last executing test programs:

4m33.11660255s ago: executing program 0 (id=1370):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0)

4m32.975318025s ago: executing program 0 (id=1371):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x9a9e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4\x04\x00+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a200900053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

4m32.873764097s ago: executing program 0 (id=1373):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m32.871315335s ago: executing program 0 (id=1374):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x31, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3ff, @remote, 0x4}}]}, 0x70}}, 0x4)

4m29.905970357s ago: executing program 0 (id=1381):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

4m29.903782164s ago: executing program 0 (id=1383):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x3f, 0x70bd26, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0)

4m14.890875948s ago: executing program 32 (id=1383):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x3f, 0x70bd26, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0)

2m40.799105138s ago: executing program 2 (id=2670):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000400)=0xffffffffffffffff, 0x11)

2m40.752816338s ago: executing program 2 (id=2671):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x78, &(0x7f0000000040), 0x4)

2m40.098537394s ago: executing program 2 (id=2672):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m39.758435156s ago: executing program 2 (id=2673):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x6, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20)

2m39.680581819s ago: executing program 2 (id=2674):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m39.630460794s ago: executing program 2 (id=2675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

2m24.470152581s ago: executing program 33 (id=2675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

2m16.336618354s ago: executing program 3 (id=2874):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

2m16.218236397s ago: executing program 3 (id=2877):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x17, &(0x7f0000000100)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd30bc791f4860246406f853f8f0eadad664503b45fdb7b5c366689c837fdcf97beeb608f932e7f6b1064bf8eb2988e5258f75bbfc67db851fd69e822e11ddbc831f38ec6042f83c6b19e118b1008b9773f855e5fbe4992597", 0x59}, {&(0x7f0000002740)="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", 0x554}], 0x2}, 0x80)

2m16.109492532s ago: executing program 3 (id=2878):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062", @ANYRESOCT=r0], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x240408d0)

2m16.047149604s ago: executing program 3 (id=2879):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000640)="78cafb73fc0201070000b04009dbd71a0ff872", 0x13}], 0x2}, 0x0)

2m16.046594095s ago: executing program 3 (id=2880):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

2m15.877463419s ago: executing program 3 (id=2882):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0011800a0001006c696d69740000002c0002800c000140fffffffffffffffc0c000240000000010000000008000440000000010800034000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)

2m0.874834136s ago: executing program 34 (id=2882):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0011800a0001006c696d69740000002c0002800c000140fffffffffffffffc0c000240000000010000000008000440000000010800034000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)

1m47.223935477s ago: executing program 5 (id=3220):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038002e001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m47.157322784s ago: executing program 5 (id=3221):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)

1m46.728125781s ago: executing program 5 (id=3226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0)

1m46.554343043s ago: executing program 5 (id=3229):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8000401, 0x10000}, 0x440, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2000040}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m43.275677696s ago: executing program 5 (id=3234):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m41.481544377s ago: executing program 5 (id=3257):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)

1m26.386329573s ago: executing program 35 (id=3257):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)

58.724098763s ago: executing program 6 (id=3746):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8907, 0x0)

58.65423531s ago: executing program 6 (id=3748):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

58.594015937s ago: executing program 6 (id=3750):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r1}, 0x10)

58.123590976s ago: executing program 6 (id=3753):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

58.123394841s ago: executing program 6 (id=3754):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

58.033678331s ago: executing program 6 (id=3758):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000003, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x12020)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x66, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

57.921701783s ago: executing program 1 (id=3762):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000006e0000006910ae000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

57.889184711s ago: executing program 1 (id=3763):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0)

57.653466029s ago: executing program 4 (id=3766):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000131401"], 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x4044000)

57.599129944s ago: executing program 4 (id=3767):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}, 0x30008041)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872460dba78b)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c004)

57.01204044s ago: executing program 4 (id=3768):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

57.011567675s ago: executing program 4 (id=3769):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

57.010946163s ago: executing program 4 (id=3770):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002000010325bd6314c568ffff05"], 0x14}, 0x1, 0x0, 0x0, 0x40448d3}, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

57.010725897s ago: executing program 1 (id=3771):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='.'], 0x50)

57.010510898s ago: executing program 1 (id=3772):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

56.531589431s ago: executing program 1 (id=3773):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

55.615538441s ago: executing program 4 (id=3774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

55.615056363s ago: executing program 1 (id=3775):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r3, 0x2}, 0x20)

38.696642971s ago: executing program 36 (id=3758):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000003, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x12020)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x66, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

38.696536144s ago: executing program 37 (id=3775):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r3, 0x2}, 0x20)

38.696352115s ago: executing program 38 (id=3774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

2.975546343s ago: executing program 7 (id=3986):
r0 = socket$kcm(0x28, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x9}}}, 0x80, 0x0}, 0x20048000)

2.866101106s ago: executing program 7 (id=3988):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000100010008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

2.684388801s ago: executing program 7 (id=3990):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000)

1.400770181s ago: executing program 7 (id=3993):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x9, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94)

1.400549314s ago: executing program 7 (id=3994):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='skb_copy_datagram_iovec\x00', r1, 0x0, 0x4651}, 0x18)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8f, 0xd, 0x0, 0x0, 0x0, 0x2, 0x3013a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xb}, 0x106522, 0x0, 0x6, 0x2, 0x3fc, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

983.624709ms ago: executing program 9 (id=4007):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005000000000004000a0002"], 0x28}}, 0x0)

930.148327ms ago: executing program 9 (id=4009):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

686.398081ms ago: executing program 9 (id=4013):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c083}, 0x0)

686.111026ms ago: executing program 8 (id=4014):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40100000d0a010800000000000000000a0000050900020073797a31000000000900010073797a3100000000b8010380b40100804c00018045"], 0x1e4}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

547.967084ms ago: executing program 8 (id=4015):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./cgroup/../file0\x00', 0x0, 0x8}, 0x18)

440.225547ms ago: executing program 9 (id=4016):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0)

350.786216ms ago: executing program 8 (id=4017):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x2, 0x3, 0x0, 0x3318, 0x800000, 0x7f, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x36)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x4000000)
r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r4, &(0x7f00000000c0), 0x26)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003, 0x0, 0x3000000}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)

278.84437ms ago: executing program 7 (id=4018):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x15, 0x0, 0x2, 0x8}, {0x3, 0x0, 0x0, 0x8}, {0x6, 0xfe, 0x0, 0x8000004}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

206.734431ms ago: executing program 9 (id=4019):
r0 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x114, 0xa, 0x0, 0x4)

206.31275ms ago: executing program 9 (id=4020):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x401c, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632397"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

80.638809ms ago: executing program 8 (id=4021):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x48890)
socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x2000c800)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8722f20, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x78, &(0x7f0000000040), 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x23, 0x2, 0x0)

783.235µs ago: executing program 8 (id=4022):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180)=0x1, 0x12)

0s ago: executing program 8 (id=4023):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, 0x0)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x18, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdcb}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

nnel TTL not specified.
[  146.177482][ T8468] netlink: 'syz.2.1085': attribute type 10 has an invalid length.
[  146.600680][ T8488] __nla_validate_parse: 1 callbacks suppressed
[  146.600690][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'.
[  146.607674][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'.
[  146.730773][ T8503] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1101'.
[  146.733973][ T8503] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  146.811617][ T8505] netlink: 'syz.2.1102': attribute type 12 has an invalid length.
[  146.815727][ T8505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1102'.
[  146.982499][ T8512] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1105'.
[  147.012112][ T8514] netlink: 'syz.2.1106': attribute type 280 has an invalid length.
[  147.269551][ T8520] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1110'.
[  147.366485][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  148.240492][ T8541] sock: sock_set_timeout: `syz.0.1118' (pid 8541) tries to set negative timeout
[  148.300554][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  148.304446][ T8547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1120'.
[  148.310943][ T8547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1120'.
[  148.420106][ T8555] netlink: 'syz.0.1125': attribute type 29 has an invalid length.
[  148.424082][ T8555] netlink: 'syz.0.1125': attribute type 29 has an invalid length.
[  148.435748][ T8555] netlink: 'syz.0.1125': attribute type 29 has an invalid length.
[  148.473656][ T8560] netlink: 'syz.0.1128': attribute type 7 has an invalid length.
[  150.322088][ T8626] validate_nla: 2 callbacks suppressed
[  150.322104][ T8626] netlink: 'syz.2.1155': attribute type 29 has an invalid length.
[  150.328847][ T8626] netlink: 'syz.2.1155': attribute type 29 has an invalid length.
[  150.332713][ T8626] netlink: 'syz.2.1155': attribute type 29 has an invalid length.
[  150.335786][ T8627] openvswitch: netlink: IP tunnel dst address not specified
[  151.251008][ T8641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.374886][ T8649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.558901][ T8662] netlink: 'syz.2.1169': attribute type 3 has an invalid length.
[  151.649138][ T8670] netlink: 'syz.0.1172': attribute type 4 has an invalid length.
[  151.652316][ T8670] __nla_validate_parse: 5 callbacks suppressed
[  151.652330][ T8670] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1172'.
[  151.833717][ T8673] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  151.838146][ T8673] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  152.606242][   T33] audit: type=1107 audit(1759316377.350:2): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  152.936145][ T8710] netlink: 'syz.2.1192': attribute type 10 has an invalid length.
[  153.057123][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'.
[  153.330660][ T8710] veth1_macvtap: left promiscuous mode
[  153.578607][ T8711] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1191'.
[  153.582345][ T8712] netlink: 'syz.0.1188': attribute type 3 has an invalid length.
[  153.585010][ T8713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1188'.
[  153.789953][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'.
[  153.793494][ T8727] openvswitch: netlink: Unknown nsh attribute 0
[  153.798380][ T8727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.019354][ T8736] netlink: 'syz.0.1203': attribute type 3 has an invalid length.
[  154.022290][ T8736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1203'.
[  154.427596][ T8738] xt_time: unknown flags 0xf4
[  154.446468][ T8742] C: renamed from team_slave_0 (while UP)
[  154.583423][ T8753] netlink: 'syz.1.1211': attribute type 21 has an invalid length.
[  154.691610][ T8759] netlink: 'syz.0.1213': attribute type 29 has an invalid length.
[  154.929658][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1218'.
[  155.291365][ T8783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1223'.
[  156.980817][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1365070648 wd_nsec: 1365070780
[  157.465385][ T8817] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  157.477170][ T8820] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  157.540876][ T8828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1240'.
[  157.649220][ T8834] validate_nla: 3 callbacks suppressed
[  157.649235][ T8834] netlink: 'syz.0.1243': attribute type 10 has an invalid length.
[  157.702007][ T8839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1243'.
[  157.819400][ T8847] netlink: 'syz.2.1249': attribute type 4 has an invalid length.
[  157.826375][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'.
[  157.974728][ T8834] team0 (unregistering): Port device C removed
[  157.980032][ T8834] team0 (unregistering): Port device team_slave_1 removed
[  157.983771][ T8852] openvswitch: netlink: IPv4 tun info is not correct
[  158.052177][ T5872] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11
[  158.145080][ T8864] netlink: 'syz.0.1257': attribute type 1 has an invalid length.
[  158.258406][ T8874] netlink: 'syz.0.1262': attribute type 6 has an invalid length.
[  158.261279][ T8874] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1262'.
[  158.349282][ T8880] netlink: 'syz.2.1265': attribute type 64 has an invalid length.
[  158.782167][ T8894] netlink: 'syz.2.1271': attribute type 3 has an invalid length.
[  158.785218][ T8894] netlink: 'syz.2.1271': attribute type 2 has an invalid length.
[  158.791965][ T8894] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.1271'.
[  159.648807][ T8927] : renamed from vlan0 (while UP)
[  161.150951][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'.
[  161.205414][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'.
[  161.398269][ T8945] netlink: 'syz.1.1291': attribute type 3 has an invalid length.
[  161.425033][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1294'.
[  161.428843][ T8949] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  161.527892][ T8945] netlink: 'syz.1.1291': attribute type 1 has an invalid length.
[  161.531103][ T8945] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1291'.
[  162.068029][ T8979] netlink: 'syz.2.1306': attribute type 10 has an invalid length.
[  162.070649][ T8979] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1306'.
[  162.420546][ T8996] openvswitch: netlink: Message has 25 unknown bytes.
[  162.424181][ T8996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.661224][ T9010] __nla_validate_parse: 1 callbacks suppressed
[  162.661235][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'.
[  162.976568][ T9037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1332'.
[  163.003876][ T5872] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  163.093904][ T9044] validate_nla: 2 callbacks suppressed
[  163.093919][ T9044] netlink: 'syz.0.1337': attribute type 1 has an invalid length.
[  163.244608][ T9051] netlink: 'syz.2.1341': attribute type 1 has an invalid length.
[  164.321511][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'.
[  164.330902][ T9075] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1346'.
[  164.334497][ T9077] netlink: 'syz.2.1352': attribute type 1 has an invalid length.
[  164.582278][ T9101] netlink: 'syz.1.1364': attribute type 21 has an invalid length.
[  164.743000][ T9109] netlink: 'syz.0.1367': attribute type 4 has an invalid length.
[  164.812643][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1368'.
[  164.998593][ T9122] netlink: 'syz.0.1371': attribute type 9 has an invalid length.
[  165.004193][ T9122] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.1371'.
[  167.307320][ T9131] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1375'.
[  167.310744][ T9130] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1375'.
[  167.314219][ T9131] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1375'.
[  168.190353][ T9148] netlink: 'syz.1.1384': attribute type 33 has an invalid length.
[  168.193496][ T9148] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1384'.
[  168.206379][ T9148] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  171.438957][ T9163] netlink: 'syz.2.1391': attribute type 11 has an invalid length.
[  171.442099][ T9163] netlink: 'syz.2.1391': attribute type 11 has an invalid length.
[  174.106369][ T9211] netlink: 'syz.2.1405': attribute type 9 has an invalid length.
[  174.108789][ T9211] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1405'.
[  174.382501][ T9216] netlink: 'syz.2.1406': attribute type 29 has an invalid length.
[  174.461809][ T9222] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1408'.
[  174.799996][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1413'.
[  174.854430][ T5872] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  174.923822][ T9237] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1413'.
[  174.931642][ T9237] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1413'.
[  174.936043][ T9237] netlink: 'syz.1.1413': attribute type 5 has an invalid length.
[  174.939994][ T9237] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1413'.
[  175.201873][ T9241] wg0 speed is unknown, defaulting to 1000
[  175.204270][ T9241] wg0 speed is unknown, defaulting to 1000
[  175.242281][ T9241] wg0 speed is unknown, defaulting to 1000
[  175.296077][ T9241] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  175.400125][ T9241] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  175.512713][ T9241] wg0 speed is unknown, defaulting to 1000
[  175.523423][ T9241] wg0 speed is unknown, defaulting to 1000
[  175.533822][ T9241] wg0 speed is unknown, defaulting to 1000
[  175.587315][ T9243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1417'.
[  175.785040][ T9252] netlink: 'syz.1.1421': attribute type 1 has an invalid length.
[  175.827755][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'.
[  177.095100][ T9274] netlink: 'syz.1.1430': attribute type 10 has an invalid length.
[  177.123044][ T9274] team0: Port device wlan1 added
[  177.159753][ T9274] netlink: 'syz.1.1430': attribute type 11 has an invalid length.
[  177.163784][ T9274] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1430'.
[  177.667904][ T9276] netlink: 'syz.2.1431': attribute type 29 has an invalid length.
[  177.759226][ T9272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.875000][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'.
[  178.202054][ T9296] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  178.332788][ T9302] netlink: 'syz.1.1443': attribute type 2 has an invalid length.
[  181.107726][ T9368] __nla_validate_parse: 1 callbacks suppressed
[  181.107739][ T9368] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1471'.
[  181.462140][ T9385] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  182.081167][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'.
[  182.091671][ T9417] netlink: 'syz.2.1495': attribute type 2 has an invalid length.
[  182.094160][ T9417] netlink: 'syz.2.1495': attribute type 8 has an invalid length.
[  182.105704][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1495'.
[  182.780979][ T9447] netlink: 'syz.2.1506': attribute type 8 has an invalid length.
[  182.987911][ T9456] nft_compat: unsupported protocol 0
[  183.197345][ T9461] netlink: 116572 bytes leftover after parsing attributes in process `syz.1.1513'.
[  183.319390][ T9470] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  183.322449][ T9470] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  183.362877][ T9474] : port 1(veth0_to_bridge) entered blocking state
[  183.365336][ T9474] : port 1(veth0_to_bridge) entered disabled state
[  183.372098][ T9474] veth0_to_bridge: entered allmulticast mode
[  183.376421][ T9474] veth0_to_bridge: entered promiscuous mode
[  183.383576][ T9474] : port 2(veth0_to_team) entered blocking state
[  183.389133][ T9474] : port 2(veth0_to_team) entered disabled state
[  183.391912][ T9474] veth0_to_team: entered allmulticast mode
[  183.395352][ T9474] veth0_to_team: entered promiscuous mode
[  183.478297][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.482392][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.485088][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.493653][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.496575][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.543018][ T9478] wg0 speed is unknown, defaulting to 1000
[  183.694132][ T9478] chnl_net:caif_netlink_parms(): no params data found
[  183.779413][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.852588][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.855325][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.861803][ T9478] bridge_slave_0: entered allmulticast mode
[  183.864862][ T9478] bridge_slave_0: entered promiscuous mode
[  183.947142][ T5909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.959843][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.962755][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.965339][ T9478] bridge_slave_1: entered allmulticast mode
[  183.968456][ T9478] bridge_slave_1: entered promiscuous mode
[  184.035018][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.069527][ T5909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.131971][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.200105][ T9478] team0: Port device team_slave_0 added
[  184.240381][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.249277][ T9478] team0: Port device team_slave_1 added
[  184.271073][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.273527][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.284304][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.290878][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.293377][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.303765][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.478426][ T9478] hsr_slave_0: entered promiscuous mode
[  184.481505][ T9478] hsr_slave_1: entered promiscuous mode
[  184.484368][ T9478] debugfs: 'hsr0' already exists in 'hsr'
[  184.488721][ T9478] Cannot create hsr debugfs directory
[  184.714996][ T5909] bridge_slave_1: left allmulticast mode
[  184.721875][ T5909] bridge_slave_1: left promiscuous mode
[  184.728826][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.739050][ T5909] bridge_slave_0: left allmulticast mode
[  184.743667][ T5909] bridge_slave_0: left promiscuous mode
[  184.749904][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.131050][ T5909] bond0 (unregistering): (slave 1!): Releasing backup interface
[  185.138724][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.143646][ T5909] bond0 (unregistering): Released all slaves
[  185.360492][ T9478] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  185.389450][ T9478] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  185.467740][ T9478] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  185.484851][ T9478] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  185.573265][ T9525] syzkaller0: entered promiscuous mode
[  185.575028][ T9525] syzkaller0: entered allmulticast mode
[  185.577686][ T5239] Bluetooth: hci3: command tx timeout
[  185.747009][ T9520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  185.756102][ T9520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  186.862005][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.963143][ T9478] 8021q: adding VLAN 0 to HW filter on device team0
[  186.974916][ T5909] hsr_slave_0: left promiscuous mode
[  186.978997][ T5909] hsr_slave_1: left promiscuous mode
[  186.992013][ T5909] veth1_macvtap: left promiscuous mode
[  186.994119][ T5909] veth0_macvtap: left promiscuous mode
[  187.004506][ T5909] veth1_vlan: left promiscuous mode
[  187.014662][ T5909] veth0_vlan: left promiscuous mode
[  187.022962][ T9551] netlink: 'syz.1.1537': attribute type 1 has an invalid length.
[  187.030010][ T9552] openvswitch: netlink: Flow actions attr not present in new flow.
[  187.656736][ T5239] Bluetooth: hci3: command tx timeout
[  187.708123][ T9552] syzkaller0: entered promiscuous mode
[  187.721906][  T192] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.724712][  T192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.746607][  T192] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.749220][  T192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.953600][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.017148][ T9478] veth0_vlan: entered promiscuous mode
[  188.026852][ T9478] veth1_vlan: entered promiscuous mode
[  188.042444][ T9478] veth0_macvtap: entered promiscuous mode
[  188.062249][ T9579] netlink: 'syz.2.1544': attribute type 33 has an invalid length.
[  188.070800][ T9579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1544'.
[  188.079598][ T9478] veth1_macvtap: entered promiscuous mode
[  188.099065][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.111862][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.185871][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.202348][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.226315][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.235258][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.308334][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.310810][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.330483][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.333038][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.435263][ T9599] xt_socket: unknown flags 0x20
[  188.570578][ T9608] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1554'.
[  188.687812][ T9613] netlink: set zone limit has 4 unknown bytes
[  188.872017][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'.
[  188.947660][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1567'.
[  188.950376][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1567'.
[  189.138839][ T9645] netlink: 'syz.1.1572': attribute type 21 has an invalid length.
[  189.150558][ T9645] netlink: 'syz.1.1572': attribute type 1 has an invalid length.
[  189.173431][ T9649] netlink: 'syz.3.1574': attribute type 10 has an invalid length.
[  189.184706][ T9649] netlink: 'syz.3.1574': attribute type 11 has an invalid length.
[  189.191239][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'.
[  189.245942][ T9654] netlink: 'syz.3.1576': attribute type 12 has an invalid length.
[  189.252741][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1576'.
[  189.499057][ T9669] wg0 speed is unknown, defaulting to 1000
[  189.576784][ T9672] netlink: 'syz.2.1583': attribute type 1 has an invalid length.
[  189.640530][ T9669] netlink: 'syz.3.1582': attribute type 10 has an invalid length.
[  189.651163][ T9669] team0: Port device wlan1 added
[  189.678024][ T9678] netlink: 'syz.2.1585': attribute type 3 has an invalid length.
[  189.735951][ T5239] Bluetooth: hci3: command tx timeout
[  189.880294][ T9684] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  190.002927][ T9645] syz.1.1572 (9645) used greatest stack depth: 18992 bytes left
[  190.055422][ T9692] netlink: 'syz.2.1591': attribute type 39 has an invalid length.
[  191.000848][ T9713] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1599'.
[  191.141197][ T9713] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1599'.
[  191.771982][ T5239] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  191.818831][ T5239] Bluetooth: hci3: command tx timeout
[  191.929899][ T9758] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1619'.
[  191.997269][ T9763] bpf: Bad value for 'gid'
[  193.475517][ T9836] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1652'.
[  193.552723][ T9840] syzkaller0: entered promiscuous mode
[  193.555074][ T9840] syzkaller0: entered allmulticast mode
[  194.067295][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.070018][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.449258][ T9849] lo: entered allmulticast mode
[  195.457655][ T9849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.539538][ T9863] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1662'.
[  196.195662][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  196.348677][ T9898] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1678'.
[  196.569504][ T9900] validate_nla: 3 callbacks suppressed
[  196.569598][ T9900] netlink: 'syz.3.1679': attribute type 39 has an invalid length.
[  196.622238][ T9901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1679'.
[  197.848400][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1691'.
[  197.852342][ T9928] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  197.901163][ T9932] netlink: 'syz.3.1692': attribute type 21 has an invalid length.
[  197.904255][ T9932] netlink: 'syz.3.1692': attribute type 6 has an invalid length.
[  197.911298][ T9932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1692'.
[  198.127321][ T9940] netlink: 'syz.2.1694': attribute type 13 has an invalid length.
[  198.714184][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  199.053316][ T9970] sctp: [Deprecated]: syz.2.1708 (pid 9970) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.053316][ T9970] Use struct sctp_sack_info instead
[  199.812819][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'.
[  199.822372][T10010] netlink: 'syz.3.1719': attribute type 1 has an invalid length.
[  199.856390][T10014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.886936][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'.
[  200.228814][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'.
[  200.899604][T10072] netlink: 'syz.3.1744': attribute type 21 has an invalid length.
[  201.046713][T10085] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1749'.
[  201.292931][T10098] netlink: 'syz.1.1753': attribute type 1 has an invalid length.
[  201.297996][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'.
[  201.399454][T10104] bridge0: port 3(ip6gretap0) entered blocking state
[  201.402133][T10104] bridge0: port 3(ip6gretap0) entered disabled state
[  201.404239][T10104] ip6gretap0: entered allmulticast mode
[  201.407250][T10104] ip6gretap0: entered promiscuous mode
[  201.409275][T10104] bridge0: port 3(ip6gretap0) entered blocking state
[  201.411666][T10104] bridge0: port 3(ip6gretap0) entered forwarding state
[  201.563932][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'.
[  202.456906][T10130] wg2: entered promiscuous mode
[  202.458585][T10130] wg2: entered allmulticast mode
[  203.150440][T10146] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1774'.
[  203.301237][T10167] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1781'.
[  208.319084][T10225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1806'.
[  209.021180][T10261] netlink: 'syz.3.1823': attribute type 11 has an invalid length.
[  209.024277][T10261] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1823'.
[  209.180461][T10260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.354124][T10283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1831'.
[  210.581625][T10297] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1838'.
[  210.584494][T10297] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1838'.
[  210.630255][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  210.901967][T10322] netlink: 'syz.2.1850': attribute type 1 has an invalid length.
[  210.955920][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'.
[  211.027750][T10333] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1854'.
[  211.035076][T10333] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1854'.
[  211.102747][T10335] netlink: 'syz.2.1856': attribute type 4 has an invalid length.
[  211.339696][T10345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.492150][T10353] netlink: 'syz.2.1865': attribute type 21 has an invalid length.
[  211.495515][T10353] IPv6: NLM_F_CREATE should be specified when creating new route
[  211.605049][T10357] netlink: 'syz.2.1867': attribute type 28 has an invalid length.
[  211.611269][T10357] netlink: 'syz.2.1867': attribute type 3 has an invalid length.
[  211.614390][T10357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1867'.
[  211.955188][T10371] netlink: 'syz.1.1872': attribute type 6 has an invalid length.
[  211.964697][T10371] IPv6: NLM_F_CREATE should be specified when creating new route
[  212.109811][T10377] netlink: 'syz.1.1874': attribute type 10 has an invalid length.
[  212.537136][T10377] team0: Port device wlan1 removed
[  213.184343][T10402] syzkaller0: entered promiscuous mode
[  213.186182][T10402] syzkaller0: entered allmulticast mode
[  213.259401][T10410] netlink: zone id is out of range
[  213.261454][T10410] netlink: zone id is out of range
[  213.263390][T10410] netlink: get zone limit has 8 unknown bytes
[  213.524739][T10428] netlink: 'syz.1.1898': attribute type 10 has an invalid length.
[  214.412077][T10430] netlink: 'syz.1.1899': attribute type 2 has an invalid length.
[  215.317706][T10461] syzkaller0: entered promiscuous mode
[  215.319470][T10461] syzkaller0: entered allmulticast mode
[  216.214658][T10495] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  216.274266][T10499] erspan0 speed is unknown, defaulting to 1000
[  216.304422][T10499] erspan0 speed is unknown, defaulting to 1000
[  216.313824][T10499] erspan0 speed is unknown, defaulting to 1000
[  217.419432][T10516] __nla_validate_parse: 3 callbacks suppressed
[  217.419449][T10516] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1937'.
[  217.425199][T10516] netlink: zone id is out of range
[  217.429198][T10516] netlink: get zone limit has 8 unknown bytes
[  217.465528][T10518] netlink: 'syz.3.1938': attribute type 3 has an invalid length.
[  217.469990][T10518] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1938'.
[  217.474255][T10499] infiniband syz2: set active
[  217.477284][   T47] erspan0 speed is unknown, defaulting to 1000
[  217.480933][T10499] infiniband syz2: added erspan0
[  217.483970][T10499] syz2: rxe_create_cq: returned err = -12
[  217.486804][T10499] infiniband syz2: Couldn't create ib_mad CQ
[  217.493962][T10499] infiniband syz2: Couldn't open port 1
[  217.550994][T10499] RDS/IB: syz2: added
[  217.553120][T10499] smc: adding ib device syz2 with port count 1
[  217.564296][T10499] smc:    ib device syz2 port 1 has pnetid 
[  217.568982][   T47] erspan0 speed is unknown, defaulting to 1000
[  217.572969][T10499] erspan0 speed is unknown, defaulting to 1000
[  217.800125][T10499] erspan0 speed is unknown, defaulting to 1000
[  217.987484][T10499] erspan0 speed is unknown, defaulting to 1000
[  217.989530][T10539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1946'.
[  218.370654][T10565] netlink: 'syz.2.1958': attribute type 40 has an invalid length.
[  218.406981][T10565] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.488557][T10618] netlink: 'syz.2.1982': attribute type 3 has an invalid length.
[  219.491827][T10618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1982'.
[  219.751170][T10629] wg2: left promiscuous mode
[  219.770960][T10629] wg2: entered promiscuous mode
[  219.870849][T10636] netlink: 'syz.2.1990': attribute type 10 has an invalid length.
[  220.659308][T10653] tc_dump_action: action bad kind
[  220.762470][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'.
[  220.772686][T10659] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2000'.
[  220.939168][T10670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2005'.
[  221.066192][T10680] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2010'.
[  221.289463][T10691] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2014'.
[  221.364698][T10695] syzkaller0: tun_chr_ioctl cmd 1074025677
[  221.368681][T10695] syzkaller0: linktype set to 801
[  221.716514][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'.
[  222.062264][T10735] netlink: 'syz.1.2033': attribute type 2 has an invalid length.
[  223.991238][T10773] __nla_validate_parse: 1 callbacks suppressed
[  223.991254][T10773] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.2052'.
[  224.001637][T10773] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ecN^{is|ؖS
[  224.121760][T10771] netlink: 'syz.2.2051': attribute type 21 has an invalid length.
[  224.125020][T10771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2051'.
[  224.225199][T10780] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  224.590625][T10789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.731840][T10807] : renamed from hsr0 (while UP)
[  224.734190][ T5872] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  225.163313][T10820] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2073'.
[  225.181758][T10820] hsr_slave_0: left promiscuous mode
[  225.191010][T10820] hsr_slave_1: left promiscuous mode
[  225.251654][T10821] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2073'.
[  225.279924][ T5239] Bluetooth: hci3: Malformed LE Event: 0x1d
[  225.488471][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2083'.
[  226.173519][T10868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'.
[  227.364383][T10878] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2098'.
[  227.467379][T10882] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2099'.
[  227.526235][T10887] netlink: 'syz.3.2102': attribute type 13 has an invalid length.
[  227.528804][T10887] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2102'.
[  227.593872][T10894] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2104'.
[  227.637944][T10900] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  228.174339][T10920] unsupported nlmsg_type 40
[  229.173005][T10969] __nla_validate_parse: 3 callbacks suppressed
[  229.173021][T10969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2138'.
[  229.197764][T10969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2138'.
[  229.208913][T10969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2138'.
[  229.514316][T10988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2147'.
[  230.344352][T11001] netlink: 'syz.1.2153': attribute type 10 has an invalid length.
[  231.593323][T11005] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2155'.
[  231.815632][   T33] audit: type=1107 audit(1759316456.560:3): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  232.244682][T11036] syz.1.2169: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  232.250640][T11036] CPU: 0 UID: 0 PID: 11036 Comm: syz.1.2169 Not tainted syzkaller #0 PREEMPT(full) 
[  232.250652][T11036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.250660][T11036] Call Trace:
[  232.250664][T11036]  <TASK>
[  232.250668][T11036]  dump_stack_lvl+0x189/0x250
[  232.250685][T11036]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.250694][T11036]  ? __pfx__printk+0x10/0x10
[  232.250706][T11036]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.250716][T11036]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.250725][T11036]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  232.250735][T11036]  warn_alloc+0x214/0x310
[  232.250744][T11036]  ? stack_depot_save_flags+0x40/0x860
[  232.250782][T11036]  ? __pfx_warn_alloc+0x10/0x10
[  232.250796][T11036]  ? kasan_save_track+0x4f/0x80
[  232.250809][T11036]  ? xskq_create+0x56/0x170
[  232.250818][T11036]  ? xsk_init_queue+0xb0/0x110
[  232.250825][T11036]  ? xsk_setsockopt+0x57b/0x8d0
[  232.250831][T11036]  ? do_sock_setsockopt+0x17c/0x1b0
[  232.250843][T11036]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  232.250853][T11036]  ? do_syscall_64+0xfa/0x3b0
[  232.250861][T11036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.250872][T11036]  __vmalloc_node_range_noprof+0x125/0x12f0
[  232.250893][T11036]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  232.250911][T11036]  ? __kasan_kmalloc+0x93/0xb0
[  232.250920][T11036]  vmalloc_user_noprof+0xad/0xf0
[  232.250928][T11036]  ? xskq_create+0xbf/0x170
[  232.250937][T11036]  xskq_create+0xbf/0x170
[  232.250949][T11036]  xsk_init_queue+0xb0/0x110
[  232.250960][T11036]  xsk_setsockopt+0x57b/0x8d0
[  232.250969][T11036]  ? __pfx_xsk_setsockopt+0x10/0x10
[  232.250977][T11036]  ? __pfx_aa_sk_perm+0x10/0x10
[  232.250987][T11036]  ? __fget_files+0x2a/0x420
[  232.250995][T11036]  ? aa_sock_opt_perm+0xff/0x1b0
[  232.251005][T11036]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  232.251015][T11036]  ? __pfx_xsk_setsockopt+0x10/0x10
[  232.251024][T11036]  do_sock_setsockopt+0x17c/0x1b0
[  232.251036][T11036]  __x64_sys_setsockopt+0x13f/0x1b0
[  232.251055][T11036]  do_syscall_64+0xfa/0x3b0
[  232.251068][T11036]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.251081][T11036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.251093][T11036]  ? exc_page_fault+0x9f/0xf0
[  232.251111][T11036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.251123][T11036] RIP: 0033:0x7fa089f8ec29
[  232.251136][T11036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.251147][T11036] RSP: 002b:00007fa08ad81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  232.251160][T11036] RAX: ffffffffffffffda RBX: 00007fa08a1d5fa0 RCX: 00007fa089f8ec29
[  232.251172][T11036] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  232.251180][T11036] RBP: 00007fa08a011e41 R08: 0000000000000004 R09: 0000000000000000
[  232.251188][T11036] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  232.251196][T11036] R13: 00007fa08a1d6038 R14: 00007fa08a1d5fa0 R15: 00007ffe5bfb0ff8
[  232.251218][T11036]  </TASK>
[  232.251224][T11036] Mem-Info:
[  232.367119][T11036] active_anon:5375 inactive_anon:0 isolated_anon:0
[  232.367119][T11036]  active_file:11427 inactive_file:38321 isolated_file:0
[  232.367119][T11036]  unevictable:1768 dirty:131 writeback:0
[  232.367119][T11036]  slab_reclaimable:10063 slab_unreclaimable:55472
[  232.367119][T11036]  mapped:18136 shmem:2411 pagetables:1149
[  232.367119][T11036]  sec_pagetables:0 bounce:0
[  232.367119][T11036]  kernel_misc_reclaimable:0
[  232.367119][T11036]  free:280308 free_pcp:19238 free_cma:0
[  232.384675][T11036] Node 0 active_anon:11228kB inactive_anon:0kB active_file:4900kB inactive_file:8444kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38268kB dirty:332kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6400kB pagetables:2768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.395518][T11036] Node 1 active_anon:10272kB inactive_anon:0kB active_file:40808kB inactive_file:144840kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34276kB dirty:192kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5220kB pagetables:1828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.409467][T11036] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.420381][T11036] lowmem_reserve[]: 0 811 811 811 811
[  232.422367][T11036] Node 0 DMA32 free:395296kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11228kB inactive_anon:0kB active_file:4900kB inactive_file:8444kB unevictable:3536kB writepending:332kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:47844kB local_pcp:29948kB free_cma:0kB
[  232.434028][T11036] lowmem_reserve[]: 0 0 0 0 0
[  232.440323][T11036] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  232.450368][T11036] lowmem_reserve[]: 0 0 854 854 854
[  232.452506][T11036] Node 1 Normal free:252084kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10272kB inactive_anon:0kB active_file:40808kB inactive_file:144840kB unevictable:3536kB writepending:192kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:28932kB local_pcp:20064kB free_cma:0kB
[  232.465080][T11036] lowmem_reserve[]: 0 0 0 0 0
[  232.469618][T11036] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  232.473957][T11036] Node 0 DMA32: 0*4kB 42*8kB (ME) 338*16kB (UME) 86*32kB (UME) 241*64kB (UM) 175*128kB (UME) 90*256kB (UME) 18*512kB (UM) 15*1024kB (M) 7*2048kB (ME) 70*4096kB (UM) = 394992kB
[  232.481294][T11036] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  232.487406][T11036] Node 1 Normal: 2*4kB (ME) 196*8kB (ME) 292*16kB (ME) 383*32kB (UME) 247*64kB (UME) 145*128kB (UM) 10*256kB (UME) 6*512kB (UME) 3*1024kB (M) 3*2048kB (UM) 45*4096kB (M) = 252040kB
[  232.493613][T11036] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.497689][T11036] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.500907][T11036] 52159 total pagecache pages
[  232.502595][T11036] 0 pages in swap cache
[  232.504092][T11036] Free swap  = 124996kB
[  232.505454][T11036] Total swap = 124996kB
[  232.507710][T11036] 786301 pages RAM
[  232.509312][T11036] 0 pages HighMem/MovableOnly
[  232.511304][T11036] 241359 pages reserved
[  232.512906][T11036] 0 pages cma reserved
[  232.786851][T11048] netlink: 'syz.1.2173': attribute type 2 has an invalid length.
[  232.790024][T11048] netlink: 'syz.1.2173': attribute type 8 has an invalid length.
[  232.793177][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2173'.
[  232.973650][T11054] netlink: 'syz.3.2174': attribute type 4 has an invalid length.
[  232.989859][T11061] netlink: 5844 bytes leftover after parsing attributes in process `syz.1.2177'.
[  233.637164][T11080] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2185'.
[  234.036155][T11098] delete_channel: no stack
[  234.038314][T11098] delete_channel: no stack
[  237.818071][T11167] netlink: 'syz.2.2219': attribute type 6 has an invalid length.
[  237.820466][T11167] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2219'.
[  238.846976][T11195] netlink: 'syz.1.2225': attribute type 11 has an invalid length.
[  238.855946][T11195] netlink: 'syz.1.2225': attribute type 5 has an invalid length.
[  238.859175][T11195] netlink: 4112 bytes leftover after parsing attributes in process `syz.1.2225'.
[  238.972677][T11205] netlink: 'syz.1.2228': attribute type 3 has an invalid length.
[  239.382114][T11220] netlink: 'syz.3.2236': attribute type 39 has an invalid length.
[  239.465476][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'.
[  239.482209][ T5872] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  239.729970][T11243] netlink: 'syz.3.2247': attribute type 2 has an invalid length.
[  239.741168][T11243] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2247'.
[  239.820914][T11246] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2248'.
[  240.501937][T11275] netlink: 'syz.1.2262': attribute type 16 has an invalid length.
[  240.507351][T11275] netlink: 'syz.1.2262': attribute type 17 has an invalid length.
[  240.770504][T11287] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2268'.
[  240.837711][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'.
[  241.399356][T11300] netlink: 'syz.2.2274': attribute type 6 has an invalid length.
[  241.401823][T11300] netlink: 'syz.2.2274': attribute type 7 has an invalid length.
[  241.404373][T11300] netlink: 'syz.2.2274': attribute type 1 has an invalid length.
[  241.410988][T11300] netlink: 449 bytes leftover after parsing attributes in process `syz.2.2274'.
[  241.413796][T11300] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.2274'.
[  241.417515][T11300] netlink: 449 bytes leftover after parsing attributes in process `syz.2.2274'.
[  242.869763][T11335] validate_nla: 3 callbacks suppressed
[  242.869779][T11335] netlink: 'syz.2.2289': attribute type 2 has an invalid length.
[  243.484457][T11369] netlink: 'syz.1.2306': attribute type 6 has an invalid length.
[  243.487010][T11369] __nla_validate_parse: 3 callbacks suppressed
[  243.487036][T11369] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2306'.
[  243.862500][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'.
[  245.021950][T11412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2324'.
[  245.136392][T11424] netlink: 'syz.1.2329': attribute type 28 has an invalid length.
[  245.139039][T11424] netlink: 'syz.1.2329': attribute type 29 has an invalid length.
[  245.141458][T11424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2329'.
[  245.291425][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'.
[  245.295171][T11431] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  245.299308][T11431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.694190][T11440] delete_channel: no stack
[  245.714374][T11440] delete_channel: no stack
[  245.958150][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'.
[  246.965421][T11452] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2340'.
[  247.079270][T11456] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2342'.
[  248.560471][T11471] netlink: 'syz.2.2349': attribute type 21 has an invalid length.
[  248.564320][T11471] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2349'.
[  248.564494][T11472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2347'.
[  248.571856][T11471] netlink: 'syz.2.2349': attribute type 4 has an invalid length.
[  248.626126][T11467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2347'.
[  248.631485][T11472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2347'.
[  248.676877][T11474] netlink: 'syz.2.2351': attribute type 2 has an invalid length.
[  248.714901][T11478] netlink: 'syz.2.2352': attribute type 58 has an invalid length.
[  248.717315][T11478] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2352'.
[  248.782091][T11479] netlink: 'syz.3.2350': attribute type 4 has an invalid length.
[  248.830800][T11483] veth0_vlan: entered allmulticast mode
[  249.006997][T11485] veth0_vlan: left promiscuous mode
[  249.010436][T11485] veth0_vlan: entered promiscuous mode
[  249.692019][T11488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.742473][T11490] netlink: 'syz.3.2357': attribute type 4 has an invalid length.
[  249.752056][T11492] xt_socket: unknown flags 0x6
[  250.000112][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2368'.
[  250.004074][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2368'.
[  250.195641][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'.
[  250.394185][T11521] netlink: 'syz.3.2372': attribute type 9 has an invalid length.
[  250.597013][T11521] netlink: 211924 bytes leftover after parsing attributes in process `syz.3.2372'.
[  250.755748][T11537] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2378'.
[  252.559809][T11568] netlink: 'syz.1.2390': attribute type 21 has an invalid length.
[  252.563665][T11568] netlink: 'syz.1.2390': attribute type 5 has an invalid length.
[  252.571252][T11568] netlink: 'syz.1.2390': attribute type 6 has an invalid length.
[  252.669746][ T5872] Bluetooth: hci3: unexpected event 0x2c length: 82 > 17
[  252.722041][T11583] veth0_vlan: entered allmulticast mode
[  252.984775][T11590] veth0_vlan: left promiscuous mode
[  252.989317][T11590] veth0_vlan: entered promiscuous mode
[  253.558159][T11623] veth0_vlan: entered allmulticast mode
[  253.789993][T11624] veth0_vlan: left promiscuous mode
[  253.792881][T11624] veth0_vlan: entered promiscuous mode
[  254.302405][T11630] __nla_validate_parse: 3 callbacks suppressed
[  254.302477][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2415'.
[  255.137379][T11655] netlink: 'syz.2.2425': attribute type 4 has an invalid length.
[  255.140623][T11655] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2425'.
[  255.267542][T11655] wlan1: mtu less than device minimum
[  255.499053][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.501567][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.647723][T11680] netlink: 'syz.3.2436': attribute type 29 has an invalid length.
[  255.651838][T11680] netlink: 'syz.3.2436': attribute type 29 has an invalid length.
[  255.657577][T11680] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2436'.
[  255.661369][T11680] unsupported nla_type 58
[  255.875075][T11696] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2444'.
[  255.921676][   T33] audit: type=1107 audit(1759316480.670:4): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lJ$'
[  259.397281][T11718] netlink: 'syz.1.2454': attribute type 1 has an invalid length.
[  259.406907][T11718] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2454'.
[  259.794012][T11742] netlink: 'syz.1.2462': attribute type 4 has an invalid length.
[  260.223411][T11769] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2475'.
[  260.391868][T11785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'.
[  260.422878][T11787] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2483'.
[  260.675093][T11804] netlink: 'syz.1.2491': attribute type 210 has an invalid length.
[  260.722258][T11805] netlink: 'syz.2.2492': attribute type 21 has an invalid length.
[  260.728483][T11805] netlink: 'syz.2.2492': attribute type 1 has an invalid length.
[  260.731278][T11805] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2492'.
[  260.898484][T11812] sit0: entered allmulticast mode
[  261.007689][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'.
[  261.299065][T11823] nftables ruleset with unbound chain
[  261.934248][T11860] syzkaller0: entered promiscuous mode
[  261.936526][T11860] syzkaller0: entered allmulticast mode
[  263.734292][T11880] netlink: 'syz.2.2524': attribute type 12 has an invalid length.
[  263.738880][T11880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2524'.
[  263.763571][T11880] syz.2.2524 (11880) used obsolete PPPIOCDETACH ioctl
[  263.911818][T11890] netlink: 'syz.1.2528': attribute type 10 has an invalid length.
[  263.920751][T11890] macvlan0: entered allmulticast mode
[  264.007277][T11890] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  264.381933][T11900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.618510][T11906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2536'.
[  264.672518][T11912] netlink: 'syz.2.2539': attribute type 3 has an invalid length.
[  264.772876][T11920] netlink: 'syz.2.2543': attribute type 1 has an invalid length.
[  264.779611][T11920] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2543'.
[  265.335308][T11966] netlink: 'syz.3.2564': attribute type 4 has an invalid length.
[  265.338881][T11966] netlink: 'syz.3.2564': attribute type 2 has an invalid length.
[  265.342264][T11966] netlink: 199408 bytes leftover after parsing attributes in process `syz.3.2564'.
[  265.477126][T11969] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2565'.
[  266.161117][T11983] netlink: 'syz.1.2570': attribute type 3 has an invalid length.
[  266.163836][T11983] netlink: 199752 bytes leftover after parsing attributes in process `syz.1.2570'.
[  267.157394][T12005] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2579'.
[  267.574606][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'.
[  267.719008][T12033] netlink: 'syz.3.2590': attribute type 10 has an invalid length.
[  267.725014][T12033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2590'.
[  267.763736][T12033] batman_adv: batadv0: Adding interface: vlan1
[  267.773681][T12033] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.797994][T12033] batman_adv: batadv0: Interface activated: vlan1
[  268.569629][T12054] syzkaller0: entered promiscuous mode
[  268.571811][T12054] syzkaller0: entered allmulticast mode
[  268.575170][T12057] netlink: 'syz.3.2602': attribute type 2 has an invalid length.
[  268.610423][T12059] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2603'.
[  268.904964][T12067] netlink: 'syz.3.2607': attribute type 10 has an invalid length.
[  268.907955][T12067] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2607'.
[  271.374540][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2609'.
[  272.439449][T12087] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2613'.
[  272.442437][T12087] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2613'.
[  272.563795][T12098] netlink: 'syz.2.2618': attribute type 29 has an invalid length.
[  272.571037][T12101] netlink: 'syz.1.2619': attribute type 3 has an invalid length.
[  272.574091][T12101] netlink: 'syz.1.2619': attribute type 1 has an invalid length.
[  272.578758][T12101] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2619'.
[  272.667028][T12098] netlink: 'syz.2.2618': attribute type 29 has an invalid length.
[  272.702730][T12098] netlink: 'syz.2.2618': attribute type 29 has an invalid length.
[  272.728718][T12098] netlink: 'syz.2.2618': attribute type 29 has an invalid length.
[  273.248254][T12130] sit0: entered allmulticast mode
[  273.290567][T12133] : entered promiscuous mode
[  273.297140][T12130] sit0: entered promiscuous mode
[  273.392743][T12138] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2635'.
[  273.608395][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2639'.
[  273.611276][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2639'.
[  274.317515][T12174] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  274.374449][T12168] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2648'.
[  275.367341][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'.
[  275.750363][T12212] syzkaller0: entered promiscuous mode
[  275.752556][T12212] syzkaller0: entered allmulticast mode
[  280.203309][T12245] netlink: 'syz.1.2676': attribute type 29 has an invalid length.
[  280.285170][T12249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2677'.
[  280.331923][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'.
[  280.342550][T12249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2677'.
[  280.444638][T12249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2677'.
[  280.690119][T12269] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2685'.
[  281.359595][T12289] netlink: 'syz.1.2693': attribute type 4 has an invalid length.
[  281.976460][T12301] netlink: 'syz.3.2699': attribute type 3 has an invalid length.
[  283.497065][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'.
[  283.501116][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'.
[  283.503924][T12329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.704577][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2988814394 wd_nsec: 2988814478
[  288.553344][T12370] netlink: 'syz.1.2731': attribute type 21 has an invalid length.
[  288.565724][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2731'.
[  288.751654][T12378] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.754865][T12378] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.958975][ T5872] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6
[  289.046337][T12388] netlink: 'syz.1.2739': attribute type 29 has an invalid length.
[  289.056304][T12388] netlink: 'syz.1.2739': attribute type 29 has an invalid length.
[  289.067013][T12388] netlink: 'syz.1.2739': attribute type 29 has an invalid length.
[  289.230577][T12396] bpf: Bad value for 'gid'
[  289.233458][T12396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  289.345494][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'.
[  291.466740][T12414] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2747'.
[  292.183715][T12432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[  292.197668][T12432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[  293.858359][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  293.862409][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  293.865536][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  293.869526][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  293.872384][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  294.039061][T12461] wg0 speed is unknown, defaulting to 1000
[  294.044973][T12461] erspan0 speed is unknown, defaulting to 1000
[  294.215351][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.321028][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.324628][T12475] netlink: 'syz.3.2771': attribute type 1 has an invalid length.
[  294.332308][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2771'.
[  294.343215][T12477] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2772'.
[  294.409254][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.441201][ T5239] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11
[  294.559791][T12461] chnl_net:caif_netlink_parms(): no params data found
[  294.701507][T12461] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.705275][T12461] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.710790][T12461] bridge_slave_0: entered allmulticast mode
[  294.714748][T12461] bridge_slave_0: entered promiscuous mode
[  294.720451][T12461] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.723326][T12461] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.728031][T12461] bridge_slave_1: entered allmulticast mode
[  294.731955][T12461] bridge_slave_1: entered promiscuous mode
[  294.787175][T12461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.817436][T12461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.905202][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'.
[  294.912186][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'.
[  294.948949][T12461] team0: Port device team_slave_0 added
[  294.958216][T12461] team0: Port device team_slave_1 added
[  295.046893][T12461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.050455][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.066194][T12461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.079435][T12461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.082180][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.104913][T12461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.110869][   T13] ip6gretap0: left allmulticast mode
[  295.113437][   T13] ip6gretap0: left promiscuous mode
[  295.117078][   T13] bridge0: port 3(ip6gretap0) entered disabled state
[  295.122740][   T13] bridge_slave_1: left allmulticast mode
[  295.124983][   T13] bridge_slave_1: left promiscuous mode
[  295.127557][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.132097][   T13] bridge_slave_0: left promiscuous mode
[  295.134000][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.141192][   T13] veth0_to_team: left allmulticast mode
[  295.142929][   T13] veth0_to_team: left promiscuous mode
[  295.144692][   T13] : port 2(veth0_to_team) entered disabled state
[  295.157352][   T13] veth0_to_bridge: left allmulticast mode
[  295.161383][   T13] veth0_to_bridge: left promiscuous mode
[  295.163832][   T13] : port 1(veth0_to_bridge) entered disabled state
[  295.269155][ T5239] Bluetooth: hci3: Malformed LE Event: 0x0d
[  295.392077][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2787'.
[  295.411724][T12518] netlink: 'syz.3.2788': attribute type 2 has an invalid length.
[  295.411906][T12518] netlink: 'syz.3.2788': attribute type 1 has an invalid length.
[  295.411915][T12518] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2788'.
[  295.412119][T12518] block nbd5: not configured, cannot reconfigure
[  295.601471][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.607735][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  295.613168][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  295.621794][   T13] bond0 (unregistering): Released all slaves
[  295.649142][   T47] wg0 speed is unknown, defaulting to 1000
[  295.651613][   T47] syz0: Port: 1 Link DOWN
[  295.733575][   T13] : left promiscuous mode
[  295.764003][T12461] hsr_slave_0: entered promiscuous mode
[  295.768700][T12461] hsr_slave_1: entered promiscuous mode
[  295.771922][T12461] debugfs: 'hsr0' already exists in 'hsr'
[  295.774380][T12461] Cannot create hsr debugfs directory
[  295.980028][ T5239] Bluetooth: hci0: command tx timeout
[  296.043809][T12546] delete_channel: no stack
[  296.154043][T12551] netlink: 'syz.3.2801': attribute type 29 has an invalid length.
[  296.180861][T12551] netlink: 'syz.3.2801': attribute type 29 has an invalid length.
[  296.224137][T12551] netlink: 'syz.3.2801': attribute type 29 has an invalid length.
[  296.230669][T12551] netlink: 'syz.3.2801': attribute type 29 has an invalid length.
[  296.391963][T12461] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  296.429376][T12461] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  296.496133][T12461] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  296.519634][T12461] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  296.860192][T12461] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.916735][   T13] veth0_macvtap: left promiscuous mode
[  296.918983][   T13] veth1_vlan: left promiscuous mode
[  296.920939][   T13] veth0_vlan: left promiscuous mode
[  297.204632][T12603] netlink: 'syz.3.2815': attribute type 1 has an invalid length.
[  297.210547][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2815'.
[  297.691536][T12461] 8021q: adding VLAN 0 to HW filter on device team0
[  297.711008][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.713628][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.735027][T12607] erspan0 speed is unknown, defaulting to 1000
[  297.762100][T10109] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.764987][T10109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.056851][ T5239] Bluetooth: hci0: command tx timeout
[  298.084845][T12461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.236464][T12628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.310761][T12461] veth0_vlan: entered promiscuous mode
[  298.323771][T12461] veth1_vlan: entered promiscuous mode
[  298.345200][T12461] veth0_macvtap: entered promiscuous mode
[  298.359180][T12461] veth1_macvtap: entered promiscuous mode
[  298.374146][T12461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.381554][T12461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.394177][ T5711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.401210][ T5711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.404114][ T5711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.412782][ T5711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.495976][T10109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.499063][T10109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.541370][T10109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.544428][T10109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.632132][T12651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.734951][T12660] netlink: 'syz.4.2831': attribute type 1 has an invalid length.
[  298.742420][T12660] netlink: 'syz.4.2831': attribute type 4 has an invalid length.
[  298.745425][T12660] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2831'.
[  299.071059][T12675] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  299.074051][T12675] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  299.824967][T12691] : port 1(vlan0) entered blocking state
[  299.827870][T12691] : port 1(vlan0) entered disabled state
[  299.829772][T12691] vlan0: entered allmulticast mode
[  299.832194][T12691] vlan0: entered promiscuous mode
[  300.196393][ T5239] Bluetooth: hci0: command tx timeout
[  300.243026][T12700] rdma_rxe: rxe_newlink: failed to add lo
[  300.283457][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'.
[  300.496756][T12725] netlink: 'syz.1.2856': attribute type 27 has an invalid length.
[  300.499987][T12725] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2856'.
[  300.720791][T12740] netlink: 948 bytes leftover after parsing attributes in process `syz.3.2862'.
[  300.959840][T12743] netlink: 'syz.1.2863': attribute type 10 has an invalid length.
[  301.206669][T12743] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  301.211440][T12749] xt_l2tp: invalid flags combination: 0
[  301.948412][ T5239] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11
[  302.048429][T12785] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2882'.
[  302.108253][T12785] siw: device registration error -23
[  302.185386][T12754] delete_channel: no stack
[  302.215756][ T5239] Bluetooth: hci0: command tx timeout
[  302.440209][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2885'.
[  302.624395][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.798897][T12809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2892'.
[  302.802613][T12809] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2892'.
[  302.808649][T12809] netlink: 'syz.1.2892': attribute type 4 has an invalid length.
[  302.922041][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'.
[  305.063443][T12850] C: renamed from team_slave_0 (while UP)
[  305.083539][T12850] netlink: 'syz.4.2908': attribute type 3 has an invalid length.
[  305.108110][T12850] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2908'.
[  305.171714][T12850] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  305.180268][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2913'.
[  305.474918][T12876] __nla_validate_parse: 2 callbacks suppressed
[  305.474934][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2921'.
[  305.520613][T12879] sock: sock_set_timeout: `syz.1.2922' (pid 12879) tries to set negative timeout
[  305.625448][T12885] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2925'.
[  306.851177][T12912] netlink: 'syz.1.2937': attribute type 1 has an invalid length.
[  307.075400][T12927] netlink: 'syz.4.2939': attribute type 10 has an invalid length.
[  307.248434][T12927] team0: Cannot enslave team device to itself
[  307.451716][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2945'.
[  307.617974][T12950] netlink: 'syz.1.2946': attribute type 21 has an invalid length.
[  307.621238][T12950] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2946'.
[  307.883161][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'.
[  308.789412][ T5239] Bluetooth: hci3: command 0x0406 tx timeout
[  309.552219][T13017] netlink: 'syz.1.2968': attribute type 29 has an invalid length.
[  309.824113][T13026] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2970'.
[  309.828300][T13026] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2970'.
[  309.899174][T13029] netlink: 'syz.4.2972': attribute type 2 has an invalid length.
[  309.902147][T13029] netlink: 8196 bytes leftover after parsing attributes in process `syz.4.2972'.
[  310.460434][T13047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2978'.
[  311.707231][T13068] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2987'.
[  312.359606][T13090] netlink: 'syz.4.2997': attribute type 39 has an invalid length.
[  313.455288][T13119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3009'.
[  313.456055][T13120] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3010'.
[  313.458224][T13119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3009'.
[  313.784343][T13131] netlink: 'syz.1.3013': attribute type 10 has an invalid length.
[  313.997566][T13131] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  314.636828][T13152] netlink: 'syz.1.3023': attribute type 10 has an invalid length.
[  314.708732][T13152] vlan0 (unregistering): left allmulticast mode
[  314.711245][T13152] vlan0 (unregistering): left promiscuous mode
[  314.718261][T13152] : port 1(vlan0) entered disabled state
[  314.977799][T13163] netlink: 'syz.1.3028': attribute type 4 has an invalid length.
[  314.980647][T13163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3028'.
[  315.489579][T13178] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3035'.
[  315.529222][T13178] netlink: 'syz.4.3035': attribute type 39 has an invalid length.
[  315.702834][T13188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3040'.
[  316.919385][T13211] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  316.939279][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.941670][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.333493][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.339707][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.342372][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.344980][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.347916][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.377024][T13227] erspan0 speed is unknown, defaulting to 1000
[  317.580009][T13237] lo: entered allmulticast mode
[  317.593715][T13237] lo: entered promiscuous mode
[  317.595287][T13237] lo: left allmulticast mode
[  317.652898][T13227] chnl_net:caif_netlink_parms(): no params data found
[  317.747058][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3063'.
[  317.833365][T13227] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.844578][T13227] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.847663][T13227] bridge_slave_0: entered allmulticast mode
[  317.850685][T13227] bridge_slave_0: entered promiscuous mode
[  317.854508][T13227] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.857843][T13227] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.860329][T13227] bridge_slave_1: entered allmulticast mode
[  317.863417][T13227] bridge_slave_1: entered promiscuous mode
[  317.895283][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.900238][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.923737][T13227] team0: Port device team_slave_0 added
[  317.927847][T13227] team0: Port device team_slave_1 added
[  317.945353][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.948265][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.957838][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.965020][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.968359][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.977348][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.005967][T13227] hsr_slave_0: entered promiscuous mode
[  318.008462][T13227] hsr_slave_1: entered promiscuous mode
[  318.010815][T13227] debugfs: 'hsr0' already exists in 'hsr'
[  318.012665][T13227] Cannot create hsr debugfs directory
[  318.082396][T13250] netlink: 'syz.4.3065': attribute type 46 has an invalid length.
[  318.085223][T13250] netlink: 'syz.4.3065': attribute type 19 has an invalid length.
[  318.173801][T13227] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  318.181299][T13227] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  318.187363][T13227] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  318.199234][T13227] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  318.228655][T13227] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.231592][T13227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.234810][T13227] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.237775][T13227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.331550][T13227] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.344223][T10109] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.350477][T10109] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.364732][T13227] 8021q: adding VLAN 0 to HW filter on device team0
[  318.378822][T10109] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.381949][T10109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.407899][T10109] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.410726][T10109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.641595][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.818638][T13280] erspan0 speed is unknown, defaulting to 1000
[  318.931339][T13227] veth0_vlan: entered promiscuous mode
[  318.941515][T13227] veth1_vlan: entered promiscuous mode
[  318.978392][T13227] veth0_macvtap: entered promiscuous mode
[  318.984874][T13227] veth1_macvtap: entered promiscuous mode
[  318.993564][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'.
[  319.017619][T13227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.029560][T13227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.089605][ T5711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.094739][ T5711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.105156][ T5711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.110577][ T5711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.222757][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.242850][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.260637][ T1938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.264179][ T1938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.376716][T13303] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.379331][T13303] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.384183][T13303] bridge0: entered allmulticast mode
[  319.407802][T13303] bridge_slave_1: left allmulticast mode
[  319.409994][T13303] bridge_slave_1: left promiscuous mode
[  319.415912][ T5872] Bluetooth: hci2: command tx timeout
[  319.434278][T13303] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.461969][T13303] bridge_slave_0: left allmulticast mode
[  319.464393][T13303] bridge_slave_0: left promiscuous mode
[  319.469940][T13303] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.569459][T13309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3082'.
[  319.581354][T13309] netlink: 'syz.1.3082': attribute type 1 has an invalid length.
[  319.740332][T13311] netlink: 'syz.1.3083': attribute type 11 has an invalid length.
[  320.156647][T13317] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3086'.
[  321.304153][T13339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.465445][T13346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3098'.
[  321.474984][T13346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3098'.
[  321.490039][T13346] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3098'.
[  321.496962][ T5872] Bluetooth: hci2: command tx timeout
[  321.623007][T13345] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3099'.
[  321.778460][T13356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3103'.
[  321.829677][T13359] netlink: 'syz.1.3104': attribute type 21 has an invalid length.
[  321.832954][T13359] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3104'.
[  322.374643][T13388] netlink: 'syz.1.3116': attribute type 21 has an invalid length.
[  322.469001][T13392] syzkaller0: entered promiscuous mode
[  322.471228][T13392] syzkaller0: entered allmulticast mode
[  322.476591][T13392] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  322.804401][T13405] __nla_validate_parse: 2 callbacks suppressed
[  322.804417][T13405] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3123'.
[  322.911552][T13409] netlink: 'syz.1.3125': attribute type 10 has an invalid length.
[  322.914554][T13409] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3125'.
[  323.138526][T13409] bond0: (slave macvlan0): Releasing backup interface
[  323.444070][T13427] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3132'.
[  323.599664][ T5872] Bluetooth: hci2: command tx timeout
[  325.000290][T13449] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3142'.
[  325.004202][T13448] netlink: 'syz.1.3141': attribute type 29 has an invalid length.
[  325.011451][T13448] netlink: 'syz.1.3141': attribute type 29 has an invalid length.
[  325.135369][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'.
[  325.142473][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'.
[  325.652395][T13463] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3149'.
[  325.659580][ T5872] Bluetooth: hci2: command tx timeout
[  325.756860][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'.
[  326.287328][T13487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3160'.
[  326.313785][T13489] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3161'.
[  326.644351][T13513] netlink: 'syz.1.3171': attribute type 29 has an invalid length.
[  326.651385][T13513] netlink: 'syz.1.3171': attribute type 29 has an invalid length.
[  326.654488][T13513] netlink: 'syz.1.3171': attribute type 29 has an invalid length.
[  328.613939][T13585] __nla_validate_parse: 3 callbacks suppressed
[  328.613958][T13585] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3202'.
[  328.635282][T13585] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.3202'.
[  328.962617][T13602] netlink: 'syz.5.3210': attribute type 1 has an invalid length.
[  329.025470][T13604] syzkaller0: entered promiscuous mode
[  329.027847][T13604] syzkaller0: entered allmulticast mode
[  330.714996][T13629] netlink: 'syz.5.3220': attribute type 46 has an invalid length.
[  330.965214][T13636] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3221'.
[  331.195739][ T5872] Bluetooth: hci0: Unable to find connection for big 0x00
[  331.412014][T13651] netlink: 'syz.4.3230': attribute type 1 has an invalid length.
[  334.985930][T13678] netlink: 'syz.4.3242': attribute type 6 has an invalid length.
[  335.010214][T13678] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3242'.
[  335.104740][T13680] netlink: 'syz.1.3243': attribute type 4 has an invalid length.
[  335.118496][T13680] netlink: 'syz.1.3243': attribute type 4 has an invalid length.
[  335.134447][T13680] netlink: 199756 bytes leftover after parsing attributes in process `syz.1.3243'.
[  336.976995][T13717] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3259'.
[  337.712488][T13722] netlink: 'syz.1.3261': attribute type 21 has an invalid length.
[  337.720302][T13722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3261'.
[  340.621401][T13762] netlink: 'syz.4.3276': attribute type 39 has an invalid length.
[  342.721540][T13796] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3292'.
[  342.769921][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'.
[  342.773435][T13798] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  342.793850][T13798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.999066][T13813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3300'.
[  343.030896][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3301'.
[  343.056631][T13815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3301'.
[  343.239676][T13828] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3307'.
[  343.567066][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3317'.
[  343.754488][T13856] netlink: 'syz.4.3321': attribute type 1 has an invalid length.
[  343.764082][T13856] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3321'.
[  343.808987][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'.
[  344.010913][T13861] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3323'.
[  344.024776][T13860] delete_channel: no stack
[  344.299687][T13880] netlink: 'syz.4.3332': attribute type 6 has an invalid length.
[  345.370361][T13923] netlink: zone id is out of range
[  345.372210][T13923] netlink: zone id is out of range
[  345.373769][T13923] netlink: zone id is out of range
[  345.385855][T13923] netlink: zone id is out of range
[  345.393016][T13923] netlink: zone id is out of range
[  345.395167][T13923] netlink: zone id is out of range
[  345.408055][T13923] netlink: zone id is out of range
[  345.410557][T13923] netlink: zone id is out of range
[  345.491267][T13919] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  346.106372][T13938] netlink: 'syz.1.3360': attribute type 1 has an invalid length.
[  347.783558][T13976] __nla_validate_parse: 5 callbacks suppressed
[  347.783577][T13976] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3378'.
[  348.672443][T14007] netlink: 'syz.4.3392': attribute type 10 has an invalid length.
[  348.680183][T14007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3392'.
[  348.685167][T14007] batadv0: entered promiscuous mode
[  348.691761][T14007] batadv0: entered allmulticast mode
[  348.794306][T14007] bridge0: port 3(batadv0) entered blocking state
[  348.801459][T14007] bridge0: port 3(batadv0) entered disabled state
[  348.886050][T14007] bridge0: port 3(batadv0) entered blocking state
[  348.888891][T14007] bridge0: port 3(batadv0) entered forwarding state
[  348.998135][T13290] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  349.001431][T13290] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  349.398305][T14021] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3399'.
[  349.401815][T14021] net_ratelimit: 53 callbacks suppressed
[  349.401828][T14021] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  350.181253][T14047] netlink: 'syz.4.3409': attribute type 21 has an invalid length.
[  350.191269][T14047] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3409'.
[  350.194741][T14047] netlink: 'syz.4.3409': attribute type 5 has an invalid length.
[  350.213443][T14047] netlink: 'syz.4.3409': attribute type 6 has an invalid length.
[  350.220874][T14047] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3409'.
[  350.633567][T14053] netlink: 'syz.4.3412': attribute type 2 has an invalid length.
[  350.638107][T14053] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3412'.
[  350.978045][T14063] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  352.007595][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  352.012369][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  352.016689][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  352.020640][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  352.024015][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  352.069665][T14095] erspan0 speed is unknown, defaulting to 1000
[  352.313279][T14095] chnl_net:caif_netlink_parms(): no params data found
[  352.371683][T14095] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.374278][T14095] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.377258][T14095] bridge_slave_0: entered allmulticast mode
[  352.380359][T14095] bridge_slave_0: entered promiscuous mode
[  352.384522][T14095] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.388004][T14095] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.390388][T14095] bridge_slave_1: entered allmulticast mode
[  352.393795][T14095] bridge_slave_1: entered promiscuous mode
[  352.418032][T14095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.423519][T14095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.444359][T14095] team0: Port device team_slave_0 added
[  352.447963][T14095] team0: Port device team_slave_1 added
[  352.495495][T14095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.498455][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.510694][T14095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.528265][T14095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.531024][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.543485][T14095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.601619][T14095] hsr_slave_0: entered promiscuous mode
[  352.606757][T14095] hsr_slave_1: entered promiscuous mode
[  352.609747][T14095] debugfs: 'hsr0' already exists in 'hsr'
[  352.612171][T14095] Cannot create hsr debugfs directory
[  353.325012][T14095] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  353.339037][T14095] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  353.344048][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3437'.
[  353.353063][T14095] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  353.371058][T14095] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  353.493450][T14095] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.503637][T14095] 8021q: adding VLAN 0 to HW filter on device team0
[  353.512748][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.515002][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.531016][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.533240][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.767451][T14095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.909700][T14095] veth0_vlan: entered promiscuous mode
[  353.934688][T14095] veth1_vlan: entered promiscuous mode
[  353.960583][T14095] veth0_macvtap: entered promiscuous mode
[  353.967401][T14095] veth1_macvtap: entered promiscuous mode
[  353.998033][T14095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.017140][T14095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.043023][T13290] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.053959][T13290] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.060511][T13290] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.063981][T13290] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.122394][ T5239] Bluetooth: hci2: command tx timeout
[  354.892306][  T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.895343][  T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.928694][  T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.931737][  T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.242977][T14190] veth0_vlan: entered allmulticast mode
[  355.353302][T14190] veth0_vlan: left promiscuous mode
[  355.422861][T14190] veth0_vlan: entered promiscuous mode
[  355.530815][T14200] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3465'.
[  355.539344][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'.
[  355.668924][T14213] netlink: 'syz.6.3469': attribute type 39 has an invalid length.
[  355.736550][T14218] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3473'.
[  356.142204][ T5239] Bluetooth: hci2: command tx timeout
[  356.603856][T14254] openvswitch: netlink: Flow key attr not present in new flow.
[  357.070870][T14276] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3500'.
[  357.159193][T14280] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3503'.
[  357.288742][T14288] netlink: 'syz.4.3506': attribute type 25 has an invalid length.
[  358.217090][ T5239] Bluetooth: hci2: command tx timeout
[  360.295986][ T5239] Bluetooth: hci2: command tx timeout
[  360.511943][T14310] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  360.523617][T14310] netlink: 'syz.4.3514': attribute type 10 has an invalid length.
[  360.563896][T14310] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  361.780915][T14341] netlink: 'syz.4.3526': attribute type 8 has an invalid length.
[  361.784654][T14341] netlink: 'syz.4.3526': attribute type 3 has an invalid length.
[  361.791702][T14341] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.3526'.
[  361.874088][T14341] netlink: 'syz.4.3526': attribute type 13 has an invalid length.
[  361.882243][T14341] netlink: 'syz.4.3526': attribute type 17 has an invalid length.
[  362.139398][T14341] 8021q: adding VLAN 0 to HW filter on device team0
[  362.170141][T14341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.177659][T14351] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3531'.
[  362.239090][T14356] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.3533'.
[  362.242011][T14356] openvswitch: netlink: Message has 5588 unknown bytes.
[  362.244170][T14356] openvswitch: netlink: Actions may not be safe on all matching packets
[  362.299928][T14361] netlink: 'syz.1.3535': attribute type 5 has an invalid length.
[  362.302426][T14361] netlink: 'syz.1.3535': attribute type 7 has an invalid length.
[  362.323006][T14361] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.3535'.
[  362.552231][T14372] siw: device registration error -23
[  362.695748][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  362.770025][T14363] syzkaller0: entered promiscuous mode
[  362.772282][T14363] syzkaller0: entered allmulticast mode
[  364.527914][T14387] netlink: 'syz.4.3546': attribute type 29 has an invalid length.
[  364.558733][T14393] netlink: 'syz.4.3548': attribute type 28 has an invalid length.
[  364.629996][T14402] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3552'.
[  364.682194][T14406] xt_bpf: check failed: parse error
[  364.891466][T14413] netlink: 'syz.6.3553': attribute type 2 has an invalid length.
[  364.908334][T14413] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3553'.
[  364.930188][T14413] nbd: must specify at least one socket
[  365.247219][T14430] netlink: 'syz.4.3564': attribute type 21 has an invalid length.
[  365.249731][T14430] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3564'.
[  365.252728][T14430] IPv6: NLM_F_CREATE should be specified when creating new route
[  365.255434][T14430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  365.258163][T14430] IPv6: NLM_F_CREATE should be set when creating new route
[  365.260565][T14430] IPv6: NLM_F_CREATE should be set when creating new route
[  365.263131][T14430] IPv6: NLM_F_CREATE should be set when creating new route
[  365.532691][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'.
[  365.664271][  T192] wlan1: Trigger new scan to find an IBSS to join
[  365.789280][T14465] proc: Bad value for 'gid'
[  366.400706][T14510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3602'.
[  366.448399][T14512] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.3603'.
[  367.511972][T14535] __nla_validate_parse: 2 callbacks suppressed
[  367.511989][T14535] netlink: 742 bytes leftover after parsing attributes in process `syz.1.3612'.
[  367.871914][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'.
[  368.458662][T14558] validate_nla: 3 callbacks suppressed
[  368.458718][T14558] netlink: 'syz.1.3622': attribute type 10 has an invalid length.
[  368.512196][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  368.523455][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  368.531617][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  368.537925][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  368.541505][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  368.570007][T14558] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  368.609993][T14561] erspan0 speed is unknown, defaulting to 1000
[  368.808156][T14577] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.811540][T14577] bridge0: entered allmulticast mode
[  368.831840][T14577] bridge_slave_1: left allmulticast mode
[  368.833809][T14577] bridge_slave_1: left promiscuous mode
[  368.840323][T14577] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.052351][T14561] chnl_net:caif_netlink_parms(): no params data found
[  369.313116][T14561] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.321272][T14561] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.324371][T14561] bridge_slave_0: entered allmulticast mode
[  369.329293][T14561] bridge_slave_0: entered promiscuous mode
[  369.333960][T14561] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.355958][T14561] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.358990][T14561] bridge_slave_1: entered allmulticast mode
[  369.362708][T14561] bridge_slave_1: entered promiscuous mode
[  369.423567][T14561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.429924][T14609] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3642'.
[  369.435366][T14561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.495199][T14561] team0: Port device team_slave_0 added
[  369.622305][T14561] team0: Port device team_slave_1 added
[  369.661022][   T53] wlan1: Trigger new scan to find an IBSS to join
[  369.661693][T14561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.669461][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.679257][T14561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.709360][T14561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.712548][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.727212][T14561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.810779][T14561] hsr_slave_0: entered promiscuous mode
[  369.814103][T14561] hsr_slave_1: entered promiscuous mode
[  369.818501][T14561] debugfs: 'hsr0' already exists in 'hsr'
[  369.820334][T14618] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3645'.
[  369.820794][T14561] Cannot create hsr debugfs directory
[  370.095160][T14561] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.193762][T14561] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.274664][T14561] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.332174][T14561] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.466918][T14561] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  370.471764][T14561] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  370.480340][T14561] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  370.485141][T14561] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  370.560400][T14561] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.573222][T14561] 8021q: adding VLAN 0 to HW filter on device team0
[  370.582152][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.584571][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.593888][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.596457][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.618486][ T5239] Bluetooth: hci2: command tx timeout
[  370.753070][T14561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.923196][T14561] veth0_vlan: entered promiscuous mode
[  370.930512][T14561] veth1_vlan: entered promiscuous mode
[  370.958382][T14561] veth0_macvtap: entered promiscuous mode
[  370.963763][T14561] veth1_macvtap: entered promiscuous mode
[  370.975389][T14561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.987032][T14561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.994806][ T5711] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.004330][ T5711] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.010778][ T5711] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.317865][ T1091] wlan1: Creating new IBSS network, BSSID 66:fb:74:51:09:02
[  371.329445][ T5711] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.459454][ T1938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.462017][ T1938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.489004][ T1938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.491680][ T1938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.749027][T14665] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3659'.
[  371.797057][T14669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3619'.
[  372.405382][T14702] netlink: 'syz.6.3668': attribute type 10 has an invalid length.
[  372.695787][ T5239] Bluetooth: hci2: command tx timeout
[  372.912297][T14702] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.916943][T14702] team0: Port device bond0 added
[  372.994419][T14708] netlink: 'syz.1.3675': attribute type 32 has an invalid length.
[  373.078487][T14714] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3677'.
[  373.120563][T14719] netlink: 14581 bytes leftover after parsing attributes in process `syz.6.3680'.
[  373.153837][T14721] netlink: 'syz.1.3681': attribute type 29 has an invalid length.
[  373.162296][T14721] netlink: 'syz.1.3681': attribute type 29 has an invalid length.
[  373.172436][T14721] netlink: 'syz.1.3681': attribute type 29 has an invalid length.
[  373.282984][T14733] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3687'.
[  373.528790][T14748] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3694'.
[  373.599765][T14751] netlink: 'syz.4.3693': attribute type 39 has an invalid length.
[  374.079803][T14759] siw: device registration error -23
[  374.777339][ T5239] Bluetooth: hci2: command tx timeout
[  375.878578][T14786] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3708'.
[  376.407703][T14823] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3723'.
[  376.867094][ T5239] Bluetooth: hci2: command tx timeout
[  377.031717][T14811] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3720'.
[  377.275623][T14833] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  377.280444][T14833] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  377.763792][T14842] netlink: 'syz.4.3730': attribute type 1 has an invalid length.
[  377.767148][T14842] netlink: 'syz.4.3730': attribute type 2 has an invalid length.
[  377.770492][T14842] netlink: 'syz.4.3730': attribute type 3 has an invalid length.
[  377.773802][T14842] netlink: 'syz.4.3730': attribute type 5 has an invalid length.
[  377.778712][T14842] netlink: 'syz.4.3730': attribute type 6 has an invalid length.
[  377.783434][T14842] netlink: 'syz.4.3730': attribute type 7 has an invalid length.
[  377.786993][T14842] netlink: 'syz.4.3730': attribute type 1 has an invalid length.
[  377.790145][T14842] netlink: 449 bytes leftover after parsing attributes in process `syz.4.3730'.
[  377.793787][T14842] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.3730'.
[  377.798020][T14842] netlink: 'syz.4.3730': attribute type 1 has an invalid length.
[  377.801194][T14842] netlink: 'syz.4.3730': attribute type 2 has an invalid length.
[  377.804358][T14842] netlink: 449 bytes leftover after parsing attributes in process `syz.4.3730'.
[  378.345096][T14866] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3742'.
[  378.350242][T14866] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3742'.
[  378.394572][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.398572][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.642044][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3736'.
[  379.381674][T14885] erspan0 speed is unknown, defaulting to 1000
[  379.606713][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3749'.
[  379.707216][T14883] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3749'.
[  380.231556][T14920] validate_nla: 7 callbacks suppressed
[  380.231573][T14920] netlink: 'syz.4.3765': attribute type 1 has an invalid length.
[  390.857591][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 6041460345 wd_nsec: 6041460410
[  395.875334][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  395.880282][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  395.883680][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  395.891861][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  395.898230][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  395.972256][T14943] erspan0 speed is unknown, defaulting to 1000
[  396.416562][T14943] chnl_net:caif_netlink_parms(): no params data found
[  397.673502][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  397.678474][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  397.682521][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  397.689007][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  397.692723][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  397.802335][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  397.813508][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  397.817729][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  397.821520][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  397.826239][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  397.976686][ T5239] Bluetooth: hci4: command tx timeout
[  399.735979][ T5239] Bluetooth: hci5: command tx timeout
[  399.902581][ T5239] Bluetooth: hci6: command tx timeout
[  400.058424][ T5239] Bluetooth: hci4: command tx timeout
[  401.497825][T13053] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  401.815784][ T5239] Bluetooth: hci5: command tx timeout
[  401.975824][ T5239] Bluetooth: hci6: command tx timeout
[  402.138362][ T5239] Bluetooth: hci4: command tx timeout
[  403.897068][ T5239] Bluetooth: hci5: command tx timeout
[  404.055749][ T5239] Bluetooth: hci6: command tx timeout
[  404.215859][ T5239] Bluetooth: hci4: command tx timeout
[  405.975784][ T5239] Bluetooth: hci5: command tx timeout
[  406.135919][ T5239] Bluetooth: hci6: command tx timeout
[  416.298535][ T5239] Bluetooth: hci0: command 0x0406 tx timeout
[  416.955896][T14955] erspan0 speed is unknown, defaulting to 1000
[  417.107327][T14943] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.109596][T14943] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.111885][T14943] bridge_slave_0: entered allmulticast mode
[  417.137989][T14943] bridge_slave_0: entered promiscuous mode
[  417.165843][T14943] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.168659][T14943] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.171390][T14943] bridge_slave_1: entered allmulticast mode
[  417.174259][T14943] bridge_slave_1: entered promiscuous mode
[  417.299304][T14953] erspan0 speed is unknown, defaulting to 1000
[  417.406954][T14943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.469629][T14943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.564271][T14943] team0: Port device team_slave_0 added
[  417.580361][T14943] team0: Port device team_slave_1 added
[  417.652421][T14943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.655200][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.666427][T14943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.713239][T14943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.715405][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.723548][T14943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.776439][T14943] hsr_slave_0: entered promiscuous mode
[  417.778760][T14943] hsr_slave_1: entered promiscuous mode
[  417.780822][T14943] debugfs: 'hsr0' already exists in 'hsr'
[  417.782603][T14943] Cannot create hsr debugfs directory
[  417.791570][T14955] chnl_net:caif_netlink_parms(): no params data found
[  417.926597][T14955] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.929509][T14955] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.932458][T14955] bridge_slave_0: entered allmulticast mode
[  417.936675][T14955] bridge_slave_0: entered promiscuous mode
[  417.944882][T14955] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.948623][T14955] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.951500][T14955] bridge_slave_1: entered allmulticast mode
[  417.963419][T14955] bridge_slave_1: entered promiscuous mode
[  418.107270][T14955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.124886][T14955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.131664][T14953] chnl_net:caif_netlink_parms(): no params data found
[  418.227591][T14955] team0: Port device team_slave_0 added
[  418.234595][T14955] team0: Port device team_slave_1 added
[  418.269640][T14955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.271801][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.280254][T14955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.311947][T14955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.314092][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.321957][T14955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.352346][T14953] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.355186][T14953] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.359581][T14953] bridge_slave_0: entered allmulticast mode
[  418.362368][T14953] bridge_slave_0: entered promiscuous mode
[  418.383580][T14953] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.386235][T14953] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.388782][T14953] bridge_slave_1: entered allmulticast mode
[  418.391963][T14953] bridge_slave_1: entered promiscuous mode
[  418.436425][T14955] hsr_slave_0: entered promiscuous mode
[  418.439143][T14955] hsr_slave_1: entered promiscuous mode
[  418.441317][T14955] debugfs: 'hsr0' already exists in 'hsr'
[  418.443098][T14955] Cannot create hsr debugfs directory
[  418.444934][T14943] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  418.453482][T14953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.462024][T14943] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  418.471666][T14953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.474471][T14943] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  418.482153][T14943] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  418.537928][T14953] team0: Port device team_slave_0 added
[  418.558461][T14953] team0: Port device team_slave_1 added
[  418.621903][T14953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.624233][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.634948][T14953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.657062][T14953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.659880][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.670211][T14953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.764793][T14953] hsr_slave_0: entered promiscuous mode
[  418.773034][T14953] hsr_slave_1: entered promiscuous mode
[  418.778454][T14953] debugfs: 'hsr0' already exists in 'hsr'
[  418.780775][T14953] Cannot create hsr debugfs directory
[  419.034608][T14955] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  419.047173][T14955] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  419.057440][T14955] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  419.079868][T14955] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  419.124129][T14943] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.170290][T14953] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  419.177201][T14953] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  419.188246][T14953] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  419.201953][T14953] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  419.214133][T14943] 8021q: adding VLAN 0 to HW filter on device team0
[  419.250345][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.253416][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.282914][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.285932][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.412941][T14955] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.460813][T14953] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.465347][T14955] 8021q: adding VLAN 0 to HW filter on device team0
[  419.495118][  T192] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.497988][  T192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.519035][  T192] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.521333][  T192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.538940][T14953] 8021q: adding VLAN 0 to HW filter on device team0
[  419.563201][  T192] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.565891][  T192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.583829][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.586778][ T1938] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.650574][T14943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.672530][T14953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  419.792584][T14955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.843802][T14953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.948312][T14943] veth0_vlan: entered promiscuous mode
[  419.956974][T14943] veth1_vlan: entered promiscuous mode
[  420.010480][T14943] veth0_macvtap: entered promiscuous mode
[  420.023321][T14943] veth1_macvtap: entered promiscuous mode
[  420.040574][T14943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.051585][T14943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.068696][ T5711] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.081953][ T5711] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.104791][ T5711] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.114550][ T5711] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.177735][T14955] veth0_vlan: entered promiscuous mode
[  420.183538][T14955] veth1_vlan: entered promiscuous mode
[  420.239189][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.242608][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.290063][T14955] veth0_macvtap: entered promiscuous mode
[  420.302326][  T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.305445][  T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.307053][T14953] veth0_vlan: entered promiscuous mode
[  420.318401][T14955] veth1_macvtap: entered promiscuous mode
[  420.332855][T14953] veth1_vlan: entered promiscuous mode
[  420.368537][T14955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.405197][T14955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.422379][ T5939] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.440510][ T5939] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.443877][ T5939] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.458701][ T5939] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.462604][T14953] veth0_macvtap: entered promiscuous mode
[  420.487189][T14953] veth1_macvtap: entered promiscuous mode
[  420.537325][T14953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.561569][T14953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.574848][  T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.578677][  T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.600022][ T5711] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.669350][ T5711] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.674878][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.679280][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.683647][ T5711] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.692127][ T5711] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.866039][T14957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.869151][T14957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.956031][T14957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.959591][T14957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.010840][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3782'.
[  421.082961][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3777'.
[  421.135342][T15043] netlink: 'syz.9.3783': attribute type 10 has an invalid length.
[  421.146826][T15043] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.150377][T15043] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.159546][T15043] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.162464][T15043] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.165684][T15043] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.168722][T15043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.207863][T15043] team0: Port device bridge0 added
[  421.470790][T15052] netlink: 'syz.9.3787': attribute type 2 has an invalid length.
[  421.477969][T15052] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3787'.
[  421.714560][T15055] netlink: 'syz.9.3788': attribute type 10 has an invalid length.
[  421.721083][T15055] netlink: 55 bytes leftover after parsing attributes in process `syz.9.3788'.
[  422.902015][T15065] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3793'.
[  423.782351][T15099] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3806'.
[  424.040704][T15111] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3813'.
[  424.180568][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3816'.
[  424.185760][T15119] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3816'.
[  424.189221][T15119] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3816'.
[  425.178446][T15154] netlink: 'syz.9.3831': attribute type 3 has an invalid length.
[  425.180969][T15154] netlink: 'syz.9.3831': attribute type 16 has an invalid length.
[  425.217033][T15143] wg2: entered promiscuous mode
[  425.223565][T15143] wg2: entered allmulticast mode
[  428.411398][T15176] __nla_validate_parse: 1 callbacks suppressed
[  428.411415][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3842'.
[  428.427327][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3842'.
[  428.595309][T15190] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3849'.
[  428.632326][T15184] netlink: 'syz.8.3846': attribute type 21 has an invalid length.
[  428.637960][T15184] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3846'.
[  428.884304][T15196] openvswitch: netlink: EtherType 50a is less than min 600
[  429.003903][T15213] netlink: 'syz.9.3858': attribute type 9 has an invalid length.
[  429.012497][T15213] netlink: 211924 bytes leftover after parsing attributes in process `syz.9.3858'.
[  429.047514][T15216] netlink: 'syz.8.3859': attribute type 2 has an invalid length.
[  429.808633][T15255] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3874'.
[  429.811721][T15255] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3874'.
[  429.857498][T15264] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3879'.
[  430.864775][T15292] netlink: 'syz.7.3892': attribute type 27 has an invalid length.
[  430.913687][T15296] netlink: 'syz.8.3894': attribute type 2 has an invalid length.
[  430.921946][T15296] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3894'.
[  430.970034][T15303] netlink: 'syz.7.3897': attribute type 21 has an invalid length.
[  431.138892][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3900'.
[  431.863402][T15349] netlink: 'syz.7.3918': attribute type 10 has an invalid length.
[  431.871280][T15349] ipvlan1: entered promiscuous mode
[  431.896777][T15349] ipvlan1: entered allmulticast mode
[  431.898687][T15349] veth0_vlan: entered allmulticast mode
[  431.907438][T15349] bridge0: port 3(ipvlan1) entered blocking state
[  431.914642][T15349] bridge0: port 3(ipvlan1) entered disabled state
[  431.921543][T15349] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  432.464237][T15388] netlink: 'syz.8.3935': attribute type 9 has an invalid length.
[  432.540427][T15391] netlink: 'syz.7.3936': attribute type 39 has an invalid length.
[  432.798806][T15396] netlink: 'syz.8.3938': attribute type 1 has an invalid length.
[  433.208984][T15432] netlink: zone id is out of range
[  433.211112][T15432] netlink: zone id is out of range
[  433.222369][T15432] netlink: del zone limit has 4 unknown bytes
[  433.307427][T15438] GPL: port 1(gretap0) entered blocking state
[  433.309470][T15438] GPL: port 1(gretap0) entered disabled state
[  433.311555][T15438] gretap0: entered allmulticast mode
[  433.318819][T15438] gretap0: entered promiscuous mode
[  433.598309][T15460] __nla_validate_parse: 10 callbacks suppressed
[  433.598321][T15460] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.3968'.
[  433.939971][ T5872] Bluetooth: hci6: unexpected event 0x14 length: 15 > 6
[  434.633754][T15484] xt_limit: Overflow, try lower: 271964/0
[  434.677490][T15482] validate_nla: 2 callbacks suppressed
[  434.677540][T15482] netlink: 'syz.9.3975': attribute type 29 has an invalid length.
[  434.686796][T15482] netlink: 'syz.9.3975': attribute type 29 has an invalid length.
[  434.739763][T15485] netlink: 'syz.9.3975': attribute type 29 has an invalid length.
[  434.759126][T15482] netlink: 'syz.9.3975': attribute type 29 has an invalid length.
[  435.067895][T15509] netlink: 'syz.9.3987': attribute type 1 has an invalid length.
[  436.528611][T15524] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3992'.
[  436.891652][T15550] netlink: 'syz.9.4004': attribute type 20 has an invalid length.
[  436.894205][T15550] IPv6: NLM_F_CREATE should be specified when creating new route
[  436.905764][T15550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  436.908405][T15550] IPv6: NLM_F_CREATE should be set when creating new route
[  437.168767][T15565] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.4011'.
[  437.313222][T15571] netlink: 356 bytes leftover after parsing attributes in process `syz.8.4014'.
[  437.322480][T15571] netlink: 356 bytes leftover after parsing attributes in process `syz.8.4014'.
[  437.697334][T15579] netlink: 277 bytes leftover after parsing attributes in process `syz.8.4017'.
[  437.712341][T15581] syzkaller0: entered promiscuous mode
[  437.714640][T15581] syzkaller0: entered allmulticast mode
[  437.965756][   T13] unregister_netdevice: waiting for wg0 to become free. Usage count = 3
[  437.973409][   T13] ref_tracker: netdev@ffff888123a6c610 has 1/1 users at
[  437.973409][   T13]      ib_device_set_netdev+0x31f/0x6d0
[  437.973409][   T13]      siw_newlink+0x40c/0xd70
[  437.973409][   T13]      nldev_newlink+0x4a5/0x5a0
[  437.973409][   T13]      rdma_nl_rcv+0x6ae/0x980
[  437.973409][   T13]      netlink_unicast+0x82f/0x9e0
[  437.973409][   T13]      netlink_sendmsg+0x805/0xb30
[  437.973409][   T13]      __sock_sendmsg+0x21c/0x270
[  437.973409][   T13]      ____sys_sendmsg+0x505/0x830
[  437.973409][   T13]      ___sys_sendmsg+0x21f/0x2a0
[  437.973409][   T13]      __x64_sys_sendmsg+0x19b/0x260
[  437.973409][   T13]      do_syscall_64+0xfa/0x3b0
[  437.973409][   T13]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.973409][   T13] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  439.820225][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  439.822677][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  444.948174][   T34] INFO: task kworker/u10:0:27 blocked for more than 143 seconds.
[  444.951042][   T34]       Not tainted syzkaller #0
[  444.952896][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  444.959756][   T34] task:kworker/u10:0   state:D stack:21104 pid:27    tgid:27    ppid:2      task_flags:0x4208060 flags:0x00004000
[  444.963550][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  444.965535][   T34] Call Trace:
[  444.966728][   T34]  <TASK>
[  444.967659][   T34]  __schedule+0x1798/0x4cc0
[  444.969092][   T34]  ? validate_chain+0x897/0x2140
[  444.970586][   T34]  ? __lock_acquire+0xab9/0xd20
[  444.972072][   T34]  ? __pfx___schedule+0x10/0x10
[  444.973550][   T34]  ? schedule+0x91/0x360
[  444.974848][   T34]  schedule+0x165/0x360
[  444.976979][   T34]  schedule_timeout+0x9a/0x270
[  444.978925][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  444.980975][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  444.983030][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  444.985114][   T34]  ? wait_for_completion+0x267/0x5d0
[  444.989067][   T34]  wait_for_completion+0x2bf/0x5d0
[  444.991102][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  444.993282][   T34]  ? up_write+0x1c4/0x420
[  444.994982][   T34]  ? remove_client_context+0xc0/0x1e0
[  444.998412][   T34]  disable_device+0x1c6/0x320
[  445.000275][   T34]  ? __pfx_disable_device+0x10/0x10
[  445.002280][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  445.004351][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.006932][   T34]  ib_unregister_work+0x19/0x30
[  445.008844][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  445.011040][   T34]  process_scheduled_works+0xae1/0x17b0
[  445.013187][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  445.021239][   T34]  worker_thread+0x8a0/0xda0
[  445.023062][   T34]  kthread+0x711/0x8a0
[  445.024606][   T34]  ? __pfx_worker_thread+0x10/0x10
[  445.027731][   T34]  ? __pfx_kthread+0x10/0x10
[  445.029453][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.031310][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  445.033171][   T34]  ? __pfx_kthread+0x10/0x10
[  445.034868][   T34]  ret_from_fork+0x439/0x7d0
[  445.041424][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  445.043289][   T34]  ? __switch_to_asm+0x39/0x70
[  445.045065][   T34]  ? __switch_to_asm+0x33/0x70
[  445.047424][   T34]  ? __pfx_kthread+0x10/0x10
[  445.049134][   T34]  ret_from_fork_asm+0x1a/0x30
[  445.050890][   T34]  </TASK>
[  445.052179][   T34] 
[  445.052179][   T34] Showing all locks held in the system:
[  445.054875][   T34] 4 locks held by kworker/u8:1/13:
[  445.060278][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  445.064278][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  445.069033][   T34]  #2: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  445.072462][   T34]  #3: ffffffff8e13fac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  445.076332][   T34] 3 locks held by kworker/u10:0/27:
[  445.078263][   T34]  #0: ffff88801bb55148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  445.082411][   T34]  #1: ffffc9000060fbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  445.087515][   T34]  #2: ffff888023a3c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  445.093781][   T34] 1 lock held by khungtaskd/34:
[  445.098613][   T34]  #0: ffffffff8e13a160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  445.102223][   T34] 2 locks held by getty/5676:
[  445.103960][   T34]  #0: ffff88810ea650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  445.107630][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  445.111251][   T34] 2 locks held by syz.3.2882/12785:
[  445.113173][   T34]  #0: ffffffff99e718f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  445.116976][   T34]  #1: ffff888023a3c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  445.121051][   T34] 
[  445.121924][   T34] =============================================
[  445.121924][   T34] 
[  445.124883][   T34] NMI backtrace for cpu 1
[  445.124893][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  445.124906][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  445.124914][   T34] Call Trace:
[  445.124920][   T34]  <TASK>
[  445.124926][   T34]  dump_stack_lvl+0x189/0x250
[  445.124949][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  445.124963][   T34]  ? __pfx__printk+0x10/0x10
[  445.124987][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  445.125002][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  445.125016][   T34]  ? __pfx__printk+0x10/0x10
[  445.125034][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  445.125048][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  445.125062][   T34]  watchdog+0xf93/0xfe0
[  445.125082][   T34]  ? watchdog+0x1de/0xfe0
[  445.125101][   T34]  kthread+0x711/0x8a0
[  445.125118][   T34]  ? __pfx_watchdog+0x10/0x10
[  445.125132][   T34]  ? __pfx_kthread+0x10/0x10
[  445.125147][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.125160][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  445.125174][   T34]  ? __pfx_kthread+0x10/0x10
[  445.125188][   T34]  ret_from_fork+0x439/0x7d0
[  445.125203][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  445.125219][   T34]  ? __switch_to_asm+0x39/0x70
[  445.125233][   T34]  ? __switch_to_asm+0x33/0x70
[  445.125246][   T34]  ? __pfx_kthread+0x10/0x10
[  445.125260][   T34]  ret_from_fork_asm+0x1a/0x30
[  445.125285][   T34]  </TASK>
[  445.125290][   T34] Sending NMI from CPU 1 to CPUs 0:
[  445.178975][    C0] NMI backtrace for cpu 0
[  445.178986][    C0] CPU: 0 UID: 0 PID: 13290 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  445.178997][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  445.179002][    C0] Workqueue: bat_events batadv_nc_worker
[  445.179015][    C0] RIP: 0010:lock_acquire+0x58/0x360
[  445.179027][    C0] Code: 8b 05 7c 7c 03 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 7f 7c 03 11 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 68 41 06 0e <73> 16 e8 61 02 09 00 84 c0 75 0d f6 05 14 26 f0 0d 01 0f 84 d7 01
[  445.179034][    C0] RSP: 0018:ffffc9000445f980 EFLAGS: 00000293
[  445.179039][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
[  445.179043][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13a160
[  445.179048][    C0] RBP: ffffffff8b489c22 R08: 0000000000000000 R09: 0000000000000000
[  445.179052][    C0] R10: dffffc0000000000 R11: ffffffff8b489b50 R12: 0000000000000002
[  445.179057][    C0] R13: ffffffff8e13a160 R14: 0000000000000000 R15: 0000000000000000
[  445.179062][    C0] FS:  0000000000000000(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  445.179067][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  445.179072][    C0] CR2: 00007f1b1faa5866 CR3: 000000000df36000 CR4: 00000000000006f0
[  445.179094][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  445.179100][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  445.179104][    C0] Call Trace:
[  445.179108][    C0]  <TASK>
[  445.179114][    C0]  ? batadv_nc_worker+0xd2/0x610
[  445.179122][    C0]  ? batadv_nc_worker+0xd2/0x610
[  445.179129][    C0]  batadv_nc_worker+0xef/0x610
[  445.179136][    C0]  ? batadv_nc_worker+0xd2/0x610
[  445.179142][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  445.179150][    C0]  process_scheduled_works+0xae1/0x17b0
[  445.179162][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  445.179172][    C0]  worker_thread+0x8a0/0xda0
[  445.179179][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  445.179189][    C0]  ? __kthread_parkme+0x7b/0x200
[  445.179198][    C0]  kthread+0x711/0x8a0
[  445.179206][    C0]  ? __pfx_worker_thread+0x10/0x10
[  445.179213][    C0]  ? __pfx_kthread+0x10/0x10
[  445.179221][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.179228][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  445.179236][    C0]  ? __pfx_kthread+0x10/0x10
[  445.179243][    C0]  ret_from_fork+0x439/0x7d0
[  445.179252][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  445.179259][    C0]  ? __switch_to_asm+0x39/0x70
[  445.179268][    C0]  ? __switch_to_asm+0x33/0x70
[  445.179276][    C0]  ? __pfx_kthread+0x10/0x10
[  445.179283][    C0]  ret_from_fork_asm+0x1a/0x30
[  445.179295][    C0]  </TASK>
[  445.180255][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  445.275483][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  445.278667][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  445.282284][   T34] Call Trace:
[  445.283484][   T34]  <TASK>
[  445.284590][   T34]  dump_stack_lvl+0x99/0x250
[  445.286240][   T34]  ? __asan_memcpy+0x40/0x70
[  445.287919][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  445.289823][   T34]  ? __pfx__printk+0x10/0x10
[  445.291540][   T34]  vpanic+0x281/0x750
[  445.292988][   T34]  ? __pfx_vpanic+0x10/0x10
[  445.294601][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  445.296676][   T34]  ? preempt_schedule+0xae/0xc0
[  445.298470][   T34]  ? preempt_schedule_common+0x83/0xd0
[  445.300413][   T34]  panic+0xb9/0xc0
[  445.301767][   T34]  ? __pfx_panic+0x10/0x10
[  445.303396][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  445.305345][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  445.307529][   T34]  watchdog+0xfd2/0xfe0
[  445.309066][   T34]  ? watchdog+0x1de/0xfe0
[  445.310647][   T34]  kthread+0x711/0x8a0
[  445.312127][   T34]  ? __pfx_watchdog+0x10/0x10
[  445.313859][   T34]  ? __pfx_kthread+0x10/0x10
[  445.315520][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.317359][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  445.319260][   T34]  ? __pfx_kthread+0x10/0x10
[  445.320918][   T34]  ret_from_fork+0x439/0x7d0
[  445.322555][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  445.324389][   T34]  ? __switch_to_asm+0x39/0x70
[  445.326116][   T34]  ? __switch_to_asm+0x33/0x70
[  445.327891][   T34]  ? __pfx_kthread+0x10/0x10
[  445.329563][   T34]  ret_from_fork_asm+0x1a/0x30
[  445.331317][   T34]  </TASK>
[  445.333148][   T34] Kernel Offset: disabled
[  445.334707][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:04:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888023796cc0 RCX=0000000000000000 RDX=0000000000000cc0
RSI=ffff888023796cc0 RDI=ffff88810000f140 RBP=0000000000000cc0 RSP=ffffc900035af708
R8 =0000000000000000 R9 =ffffffff8216969d R10=dffffc0000000000 R11=ffffed100482faac
R12=00000000000000d0 R13=ffff888023796cc0 R14=ffff88810000f140 R15=0000000000000000
RIP=ffffffff8223fc22 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8aae2866c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33921ff8 CR3=00000000272d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81c95379 ffffffff81c952ec
XMM02=00007f8aad5a7498 ffffffff81c95428 XMM03=00007f8aad5a74a8 00007f8aad5a74a0
XMM04=00007f8aae10d100 00007f8aad5a7460 XMM05=00007f8aad5a7478 00007f8aad5a74c0
XMM06=00007f8aad5a74b8 00007f8aad5a74b0 XMM07=00007f8aad5a74a8 00007f8aad5a74a0
XMM08=0000000000000000 00007f8aad412f0f XMM09=0000000000000000 00007f8aad412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000017b RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000017b RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e00c8
R8 =0000000000000000 R9 =ffffffff81ae1b4e R10=0000000000000003 R11=ffffffff81704490
R12=0000000010003e13 R13=dffffc0000000000 R14=000000000000017b R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb47cb336c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33a1aff8 CR3=00000001251fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb47be12e7b
XMM06=0000000000000000 00007fb47be12e75 XMM07=0000000000000000 00007fb47be12e89
XMM08=0000000000000000 00007fb47be12f0f XMM09=0000000000000000 00007fb47be12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
