last executing test programs:

2m44.99466268s ago: executing program 1 (id=277):
socket$kcm(0x2, 0x922000000001, 0x106) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = socket$kcm(0x23, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x3, &(0x7f0000001700)=@framed, &(0x7f0000001740)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="950000e900000000"], &(0x7f00000009c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22509, r3}, 0x90)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) (async, rerun: 64)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffffff820000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711052000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)

2m44.452584566s ago: executing program 1 (id=280):
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x5a1d, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x5b41, 0x2e18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x3}, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x18d) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) (async)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$sock(r4, 0x0, 0x6a5ef9290445fc1d) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x200000d4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4004041) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)

2m44.388610385s ago: executing program 1 (id=283):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010028bd700000000000fc020000000000000000000000000000e000000100ff8000000000000000000000000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000100000000000000000000000000000000a30000000000000000000000ffffffffffffff7f1d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000000000000000000101020000000084010500ac141439000000000000000000000000000004d32b00000000000000fe8000000000000000000000000000bb000000000000ff00000000000000000000000000fc00000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000ff01000000000000fe880000000000000000000000000101000004d40000fc0000000000000000000000000000010000000001030000000000000600000000000000fe8000000000000000000000000000bb000000003c00000002000000fe8000000000000000000000000000aa00000000020000000000000003000000286a8b2700000000000000000000000000000000000004d53c0000000200000000000000000000000000000000000000ffffffff040000000400000000000000000040002001000000000000000000000000000100000000320000000a000000fe880000000000000000000000000101000000000100"/500], 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044)

2m44.21938196s ago: executing program 1 (id=284):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2c, 0x2, 0x80004, &(0x7f00000013c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, r0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040c0008dd0000010000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2882, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2020)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

2m44.026565319s ago: executing program 1 (id=286):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m43.907873584s ago: executing program 1 (id=287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000020000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008230140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

2m28.687523396s ago: executing program 32 (id=287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000020000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008230140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

1.995734428s ago: executing program 2 (id=1424):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x46, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41)

1.865113863s ago: executing program 2 (id=1429):
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x8, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r0}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x103462, 0x4, 0xacd, 0x0, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
r1 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x34}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4d31, 0x800c0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000900)='io.pressure\x00', 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="fd08ff7f000000000000000000000000c9dc16b7f354a31e010088c21df03e4b1dd6f0bc7c08ea5aefc754caf37ccc0f0d57676edc8a2ec577a8225c1e02b124396db63a0f6a767c31b64fa414288c3587f8acdfc5f1a49e626a19113a8f83727e69", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = getpid()
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x5}, 0x2, 0x0, 0xffffffff, 0x8, 0x3fe, 0x7fffffdf, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1}, 0x41) (async)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c, 0x7}, 0x100008, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.7906354s ago: executing program 2 (id=1433):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffff5)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x14, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800000020001f309a4f000000ffffffe474f70b0c590e129ab383986136e34f598d299cad5dc7be0a12a861f78528c782dd0220329382e1945f323ce267664c5f7f53e7a036436e6cda4066261e0cdfcbf561817826d602380f59a6000088e16e43ac1bf7b586a30040dba53b864854c65ffe523b53e5158b1b927dd13c0476a306935d9d53396d834565e04d7e57cbcc05c833cb24", @ANYRES32, @ANYRES8], 0x230}, 0x800) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x6) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) (async)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x11b, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}, {&(0x7f0000000540)="67ab258798f3", 0x6}], 0x3}, 0x4) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) (async)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) (async)
write$cgroup_subtree(r8, &(0x7f0000000d80)=ANY=[@ANYRES8=r2], 0xfe33)

1.688032422s ago: executing program 2 (id=1434):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711093000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) (async)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)

1.683708023s ago: executing program 2 (id=1437):
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r0, &(0x7f00000002c0), 0x9)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x33b7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010800000000000000000000fffd14000780080011400000000005001500350000000500010006000000050005000a00000005000400000000000900020073797a30000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r3)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000300)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="a5f1c76790a46307503ded39f7622e52ec90cdff597ea2a6d9f9d97739fe94c3c13e014fd0b9b5715ff93721454fd3558cb11b6c0bed06ff574f8ca0c0165568e59dd68bb37a73acf0effdc46d8aebebaf53cd5a1f00dad180c6e0a9390995f6afadc477830c94f2e8464ec545e432c162895ef5568ee0b026832df0254453935ad5841ff3fdc8b7081c32571623ef30bba1150b091505f0fdf20283c38557eb2e084f9359dc51c64c3e3d2f22ae049d2a7154a8469cce259ee22a2d28cf25aaeab82a279f", 0xc5}], 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r5 = openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r3, r5}, 0xc)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)}, 0x10022)
sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x20004000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$SIOCSIFHWADDR(r3, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d0021000000000000000000070000000500000000ffeb000a0002"], 0x30}}, 0x0)
sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x3fb, 0x400, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000600000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000004000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)

1.327666596s ago: executing program 3 (id=1442):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@alu={0x7, 0x0, 0x0, 0x7, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x62, &(0x7f0000000000)=""/98, 0x0, 0x8}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000003c1007010000000000400000037c000400fc801069c69d8d7bebc79193431e8b6e660c1d7619dc1b8e97e7ad8ad4e993e0318e3b"], 0x30}, 0x1, 0x0, 0x0, 0x40008000}, 0x2000c0c0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
write$cgroup_devices(r2, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x304)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000004000)=""/4073, 0xfe9}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x8}, 0x40012100)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

1.213037564s ago: executing program 3 (id=1443):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x760f5cc1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x23c, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0xdb39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b153e0000000073f6c4f7f4f63d8fdadd42635100851000000200000085000000b2000000950033"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
close(0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="3d00030000100006007f4a36", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x4, 0x8, 0x34, 0xff, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80000000}, 0x8100, 0x5b, 0x3, 0x6, 0x2, 0x4, 0xc0, 0x0, 0xa, 0x0, 0xe073}, 0x0, 0xe, r4, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xd, 0x3, 0x7, 0x18, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @generic={0x96, 0x8, 0x0, 0x6, 0x2}, @generic={0x40, 0x7, 0x6, 0x2, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x98, &(0x7f0000000400)=""/152, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xc, 0x7, 0xad}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x0, 0x5, 0x3, 0xa}], 0x10, 0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
r7 = socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40))
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x33fe0)
close(r3) (async)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x118)

1.004272856s ago: executing program 3 (id=1444):
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70800000000007b8af8ff0000000007fe7e24ee1b57108416e4ff01000000b7040000000008000000d075bd00000095"], 0x0}, 0x94) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850002007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xd}, 0x0, 0x1, 0x6, 0x4, 0xa, 0x7fffffff, 0xfffd, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0xb) (async)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x11928, 0x0, 0x0, 0x0, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
r6 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x21, &(0x7f0000003880)=r1, 0x4) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (rerun: 64)
close(0xffffffffffffffff) (async)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) (async)
syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xe) (async, rerun: 32)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x11c161, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

904.345999ms ago: executing program 3 (id=1445):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c)
r1 = socket$kcm(0x10, 0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x4001040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r4, 0x0, 0x4040)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="d800000019008111e0020f060d8107040260090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f2162e2bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000062004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x21)

765.182023ms ago: executing program 2 (id=1446):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
close(0x3)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b20, 0x0)
recvmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f0000000900)=""/74, 0x4a}, {&(0x7f0000000980)=""/109, 0xa0}, {&(0x7f0000000a00)=""/200, 0xc8}], 0x4, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff000000000301000085f0ffff740000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4a, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd}, 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc000000000000"], 0xb8}}, 0x0)

664.467175ms ago: executing program 3 (id=1447):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x15, 0x7, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0xde7e107ac5095695, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4040800)
socket$kcm(0x10, 0x2, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, 0x0, 0x25, 0x10, @void}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x1893ee18e2981416, r7}, 0x18)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r8], 0x9a)

465.290942ms ago: executing program 3 (id=1448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x0, &(0x7f00000003c0)})
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000640)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4045060)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x40000, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x4000, 0x5865}, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, r4, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000006c0)=[{0x88, 0x114, 0x63538a75, "949dd61a4f6e8afb00b3a62051192fcce12311160ada7f1eb4c200f67bb48c7b608868c2275e4e065cfbc02fc20f2e74df0d231579641f47f093fae8574b10367d499222bf59cd4bcaaac6831a6f3d185490c6a6a17d2de39f870d351078cda9b326a6fee59c584ca6d6557945cd8000194b8fb223"}, {0x150, 0x104, 0x5, "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"}], 0x1d8}, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520003a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0)
r5 = socket$kcm(0x11, 0x20000000000000a, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x28, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x3, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040000}, 0xd2c0843758fcd1c6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

144.298747ms ago: executing program 0 (id=1453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1411, 0x410, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8020}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)

143.910009ms ago: executing program 0 (id=1454):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000c0000000100000000000000", @ANYRES32, @ANYBLOB="02008000000054ea4acc0261b10000006ddec7d3", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
close(r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000001580)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18180000040000000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='memory.events.local\x00', 0x0, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, 0x1d, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@generic="51b2b1eea6e5b730856e081a644fc72d71968027896cf491c947"]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_ext={0x1c, 0x13, &(0x7f0000001600)=ANY=[@ANYBLOB="18000000040000000000000001000000180000000700000000000000f7160000459b2000ffffffff1867000001000000000000000500000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018490000fcffffff00000000000000001800000003000000000000000100000018140000", @ANYRES32=r1, @ANYBLOB="00090000000000009500000000080000"], &(0x7f00000016c0)='syzkaller\x00', 0x2, 0x5d, &(0x7f0000001700)=""/93, 0x40f00, 0x1, '\x00', r5, 0x0, r2, 0x8, &(0x7f0000001780)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000017c0)={0x5, 0x8, 0x6, 0xa}, 0x10, 0x24edb, 0xffffffffffffffff, 0x3, &(0x7f0000001800)=[r1], &(0x7f0000001840)=[{0x0, 0x5, 0xf, 0x9}, {0x1, 0x2, 0x10, 0x4}, {0x4, 0x3, 0x7, 0xc}], 0x10, 0x5b34a834}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r3, &(0x7f0000000100)="55f045fa3467568cb00ea6748007a72c9ee47b131594f5a53479f1cfd05585c237bc040704d8fe12108471bb965fd6760de81404147bc1e2df8e88517e18d2c6ee6b2241401c9e2d7d2c44a7b15a2211d409f9321ed3c820fcf71c0439e540f60730f70a192b9db562b1d7a17d3e3900b95ce90007e20ec59e8bce8883f9dda90bfab9e01fc140952da11dd1c7187fffa0d1e2429165c2efa7ead366f65a66e53006fac74870912ca53e2cdf1af014f160d89b5707e528768167263ea371146c952b905ca4418adbc5f102f1f55a710a25ccc3b232e12290064c3ae5339fdaa7b8eb3d8aaa77f1ef70", &(0x7f0000000040)=@tcp6=r7}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711095000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)

85.13033ms ago: executing program 0 (id=1455):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x512, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400dfff07000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x8000000009, 0x800000, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0x2, r0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000020000000000000000070000070900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x48041}, 0x4) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) (async)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,', @ANYRESHEX, @ANYBLOB=',']) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000e8000000000000000000ffffffff00000000000000000000005bfd000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r2], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000e3ffffff0000000400000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000006465232dc8ff74c30c00"], 0xb8}}, 0x0) (async)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r6) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98037, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x2}, 0x0, 0x5, 0x0, 0x5, 0x0, 0x1, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'gre0\x00', @random="0100000000eb"})

84.461601ms ago: executing program 0 (id=1456):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)

5.022096ms ago: executing program 0 (id=1457):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="5879b9561f6413f1cce8deaa2c8258b49e825515f96f6c00b214cc89412b029e4b87cea5054851ddb10e569313bcf149184387d6edfae6d4d3f995ef70ff0a69e5cd75d87001410d1d96c9d6348a2ed7b14b87ab1e5ffc76e6b6f154a9272fb78ab60c3f4720e72524efb5ba687cf0851d26116bcf7b9ccda09244a4a0a1147da79978", 0x83}, {&(0x7f0000000140)="c4375023", 0x4}, {&(0x7f0000000300)="df305ad8661f4e269fb39b13fa8622d794f8bdc00060789063adb13de3980443f7047966e186d1e2ed5f6525e2715504be918be5596eb5e82f4d2ea1d6c16172ebc0407ea27049e1956b4661c01c375c91cf2016e75a89cf5a3ed96a0e651b580fcaeaa09e", 0x65}, {&(0x7f0000000440)="140a52099720d7fccf4e9de96fcf41be74b7c4ca1f41fce5d1f7f54a84c0ee8013f16ea02fd640e2818da0c7222511145b52d89b49813e5df82e8cb4d5de314d1143a88ab35bb5d995d13a912d2c2b1e71222e7497f286e7c9b702199e2a6546b7176ee9024af70afb97d05ceb3f7e0f4ab4e96fb890bbb846a05297b09011", 0x7f}, {&(0x7f00000004c0)="6e4780ce963143469136581e1ccce80407f2e22691fc7ab4bdf5db1aeb5b5e091f5b9e49a203f0fe4de635c03adf4cef7d0ca1414ff7033d54c4a700175d19782429e0bed6564d36f53e63ca1c9e00f56fd33fc16b6b03d42986c43b18ea65c5f4448c96da8972ad375901690950da65f93ffcc3ee1832d0e2187085037b2809c159840b706ed8437a7e1b73cc26a7f57258d48074d46229e9a6760f78c12d28fbe8a57210a555f6ebe5217cc25061f8983c649167707306af417310c5e0940820c1f1a3082b6d7dd806abfe", 0xcc}], 0x5, &(0x7f0000000640)=[{0x18, 0x10c, 0xe59, "dee4b5e2b859ab"}, {0x108, 0xee6d58d6e413fa3b, 0x7, "4aca59a8e356c8ad767a62b03553b10038ed7b4a66fd3b42d2e7bbe4ecda65569559ebcb7e7d9e13e153228d5fd5be2f0b17b3bcd80188d2969107e49a8b6bb48bec9c6b26b625747d2c31c8af996de0de99dbc3d534fdf6ea7626bac80ad0e74737453f9d13df9a275247d2541c50cf99983ace950118e4610d80817cc2fecf141caf9d1517993dfbb9b9cd869e794f8fa8037679f3c51e9b8211f091e278e9166629d947a5f2894e677251aa5c04ed55b9860c1b55ca2a843265ed0e42142cf8a80f5bc9d2a907e4fc6596758e556a5e58bca85a59599beef940931d969cfce01f1e6e732e260cfc18f6571e77a2027eba98c434"}], 0x120}, 0x44008080)
close(r2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"], 0x9a)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000022060500000020000000000079c800000c00078008000800000000890500012006000023050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 0 (id=1458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000301010200000000001400000200000708001640000004000800084000000219"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24044051)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000010000100000000000000000000000007"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x607ff17fdfb75fe0}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7c4d}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa32b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x41}, 0x4) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4) (async)
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2d840009aa58b9e45fdb"], 0xffdd)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)=""/258, 0x1a, 0x102, 0x1}, 0x28) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x8, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000185600000e00000a000000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x802, 0xf1, &(0x7f0000000700)=""/241, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0xfee3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16980' (ED25519) to the list of known hosts.
syzkaller login: [   56.026474][ T5832] cgroup: Unknown subsys name 'net'
[   56.128256][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.132789][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.262788][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.962429][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.967135][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.970983][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.975188][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.978816][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.996755][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.001184][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.005224][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.009647][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.013273][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.102542][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.106010][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.109467][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.113320][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.118137][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.321920][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.422987][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.505402][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.508595][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.511351][ T5847] bridge_slave_0: entered allmulticast mode
[   64.515910][ T5847] bridge_slave_0: entered promiscuous mode
[   64.557771][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.560173][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.562533][ T5847] bridge_slave_1: entered allmulticast mode
[   64.565420][ T5847] bridge_slave_1: entered promiscuous mode
[   64.608197][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.632385][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.637451][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.640450][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.643055][ T5851] bridge_slave_0: entered allmulticast mode
[   64.647287][ T5851] bridge_slave_0: entered promiscuous mode
[   64.651988][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.655388][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.658250][ T5851] bridge_slave_1: entered allmulticast mode
[   64.661617][ T5851] bridge_slave_1: entered promiscuous mode
[   64.692109][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   64.714875][ T5847] team0: Port device team_slave_0 added
[   64.730282][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.736241][ T5847] team0: Port device team_slave_1 added
[   64.753767][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.825465][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.828142][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.837942][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.842240][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.845790][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.849125][ T5856] bridge_slave_0: entered allmulticast mode
[   64.852572][ T5856] bridge_slave_0: entered promiscuous mode
[   64.856096][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.858294][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.860784][ T5856] bridge_slave_1: entered allmulticast mode
[   64.863835][ T5856] bridge_slave_1: entered promiscuous mode
[   64.869666][ T5851] team0: Port device team_slave_0 added
[   64.872116][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.875055][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.884443][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.896975][ T5851] team0: Port device team_slave_1 added
[   64.938557][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.962598][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.976014][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.978179][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.987248][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.997129][ T5847] hsr_slave_0: entered promiscuous mode
[   65.000092][ T5847] hsr_slave_1: entered promiscuous mode
[   65.013426][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.016464][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.027982][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.040693][ T5856] team0: Port device team_slave_0 added
[   65.055539][ T5856] team0: Port device team_slave_1 added
[   65.122475][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.124806][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.133205][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.141287][ T5851] hsr_slave_0: entered promiscuous mode
[   65.144186][ T5851] hsr_slave_1: entered promiscuous mode
[   65.147316][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.149274][ T5851] Cannot create hsr debugfs directory
[   65.158090][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.160654][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.172145][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.285827][ T5856] hsr_slave_0: entered promiscuous mode
[   65.289070][ T5856] hsr_slave_1: entered promiscuous mode
[   65.291984][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.294210][ T5856] Cannot create hsr debugfs directory
[   65.542282][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.557070][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.572220][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.578339][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.642836][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.650351][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.673051][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.681622][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.749018][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.756169][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.763053][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.770562][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.821212][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.848458][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.866696][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.869816][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.886517][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.889554][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.948498][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.001250][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.016865][ T5237] Bluetooth: hci0: command tx timeout
[   66.024096][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.027038][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.044310][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.047250][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.057788][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.098191][ T5237] Bluetooth: hci1: command tx timeout
[   66.100745][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.114222][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.116980][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.149549][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.152303][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.176089][ T5237] Bluetooth: hci2: command tx timeout
[   66.203938][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.277679][ T5847] veth0_vlan: entered promiscuous mode
[   66.290386][ T5847] veth1_vlan: entered promiscuous mode
[   66.336294][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.343558][ T5847] veth0_macvtap: entered promiscuous mode
[   66.358943][ T5847] veth1_macvtap: entered promiscuous mode
[   66.388638][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.408336][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.427291][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.437067][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.451208][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.461879][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.527963][ T5851] veth0_vlan: entered promiscuous mode
[   66.531437][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.534032][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.534369][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.549798][ T5851] veth1_vlan: entered promiscuous mode
[   66.573048][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.577994][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.609182][ T5851] veth0_macvtap: entered promiscuous mode
[   66.616424][ T5851] veth1_macvtap: entered promiscuous mode
[   66.623119][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.659503][ T5856] veth0_vlan: entered promiscuous mode
[   66.663400][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.673040][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.680058][ T5856] veth1_vlan: entered promiscuous mode
[   66.685757][ T5910] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   66.691150][ T5910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.700823][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.704101][ T5910] Zero length message leads to an empty skb
[   66.712140][ T5742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.715373][ T5742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.722375][ T5742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.728159][ T5856] veth0_macvtap: entered promiscuous mode
[   66.740910][ T5910] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   66.743895][ T5856] veth1_macvtap: entered promiscuous mode
[   66.756162][ T5910] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   66.811867][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.837135][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.851805][ T5742] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.858713][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.866662][ T5742] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.870046][ T5742] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.872798][ T5742] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.877813][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.045910][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.049858][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.068140][ T5914] tun0: tun_chr_ioctl cmd 1074025677
[   67.070500][ T5914] tun0: linktype set to 270
[   67.203358][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.208818][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.241595][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.245524][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.322552][ T5921] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   67.327761][ T5921] netlink: 822 bytes leftover after parsing attributes in process `syz.1.5'.
[   67.436233][ T5924] openvswitch: netlink: Geneve opt len 95 is not a multiple of 4.
[   67.458100][    C1] hrtimer: interrupt took 22017 ns
[   67.648816][ T5944] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12'.
[   67.653067][ T5944] netlink: zone id is out of range
[   67.657639][ T5944] netlink: zone id is out of range
[   67.659494][ T5944] netlink: zone id is out of range
[   67.661292][ T5944] netlink: zone id is out of range
[   67.662967][ T5944] netlink: zone id is out of range
[   67.667842][ T5944] netlink: zone id is out of range
[   67.669968][ T5944] netlink: zone id is out of range
[   67.671826][ T5944] netlink: zone id is out of range
[   67.673721][ T5944] netlink: zone id is out of range
[   67.784260][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'.
[   67.801320][ T5946] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.127793][ T5237] Bluetooth: hci0: command tx timeout
[   68.185687][ T5237] Bluetooth: hci1: command tx timeout
[   68.255373][ T5237] Bluetooth: hci2: command tx timeout
[   68.400539][ T5950] netlink: 'syz.2.14': attribute type 13 has an invalid length.
[   68.403868][ T5950] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.14'.
[   69.062831][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   69.756943][ T5972] netlink: 'syz.1.23': attribute type 1 has an invalid length.
[   69.759706][ T5972] netlink: 'syz.1.23': attribute type 2 has an invalid length.
[   69.960789][ T5988] =======================================================
[   69.960789][ T5988] WARNING: The mand mount option has been deprecated and
[   69.960789][ T5988]          and is ignored by this kernel. Remove the mand
[   69.960789][ T5988]          option from the mount to silence this warning.
[   69.960789][ T5988] =======================================================
[   70.080778][ T5993] netlink: 'syz.1.29': attribute type 10 has an invalid length.
[   70.123446][ T5997] netlink: 'syz.2.32': attribute type 21 has an invalid length.
[   70.127335][ T5997] IPv6: NLM_F_CREATE should be specified when creating new route
[   70.131099][ T5997] IPv6: Can't replace route, no match found
[   70.188233][ T5237] Bluetooth: hci0: command tx timeout
[   70.254429][ T5999] netlink: 'syz.2.33': attribute type 10 has an invalid length.
[   70.261257][ T5999] veth1_vlan: entered allmulticast mode
[   70.265711][ T5237] Bluetooth: hci1: command tx timeout
[   70.338737][ T5237] Bluetooth: hci2: command tx timeout
[   70.463113][ T5994] cgroup: fork rejected by pids controller in /syz0
[   70.979806][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.985542][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.988238][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.072339][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.221733][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.324761][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.336405][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.339713][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.347428][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.351602][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.361964][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.363723][ T6121] netlink: 200 bytes leftover after parsing attributes in process `syz.2.41'.
[   71.452693][ T6131] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.43'.
[   71.645787][ T6131] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.43'.
[   71.692214][   T12] bridge_slave_1: left allmulticast mode
[   71.694128][   T12] bridge_slave_1: left promiscuous mode
[   71.701731][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.727101][   T12] bridge_slave_0: left allmulticast mode
[   71.729016][   T12] bridge_slave_0: left promiscuous mode
[   71.731521][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.169848][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.178605][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.183808][   T12] bond0 (unregistering): Released all slaves
[   72.345062][ T5237] Bluetooth: hci1: command tx timeout
[   72.417471][ T5237] Bluetooth: hci2: command tx timeout
[   72.429102][ T6122] chnl_net:caif_netlink_parms(): no params data found
[   72.762101][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.770378][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.773353][ T6122] bridge_slave_0: entered allmulticast mode
[   72.784397][ T6122] bridge_slave_0: entered promiscuous mode
[   72.835579][   T12] hsr_slave_0: left promiscuous mode
[   72.863242][   T12] hsr_slave_1: left promiscuous mode
[   72.869154][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.880759][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.893163][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.900019][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.914981][ T6193] netlink: 'syz.2.51': attribute type 2 has an invalid length.
[   72.921392][   T12] veth1_macvtap: left promiscuous mode
[   72.923299][   T12] veth0_macvtap: left promiscuous mode
[   72.927122][ T6193] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.51'.
[   72.935827][   T12] veth1_vlan: left promiscuous mode
[   72.942073][   T12] veth0_vlan: left promiscuous mode
[   73.353197][   T12] team0 (unregistering): Port device team_slave_1 removed
[   73.382094][   T12] team0 (unregistering): Port device team_slave_0 removed
[   73.464995][ T5237] Bluetooth: hci0: command tx timeout
[   73.641975][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.648222][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.651145][ T6122] bridge_slave_1: entered allmulticast mode
[   73.655779][ T6122] bridge_slave_1: entered promiscuous mode
[   73.660919][ T6200] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[   73.895960][ T6202] : entered promiscuous mode
[   73.932292][ T6206] netlink: 'syz.2.55': attribute type 29 has an invalid length.
[   73.938963][ T6122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.948972][ T6122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.952115][ T6206] netlink: 'syz.2.55': attribute type 29 has an invalid length.
[   73.987340][ T6206] netlink: 'syz.2.55': attribute type 29 has an invalid length.
[   74.016313][ T6206] netlink: 'syz.2.55': attribute type 29 has an invalid length.
[   74.020651][ T6122] team0: Port device team_slave_0 added
[   74.050489][ T6122] team0: Port device team_slave_1 added
[   74.154856][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.157030][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.188059][ T6122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.193049][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.195484][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.203882][ T6122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.318173][ T6122] hsr_slave_0: entered promiscuous mode
[   74.320536][ T6122] hsr_slave_1: entered promiscuous mode
[   74.701139][ T6244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.63'.
[   74.704407][ T6244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.63'.
[   74.714198][ T6244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.63'.
[   74.756302][ T6244] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.63'.
[   74.883336][ T6257] netlink: 'syz.2.65': attribute type 21 has an invalid length.
[   75.053998][ T6122] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.108551][ T6122] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.457052][ T6275] netlink: 'syz.1.67': attribute type 39 has an invalid length.
[   75.616571][ T5237] Bluetooth: hci0: command tx timeout
[   77.440920][ T6122] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.453566][ T6272] netlink: 'syz.1.67': attribute type 4 has an invalid length.
[   77.482575][ T6122] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.638451][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.693380][ T6122] 8021q: adding VLAN 0 to HW filter on device team0
[   77.698011][ T5237] Bluetooth: hci0: command tx timeout
[   77.737823][  T727] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.740400][  T727] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.761427][  T727] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.763992][  T727] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.816938][ T6122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.955159][ T6313] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.977772][ T6317] warning: `syz.1.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.051374][ T6122] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.080160][ T6122] veth0_vlan: entered promiscuous mode
[   78.086633][ T6122] veth1_vlan: entered promiscuous mode
[   78.110527][ T6122] veth0_macvtap: entered promiscuous mode
[   78.120267][ T6122] veth1_macvtap: entered promiscuous mode
[   78.130235][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.137979][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.147967][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.151132][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.159866][ T6212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.164418][ T6212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.230889][ T6321] lo speed is unknown, defaulting to 1000
[   78.234179][ T6321] lo speed is unknown, defaulting to 1000
[   78.265500][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.274500][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.291642][ T6322] Illegal XDP return value 4294967274 on prog  (id 54) dev N/A, expect packet loss!
[   78.291984][ T6321] lo speed is unknown, defaulting to 1000
[   78.322131][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.326573][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.351747][ T6321] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.418505][ T6321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   78.486401][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'.
[   78.501884][ T6321] lo speed is unknown, defaulting to 1000
[   78.510574][ T6321] lo speed is unknown, defaulting to 1000
[   78.519334][ T6321] lo speed is unknown, defaulting to 1000
[   78.706241][ T6340] netlink: 140 bytes leftover after parsing attributes in process `syz.0.79'.
[   79.300533][ T6346] net_ratelimit: 15 callbacks suppressed
[   79.300568][ T6346] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   79.440776][ T6346] netlink: 208 bytes leftover after parsing attributes in process `syz.1.81'.
[   79.508289][ T6347] netlink: 'syz.1.81': attribute type 10 has an invalid length.
[   79.510874][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.81'.
[   79.778486][ T5237] Bluetooth: hci0: command tx timeout
[   80.180710][ T6347] bridge0: port 3(batadv0) entered blocking state
[   80.183156][ T6347] bridge0: port 3(batadv0) entered disabled state
[   80.187672][ T6347] batadv0: entered allmulticast mode
[   80.197900][ T6347] batadv0: entered promiscuous mode
[   80.202055][ T6347] bridge0: port 3(batadv0) entered blocking state
[   80.204994][ T6347] bridge0: port 3(batadv0) entered forwarding state
[   80.313980][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'.
[   80.393472][ T6365] netlink: 'syz.2.86': attribute type 28 has an invalid length.
[   80.397453][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.87'.
[   80.399383][ T6362] netlink: 'syz.2.86': attribute type 28 has an invalid length.
[   80.402868][ T6365] netlink: 'syz.2.86': attribute type 29 has an invalid length.
[   80.406800][ T6362] netlink: 'syz.2.86': attribute type 29 has an invalid length.
[   80.410300][ T6362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.86'.
[   80.423429][ T6365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.86'.
[   80.435034][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.437939][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.488600][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.506973][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   80.510280][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   80.769273][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.229069][   T24] cfg80211: failed to load regulatory.db
[   81.236691][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   81.242981][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   81.307678][ T6380] netlink: 'syz.1.92': attribute type 11 has an invalid length.
[   81.310616][ T6380] netlink: 'syz.1.92': attribute type 11 has an invalid length.
[   82.448527][ T6409] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   82.949472][ T6428] netlink: 'syz.2.106': attribute type 4 has an invalid length.
[   83.137081][ T6433] sctp: [Deprecated]: syz.2.108 (pid 6433) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.137081][ T6433] Use struct sctp_sack_info instead
[   83.638719][ T6444] netlink: 'syz.0.112': attribute type 39 has an invalid length.
[   83.752477][ T6447] netlink: 'syz.1.114': attribute type 16 has an invalid length.
[   83.757312][ T6447] netlink: 'syz.1.114': attribute type 17 has an invalid length.
[   83.887065][ T6447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.979425][ T6453] openvswitch: netlink: EtherType 50a is less than min 600
[   84.103196][ T6465] netlink: 'syz.2.119': attribute type 1 has an invalid length.
[   84.199586][ T6471] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   84.697343][ T6497] validate_nla: 1 callbacks suppressed
[   84.697374][ T6497] netlink: 'syz.0.127': attribute type 2 has an invalid length.
[   84.702603][ T6497] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   84.706836][ T6497] __nla_validate_parse: 1 callbacks suppressed
[   84.706848][ T6497] netlink: 198176 bytes leftover after parsing attributes in process `syz.0.127'.
[   84.719782][ T6497] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   85.198783][ T6512] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   86.598430][ T6523] netlink: 'syz.0.136': attribute type 13 has an invalid length.
[   86.600918][ T6523] netlink: 164 bytes leftover after parsing attributes in process `syz.0.136'.
[   86.603879][ T6523] syz_tun: refused to change device tx_queue_len
[   86.762703][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   86.859607][ T6540] netlink: 'syz.2.141': attribute type 21 has an invalid length.
[   86.863348][ T6540] netlink: 128 bytes leftover after parsing attributes in process `syz.2.141'.
[   86.867684][ T6540] netlink: 'syz.2.141': attribute type 4 has an invalid length.
[   87.237271][ T6556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.608934][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[   87.617260][ T6559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.146'.
[   87.960242][ T6569] netlink: 196 bytes leftover after parsing attributes in process `syz.0.149'.
[   88.016339][ T6571] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   88.026053][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'.
[   88.252679][ T6581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.154'.
[   88.311454][ T6582] netlink: 152 bytes leftover after parsing attributes in process `syz.0.153'.
[   89.649609][ T6640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.671759][ T6646] netlink: 'syz.1.174': attribute type 4 has an invalid length.
[   89.683983][ T6646] .`: renamed from bond0 (while UP)
[   90.360719][ T6655] netlink: 'syz.2.177': attribute type 19 has an invalid length.
[   90.363983][ T6655] __nla_validate_parse: 3 callbacks suppressed
[   90.363999][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.177'.
[   90.377248][ T6655] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.177'.
[   90.383700][ T6654] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.177'.
[   91.430635][ T6671] netlink: 182 bytes leftover after parsing attributes in process `syz.2.182'.
[   91.490101][ T6671] netlink: 'syz.2.182': attribute type 10 has an invalid length.
[   91.742000][ T6671] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   91.743014][ T6676] delete_channel: no stack
[   91.806222][ T6671] syz.2.182 (6671) used greatest stack depth: 17784 bytes left
[   92.713944][ T6704] netlink: 'syz.0.194': attribute type 40 has an invalid length.
[   92.721158][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.176817][ T6715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.182753][ T5916] lo speed is unknown, defaulting to 1000
[   93.189066][ T5916] syz2: Port: 1 Link DOWN
[   93.702487][ T6731] netlink: 188 bytes leftover after parsing attributes in process `syz.1.202'.
[   94.479954][ T6748] netlink: 'syz.0.207': attribute type 1 has an invalid length.
[   94.483038][ T6748] netlink: 'syz.0.207': attribute type 1 has an invalid length.
[   94.492600][ T6748] netlink: 'syz.0.207': attribute type 2 has an invalid length.
[   94.499859][ T6748] netlink: 'syz.0.207': attribute type 2 has an invalid length.
[   94.573060][ T6751] netlink: 'syz.1.206': attribute type 2 has an invalid length.
[   94.579173][ T6751] netlink: 'syz.1.206': attribute type 8 has an invalid length.
[   94.582485][ T6751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.206'.
[   94.720445][ T6764] netlink: 'syz.1.212': attribute type 29 has an invalid length.
[   94.749176][ T6765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.775122][ T6767] netlink: 168 bytes leftover after parsing attributes in process `syz.1.213'.
[   95.239799][ T6780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.217'.
[   95.419300][ T6789] netlink: 182 bytes leftover after parsing attributes in process `syz.2.219'.
[   95.423240][ T6789] validate_nla: 1 callbacks suppressed
[   95.423252][ T6789] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[   95.593681][ T6793] tap0: tun_chr_ioctl cmd 1074025675
[   95.596126][ T6793] tap0: persist enabled
[   95.598328][ T6793] tap0: tun_chr_ioctl cmd 1074025675
[   95.600263][ T6793] tap0: persist enabled
[   96.016731][ T6816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.910727][ T6825] netlink: 830 bytes leftover after parsing attributes in process `syz.2.231'.
[   97.639528][ T6840] netlink: 'syz.2.237': attribute type 10 has an invalid length.
[   97.646997][ T6840] team0: Device ipvlan1 failed to register rx_handler
[   97.722296][ T6843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.346104][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'.
[   98.517667][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.0.242'.
[   98.520516][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[   98.934353][ T6866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.579410][ T6875] netlink: 'syz.2.248': attribute type 23 has an invalid length.
[   99.747457][ T6880] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   99.807222][ T6880] lo speed is unknown, defaulting to 1000
[  100.002734][ T6886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'.
[  100.008844][ T6886] netlink: 'syz.0.251': attribute type 21 has an invalid length.
[  100.011362][ T6886] netlink: 152 bytes leftover after parsing attributes in process `syz.0.251'.
[  100.776648][ T6898] IPv6: NLM_F_REPLACE set, but no existing node found!
[  100.779384][ T6897] IPv6: NLM_F_REPLACE set, but no existing node found!
[  101.199758][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'.
[  101.518090][ T6912] netlink: 360 bytes leftover after parsing attributes in process `syz.0.259'.
[  101.574197][ T6912] netlink: 'syz.0.259': attribute type 11 has an invalid length.
[  101.584179][ T6912] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.259'.
[  101.593072][ T6912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.637878][ T6914] netlink: 'syz.2.260': attribute type 10 has an invalid length.
[  101.876641][ T6920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.262'.
[  102.243729][ T6924] netlink: 'syz.0.264': attribute type 28 has an invalid length.
[  102.251766][ T6924] netlink: 2 bytes leftover after parsing attributes in process `syz.0.264'.
[  102.359122][ T6935] bridge_slave_1: left allmulticast mode
[  102.360975][ T6935] bridge_slave_1: left promiscuous mode
[  102.362949][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.370530][ T6935] bridge_slave_0: left allmulticast mode
[  102.372388][ T6935] bridge_slave_0: left promiscuous mode
[  102.374264][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.421841][ T6936] netlink: 'syz.2.267': attribute type 4 has an invalid length.
[  102.425116][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'.
[  102.557890][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[  102.779487][ T6948] netlink: 360 bytes leftover after parsing attributes in process `syz.0.272'.
[  102.861829][ T6953] syz.0.273 uses obsolete (PF_INET,SOCK_PACKET)
[  103.223427][ T6958] tap1: tun_chr_ioctl cmd 1074025675
[  103.226775][ T6958] tap1: persist disabled
[  104.660318][ T6992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.298458][ T7006] dvmrp0: tun_chr_ioctl cmd 2148553947
[  105.598202][ T7011] netlink: 763 bytes leftover after parsing attributes in process `syz.2.290'.
[  106.682635][ T7022] netlink: 'syz.2.293': attribute type 7 has an invalid length.
[  107.227916][ T7033] openvswitch: netlink: Geneve opt len 95 is not a multiple of 4.
[  107.452406][ T7039] netlink: 192 bytes leftover after parsing attributes in process `syz.2.298'.
[  107.459679][ T7044] netlink: 192 bytes leftover after parsing attributes in process `syz.2.298'.
[  107.790133][ T7061] netlink: 'syz.2.301': attribute type 10 has an invalid length.
[  107.807308][ T7061] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  107.811442][ T7061] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  107.819957][ T7061] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  108.718769][ T7067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.303'.
[  108.724475][ T7068] netlink: 104 bytes leftover after parsing attributes in process `syz.2.303'.
[  108.909988][ T7073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.304'.
[  109.220970][ T7080] netlink: 'syz.0.307': attribute type 21 has an invalid length.
[  109.223642][ T7080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.307'.
[  109.720141][ T7087] netlink: 14 bytes leftover after parsing attributes in process `syz.0.309'.
[  109.776387][ T7088] netlink: 'syz.0.309': attribute type 1 has an invalid length.
[  109.786342][ T7088] netlink: 'syz.0.309': attribute type 2 has an invalid length.
[  110.367257][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'.
[  110.371024][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'.
[  110.608446][ T7096] netlink: 'syz.0.310': attribute type 21 has an invalid length.
[  110.614503][ T7096] netlink: 128 bytes leftover after parsing attributes in process `syz.0.310'.
[  110.623535][ T7096] netlink: 'syz.0.310': attribute type 4 has an invalid length.
[  110.636121][ T7096] netlink: 'syz.0.310': attribute type 5 has an invalid length.
[  111.797512][ T7106] netlink: 'syz.0.314': attribute type 210 has an invalid length.
[  111.878041][ T7107] netlink: 'syz.0.314': attribute type 7 has an invalid length.
[  112.239142][ T7119] netlink: 'syz.0.318': attribute type 2 has an invalid length.
[  112.242398][ T7119] netlink: 'syz.0.318': attribute type 11 has an invalid length.
[  112.627916][ T7130] __nla_validate_parse: 2 callbacks suppressed
[  112.627931][ T7130] netlink: 104 bytes leftover after parsing attributes in process `syz.0.321'.
[  112.993744][ T7147] netlink: 830 bytes leftover after parsing attributes in process `syz.2.327'.
[  114.000481][ T7160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.563976][ T7183] tmpfs: Bad value for 'gid'
[  114.566199][ T7183] tmpfs: Bad value for 'gid'
[  114.705538][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.340'.
[  114.836421][ T7194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.342'.
[  115.129387][ T7202] xt_policy: neither incoming nor outgoing policy selected
[  115.592075][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[  115.694499][ T7221] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.348'.
[  116.270591][ T7229] syzkaller0: entered promiscuous mode
[  116.272768][ T7229] syzkaller0: entered allmulticast mode
[  117.490205][ T7248] netlink: 'syz.0.356': attribute type 1 has an invalid length.
[  117.491326][ T7244] netlink: 830 bytes leftover after parsing attributes in process `syz.2.355'.
[  117.493828][ T7248] netlink: 'syz.0.356': attribute type 4 has an invalid length.
[  117.498397][ T7248] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.356'.
[  117.670910][ T7255] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.358'.
[  118.062708][ T7259] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.360'.
[  118.132010][ T7259] netlink: 300 bytes leftover after parsing attributes in process `syz.0.360'.
[  118.343480][ T7263] netlink: 'syz.0.362': attribute type 5 has an invalid length.
[  118.453552][ T7272] netlink: 'syz.2.366': attribute type 10 has an invalid length.
[  118.459802][ T7272] macvlan0: entered promiscuous mode
[  118.461776][ T7272] macvlan0: entered allmulticast mode
[  118.471014][ T7272] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  118.509520][ T7275] netlink: 830 bytes leftover after parsing attributes in process `syz.2.367'.
[  119.718300][ T7294] netlink: 830 bytes leftover after parsing attributes in process `syz.0.375'.
[  120.397614][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.402491][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.415087][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.427540][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.431327][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.473903][ T7308] lo speed is unknown, defaulting to 1000
[  120.616695][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.723600][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.798064][ T7308] chnl_net:caif_netlink_parms(): no params data found
[  120.849332][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.886373][ T7322] netlink: 830 bytes leftover after parsing attributes in process `syz.2.382'.
[  120.966009][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.030363][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.041064][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.044037][ T7308] bridge_slave_0: entered allmulticast mode
[  121.048190][ T7308] bridge_slave_0: entered promiscuous mode
[  121.059854][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.067541][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.072958][ T7308] bridge_slave_1: entered allmulticast mode
[  121.082518][ T7308] bridge_slave_1: entered promiscuous mode
[  121.253851][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.299867][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.424110][ T7308] team0: Port device team_slave_0 added
[  121.437568][   T12] batadv0: left allmulticast mode
[  121.442014][   T12] batadv0: left promiscuous mode
[  121.449914][   T12] bridge0: port 3(batadv0) entered disabled state
[  121.462430][   T12] bridge_slave_1: left allmulticast mode
[  121.473851][   T12] bridge_slave_1: left promiscuous mode
[  121.553499][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.573480][   T12] bridge_slave_0: left allmulticast mode
[  121.584644][   T12] bridge_slave_0: left promiscuous mode
[  121.587250][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.820179][ T5237] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  121.934138][   T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.940925][   T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.946419][   T12] .` (unregistering): Released all slaves
[  121.958528][ T7308] team0: Port device team_slave_1 added
[  122.017931][   T12] : left promiscuous mode
[  122.026091][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.029094][ T7354] netlink: 'syz.0.391': attribute type 1 has an invalid length.
[  122.031617][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.041464][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.048167][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.050800][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.060710][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.127125][ T7356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'.
[  122.140633][ T7308] hsr_slave_0: entered promiscuous mode
[  122.145109][ T7308] hsr_slave_1: entered promiscuous mode
[  122.150590][ T7308] debugfs: 'hsr0' already exists in 'hsr'
[  122.152764][ T7308] Cannot create hsr debugfs directory
[  122.169292][ T7356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'.
[  122.331359][ T7368] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[  122.335059][ T7368] netlink: 152 bytes leftover after parsing attributes in process `syz.0.393'.
[  122.341447][   T12] hsr_slave_0: left promiscuous mode
[  122.344082][   T12] hsr_slave_1: left promiscuous mode
[  122.346718][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.349172][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.352305][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.354852][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.366833][   T12] veth1_macvtap: left promiscuous mode
[  122.368786][   T12] veth0_macvtap: left promiscuous mode
[  122.371093][   T12] veth1_vlan: left promiscuous mode
[  122.372926][   T12] veth0_vlan: left promiscuous mode
[  122.497107][ T5237] Bluetooth: hci3: command tx timeout
[  122.677091][   T12] team0 (unregistering): Port device team_slave_1 removed
[  122.698796][   T12] team0 (unregistering): Port device team_slave_0 removed
[  123.052662][ T7368] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  123.061885][ T7372] netlink: 830 bytes leftover after parsing attributes in process `syz.2.394'.
[  123.198162][ T7308] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  123.249234][ T7308] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  123.274232][ T7308] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  123.310406][ T7308] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  123.462272][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.504136][ T7308] 8021q: adding VLAN 0 to HW filter on device team0
[  123.534019][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.536579][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.548672][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.551432][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.698620][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.766962][ T7308] veth0_vlan: entered promiscuous mode
[  123.773047][ T7308] veth1_vlan: entered promiscuous mode
[  123.820390][ T7308] veth0_macvtap: entered promiscuous mode
[  123.843740][ T7308] veth1_macvtap: entered promiscuous mode
[  123.868442][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.877746][ T7405] delete_channel: no stack
[  123.888399][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.898808][ T5876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.950958][ T5876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.953866][ T5876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.967346][ T5876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.044281][  T727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.055612][  T727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.100890][ T7428] netlink: 830 bytes leftover after parsing attributes in process `syz.0.404'.
[  124.110374][  T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.119150][  T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.603008][ T5237] Bluetooth: hci3: command tx timeout
[  125.828714][ T7494] netlink: 'syz.3.414': attribute type 29 has an invalid length.
[  125.835501][ T7494] netlink: 'syz.3.414': attribute type 29 has an invalid length.
[  125.851021][ T7496] netlink: 'syz.3.414': attribute type 29 has an invalid length.
[  125.857151][ T7494] netlink: 'syz.3.414': attribute type 29 has an invalid length.
[  125.997639][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  126.629356][ T7506] netlink: 830 bytes leftover after parsing attributes in process `syz.0.417'.
[  126.655070][ T5237] Bluetooth: hci3: command tx timeout
[  127.664029][ T7528] netlink: 'syz.3.423': attribute type 25 has an invalid length.
[  127.679031][ T7528] netlink: 'syz.3.423': attribute type 28 has an invalid length.
[  127.732089][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'.
[  127.854396][ T7540] netlink: 830 bytes leftover after parsing attributes in process `syz.0.428'.
[  127.957596][ T7544] bpf: Bad value for 'gid'
[  128.734936][ T5237] Bluetooth: hci3: command tx timeout
[  128.887208][ T7575] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  128.903956][ T7575] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.437'.
[  129.281736][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'.
[  129.960187][ T7626] bpf: Bad value for 'gid'
[  130.328872][ T7631] mac80211_hwsim hwsim12 .3c: renamed from wlan1 (while UP)
[  130.553243][ T7648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  130.557586][ T7648] IPv6: NLM_F_CREATE should be set when creating new route
[  130.560655][ T7648] IPv6: NLM_F_CREATE should be set when creating new route
[  131.418632][ T7649] delete_channel: no stack
[  133.983768][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  133.987552][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  134.689277][ T7685] netlink: 277 bytes leftover after parsing attributes in process `syz.2.468'.
[  134.769325][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'.
[  140.722209][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3307386837 wd_nsec: 3307386739
[  149.963532][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'.
[  149.967680][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'.
[  149.973275][ T7740] netlink: 'syz.2.475': attribute type 27 has an invalid length.
[  149.975257][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'.
[  149.979710][ T7740] netlink: 152 bytes leftover after parsing attributes in process `syz.2.475'.
[  150.002468][ T7740] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  150.033044][ T7751] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  150.042884][ T7751] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  150.199429][ T7764] netlink: 830 bytes leftover after parsing attributes in process `syz.3.482'.
[  150.287470][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'.
[  150.292706][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'.
[  150.402808][ T7767] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.484'.
[  150.408118][ T7767] netlink: 62239 bytes leftover after parsing attributes in process `syz.2.484'.
[  151.352297][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'.
[  151.842399][ T7799] netlink: 'syz.3.492': attribute type 16 has an invalid length.
[  152.475356][ T7824] syzkaller0: entered promiscuous mode
[  152.477128][ T7824] syzkaller0: entered allmulticast mode
[  154.443946][ T7870] netlink: 'syz.3.510': attribute type 10 has an invalid length.
[  154.458369][ T7870] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  154.463096][ T7870] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  154.469926][ T7870] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  154.608969][ T7874] GPL: port 1(erspan0) entered blocking state
[  154.636392][ T7874] GPL: port 1(erspan0) entered disabled state
[  154.641625][ T7874] erspan0: entered allmulticast mode
[  154.652148][ T7874] erspan0: entered promiscuous mode
[  155.035514][ T7876] __nla_validate_parse: 10 callbacks suppressed
[  155.035531][ T7876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'.
[  155.053724][ T7876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'.
[  155.057906][ T7876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'.
[  155.130619][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.515'.
[  155.138483][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.516'.
[  155.142421][ T7892] netlink: 60 bytes leftover after parsing attributes in process `syz.0.516'.
[  155.203412][ T7899] sock: sock_set_timeout: `syz.3.518' (pid 7899) tries to set negative timeout
[  155.542232][ T7923] netlink: 'syz.0.526': attribute type 10 has an invalid length.
[  155.553645][ T7923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.526'.
[  155.562095][ T7923] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  155.569449][ T7923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.780750][ T7933] netlink: 9 bytes leftover after parsing attributes in process `syz.0.530'.
[  158.052959][ T7944] netlink: 'syz.2.531': attribute type 1 has an invalid length.
[  158.104310][ T7951] netlink: 830 bytes leftover after parsing attributes in process `syz.3.533'.
[  158.149948][ T7953] netlink: 830 bytes leftover after parsing attributes in process `syz.3.534'.
[  158.334449][ T7964] netlink: 'syz.2.537': attribute type 10 has an invalid length.
[  158.341325][ T7964] team0: Device ipvlan1 failed to register rx_handler
[  158.380164][ T7968] netlink: 'syz.0.538': attribute type 29 has an invalid length.
[  158.394461][ T7968] netlink: 'syz.0.538': attribute type 29 has an invalid length.
[  158.401575][ T7968] netlink: 'syz.0.538': attribute type 29 has an invalid length.
[  158.415438][ T7969] netlink: 'syz.0.538': attribute type 29 has an invalid length.
[  158.784216][ T7992] lo speed is unknown, defaulting to 1000
[  159.742542][ T8015] netlink: 'syz.2.555': attribute type 10 has an invalid length.
[  159.762418][ T8015] 8021q: adding VLAN 0 to HW filter on device team0
[  159.774193][ T8015] bond0: (slave team0): Enslaving as an active interface with an up link
[  160.306617][ T8027] __nla_validate_parse: 4 callbacks suppressed
[  160.306635][ T8027] netlink: 830 bytes leftover after parsing attributes in process `syz.2.558'.
[  160.662864][ T8041] netlink: 'syz.0.564': attribute type 13 has an invalid length.
[  160.670180][ T8041] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.564'.
[  160.705333][ T8044] netlink: 830 bytes leftover after parsing attributes in process `syz.2.565'.
[  161.289781][ T8066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.572'.
[  161.383110][ T8069] netlink: 'syz.3.573': attribute type 29 has an invalid length.
[  161.398504][ T8069] netlink: 'syz.3.573': attribute type 29 has an invalid length.
[  161.407754][ T8069] netlink: 'syz.3.573': attribute type 29 has an invalid length.
[  161.418521][ T8069] netlink: 'syz.3.573': attribute type 29 has an invalid length.
[  161.681016][ T8084] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.579'.
[  161.781604][ T8091] netlink: 'syz.0.580': attribute type 29 has an invalid length.
[  161.785766][ T8091] netlink: 'syz.0.580': attribute type 29 has an invalid length.
[  161.789269][ T8091] netlink: 'syz.0.580': attribute type 29 has an invalid length.
[  161.846155][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'.
[  161.896560][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'.
[  162.024046][ T8099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'.
[  162.074726][ T8097] netlink: 192 bytes leftover after parsing attributes in process `syz.2.582'.
[  162.335189][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.587'.
[  162.419087][ T8120] netlink: 'syz.0.590': attribute type 29 has an invalid length.
[  162.425487][ T8120] netlink: 'syz.0.590': attribute type 29 has an invalid length.
[  164.421282][ T5237] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  165.411084][ T8203] __nla_validate_parse: 69 callbacks suppressed
[  165.411100][ T8203] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.613'.
[  165.749324][ T8219] bpf: Bad value for 'gid'
[  166.343926][ T8239] validate_nla: 5 callbacks suppressed
[  166.343940][ T8239] netlink: 'syz.2.623': attribute type 4 has an invalid length.
[  166.351211][ T8239] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.623'.
[  166.408816][ T8240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.472013][ T8245] netlink: 'syz.2.625': attribute type 2 has an invalid length.
[  166.475621][ T8245] netlink: 'syz.2.625': attribute type 8 has an invalid length.
[  166.478434][ T8245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.625'.
[  166.484293][ T8242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.624'.
[  166.494918][ T5237] Bluetooth: hci3: command tx timeout
[  166.550610][ T8249] netlink: 830 bytes leftover after parsing attributes in process `syz.0.627'.
[  166.714251][ T8255] netlink: 'syz.2.628': attribute type 2 has an invalid length.
[  166.725958][ T8255] netlink: 'syz.2.628': attribute type 1 has an invalid length.
[  166.729355][ T8255] netlink: 198176 bytes leftover after parsing attributes in process `syz.2.628'.
[  166.738573][ T8255] netlink: 'syz.2.628': attribute type 1 has an invalid length.
[  166.850994][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.630'.
[  166.854188][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.630'.
[  166.859819][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.630'.
[  167.240112][ T8270] xt_l2tp: missing protocol rule (udp|l2tpip)
[  169.593583][ T8278] netlink: 830 bytes leftover after parsing attributes in process `syz.0.636'.
[  169.936700][ T8304] @: renamed from bond_slave_0 (while UP)
[  170.096005][ T8311] netlink: 'syz.3.642': attribute type 10 has an invalid length.
[  170.099133][ T8311] netlink: 'syz.3.642': attribute type 16 has an invalid length.
[  170.377550][ T8315] raw_sendmsg: syz.3.644 forgot to set AF_INET. Fix it!
[  170.387557][ T8314] delete_channel: no stack
[  170.587195][ T8327] __nla_validate_parse: 9 callbacks suppressed
[  170.587265][ T8327] netlink: 56 bytes leftover after parsing attributes in process `syz.3.648'.
[  170.599264][ T8329] netlink: 104 bytes leftover after parsing attributes in process `syz.2.649'.
[  171.079995][ T8340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.651'.
[  171.431169][ T8342] netlink: 'syz.2.652': attribute type 2 has an invalid length.
[  171.434255][ T8342] netlink: 'syz.2.652': attribute type 8 has an invalid length.
[  171.438558][ T8342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.652'.
[  171.669244][ T8360] veth1_macvtap: left promiscuous mode
[  172.022300][ T8365] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.659'.
[  172.045933][ T8365] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.659'.
[  172.053520][ T8365] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.659'.
[  172.240190][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'.
[  172.944285][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'.
[  172.970023][ T8399] netlink: 'syz.0.668': attribute type 10 has an invalid length.
[  172.972776][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.668'.
[  172.983921][ T8399] batman_adv: batadv0: Adding interface: virt_wifi0
[  172.987741][ T8399] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.999625][ T8399] batman_adv: batadv0: Interface activated: virt_wifi0
[  173.131886][ T8407] netlink: 'syz.2.671': attribute type 29 has an invalid length.
[  173.143627][ T8407] netlink: 'syz.2.671': attribute type 29 has an invalid length.
[  173.148452][ T8407] netlink: 'syz.2.671': attribute type 3 has an invalid length.
[  173.151046][ T8407] netlink: 'syz.2.671': attribute type 1 has an invalid length.
[  173.157683][ T8407] netlink: 'syz.2.671': attribute type 29 has an invalid length.
[  173.161602][ T8407] netlink: 'syz.2.671': attribute type 29 has an invalid length.
[  173.799932][ T8422] syzkaller0: entered promiscuous mode
[  173.802526][ T8422] syzkaller0: entered allmulticast mode
[  174.119680][ T8436] netlink: 'syz.0.679': attribute type 25 has an invalid length.
[  176.745410][ T8506] validate_nla: 5 callbacks suppressed
[  176.745426][ T8506] netlink: 'syz.2.700': attribute type 12 has an invalid length.
[  176.751662][ T8506] __nla_validate_parse: 7 callbacks suppressed
[  176.751674][ T8506] netlink: 172 bytes leftover after parsing attributes in process `syz.2.700'.
[  177.679995][ T8518] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.703'.
[  178.657698][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'.
[  178.664336][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'.
[  178.694029][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'.
[  178.711841][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'.
[  179.420902][ T8584] tap0: tun_chr_ioctl cmd 35108
[  179.498866][ T8587] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  179.528879][ T8586] delete_channel: no stack
[  179.628210][ T8600] netlink: 'syz.3.725': attribute type 29 has an invalid length.
[  179.632874][ T8600] netlink: 'syz.3.725': attribute type 29 has an invalid length.
[  179.642962][ T8600] netlink: 'syz.3.725': attribute type 29 has an invalid length.
[  179.687917][ T8605] netlink: 72 bytes leftover after parsing attributes in process `syz.3.727'.
[  180.223986][ T8581] delete_channel: no stack
[  180.968637][ T8635] netlink: 'syz.0.733': attribute type 10 has an invalid length.
[  180.972244][ T8635] bond0: (slave bond_slave_0): Releasing backup interface
[  180.980912][ T8635] netlink: 830 bytes leftover after parsing attributes in process `syz.0.733'.
[  181.642370][ T8637] netlink: 'syz.3.734': attribute type 29 has an invalid length.
[  182.072919][ T8656] openvswitch: netlink: Flow actions attr not present in new flow.
[  183.467372][ T8710] wg2: entered promiscuous mode
[  183.469847][ T8710] wg2: entered allmulticast mode
[  183.560233][ T8729] netlink: 'syz.0.757': attribute type 2 has an invalid length.
[  183.563290][ T8729] netlink: 164 bytes leftover after parsing attributes in process `syz.0.757'.
[  184.079336][ T8762] netlink: 'syz.3.767': attribute type 29 has an invalid length.
[  184.083416][ T8762] netlink: 'syz.3.767': attribute type 29 has an invalid length.
[  184.087155][ T8762] netlink: 'syz.3.767': attribute type 29 has an invalid length.
[  184.090666][ T8762] netlink: 'syz.3.767': attribute type 29 has an invalid length.
[  184.146148][ T8763] netlink: 182 bytes leftover after parsing attributes in process `syz.3.767'.
[  184.150840][ T8763] netlink: 'syz.3.767': attribute type 10 has an invalid length.
[  184.154433][ T8764] netlink: 'syz.3.767': attribute type 10 has an invalid length.
[  184.173480][ T8763] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  184.276672][ T8766] netlink: 'syz.3.768': attribute type 21 has an invalid length.
[  184.279877][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'.
[  184.636713][ T8790] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.775'.
[  184.639729][ T8790] netlink: 5 bytes leftover after parsing attributes in process `syz.3.775'.
[  184.851004][ T8789] veth0_vlan: entered allmulticast mode
[  184.856345][ T8796] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  185.530311][ T8796] geneve1: entered allmulticast mode
[  186.030835][ T8817] netlink: 'syz.3.782': attribute type 1 has an invalid length.
[  186.034941][ T8817] netlink: 'syz.3.782': attribute type 1 has an invalid length.
[  186.112354][ T8821] syzkaller0: entered promiscuous mode
[  186.114349][ T8821] syzkaller0: entered allmulticast mode
[  188.541339][ T8843] tc_dump_action: action bad kind
[  189.026310][ T8860] netlink: 5 bytes leftover after parsing attributes in process `syz.3.794'.
[  189.062202][ T8860] netlink: 5 bytes leftover after parsing attributes in process `syz.3.794'.
[  189.074998][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.794'.
[  189.424393][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'.
[  189.434348][ T8867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.797'.
[  189.461573][ T8867] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.797'.
[  189.485996][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'.
[  189.489484][ T8867] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  189.545045][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'.
[  189.595101][ T8867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.089578][ T8892] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  190.207487][ T8896] netlink: 830 bytes leftover after parsing attributes in process `syz.0.806'.
[  190.237827][ T8894] validate_nla: 4 callbacks suppressed
[  190.237917][ T8894] netlink: 'syz.3.805': attribute type 5 has an invalid length.
[  190.826843][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  191.011138][ T8912] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  191.170713][ T8919] netlink: 68 bytes leftover after parsing attributes in process `syz.3.812'.
[  191.344418][ T8930] tc_dump_action: action bad kind
[  191.664777][ T8947] netlink: 'syz.3.819': attribute type 10 has an invalid length.
[  191.688179][ T8947] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  191.850884][ T8952] tc_dump_action: action bad kind
[  193.490066][ T8987] netlink: 'syz.0.834': attribute type 29 has an invalid length.
[  193.527093][ T8987] netlink: 'syz.0.834': attribute type 29 has an invalid length.
[  193.617148][ T8987] netlink: 'syz.0.834': attribute type 29 has an invalid length.
[  193.624852][ T8989] netlink: 'syz.0.834': attribute type 29 has an invalid length.
[  193.862325][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.864445][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  195.316505][ T8996] netlink: 'syz.0.837': attribute type 2 has an invalid length.
[  195.319678][ T8996] netlink: 'syz.0.837': attribute type 1 has an invalid length.
[  195.322892][ T8996] __nla_validate_parse: 2 callbacks suppressed
[  195.322943][ T8996] netlink: 164068 bytes leftover after parsing attributes in process `syz.0.837'.
[  195.339155][ T8996] block nbd5: not configured, cannot reconfigure
[  195.377636][ T8998] netlink: 830 bytes leftover after parsing attributes in process `syz.3.838'.
[  195.392076][ T9000] tc_dump_action: action bad kind
[  195.936713][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[  196.158090][ T9024] netlink: 'syz.3.846': attribute type 29 has an invalid length.
[  196.165002][ T9024] netlink: 'syz.3.846': attribute type 29 has an invalid length.
[  196.171370][ T9024] netlink: 'syz.3.846': attribute type 29 has an invalid length.
[  196.197411][ T9024] syzkaller0: entered promiscuous mode
[  196.199253][ T9024] syzkaller0: entered allmulticast mode
[  196.217477][ T9024] netlink: 'syz.3.846': attribute type 29 has an invalid length.
[  196.242066][ T9026] netlink: 'syz.0.847': attribute type 10 has an invalid length.
[  196.273265][ T9026] 8021q: adding VLAN 0 to HW filter on device team0
[  196.286112][ T9026] bond0: (slave team0): Enslaving as an active interface with an up link
[  196.723843][ T9041] netlink: 830 bytes leftover after parsing attributes in process `syz.3.852'.
[  196.998808][ T9047] netlink: 'syz.0.854': attribute type 29 has an invalid length.
[  197.075983][ T9048] netlink: 'syz.0.854': attribute type 29 has an invalid length.
[  197.154450][ T9050] netlink: 'syz.0.854': attribute type 29 has an invalid length.
[  197.849589][ T9056] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.856'.
[  198.017040][ T9062] tc_dump_action: action bad kind
[  198.161926][ T9066] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  198.637313][ T9074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.862'.
[  199.203052][ T9079] netlink: 830 bytes leftover after parsing attributes in process `syz.0.863'.
[  199.488550][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'.
[  199.508380][ T9090] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.867'.
[  199.557785][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  200.664466][ T9100] validate_nla: 14 callbacks suppressed
[  200.664484][ T9100] netlink: 'syz.0.870': attribute type 29 has an invalid length.
[  200.677176][ T9100] netlink: 'syz.0.870': attribute type 29 has an invalid length.
[  200.686586][ T9100] netlink: 'syz.0.870': attribute type 13 has an invalid length.
[  200.689548][ T9100] netlink: 'syz.0.870': attribute type 58 has an invalid length.
[  200.692585][ T9100] netlink: 152 bytes leftover after parsing attributes in process `syz.0.870'.
[  200.698482][ T9100] netlink: 'syz.0.870': attribute type 29 has an invalid length.
[  200.703185][ T9100] netlink: 'syz.0.870': attribute type 29 has an invalid length.
[  200.753549][ T9102] netlink: 'syz.0.871': attribute type 29 has an invalid length.
[  200.855275][ T9105] netlink: 'syz.3.872': attribute type 29 has an invalid length.
[  200.859638][ T9105] netlink: 'syz.3.872': attribute type 29 has an invalid length.
[  200.863532][ T9105] netlink: 'syz.3.872': attribute type 29 has an invalid length.
[  201.753351][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'.
[  201.978640][ T9155] tc_dump_action: action bad kind
[  203.105996][ T9168] netlink: 825 bytes leftover after parsing attributes in process `syz.2.894'.
[  203.109752][ T9168] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.894'.
[  203.184019][ T9174] netlink: 80 bytes leftover after parsing attributes in process `syz.3.897'.
[  203.348808][ T9178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.897'.
[  204.138440][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'.
[  204.143916][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.899'.
[  204.151075][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.899'.
[  204.162827][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.899'.
[  205.426763][ T9218] hsr_slave_0: left promiscuous mode
[  205.471190][ T9218] hsr_slave_1: left promiscuous mode
[  205.760056][ T9234] validate_nla: 24 callbacks suppressed
[  205.760068][ T9234] netlink: 'syz.0.917': attribute type 29 has an invalid length.
[  205.767803][ T9234] netlink: 'syz.0.917': attribute type 29 has an invalid length.
[  205.770797][ T9234] netlink: 'syz.0.917': attribute type 29 has an invalid length.
[  205.773729][ T9234] netlink: 'syz.0.917': attribute type 29 has an invalid length.
[  206.058474][ T9248] netlink: 'syz.2.922': attribute type 29 has an invalid length.
[  206.155527][ T9250] netlink: 'syz.0.923': attribute type 4 has an invalid length.
[  206.363508][ T9256] __nla_validate_parse: 4 callbacks suppressed
[  206.363524][ T9256] netlink: 44 bytes leftover after parsing attributes in process `syz.0.925'.
[  206.372928][ T9256] netlink: 'syz.0.925': attribute type 3 has an invalid length.
[  206.639015][ T9248] netlink: 830 bytes leftover after parsing attributes in process `syz.2.922'.
[  206.644604][ T9248] @: entered promiscuous mode
[  206.646758][ T9248] bond_slave_1: entered promiscuous mode
[  206.649221][ T9248] team_slave_0: entered promiscuous mode
[  206.651179][ T9248] team_slave_1: entered promiscuous mode
[  206.730711][ T9261] netlink: 182 bytes leftover after parsing attributes in process `syz.3.927'.
[  206.756547][ T9261] netlink: 'syz.3.927': attribute type 10 has an invalid length.
[  206.922783][ T9274] netlink: 'syz.3.932': attribute type 29 has an invalid length.
[  206.929365][ T9274] netlink: 'syz.3.932': attribute type 29 has an invalid length.
[  206.976899][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'.
[  207.262640][ T9299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.938'.
[  207.266492][ T9299] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  207.409568][ T9307] tc_dump_action: action bad kind
[  207.447307][ T9309] netlink: 14 bytes leftover after parsing attributes in process `syz.0.943'.
[  207.496681][ T9313] netlink: 15534 bytes leftover after parsing attributes in process `syz.2.944'.
[  207.509641][ T9315] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.945'.
[  207.600930][ T9317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.946'.
[  207.608350][ T9317] netlink: 120 bytes leftover after parsing attributes in process `syz.2.946'.
[  207.700813][ T9328] : renamed from gre0 (while UP)
[  209.811212][ T9335] tc_dump_action: action bad kind
[  210.512734][ T9358] delete_channel: no stack
[  210.538827][ T9368] sit0: entered allmulticast mode
[  210.553542][ T9370] nbd: must specify an index to disconnect
[  210.611024][ T9368] sit0: entered promiscuous mode
[  210.919561][ T5850] Bluetooth: hci3: ISO packet for unknown connection handle 531
[  211.181018][ T9397] tc_dump_action: action bad kind
[  211.283520][ T9406] validate_nla: 15 callbacks suppressed
[  211.283529][ T9406] netlink: 'syz.0.973': attribute type 10 has an invalid length.
[  211.332255][ T9408] bridge0: port 3(syz_tun) entered blocking state
[  211.334498][ T9408] bridge0: port 3(syz_tun) entered disabled state
[  211.338131][ T9408] syz_tun: entered allmulticast mode
[  211.340829][ T9408] syz_tun: entered promiscuous mode
[  211.342997][ T9408] bridge0: port 3(syz_tun) entered blocking state
[  211.345229][ T9408] bridge0: port 3(syz_tun) entered forwarding state
[  211.443181][ T9412] __nla_validate_parse: 11 callbacks suppressed
[  211.443231][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'.
[  211.652047][ T9418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.977'.
[  211.692343][ T9421] tc_dump_action: action bad kind
[  211.727688][ T9423] netlink: 104 bytes leftover after parsing attributes in process `syz.2.979'.
[  211.790693][ T9430] @: renamed from bond_slave_0 (while UP)
[  211.950427][ T9443] netlink: 'syz.3.985': attribute type 1 has an invalid length.
[  211.954220][ T9443] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.048404][ T9444] netlink: 14 bytes leftover after parsing attributes in process `syz.3.985'.
[  212.062734][ T9444] hsr_slave_0: left promiscuous mode
[  212.070022][ T9444] hsr_slave_1: left promiscuous mode
[  212.137173][ T9443] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.985'.
[  212.200902][ T9446] netlink: 830 bytes leftover after parsing attributes in process `syz.3.986'.
[  212.756568][ T9450] netlink: 14 bytes leftover after parsing attributes in process `syz.2.987'.
[  213.096125][ T9461] netlink: 'syz.2.990': attribute type 10 has an invalid length.
[  213.099524][ T9461] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.990'.
[  214.079125][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'.
[  214.124814][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'.
[  215.171730][ T6212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.720361][ T6212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.076363][ T6212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.333203][ T6212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.389099][ T9490] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  216.471881][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  216.477025][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.480009][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.486396][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.490563][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.580138][ T9484] syzkaller0: entered promiscuous mode
[  216.582110][ T9484] syzkaller0: entered allmulticast mode
[  217.770388][ T9491] lo speed is unknown, defaulting to 1000
[  217.879955][ T6212] bridge_slave_1: left allmulticast mode
[  217.882028][ T6212] bridge_slave_1: left promiscuous mode
[  217.884165][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.915665][ T6212] bridge_slave_0: left promiscuous mode
[  217.917777][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'.
[  217.918208][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.350027][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.357642][ T6212] bond0 (unregistering): (slave team0): Releasing backup interface
[  218.366894][ T6212] bond0 (unregistering): Released all slaves
[  218.578880][ T5237] Bluetooth: hci0: command tx timeout
[  218.582202][ T9509] lo speed is unknown, defaulting to 1000
[  218.633297][ T9491] chnl_net:caif_netlink_parms(): no params data found
[  218.838279][ T6212] hsr_slave_0: left promiscuous mode
[  218.845218][ T6212] hsr_slave_1: left promiscuous mode
[  218.847595][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.854954][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.860533][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.883619][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.893587][ T6212] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  218.898219][ T6212] batman_adv: batadv0: Removing interface: virt_wifi0
[  218.928329][ T9523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1009'.
[  218.937382][ T6212] veth0_macvtap: left promiscuous mode
[  218.939826][ T6212] veth1_vlan: left promiscuous mode
[  218.942616][ T6212] veth0_vlan: left promiscuous mode
[  219.439631][ T6212] team0 (unregistering): Port device team_slave_1 removed
[  219.477887][ T6212] team0 (unregistering): Port device team_slave_0 removed
[  219.886680][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.898463][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.904742][ T9531] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1012'.
[  219.915108][ T9491] bridge_slave_0: entered allmulticast mode
[  219.928119][ T9491] bridge_slave_0: entered promiscuous mode
[  219.942166][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.946633][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.949873][ T9491] bridge_slave_1: entered allmulticast mode
[  219.952582][ T9529] netlink: 'syz.2.1011': attribute type 10 has an invalid length.
[  219.953975][ T9491] bridge_slave_1: entered promiscuous mode
[  220.143349][ T9529] team0: Port device macvlan1 added
[  220.166380][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.178446][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.221807][ T9491] team0: Port device team_slave_0 added
[  220.231582][ T9491] team0: Port device team_slave_1 added
[  220.241047][ T9541] netlink: 'syz.3.1014': attribute type 11 has an invalid length.
[  220.283282][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.286465][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.302964][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.311805][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.314347][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.343073][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.398676][ T9545] lo speed is unknown, defaulting to 1000
[  220.417319][ T9491] hsr_slave_0: entered promiscuous mode
[  220.420063][ T9491] hsr_slave_1: entered promiscuous mode
[  220.656021][ T5237] Bluetooth: hci0: command tx timeout
[  220.771478][ T9565] netlink: 'syz.2.1023': attribute type 4 has an invalid length.
[  222.223282][ T9491] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  222.232486][ T9491] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  222.240318][ T9491] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  222.246344][ T9491] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  222.319298][ T9591] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1029'.
[  222.330221][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.342824][ T9491] 8021q: adding VLAN 0 to HW filter on device team0
[  222.388559][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.391740][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.405662][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.408180][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.563174][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'.
[  222.670784][ T9491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.678830][ T9604] netlink: 64707 bytes leftover after parsing attributes in process `syz.3.1031'.
[  222.734987][ T5237] Bluetooth: hci0: command tx timeout
[  222.757370][ T9491] veth0_vlan: entered promiscuous mode
[  222.784242][ T9491] veth1_vlan: entered promiscuous mode
[  222.829147][ T9491] veth0_macvtap: entered promiscuous mode
[  222.833599][ T9491] veth1_macvtap: entered promiscuous mode
[  222.844446][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.857853][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.868990][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.877260][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.880487][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.898401][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.969497][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.976698][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.007977][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.011709][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.503284][ T9626] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.1040'.
[  224.760456][ T9661] bpf: Bad value for 'gid'
[  224.815138][ T5237] Bluetooth: hci0: command tx timeout
[  224.929413][   T33] audit: type=1107 audit(1759332547.909:2): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='	Q?/"P.O5܎ttN'
[  225.052637][ T9676] netlink: 'syz.3.1052': attribute type 29 has an invalid length.
[  225.070638][ T9676] netlink: 'syz.3.1052': attribute type 29 has an invalid length.
[  225.085301][ T9676] netlink: 'syz.3.1052': attribute type 29 has an invalid length.
[  225.210444][ T9684] netlink: 'syz.2.1054': attribute type 10 has an invalid length.
[  225.219597][ T9684] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1054'.
[  225.447530][ T9682] netlink: 'syz.3.1052': attribute type 29 has an invalid length.
[  225.451092][ T9684] batadv_slave_1: entered promiscuous mode
[  225.487751][ T9647] delete_channel: no stack
[  225.645743][ T9694] netlink: 'syz.0.1058': attribute type 29 has an invalid length.
[  225.649976][ T9694] netlink: 'syz.0.1058': attribute type 29 has an invalid length.
[  225.655247][ T9694] netlink: 'syz.0.1058': attribute type 29 has an invalid length.
[  225.658004][ T9694] netlink: 'syz.0.1058': attribute type 29 has an invalid length.
[  225.959217][ T9704] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1060'.
[  228.838124][ T9728] cgroup: fork rejected by pids controller in /syz3
[  228.972777][ T7308] bridge0: port 3(syz_tun) entered disabled state
[  229.017404][ T7308] syz_tun (unregistering): left allmulticast mode
[  229.022304][ T7308] syz_tun (unregistering): left promiscuous mode
[  229.026919][ T7308] bridge0: port 3(syz_tun) entered disabled state
[  229.092715][ T9745] netlink: 'syz.0.1070': attribute type 30 has an invalid length.
[  229.124074][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.181438][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.202439][ T9746] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1070'.
[  229.271208][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.325801][   T12] bond0: (slave netdevsim0): Releasing backup interface
[  229.334838][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.374403][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  229.383059][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  229.386698][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  229.390054][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  229.393013][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  229.398506][ T9761] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1074'.
[  229.440343][ T9758] lo speed is unknown, defaulting to 1000
[  229.478539][   T12] bridge_slave_1: left allmulticast mode
[  229.480981][   T12] bridge_slave_1: left promiscuous mode
[  229.483524][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.493824][   T12] bridge_slave_0: left allmulticast mode
[  229.496001][   T12] bridge_slave_0: left promiscuous mode
[  229.498378][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.507461][   T12] erspan0: left allmulticast mode
[  229.509377][   T12] erspan0: left promiscuous mode
[  229.511354][   T12] GPL: port 1(erspan0) entered disabled state
[  229.868681][   T12] bond0 (unregistering): (slave 5@): Releasing backup interface
[  229.873682][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.879522][   T12] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  229.883897][   T12] bond0 (unregistering): Released all slaves
[  230.001644][ T9758] chnl_net:caif_netlink_parms(): no params data found
[  230.125171][ T9758] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.127469][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.133529][ T9758] bridge_slave_0: entered allmulticast mode
[  230.148394][ T9758] bridge_slave_0: entered promiscuous mode
[  230.152323][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.154808][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.157649][ T9758] bridge_slave_1: entered allmulticast mode
[  230.160350][ T9758] bridge_slave_1: entered promiscuous mode
[  230.225576][ T9758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.230660][ T9758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.257095][ T9758] team0: Port device team_slave_0 added
[  230.271160][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.273490][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.276191][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.278486][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.286590][   T12] veth1_macvtap: left promiscuous mode
[  230.288357][   T12] veth0_macvtap: left promiscuous mode
[  230.373946][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'.
[  230.378516][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1081'.
[  230.535827][   T12] team0 (unregistering): Port device team_slave_1 removed
[  230.561257][   T12] team0 (unregistering): Port device team_slave_0 removed
[  230.808033][ T9758] team0: Port device team_slave_1 added
[  230.856889][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.859237][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.869667][ T9758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.876555][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.878808][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.888833][ T9758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.938606][ T9758] hsr_slave_0: entered promiscuous mode
[  230.941395][ T9758] hsr_slave_1: entered promiscuous mode
[  230.943705][ T9758] debugfs: 'hsr0' already exists in 'hsr'
[  230.946308][ T9758] Cannot create hsr debugfs directory
[  230.988789][ T9802] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1084'.
[  231.369525][ T9758] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  231.386579][ T9758] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  231.392460][ T9758] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  231.399466][ T9758] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  231.455631][ T5237] Bluetooth: hci1: command tx timeout
[  231.469494][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.482349][ T9758] 8021q: adding VLAN 0 to HW filter on device team0
[  231.491199][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.494879][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.502246][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.504748][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.618371][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.647224][ T9758] veth0_vlan: entered promiscuous mode
[  231.652862][ T9758] veth1_vlan: entered promiscuous mode
[  231.669630][ T9758] veth0_macvtap: entered promiscuous mode
[  231.673695][ T9758] veth1_macvtap: entered promiscuous mode
[  231.691729][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.703689][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.714175][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.720787][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.723554][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.725259][ T9819] validate_nla: 1 callbacks suppressed
[  231.725267][ T9819] netlink: 'syz.0.1086': attribute type 21 has an invalid length.
[  231.730817][ T9819] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1086'.
[  231.733750][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.778078][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.784863][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.813376][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.817834][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.952965][ T9823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1087'.
[  231.956058][ T9823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1087'.
[  232.053710][ T9826] netlink: 'syz.2.1087': attribute type 10 has an invalid length.
[  232.093881][ T9826] hsr_slave_0: entered promiscuous mode
[  232.104735][ T9826] team0: Port device hsr_slave_0 added
[  232.168354][ T9833] syz.3.1089: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  232.173109][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz.3.1089 Not tainted syzkaller #0 PREEMPT(full) 
[  232.173119][ T9833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.173125][ T9833] Call Trace:
[  232.173131][ T9833]  <TASK>
[  232.173136][ T9833]  dump_stack_lvl+0x189/0x250
[  232.173161][ T9833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.173173][ T9833]  ? __pfx__printk+0x10/0x10
[  232.173189][ T9833]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.173201][ T9833]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.173217][ T9833]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  232.173233][ T9833]  warn_alloc+0x214/0x310
[  232.173248][ T9833]  ? stack_depot_save_flags+0x40/0x860
[  232.173264][ T9833]  ? __pfx_warn_alloc+0x10/0x10
[  232.173280][ T9833]  ? kasan_save_track+0x4f/0x80
[  232.173294][ T9833]  ? xskq_create+0x56/0x170
[  232.173303][ T9833]  ? xsk_init_queue+0xb0/0x110
[  232.173310][ T9833]  ? xsk_setsockopt+0x57b/0x8d0
[  232.173317][ T9833]  ? do_sock_setsockopt+0x17c/0x1b0
[  232.173326][ T9833]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  232.173335][ T9833]  ? do_syscall_64+0xfa/0x3b0
[  232.173344][ T9833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.173368][ T9833]  __vmalloc_node_range_noprof+0x125/0x12f0
[  232.173432][ T9833]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  232.173454][ T9833]  ? __kasan_kmalloc+0x93/0xb0
[  232.173470][ T9833]  vmalloc_user_noprof+0xad/0xf0
[  232.173481][ T9833]  ? xskq_create+0xbf/0x170
[  232.173494][ T9833]  xskq_create+0xbf/0x170
[  232.173512][ T9833]  xsk_init_queue+0xb0/0x110
[  232.173528][ T9833]  xsk_setsockopt+0x57b/0x8d0
[  232.173545][ T9833]  ? __pfx_xsk_setsockopt+0x10/0x10
[  232.173556][ T9833]  ? __pfx_aa_sk_perm+0x10/0x10
[  232.173574][ T9833]  ? __fget_files+0x2a/0x420
[  232.173582][ T9833]  ? aa_sock_opt_perm+0xff/0x1b0
[  232.173600][ T9833]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  232.173609][ T9833]  ? __pfx_xsk_setsockopt+0x10/0x10
[  232.173623][ T9833]  do_sock_setsockopt+0x17c/0x1b0
[  232.173645][ T9833]  __x64_sys_setsockopt+0x13f/0x1b0
[  232.173668][ T9833]  do_syscall_64+0xfa/0x3b0
[  232.173678][ T9833]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.173689][ T9833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.173697][ T9833]  ? exc_page_fault+0x9f/0xf0
[  232.173713][ T9833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.173722][ T9833] RIP: 0033:0x7fd07ef8ec29
[  232.173732][ T9833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.173739][ T9833] RSP: 002b:00007fd07fddc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  232.173747][ T9833] RAX: ffffffffffffffda RBX: 00007fd07f1d5fa0 RCX: 00007fd07ef8ec29
[  232.173753][ T9833] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  232.173758][ T9833] RBP: 00007fd07f011e41 R08: 0000000000000004 R09: 0000000000000000
[  232.173763][ T9833] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  232.173767][ T9833] R13: 00007fd07f1d6038 R14: 00007fd07f1d5fa0 R15: 00007ffea46ed9d8
[  232.173805][ T9833]  </TASK>
[  232.173809][ T9833] Mem-Info:
[  232.284801][ T9833] active_anon:13298 inactive_anon:0 isolated_anon:0
[  232.284801][ T9833]  active_file:12994 inactive_file:38309 isolated_file:0
[  232.284801][ T9833]  unevictable:1768 dirty:22 writeback:0
[  232.284801][ T9833]  slab_reclaimable:10178 slab_unreclaimable:51992
[  232.284801][ T9833]  mapped:22805 shmem:7591 pagetables:1020
[  232.284801][ T9833]  sec_pagetables:0 bounce:0
[  232.284801][ T9833]  kernel_misc_reclaimable:0
[  232.284801][ T9833]  free:283180 free_pcp:15772 free_cma:0
[  232.375336][ T9833] Node 0 active_anon:27372kB inactive_anon:0kB active_file:26456kB inactive_file:23224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26312kB dirty:64kB writeback:0kB shmem:21008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4396kB pagetables:1788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.390222][ T9833] Node 1 active_anon:31056kB inactive_anon:0kB active_file:25520kB inactive_file:130012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:66812kB dirty:24kB writeback:0kB shmem:11192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7152kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.400467][ T9833] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.412167][ T9833] lowmem_reserve[]: 0 811 811 811 811
[  232.422326][ T9833] Node 0 DMA32 free:380496kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27236kB inactive_anon:0kB active_file:26456kB inactive_file:23224kB unevictable:3536kB writepending:64kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:20012kB local_pcp:3044kB free_cma:0kB
[  232.455213][ T9833] lowmem_reserve[]: 0 0 0 0 0
[  232.456997][ T9833] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.477177][ T9833] lowmem_reserve[]: 0 0 854 854 854
[  232.479440][ T9833] Node 1 Normal free:271128kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33536kB inactive_anon:0kB active_file:25520kB inactive_file:130012kB unevictable:3536kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43380kB local_pcp:17004kB free_cma:0kB
[  232.493966][ T9833] lowmem_reserve[]: 0 0 0 0 0
[  232.503816][ T9833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  232.509480][ T9833] Node 0 DMA32: 2*4kB (ME) 1*8kB (U) 250*16kB (UME) 301*32kB (UM) 462*64kB (UM) 199*128kB (UM) 66*256kB (UM) 21*512kB (UM) 15*1024kB (UME) 3*2048kB (UE) 64*4096kB (UM) = 379984kB
[  232.516911][ T9833] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  232.521874][ T9833] Node 1 Normal: 85*4kB (U) 113*8kB (UE) 13*16kB (U) 202*32kB (UE) 57*64kB (UME) 10*128kB (UM) 3*256kB (UME) 5*512kB (UE) 5*1024kB (UME) 8*2048kB (UME) 57*4096kB (UM) = 271148kB
[  232.528916][ T9833] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.531859][ T9833] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.537170][ T9833] 60214 total pagecache pages
[  232.539013][ T9833] 0 pages in swap cache
[  232.540541][ T9833] Free swap  = 124996kB
[  232.542198][ T9833] Total swap = 124996kB
[  232.544954][ T9833] 786301 pages RAM
[  232.548801][ T9833] 0 pages HighMem/MovableOnly
[  232.551743][ T9833] 241359 pages reserved
[  232.554297][ T9833] 0 pages cma reserved
[  232.650518][ T9843] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1093'.
[  232.726456][ T9849] netlink: 'syz.2.1095': attribute type 3 has an invalid length.
[  232.728967][ T9849] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1095'.
[  233.539160][ T5237] Bluetooth: hci1: command tx timeout
[  233.604206][ T9880] netlink: 'syz.2.1105': attribute type 2 has an invalid length.
[  233.607082][ T9876] tap0: tun_chr_ioctl cmd 1074025672
[  233.607095][ T9876] tap0: ignored: set checksum enabled
[  234.130064][ T9906] tmpfs: Bad value for 'uid'
[  234.132637][ T9907] tmpfs: Bad value for 'uid'
[  234.134187][ T9906] tmpfs: Bad value for 'uid'
[  234.138353][ T9907] tmpfs: Bad value for 'uid'
[  234.215419][ T9910] netlink: 'syz.0.1114': attribute type 21 has an invalid length.
[  234.218024][ T9910] __nla_validate_parse: 3 callbacks suppressed
[  234.218034][ T9910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1114'.
[  234.861806][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1117'.
[  235.298181][ T9942] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1124'.
[  235.615674][ T5237] Bluetooth: hci1: command tx timeout
[  236.166814][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'.
[  236.448682][ T9971] netlink: 'syz.0.1133': attribute type 19 has an invalid length.
[  236.641068][ T9987] netlink: 'syz.0.1137': attribute type 1 has an invalid length.
[  236.741280][ T9995] netlink: 'syz.0.1141': attribute type 1 has an invalid length.
[  237.695186][ T5237] Bluetooth: hci1: command tx timeout
[  238.092457][T10053] netlink: 'syz.0.1158': attribute type 13 has an invalid length.
[  238.100948][T10053] netlink: 'syz.0.1158': attribute type 3 has an invalid length.
[  238.103632][T10053] netlink: 'syz.0.1158': attribute type 1 has an invalid length.
[  238.106777][T10053] netlink: 'syz.0.1158': attribute type 2 has an invalid length.
[  238.109499][T10053] netlink: 'syz.0.1158': attribute type 8 has an invalid length.
[  238.112249][T10053] netlink: 'syz.0.1158': attribute type 10 has an invalid length.
[  238.115812][T10053] netlink: 'syz.0.1158': attribute type 11 has an invalid length.
[  238.119376][T10053] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.1158'.
[  238.461519][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.473157][T10061] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.491350][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.494214][T10061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.508823][T10065] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1162'.
[  238.646593][T10070] xt_l2tp: invalid flags combination: 8
[  238.690767][T10072] netlink: 'syz.0.1165': attribute type 11 has an invalid length.
[  238.871818][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  238.910052][T10095] : entered promiscuous mode
[  239.170634][T10103] netlink: 'syz.0.1175': attribute type 4 has an invalid length.
[  239.712272][T10117] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1178'.
[  240.023563][T10128] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1183'.
[  240.631037][T10139] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1185'.
[  240.706364][T10147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.119502][T10171] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1194'.
[  241.126116][T10171] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  241.133661][T10172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1196'.
[  241.140887][T10170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1196'.
[  241.147669][T10172] netlink: 211344 bytes leftover after parsing attributes in process `syz.3.1196'.
[  242.205127][T10183] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1201'.
[  242.318452][T10199] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1204'.
[  243.456200][T10209] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1209'.
[  243.479194][T10209] sock: sock_timestamping_bind_phc: sock not bind to device
[  243.762412][T10222] validate_nla: 6 callbacks suppressed
[  243.762480][T10222] netlink: 'syz.3.1214': attribute type 10 has an invalid length.
[  243.823114][T10222] team0: Port device geneve1 added
[  243.867943][T10229] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  244.883676][T10267] __nla_validate_parse: 1 callbacks suppressed
[  244.883692][T10267] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1229'.
[  244.919816][T10269] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1230'.
[  245.091417][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'.
[  245.529782][T10301] xt_HMARK: spi-set and port-set can't be combined
[  245.560167][T10301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  245.562595][T10301] IPv6: NLM_F_CREATE should be set when creating new route
[  245.565414][T10301] IPv6: NLM_F_CREATE should be set when creating new route
[  245.950810][T10321] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.1250'.
[  247.061437][T10348] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1258'.
[  247.065948][T10347] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1258'.
[  247.070273][T10346] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1258'.
[  247.201976][T10360] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1262'.
[  248.092456][T10368] netlink: 'syz.3.1264': attribute type 10 has an invalid length.
[  248.143778][T10368] bridge0: port 3(netdevsim0) entered blocking state
[  248.148916][T10368] bridge0: port 3(netdevsim0) entered disabled state
[  248.250572][T10368] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  248.263226][T10368] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  248.559449][T10408] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1271'.
[  249.436638][T10443] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1280'.
[  249.659521][T10449] netlink: 'syz.0.1282': attribute type 10 has an invalid length.
[  249.698336][T10449] team0: Port device wlan1 added
[  249.719817][T10449] netlink: 'syz.0.1282': attribute type 11 has an invalid length.
[  249.881346][T10455] xt_l2tp: wrong L2TP version: 0
[  249.902495][T10451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.665503][T10469] netlink: 'syz.2.1289': attribute type 29 has an invalid length.
[  251.669430][T10470] netlink: 'syz.2.1289': attribute type 29 has an invalid length.
[  251.673684][T10471] netlink: 'syz.2.1289': attribute type 29 has an invalid length.
[  251.678285][T10472] netlink: 'syz.2.1289': attribute type 29 has an invalid length.
[  251.878522][T10484] syzkaller0: entered promiscuous mode
[  251.880729][T10484] syzkaller0: entered allmulticast mode
[  251.890610][T10484] __nla_validate_parse: 1 callbacks suppressed
[  251.890621][T10484] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1293'.
[  253.122328][T10502] netlink: 'syz.3.1297': attribute type 29 has an invalid length.
[  253.128045][T10502] netlink: 'syz.3.1297': attribute type 29 has an invalid length.
[  253.131426][T10502] netlink: 'syz.3.1297': attribute type 29 has an invalid length.
[  253.135957][T10502] netlink: 'syz.3.1297': attribute type 29 has an invalid length.
[  253.176778][T10504] netlink: 'syz.3.1299': attribute type 10 has an invalid length.
[  253.302955][T10506] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1298'.
[  253.355748][T10509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'.
[  253.943524][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'.
[  254.060365][T10534] xt_l2tp: missing protocol rule (udp|l2tpip)
[  254.121288][T10543] proc: Bad value for 'gid'
[  254.477791][T10561] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1319'.
[  255.205200][T10586] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1327'.
[  255.208599][T10586] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1327'.
[  255.245238][T10586] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1327'.
[  255.248860][T10586] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1327'.
[  255.252318][T10586] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1327'.
[  255.359996][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.362023][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.694506][T10605] validate_nla: 4 callbacks suppressed
[  255.700144][T10605] netlink: 'syz.2.1334': attribute type 10 has an invalid length.
[  256.634027][   T33] audit: type=1107 audit(1759332579.599:3): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='RJ  OvRP#O{,Nڔ陧&?9ؑ0#+=EAmU(W5GP8MmE(S$Y[%:,F>:ͧW0;47댄qsQhZ]lEy8g٠J=BnSaWwfJ~,sPyf\'77$/4Gc㿞GNE瘞FDG/CS>HcO4@hѻDHy"[J,=e2erJCyVҘ,m)@A
[  256.634027][   T33] 5,?:eL7z4/1*,mOk#fB%tY}Єvdk7.XV4f`*'
[  257.715482][T10675] __nla_validate_parse: 10 callbacks suppressed
[  257.715492][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1352'.
[  257.846018][T10682] delete_channel: no stack
[  258.092879][T10698] netlink: 'syz.2.1359': attribute type 64 has an invalid length.
[  258.278882][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'.
[  259.032105][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'.
[  259.268293][T10758] netlink: 'syz.0.1370': attribute type 29 has an invalid length.
[  259.301370][T10750] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  259.343031][T10750] netlink: 'syz.0.1370': attribute type 29 has an invalid length.
[  259.761822][T10769] C: renamed from team_slave_0 (while UP)
[  259.767458][T10769] netlink: 'syz.0.1376': attribute type 1 has an invalid length.
[  259.770665][T10769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1376'.
[  260.284225][T10788] netlink: 'syz.3.1380': attribute type 7 has an invalid length.
[  260.288738][T10788] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1380'.
[  261.633402][T10817] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  261.848543][T10826] netlink: 'syz.3.1391': attribute type 7 has an invalid length.
[  261.851671][T10826] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1391'.
[  264.106155][T10843] netlink: 'syz.3.1397': attribute type 1 has an invalid length.
[  264.242576][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'.
[  264.474217][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1402'.
[  264.570622][T10865] team0: Port device team_slave_0 removed
[  264.574418][T10865] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  264.623635][T10861] syzkaller0: entered promiscuous mode
[  264.626071][T10861] syzkaller0: entered allmulticast mode
[  264.908771][T10877] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1407'.
[  265.077929][T10882] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1409'.
[  266.590330][T10914] netlink: 'syz.0.1417': attribute type 33 has an invalid length.
[  266.593579][T10914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1417'.
[  266.641609][T10925] netlink: 'syz.0.1420': attribute type 10 has an invalid length.
[  266.644901][T10925] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1420'.
[  266.751548][T10930] netlink: 'syz.0.1422': attribute type 2 has an invalid length.
[  266.876594][T10940] netlink: 'syz.3.1427': attribute type 2 has an invalid length.
[  266.879119][T10940] netlink: 'syz.3.1427': attribute type 1 has an invalid length.
[  267.071906][T10961] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1433'.
[  267.258578][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'.
[  267.362404][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'.
[  267.366266][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'.
[  267.899723][T11004] netlink: 'syz.3.1445': attribute type 10 has an invalid length.
[  268.142868][ T5237] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  268.803028][ T5237] Bluetooth: hci0: ACL packet for unknown connection handle 3072
[  373.864574][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  373.867295][    C1] rcu: 	0-...!: (0 ticks this GP) idle=0eac/1/0x4000000000000000 softirq=41691/41691 fqs=1
[  373.871524][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=36861, q=356 ncpus=2)
[  373.874366][    C1] Sending NMI from CPU 1 to CPUs 0:
[  373.874464][    C0] NMI backtrace for cpu 0
[  373.874483][    C0] CPU: 0 UID: 0 PID: 11038 Comm: syz.0.1458 Not tainted syzkaller #0 PREEMPT(full) 
[  373.874506][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  373.874520][    C0] RIP: 0010:__lock_acquire+0x85b/0xd20
[  373.874542][    C0] Code: 89 f0 c1 c0 08 29 f1 31 c8 01 d6 29 c2 89 c1 c1 c1 10 31 d1 01 f0 41 89 cf 41 c1 c7 13 29 ce 41 31 f7 01 c1 44 29 f8 44 01 f9 <41> c1 c7 04 41 31 c7 49 c1 e7 20 49 09 cf 83 3d 84 66 06 0e 00 0f
[  373.874550][    C0] RSP: 0018:ffffc90000007750 EFLAGS: 00000082
[  373.874560][    C0] RAX: 00000000fd2c37c4 RBX: 0000000000000002 RCX: 0000000090213bdc
[  373.874567][    C0] RDX: 00000000001a71fd RSI: 00000000727d5714 RDI: ffff88802172d640
[  373.874574][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81adabcb
[  373.874579][    C0] R10: dffffc0000000000 R11: ffffed1009604f51 R12: 0000000000000068
[  373.874586][    C0] R13: ffff88802172e130 R14: ffff88802172e180 R15: 0000000002b93b00
[  373.874593][    C0] FS:  00007f49a689f6c0(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  373.874601][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  373.874608][    C0] CR2: 00007f49a685cfc8 CR3: 000000011eed6000 CR4: 00000000000006f0
[  373.874636][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  373.874644][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  373.874649][    C0] Call Trace:
[  373.874655][    C0]  <IRQ>
[  373.874664][    C0]  ? hrtimer_try_to_cancel+0x22b/0x420
[  373.874674][    C0]  lock_acquire+0x120/0x360
[  373.874687][    C0]  ? hrtimer_try_to_cancel+0x22b/0x420
[  373.874700][    C0]  _raw_spin_lock_irqsave+0xa7/0xf0
[  373.874712][    C0]  ? hrtimer_try_to_cancel+0x22b/0x420
[  373.874720][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  373.874730][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  373.874741][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  373.874754][    C0]  hrtimer_try_to_cancel+0x22b/0x420
[  373.874801][    C0]  hrtimer_cancel+0x3b/0x50
[  373.874815][    C0]  cpu_clock_event_stop+0xd9/0x130
[  373.874825][    C0]  __perf_event_overflow+0x580/0xe40
[  373.874840][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  373.874852][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  373.874864][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  373.874874][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  373.874883][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  373.874902][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  373.874914][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  373.874926][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  373.874935][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  373.874945][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  373.874959][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  373.874970][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  373.874985][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  373.874999][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  373.875012][    C0]  </IRQ>
[  373.875015][    C0]  <TASK>
[  373.875020][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  373.875031][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  373.875045][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 eb ce 13 f6 e8 b6 2b 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  373.875054][    C0] RSP: 0018:ffffc900019af4c0 EFLAGS: 00000282
[  373.875064][    C0] RAX: b69d7fecb78ab700 RBX: 0000000000000000 RCX: b69d7fecb78ab700
[  373.875070][    C0] RDX: 0000000000000007 RSI: ffffffff8d9baf70 RDI: 0000000000000001
[  373.875075][    C0] RBP: ffffc900019af570 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  373.875082][    C0] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: 0000000000000000
[  373.875089][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000335e98
[  373.875101][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  373.875115][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  373.875126][    C0]  irqentry_exit+0x6f/0x90
[  373.875137][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  373.875146][    C0] RIP: 0010:unwind_next_frame+0x37c/0x2390
[  373.875158][    C0] Code: bd 00 00 00 00 00 fc ff df 0f 84 37 01 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 6d 19 00 00 <4c> 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 80 19 00 00 41 0f b6
[  373.875167][    C0] RSP: 0018:ffffc900019af638 EFLAGS: 00000246
[  373.875175][    C0] RAX: 0000000000000000 RBX: ffffffff8fba78a4 RCX: ffffffff8fba78a8
[  373.875182][    C0] RDX: ffffffff9037f968 RSI: ffffffff9037f920 RDI: ffffffff8be34420
[  373.875189][    C0] RBP: dffffc0000000000 R08: 000000000000000d R09: ffffffff8172d195
[  373.875195][    C0] R10: ffffc900019af758 R11: ffffffff81ac5140 R12: ffffffff9037f96c
[  373.875201][    C0] R13: ffffffff9037f96d R14: ffffc900019af708 R15: ffffffff8fba78a4
[  373.875210][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  373.875222][    C0]  ? unwind_next_frame+0xa5/0x2390
[  373.875235][    C0]  ? unwind_next_frame+0xd4/0x2390
[  373.875244][    C0]  ? arch_stack_walk+0xe4/0x150
[  373.875256][    C0]  ? unwind_next_frame+0xa5/0x2390
[  373.875266][    C0]  ? stack_trace_save+0x9c/0xe0
[  373.875277][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  373.875287][    C0]  arch_stack_walk+0x11c/0x150
[  373.875301][    C0]  ? stack_trace_save+0x9c/0xe0
[  373.875313][    C0]  stack_trace_save+0x9c/0xe0
[  373.875324][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  373.875336][    C0]  ? stack_trace_save+0x9c/0xe0
[  373.875348][    C0]  kasan_save_track+0x3e/0x80
[  373.875379][    C0]  __kasan_kmalloc+0x93/0xb0
[  373.875388][    C0]  __kmalloc_noprof+0x27a/0x4f0
[  373.875397][    C0]  ? tomoyo_encode+0x28b/0x550
[  373.875410][    C0]  tomoyo_encode+0x28b/0x550
[  373.875423][    C0]  tomoyo_realpath_from_path+0x58d/0x5d0
[  373.875440][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  373.875451][    C0]  tomoyo_path_number_perm+0x1e8/0x5a0
[  373.875461][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  373.875475][    C0]  ? __lock_acquire+0xab9/0xd20
[  373.875494][    C0]  ? __fget_files+0x2a/0x420
[  373.875504][    C0]  ? __fget_files+0x2a/0x420
[  373.875514][    C0]  ? __fget_files+0x3a0/0x420
[  373.875523][    C0]  ? __fget_files+0x2a/0x420
[  373.875535][    C0]  security_file_ioctl+0xcb/0x2d0
[  373.875545][    C0]  __se_sys_ioctl+0x47/0x170
[  373.875560][    C0]  do_syscall_64+0xfa/0x3b0
[  373.875573][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.875582][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  373.875594][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.875603][    C0] RIP: 0033:0x7f49a598ec29
[  373.875614][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.875623][    C0] RSP: 002b:00007f49a689f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  373.875633][    C0] RAX: ffffffffffffffda RBX: 00007f49a5bd5fa0 RCX: 00007f49a598ec29
[  373.875639][    C0] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000007
[  373.875645][    C0] RBP: 00007f49a5a11e41 R08: 0000000000000000 R09: 0000000000000000
[  373.875651][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.875658][    C0] R13: 00007f49a5bd6038 R14: 00007f49a5bd5fa0 R15: 00007ffc55b6c758
[  373.875670][    C0]  </TASK>
[  373.876403][    C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g36861 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  374.152858][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  374.156815][    C1] rcu: RCU grace-period kthread stack dump:
[  374.159257][    C1] task:rcu_preempt     state:R  running task     stack:26664 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  374.164696][    C1] Call Trace:
[  374.166089][    C1]  <TASK>
[  374.167329][    C1]  __schedule+0x1798/0x4cc0
[  374.169240][    C1]  ? __lock_acquire+0xab9/0xd20
[  374.171189][    C1]  ? __pfx___schedule+0x10/0x10
[  374.173227][    C1]  ? schedule+0x91/0x360
[  374.175012][    C1]  schedule+0x165/0x360
[  374.176753][    C1]  schedule_timeout+0x12b/0x270
[  374.178765][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  374.180973][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  374.183406][    C1]  ? __pfx_process_timeout+0x10/0x10
[  374.185586][    C1]  ? prepare_to_swait_event+0x341/0x380
[  374.187884][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  374.189929][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  374.192368][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  374.194550][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  374.196685][    C1]  ? finish_swait+0xcd/0x1f0
[  374.198601][    C1]  rcu_gp_kthread+0x99/0x390
[  374.200532][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  374.202562][    C1]  ? __kthread_parkme+0x7b/0x200
[  374.204594][    C1]  ? __kthread_parkme+0x1a1/0x200
[  374.206640][    C1]  kthread+0x711/0x8a0
[  374.208123][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  374.209757][    C1]  ? __pfx_kthread+0x10/0x10
[  374.211569][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  374.213609][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.215650][    C1]  ? __pfx_kthread+0x10/0x10
[  374.217397][    C1]  ret_from_fork+0x439/0x7d0
[  374.219143][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  374.221098][    C1]  ? __switch_to_asm+0x39/0x70
[  374.222917][    C1]  ? __switch_to_asm+0x33/0x70
[  374.224720][    C1]  ? __pfx_kthread+0x10/0x10
[  374.226497][    C1]  ret_from_fork_asm+0x1a/0x30
[  374.228330][    C1]  </TASK>
[  374.229509][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  374.231898][    C1] CPU: 1 UID: 0 PID: 11006 Comm: syz.2.1446 Not tainted syzkaller #0 PREEMPT(full) 
[  374.235383][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  374.239158][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  374.241677][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  374.248855][    C1] RSP: 0018:ffffc900065a7340 EFLAGS: 00000293
[  374.251161][    C1] RAX: ffffffff81b4665b RBX: 1ffff11009608341 RCX: ffff888107760000
[  374.254206][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  374.257206][    C1] RBP: ffffc900065a74c0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  374.260191][    C1] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffff88804b041a08
[  374.263217][    C1] R13: dffffc0000000000 R14: ffff88813663b1c0 R15: 0000000000000000
[  374.266214][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  374.269582][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  374.272076][    C1] CR2: 0000000000000000 CR3: 000000000df36000 CR4: 00000000000006f0
[  374.275083][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  374.278100][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  374.280996][    C1] Call Trace:
[  374.282307][    C1]  <TASK>
[  374.283445][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  374.285413][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  374.288055][    C1]  ? migrate_enable+0x29c/0x3c0
[  374.289932][    C1]  ? trace_call_bpf+0xb7/0x850
[  374.291674][    C1]  ? trace_call_bpf+0xb7/0x850
[  374.293635][    C1]  ? rcu_is_watching+0x15/0xb0
[  374.295526][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  374.297488][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  374.299483][    C1]  flush_tlb_mm_range+0x6b1/0x12d0
[  374.301404][    C1]  ? __perf_event_task_sched_in+0xec/0x17e0
[  374.303580][    C1]  ? free_pgd_range+0x144b/0x14c0
[  374.305389][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  374.307348][    C1]  tlb_flush_mmu+0x1a7/0x680
[  374.309125][    C1]  tlb_finish_mmu+0xc3/0x1d0
[  374.310751][    C1]  ? free_pgd_range+0x144b/0x14c0
[  374.312937][    C1]  free_ldt_pgtables+0x17b/0x320
[  374.314963][    C1]  ? __pfx_free_ldt_pgtables+0x10/0x10
[  374.317043][    C1]  ? down_read+0x1ad/0x2e0
[  374.318703][    C1]  exit_mmap+0x17c/0xb50
[  374.320340][    C1]  ? uprobe_clear_state+0x20f/0x290
[  374.322318][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  374.324146][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  374.326254][    C1]  ? __pfx_exit_aio+0x10/0x10
[  374.328041][    C1]  ? uprobe_clear_state+0x274/0x290
[  374.330031][    C1]  __mmput+0x118/0x430
[  374.331582][    C1]  exit_mm+0x1da/0x2c0
[  374.333234][    C1]  ? __pfx_exit_mm+0x10/0x10
[  374.335132][    C1]  ? rcu_is_watching+0x15/0xb0
[  374.337004][    C1]  do_exit+0x648/0x2300
[  374.338595][    C1]  ? cgroup_freezing+0x20/0x350
[  374.340437][    C1]  ? __pfx_do_exit+0x10/0x10
[  374.342210][    C1]  ? cgroup_freezing+0x20/0x350
[  374.344067][    C1]  ? cgroup_freezing+0x20/0x350
[  374.346060][    C1]  do_group_exit+0x21c/0x2d0
[  374.347918][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.349980][    C1]  get_signal+0x1286/0x1340
[  374.351804][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  374.353921][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  374.356260][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  374.358583][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  374.360636][    C1]  exit_to_user_mode_loop+0x75/0x110
[  374.362640][    C1]  do_syscall_64+0x2bd/0x3b0
[  374.364404][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.366370][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.368772][    C1]  ? exc_page_fault+0x9f/0xf0
[  374.370614][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.372936][    C1] RIP: 0033:0x7fda2518ec29
[  374.374688][    C1] Code: Unable to access opcode bytes at 0x7fda2518ebff.
[  374.377439][    C1] RSP: 002b:00007fda25f6f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  374.380754][    C1] RAX: fffffffffffffe00 RBX: 00007fda253d5fa8 RCX: 00007fda2518ec29
[  374.383877][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda253d5fa8
[  374.386695][    C1] RBP: 00007fda253d5fa0 R08: 0000000000000000 R09: 0000000000000000
[  374.389225][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.391689][    C1] R13: 00007fda253d6038 R14: 00007ffc214ad970 R15: 00007ffc214ada58
[  374.394416][    C1]  </TASK>

VM DIAGNOSIS:
15:31:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff8b7dabf7 RCX=b69d7fecb78ab700 RDX=0000000000000000
RSI=ffffffff8b7dabf7 RDI=ffff88804b027a98 RBP=ffffffff81adabcb RSP=ffffc900000077c0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed1009604f51
R12=0000000000000000 R13=ffff88804b027a98 R14=ffff88804b027a98 R15=0000000000000001
RIP=ffffffff8223d400 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f49a689f6c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f49a685cfc8 CR3=000000011eed6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f49a5ba7498 00007f49a5ba7470 XMM03=00007f49a5ba74a8 00007f49a5ba74a0
XMM04=00007f49a670d100 00007f49a5ba7460 XMM05=00007f49a5ba7478 00007f49a5ba74c0
XMM06=00007f49a5ba74b8 00007f49a5ba74b0 XMM07=00007f49a5ba74a8 00007f49a5ba74a0
XMM08=0000000000000000 00007f49a5a12f0f XMM09=0000000000000000 00007f49a5a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff8880204d8237 R9 =1ffff1100409b046 R10=dffffc0000000000 R11=ffffffff85504a00
R12=dffffc0000000000 R13=ffffffff99b048cb R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504a7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007fda25212f0f XMM09=0000000000000000 00007fda25212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
