type 1 has an invalid length.
[  248.228114][T11512] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2361'.
[  248.404000][T11519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.427475][ T5909] syzkaller0: tun_net_xmit 76
[  249.430690][ T5909] syzkaller0: tun_net_xmit 48
[  249.436503][T11552] syzkaller0: create flow: hash 2050240752 index 1
[  249.448082][  T976] syzkaller0: tun_net_xmit 76
[  249.481627][T11551] syzkaller0: delete flow: hash 2050240752 index 1
[  249.898329][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2381'.
[  250.050559][T11563] netlink: 'syz.1.2383': attribute type 3 has an invalid length.
[  250.054464][T11563] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2383'.
[  252.629195][T11627] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2411'.
[  252.632723][T11627] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2411'.
[  252.635959][T11627] netlink: 'syz.4.2411': attribute type 6 has an invalid length.
[  252.638946][T11627] netlink: 'syz.4.2411': attribute type 5 has an invalid length.
[  252.641507][T11627] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2411'.
[  253.333336][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2429'.
[  253.337505][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2429'.
[  253.342066][T11674] netlink: 'syz.4.2433': attribute type 3 has an invalid length.
[  253.342086][T11674] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2433'.
[  253.536786][T11682] syzkaller1: tun_chr_ioctl cmd 1074025677
[  253.540863][T11682] syzkaller1: linktype set to 780
[  253.568379][T11682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2437'.
[  253.573576][T11682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2437'.
[  253.586155][T11683] vxcan1: entered allmulticast mode
[  254.153520][T11711] netlink: 'syz.3.2450': attribute type 29 has an invalid length.
[  254.358252][T11717] sit0: left promiscuous mode
[  254.363835][T11717] sit0: entered allmulticast mode
[  254.370536][T11717] sit0: entered promiscuous mode
[  255.520281][T11766] __nla_validate_parse: 3 callbacks suppressed
[  255.520298][T11766] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2465'.
[  256.101885][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  256.104595][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  256.192808][T11766] bond0: (slave macvlan0): Releasing backup interface
[  256.350820][T11777] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2470'.
[  256.354535][T11777] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  256.622663][T11792] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2477'.
[  256.903830][T11803] netlink: 'syz.4.2482': attribute type 10 has an invalid length.
[  256.915749][T11803] macvlan0: entered allmulticast mode
[  257.099078][T11818] openvswitch: netlink: Duplicate or invalid key (type 0).
[  257.102151][T11818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.195800][T11826] netlink: 'syz.1.2493': attribute type 10 has an invalid length.
[  257.219707][T11826] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  257.238432][T11826] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  257.247605][T11826] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  258.201484][T11862] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2508'.
[  259.425528][T11887] netlink: 'syz.3.2517': attribute type 1 has an invalid length.
[  259.435048][T11887] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2517'.
[  260.771399][T11916] netlink: 'syz.4.2531': attribute type 12 has an invalid length.
[  260.774685][T11916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2531'.
[  261.321524][T11942] netlink: 'syz.4.2541': attribute type 10 has an invalid length.
[  261.625457][T11949] openvswitch: netlink: IPv6 tunnel dst address is zero
[  261.814454][T11958] netlink: 'syz.4.2547': attribute type 28 has an invalid length.
[  261.817952][T11958] netlink: 'syz.4.2547': attribute type 29 has an invalid length.
[  261.820876][T11958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2547'.
[  261.976803][T11961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2548'.
[  262.637351][T11977] dummy0: entered allmulticast mode
[  263.161493][T12013] pim6reg1: entered allmulticast mode
[  263.394397][T12035] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2583'.
[  263.420740][T12037] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2582'.
[  263.436317][T12039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2584'.
[  263.444833][T12039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2584'.
[  263.673812][T12061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2595'.
[  263.742009][T12067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2593'.
[  264.724543][T12072] netlink: 'syz.1.2600': attribute type 23 has an invalid length.
[  264.820904][T12079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2603'.
[  264.876087][T12084] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  266.100206][T12130] syzkaller0: entered promiscuous mode
[  266.102524][T12130] syzkaller0: entered allmulticast mode
[  267.806491][T12141] netlink: 'syz.4.2628': attribute type 21 has an invalid length.
[  267.812488][T12141] __nla_validate_parse: 7 callbacks suppressed
[  267.812504][T12141] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.2628'.
[  267.890907][T12146] netlink: 'syz.3.2631': attribute type 7 has an invalid length.
[  267.967391][T12155] bpf: Bad value for 'mode'
[  268.065816][T12161] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2634'.
[  268.148100][T12162] netlink: 'syz.4.2638': attribute type 49 has an invalid length.
[  268.360934][T12172] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2642'.
[  268.479250][T12182] netlink: 'syz.3.2647': attribute type 27 has an invalid length.
[  268.482373][T12182] netlink: 'syz.3.2647': attribute type 4 has an invalid length.
[  268.485521][T12182] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2647'.
[  269.744554][T12202] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2656'.
[  270.596683][T12236] netlink: 'syz.3.2667': attribute type 5 has an invalid length.
[  270.604418][T12236] netlink: 'syz.3.2667': attribute type 5 has an invalid length.
[  270.661273][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2668'.
[  271.044176][T12257] netlink: 'syz.1.2677': attribute type 10 has an invalid length.
[  271.071482][T12257] geneve0: entered promiscuous mode
[  271.398773][T12257] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  271.981471][T12288] netlink: 'syz.3.2691': attribute type 1 has an invalid length.
[  272.036104][T12292] tQ6\bY4: renamed from lo (while UP)
[  272.119068][T12294] syzkaller0: entered promiscuous mode
[  272.123693][T12294] syzkaller0: entered allmulticast mode
[  273.589359][T12324] netlink: 'syz.1.2710': attribute type 27 has an invalid length.
[  273.592773][T12324] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2710'.
[  273.678825][T12334] netlink: 'syz.1.2714': attribute type 6 has an invalid length.
[  274.765752][T12361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2726'.
[  274.771697][T12361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2726'.
[  274.919471][T12368] netlink: 'syz.4.2726': attribute type 21 has an invalid length.
[  274.925882][T12368] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2726'.
[  274.926668][T12372] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2731'.
[  274.938056][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2731'.
[  274.947305][T12368] netlink: 'syz.4.2726': attribute type 4 has an invalid length.
[  274.986925][T12368] netlink: 'syz.4.2726': attribute type 5 has an invalid length.
[  274.997938][T12368] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2726'.
[  275.815991][T12428] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2755'.
[  275.824099][T12423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2755'.
[  277.013599][T12447] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2766'.
[  277.045064][T12451] netlink: 'syz.1.2767': attribute type 12 has an invalid length.
[  277.191035][T12462] netlink: 'syz.3.2773': attribute type 4 has an invalid length.
[  277.364293][T12473] netlink: 'syz.3.2778': attribute type 11 has an invalid length.
[  277.367083][T12473] netlink: 'syz.3.2778': attribute type 11 has an invalid length.
[  279.184734][T12522] __nla_validate_parse: 4 callbacks suppressed
[  279.184745][T12522] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2800'.
[  279.260924][T12529] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2804'.
[  279.352823][T12536] netlink: 'syz.4.2807': attribute type 10 has an invalid length.
[  279.359645][T12533] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2805'.
[  279.364768][T12536] veth1_vlan: entered allmulticast mode
[  279.401319][T12536] team0: Device veth1_vlan failed to register rx_handler
[  279.786054][T12545] netlink: 'syz.3.2810': attribute type 29 has an invalid length.
[  279.817518][T12545] netlink: 'syz.3.2810': attribute type 29 has an invalid length.
[  282.094322][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'.
[  283.184455][T12612] sit0: left promiscuous mode
[  283.903396][T12623] netlink: 'syz.4.2842': attribute type 12 has an invalid length.
[  283.906287][T12623] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2842'.
[  285.203366][T12633] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2847'.
[  285.902020][T12637] netlink: 'syz.4.2849': attribute type 28 has an invalid length.
[  285.905671][T12637] netlink: 'syz.4.2849': attribute type 3 has an invalid length.
[  285.917933][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2849'.
[  285.970590][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2851'.
[  286.260523][T12663] siw: device registration error -23
[  286.264968][T12667] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2861'.
[  286.269825][T12667] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2861'.
[  286.277374][T12667] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2861'.
[  286.516762][T12682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2868'.
[  286.532585][T12682] netlink: 'syz.1.2868': attribute type 1 has an invalid length.
[  286.610995][T12688] netlink: 'syz.3.2871': attribute type 33 has an invalid length.
[  286.614278][T12688] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2871'.
[  287.073179][T12696] delete_channel: no stack
[  287.141246][T12708] netlink: 'syz.1.2879': attribute type 10 has an invalid length.
[  287.316880][T12708] team0 (unregistering): Port device team_slave_0 removed
[  287.324097][T12708] team0 (unregistering): Port device team_slave_1 removed
[  287.455591][T12721] netlink: 'syz.1.2883': attribute type 12 has an invalid length.
[  287.462151][T12721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2883'.
[  287.609315][T12736] netlink: 'syz.1.2890': attribute type 29 has an invalid length.
[  287.634547][T12736] netlink: 'syz.1.2890': attribute type 29 has an invalid length.
[  287.645633][T12734] option changes via remount are deprecated (pid=12733 comm=syz.3.2889)
[  290.695181][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2893'.
[  290.700351][T12745] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2893'.
[  291.434436][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  291.441121][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  291.445464][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  291.452120][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  291.455595][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  291.615104][T12792] netlink: 'syz.4.2916': attribute type 4 has an invalid length.
[  291.619352][T12792] netlink: 'syz.4.2916': attribute type 4 has an invalid length.
[  291.622442][T12792] netlink: 199756 bytes leftover after parsing attributes in process `syz.4.2916'.
[  291.739044][T12784] chnl_net:caif_netlink_parms(): no params data found
[  291.824976][T12807] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2921'.
[  291.860872][T12784] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.863677][T12784] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.866123][T12784] bridge_slave_0: entered allmulticast mode
[  291.869466][T12784] bridge_slave_0: entered promiscuous mode
[  291.873431][T12784] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.875660][T12784] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.880022][T12784] bridge_slave_1: entered allmulticast mode
[  291.882788][T12784] bridge_slave_1: entered promiscuous mode
[  291.943389][T12784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.957102][T12784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.021925][T12784] team0: Port device team_slave_0 added
[  292.027172][T12784] team0: Port device team_slave_1 added
[  292.093268][T12784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.095980][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.111200][T12784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.117145][T12784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.120922][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.133586][T12784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.217234][T12784] hsr_slave_0: entered promiscuous mode
[  292.221094][T12784] hsr_slave_1: entered promiscuous mode
[  292.224097][T12784] debugfs: 'hsr0' already exists in 'hsr'
[  292.226504][T12784] Cannot create hsr debugfs directory
[  292.436986][T12784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.545613][T12784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.699443][T12784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.750361][T12825] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2929'.
[  292.804575][T12784] bond0: (slave netdevsim0): Releasing backup interface
[  292.812701][T12784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.000794][T12784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  293.006691][T12784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  293.020725][T12784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  293.027194][T12784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  293.044759][T12829] netlink: 'syz.4.2931': attribute type 16 has an invalid length.
[  293.051915][T12829] netlink: 'syz.4.2931': attribute type 3 has an invalid length.
[  293.054886][T12829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2931'.
[  293.055686][T12817] infiniband syz!: set active
[  293.061188][T12817] infiniband syz!: added team_slave_0
[  293.102598][T12817] RDS/IB: syz!: added
[  293.104318][T12817] smc: adding ib device syz! with port count 1
[  293.111664][T12817] smc:    ib device syz! port 1 has pnetid 
[  293.165550][T12784] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.196833][T12784] 8021q: adding VLAN 0 to HW filter on device team0
[  293.217341][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.220302][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.251197][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.253476][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.291160][T12784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  293.433974][T12784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.481451][T12784] veth0_vlan: entered promiscuous mode
[  293.494483][T12784] veth1_vlan: entered promiscuous mode
[  293.507882][ T5850] Bluetooth: hci0: command tx timeout
[  293.530004][T12784] veth0_macvtap: entered promiscuous mode
[  293.542219][T12784] veth1_macvtap: entered promiscuous mode
[  293.553755][T12784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.570666][T12784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.597186][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.602286][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.605303][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.638194][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.667011][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.672542][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.700572][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.703136][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.788061][T12860] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2939'.
[  293.804004][T12861] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2940'.
[  293.876582][T12869] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2944'.
[  293.887291][T12869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2944'.
[  293.944250][T12873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.794636][T12904] netlink: 'syz.1.2956': attribute type 39 has an invalid length.
[  295.362656][T12919] netlink: 'syz.4.2963': attribute type 11 has an invalid length.
[  295.422746][T12922] netlink: 'syz.4.2965': attribute type 1 has an invalid length.
[  295.588042][ T5850] Bluetooth: hci0: command tx timeout
[  296.485922][T12950] netlink: 'syz.1.2978': attribute type 21 has an invalid length.
[  297.668525][ T5850] Bluetooth: hci0: command tx timeout
[  297.699976][T12999] __nla_validate_parse: 1 callbacks suppressed
[  297.699993][T12999] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2996'.
[  297.747025][T13003] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.2998'.
[  297.826622][T13003] netlink: 'syz.4.2998': attribute type 2 has an invalid length.
[  297.843917][T13005] syzkaller1: tun_chr_ioctl cmd 2147767521
[  297.945950][T13009] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3002'.
[  297.992966][T13009] netlink: 'syz.4.3002': attribute type 21 has an invalid length.
[  298.021777][T13009] netlink: 'syz.4.3002': attribute type 10 has an invalid length.
[  298.718366][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.722491][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.725996][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.731685][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.735390][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.026892][T13025] chnl_net:caif_netlink_parms(): no params data found
[  299.169530][T13051] netlink: 'syz.4.3019': attribute type 10 has an invalid length.
[  299.171920][T13051] netlink: 'syz.4.3019': attribute type 19 has an invalid length.
[  299.174517][T13051] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.3019'.
[  299.769214][T13025] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.772087][T13025] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.774411][T13025] bridge_slave_0: entered allmulticast mode
[  299.778015][T13025] bridge_slave_0: entered promiscuous mode
[  299.784994][T13025] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.787167][T13025] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.791333][T13025] bridge_slave_1: entered allmulticast mode
[  299.794314][T13025] bridge_slave_1: entered promiscuous mode
[  299.835289][T13025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.841980][T13025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.875998][T13025] team0: Port device team_slave_0 added
[  299.882505][T13025] team0: Port device team_slave_1 added
[  299.912047][T13025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.914118][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.924082][T13025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.929425][T13025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.932044][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.944940][T13025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.949545][T13057] netlink: 1018 bytes leftover after parsing attributes in process `syz.4.3022'.
[  299.986598][T13025] hsr_slave_0: entered promiscuous mode
[  299.990006][T13025] hsr_slave_1: entered promiscuous mode
[  299.994827][T13025] debugfs: 'hsr0' already exists in 'hsr'
[  299.996706][T13025] Cannot create hsr debugfs directory
[  300.045299][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'.
[  300.177368][T13025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.243701][T13025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.312677][T13025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.371815][T13025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.509604][T13025] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  300.516452][T13025] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  300.524762][T13025] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  300.533196][T13025] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  300.656289][T13025] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.685158][T13025] 8021q: adding VLAN 0 to HW filter on device team0
[  300.700110][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.702993][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.713169][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.716087][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.788519][   T54] Bluetooth: hci0: command tx timeout
[  300.925073][T13025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.984469][T13025] veth0_vlan: entered promiscuous mode
[  301.014718][T13025] veth1_vlan: entered promiscuous mode
[  301.062457][T13025] veth0_macvtap: entered promiscuous mode
[  301.068708][T13084] openvswitch: netlink: EtherType 50a is less than min 600
[  301.077498][T13025] veth1_macvtap: entered promiscuous mode
[  301.119757][T13025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.135479][T13025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.187036][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.193893][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.200686][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.209536][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.345321][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.353150][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.375956][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.390885][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.499922][T13098] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3033'.
[  301.717378][T13110] delete_channel: no stack
[  301.769077][T13111] netlink: 'syz.4.3038': attribute type 21 has an invalid length.
[  301.772540][T13111] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3038'.
[  302.313689][T13136] netlink: 'syz.4.3050': attribute type 1 has an invalid length.
[  302.580826][T13143] netlink: 'syz.3.3053': attribute type 3 has an invalid length.
[  302.869721][   T54] Bluetooth: hci0: command tx timeout
[  303.032128][T13159] netlink: 'syz.1.3060': attribute type 10 has an invalid length.
[  303.035215][T13159] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3060'.
[  303.220887][T13167] netlink: 'syz.4.3064': attribute type 7 has an invalid length.
[  303.699460][T13182] syzkaller0: entered promiscuous mode
[  303.701941][T13182] syzkaller0: entered allmulticast mode
[  304.274460][T13184] netlink: 'syz.4.3072': attribute type 21 has an invalid length.
[  304.953932][   T54] Bluetooth: hci0: command tx timeout
[  305.190501][T13184] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3072'.
[  305.338114][T13193] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3076'.
[  305.457313][T13202] netlink: 'syz.3.3080': attribute type 5 has an invalid length.
[  305.530084][T13206] netlink: 'syz.4.3082': attribute type 14 has an invalid length.
[  305.533864][T13206] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3082'.
[  305.728224][T13216] netlink: 'syz.4.3087': attribute type 14 has an invalid length.
[  306.756558][T13276] netlink: 'syz.1.3114': attribute type 10 has an invalid length.
[  306.760409][T13276] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3114'.
[  306.806827][T13278] warn_alloc: 1 callbacks suppressed
[  306.806895][T13278] syz.3.3113: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  306.832161][T13278] CPU: 0 UID: 0 PID: 13278 Comm: syz.3.3113 Not tainted syzkaller #0 PREEMPT(full) 
[  306.832200][T13278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.832210][T13278] Call Trace:
[  306.832217][T13278]  <TASK>
[  306.832225][T13278]  dump_stack_lvl+0x189/0x250
[  306.832250][T13278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.832268][T13278]  ? __pfx__printk+0x10/0x10
[  306.832289][T13278]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  306.832306][T13278]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  306.832324][T13278]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  306.832348][T13278]  warn_alloc+0x214/0x310
[  306.832365][T13278]  ? stack_depot_save_flags+0x40/0x860
[  306.832384][T13278]  ? __pfx_warn_alloc+0x10/0x10
[  306.832401][T13278]  ? kasan_save_track+0x4f/0x80
[  306.832423][T13278]  ? xskq_create+0x56/0x170
[  306.832438][T13278]  ? xsk_init_queue+0xb0/0x110
[  306.832451][T13278]  ? xsk_setsockopt+0x57b/0x8d0
[  306.832464][T13278]  ? do_sock_setsockopt+0x17c/0x1b0
[  306.832483][T13278]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  306.832501][T13278]  ? do_syscall_64+0xfa/0x3b0
[  306.832517][T13278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.832538][T13278]  __vmalloc_node_range_noprof+0x125/0x12f0
[  306.832576][T13278]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  306.832596][T13278]  ? __kasan_kmalloc+0x93/0xb0
[  306.832611][T13278]  vmalloc_user_noprof+0xad/0xf0
[  306.832626][T13278]  ? xskq_create+0xbf/0x170
[  306.832642][T13278]  xskq_create+0xbf/0x170
[  306.832661][T13278]  xsk_init_queue+0xb0/0x110
[  306.832678][T13278]  xsk_setsockopt+0x57b/0x8d0
[  306.832696][T13278]  ? __pfx_xsk_setsockopt+0x10/0x10
[  306.832711][T13278]  ? __pfx_aa_sk_perm+0x10/0x10
[  306.832729][T13278]  ? __fget_files+0x2a/0x420
[  306.832739][T13278]  ? aa_sock_opt_perm+0xff/0x1b0
[  306.832756][T13278]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  306.832772][T13278]  ? __pfx_xsk_setsockopt+0x10/0x10
[  306.832786][T13278]  do_sock_setsockopt+0x17c/0x1b0
[  306.832804][T13278]  __x64_sys_setsockopt+0x13f/0x1b0
[  306.832826][T13278]  do_syscall_64+0xfa/0x3b0
[  306.832844][T13278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.832856][T13278]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  306.832875][T13278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.832889][T13278] RIP: 0033:0x7f2926d8ec29
[  306.832903][T13278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.832916][T13278] RSP: 002b:00007f2927b62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  306.832932][T13278] RAX: ffffffffffffffda RBX: 00007f2926fd6090 RCX: 00007f2926d8ec29
[  306.832943][T13278] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a
[  306.832950][T13278] RBP: 00007f2926e11e41 R08: 0000000000000004 R09: 0000000000000000
[  306.832959][T13278] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  306.832968][T13278] R13: 00007f2926fd6128 R14: 00007f2926fd6090 R15: 00007ffe489d1e28
[  306.832991][T13278]  </TASK>
[  306.833047][T13278] Mem-Info:
[  306.902076][T13278] active_anon:13123 inactive_anon:0 isolated_anon:0
[  306.902076][T13278]  active_file:9292 inactive_file:44678 isolated_file:0
[  306.902076][T13278]  unevictable:1768 dirty:252 writeback:0
[  306.902076][T13278]  slab_reclaimable:10768 slab_unreclaimable:77252
[  306.902076][T13278]  mapped:17982 shmem:2421 pagetables:1240
[  306.902076][T13278]  sec_pagetables:0 bounce:0
[  306.902076][T13278]  kernel_misc_reclaimable:0
[  306.902076][T13278]  free:252362 free_pcp:17919 free_cma:0
[  307.006546][T13278] Node 0 active_anon:19572kB inactive_anon:0kB active_file:26536kB inactive_file:152180kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34128kB dirty:616kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4944kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  307.020976][T13278] Node 1 active_anon:33056kB inactive_anon:0kB active_file:10632kB inactive_file:26532kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37800kB dirty:392kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7824kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  307.032924][   T54] Bluetooth: hci0: command tx timeout
[  307.043355][T13278] Node 0 DMA free:14592kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:768kB local_pcp:384kB free_cma:0kB
[  307.056519][T13278] lowmem_reserve[]: 0 811 811 811 811
[  307.060816][T13278] Node 0 DMA32 free:200696kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19708kB inactive_anon:0kB active_file:26536kB inactive_file:152180kB unevictable:3536kB writepending:616kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:34820kB local_pcp:18652kB free_cma:0kB
[  307.062656][T13286] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3118'.
[  307.072030][T13278] lowmem_reserve[]: 0 0 0 0 0
[  307.079819][T13286] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3118'.
[  307.086385][T13278] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  307.097192][T13278] lowmem_reserve[]: 0 0 854 854 854
[  307.099801][T13278] Node 1 Normal free:335284kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33056kB inactive_anon:0kB active_file:10632kB inactive_file:26532kB unevictable:3536kB writepending:392kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36172kB local_pcp:20652kB free_cma:0kB
[  307.112862][T13278] lowmem_reserve[]: 0 0 0 0 0
[  307.114989][T13278] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 0*256kB 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14592kB
[  307.120981][T13278] Node 0 DMA32: 1646*4kB (UME) 446*8kB (UME) 57*16kB (UME) 298*32kB (UM) 182*64kB (UME) 94*128kB (UME) 85*256kB (UM) 75*512kB (UM) 44*1024kB (UM) 13*2048kB (U) 6*4096kB (U) = 200696kB
[  307.130306][T13278] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  307.148659][T13278] Node 1 Normal: 345*4kB (UME) 146*8kB (UME) 136*16kB (UME) 79*32kB (UM) 49*64kB (UME) 72*128kB (UM) 84*256kB (UM) 26*512kB (UM) 8*1024kB (UME) 5*2048kB (UME) 64*4096kB (UM) = 334996kB
[  307.159952][T13278] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  307.164333][T13278] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  307.172686][T13278] 56391 total pagecache pages
[  307.175851][T13278] 0 pages in swap cache
[  307.179583][T13278] Free swap  = 124996kB
[  307.181346][T13278] Total swap = 124996kB
[  307.183576][T13278] 786301 pages RAM
[  307.185811][T13278] 0 pages HighMem/MovableOnly
[  307.211047][T13278] 241359 pages reserved
[  307.213193][T13278] 0 pages cma reserved
[  308.064220][T13327] netlink: 'syz.3.3137': attribute type 21 has an invalid length.
[  308.067294][T13327] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3137'.
[  308.136102][T13331] sock: sock_timestamping_bind_phc: sock not bind to device
[  311.126367][T13364] tc_dump_action: action bad kind
[  311.587207][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3163'.
[  311.594028][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3163'.
[  311.611913][T13389] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3164'.
[  311.842650][T13394] netlink: 'syz.1.3163': attribute type 21 has an invalid length.
[  311.845865][T13394] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3163'.
[  311.866815][T13394] netlink: 'syz.1.3163': attribute type 4 has an invalid length.
[  311.877265][T13394] netlink: 'syz.1.3163': attribute type 5 has an invalid length.
[  311.897513][T13394] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3163'.
[  312.044863][T13403] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  312.347252][T13405] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3171'.
[  313.479750][T13422] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3178'.
[  313.499325][T13424] netlink: 'syz.4.3179': attribute type 21 has an invalid length.
[  313.502534][T13424] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3179'.
[  313.563254][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'.
[  313.635915][T13432] netlink: 'syz.1.3183': attribute type 3 has an invalid length.
[  313.642892][T13432] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3183'.
[  313.781827][T13437] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  313.840368][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'.
[  313.950575][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'.
[  314.012167][T13449] xt_l2tp: wrong L2TP version: 0
[  314.146182][T13461] netlink: 'syz.1.3197': attribute type 10 has an invalid length.
[  314.157304][T13463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3196'.
[  314.171113][T13461] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  314.351163][T13473] xt_l2tp: missing protocol rule (udp|l2tpip)
[  314.990841][T13502] netlink: 'syz.3.3215': attribute type 3 has an invalid length.
[  315.179771][T13505] netlink: 'syz.3.3216': attribute type 11 has an invalid length.
[  315.182856][T13505] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3216'.
[  315.235236][T13503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.686377][T13515] netlink: 'syz.4.3220': attribute type 11 has an invalid length.
[  315.946442][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3223'.
[  316.132598][T13536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3229'.
[  316.455961][T13512] delete_channel: no stack
[  317.033115][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  317.035548][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.401746][T13604] netlink: 'syz.4.3256': attribute type 39 has an invalid length.
[  318.093225][T13627] xt_HMARK: spi-set and port-set can't be combined
[  318.497489][T13651] __nla_validate_parse: 6 callbacks suppressed
[  318.497506][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'.
[  318.505239][T13651] erspan0 speed is unknown, defaulting to 1000
[  318.611527][T13657] netlink: 'syz.4.3279': attribute type 29 has an invalid length.
[  318.616322][T13657] netlink: 'syz.4.3279': attribute type 29 has an invalid length.
[  318.912796][T13668] netlink: 211576 bytes leftover after parsing attributes in process `syz.3.3283'.
[  322.602321][T13731] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3312'.
[  322.681209][T13737] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3316'.
[  323.082188][T13756] netlink: 'syz.3.3322': attribute type 1 has an invalid length.
[  323.088288][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'.
[  323.440212][T13775] IPv6: Can't replace route, no match found
[  325.011524][T13804] netlink: 'syz.3.3342': attribute type 1 has an invalid length.
[  325.619556][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'.
[  326.142498][T13835] netlink: 'syz.4.3357': attribute type 1 has an invalid length.
[  326.145513][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'.
[  326.265667][T13847] nftables ruleset with unbound chain
[  326.701203][T13862] syzkaller0: entered promiscuous mode
[  326.704122][T13862] syzkaller0: entered allmulticast mode
[  327.059098][T13883] netlink: 'syz.3.3378': attribute type 1 has an invalid length.
[  327.878601][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'.
[  327.882505][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'.
[  329.350111][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  329.396427][T13918] netlink: 'syz.4.3394': attribute type 7 has an invalid length.
[  329.417946][T13918] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3394'.
[  329.569954][T13925] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3397'.
[  331.696679][T13957] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3412'.
[  331.765607][T13959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3413'.
[  332.030896][T13972] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  332.034905][T13972] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  332.097967][T13974] netlink: 'syz.4.3419': attribute type 21 has an invalid length.
[  332.101286][T13974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3419'.
[  332.201385][T13975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  332.204718][T13975] IPv6: NLM_F_CREATE should be set when creating new route
[  332.207054][T13974] netlink: 'syz.4.3419': attribute type 5 has an invalid length.
[  332.207872][T13975] IPv6: NLM_F_CREATE should be set when creating new route
[  333.099069][   T54] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  333.167655][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3430'.
[  333.744713][T14030] netlink: 'syz.3.3445': attribute type 2 has an invalid length.
[  333.792097][T14032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3446'.
[  335.519762][T14059] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3459'.
[  335.635774][T14065] netlink: 'syz.3.3462': attribute type 3 has an invalid length.
[  335.920436][T14082] netlink: 'syz.3.3468': attribute type 4 has an invalid length.
[  335.936058][T14082] netlink: 'syz.3.3468': attribute type 10 has an invalid length.
[  335.941898][T14082] vlan0: entered allmulticast mode
[  335.943958][T14082] veth0_vlan: entered allmulticast mode
[  336.029982][T14082] team0: Port device vlan0 added
[  336.455613][T14097] netlink: 'syz.4.3474': attribute type 29 has an invalid length.
[  336.469335][T14097] netlink: 'syz.4.3474': attribute type 29 has an invalid length.
[  336.472229][T14097] netlink: 'syz.4.3474': attribute type 29 has an invalid length.
[  336.751284][T14108] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3477'.
[  336.846303][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3479'.
[  336.911407][T14123] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3483'.
[  337.109025][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  337.112668][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  337.116457][   T54] Bluetooth: hci1: hardware error 0x00
[  337.365538][T14135] hsr0: entered promiscuous mode
[  337.395224][T14137] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3489'.
[  338.507692][T14184] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3512'.
[  338.800478][T14193] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  338.908681][T14199] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3516'.
[  338.912091][T14199] tc_dump_action: action bad kind
[  338.986387][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'.
[  339.077595][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'.
[  339.082239][T14215] netlink: 'syz.4.3525': attribute type 3 has an invalid length.
[  339.188434][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  340.513847][T14269] netlink: 'syz.3.3545': attribute type 2 has an invalid length.
[  340.518362][T14269] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.3545'.
[  340.804508][T14278] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3549'.
[  341.100726][T14289] netlink: 'syz.4.3553': attribute type 21 has an invalid length.
[  342.575015][T14317] __nla_validate_parse: 2 callbacks suppressed
[  342.575026][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'.
[  342.673461][T14316] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3561'.
[  342.731631][T14322] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  342.816223][T14326] netlink: 'syz.4.3566': attribute type 3 has an invalid length.
[  342.819559][T14326] netlink: 'syz.4.3566': attribute type 1 has an invalid length.
[  342.822166][T14326] netlink: 'syz.4.3566': attribute type 2 has an invalid length.
[  342.824913][T14326] netlink: 198328 bytes leftover after parsing attributes in process `syz.4.3566'.
[  342.893365][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'.
[  343.733596][T14376] netlink: 'syz.3.3590': attribute type 10 has an invalid length.
[  343.740124][T14376] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3590'.
[  343.929255][T14386] netlink: 'syz.4.3594': attribute type 10 has an invalid length.
[  343.932588][T14386] hsr_slave_0: left promiscuous mode
[  343.935557][T14386] hsr_slave_1: left promiscuous mode
[  344.073032][T14392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3597'.
[  344.088262][T14397] netlink: 'syz.1.3600': attribute type 2 has an invalid length.
[  344.090680][T14397] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3600'.
[  344.450143][T14428] netlink: 'syz.4.3614': attribute type 1 has an invalid length.
[  344.493607][T14432] netlink: 'syz.4.3616': attribute type 29 has an invalid length.
[  344.504971][T14432] netlink: 'syz.4.3616': attribute type 29 has an invalid length.
[  344.511368][T14430] netlink: 'syz.3.3615': attribute type 10 has an invalid length.
[  344.514557][T14430] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3615'.
[  344.619630][T14430] team0: Port device vlan0 removed
[  344.688800][T14442] netlink: 'syz.4.3620': attribute type 10 has an invalid length.
[  344.927062][T14454] netlink: 'syz.1.3625': attribute type 39 has an invalid length.
[  344.971760][T14461] netlink: 'syz.4.3630': attribute type 32 has an invalid length.
[  345.415457][   T54] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6
[  345.930412][T14482] delete_channel: no stack
[  346.088832][T14481] delete_channel: no stack
[  346.411485][T14490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3641'.
[  347.373041][T14512] netlink: 'syz.1.3650': attribute type 29 has an invalid length.
[  347.844222][T14527] siw: device registration error -23
[  349.286403][T14542] netlink: 'syz.1.3663': attribute type 1 has an invalid length.
[  349.305470][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3663'.
[  349.882510][T14575] openvswitch: netlink: Flow key attr not present in new flow.
[  349.919234][T14582] netlink: 208192 bytes leftover after parsing attributes in process `syz.4.3682'.
[  349.922410][T14582] netlink: 'syz.4.3682': attribute type 1 has an invalid length.
[  349.925047][T14582] netlink: 'syz.4.3682': attribute type 2 has an invalid length.
[  350.015461][T14592] netlink: 'syz.4.3684': attribute type 21 has an invalid length.
[  350.020396][T14592] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3684'.
[  350.063833][T14595] sctp: [Deprecated]: syz.3.3683 (pid 14595) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.063833][T14595] Use struct sctp_sack_info instead
[  350.479460][T14612] netlink: 'syz.4.3693': attribute type 3 has an invalid length.
[  350.489831][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3694'.
[  350.493596][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3694'.
[  350.606588][T14622] netlink: 'syz.1.3698': attribute type 1 has an invalid length.
[  350.684873][T14627] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.3699'.
[  350.688614][T14627] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.3699'.
[  350.692355][T14627] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.3699'.
[  351.253380][T14650] syz!: rxe_newlink: already configured on team_slave_0
[  351.459303][T14669] netlink: 'syz.3.3719': attribute type 21 has an invalid length.
[  351.482164][T14669] netlink: 'syz.3.3719': attribute type 15 has an invalid length.
[  351.485763][T14669] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3719'.
[  351.497294][T14670] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3718'.
[  351.505459][T14669] IPv6: NLM_F_CREATE should be specified when creating new route
[  351.521307][T14669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  351.525004][T14669] IPv6: NLM_F_CREATE should be set when creating new route
[  351.529367][T14669] IPv6: NLM_F_CREATE should be set when creating new route
[  351.533679][T14669] IPv6: NLM_F_CREATE should be set when creating new route
[  354.171087][T14768] netlink: 'syz.4.3760': attribute type 11 has an invalid length.
[  354.989317][T14790] __nla_validate_parse: 4 callbacks suppressed
[  354.989367][T14790] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3767'.
[  355.344933][T14810] netlink: 'syz.3.3778': attribute type 6 has an invalid length.
[  355.347558][T14810] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3778'.
[  355.403493][T14814] netlink: 328 bytes leftover after parsing attributes in process `syz.3.3780'.
[  355.572605][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3783'.
[  355.577412][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3783'.
[  355.581883][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3783'.
[  355.715205][T14827] netlink: 'syz.3.3785': attribute type 10 has an invalid length.
[  355.870397][T14830] nft_compat: unsupported protocol 0
[  356.498166][T14827] team0 (unregistering): Port device team_slave_0 removed
[  356.511857][T14827] team0 (unregistering): Port device team_slave_1 removed
[  356.541267][   T47] syz!: Port: 1 Link DOWN
[  356.870418][T14850] netlink: 'syz.3.3795': attribute type 6 has an invalid length.
[  356.873528][T14850] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3795'.
[  356.926241][T14856] Dead loop on virtual device ip6_vti0, fix it urgently!
[  357.120248][T14865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3803'.
[  357.120543][T14867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.166746][T14871] netlink: 'syz.4.3805': attribute type 16 has an invalid length.
[  357.172228][T14871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3805'.
[  357.237430][T14877] netlink: 'syz.4.3808': attribute type 1 has an invalid length.
[  357.262541][T14880] netlink: 'syz.3.3809': attribute type 21 has an invalid length.
[  357.265536][T14880] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3809'.
[  357.551596][T14900] netlink: 'syz.4.3819': attribute type 10 has an invalid length.
[  360.612037][T14951] __nla_validate_parse: 4 callbacks suppressed
[  360.612049][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'.
[  360.617294][T14951] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3842'.
[  360.623550][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3842'.
[  360.830232][T14959] netlink: 'syz.4.3845': attribute type 2 has an invalid length.
[  360.832799][T14959] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3845'.
[  360.835664][T14959] nbd: must specify a device to reconfigure
[  360.887774][ T5678] unregister_netdevice: waiting for erspan0 to become free. Usage count = 2
[  360.890810][ T5678] ref_tracker: netdev@ffff8880285a2610 has 1/1 users at
[  360.890810][ T5678]      ib_device_set_netdev+0x31f/0x6d0
[  360.890810][ T5678]      rxe_register_device+0x1c7/0x310
[  360.890810][ T5678]      rxe_net_add+0x81/0x110
[  360.890810][ T5678]      rxe_newlink+0xdd/0x190
[  360.890810][ T5678]      nldev_newlink+0x4a5/0x5a0
[  360.890810][ T5678]      rdma_nl_rcv+0x6ae/0x980
[  360.890810][ T5678]      netlink_unicast+0x82f/0x9e0
[  360.890810][ T5678]      netlink_sendmsg+0x805/0xb30
[  360.890810][ T5678]      __sock_sendmsg+0x21c/0x270
[  360.890810][ T5678]      ____sys_sendmsg+0x505/0x830
[  360.890810][ T5678]      ___sys_sendmsg+0x21f/0x2a0
[  360.890810][ T5678]      __x64_sys_sendmsg+0x19b/0x260
[  360.890810][ T5678]      do_syscall_64+0xfa/0x3b0
[  360.890810][ T5678]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.890810][ T5678] 

VM DIAGNOSIS:
18:34:30  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002eaefd0
R8 =ffff8881068b0237 R9 =1ffff11020d16046 R10=dffffc0000000000 R11=ffffffff85504a80
R12=dffffc0000000000 R13=ffffffff99b0490c R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504afc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000007f5000 CR3=000000011ca70000 CR4=000006f0
DR0=0100000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff88811a7d0000 RBX=ffffc9000392f6c0 RCX=ffffc9000392f690 RDX=0000000000000000
RSI=ffff88811a7d0000 RDI=ffffc9000392f608 RBP=ffffc9000392f690 RSP=ffffc9000392f600
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000392f750 R11=ffffed1021e278e9
R12=ffff88811a7d0000 R13=ffff88801f812f80 R14=ffffffff81ac5140 R15=0000000000000000
RIP=ffffffff8172f944 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555565b5e500 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fed0ed056c0 CR3=000000003fb5a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2926e12e7b
XMM06=0000000000000000 00007f2926e12e75 XMM07=0000000000000000 00007f2926e12e89
XMM08=0000000000000000 00007f2926e12f0f XMM09=0000000000000000 00007f2926e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
