last executing test programs:

4m5.20378657s ago: executing program 2 (id=52):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4, 0x2}], 0x10, 0x4}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1c)

4m5.203429885s ago: executing program 2 (id=53):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56}, 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)

4m5.116972158s ago: executing program 2 (id=55):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x80087601, 0x0)

4m5.040201946s ago: executing program 2 (id=57):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000200000000000100000008000b4000000000090001"], 0xd8}}, 0x0)

4m5.039292513s ago: executing program 2 (id=59):
getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a381, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000001, 0xffffffffffffffff}, 0x8, 0x0, 0xfffffffe, 0x9, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f000000fe80)={0x0, 0x0, &(0x7f000000fe40)={&(0x7f000000fb40)=@migrate={0xa0, 0x21, 0x9, 0x70bd27, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x4e22, 0x2, 0x4e22, 0x6, 0x0, 0xa0, 0x80}, 0x6e6bb1}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x3c, 0x0, 0x0, 0x3507, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x882}, 0x4000000)

4m4.916885228s ago: executing program 2 (id=61):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x2, 0x0, 0x0, 0x0, 0x61a6a582, 0xa12, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffe00, 0x200}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x2d, 0x0, 0x88)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x23, 0x4, 0x41, 0x13, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x4004004)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

3m49.828611378s ago: executing program 32 (id=61):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x2, 0x0, 0x0, 0x0, 0x61a6a582, 0xa12, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffe00, 0x200}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x2d, 0x0, 0x88)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x23, 0x4, 0x41, 0x13, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x4004004)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

2m55.696128016s ago: executing program 1 (id=760):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002840)=ANY=[@ANYBLOB="4400000001010300000000000000000002000006300001802c0001801400030002020000000000000000000000000001090004"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x8d0)

2m55.625851618s ago: executing program 1 (id=761):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xc8a8, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000300), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

2m55.560968754s ago: executing program 1 (id=765):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}})

2m55.493240494s ago: executing program 1 (id=766):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)

2m55.492329659s ago: executing program 1 (id=768):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m55.390322826s ago: executing program 1 (id=770):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0xf0bd29, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24044002)

2m42.543706558s ago: executing program 0 (id=900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005440)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040000)

2m42.474956372s ago: executing program 0 (id=901):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1a0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)

2m42.415011136s ago: executing program 0 (id=902):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x101}, 0x230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m41.84334795s ago: executing program 0 (id=907):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110af0000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

2m41.753556366s ago: executing program 0 (id=909):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/41, 0x29}, 0x0)

2m41.365708966s ago: executing program 0 (id=911):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff0, '\x00', 0x0, r0, 0x4, 0x1, 0x5}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r1, &(0x7f00000006c0)="c9a47424b2429676c6612fd3469ffb437fbdda7b19e7845bd10064b44f0eed94910f4b89475b41941ade804554fb5231bd414746fc4471ed42d4688a5beb9f34c2f86a5930e2b06024b098acb813a06bf1c994"}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x18404, 0x0, 0xfffffffe, 0x1, 0x5, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0xc}}, 0x14}}, 0x24000004)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x950)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{0x0}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = syz_clone(0x1000, &(0x7f0000000100)="bd47cac8713124d5a610cebb167bc3973d2774e00c847f9f3bacf328ab09c4f79804f1f72234a8606835583d52838a64facf86bcb56fb0f0973a4b5afc8e05fe3d994a147d18db8e6c1aa68c7a7d887d3fc47abf7ec61e65fbdc47f33ddb54091a0649a2851dfa74f262047b88ee8d9f327c2b6161a316d9f1440c82d53f641e436fc00988c9f0f19d740aab6b75c70ca22aaa0c702a1e40074690476b776bd69c67dce1e9ad3471ba043634307b120851465d42280be7c62fa6b349fb4197879e3609f2dbe5290e77a37839a3", 0xcd, 0x0, &(0x7f0000000340), &(0x7f0000000380)="da49a0d1cc06130173a071f4cbb23fc5f322a372fd53c210a76c7d7d62614704ed9516766b86628d3e8d8206b92ea5ad542fb8f812a198ecf084fef6d8a6055b3b8198c3f0c1e307f99e59f99977e235ab5c39b3806cf94ac21e9216bb9b7c0ad472e7a28b27c4eb168146f9ce152eec23a15c3e7c743a4d4ffa657b2150e84e1d2f5234c0de5a6f2511559c5ac42de6f6e934b764848fe74b124dd106b9ebf5ef32e66ebf5d1db1cbf748b3ef7ab3edaae96582711144d591457698b3988bd99842a428e567a948cb45132d14b19d3a6f6c82")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r9, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0xfffffffffffff000], &(0x7f00000000c0)=[0x2], 0x7f, 0x1, 0x1, r10}}, 0x40)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m40.349142391s ago: executing program 33 (id=770):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0xf0bd29, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24044002)

2m26.360617297s ago: executing program 34 (id=911):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff0, '\x00', 0x0, r0, 0x4, 0x1, 0x5}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r1, &(0x7f00000006c0)="c9a47424b2429676c6612fd3469ffb437fbdda7b19e7845bd10064b44f0eed94910f4b89475b41941ade804554fb5231bd414746fc4471ed42d4688a5beb9f34c2f86a5930e2b06024b098acb813a06bf1c994"}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x18404, 0x0, 0xfffffffe, 0x1, 0x5, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0xc}}, 0x14}}, 0x24000004)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x950)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{0x0}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = syz_clone(0x1000, &(0x7f0000000100)="bd47cac8713124d5a610cebb167bc3973d2774e00c847f9f3bacf328ab09c4f79804f1f72234a8606835583d52838a64facf86bcb56fb0f0973a4b5afc8e05fe3d994a147d18db8e6c1aa68c7a7d887d3fc47abf7ec61e65fbdc47f33ddb54091a0649a2851dfa74f262047b88ee8d9f327c2b6161a316d9f1440c82d53f641e436fc00988c9f0f19d740aab6b75c70ca22aaa0c702a1e40074690476b776bd69c67dce1e9ad3471ba043634307b120851465d42280be7c62fa6b349fb4197879e3609f2dbe5290e77a37839a3", 0xcd, 0x0, &(0x7f0000000340), &(0x7f0000000380)="da49a0d1cc06130173a071f4cbb23fc5f322a372fd53c210a76c7d7d62614704ed9516766b86628d3e8d8206b92ea5ad542fb8f812a198ecf084fef6d8a6055b3b8198c3f0c1e307f99e59f99977e235ab5c39b3806cf94ac21e9216bb9b7c0ad472e7a28b27c4eb168146f9ce152eec23a15c3e7c743a4d4ffa657b2150e84e1d2f5234c0de5a6f2511559c5ac42de6f6e934b764848fe74b124dd106b9ebf5ef32e66ebf5d1db1cbf748b3ef7ab3edaae96582711144d591457698b3988bd99842a428e567a948cb45132d14b19d3a6f6c82")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r9, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0xfffffffffffff000], &(0x7f00000000c0)=[0x2], 0x7f, 0x1, 0x1, r10}}, 0x40)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m50.690401498s ago: executing program 4 (id=1432):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40080)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000280)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x98\x02\x00\x12\xdf^6T\xdf\xcd\x02\xc5\xaa\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01d\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96?\x80\xc8\x81\xd4!G \xf1O\xb3\xe7\x18n\x8e\xa4*\xa4\xa8/\xc2f\x904Ei\xa3\xee\xea\xd4s%?0\xf3\xa8\b\x1c\x9d\xce\xcb\xebn.\r\x80\xeeHZy\xac\x10p\xe8\xb8b\xe4w\x966Kn\x02\xd5\x9b\xf4\xd8\xd9\xc7\x83\t\x86q\x91\xe5\xfe?\x88#EE\xb1_\xe9j\xc9\xd3\xa0\x8e\x19\b\xccV\'w\xaf\x03PU\x8b\x8d \xcc\x06\xbfE,1')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x4040080)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x208d0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x541b, 0x0)
r5 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffff}, 0x0, 0x400000, 0x4, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m49.657743487s ago: executing program 4 (id=1446):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

1m49.657093578s ago: executing program 4 (id=1447):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m49.557909849s ago: executing program 4 (id=1450):
socket$kcm(0x21, 0x2, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000001000000004920800024000000001"], 0xfea1}}, 0x800)

1m49.342846109s ago: executing program 4 (id=1451):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xb}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800004c9e72660b2bbd7000fbfffffe1908000004000300"], 0x18}, 0x1, 0x0, 0x0, 0x40481f7}, 0x28060)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB="000000000100000000000000000000000000008677f95c9b2d263faa97cb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x64004002)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x773, 0x7fff}, 0x7602, 0x4, 0x0, 0x0, 0x5, 0x6, 0x3443, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000340), &(0x7f00000002c0)=""/27}, 0xfffffffffffffe96)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000340), 0x4)

1m48.999839228s ago: executing program 4 (id=1453):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

1m34.11937199s ago: executing program 35 (id=1453):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

1m25.058169551s ago: executing program 5 (id=1713):
socket$kcm(0x2b, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m24.086735598s ago: executing program 5 (id=1718):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x5}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x11}, 0x20)

1m24.034405813s ago: executing program 5 (id=1720):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffff7fd, [{0xa, 0x2, 0x2}]}, @var={0x6, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x5f, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x4c}, 0x28)

1m23.936346933s ago: executing program 5 (id=1724):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

1m23.884222556s ago: executing program 5 (id=1726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)

1m23.505207207s ago: executing program 5 (id=1731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m23.256205068s ago: executing program 36 (id=1731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m20.873355236s ago: executing program 6 (id=1758):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)=@newsa={0xf0, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x87, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc}, {0x2}, 0x70bd2b, 0x3504, 0xa, 0x1, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1m20.767598365s ago: executing program 6 (id=1759):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x4000040)

1m20.765428169s ago: executing program 6 (id=1760):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4)
sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="b822", 0x2}], 0x1}, 0x4015)
recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x80108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x805, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r7}, 0x38)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r8, 0x40047440, &(0x7f0000001200))
socket$kcm(0x11, 0x2, 0x0)

1m19.537415743s ago: executing program 6 (id=1766):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$unix(r0, &(0x7f0000000f40)={&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20048891}, 0x800)

1m19.453361669s ago: executing program 6 (id=1767):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x22, 0x0, &(0x7f0000000900)="80f8ad48cc0500000000000c08005ebd6c2135876ab68cc8f459e6b3dde1530f8ba7", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m19.332563237s ago: executing program 6 (id=1768):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0xa, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x77, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000d"], 0x28}, 0xfc40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=<r2=>0xffffffffffffffff], 0x50)
r3 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x1a}], 0x1}, 0x80)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0xfe, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c46, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8947, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"})
socket$kcm(0x10, 0x2, 0x10)
r7 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000400100100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x80)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x14)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
socket$kcm(0xa, 0x2, 0x73)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2800000033000701000000000000000010"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990)

1m4.29493971s ago: executing program 37 (id=1768):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0xa, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x77, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000d"], 0x28}, 0xfc40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=<r2=>0xffffffffffffffff], 0x50)
r3 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x1a}], 0x1}, 0x80)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0xfe, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c46, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8947, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"})
socket$kcm(0x10, 0x2, 0x10)
r7 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000400100100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x80)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x14)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
socket$kcm(0xa, 0x2, 0x73)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2800000033000701000000000000000010"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990)

28.357227188s ago: executing program 7 (id=2229):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa123, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000000)={r0})

28.238359689s ago: executing program 7 (id=2230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x1000, 0x4, 0x5, 0x0, 0xcc, 0x7fffffff, 0x7f, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x4000000000000001, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

28.090184336s ago: executing program 7 (id=2231):
r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)

27.989660622s ago: executing program 7 (id=2232):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x398d0ce, 0x0)
mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x4c000, 0x0)

27.897152352s ago: executing program 7 (id=2233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0xe8, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0xd4, 0xe, 0x0, 0x1, [@nested={0xd0, 0x52, 0x0, 0x1, [@generic="0292d09be5b9cb3573c6304d27c86d472d5cdfd86bce68f3aca5759cbb27b6a4d6c69442ba5f713c077b760f5d1542b594abced5536a9493fe60c588e31445d9a07c5c3c183573a05f25364683202c44041ce65e3455e90f4fc676049edf19394ff63167378a8f4210ff9f091be6366865195f8c0fe2ffe6ad22c086528df110143e5f50ee67db7ebe4aff468295aa2f9d288ebb19655d07c11578224505e6352a85693ec7c0f9a47dda3965e11549269335ad046b99b53457951a1c63f03a9c4a5282a4337cd7e91ab1e6a8"]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

26.68812111s ago: executing program 7 (id=2237):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

26.439935121s ago: executing program 38 (id=2237):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

19.983782694s ago: executing program 8 (id=2321):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {}]}]}, {0x0, [0x2e]}}, &(0x7f0000000080)=""/233, 0x3f, 0xf, 0x1}, 0x20)

19.907101512s ago: executing program 8 (id=2323):
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000200)=r0, 0x4)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

19.790175878s ago: executing program 8 (id=2325):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0)

19.690442336s ago: executing program 8 (id=2327):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)

19.620763621s ago: executing program 8 (id=2329):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0)

19.528284002s ago: executing program 8 (id=2331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000)

4.409285794s ago: executing program 39 (id=2331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000)

1.085868464s ago: executing program 9 (id=2482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c60133", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc4", 0x4b}], 0x4}, 0x20008b88)

937.072244ms ago: executing program 9 (id=2484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffb}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20004040)

798.706666ms ago: executing program 9 (id=2485):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x28}, 0x4004004)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x90)

727.237186ms ago: executing program 3 (id=2486):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, 0x0)

727.030758ms ago: executing program 9 (id=2487):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x4)

642.997228ms ago: executing program 3 (id=2488):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x345a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x105503, 0x5, 0xf, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa)

568.185264ms ago: executing program 9 (id=2489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x101, 0x0, 0x0, 0x2, 0xfffff271, 0xfffb, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x40040)

567.934682ms ago: executing program 3 (id=2490):
r0 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x3b, 0x5, 0x1, 0x10, 0x0, 0x9, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xe42000000000000, 0xa35}, 0x4400, 0x100a, 0x9, 0x0, 0x4, 0x3, 0x9f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x10, 0x1, 0x9, 0x9, 0x0, 0x6, 0x81049, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe, 0x0, @perf_config_ext={0x2, 0x7}, 0x101000, 0x80000001, 0x7fffffff, 0x7, 0x9c, 0x6, 0x40, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

428.514001ms ago: executing program 3 (id=2491):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

378.442022ms ago: executing program 3 (id=2492):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00"/50], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fefffff, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$kcm(0x10, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d010900500012804900f880ea72235c5013f75c5a9ea24e25e521b8ca4759fe9ee6cb7c486c434b5f73829b3c21fcb903ee93511b48757cff54a13dc0fce8da4e62d85a1f9fc33f9a53e4d4dcf8115ddf00000020010b"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)

12.278944ms ago: executing program 9 (id=2493):
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x2000, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4004000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@polexpire={0xc0, 0x1b, 0x10, 0x70bd25, 0x25dfdbfd, {{{@in6=@remote, @in6=@private2, 0x4e20, 0x4, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x16}, {0x7, 0xa8c, 0x200, 0x3, 0x7, 0x3, 0x4, 0x136c}, {0xc8, 0x7, 0x5, 0xffffffffffffff58}, 0xcc, 0x6e6bbf, 0x2, 0x0, 0x3, 0x1}, 0x6}}, 0xc0}, 0x1, 0x0, 0x0, 0x4044851}, 0x20000011)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000004700070127bd700000000000017c00000400fc800c0001800800", @ANYRES32=0x0, @ANYBLOB="08000280725eb86208"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x101841, 0x0)
fstat(r5, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010200000000000000000a00000005000400000000000900020073797a32000000000c000780080006403c90515b0500050002000000050001000700"], 0x58}, 0x1, 0x0, 0x0, 0x80820}, 0xc0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2c, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

0s ago: executing program 3 (id=2494):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000440)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0xff5c, 0x0, &(0x7f00000002c0)="0300000000000000ff9e14f086dd", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

ibutes in process `syz.1.40'.
[   77.886809][ T5811] C: renamed from veth1_to_team (while UP)
[   77.909611][ T5811] netlink: 'syz.0.42': attribute type 3 has an invalid length.
[   77.917278][ T5811] netlink: 'syz.0.42': attribute type 1 has an invalid length.
[   77.922800][ T5811] netlink: 116 bytes leftover after parsing attributes in process `syz.0.42'.
[   77.926503][ T5811] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   78.415218][ T5843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.57'.
[   78.538898][   T55] Bluetooth: hci0: command tx timeout
[   78.542083][ T4999] Bluetooth: hci1: command tx timeout
[   78.542112][ T5633] Bluetooth: hci2: command tx timeout
[   78.591524][ T5851] netlink: 3 bytes leftover after parsing attributes in process `syz.1.60'.
[   78.792803][ T5859] IPv6: NLM_F_CREATE should be specified when creating new route
[   79.156816][ T5871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'.
[   79.625999][ T5890] netlink: 'syz.0.79': attribute type 1 has an invalid length.
[   79.630288][ T5890] netlink: 'syz.0.79': attribute type 9 has an invalid length.
[   79.648862][ T5890] warning: `syz.0.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.699895][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[   79.866391][ T5896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.81'.
[   80.094249][ T5906] veth0_to_bond: default FDB implementation only supports local addresses
[   80.617175][ T5633] Bluetooth: hci1: command tx timeout
[   80.621560][ T5633] Bluetooth: hci0: command tx timeout
[   80.623752][ T5633] Bluetooth: hci2: command tx timeout
[   80.645157][ T4999] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[   82.434043][ T5992] netlink: 'syz.0.117': attribute type 21 has an invalid length.
[   82.458644][ T1114] wlan1: Trigger new scan to find an IBSS to join
[   85.224454][ T6071] veth0_macvtap: left promiscuous mode
[   86.098283][ T6071] syz.1.152 (6071) used greatest stack depth: 18392 bytes left
[   86.119733][ T6078] __nla_validate_parse: 9 callbacks suppressed
[   86.119748][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'.
[   86.413150][ T6092] netlink: 'syz.1.158': attribute type 10 has an invalid length.
[   86.424185][ T6092] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.158'.
[   86.631492][ T5355] veth0_macvtap: entered promiscuous mode
[   87.485421][   T33] cfg80211: failed to load regulatory.db
[   87.570015][ T6158] wlan1: Trigger new scan to find an IBSS to join
[   88.048350][ T6174] netlink: 'syz.1.165': attribute type 10 has an invalid length.
[   88.102022][ T6174] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.109678][ T6174] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   88.554073][   T37] wlan1: Creating new IBSS network, BSSID 9e:e0:5b:8f:9e:ab
[   88.768536][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'.
[   88.823183][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'.
[   88.894222][ T5689] tipc: Subscription rejected, illegal request
[   89.113099][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'.
[   89.715017][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[   91.051333][ T6236] IPv6: NLM_F_CREATE should be specified when creating new route
[   93.739765][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.743719][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.748695][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.753294][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.757688][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.364501][ T5633] Bluetooth: hci1: Unable to find connection for big 0x00
[   95.827225][ T5633] Bluetooth: hci3: command tx timeout
[   96.558822][ T6318] netlink: 188 bytes leftover after parsing attributes in process `syz.0.225'.
[   96.720237][ T5689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.831784][ T5689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.930166][ T5689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.019100][   T34] audit: type=1107 audit(1782576450.692:2): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   97.020482][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.027296][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.030289][ T6285] bridge_slave_0: entered allmulticast mode
[   97.032253][   T34] audit: type=1107 audit(1782576450.702:3): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   97.034219][ T6285] bridge_slave_0: entered promiscuous mode
[   97.044410][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.047559][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.050497][ T6285] bridge_slave_1: entered allmulticast mode
[   97.054825][ T6285] bridge_slave_1: entered promiscuous mode
[   97.081469][ T5689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.142037][ T6285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.149752][ T6285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.226776][ T6285] team0: Port device team_slave_0 added
[   97.232348][ T6285] team0: Port device team_slave_1 added
[   97.292430][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.296910][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.306265][ T6285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.317862][ T6341] netlink: 277 bytes leftover after parsing attributes in process `syz.0.231'.
[   97.324610][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.331791][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.340905][ T6285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.359156][ T6340] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.231'.
[   97.445648][ T6285] hsr_slave_0: entered promiscuous mode
[   97.458073][ T6285] hsr_slave_1: entered promiscuous mode
[   97.472948][ T6285] debugfs: 'hsr0' already exists in 'hsr'
[   97.478382][ T6285] Cannot create hsr debugfs directory
[   97.491148][ T5689] bridge_slave_1: left allmulticast mode
[   97.496226][ T5689] bridge_slave_1: left promiscuous mode
[   97.501337][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.514301][ T5689] bridge_slave_0: left allmulticast mode
[   97.516690][ T5689] bridge_slave_0: left promiscuous mode
[   97.520371][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.882532][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.891545][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.896544][ T5689] bond0 (unregistering): Released all slaves
[   97.901908][ T5633] Bluetooth: hci3: command tx timeout
[   98.169450][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'.
[   98.566092][ T5689] hsr_slave_0: left promiscuous mode
[   98.579339][ T5689] hsr_slave_1: left promiscuous mode
[   98.585418][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.597769][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.607801][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.614641][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.643782][ T5689] veth1_macvtap: left promiscuous mode
[   98.657282][ T5689] veth0_macvtap: left promiscuous mode
[   98.659629][ T5689] veth1_vlan: left promiscuous mode
[   98.661824][ T5689] veth0_vlan: left promiscuous mode
[   98.953146][ T5689] team0 (unregistering): Port device team_slave_1 removed
[   98.972010][ T5689] team0 (unregistering): Port device team_slave_0 removed
[   98.980447][ T6391] netlink: 'syz.0.251': attribute type 16 has an invalid length.
[   98.997466][ T6391] netlink: 'syz.0.251': attribute type 3 has an invalid length.
[   99.000620][ T6391] netlink: 'syz.0.251': attribute type 1 has an invalid length.
[   99.003606][ T6391] netlink: 112 bytes leftover after parsing attributes in process `syz.0.251'.
[   99.114083][ T5355] 8021q: adding VLAN 0 to HW filter on device eth1
[   99.321555][ T6285] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   99.358236][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   99.371779][ T6285] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   99.435818][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   99.442413][ T6285] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   99.448636][ T6401] netlink: 'syz.0.253': attribute type 10 has an invalid length.
[   99.456884][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   99.474229][ T6401] bond0: (slave bond_slave_0): Releasing backup interface
[   99.498516][ T6401] team0: Port device bond_slave_0 added
[   99.501815][ T6285] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.513542][ T6285] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.745800][ T6285] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.770841][ T6285] 8021q: adding VLAN 0 to HW filter on device team0
[   99.799021][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.801994][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.977259][ T5633] Bluetooth: hci3: command tx timeout
[  100.009508][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.254'.
[  100.165214][ T6425] syzkaller0: entered promiscuous mode
[  100.167139][ T6425] syzkaller0: entered allmulticast mode
[  100.182576][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.185771][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.833773][ T5355] 8021q: adding VLAN 0 to HW filter on device eth2
[  101.837948][ T6451] netlink: 'syz.0.262': attribute type 11 has an invalid length.
[  101.843607][ T6451] netlink: 448 bytes leftover after parsing attributes in process `syz.0.262'.
[  101.952743][ T6458] netlink: 'syz.0.265': attribute type 21 has an invalid length.
[  101.965335][ T6458] netlink: 'syz.0.265': attribute type 6 has an invalid length.
[  102.060212][ T5633] Bluetooth: hci3: command tx timeout
[  102.107968][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[  102.218655][ T5355] 8021q: adding VLAN 0 to HW filter on device eth3
[  102.363590][ T6285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.440152][ T6285] veth0_vlan: entered promiscuous mode
[  102.468402][ T6285] veth1_vlan: entered promiscuous mode
[  102.531447][ T6285] veth0_macvtap: entered promiscuous mode
[  102.554428][ T6285] veth1_macvtap: entered promiscuous mode
[  102.597857][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.635233][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.660704][ T5355] 8021q: adding VLAN 0 to HW filter on device eth4
[  102.681422][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.691181][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.710390][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.734399][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.986614][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.999110][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.065109][ T6152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.074695][ T6152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.586192][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'.
[  103.703065][ T6534] netlink: 'syz.0.288': attribute type 1 has an invalid length.
[  103.714037][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'.
[  103.723756][ T6534] netlink: 'syz.0.288': attribute type 1 has an invalid length.
[  104.140663][ T6559] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.300'.
[  104.143699][ T6559] veth0_to_bond: default FDB implementation only supports local addresses
[  104.281572][ T6565] openvswitch: netlink: Message has 1 unknown bytes.
[  104.673356][ T6574] netlink: 'syz.3.306': attribute type 13 has an invalid length.
[  104.685501][ T6574] netlink: 152 bytes leftover after parsing attributes in process `syz.3.306'.
[  104.696941][ T6574] syz_tun: refused to change device tx_queue_len
[  104.701797][ T6574] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  104.860906][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'.
[  105.532898][ T6610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.323'.
[  108.792423][ T6690] =======================================================
[  108.792423][ T6690] WARNING: The mand mount option has been deprecated and
[  108.792423][ T6690]          and is ignored by this kernel. Remove the mand
[  108.792423][ T6690]          option from the mount to silence this warning.
[  108.792423][ T6690] =======================================================
[  109.507793][ T6708] netlink: 'syz.0.359': attribute type 10 has an invalid length.
[  109.784066][ T6722] netlink: 824 bytes leftover after parsing attributes in process `syz.1.365'.
[  110.892799][ T6755] syzkaller0: entered promiscuous mode
[  110.895099][ T6755] syzkaller0: entered allmulticast mode
[  112.394007][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'.
[  112.883500][ T6787] netlink: 'syz.1.391': attribute type 2 has an invalid length.
[  112.890363][ T6787] netlink: 200 bytes leftover after parsing attributes in process `syz.1.391'.
[  112.976292][ T6793] Driver unsupported XDP return value 0 on prog  (id 117) dev N/A, expect packet loss!
[  113.586159][ T6826] netlink: 'syz.3.406': attribute type 21 has an invalid length.
[  113.591731][ T6826] netlink: 160 bytes leftover after parsing attributes in process `syz.3.406'.
[  114.020512][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'.
[  115.900867][ T6881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.423'.
[  115.904526][ T6881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.423'.
[  116.356639][ T6896] netlink: 5 bytes leftover after parsing attributes in process `syz.0.430'.
[  116.424549][ T6898] netlink: 'syz.3.431': attribute type 1 has an invalid length.
[  117.687250][ T6917] netlink: 3 bytes leftover after parsing attributes in process `syz.0.439'.
[  117.828566][ T6924] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.441'.
[  117.835756][ T6924] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.441'.
[  118.406505][ T6944] netlink: 'syz.3.448': attribute type 1 has an invalid length.
[  118.425956][ T6944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'.
[  118.448110][ T6939] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2
[  118.454912][ T6939] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1
[  118.584421][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  120.868459][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'.
[  121.062871][ T7042] netlink: 'syz.0.468': attribute type 21 has an invalid length.
[  121.075016][ T7042] netlink: 128 bytes leftover after parsing attributes in process `syz.0.468'.
[  121.085459][ T7042] netlink: 'syz.0.468': attribute type 4 has an invalid length.
[  121.103883][ T7042] netlink: 3 bytes leftover after parsing attributes in process `syz.0.468'.
[  121.161032][ T7042] netlink: 80 bytes leftover after parsing attributes in process `syz.0.468'.
[  121.852707][ T7074] netlink: 'syz.0.482': attribute type 6 has an invalid length.
[  121.855974][ T7074] netlink: 168 bytes leftover after parsing attributes in process `syz.0.482'.
[  121.984434][ T5633] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  122.927979][ T7089] bridge_slave_1: left allmulticast mode
[  122.933662][ T7089] bridge_slave_1: left promiscuous mode
[  122.948763][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.056837][ T7089] bridge_slave_0: left allmulticast mode
[  123.069591][ T7089] bridge_slave_0: left promiscuous mode
[  123.102759][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.222991][ T7105] netlink: 'syz.1.492': attribute type 23 has an invalid length.
[  126.420401][ T7170] netlink: 'syz.3.516': attribute type 6 has an invalid length.
[  126.430755][ T7170] netlink: 'syz.3.516': attribute type 6 has an invalid length.
[  126.806266][ T7173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.518'.
[  127.110429][ T7181] netlink: 'syz.1.522': attribute type 29 has an invalid length.
[  127.114773][ T7181] netlink: 'syz.1.522': attribute type 29 has an invalid length.
[  127.124516][ T7181] netlink: 'syz.1.522': attribute type 29 has an invalid length.
[  128.186606][ T7208] xt_l2tp: missing protocol rule (udp|l2tpip)
[  129.318170][ T7235] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.543'.
[  129.522366][ T7240] blkio.reset_stats is deprecated
[  129.564611][ T7246] netlink: 'syz.3.548': attribute type 12 has an invalid length.
[  132.085551][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'.
[  132.578655][ T7345] netlink: 'syz.3.590': attribute type 4 has an invalid length.
[  132.581969][ T7345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.590'.
[  132.597652][ T7345] .`: renamed from bond0 (while UP)
[  132.801721][ T7348] netlink: 140 bytes leftover after parsing attributes in process `syz.3.591'.
[  133.271923][ T7366] netlink: 'syz.0.599': attribute type 2 has an invalid length.
[  133.467478][ T7373] netlink: 'syz.3.602': attribute type 1 has an invalid length.
[  133.472149][ T7373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.611508][ T7371] netlink: 'syz.0.600': attribute type 29 has an invalid length.
[  134.403596][ T7391] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  134.762308][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'.
[  134.827875][ T5633] Bluetooth: hci0: unexpected subevent 0x18 length: 150 > 19
[  134.831217][ T5633] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  134.899727][ T7413] netlink: 'syz.1.618': attribute type 12 has an invalid length.
[  134.902286][ T7413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.618'.
[  135.087721][ T7419] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[  135.403340][ T7427] netlink: 'syz.0.625': attribute type 2 has an invalid length.
[  135.406705][ T7427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.625'.
[  135.587648][ T7433] tipc: Started in network mode
[  135.591163][ T7433] tipc: Node identity 1000000, cluster identity 4711
[  135.594160][ T7433] tipc: Node number set to 16777216
[  136.026856][ T7447] netlink: 'syz.3.635': attribute type 2 has an invalid length.
[  136.031276][ T7447] netlink: 'syz.3.635': attribute type 1 has an invalid length.
[  138.538970][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  138.542962][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  139.585178][ T7481] dummy0: entered allmulticast mode
[  139.725337][ T7486] netlink: 164 bytes leftover after parsing attributes in process `syz.3.652'.
[  141.149631][ T7509] netlink: 'syz.1.662': attribute type 2 has an invalid length.
[  141.156366][ T7509] netlink: 'syz.1.662': attribute type 8 has an invalid length.
[  141.162565][ T7509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.662'.
[  141.195590][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'.
[  141.204785][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'.
[  141.216064][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'.
[  141.429795][ T7527] netlink: 128 bytes leftover after parsing attributes in process `syz.0.669'.
[  141.438814][ T7527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.512743][ T7534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.672'.
[  142.057995][ T7561] netlink: 'syz.3.684': attribute type 1 has an invalid length.
[  142.646882][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  143.232666][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'.
[  143.290320][ T7606] netlink: 'syz.0.704': attribute type 29 has an invalid length.
[  143.373664][ T7610] openvswitch: netlink: Actions may not be safe on all matching packets
[  143.377794][ T7610] syz.3.705: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  143.388894][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: syz.3.705 Not tainted syzkaller #0 PREEMPT(full) 
[  143.388925][ T7610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.388932][ T7610] Call Trace:
[  143.388937][ T7610]  <TASK>
[  143.388941][ T7610]  dump_stack_lvl+0xe8/0x150
[  143.388957][ T7610]  warn_alloc+0x24c/0x270
[  143.388967][ T7610]  ? stack_depot_save_flags+0x33/0x800
[  143.388982][ T7610]  ? __pfx_warn_alloc+0x10/0x10
[  143.388991][ T7610]  ? kasan_save_track+0x3e/0x80
[  143.388999][ T7610]  ? __kasan_kmalloc+0x93/0xb0
[  143.389025][ T7610]  ? xsk_setsockopt+0x5e0/0x960
[  143.389037][ T7610]  ? do_sock_setsockopt+0x17c/0x1b0
[  143.389046][ T7610]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  143.389054][ T7610]  ? do_syscall_64+0x174/0x580
[  143.389062][ T7610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.389075][ T7610]  __vmalloc_node_range_noprof+0x12c/0x1730
[  143.389104][ T7610]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  143.389118][ T7610]  ? __kasan_kmalloc+0x93/0xb0
[  143.389127][ T7610]  ? __kmalloc_cache_noprof+0x32d/0x660
[  143.389135][ T7610]  ? __kmalloc_cache_noprof+0x150/0x660
[  143.389144][ T7610]  vmalloc_user_noprof+0xad/0xe0
[  143.389179][ T7610]  ? xskq_create+0xbf/0x170
[  143.389192][ T7610]  xskq_create+0xbf/0x170
[  143.389205][ T7610]  xsk_init_queue+0x8a/0xe0
[  143.389219][ T7610]  xsk_setsockopt+0x5e0/0x960
[  143.389231][ T7610]  ? __fget_files+0x2a/0x420
[  143.389240][ T7610]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.389251][ T7610]  ? __pfx_aa_sk_perm+0x10/0x10
[  143.389262][ T7610]  ? __fget_files+0x2a/0x420
[  143.389269][ T7610]  ? aa_sock_opt_perm+0xff/0x1a0
[  143.389281][ T7610]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  143.389292][ T7610]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.389304][ T7610]  do_sock_setsockopt+0x17c/0x1b0
[  143.389315][ T7610]  __x64_sys_setsockopt+0x13d/0x1b0
[  143.389324][ T7610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.389333][ T7610]  do_syscall_64+0x174/0x580
[  143.389341][ T7610]  ? trace_irq_disable+0x3b/0x140
[  143.389351][ T7610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.389360][ T7610] RIP: 0033:0x7f0b5319ce59
[  143.389370][ T7610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.389376][ T7610] RSP: 002b:00007f0b5409a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.389386][ T7610] RAX: ffffffffffffffda RBX: 00007f0b53416090 RCX: 00007f0b5319ce59
[  143.389392][ T7610] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  143.389397][ T7610] RBP: 00007f0b53232e6f R08: 0000000000000004 R09: 0000000000000000
[  143.389402][ T7610] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  143.389408][ T7610] R13: 00007f0b53416128 R14: 00007f0b53416090 R15: 00007ffc30f2f2c8
[  143.389421][ T7610]  </TASK>
[  143.390001][ T7610] Mem-Info:
[  143.425555][ T7612] netlink: 'syz.0.706': attribute type 3 has an invalid length.
[  143.428927][ T7610] active_anon:5825 inactive_anon:0 isolated_anon:0
[  143.428927][ T7610]  active_file:0 inactive_file:56793 isolated_file:0
[  143.428927][ T7610]  unevictable:1768 dirty:323 writeback:0
[  143.428927][ T7610]  slab_reclaimable:9759 slab_unreclaimable:84155
[  143.428927][ T7610]  mapped:18150 shmem:2376 pagetables:1166
[  143.428927][ T7610]  sec_pagetables:0 bounce:0
[  143.428927][ T7610]  kernel_misc_reclaimable:0
[  143.428927][ T7610]  free:1121641 free_pcp:19671 free_cma:0
[  143.432916][ T7612] netlink: 'syz.0.706': attribute type 1 has an invalid length.
[  143.433995][ T7610] Node 0 active_anon:9904kB inactive_anon:0kB active_file:0kB inactive_file:178732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6904kB dirty:1140kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8792kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  143.438439][ T7612] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.441650][ T7610] Node 1 active_anon:13396kB inactive_anon:0kB active_file:0kB inactive_file:48440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:65696kB dirty:152kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3584kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  143.561688][ T7610] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.577356][ T7610] lowmem_reserve[]: 0 1586 2116 2116 2116
[  143.581779][ T7610] Node 0 DMA32 free:1503972kB boost:0kB min:25008kB low:31260kB high:37512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:724kB inactive_anon:0kB active_file:0kB inactive_file:24916kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1624132kB mlocked:0kB bounce:0kB free_pcp:16764kB local_pcp:84kB free_cma:0kB
[  143.608776][ T7610] lowmem_reserve[]: 0 0 530 530 530
[  143.614028][ T7610] Node 0 Normal free:10592kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9048kB inactive_anon:0kB active_file:0kB inactive_file:153816kB unevictable:3536kB writepending:1180kB zspages:0kB present:1572868kB managed:543104kB mlocked:0kB bounce:0kB free_pcp:1504kB local_pcp:436kB free_cma:0kB
[  143.649328][ T7610] lowmem_reserve[]: 0 0 0 0 0
[  143.650934][ T7610] Node 1 Normal free:2955592kB boost:0kB min:56348kB low:70432kB high:84516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13432kB inactive_anon:0kB active_file:0kB inactive_file:48440kB unevictable:3536kB writepending:152kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:63536kB local_pcp:29668kB free_cma:0kB
[  143.664618][ T7610] lowmem_reserve[]: 0 0 0 0 0
[  143.666248][ T7610] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  143.670463][ T7610] Node 0 DMA32: 137*4kB (UME) 50*8kB (UME) 35*16kB (UME) 126*32kB (UME) 31*64kB (UME) 9*128kB (UME) 5*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 6*2048kB (UME) 360*4096kB (UM) = 1503972kB
[  143.677196][ T7610] Node 0 Normal: 567*4kB (UM) 216*8kB (UME) 66*16kB (UE) 14*32kB (UME) 26*64kB (UM) 10*128kB (UME) 2*256kB (UE) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 11004kB
[  143.687320][ T7610] Node 1 Normal: 443*4kB (M) 339*8kB (UME) 339*16kB (UM) 749*32kB (UME) 231*64kB (UME) 60*128kB (UME) 29*256kB (UME) 14*512kB (UM) 3*1024kB (UME) 3*2048kB (UM) 702*4096kB (UM) = 2955540kB
[  143.697508][ T7610] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.701456][ T7610] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.704552][ T7610] 59170 total pagecache pages
[  143.706047][ T7610] 0 pages in swap cache
[  143.707738][ T7610] Free swap  = 124996kB
[  143.709224][ T7610] Total swap = 124996kB
[  143.710524][ T7610] 1834877 pages RAM
[  143.711742][ T7610] 0 pages HighMem/MovableOnly
[  143.713184][ T7610] 390557 pages reserved
[  143.714455][ T7610] 0 pages cma reserved
[  143.742133][ T7615] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.743648][ T7629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.713'.
[  143.863355][ T7631] syzkaller0: entered promiscuous mode
[  143.865612][ T7631] syzkaller0: entered allmulticast mode
[  144.148825][ T7647] netlink: 'syz.1.716': attribute type 7 has an invalid length.
[  144.151588][ T7647] netlink: 'syz.1.716': attribute type 6 has an invalid length.
[  144.154245][ T7647] netlink: 'syz.1.716': attribute type 7 has an invalid length.
[  144.156708][ T7647] netlink: 'syz.1.716': attribute type 6 has an invalid length.
[  145.693777][ T5355] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  145.999461][ T7678] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  146.002867][ T7678] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  146.611316][ T7700] netlink: 'syz.0.738': attribute type 10 has an invalid length.
[  146.663143][ T7700] ipvlan0: entered allmulticast mode
[  146.670177][ T7700] veth0_vlan: entered allmulticast mode
[  146.692972][ T7700] team0: Device ipvlan0 failed to register rx_handler
[  146.871639][ T7711] netlink: 'syz.1.743': attribute type 1 has an invalid length.
[  146.876295][ T7711] netlink: 'syz.1.743': attribute type 2 has an invalid length.
[  146.982602][ T5633] Bluetooth: hci0: unknown advertising packet type: 0x06
[  147.229088][ T5633] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1
[  147.232175][ T7720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.747'.
[  147.232813][ T5633] Bluetooth: hci0: hardware error 0x00
[  147.488233][ T7734] syzkaller0: entered promiscuous mode
[  147.492265][ T7734] syzkaller0: entered allmulticast mode
[  149.341284][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  149.818271][ T6150] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  150.165877][ T7774] veth1_macvtap: left promiscuous mode
[  150.171958][ T7774] macsec0: entered promiscuous mode
[  150.313586][ T7774] option changes via remount are deprecated (pid=7773 comm=syz.0.772)
[  150.491040][ T7790] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  150.494072][ T7790] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  151.207911][ T7819] netlink: 'syz.0.790': attribute type 1 has an invalid length.
[  151.211003][ T7819] netlink: 'syz.0.790': attribute type 2 has an invalid length.
[  151.293400][ T7817] netlink: 'syz.3.788': attribute type 10 has an invalid length.
[  151.319781][ T7817] team0: Device wg2 is of different type
[  151.390969][ T7828] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.794'.
[  151.719946][ T7844] netlink: 'syz.0.802': attribute type 23 has an invalid length.
[  152.069597][ T7869] netlink: 'syz.0.813': attribute type 21 has an invalid length.
[  152.072820][ T7869] netlink: 128 bytes leftover after parsing attributes in process `syz.0.813'.
[  152.075735][ T7869] netlink: 3 bytes leftover after parsing attributes in process `syz.0.813'.
[  152.119025][ T7871] netlink: 'syz.0.814': attribute type 10 has an invalid length.
[  152.678279][ T7871] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  152.881487][ T7885] netlink: 'syz.3.819': attribute type 21 has an invalid length.
[  152.884948][ T7885] netlink: 'syz.3.819': attribute type 4 has an invalid length.
[  152.891523][ T7885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.819'.
[  152.969355][ T7889] netlink: 180 bytes leftover after parsing attributes in process `syz.3.821'.
[  153.500325][ T7910] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.830'.
[  153.635514][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.833'.
[  154.233699][ T4999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.238916][ T4999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.245586][ T4999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.251121][ T4999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.255642][ T4999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.654233][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.656537][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.660076][ T7929] bridge_slave_0: entered allmulticast mode
[  154.663200][ T7929] bridge_slave_0: entered promiscuous mode
[  154.666739][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.669089][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.671332][ T7929] bridge_slave_1: entered allmulticast mode
[  154.673961][ T7929] bridge_slave_1: entered promiscuous mode
[  154.700106][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.707609][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.738177][ T7929] team0: Port device team_slave_0 added
[  154.741937][ T7929] team0: Port device team_slave_1 added
[  154.781509][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.784385][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.797113][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.810998][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.814202][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.825103][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.894598][ T7929] hsr_slave_0: entered promiscuous mode
[  154.900026][ T7929] hsr_slave_1: entered promiscuous mode
[  154.903602][ T7929] debugfs: 'hsr0' already exists in 'hsr'
[  154.905930][ T7929] Cannot create hsr debugfs directory
[  155.011856][ T7964] netlink: 'syz.3.850': attribute type 32 has an invalid length.
[  155.132905][ T7929] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.255449][ T7929] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.380730][ T7929] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.464062][ T7929] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.527496][ T7976] ref_ctr_offset mismatch. inode: 0x104 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  155.680083][ T7929] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.686916][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  155.691982][ T7929] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  155.697430][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  155.700340][ T7929] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  155.709444][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  155.716821][ T7929] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  155.723916][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  155.739118][ T7982] netlink: 'syz.3.859': attribute type 4 has an invalid length.
[  155.746576][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'.
[  155.814076][ T7929] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.826868][ T7929] 8021q: adding VLAN 0 to HW filter on device team0
[  155.834750][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.837446][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.845763][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.848067][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.314159][ T5633] Bluetooth: hci0: command tx timeout
[  157.564667][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.603495][ T7929] veth0_vlan: entered promiscuous mode
[  157.617180][ T7929] veth1_vlan: entered promiscuous mode
[  157.656104][ T7929] veth0_macvtap: entered promiscuous mode
[  157.671210][ T7929] veth1_macvtap: entered promiscuous mode
[  157.687600][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.699133][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.710217][ T5689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.727392][ T5689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.742768][ T5689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.746240][ T5689] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.826761][ T6738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.832792][ T6738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.855041][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.858464][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.939792][ T8018] netlink: 164 bytes leftover after parsing attributes in process `syz.3.867'.
[  158.024176][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.870'.
[  158.377273][ T5633] Bluetooth: hci0: command tx timeout
[  160.457666][ T5633] Bluetooth: hci0: command tx timeout
[  160.620032][ T8074] cgroup2: Unknown parameter ''
[  160.785910][ T8082] netlink: 'syz.0.897': attribute type 29 has an invalid length.
[  160.790571][ T8082] netlink: 'syz.0.897': attribute type 29 has an invalid length.
[  160.848524][ T8086] netlink: 'syz.3.896': attribute type 10 has an invalid length.
[  160.851082][ T8086] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.896'.
[  162.537500][ T5633] Bluetooth: hci0: command tx timeout
[  163.156745][ T8132] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.916'.
[  163.283257][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  163.287943][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  163.291535][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  163.299013][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  163.309592][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  163.972223][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.975413][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.986126][ T8137] bridge_slave_0: entered allmulticast mode
[  163.994799][ T8137] bridge_slave_0: entered promiscuous mode
[  164.000372][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.005312][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.008769][ T8137] bridge_slave_1: entered allmulticast mode
[  164.013460][ T8137] bridge_slave_1: entered promiscuous mode
[  164.060102][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.066840][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.096710][ T8137] team0: Port device team_slave_0 added
[  164.102702][ T8137] team0: Port device team_slave_1 added
[  164.141499][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.145434][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.159580][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.166308][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.169407][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.180880][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.229520][ T8137] hsr_slave_0: entered promiscuous mode
[  164.232892][ T8137] hsr_slave_1: entered promiscuous mode
[  164.236547][ T8137] debugfs: 'hsr0' already exists in 'hsr'
[  164.240884][ T8137] Cannot create hsr debugfs directory
[  164.400400][ T8137] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  164.406501][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  164.411591][ T8137] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  164.416752][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  164.421317][ T8137] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  164.426524][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  164.430562][ T8137] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  164.434919][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  164.455976][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.458671][ T8137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.461616][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.463840][ T8137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.512052][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.523943][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.526710][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.539684][ T8137] 8021q: adding VLAN 0 to HW filter on device team0
[  164.546288][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.548876][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.557161][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.559875][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.905237][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.151114][ T8137] veth0_vlan: entered promiscuous mode
[  165.168092][ T8137] veth1_vlan: entered promiscuous mode
[  165.219277][ T8137] veth0_macvtap: entered promiscuous mode
[  165.226386][ T8137] veth1_macvtap: entered promiscuous mode
[  165.242966][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.265159][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.282015][ T5499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.295543][ T5499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.306519][ T8201] netlink: 140 bytes leftover after parsing attributes in process `syz.3.929'.
[  165.314992][ T5499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.315421][ T5499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.339705][ T5633] Bluetooth: hci2: command tx timeout
[  165.480661][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.487842][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.532550][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.536095][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.806483][ T8216] tmpfs: Bad value for 'gid'
[  165.811082][ T8216] tmpfs: Bad value for 'gid'
[  167.417310][ T5633] Bluetooth: hci2: command tx timeout
[  167.570965][ T8273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.961'.
[  167.671919][ T8275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.962'.
[  169.507195][ T5633] Bluetooth: hci2: command tx timeout
[  170.998838][ T8293] netlink: 'syz.3.970': attribute type 3 has an invalid length.
[  171.001943][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'.
[  171.005164][ T8293] netlink: 'syz.3.970': attribute type 3 has an invalid length.
[  171.049083][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'.
[  171.376662][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'.
[  171.446850][ T8305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'.
[  171.577281][ T5633] Bluetooth: hci2: command tx timeout
[  171.582872][ T8303] netlink: 68 bytes leftover after parsing attributes in process `syz.4.974'.
[  171.588981][ T8303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.974'.
[  171.683796][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.977'.
[  171.815247][ T8316] netlink: 'syz.3.980': attribute type 21 has an invalid length.
[  171.821800][ T8316] netlink: 'syz.3.980': attribute type 11 has an invalid length.
[  171.941563][ T8320] syzkaller0: entered promiscuous mode
[  171.943328][ T8320] syzkaller0: entered allmulticast mode
[  172.282336][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'.
[  173.940451][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'.
[  173.944904][ T8362] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1000'.
[  174.163789][ T8370] syzkaller0: entered promiscuous mode
[  174.165940][ T8370] syzkaller0: entered allmulticast mode
[  175.648540][ T8376] netlink: 'syz.3.1007': attribute type 10 has an invalid length.
[  175.697435][ T8376] team0: Device veth0_vlan failed to register rx_handler
[  177.057916][ T8418] __nla_validate_parse: 2 callbacks suppressed
[  177.057928][ T8418] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1025'.
[  177.071217][ T8418] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1025'.
[  177.075565][ T8418] netlink: 'syz.4.1025': attribute type 5 has an invalid length.
[  177.080040][ T8418] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1025'.
[  177.149602][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'.
[  177.153173][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'.
[  177.249980][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.257260][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.261696][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.274045][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.277422][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.473329][ T8437] netlink: 'syz.4.1031': attribute type 1 has an invalid length.
[  177.482156][ T8437] netlink: 'syz.4.1031': attribute type 2 has an invalid length.
[  177.680430][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.683055][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.685894][ T8424] bridge_slave_0: entered allmulticast mode
[  177.689344][ T8424] bridge_slave_0: entered promiscuous mode
[  177.693355][ T8424] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.695786][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.698710][ T8424] bridge_slave_1: entered allmulticast mode
[  177.702087][ T8424] bridge_slave_1: entered promiscuous mode
[  177.726762][ T8424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.733486][ T8424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.759213][ T8424] team0: Port device team_slave_0 added
[  177.762884][ T8424] team0: Port device team_slave_1 added
[  177.782197][ T8424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.784402][ T8424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.793084][ T8424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.798426][ T8424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.801284][ T8424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.814573][ T8424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.820744][ T8452] hsr0: entered allmulticast mode
[  177.822889][ T8452] hsr_slave_0: entered allmulticast mode
[  177.824717][ T8452] hsr_slave_1: entered allmulticast mode
[  177.866452][ T8424] hsr_slave_0: entered promiscuous mode
[  177.870810][ T8424] hsr_slave_1: entered promiscuous mode
[  177.873288][ T8424] debugfs: 'hsr0' already exists in 'hsr'
[  177.877279][ T8424] Cannot create hsr debugfs directory
[  177.995896][ T8462] netlink: 'syz.3.1038': attribute type 2 has an invalid length.
[  178.046887][ T8462] : entered promiscuous mode
[  178.113197][ T8424] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  178.132697][ T8424] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  178.137394][ T8424] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  178.145698][ T8424] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  178.156163][ T8424] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  178.163975][ T8424] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  178.170261][ T8424] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  178.183623][ T8424] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  178.221519][ T8424] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.224459][ T8424] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.227373][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.229703][ T8424] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.310532][ T8424] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.436361][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.442490][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.464941][ T8424] 8021q: adding VLAN 0 to HW filter on device team0
[  178.480123][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.482358][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.485751][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.488468][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.601706][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'.
[  178.607844][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'.
[  178.792314][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1051'.
[  178.807213][ T8512] openvswitch: netlink: Flow actions attr not present in new flow.
[  178.820992][ T8424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.064101][ T8424] veth0_vlan: entered promiscuous mode
[  179.072127][ T8424] veth1_vlan: entered promiscuous mode
[  179.089101][ T8530] netlink: 'syz.3.1056': attribute type 46 has an invalid length.
[  179.092909][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  179.123840][ T8424] veth0_macvtap: entered promiscuous mode
[  179.128311][ T8424] veth1_macvtap: entered promiscuous mode
[  179.140179][ T8424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.155433][ T8424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.171074][ T5499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.183613][ T5499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.196383][ T5499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.209547][ T5499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.270400][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.276812][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.292714][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.296109][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.337192][ T5633] Bluetooth: hci4: command tx timeout
[  179.362565][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1063'.
[  179.375009][ T8538] netlink: 'syz.4.1063': attribute type 2 has an invalid length.
[  179.382993][ T8538] netlink: 'syz.4.1063': attribute type 2 has an invalid length.
[  179.482944][ T8541] netlink: 'syz.5.1058': attribute type 1 has an invalid length.
[  179.485497][ T8541] netlink: 'syz.5.1058': attribute type 2 has an invalid length.
[  180.006569][ T8574] netlink: 'syz.3.1076': attribute type 1 has an invalid length.
[  180.848095][ T6160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  181.417441][ T5633] Bluetooth: hci4: command tx timeout
[  183.497240][ T5633] Bluetooth: hci4: command tx timeout
[  183.705094][ T8622] veth1_macvtap: left promiscuous mode
[  183.724430][ T8622] macsec0: entered allmulticast mode
[  183.891259][ T8626] veth1_macvtap: entered promiscuous mode
[  183.896539][ T8626] veth1_macvtap: entered allmulticast mode
[  183.905216][ T8626] macsec0: entered promiscuous mode
[  183.937239][ T8627] netlink: 'syz.4.1100': attribute type 2 has an invalid length.
[  184.072795][ T8634] netlink: 'syz.5.1101': attribute type 6 has an invalid length.
[  184.088230][ T8634] __nla_validate_parse: 3 callbacks suppressed
[  184.088247][ T8634] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1101'.
[  184.288874][ T8644] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1108'.
[  185.577070][ T5633] Bluetooth: hci4: command tx timeout
[  186.786282][ T8693] netlink: 'syz.5.1125': attribute type 12 has an invalid length.
[  186.794854][ T8695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1126'.
[  186.816558][ T8697] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1127'.
[  187.031898][ T8713] raw_sendmsg: syz.5.1132 forgot to set AF_INET. Fix it!
[  187.109301][ T8721] netlink: 'syz.5.1132': attribute type 1 has an invalid length.
[  187.871442][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1149'.
[  189.587973][ T8769] netlink: 'syz.4.1157': attribute type 8 has an invalid length.
[  189.613200][ T8771] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1158'.
[  190.475153][ T8797] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1171'.
[  190.481304][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'.
[  190.659575][ T8803] netlink: zone id is out of range
[  190.661631][ T8803] netlink: zone id is out of range
[  190.666706][ T8803] netlink: zone id is out of range
[  190.675315][ T8803] netlink: zone id is out of range
[  190.678908][ T8803] netlink: zone id is out of range
[  190.680819][ T8803] netlink: zone id is out of range
[  190.683192][ T8803] netlink: zone id is out of range
[  190.685654][ T8803] netlink: zone id is out of range
[  190.688522][ T8803] netlink: zone id is out of range
[  190.691571][ T8803] netlink: zone id is out of range
[  190.773499][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'.
[  191.122107][ T8835] tipc: Started in network mode
[  191.123630][ T8835] tipc: Node identity 815e0004, cluster identity 4711
[  191.131386][ T8835] tipc: Node number set to 2170421252
[  191.277721][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1196'.
[  192.131783][ T8839] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  192.136247][ T8853] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.1197'.
[  192.410201][ T8874] netlink: 64467 bytes leftover after parsing attributes in process `syz.5.1207'.
[  192.718288][ T8897] netlink: 'syz.5.1216': attribute type 13 has an invalid length.
[  192.729682][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1216'.
[  192.748734][ T8895] netlink: 'syz.3.1215': attribute type 4 has an invalid length.
[  196.096515][ T8915] proc: Bad value for 'gid'
[  196.363117][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1226'.
[  196.390502][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'.
[  196.393555][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'.
[  196.403749][ T8922] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1226'.
[  196.417607][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'.
[  196.505595][ T8924] net_ratelimit: 11 callbacks suppressed
[  196.505661][ T8924] openvswitch: netlink: Actions may not be safe on all matching packets
[  196.876619][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1231'.
[  196.937463][ T4999] Bluetooth: hci1: command 0x0406 tx timeout
[  197.369206][ T5355] veth1_vlan: left promiscuous mode
[  197.655525][ T8971] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  197.804981][ T8977] syzkaller0: entered promiscuous mode
[  197.809661][ T8977] syzkaller0: entered allmulticast mode
[  197.978348][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'.
[  198.095772][ T8997] netlink: 'syz.5.1249': attribute type 2 has an invalid length.
[  198.115892][ T8997] H: entered promiscuous mode
[  199.665862][ T9031] netlink: 'syz.3.1264': attribute type 2 has an invalid length.
[  199.669285][ T9031] netlink: 'syz.3.1264': attribute type 1 has an invalid length.
[  199.710033][ T9037] netlink: 'syz.5.1267': attribute type 1 has an invalid length.
[  199.877636][ T9042] : port 1(syz_tun) entered blocking state
[  199.885175][ T9042] : port 1(syz_tun) entered disabled state
[  199.890663][ T9042] syz_tun: entered allmulticast mode
[  199.895752][ T9042] syz_tun: entered promiscuous mode
[  199.909894][ T9042] : port 1(syz_tun) entered blocking state
[  199.912730][ T9042] : port 1(syz_tun) entered forwarding state
[  199.981958][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  199.986489][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  200.071452][ T9049] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1272'.
[  200.074812][ T9049] openvswitch: netlink: Message has 512 unknown bytes.
[  200.312121][ T9072] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[  200.636160][ T9085] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1287'.
[  200.882065][ T9096] netlink: 'syz.5.1292': attribute type 1 has an invalid length.
[  200.887061][ T9096] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1292'.
[  200.947525][ T9093] netlink: 'syz.4.1291': attribute type 4 has an invalid length.
[  200.952265][ T9093] netlink: 'syz.4.1291': attribute type 17 has an invalid length.
[  201.432679][ T9119] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1303'.
[  201.673566][ T9135] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  201.673566][ T9135] Please contact the netfilter-devel mailing list or update your nftables rules.
[  201.680444][ T9137] netlink: 'syz.3.1311': attribute type 11 has an invalid length.
[  201.683096][ T9137] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1311'.
[  202.175272][ T9170] netlink: 'syz.5.1325': attribute type 1 has an invalid length.
[  202.207870][ T9171] tipc: Started in network mode
[  202.226054][ T9171] tipc: Node identity 815e0004, cluster identity 4711
[  202.240390][ T9171] tipc: Node number set to 2170421252
[  202.725744][ T9185] netlink: 'syz.4.1330': attribute type 6 has an invalid length.
[  202.733191][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'.
[  203.973896][ T9218] netlink: 'syz.5.1343': attribute type 27 has an invalid length.
[  203.987895][ T9218] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.1343'.
[  204.051500][ T9220] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1344'.
[  205.065540][ T9249] netlink: 'syz.5.1356': attribute type 11 has an invalid length.
[  205.141990][ T9251] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.145297][ T9251] IPv6: NLM_F_REPLACE set, but no existing node found!
[  205.158377][ T9247] hsr0: entered promiscuous mode
[  205.261566][ T9256] netlink: 'syz.5.1359': attribute type 23 has an invalid length.
[  205.264871][ T9256] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.409577][ T9262] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1362'.
[  205.475535][ T9260] netlink: 'syz.3.1361': attribute type 1 has an invalid length.
[  205.490342][ T9260] netlink: 'syz.3.1361': attribute type 2 has an invalid length.
[  208.761858][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1375'.
[  208.902291][ T9311] mac80211_hwsim hwsim20 ..c: renamed from wlan1 (while UP)
[  209.010527][ T9317] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1382'.
[  209.207043][ T9331] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1387'.
[  209.241166][ T5633] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  209.246201][ T9331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.341611][ T9377] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1405'.
[  211.084776][ T9403] netlink: 'syz.4.1419': attribute type 16 has an invalid length.
[  211.091291][ T9403] netlink: 'syz.4.1419': attribute type 17 has an invalid length.
[  211.115318][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.126256][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.088849][ T9427] cgroup: Unknown subsys name 'fsname'
[  213.405044][ T9465] xt_time: invalid argument - start or stop time greater than 23:59:59
[  213.491432][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1442'.
[  213.509719][ T6150] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  213.556519][ T9463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  213.560608][ T9463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  213.945187][ T9481] SET target dimension over the limit!
[  214.295778][ T9488] netlink: 'syz.3.1452': attribute type 10 has an invalid length.
[  214.307385][ T9488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1452'.
[  215.827795][ T9508] syzkaller0: entered promiscuous mode
[  215.832236][ T9508] syzkaller0: entered allmulticast mode
[  215.862410][ T9521] netlink: 'syz.3.1461': attribute type 29 has an invalid length.
[  216.250972][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1463'.
[  216.719934][ T9534] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1466'.
[  217.737366][ T4999] Bluetooth: hci3: command 0x0406 tx timeout
[  217.868653][ T9560] netlink: 'syz.5.1479': attribute type 4 has an invalid length.
[  219.582301][   T34] audit: type=1107 audit(1782576573.252:4): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  219.764692][ T9601] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1498'.
[  219.781393][ T9601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.800114][ T9603] netlink: 'syz.3.1499': attribute type 10 has an invalid length.
[  219.806177][ T9603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1499'.
[  219.819785][ T9603] .`: entered promiscuous mode
[  219.821427][ T9603] bond_slave_0: entered promiscuous mode
[  219.823840][ T9603] bond_slave_1: entered promiscuous mode
[  219.825840][ T9603] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  219.852552][ T9605] netlink: 'syz.5.1500': attribute type 1 has an invalid length.
[  220.257170][ T9628] netlink: 'syz.5.1510': attribute type 2 has an invalid length.
[  220.326663][ T9632] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1513'.
[  220.396142][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1514'.
[  220.403198][ T9636] netlink: 'syz.3.1515': attribute type 16 has an invalid length.
[  220.408786][ T9636] netlink: 'syz.3.1515': attribute type 17 has an invalid length.
[  221.356529][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'.
[  221.360012][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'.
[  221.451327][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1531'.
[  222.095384][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1541'.
[  223.040791][ T5633] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28
[  223.043331][ T5633] Bluetooth: hci3: Unable to find connection with handle 0x0000
[  223.573908][ T9722] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1551'.
[  223.589753][ T9722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  225.118138][ T9781] nbd: socks must be embedded in a SOCK_ITEM attr
[  225.869944][ T9809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.001961][ T9848] netlink: 'syz.5.1608': attribute type 21 has an invalid length.
[  227.014952][ T9848] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1608'.
[  227.034217][ T9848] netlink: 'syz.5.1608': attribute type 4 has an invalid length.
[  227.042487][ T9848] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1608'.
[  227.203084][ T9848] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1608'.
[  227.786056][ T9874] netlink: 'syz.3.1618': attribute type 10 has an invalid length.
[  227.908224][ T9878] netlink: 'syz.3.1618': attribute type 10 has an invalid length.
[  228.600273][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  228.604868][ T9874] team0: Port device netdevsim1 added
[  228.625456][ T9878] team0: Port device netdevsim1 removed
[  228.642960][ T9878] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  228.647341][ T9878] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  228.651030][ T9878] .`: (slave netdevsim1): Enslaving as an active interface with an up link
[  229.308065][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1631'.
[  229.505363][ T4999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  229.511796][ T4999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  229.520511][ T4999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  229.537554][ T4999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  229.543832][ T4999] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  229.809520][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1639'.
[  229.915156][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.925701][ T9945] openvswitch: netlink: Flow key attribute not present in set flow.
[  229.997399][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1644'.
[  230.025433][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.126236][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.345404][ T9921] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.347995][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.350446][ T9921] bridge_slave_0: entered allmulticast mode
[  230.353487][ T9921] bridge_slave_0: entered promiscuous mode
[  230.358332][ T9921] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.361176][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.363775][ T9921] bridge_slave_1: entered allmulticast mode
[  230.367516][ T9921] bridge_slave_1: entered promiscuous mode
[  230.395351][ T9921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.403409][ T9921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.432300][ T9921] team0: Port device team_slave_0 added
[  230.436008][ T9921] team0: Port device team_slave_1 added
[  230.455669][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.458589][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.468828][ T9921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.474858][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.478112][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.488565][ T9921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.530373][ T9921] hsr_slave_0: entered promiscuous mode
[  230.533031][ T9921] hsr_slave_1: entered promiscuous mode
[  230.535487][ T9921] debugfs: 'hsr0' already exists in 'hsr'
[  230.537712][ T9921] Cannot create hsr debugfs directory
[  231.169051][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.234456][ T9974] netlink: 'syz.5.1653': attribute type 21 has an invalid length.
[  231.293164][ T9974] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1653'.
[  231.373608][ T9921] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  231.393743][ T9921] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  231.399732][ T9921] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  231.425918][ T9921] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  231.446323][ T9921] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  231.462151][ T9921] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  231.471503][ T9921] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  231.478222][ T9921] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  231.587278][ T4999] Bluetooth: hci5: command tx timeout
[  231.623765][ T9990] netlink: 'syz.5.1658': attribute type 4 has an invalid length.
[  231.634916][ T9990] netlink: 'syz.5.1658': attribute type 17 has an invalid length.
[  231.715943][   T12] bridge_slave_1: left allmulticast mode
[  231.724852][   T12] bridge_slave_1: left promiscuous mode
[  231.731929][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.777620][   T12] bridge_slave_0: left allmulticast mode
[  231.783864][   T12] bridge_slave_0: left promiscuous mode
[  231.786351][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.222491][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.236480][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.251311][   T12] bond0 (unregistering): Released all slaves
[  232.279814][ T5355] 8021q: adding VLAN 0 to HW filter on device eth5
[  232.562610][T10020] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1667'.
[  232.575112][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'.
[  232.602075][ T9921] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.755546][ T9921] 8021q: adding VLAN 0 to HW filter on device team0
[  232.762652][ T5355] 8021q: adding VLAN 0 to HW filter on device eth6
[  232.775950][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.778354][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.805229][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.808793][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.897473][   T12] hsr_slave_0: left promiscuous mode
[  232.901604][   T12] hsr_slave_1: left promiscuous mode
[  232.907267][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.911510][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.919427][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.922710][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.944375][   T12] veth1_macvtap: left promiscuous mode
[  232.948848][   T12] veth0_macvtap: left promiscuous mode
[  232.951363][   T12] veth0_vlan: left promiscuous mode
[  233.124770][T10045] netlink: 'syz.5.1673': attribute type 1 has an invalid length.
[  233.127836][T10045] netlink: 'syz.5.1673': attribute type 2 has an invalid length.
[  233.254850][T10049] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  233.451276][   T12] team0 (unregistering): Port device team_slave_1 removed
[  233.471959][   T12] team0 (unregistering): Port device team_slave_0 removed
[  233.658868][ T4999] Bluetooth: hci5: command tx timeout
[  233.841232][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1681'.
[  233.854651][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1681'.
[  233.876633][ T5355] 8021q: adding VLAN 0 to HW filter on device eth7
[  233.969193][T10072] netlink: 'syz.5.1682': attribute type 3 has an invalid length.
[  233.979034][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1682'.
[  233.991434][T10072] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  234.007157][T10072] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  234.245238][ T5355] 8021q: adding VLAN 0 to HW filter on device eth8
[  234.524619][ T9921] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.927374][ T9921] veth0_vlan: entered promiscuous mode
[  234.952326][ T9921] veth1_vlan: entered promiscuous mode
[  234.989795][ T9921] veth0_macvtap: entered promiscuous mode
[  235.002514][ T9921] veth1_macvtap: entered promiscuous mode
[  235.029054][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.064830][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.098676][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.109510][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.124207][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.149212][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.229580][T10128] netlink: 'syz.5.1691': attribute type 21 has an invalid length.
[  235.332786][ T6160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.348449][ T6160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.417207][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.424262][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.556475][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1632'.
[  235.737651][ T4999] Bluetooth: hci5: command tx timeout
[  236.044952][   T12] bridge_slave_1: left allmulticast mode
[  236.051708][   T12] bridge_slave_1: left promiscuous mode
[  236.055728][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.097790][   T12] bridge_slave_0: left allmulticast mode
[  236.106829][   T12] bridge_slave_0: left promiscuous mode
[  236.117324][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.321362][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.326734][   T12] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  236.337096][   T12] bond0 (unregistering): Released all slaves
[  236.484482][   T12] tipc: Left network mode
[  237.268067][   T12] hsr_slave_0: left promiscuous mode
[  237.275616][   T12] hsr_slave_1: left promiscuous mode
[  237.283320][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.289231][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.312606][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.315240][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.349823][   T12] veth0_macvtap: left promiscuous mode
[  237.351725][   T12] veth1_vlan: left promiscuous mode
[  237.353542][   T12] veth0_vlan: left promiscuous mode
[  237.817075][ T4999] Bluetooth: hci5: command tx timeout
[  237.968892][T10263] netlink: 71 bytes leftover after parsing attributes in process `syz.6.1710'.
[  237.995194][   T12] team0 (unregistering): Port device team_slave_1 removed
[  238.005948][   T12] team0 (unregistering): Port device team_slave_0 removed
[  238.021850][   T12] team0 (unregistering): Port device bond_slave_0 removed
[  239.600516][T10296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1725'.
[  239.761067][ T8424] : port 1(syz_tun) entered disabled state
[  239.790147][ T8424] syz_tun (unregistering): left allmulticast mode
[  239.795556][ T8424] syz_tun (unregistering): left promiscuous mode
[  239.799484][ T8424] : port 1(syz_tun) entered disabled state
[  239.803127][T10303] netlink: 'syz.6.1729': attribute type 40 has an invalid length.
[  240.074538][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.328537][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.345098][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.349897][T10313] netlink: 'syz.6.1734': attribute type 10 has an invalid length.
[  240.352447][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.367285][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.373670][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.403813][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.526842][T10313] 8021q: adding VLAN 0 to HW filter on device team0
[  240.571353][T10313] bond0: (slave team0): Enslaving as an active interface with an up link
[  240.635042][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.742083][T10333] netlink: 'syz.3.1741': attribute type 21 has an invalid length.
[  240.745989][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.766694][T10333] netlink: 'syz.3.1741': attribute type 2 has an invalid length.
[  241.020364][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.091530][   T12] bridge_slave_1: left allmulticast mode
[  241.102157][   T12] bridge_slave_1: left promiscuous mode
[  241.105369][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.119674][   T12] bridge_slave_0: left allmulticast mode
[  241.123174][   T12] bridge_slave_0: left promiscuous mode
[  241.126096][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.348984][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.354713][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.359899][   T12] bond0 (unregistering): Released all slaves
[  241.429578][   T12] H: left promiscuous mode
[  241.507829][   T12] tipc: Left network mode
[  241.590052][T10363] netlink: 'syz.6.1750': attribute type 21 has an invalid length.
[  241.593936][T10363] netlink: 'syz.6.1750': attribute type 1 has an invalid length.
[  241.598860][T10363] netlink: 16090 bytes leftover after parsing attributes in process `syz.6.1750'.
[  241.692376][T10314] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.694936][T10314] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.706891][T10314] bridge_slave_0: entered allmulticast mode
[  241.712050][T10314] bridge_slave_0: entered promiscuous mode
[  241.729394][T10314] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.737666][T10314] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.748963][T10314] bridge_slave_1: entered allmulticast mode
[  241.764620][T10314] bridge_slave_1: entered promiscuous mode
[  241.832799][ T5355] 8021q: adding VLAN 0 to HW filter on device eth9
[  241.854862][   T12] hsr_slave_0: left promiscuous mode
[  241.861143][ T5633] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4
[  241.863171][   T12] hsr_slave_1: left promiscuous mode
[  241.873157][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.879088][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.882195][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.884784][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.893241][   T12] veth1_macvtap: left promiscuous mode
[  241.895402][   T12] veth0_macvtap: left promiscuous mode
[  241.899558][   T12] veth1_vlan: left promiscuous mode
[  241.901334][   T12] veth0_vlan: left promiscuous mode
[  242.195293][   T12] team0 (unregistering): Port device team_slave_1 removed
[  242.215181][   T12] team0 (unregistering): Port device team_slave_0 removed
[  242.402440][T10314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.414959][T10314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.457469][ T5633] Bluetooth: hci2: command tx timeout
[  242.536842][T10314] team0: Port device team_slave_0 added
[  242.569390][T10314] team0: Port device team_slave_1 added
[  242.669281][T10314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.672130][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.701308][T10314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.710100][T10314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.712864][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.724370][T10314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.904350][T10314] hsr_slave_0: entered promiscuous mode
[  242.914199][T10314] hsr_slave_1: entered promiscuous mode
[  242.920637][T10314] debugfs: 'hsr0' already exists in 'hsr'
[  242.926072][T10314] Cannot create hsr debugfs directory
[  243.087978][ T5355] 8021q: adding VLAN 0 to HW filter on device eth10
[  243.786695][ T5355] 8021q: adding VLAN 0 to HW filter on device eth11
[  243.849215][T10314] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  243.871163][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  243.876770][T10314] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  243.897997][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  243.903707][T10314] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  243.928283][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  243.938390][T10314] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  243.951408][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  244.178887][T10314] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.204901][T10314] 8021q: adding VLAN 0 to HW filter on device team0
[  244.224330][T10225] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.227377][T10225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.250420][T10225] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.253350][T10225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.289853][ T5355] 8021q: adding VLAN 0 to HW filter on device eth12
[  244.345213][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1768'.
[  244.537165][ T5633] Bluetooth: hci2: command tx timeout
[  244.731674][T10314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.979635][T10314] veth0_vlan: entered promiscuous mode
[  245.002784][T10314] veth1_vlan: entered promiscuous mode
[  245.049646][T10314] veth0_macvtap: entered promiscuous mode
[  245.075116][T10314] veth1_macvtap: entered promiscuous mode
[  245.095810][T10314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.116437][T10314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.142579][ T5689] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.146311][ T5689] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.160915][ T5689] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.169059][ T5689] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.297672][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.304782][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.343506][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.347370][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.618370][T10484] netlink: 656 bytes leftover after parsing attributes in process `syz.7.1773'.
[  245.635136][T10484] netlink: 656 bytes leftover after parsing attributes in process `syz.7.1773'.
[  245.715187][T10488] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1775'.
[  246.617532][ T5633] Bluetooth: hci2: command tx timeout
[  246.697832][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.703446][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.971159][T10539] netlink: 'syz.7.1793': attribute type 10 has an invalid length.
[  247.399450][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'.
[  247.444289][T10547] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1797'.
[  247.884162][T10581] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1808'.
[  247.978036][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.697382][ T5633] Bluetooth: hci2: command tx timeout
[  248.980673][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'.
[  249.004362][T10634] netlink: set zone limit has 4 unknown bytes
[  250.259332][T10666] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1841'.
[  250.894831][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1844'.
[  251.735929][T10691] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1852'.
[  253.028936][T10715] netlink: 'syz.7.1862': attribute type 10 has an invalid length.
[  253.031697][T10715] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1862'.
[  253.048079][T10715] dummy0: entered promiscuous mode
[  253.056477][T10715] dummy0: entered allmulticast mode
[  253.078164][T10715] bridge0: port 3(dummy0) entered blocking state
[  253.081639][T10715] bridge0: port 3(dummy0) entered disabled state
[  253.088810][T10715] bridge0: port 3(dummy0) entered blocking state
[  253.090827][T10715] bridge0: port 3(dummy0) entered forwarding state
[  253.460267][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'.
[  253.493170][T10742] netlink: 'syz.7.1872': attribute type 27 has an invalid length.
[  253.906261][T10755] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1878'.
[  253.928201][T10755] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.933496][T10755] bond_slave_0: left promiscuous mode
[  253.963242][T10755] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.976777][T10755] bond_slave_1: left promiscuous mode
[  254.003147][T10755] .` (unregistering): (slave netdevsim1): Releasing backup interface
[  254.040905][T10755] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  254.053107][T10755] .` (unregistering): Released all slaves
[  254.720702][T10742] Set syz1 is full, maxelem 6117 reached
[  255.003198][ T5633] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  255.196442][T10772] lo speed is unknown, defaulting to 1000
[  255.265559][T10772] lo speed is unknown, defaulting to 1000
[  255.292734][T10772] lo speed is unknown, defaulting to 1000
[  255.974404][   T31] lo speed is unknown, defaulting to 1000
[  255.984387][T10772] infiniband sz1: set active
[  255.990246][T10772] infiniband sz1: added lo
[  256.035988][T10772] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  256.051229][T10772] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  256.067522][T10772] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  256.134798][T10772] RDS/IB: sz1: added
[  256.144283][T10772] smc: adding ib device sz1 with port count 1
[  256.149627][T10772] smc:    ib device sz1 port 1 has no pnetid
[  256.154931][ T5697] lo speed is unknown, defaulting to 1000
[  256.264821][T10772] lo speed is unknown, defaulting to 1000
[  256.497682][T10772] lo speed is unknown, defaulting to 1000
[  256.682975][T10772] lo speed is unknown, defaulting to 1000
[  256.928626][T10772] lo speed is unknown, defaulting to 1000
[  257.062785][T10772] lo speed is unknown, defaulting to 1000
[  257.291539][T10803] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1886'.
[  257.320885][T10805] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1888'.
[  257.486675][T10814] netlink: 'syz.7.1891': attribute type 2 has an invalid length.
[  257.703852][T10816] netlink: 'syz.7.1892': attribute type 4 has an invalid length.
[  257.707469][T10816] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1892'.
[  257.712310][T10816] .`: renamed from bond0 (while UP)
[  258.594929][T10823] netlink: 'syz.3.1894': attribute type 10 has an invalid length.
[  258.611879][T10823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.648157][T10823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.972117][T10837] netlink: 'syz.7.1901': attribute type 29 has an invalid length.
[  258.977193][T10837] netlink: 'syz.7.1901': attribute type 29 has an invalid length.
[  258.982613][T10837] netlink: 'syz.7.1901': attribute type 29 has an invalid length.
[  259.297064][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  259.305865][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  259.310988][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  259.319659][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  259.326484][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  259.464093][T10853] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1908'.
[  259.502977][T10850] lo speed is unknown, defaulting to 1000
[  260.074876][T10850] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.077264][T10850] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.079656][T10850] bridge_slave_0: entered allmulticast mode
[  260.085640][T10850] bridge_slave_0: entered promiscuous mode
[  260.093615][T10850] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.097105][T10850] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.099923][T10850] bridge_slave_1: entered allmulticast mode
[  260.104142][T10850] bridge_slave_1: entered promiscuous mode
[  260.131337][T10850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.139676][T10850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.174884][T10850] team0: Port device team_slave_0 added
[  260.182930][T10850] team0: Port device team_slave_1 added
[  260.216431][T10850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.221472][T10850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.232718][T10850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.242486][T10850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.245311][T10850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.255967][T10850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.276402][T10900] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1923'.
[  260.281542][T10900] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1923'.
[  260.321326][T10850] hsr_slave_0: entered promiscuous mode
[  260.323821][T10850] hsr_slave_1: entered promiscuous mode
[  260.330101][T10850] debugfs: 'hsr0' already exists in 'hsr'
[  260.334054][T10850] Cannot create hsr debugfs directory
[  260.336924][T10904] netlink: 64959 bytes leftover after parsing attributes in process `syz.7.1925'.
[  260.556898][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'.
[  260.561602][T10909] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  260.564537][T10909] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  260.609240][T10850] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  260.625684][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  260.633616][T10850] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  260.644096][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  260.648301][T10850] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  260.661083][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  260.668781][T10850] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  260.674492][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  260.742599][T10850] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.745094][T10850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.747780][T10850] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.750066][T10850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.826594][T10924] netlink: 'syz.7.1931': attribute type 39 has an invalid length.
[  260.896055][T10850] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.908460][T10222] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.912218][T10222] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.946670][T10850] 8021q: adding VLAN 0 to HW filter on device team0
[  260.982004][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.984825][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.054011][T10222] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.057613][T10222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.442216][ T4999] Bluetooth: hci4: command tx timeout
[  261.457308][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  261.460008][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  261.885368][T10850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.931077][T10940] netlink: 'syz.7.1935': attribute type 2 has an invalid length.
[  261.937666][T10940] netlink: 'syz.7.1935': attribute type 8 has an invalid length.
[  261.944706][T10940] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1935'.
[  262.063803][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.338378][T10850] veth0_vlan: entered promiscuous mode
[  262.397549][T10850] veth1_vlan: entered promiscuous mode
[  262.447044][T10850] veth0_macvtap: entered promiscuous mode
[  262.470646][T10850] veth1_macvtap: entered promiscuous mode
[  262.496031][T10850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.513298][T10850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.534150][ T5499] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.550174][ T5499] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.564044][ T5499] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.585182][ T5499] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.744160][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.751518][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.782768][ T6150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.786711][ T6150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.410514][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.497367][ T4999] Bluetooth: hci4: command tx timeout
[  264.001887][T11004] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1956'.
[  265.581999][ T4999] Bluetooth: hci4: command tx timeout
[  266.541755][T11077] netlink: 'syz.7.1966': attribute type 10 has an invalid length.
[  266.575671][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.826067][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'.
[  266.865721][T11077] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  266.905382][T11077] team0: Port device wlan0 added
[  267.109784][T11087] netlink: 'syz.3.1970': attribute type 21 has an invalid length.
[  267.112779][T11087] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1970'.
[  267.115777][T11087] netlink: 'syz.3.1970': attribute type 5 has an invalid length.
[  267.125829][T11087] netlink: 'syz.3.1970': attribute type 6 has an invalid length.
[  267.128623][T11087] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1970'.
[  267.416358][T11104] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1978'.
[  267.707088][ T4999] Bluetooth: hci4: command tx timeout
[  267.873538][T11122] netlink: 34 bytes leftover after parsing attributes in process `syz.7.1986'.
[  268.051671][T11126] netlink: 'syz.7.1988': attribute type 1 has an invalid length.
[  268.055034][T11126] netlink: 'syz.7.1988': attribute type 4 has an invalid length.
[  268.061767][T11126] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1988'.
[  268.334944][T11128] netlink: 'syz.7.1989': attribute type 13 has an invalid length.
[  268.425175][T11133] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1991'.
[  269.498906][T11128] bridge0: port 3(dummy0) entered disabled state
[  269.502864][T11128] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.507845][T11128] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.605194][T11128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.734769][T11128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.171833][T11145] hsr0: entered promiscuous mode
[  272.173895][T11145] hsr0: entered allmulticast mode
[  272.173914][ T5426] lo speed is unknown, defaulting to 1000
[  272.175892][T11145] hsr_slave_0: entered allmulticast mode
[  272.175916][T11145] hsr_slave_1: entered allmulticast mode
[  272.193255][ T5499] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.194661][ T5426] sz1: Port: 1 Link DOWN
[  272.210480][ T5499] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.220001][ T5499] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.227365][ T5499] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.228314][ T5688] lo speed is unknown, defaulting to 1000
[  272.551986][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'.
[  272.720976][ T4999] Bluetooth: hci3: Malformed LE Event: 0x0d
[  272.840668][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'.
[  276.131744][T11203] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2022'.
[  276.405839][T11212] netlink: 'syz.7.2021': attribute type 27 has an invalid length.
[  276.423243][T11212] netlink: 'syz.7.2021': attribute type 3 has an invalid length.
[  276.436852][T11212] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2021'.
[  276.488381][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2021'.
[  276.492996][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2021'.
[  277.299913][T11208] infiniband syg0: set active
[  277.304362][T11208] infiniband syg0: added team0
[  277.310167][T11208] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  277.320000][T11208] infiniband syg0: Couldn't open port 1
[  277.328200][T11208] smbdirect: ib_dev[syg0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  277.344205][T11208] smbdirect: ib_dev[syg0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  277.357250][T11208] smbdirect: ib_dev[syg0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  277.391135][T11236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2034'.
[  277.464046][T11208] RDS/IB: syg0: added
[  277.465344][T11208] smc: adding ib device syg0 with port count 1
[  277.470581][T11208] smc:    ib device syg0 port 1 has no pnetid
[  278.110272][T11269] : renamed from sit0
[  278.114756][T11269] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  278.188243][ T5633] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  278.324174][T11278] openvswitch: netlink: Actions may not be safe on all matching packets
[  278.361659][T11278] : renamed from bond_slave_0
[  278.454543][T11283] netlink: zone id is out of range
[  278.456484][T11283] netlink: zone id is out of range
[  278.460867][T11283] netlink: zone id is out of range
[  278.462666][T11283] netlink: zone id is out of range
[  278.464342][T11283] netlink: zone id is out of range
[  278.466149][T11283] netlink: zone id is out of range
[  278.472507][T11283] netlink: zone id is out of range
[  278.479034][T11283] netlink: zone id is out of range
[  278.503854][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2057'.
[  278.534969][T11285] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  278.815981][T11295] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2062'.
[  278.832457][T11295] netlink: 'syz.7.2062': attribute type 39 has an invalid length.
[  278.836062][T11295] hsr_slave_0: left promiscuous mode
[  278.848707][T11295] hsr_slave_1: left promiscuous mode
[  278.867234][ T5633] Bluetooth: hci0: command 0x0406 tx timeout
[  279.313981][T11312] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2070'.
[  279.323787][T11312] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2070'.
[  280.569057][T11353] netlink: 'syz.8.2089': attribute type 10 has an invalid length.
[  280.591394][T11353] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  280.603555][T11353] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  280.795838][T11367] netlink: 763 bytes leftover after parsing attributes in process `syz.8.2095'.
[  281.211154][   T34] audit: type=1107 audit(1782576634.882:5): pid=11380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  281.274287][T11385] netlink: 'syz.3.2102': attribute type 6 has an invalid length.
[  281.278782][T11385] netlink: 10376 bytes leftover after parsing attributes in process `syz.3.2102'.
[  285.019977][T11432] netlink: 'syz.3.2122': attribute type 5 has an invalid length.
[  286.107212][T11469] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2138'.
[  287.266211][T11489] netlink: 'syz.8.2145': attribute type 2 has an invalid length.
[  287.276399][T11489] netlink: 'syz.8.2145': attribute type 4 has an invalid length.
[  287.286508][T11489] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2145'.
[  287.445614][T11489] lo speed is unknown, defaulting to 1000
[  287.947790][T11508] netlink: 'syz.7.2151': attribute type 4 has an invalid length.
[  287.954365][T11508] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2151'.
[  289.266080][T11543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2167'.
[  289.369753][T11549] netlink: 'syz.7.2171': attribute type 3 has an invalid length.
[  289.862533][ T4999] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7
[  290.054931][T11568] netlink: 'syz.8.2179': attribute type 20 has an invalid length.
[  290.061418][T11568] IPv6: NLM_F_CREATE should be specified when creating new route
[  290.140931][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'.
[  290.492383][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2183'.
[  290.609661][T11588] netlink: 'syz.8.2188': attribute type 2 has an invalid length.
[  290.731203][T11599] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2194'.
[  290.890070][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2197'.
[  291.498276][    C0] net_ratelimit: 16 callbacks suppressed
[  291.498294][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.226520][T11609] netlink: 'syz.3.2199': attribute type 1 has an invalid length.
[  293.706270][T11629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.832566][T11641] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2213'.
[  293.970007][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2217'.
[  293.977787][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2217'.
[  293.982477][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2217'.
[  294.118980][T11658] netlink: 'syz.8.2220': attribute type 1 has an invalid length.
[  294.134292][T11658] netlink: 'syz.8.2220': attribute type 9 has an invalid length.
[  294.159758][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2220'.
[  294.191432][T11662] syzkaller0: entered promiscuous mode
[  294.194918][T11662] syzkaller0: entered allmulticast mode
[  294.665460][T11660] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2222'.
[  294.669300][T11660] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2222'.
[  296.469102][  T141] wlan1: Trigger new scan to find an IBSS to join
[  297.040918][T11694] netlink: 'syz.3.2241': attribute type 21 has an invalid length.
[  297.043447][T11694] netlink: 'syz.3.2241': attribute type 22 has an invalid length.
[  297.046189][T11694] netlink: 'syz.3.2241': attribute type 13 has an invalid length.
[  297.050877][T11694] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.2241'.
[  297.198104][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.203659][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.210218][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.214296][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.219313][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.267541][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.513497][T11702] lo speed is unknown, defaulting to 1000
[  297.584046][T11726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.600693][T11729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2250'.
[  297.607909][ T5499] bridge0: port 3(dummy0) entered disabled state
[  297.617560][ T5499] bridge_slave_1: left allmulticast mode
[  297.623073][ T5499] bridge_slave_1: left promiscuous mode
[  297.631519][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.651265][ T5499] bridge_slave_0: left allmulticast mode
[  297.663094][ T5499] bridge_slave_0: left promiscuous mode
[  297.670625][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.824275][ T5499] .` (unregistering): (slave 42): Releasing backup interface
[  297.828921][ T5499] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.832326][ T5499] .` (unregistering): Released all slaves
[  297.860696][T11734] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2251'.
[  297.865957][T11734] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  297.876625][ T5355] 8021q: adding VLAN 0 to HW filter on device eth13
[  298.096488][ T5499] team0: Port device wlan0 removed
[  298.216882][ T5355] 8021q: adding VLAN 0 to HW filter on device eth14
[  298.550556][ T5355] 8021q: adding VLAN 0 to HW filter on device eth15
[  298.875699][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.884992][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.125424][T11790] netlink: zone id is out of range
[  299.128744][T11790] netlink: zone id is out of range
[  299.132084][T11790] netlink: zone id is out of range
[  299.134772][T11790] netlink: zone id is out of range
[  299.144496][T11790] netlink: zone id is out of range
[  299.146599][T11790] netlink: zone id is out of range
[  299.151675][T11790] netlink: zone id is out of range
[  299.182186][T11792] netlink: 'syz.8.2269': attribute type 1 has an invalid length.
[  299.188944][T11792] netlink: 'syz.8.2269': attribute type 2 has an invalid length.
[  299.191586][T11792] netlink: 'syz.8.2269': attribute type 3 has an invalid length.
[  299.211186][ T5499] team0 (unregistering): Port device team_slave_1 removed
[  299.242762][ T5499] team0 (unregistering): Port device team_slave_0 removed
[  299.258015][ T4999] Bluetooth: hci2: command tx timeout
[  299.449662][T10213] smc: removing ib device sz1
[  299.480405][ T5355] 8021q: adding VLAN 0 to HW filter on device eth16
[  299.500331][ T6150] wlan1: Trigger new scan to find an IBSS to join
[  299.593073][T11799] __nla_validate_parse: 1 callbacks suppressed
[  299.593331][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2272'.
[  299.648652][T10213] smbdirect: ib_dev[sz1] removed
[  300.013417][T11702] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.025247][T11702] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.029970][T11702] bridge_slave_0: entered allmulticast mode
[  300.050846][T11702] bridge_slave_0: entered promiscuous mode
[  300.067309][T11702] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.073196][T11702] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.082383][T11702] bridge_slave_1: entered allmulticast mode
[  300.118556][T11702] bridge_slave_1: entered promiscuous mode
[  300.382862][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.405022][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.548508][T11702] team0: Port device team_slave_0 added
[  300.570747][T11702] team0: Port device team_slave_1 added
[  300.671828][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.678093][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.702305][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.722218][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.731302][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.754170][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.810495][ T4999] Bluetooth: hci4: Malformed Event: 0x2f
[  300.966621][T11702] hsr_slave_0: entered promiscuous mode
[  300.974348][T11702] hsr_slave_1: entered promiscuous mode
[  300.990076][T11702] debugfs: 'hsr0' already exists in 'hsr'
[  300.991916][T11702] Cannot create hsr debugfs directory
[  301.337111][ T4999] Bluetooth: hci2: command tx timeout
[  301.344008][T11850] netlink: 'syz.8.2291': attribute type 21 has an invalid length.
[  301.575878][T11702] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  301.585583][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  301.589947][T11702] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  301.594397][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  301.598143][T11702] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  301.613487][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  301.616289][T11702] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  301.623517][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  301.756358][T11702] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.783549][T11702] 8021q: adding VLAN 0 to HW filter on device team0
[  301.794951][T10213] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.797402][T10213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.813248][T10213] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.815508][T10213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.216076][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.393130][    C0] net_ratelimit: 69 callbacks suppressed
[  302.393186][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.461089][   T41] wlan1: Creating new IBSS network, BSSID 62:d3:b9:2d:97:21
[  302.491914][T11702] veth0_vlan: entered promiscuous mode
[  302.513957][T11702] veth1_vlan: entered promiscuous mode
[  302.575533][T11702] veth0_macvtap: entered promiscuous mode
[  302.594148][T11702] veth1_macvtap: entered promiscuous mode
[  302.630545][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.644914][T11897] netlink: 'syz.8.2301': attribute type 2 has an invalid length.
[  302.664237][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.685444][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.693916][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.713737][T11899] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2302'.
[  302.715009][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.723721][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.765443][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2304'.
[  302.882573][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.888541][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.928514][ T6150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.935500][ T6150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.152652][T11923] netlink: 'syz.9.2312': attribute type 4 has an invalid length.
[  303.316246][T11929] netlink: 'syz.8.2315': attribute type 13 has an invalid length.
[  303.344608][T11929] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2315'.
[  303.365177][T11933] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2317'.
[  303.368625][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2315'.
[  303.417498][ T4999] Bluetooth: hci2: command tx timeout
[  303.456398][T11937] openvswitch: netlink: Flow key attr not present in new flow.
[  303.507096][T11940] netlink: 416 bytes leftover after parsing attributes in process `syz.3.2319'.
[  305.497432][ T4999] Bluetooth: hci2: command tx timeout
[  310.595283][T12043] openvswitch: netlink: Actions may not be safe on all matching packets
[  310.768549][T12041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2367'.
[  312.833456][T12129] netlink: 'syz.3.2391': attribute type 19 has an invalid length.
[  312.854293][T12129] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2391'.
[  312.929148][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2392'.
[  313.045035][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2394'.
[  313.057792][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2394'.
[  313.065975][T12139] netlink: 'syz.3.2394': attribute type 6 has an invalid length.
[  313.773403][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2400'.
[  314.022218][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2405'.
[  315.456024][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2415'.
[  315.850426][T12200] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2419'.
[  315.964514][T12202] netlink: 'syz.3.2420': attribute type 33 has an invalid length.
[  315.970585][T12202] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2420'.
[  315.977240][T12202] `: renamed from syz_tun (while UP)
[  317.093870][T12223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2430'.
[  317.132221][T12223] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2430'.
[  317.434490][T12233] netlink: 'syz.3.2434': attribute type 21 has an invalid length.
[  317.445634][T12233] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2434'.
[  317.455834][T12233] netlink: 'syz.3.2434': attribute type 6 has an invalid length.
[  317.481924][T12235] netlink: 'syz.9.2436': attribute type 39 has an invalid length.
[  318.232901][T12257] netlink: 'syz.3.2446': attribute type 10 has an invalid length.
[  318.236069][T12257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.242105][T12257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.219117][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  319.227387][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  319.230497][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  319.233705][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  319.236417][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  319.371834][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'.
[  319.374865][T12283] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.825947][ T5499] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.936388][ T5499] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.073400][T12300] netlink: 'syz.9.2461': attribute type 10 has an invalid length.
[  320.078248][ T5499] bond0: (slave netdevsim1): Releasing backup interface
[  320.086291][T12300] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2461'.
[  320.092396][ T5499] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.111671][T12298] : renamed from vlan1
[  320.168344][ T5499] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.275094][T12303] netlink: 'syz.9.2463': attribute type 1 has an invalid length.
[  320.420679][T12271] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.431867][T12271] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.447291][T12271] bridge_slave_0: entered allmulticast mode
[  320.471812][T12271] bridge_slave_0: entered promiscuous mode
[  320.488382][T12271] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.494069][T12271] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.499254][T12271] bridge_slave_1: entered allmulticast mode
[  320.504438][T12271] bridge_slave_1: entered promiscuous mode
[  320.660579][T12271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.690492][T12271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.866566][ T5499] bridge_slave_1: left allmulticast mode
[  320.881918][ T5499] bridge_slave_1: left promiscuous mode
[  320.888843][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.904381][ T5499] bridge_slave_0: left allmulticast mode
[  320.915384][ T5499] bridge_slave_0: left promiscuous mode
[  320.933366][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.238204][T12330] netlink: 'syz.3.2468': attribute type 4 has an invalid length.
[  321.257383][ T4999] Bluetooth: hci6: command tx timeout
[  321.406737][ T5499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  321.427539][ T5499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.435837][ T5499] bond0 (unregistering): Released all slaves
[  321.483802][ T5355] 8021q: adding VLAN 0 to HW filter on device eth17
[  321.556685][T12271] team0: Port device team_slave_0 added
[  321.562294][T12271] team0: Port device team_slave_1 added
[  321.663770][T12336] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2471'.
[  321.670867][T12271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.678230][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  321.686006][T12338] netlink: 'syz.9.2472': attribute type 21 has an invalid length.
[  321.690705][T12338] IPv6: NLM_F_CREATE should be specified when creating new route
[  321.693928][T12338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.697154][T12338] IPv6: NLM_F_CREATE should be set when creating new route
[  321.700060][T12338] IPv6: NLM_F_CREATE should be set when creating new route
[  321.702923][T12338] IPv6: NLM_F_CREATE should be set when creating new route
[  321.707981][T12271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.709832][T12338] netlink: 'syz.9.2472': attribute type 21 has an invalid length.
[  321.714401][T12338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.719963][T12271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.722345][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  321.733980][T12271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.791687][T12340] netlink: 'syz.3.2473': attribute type 13 has an invalid length.
[  321.925188][T12271] hsr_slave_0: entered promiscuous mode
[  321.929368][T12271] hsr_slave_1: entered promiscuous mode
[  321.935036][T12271] debugfs: 'hsr0' already exists in 'hsr'
[  321.940281][T12271] Cannot create hsr debugfs directory
[  322.405392][T12366] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2482'.
[  322.552327][ T5499] hsr_slave_0: left promiscuous mode
[  322.568611][ T5499] hsr_slave_1: left promiscuous mode
[  322.580533][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.601796][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.606359][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.621102][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.629162][ T5499] veth1_macvtap: left promiscuous mode
[  322.633105][ T5499] veth0_macvtap: left promiscuous mode
[  322.635062][ T5499] veth1_vlan: left promiscuous mode
[  322.637453][ T5499] veth0_vlan: left promiscuous mode
[  322.863466][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  322.866122][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  323.013359][T12385] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  323.099833][ T5499] team0 (unregistering): Port device team_slave_1 removed
[  323.117290][ T5499] team0 (unregistering): Port device team_slave_0 removed
[  323.287752][ T6150] smc: removing ib device syg0
[  323.312043][ T5355] 8021q: adding VLAN 0 to HW filter on device eth18
[  323.341584][ T4999] Bluetooth: hci6: command tx timeout
[  323.381842][ T6150] smbdirect: ib_dev[syg0] removed
[  323.498061][   T35] INFO: task syz.0.911:8118 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  323.512807][   T35]       Not tainted syzkaller #0
[  323.522625][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  323.532678][   T35] task:syz.0.911       state:D stack:26344 pid:8118  tgid:8117  ppid:7929   task_flags:0x400140 flags:0x00080002
[  323.554775][   T35] Call Trace:
[  323.559117][   T35]  <TASK>
[  323.564231][   T35]  __schedule+0x17d9/0x56c0
[  323.578110][   T35]  ? __lock_acquire+0x683/0x2cf0
[  323.581725][   T35]  ? perf_trace_lock+0xff/0x410
[  323.583912][   T35]  ? __pfx___schedule+0x10/0x10
[  323.588424][   T35]  ? schedule+0x90/0x2b0
[  323.594257][   T35]  ? schedule+0x90/0x2b0
[  323.609637][   T35]  schedule+0x164/0x2b0
[  323.627167][   T35]  schedule_preempt_disabled+0x13/0x30
[  323.638738][   T35]  __mutex_lock+0x7bf/0x1550
[  323.647986][   T35]  ? __mutex_lock+0x5d4/0x1550
[  323.653198][   T35]  ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450
[  323.659757][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  323.664185][   T35]  ? net_generic+0x1e/0x240
[  323.668449][   T35]  ? net_generic+0x1e/0x240
[  323.671699][   T35]  ? net_generic+0x1e/0x240
[  323.674971][   T35]  nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450
[  323.680452][   T35]  ? __kmalloc_noprof+0x375/0x720
[  323.685364][   T35]  ? __asan_memset+0x22/0x50
[  323.692299][   T35]  ? __nla_validate_parse+0x2429/0x2d50
[  323.700628][   T35]  ? do_syscall_64+0x174/0x580
[  323.705933][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.714583][   T35]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[  323.722562][   T35]  ? __pfx___nla_validate_parse+0x10/0x10
[  323.733185][   T35]  ? rcu_is_watching+0x15/0xb0
[  323.738551][   T35]  ? trace_kmalloc+0x2a/0xf0
[  323.747911][   T35]  ? __kmalloc_noprof+0x396/0x720
[  323.754770][   T35]  ? __nla_parse+0x40/0x60
[  323.759524][   T35]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  323.767231][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  323.777093][   T35]  genl_family_rcv_msg_doit+0x233/0x340
[  323.788765][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  323.794709][   T35]  ? bpf_lsm_capable+0x9/0x20
[  323.807173][   T35]  ? security_capable+0x7e/0x2c0
[  323.811142][   T35]  genl_rcv_msg+0x614/0x7a0
[  323.817106][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.821187][   T35]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[  323.833989][   T35]  ? irqentry_exit+0x218/0x8f0
[  323.842535][   T35]  ? trace_irq_disable+0x3b/0x140
[  323.846522][   T35]  netlink_rcv_skb+0x226/0x4a0
[  323.853557][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.857742][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  323.861480][   T35]  ? down_read+0x2be/0x330
[  323.864958][   T35]  genl_rcv+0x28/0x40
[  323.877502][   T35]  netlink_unicast+0x7bb/0x940
[  323.879694][   T35]  netlink_sendmsg+0x813/0xb40
[  323.881683][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.883803][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  323.885698][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.896824][   T35]  sock_sendmsg_nosec+0x13a/0x180
[  323.900161][   T35]  ____sys_sendmsg+0x54e/0x850
[  323.902200][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  323.904285][   T35]  ? import_iovec+0x73/0xa0
[  323.906077][   T35]  ___sys_sendmsg+0x2a5/0x360
[  323.908549][   T35]  ? __lock_acquire+0x683/0x2cf0
[  323.910639][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  323.912738][   T35]  ? __fget_files+0x2a/0x420
[  323.914598][   T35]  ? __fget_files+0x2a/0x420
[  323.916600][   T35]  ? __fget_files+0x3a2/0x420
[  323.918937][   T35]  __x64_sys_sendmsg+0x1b1/0x290
[  323.921089][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  323.923366][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.925779][   T35]  do_syscall_64+0x174/0x580
[  323.927921][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.930413][   T35] RIP: 0033:0x7fe844b9ce59
[  323.932295][   T35] RSP: 002b:00007fe8459db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.935718][   T35] RAX: ffffffffffffffda RBX: 00007fe844e15fa0 RCX: 00007fe844b9ce59
[  323.939503][   T35] RDX: 0000000024000004 RSI: 0000200000000640 RDI: 0000000000000006
[  323.942909][   T35] RBP: 00007fe844c32e6f R08: 0000000000000000 R09: 0000000000000000
[  323.946170][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.953833][   T35] R13: 00007fe844e16038 R14: 00007fe844e15fa0 R15: 00007ffcfc681dd8
[  323.957891][   T35]  </TASK>
[  323.972328][   T35] 
[  323.972328][   T35] Showing all locks held in the system:
[  323.976288][   T35] 1 lock held by khungtaskd/35:
[  323.989650][ T5355] 8021q: adding VLAN 0 to HW filter on device eth19
[  323.995865][   T35]  #0: ffffffff8e959c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  324.001895][   T35] 1 lock held by dhcpcd/5355:
[  324.004160][   T35] 2 locks held by getty/5440:
[  324.006278][   T35]  #0: ffff8881120b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  324.012119][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  324.016355][   T35] 5 locks held by kworker/u8:2/5499:
[  324.018860][   T35]  #0: ffff8881012bd940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  324.023472][   T35]  #1: ffffc900042dfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  324.038144][   T35]  #2: ffffffff8fddc868 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  324.047046][   T35]  #3: ffff8881bd475610 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310
[  324.062992][   T35]  #4: ffffffff8e95fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  324.077228][   T35] 5 locks held by kworker/u9:15/6150:
[  324.079461][   T35] 2 locks held by syz.1.770/7768:
[  324.081628][   T35]  #0: ffffffff8fe5bae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  324.084897][   T35]  #1: ffffffff8ec8eaa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750
[  324.107188][   T35] 2 locks held by syz.0.911/8118:
[  324.113814][   T35]  #0: ffffffff8fe5bae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  324.127415][   T35]  #1: ffffffff8ec8eaa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450
[  324.142986][   T35] 2 locks held by syz.6.1768/10450:
[  324.150010][   T35]  #0: ffffffff8fe5bae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  324.162064][   T35]  #1: ffffffff8ec8eaa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610
[  324.173893][   T35] 8 locks held by syz-executor/12271:
[  324.178999][   T35]  #0: ffff8881149de450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  324.187094][   T35]  #1: ffff8881ba17fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  324.197104][   T35]  #2: ffff88816d1e3c38 (kn->active#48){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  324.200887][   T35]  #3: ffffffff8f667f20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  324.217053][   T35]  #4: ffff88801f85b128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  324.221143][   T35]  #5: ffff88801f8ae258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[  324.224339][   T35]  #6: ffffffff8fdeb400 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x800
[  324.237180][   T35]  #7: ffff88810c390e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2150
[  324.242536][   T35] 2 locks held by syz.3.2494/12391:
[  324.246287][   T35]  #0: ffffffff8fdeed00 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20
[  324.257126][   T35]  #1: ffffffff8e95ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  324.261645][   T35] 1 lock held by syz.9.2493/12393:
[  324.263819][   T35] 
[  324.264841][   T35] =============================================
[  324.264841][   T35] 
[  324.273338][   T35] NMI backtrace for cpu 1
[  324.273358][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  324.273374][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.273384][   T35] Call Trace:
[  324.273390][   T35]  <TASK>
[  324.273396][   T35]  dump_stack_lvl+0xe8/0x150
[  324.273419][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  324.273442][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  324.273461][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  324.273482][   T35]  sys_info+0x135/0x170
[  324.273500][   T35]  watchdog+0xfd7/0x1030
[  324.273528][   T35]  ? watchdog+0x1c7/0x1030
[  324.273555][   T35]  kthread+0x388/0x470
[  324.273600][   T35]  ? __pfx_watchdog+0x10/0x10
[  324.273620][   T35]  ? __pfx_kthread+0x10/0x10
[  324.273637][   T35]  ret_from_fork+0x514/0xb70
[  324.273656][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  324.273673][   T35]  ? __switch_to+0xc89/0x1420
[  324.273697][   T35]  ? __pfx_kthread+0x10/0x10
[  324.273714][   T35]  ret_from_fork_asm+0x1a/0x30
[  324.273743][   T35]  </TASK>
[  324.273750][   T35] Sending NMI from CPU 1 to CPUs 0:
[  324.326340][    C0] NMI backtrace for cpu 0
[  324.326360][    C0] CPU: 0 UID: 0 PID: 6150 Comm: kworker/u9:15 Not tainted syzkaller #0 PREEMPT(full) 
[  324.326377][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.326389][    C0] Workqueue: ib-unreg-wq ib_unregister_work
[  324.326412][    C0] RIP: 0010:kernfs_next_descendant_post+0x17e/0x310
[  324.326434][    C0] Code: f8 01 0f 85 29 01 00 00 e8 bf 0f 52 ff 4c 89 f3 e9 79 ff ff ff 89 d9 80 e1 07 fe c1 38 c1 7c d4 48 89 df e8 e4 c8 bf ff eb ca <4c> 8d 73 64 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 3a 01
[  324.326446][    C0] RSP: 0018:ffffc900078e7830 EFLAGS: 00000246
[  324.326458][    C0] RAX: ffff8881012bc800 RBX: ffff8881133333c0 RCX: 0000000000000046
[  324.326469][    C0] RDX: 0000000000000006 RSI: ffffffff8e25aa07 RDI: ffff88811056bb80
[  324.326479][    C0] RBP: 0000000000000001 R08: ffffffff8273fb2c R09: 0000000000000000
[  324.326488][    C0] R10: 0000000000000000 R11: ffffffff8e959c60 R12: dffffc0000000000
[  324.326497][    C0] R13: ffff88810a27fc30 R14: 0000000000000000 R15: dffffc0000000000
[  324.326508][    C0] FS:  0000000000000000(0000) GS:ffff88818dc24000(0000) knlGS:0000000000000000
[  324.326519][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  324.326528][    C0] CR2: 00007ffbb0e87e20 CR3: 000000016d13e000 CR4: 00000000000006f0
[  324.326565][    C0] DR0: 4000000800000000 DR1: 0000200000000300 DR2: 0000000000000000
[  324.326613][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  324.326621][    C0] Call Trace:
[  324.326626][    C0]  <TASK>
[  324.326634][    C0]  __kernfs_remove+0x17e/0x8e0
[  324.326652][    C0]  ? kernfs_find_ns+0x59f/0x600
[  324.326669][    C0]  kernfs_remove_by_name_ns+0xc0/0x140
[  324.326687][    C0]  sysfs_remove_group+0x101/0x2e0
[  324.326703][    C0]  sysfs_remove_groups+0x54/0xb0
[  324.326718][    C0]  ib_free_port_attrs+0x26e/0x3a0
[  324.326740][    C0]  disable_device+0x240/0x330
[  324.326757][    C0]  ? __pfx_disable_device+0x10/0x10
[  324.326773][    C0]  ? perf_trace_preemptirq_template+0xb2/0x350
[  324.326795][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  324.326815][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  324.326836][    C0]  __ib_unregister_device+0x2c9/0x400
[  324.326853][    C0]  ? rcu_is_watching+0x15/0xb0
[  324.326869][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  324.326887][    C0]  ib_unregister_work+0x19/0x30
[  324.326901][    C0]  process_scheduled_works+0xa8e/0x14e0
[  324.326933][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  324.326974][    C0]  ? assign_work+0x3cf/0x5d0
[  324.326995][    C0]  worker_thread+0xa47/0xfb0
[  324.327047][    C0]  kthread+0x388/0x470
[  324.327063][    C0]  ? __pfx_worker_thread+0x10/0x10
[  324.327081][    C0]  ? __pfx_kthread+0x10/0x10
[  324.327096][    C0]  ret_from_fork+0x514/0xb70
[  324.327113][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  324.327128][    C0]  ? __switch_to+0xc89/0x1420
[  324.327149][    C0]  ? __pfx_kthread+0x10/0x10
[  324.327164][    C0]  ret_from_fork_asm+0x1a/0x30
[  324.327188][    C0]  </TASK>
[  324.440377][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  324.443233][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  324.446885][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.450030][   T35] Call Trace:
[  324.451124][   T35]  <TASK>
[  324.452050][   T35]  vpanic+0x56c/0xa60
[  324.453282][   T35]  ? __pfx___schedule+0x10/0x10
[  324.454772][   T35]  ? __pfx_vpanic+0x10/0x10
[  324.456179][   T35]  panic+0xc5/0xd0
[  324.457387][   T35]  ? __pfx_panic+0x10/0x10
[  324.458762][   T35]  ? preempt_schedule_common+0x82/0xd0
[  324.460411][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  324.462118][   T35]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  324.464134][   T35]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  324.466159][   T35]  watchdog+0x1030/0x1030
[  324.467671][   T35]  ? watchdog+0x1c7/0x1030
[  324.469089][   T35]  kthread+0x388/0x470
[  324.470539][   T35]  ? __pfx_watchdog+0x10/0x10
[  324.472202][   T35]  ? __pfx_kthread+0x10/0x10
[  324.473715][   T35]  ret_from_fork+0x514/0xb70
[  324.475400][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  324.477291][   T35]  ? __switch_to+0xc89/0x1420
[  324.479111][   T35]  ? __pfx_kthread+0x10/0x10
[  324.480824][   T35]  ret_from_fork_asm+0x1a/0x30
[  324.482518][   T35]  </TASK>
[  324.484451][   T35] Kernel Offset: disabled
[  324.486129][   T35] Rebooting in 86400 seconds..
