last executing test programs:

2m35.214944297s ago: executing program 1 (id=3691):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0)

2m35.094135381s ago: executing program 1 (id=3694):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880)

2m35.074912054s ago: executing program 1 (id=3697):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x5b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2m34.991017483s ago: executing program 1 (id=3698):
r0 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a03000000000200010000000000000002161600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0)

2m34.531125368s ago: executing program 1 (id=3700):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
ioctl$TUNSETIFF(r0, 0xb701, 0x0)

2m34.480618485s ago: executing program 1 (id=3702):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000680)=r1, 0xfffffffffffffd16)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xc000)
close(r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000401408000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x8, 0x0, 0x7, 0xffffffffffffffc0}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x1, 0x5, 0x9, 0x1, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xa15afb14a9294764, 0x9, 0x8, 0x8, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xc, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x8}, {0x5, 0x82, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r6, 0x0, 0x7}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, 0x0)

2m19.438568593s ago: executing program 32 (id=3702):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000680)=r1, 0xfffffffffffffd16)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xc000)
close(r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000401408000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x8, 0x0, 0x7, 0xffffffffffffffc0}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x1, 0x5, 0x9, 0x1, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xa15afb14a9294764, 0x9, 0x8, 0x8, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xc, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x8}, {0x5, 0x82, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r6, 0x0, 0x7}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, 0x0)

50.983014864s ago: executing program 3 (id=5013):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map, 0xffffffffffffffff, 0x2, 0x4008}, 0x20)

50.940463826s ago: executing program 3 (id=5015):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a0101ffff0000000000000a0000070900020073797a31000000000900010073797a310000000024000380200000800800034000000002140007800c000100636f756e74657200040001"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)

50.784108785s ago: executing program 3 (id=5016):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e616161610061"], 0x0, 0x64}, 0x28)

50.724082531s ago: executing program 3 (id=5017):
r0 = socket$kcm(0x11, 0x20000000000000a, 0x300)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

50.089906451s ago: executing program 0 (id=5031):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mount$bpf(0x406, 0x0, 0x0, 0x1007, 0x0)

50.089575997s ago: executing program 0 (id=5032):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

50.020896406s ago: executing program 0 (id=5033):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x9, 0x1, ':{\'@\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x854}, 0x4)

49.95244554s ago: executing program 0 (id=5034):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)

49.821536679s ago: executing program 3 (id=5037):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x3, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)

49.434253024s ago: executing program 3 (id=5038):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0x46, 0xbc, 0x2, 0x0, 0x8, 0x90017, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x2, 0xb00}, 0x11005, 0x80000001, 0x10, 0x2, 0x0, 0x2, 0xe4, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)

49.281346068s ago: executing program 33 (id=5038):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0x46, 0xbc, 0x2, 0x0, 0x8, 0x90017, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x2, 0xb00}, 0x11005, 0x80000001, 0x10, 0x2, 0x0, 0x2, 0xe4, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)

49.232965657s ago: executing program 0 (id=5040):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)

48.844272465s ago: executing program 0 (id=5041):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977726d"], 0xa)

48.844143906s ago: executing program 34 (id=5041):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977726d"], 0xa)

48.843833275s ago: executing program 2 (id=5044):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x51)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004000)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040)
close(0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

48.654024858s ago: executing program 2 (id=5045):
r0 = perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c4c, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000b}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1)

48.604151611s ago: executing program 2 (id=5046):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)
write$cgroup_pid(r0, 0x0, 0x0)

48.549474089s ago: executing program 2 (id=5047):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

48.41259853s ago: executing program 2 (id=5048):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)

48.333099992s ago: executing program 2 (id=5049):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffc, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x4, 0x402, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
close(0x3)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000500), 0x4)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

32.98224688s ago: executing program 35 (id=5049):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffc, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x4, 0x402, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
close(0x3)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000500), 0x4)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

24.90101181s ago: executing program 6 (id=5243):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

24.829808561s ago: executing program 6 (id=5244):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0x4}, 0x0, 0x80000000, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4000005, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r5}, 0x18)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

24.531342718s ago: executing program 6 (id=5251):
r0 = syz_clone(0xc220000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x10)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0)
close(r4)

24.381211343s ago: executing program 6 (id=5254):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340))
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0})

24.312078791s ago: executing program 6 (id=5256):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newchain={0x330, 0x64, 0x2, 0x70bd2a, 0x10000, {0x0, 0x0, 0x0, r8, {0xf, 0x3}, {0xf, 0xfff1}, {0xfff3, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0x2c4, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x99a2}, @TCA_FLOW_ACT={0x2a0, 0x9, 0x0, 0x1, [@m_mpls={0x30, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x138, 0x20, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0xec, 0x6, "0ef181308954c148796ea98fcb4901897d10e5e4666c0ba617c9075287f0a4311034d77785263827fdcff6b88204d8c0572fb10af03140ad24c496c4c0974f1244fc815125aba3d05d5e21d03e08e44e0fd8dc181c2bf1df6750475ecb62b20bdfcdb1318e75d1c70d2ed2d82065699f90311bdcc3eb3a1a715ce4f4cea2507c3d636e36e2fe29f5af36d56b678b9d160128e97e04bd91bdfcdbe22c72e6f77550e021dca22a9bbdafa9e0d8467fba2ab580e6cebe551ac79a34ea0e6fb47e38c1326824895dd006759bc3a4c0f10318d16b894e299f8a39d803e455f1727c9aba5ac3d9d4af5433"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x134, 0x5, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x6, 0x6, 0x1, 0x400}}, @TCA_DEF_DATA={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_DEF_DATA={0xd, 0x3, '/dev/ppp\x00'}, @TCA_DEF_DATA={0x10, 0x3, '&$%^7-@-[,*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1000, 0x0, 0x1, 0x200}}]}, {0xa4, 0x6, "dd8eb4df0348fa6fbb0a0bfb18a03a9ea53acdf2510d746dcf28e2a949ac0dc3914023db609565a49caa3c2730f45932704c896d85c3de3b2c1dafc4ceb821a732c7253169bda89f441b5e8f7273cfbfc43b13cc1a531c0a5df4f27d84a8e1e1a76fcd8f83e2ccea8bc2244bcf99854e321cbff2583e87ebc24d2a934d9893c3eaa53b9fd1a1ee4e5809c93dc075c8f616c0ad22a5f3785e790ef1353de210eb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8001}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x100}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0xffffffc0}, @TCA_RATE={0x6, 0x5, {0xcd, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x46}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x24004014)
write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10869, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

23.679092359s ago: executing program 6 (id=5265):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2f1, 0x0, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb702, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, r0}, 0x10)

8.650998295s ago: executing program 36 (id=5265):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2f1, 0x0, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb702, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, r0}, 0x10)

1.519684913s ago: executing program 7 (id=5514):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.460033013s ago: executing program 7 (id=5518):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x50)

1.278013814s ago: executing program 7 (id=5519):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r3)
close(r2)

839.237084ms ago: executing program 7 (id=5526):
mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0xf0ffffff, 0x0)

780.108664ms ago: executing program 4 (id=5528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010200000000006000000000000005000500000000000900020073797a3100000000100003006269746d61703a706f72740014000780080008400000004406000400000000000500010007000000050004"], 0x5c}}, 0x0)

779.637143ms ago: executing program 7 (id=5529):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x2, 0x0, 0x0, 0x0, 0xc000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004427300041100000a00000000000000d57971159a2c6e425c64063795bfd0a658ad61c458059f33a8c54f8eed4ade41400615fc2af82b665031212113aadc3b5c16ade89b6f6464f7f145b544c5e6e0a290290099dcd0f33663c311df4cfe48e07dc84b96ba7b9729567f20a650bb85287fc45f01b8c3833f14bd1dfbbab0b7e67459469268d877a2e532ab39026ef498182c9d05b0fef6c99d59b1c925be3a30e6905072b04f6851481797efae3cc4adfe6d42eb9dcdd4a80a1a82", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="911023000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000"], 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), 0x0}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffd69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000003940)=""/4063, 0xfea}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/199, 0xf2}, {&(0x7f0000000200)=""/111, 0x6f}], 0x6}, 0x10100)
recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x15f81e938355b5e0}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xa4, &(0x7f0000000200)=""/164, 0x41100, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x10, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

728.667695ms ago: executing program 5 (id=5531):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)

666.22046ms ago: executing program 4 (id=5532):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x1bc}}, 0x0)

605.593475ms ago: executing program 4 (id=5533):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}]}, 0x154}}, 0x800)

560.498207ms ago: executing program 4 (id=5534):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

523.94886ms ago: executing program 5 (id=5535):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6gretap0\x00', @random="e32579d14a8f"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

321.746007ms ago: executing program 5 (id=5536):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf25080013"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)

309.433517ms ago: executing program 7 (id=5537):
r0 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180))
socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, 0x0, 0x24006840)
socket$kcm(0x10, 0x2, 0x0)

304.033748ms ago: executing program 5 (id=5538):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10)
r2 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

87.082234ms ago: executing program 5 (id=5539):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

85.327761ms ago: executing program 4 (id=5540):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x3, 0x1f9b58104abcfabe}, 0x20)

656.392µs ago: executing program 4 (id=5541):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb"], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x9, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x404}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000", 0xa1}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)

0s ago: executing program 5 (id=5542):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xc, 0x1e, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000006000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x20000, 0x1000, &(0x7f0000000540)=""/4096, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001580)={0x2, 0x0, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000015c0)=[{0x2, 0x3, 0x8, 0x5}], 0x10, 0xffff}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffd36, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x8000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029340011800a0001006c696d6974000000240002800c00024000000000000000030c000140000000000000010108000440000000013c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xf4}}, 0x0)

kernel console output (not intermixed with test programs):

er after parsing attributes in process `syz.2.1624'.
[  155.597205][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'.
[  155.603225][ T9601] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1622'.
[  155.617200][ T9601] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  155.636599][ T1090] bridge0: port 3(team0) entered disabled state
[  155.701634][ T9605] __nla_validate_parse: 2 callbacks suppressed
[  155.701698][ T9605] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1626'.
[  155.764433][ T9611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1629'.
[  156.155362][ T9618] bridge0: port 3(team0) entered disabled state
[  156.216428][ T9618] bridge_slave_1: left allmulticast mode
[  156.224726][ T9618] bridge_slave_1: left promiscuous mode
[  156.229098][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.268427][ T9618] bridge_slave_0: left allmulticast mode
[  156.275162][ T9618] bridge_slave_0: left promiscuous mode
[  156.280161][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.827628][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  156.948105][ T9655] netlink: 'syz.2.1646': attribute type 6 has an invalid length.
[  156.952044][ T9655] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1646'.
[  156.992438][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'.
[  156.995368][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'.
[  157.260260][ T9673] netlink: 'syz.2.1655': attribute type 10 has an invalid length.
[  157.356943][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.372945][ T9673] batadv0: entered promiscuous mode
[  157.376539][ T9673] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  157.385153][ T9679] bond_slave_0: left promiscuous mode
[  157.387129][ T9679] bond_slave_1: left promiscuous mode
[  157.389202][ T9679] batadv0: left promiscuous mode
[  157.390831][ T9679] bond0: entered promiscuous mode
[  157.392409][ T9679] bond_slave_0: entered promiscuous mode
[  157.394349][ T9679] bond_slave_1: entered promiscuous mode
[  157.396980][ T9679] batadv0: entered promiscuous mode
[  157.452521][ T9684] netlink: 'syz.2.1658': attribute type 3 has an invalid length.
[  157.492580][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'.
[  158.663264][ T9716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'.
[  158.667003][ T9716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'.
[  158.670939][ T9716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'.
[  159.724097][ T9745] netlink: 'syz.1.1684': attribute type 22 has an invalid length.
[  159.858383][ T9758] netlink: 'syz.2.1688': attribute type 1 has an invalid length.
[  160.030269][ T9766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.032666][ T9766] IPv6: NLM_F_CREATE should be set when creating new route
[  160.035005][ T9766] IPv6: NLM_F_CREATE should be set when creating new route
[  160.223063][ T9775] netlink: 'syz.1.1698': attribute type 5 has an invalid length.
[  160.585497][ T9786] netlink: 'syz.1.1702': attribute type 10 has an invalid length.
[  161.211254][ T9795] pim6reg0: tun_chr_ioctl cmd 1074025681
[  161.451024][ T9801] __nla_validate_parse: 5 callbacks suppressed
[  161.451038][ T9801] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1709'.
[  161.498016][ T9807] lo speed is unknown, defaulting to 1000
[  161.504314][ T9807] lo speed is unknown, defaulting to 1000
[  161.507306][ T9807] lo speed is unknown, defaulting to 1000
[  161.526253][ T9809] sit0: entered allmulticast mode
[  161.645861][ T9817] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1717'.
[  161.726692][ T9807] infiniband syz2: set active
[  161.728922][ T9807] infiniband syz2: added lo
[  161.734833][ T5882] lo speed is unknown, defaulting to 1000
[  161.743835][ T9822] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1719'.
[  161.746939][ T9822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1719'.
[  161.771393][ T9807] RDS/IB: syz2: added
[  161.773175][ T9807] smc: adding ib device syz2 with port count 1
[  161.778544][ T9807] smc:    ib device syz2 port 1 has pnetid 
[  161.782179][ T5882] lo speed is unknown, defaulting to 1000
[  161.785214][ T9807] lo speed is unknown, defaulting to 1000
[  161.951987][ T9833] netlink: 'syz.1.1723': attribute type 27 has an invalid length.
[  161.954576][ T9833] netlink: 'syz.1.1723': attribute type 3 has an invalid length.
[  161.957027][ T9833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1723'.
[  162.045570][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'.
[  162.078403][ T9807] lo speed is unknown, defaulting to 1000
[  162.269901][ T9807] lo speed is unknown, defaulting to 1000
[  162.423149][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'.
[  162.610155][ T9858] netlink: 'syz.2.1733': attribute type 29 has an invalid length.
[  162.628532][ T9858] netlink: 'syz.2.1733': attribute type 29 has an invalid length.
[  162.654727][ T9858] netlink: 'syz.2.1733': attribute type 29 has an invalid length.
[  162.763268][ T9858] netlink: 'syz.2.1733': attribute type 29 has an invalid length.
[  163.935317][ T9881] netlink: 'syz.2.1744': attribute type 1 has an invalid length.
[  164.137507][ T9892] siw: device registration error -23
[  164.170402][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'.
[  164.258413][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'.
[  164.262277][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'.
[  164.712623][ T9937] netlink: 'syz.0.1771': attribute type 2 has an invalid length.
[  164.715978][ T9937] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  164.720100][ T9937] nbd: illegal input index -404748436
[  164.810821][ T9943] netlink: 'syz.1.1774': attribute type 28 has an invalid length.
[  167.000639][T10026] delete_channel: no stack
[  167.056033][T10031] __nla_validate_parse: 9 callbacks suppressed
[  167.056088][T10031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1810'.
[  167.056756][T10035] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  167.096927][T10034] validate_nla: 3 callbacks suppressed
[  167.096946][T10034] netlink: 'syz.1.1811': attribute type 19 has an invalid length.
[  167.102029][T10034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1811'.
[  167.191883][T10036] delete_channel: no stack
[  167.393923][T10050] netlink: 4200 bytes leftover after parsing attributes in process `syz.2.1819'.
[  167.550665][T10066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1824'.
[  167.556573][T10066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1824'.
[  167.560903][T10061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1824'.
[  168.289543][T10117] netlink: 177 bytes leftover after parsing attributes in process `syz.0.1851'.
[  168.376791][T10120] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1853'.
[  168.767659][T10142] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.001527][T10164] delete_channel: no stack
[  169.003485][T10164] delete_channel: no stack
[  169.546497][T10201] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1891'.
[  171.381029][T10243] netlink: 'syz.0.1910': attribute type 21 has an invalid length.
[  171.420115][T10246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.681796][T10272] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1924'.
[  171.740307][T10278] netlink: 'syz.2.1928': attribute type 2 has an invalid length.
[  171.743199][T10278] netlink: 'syz.2.1928': attribute type 1 has an invalid length.
[  172.115096][T10315] __nla_validate_parse: 2 callbacks suppressed
[  172.115114][T10315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1945'.
[  172.407311][ T5853] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  172.785150][ T5853] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[  172.992482][T10364] netlink: 'syz.0.1967': attribute type 10 has an invalid length.
[  172.996277][T10364] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1967'.
[  173.047936][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'.
[  173.148629][T10376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1971'.
[  173.190191][T10375] netlink: 'syz.1.1972': attribute type 13 has an invalid length.
[  173.192844][T10375] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1972'.
[  173.246969][T10384] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1975'.
[  173.284995][ T5853] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  173.430047][T10403] netlink: 'syz.1.1986': attribute type 21 has an invalid length.
[  173.788873][T10432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1999'.
[  173.791851][T10432] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1999'.
[  173.794718][T10432] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1999'.
[  175.172632][T10466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.544437][T10490] netlink: 'syz.1.2023': attribute type 21 has an invalid length.
[  175.658494][   T33] audit: type=1107 audit(1755877996.644:4): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  175.794097][T10503] netlink: 'syz.0.2030': attribute type 33 has an invalid length.
[  175.830863][T10503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2030'.
[  175.991299][T10516] syzkaller0: tun_chr_ioctl cmd 1074812117
[  176.147192][T10526] netlink: 'syz.1.2040': attribute type 11 has an invalid length.
[  176.214703][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.865639][T10541] netlink: 'syz.2.2047': attribute type 6 has an invalid length.
[  177.017785][   T33] audit: type=1107 audit(1755877998.004:5): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  177.194091][T10559] __nla_validate_parse: 4 callbacks suppressed
[  177.194142][T10559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2055'.
[  177.314514][T10567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  177.351042][T10567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  178.119782][T10581] sit0: entered allmulticast mode
[  178.132315][T10581] sit0: entered promiscuous mode
[  178.235286][T10583] net veth1_virt_wifi : renamed from virt_wifi0
[  179.101905][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'.
[  179.433121][T10642] lo speed is unknown, defaulting to 1000
[  180.426061][T10683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2109'.
[  180.434781][T10685] netlink: 'syz.0.2110': attribute type 39 has an invalid length.
[  180.536207][T10687] netlink: 'syz.2.2111': attribute type 10 has an invalid length.
[  180.543307][T10687] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.573058][T10687] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.576976][T10687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.581339][T10687] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.584369][T10687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.596878][T10689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.612517][T10687] bridge0: entered promiscuous mode
[  180.625758][T10687] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  180.901384][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  180.903907][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[  183.444828][T10719] lo speed is unknown, defaulting to 1000
[  184.405853][T10755] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2139'.
[  184.568018][T10772] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2148'.
[  185.690228][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'.
[  185.837374][T10830] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  185.903252][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  186.067244][T10849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2180'.
[  186.073949][T10849] tc_dump_action: action bad kind
[  186.750062][ T5895] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec
[  187.128375][T10871] bpf: Bad value for 'gid'
[  189.855425][T10916] netlink: 'syz.2.2212': attribute type 21 has an invalid length.
[  189.917356][T10923] netlink: 'syz.1.2216': attribute type 6 has an invalid length.
[  189.920664][T10923] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2216'.
[  190.128358][T10943] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2225'.
[  190.241116][T10941] netlink: 'syz.2.2224': attribute type 9 has an invalid length.
[  190.245141][T10941] netlink: 146452 bytes leftover after parsing attributes in process `syz.2.2224'.
[  193.302840][T10959] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  193.664451][T10971] lo speed is unknown, defaulting to 1000
[  193.756987][T10981] netlink: 'syz.2.2239': attribute type 1 has an invalid length.
[  193.802995][T10987] openvswitch: netlink: IPv4 tunnel dst address is zero
[  194.109555][T11011] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2252'.
[  194.112775][T11011] netlink: zone id is out of range
[  194.114353][T11011] netlink: zone id is out of range
[  194.116042][T11011] netlink: zone id is out of range
[  194.117648][T11011] netlink: zone id is out of range
[  194.120217][T11011] netlink: zone id is out of range
[  194.121867][T11011] netlink: zone id is out of range
[  194.123426][T11011] netlink: zone id is out of range
[  194.125000][T11011] netlink: zone id is out of range
[  194.149728][T11015] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2253'.
[  194.196747][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.198923][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.351642][T11022] netlink: 'syz.2.2256': attribute type 8 has an invalid length.
[  194.354791][T11022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2256'.
[  194.930187][T11031] syzkaller0: entered promiscuous mode
[  194.932091][T11031] syzkaller0: entered allmulticast mode
[  195.035401][T11037] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2263'.
[  195.454659][T11049] macsec0: entered promiscuous mode
[  195.465320][T11052] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2269'.
[  195.539148][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'.
[  195.543511][T11058] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2272'.
[  195.598087][ T5847] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17
[  195.598110][ T5847] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[  195.737296][T11078] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2278'.
[  195.773188][T11081] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2282'.
[  196.006957][T11104] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2294'.
[  198.744895][T11210] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2338'.
[  198.753499][T11213] netlink: 'syz.0.2341': attribute type 1 has an invalid length.
[  199.254659][T11240] veth1_macvtap: left promiscuous mode
[  199.267736][T11240] veth1_macvtap: entered promiscuous mode
[  199.272473][T11240] macsec0: entered promiscuous mode
[  199.275484][T11240] macsec0: entered allmulticast mode
[  199.277867][T11240] veth1_macvtap: entered allmulticast mode
[  199.583330][T11244] sit0: entered allmulticast mode
[  199.590318][T11244] sit0: entered promiscuous mode
[  199.684040][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'.
[  199.805128][T11255] syz.2.2360 (11255) used obsolete PPPIOCDETACH ioctl
[  200.459522][T11270] syzkaller0: entered promiscuous mode
[  200.462173][T11270] syzkaller0: entered allmulticast mode
[  201.044283][T11294] net_ratelimit: 78 callbacks suppressed
[  201.044303][T11294] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  201.049649][T11294] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  201.182021][T11298] netlink: 'syz.1.2376': attribute type 2 has an invalid length.
[  201.185778][T11298] netlink: 'syz.1.2376': attribute type 1 has an invalid length.
[  201.276725][T11302] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2378'.
[  201.982377][T11314] sock: sock_timestamping_bind_phc: sock not bind to device
[  202.050294][T11309] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  202.181893][T11327] netlink: 'syz.2.2391': attribute type 2 has an invalid length.
[  202.184683][T11327] netlink: 110008 bytes leftover after parsing attributes in process `syz.2.2391'.
[  202.227392][T11324] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  202.553875][T11352] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2400'.
[  203.993132][T11356] netlink: 'syz.0.2402': attribute type 10 has an invalid length.
[  204.020716][T11356] bond0: (slave bond_slave_0): Releasing backup interface
[  204.028391][T11356] bond_slave_0: left promiscuous mode
[  204.127825][T11388] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2417'.
[  204.221939][T11394] netlink: 208344 bytes leftover after parsing attributes in process `syz.0.2420'.
[  204.506724][T11405] netlink: 'syz.1.2424': attribute type 16 has an invalid length.
[  204.523821][T11405] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2424'.
[  204.542064][T11405] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.856055][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'.
[  206.860241][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'.
[  206.922070][T11433] netlink: 'syz.1.2437': attribute type 29 has an invalid length.
[  206.926351][T11433] netlink: 'syz.1.2437': attribute type 29 has an invalid length.
[  206.930417][T11433] netlink: 'syz.1.2437': attribute type 29 has an invalid length.
[  209.896002][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'.
[  210.100982][T11477] netlink: 'syz.0.2454': attribute type 10 has an invalid length.
[  210.122536][T11477] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  210.180850][T11484] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.2460'.
[  210.342258][T11497] syzkaller0: entered promiscuous mode
[  210.344162][T11497] syzkaller0: entered allmulticast mode
[  210.346419][T11503] netlink: 'syz.1.2468': attribute type 10 has an invalid length.
[  210.351994][T11503] !: left promiscuous mode
[  210.353549][T11503] bond_slave_1: left promiscuous mode
[  210.355349][T11503] C: left promiscuous mode
[  210.357116][T11503] team_slave_1: left promiscuous mode
[  211.421610][T11512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2472'.
[  211.518852][T11520] netlink: 'syz.0.2474': attribute type 10 has an invalid length.
[  211.521320][T11520] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2474'.
[  211.549464][T11522] netlink: 'syz.0.2475': attribute type 28 has an invalid length.
[  211.887313][T11545] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2486'.
[  211.978126][T11554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2490'.
[  212.051350][T11552] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2489'.
[  212.102473][T11557] delete_channel: no stack
[  212.324226][T11581] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  213.048113][T11606] netlink: 531 bytes leftover after parsing attributes in process `syz.2.2514'.
[  213.561889][T11647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.707332][ T5847] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4
[  213.823060][T11661] openvswitch: netlink: IP tunnel dst address not specified
[  213.893312][ T5847] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4
[  214.231595][T11695] netlink: 'syz.2.2555': attribute type 21 has an invalid length.
[  214.371602][T11708] netlink: 'syz.1.2561': attribute type 10 has an invalid length.
[  214.376605][T11708] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2561'.
[  214.380520][T11708] !: entered promiscuous mode
[  214.382272][T11708] bond_slave_1: entered promiscuous mode
[  214.384540][T11708] C: entered promiscuous mode
[  214.386242][T11708] team_slave_1: entered promiscuous mode
[  214.388203][T11708] bond0: entered promiscuous mode
[  214.393653][T11708] team0: entered promiscuous mode
[  214.403723][T11708] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.407047][T11708] bridge0: port 5(bond0) entered blocking state
[  214.411283][T11708] bridge0: port 5(bond0) entered disabled state
[  214.414070][T11708] bond0: entered allmulticast mode
[  214.416564][T11708] !: entered allmulticast mode
[  214.418481][T11708] bond_slave_1: entered allmulticast mode
[  214.423066][T11708] team0: entered allmulticast mode
[  214.425198][T11708] C: entered allmulticast mode
[  214.432728][T11708] team_slave_1: entered allmulticast mode
[  214.489806][T11708] bridge0: port 5(bond0) entered blocking state
[  214.492449][T11708] bridge0: port 5(bond0) entered listening state
[  215.914731][T11745] netlink: 'syz.0.2578': attribute type 21 has an invalid length.
[  215.975622][T11748] netlink: 56429 bytes leftover after parsing attributes in process `syz.2.2579'.
[  216.823466][T11765] netlink: 'syz.2.2585': attribute type 10 has an invalid length.
[  216.826060][T11765] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2585'.
[  217.167559][T11763] delete_channel: no stack
[  218.102579][T11780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'.
[  218.105864][T11780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'.
[  218.232504][T11782] netlink: 'syz.0.2590': attribute type 10 has an invalid length.
[  218.244052][T11782] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  218.248050][T11782] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  218.301100][T11786] netlink: 'syz.2.2592': attribute type 21 has an invalid length.
[  218.303703][T11786] netlink: 'syz.2.2592': attribute type 4 has an invalid length.
[  218.389863][T11792] tun0: tun_chr_ioctl cmd 1074025677
[  218.391805][T11792] tun0: linktype set to 270
[  218.785397][T11801] netlink: 'syz.2.2598': attribute type 29 has an invalid length.
[  218.803613][T11801] netlink: 'syz.2.2598': attribute type 29 has an invalid length.
[  218.812296][T11801] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2598'.
[  219.585561][T11839] netlink: 'syz.0.2617': attribute type 21 has an invalid length.
[  219.817280][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2620'.
[  220.072301][T11858] netlink: 'syz.2.2624': attribute type 39 has an invalid length.
[  220.410980][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'.
[  220.475426][T11865] netlink: 'syz.0.2626': attribute type 10 has an invalid length.
[  220.478251][T11865] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2626'.
[  220.593994][T11875] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.2631'.
[  220.597096][T11875] netlink: 62227 bytes leftover after parsing attributes in process `syz.1.2631'.
[  221.144448][T11861] delete_channel: no stack
[  221.271862][T11885] netlink: 'syz.1.2636': attribute type 3 has an invalid length.
[  221.370189][T11895] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2641'.
[  221.533724][ T5847] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[  223.187587][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'.
[  223.355185][T12010] macsec0: entered promiscuous mode
[  223.357096][T12010] macsec0: entered allmulticast mode
[  223.360501][T12010] veth1_macvtap: entered allmulticast mode
[  223.381462][T12010] syzkaller0: entered promiscuous mode
[  223.383237][T12010] syzkaller0: entered allmulticast mode
[  223.748047][T12019] netlink: 'syz.1.2695': attribute type 2 has an invalid length.
[  223.757089][T12019] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2695'.
[  223.802015][T12020] netlink: 'syz.1.2695': attribute type 2 has an invalid length.
[  223.804582][T12020] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2695'.
[  224.523887][T12032] netlink: 'syz.0.2700': attribute type 10 has an invalid length.
[  224.526557][T12032] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2700'.
[  224.650560][T12046] netlink: 'syz.2.2708': attribute type 21 has an invalid length.
[  224.654331][T12046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2708'.
[  224.700644][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2709'.
[  224.703537][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2709'.
[  224.708396][T12052] netlink: 'syz.2.2710': attribute type 1 has an invalid length.
[  224.716934][T12052] netlink: 'syz.2.2710': attribute type 1 has an invalid length.
[  225.061087][T12089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2728'.
[  225.064483][T12089] tc_dump_action: action bad kind
[  225.118813][T12097] netlink: 'syz.0.2731': attribute type 19 has an invalid length.
[  225.643433][T12130] netlink: 'syz.0.2746': attribute type 1 has an invalid length.
[  225.693875][T12134] netlink: 'syz.0.2748': attribute type 10 has an invalid length.
[  225.702842][T12134] bond_slave_1: left promiscuous mode
[  225.704728][T12134] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  227.066687][T12169] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2762'.
[  227.070232][T12165] netlink: 'syz.0.2760': attribute type 10 has an invalid length.
[  227.095144][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'.
[  227.646168][T12207] syzkaller0: entered promiscuous mode
[  227.648194][T12207] syzkaller0: entered allmulticast mode
[  229.469828][ T5847] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  229.496707][ T5847] Bluetooth: hci0: adv larger than maximum supported
[  229.887356][T12297] netlink: 'syz.0.2820': attribute type 6 has an invalid length.
[  229.896346][T12297] __nla_validate_parse: 4 callbacks suppressed
[  229.896362][T12297] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2820'.
[  230.020437][    C1] bridge0: port 5(bond0) entered learning state
[  230.367802][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'.
[  230.395138][T12321] netlink: 'syz.2.2830': attribute type 1 has an invalid length.
[  230.550268][T12332] netlink: 'syz.0.2835': attribute type 21 has an invalid length.
[  230.553392][T12332] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2835'.
[  230.673384][T12336] openvswitch: netlink: IP tunnel dst address not specified
[  230.739758][T12347] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2842'.
[  230.767182][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.873423][T12353] netlink: 'syz.1.2845': attribute type 4 has an invalid length.
[  230.885146][T12359] netlink: 'syz.2.2847': attribute type 33 has an invalid length.
[  230.887569][T12359] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2847'.
[  231.116769][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'.
[  231.243205][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'.
[  231.450501][T12402] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2865'.
[  231.690893][T12413] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2871'.
[  232.709971][T12439] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2882'.
[  233.976377][T12452] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  234.270274][T12472] netlink: 'syz.0.2896': attribute type 9 has an invalid length.
[  234.445346][T12482] bond0: left allmulticast mode
[  234.447367][T12482] !: left allmulticast mode
[  234.476915][T12482] bond_slave_1: left allmulticast mode
[  234.497259][T12482] team0: left allmulticast mode
[  234.504091][T12482] C: left allmulticast mode
[  234.505904][T12482] team_slave_1: left allmulticast mode
[  234.508283][T12482] bridge0: port 5(bond0) entered disabled state
[  234.545975][T12482] dummy0: left allmulticast mode
[  234.548204][T12482] bridge0: port 4(dummy0) entered disabled state
[  234.573364][T12482] bridge0: port 3(batadv0) entered disabled state
[  234.582017][T12482] bridge_slave_1: left allmulticast mode
[  234.584834][T12482] bridge_slave_1: left promiscuous mode
[  234.587529][T12482] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.598537][T12482] bridge_slave_0: left promiscuous mode
[  234.603255][T12482] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.714135][T12496] netlink: 'syz.0.2906': attribute type 11 has an invalid length.
[  235.238158][T12536] __nla_validate_parse: 7 callbacks suppressed
[  235.238173][T12536] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2926'.
[  235.269092][T12538] netlink: set zone limit has 4 unknown bytes
[  235.272283][T12538] netlink: del zone limit has 4 unknown bytes
[  235.407199][T12552] netlink: 'syz.2.2933': attribute type 21 has an invalid length.
[  235.420446][T12552] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2933'.
[  235.424206][T12552] netlink: 'syz.2.2933': attribute type 4 has an invalid length.
[  235.441770][T12552] netlink: 'syz.2.2933': attribute type 5 has an invalid length.
[  235.445050][T12552] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2933'.
[  236.775749][T12614] netlink: 'syz.2.2963': attribute type 29 has an invalid length.
[  236.780028][T12614] netlink: 'syz.2.2963': attribute type 29 has an invalid length.
[  236.787289][T12614] netlink: 'syz.2.2963': attribute type 29 has an invalid length.
[  236.791595][T12614] netlink: 'syz.2.2963': attribute type 29 has an invalid length.
[  236.923490][T12616] netlink: 'syz.0.2964': attribute type 2 has an invalid length.
[  236.927280][T12616] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2964'.
[  237.052434][T12635] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2972'.
[  237.227836][T12647] bond0: (slave wlan1): Opening slave failed
[  237.477688][T12670] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2989'.
[  237.617828][T12680] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  237.622294][T12680] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  237.732052][ T5847] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4
[  238.557528][T12690] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  238.716838][T12706] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3005'.
[  239.232519][T12722] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3013'.
[  239.266577][T12725] tap0: tun_chr_ioctl cmd 1074025677
[  239.268643][T12725] tap0: linktype set to 825
[  239.285737][T12729] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3017'.
[  239.304715][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3018'.
[  240.147980][T12772] validate_nla: 6 callbacks suppressed
[  240.147995][T12772] netlink: 'syz.2.3037': attribute type 10 has an invalid length.
[  240.154540][T12772] lo: entered promiscuous mode
[  240.161540][T12772] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  240.166045][ T5314] lo speed is unknown, defaulting to 1000
[  240.169487][ T5314] syz2: Port: 1 Link DOWN
[  240.173422][ T5314] lo speed is unknown, defaulting to 1000
[  240.928435][T12822] bridge_slave_1: left allmulticast mode
[  240.937513][T12822] bridge_slave_1: left promiscuous mode
[  240.950383][T12822] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.699473][T12822] bridge_slave_0: left promiscuous mode
[  241.701601][T12822] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.718027][T12822] bond0: (slave bridge0): Releasing backup interface
[  241.725010][T12822] bridge0 (unregistering): left promiscuous mode
[  242.058531][T12836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.110798][T12849] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  242.679407][T12896] __nla_validate_parse: 2 callbacks suppressed
[  242.679420][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  243.041702][T12910] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3099'.
[  243.142126][T12914] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3101'.
[  243.304584][T12922] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.3105'.
[  243.307670][T12922] netlink: 61827 bytes leftover after parsing attributes in process `syz.1.3105'.
[  245.907709][T12948] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  245.916110][T12948] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  246.160406][T12953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3117'.
[  246.505620][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3124'.
[  246.511063][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3124'.
[  248.151460][T13026] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3151'.
[  248.198534][T13026] netlink: 'syz.2.3151': attribute type 3 has an invalid length.
[  248.221571][T13026] netlink: 'syz.2.3151': attribute type 2 has an invalid length.
[  248.225340][T13026] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.3151'.
[  249.484060][T13042] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3158'.
[  249.696055][T13083] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3178'.
[  249.846038][T13099] netlink: 'syz.1.3185': attribute type 39 has an invalid length.
[  252.303726][T13134] delete_channel: no stack
[  252.567141][T13147] tap0: tun_chr_ioctl cmd 1074025678
[  252.570253][T13147] tap0: group set to 0
[  252.777785][T13163] syzkaller1: tun_chr_ioctl cmd 1074025677
[  252.781036][T13163] syzkaller1: linktype set to 780
[  253.066622][T13171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3214'.
[  253.076896][T13173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3214'.
[  253.125955][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3220'.
[  253.381104][T13191] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  253.384726][T13191] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  254.981061][T13209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3232'.
[  254.986762][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3233'.
[  254.993952][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3233'.
[  254.998677][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3233'.
[  255.542853][T13252] netlink: 'syz.1.3251': attribute type 10 has an invalid length.
[  255.546826][T13252] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3251'.
[  255.639359][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.642206][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.352810][T13255] netlink: 'syz.2.3253': attribute type 8 has an invalid length.
[  256.355940][T13255] netlink: 'syz.2.3253': attribute type 6 has an invalid length.
[  256.362325][T13255] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3253'.
[  256.508402][T13261] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3256'.
[  256.532763][T13261] netlink: 'syz.0.3256': attribute type 2 has an invalid length.
[  256.536155][T13261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3256'.
[  256.806216][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'.
[  257.740685][T13296] netlink: 'syz.0.3268': attribute type 15 has an invalid length.
[  258.671501][T13305] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3272'.
[  258.885878][T13321] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  258.888594][T13321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.295985][T13337] netlink: 'syz.2.3287': attribute type 12 has an invalid length.
[  259.883769][T13353] netlink: 'syz.2.3294': attribute type 9 has an invalid length.
[  260.026331][T13363] __nla_validate_parse: 7 callbacks suppressed
[  260.026348][T13363] netlink: 798 bytes leftover after parsing attributes in process `syz.2.3299'.
[  260.139704][T13365] syzkaller0: entered promiscuous mode
[  260.142158][T13365] syzkaller0: entered allmulticast mode
[  260.788116][T13386] netlink: 'syz.1.3310': attribute type 1 has an invalid length.
[  260.792310][T13386] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3310'.
[  260.796075][T13386] netlink: 125920 bytes leftover after parsing attributes in process `syz.1.3310'.
[  260.802483][T13386] netlink: 'syz.1.3310': attribute type 1 has an invalid length.
[  260.805906][T13386] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3310'.
[  261.165068][T13392] netlink: 'syz.1.3313': attribute type 7 has an invalid length.
[  261.309132][T13373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3304'.
[  261.312090][T13373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3304'.
[  261.697073][T13422] netlink: 'syz.1.3327': attribute type 29 has an invalid length.
[  261.703332][T13422] netlink: 'syz.1.3327': attribute type 29 has an invalid length.
[  261.707095][T13422] netlink: 'syz.1.3327': attribute type 29 has an invalid length.
[  261.970188][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3338'.
[  262.155188][T13450] syzkaller0: entered promiscuous mode
[  262.157438][T13450] syzkaller0: entered allmulticast mode
[  262.213228][T13448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3340'.
[  262.507257][T13457] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3344'.
[  263.358973][T13457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3344'.
[  263.724675][T13469] netlink: 'syz.0.3349': attribute type 4 has an invalid length.
[  263.805503][T13469] wlan1: mtu less than device minimum
[  265.022961][ T5847] Bluetooth: hci2: Malformed LE Event: 0x0d
[  265.335557][T13534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.626797][T13542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.814783][T13548] netlink: 'syz.1.3385': attribute type 2 has an invalid length.
[  265.917846][T13540] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  266.162184][T13561] netlink: 'syz.0.3391': attribute type 1 has an invalid length.
[  266.381602][ T5847] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  266.526833][T13583] netlink: 'syz.0.3401': attribute type 12 has an invalid length.
[  266.536833][T13583] __nla_validate_parse: 3 callbacks suppressed
[  266.536849][T13583] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.3401'.
[  266.810939][T13601] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3410'.
[  266.848940][T13601] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3410'.
[  267.051037][ T5847] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  267.198130][   T33] audit: type=1107 audit(1755878088.184:6): pid=13620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  267.232979][T13627] netlink: 'syz.1.3421': attribute type 11 has an invalid length.
[  267.236156][T13627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3421'.
[  268.426877][T13663] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3436'.
[  268.533317][T13673] netlink: 'syz.0.3440': attribute type 33 has an invalid length.
[  268.535827][T13673] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3440'.
[  268.981737][T13703] : renamed from gre0 (while UP)
[  269.110321][T13709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3458'.
[  269.180337][ T5847] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  269.386761][T13719] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3463'.
[  269.555248][T13727] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3466'.
[  269.695982][T13742] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3474'.
[  269.901699][T13756] nftables ruleset with unbound chain
[  270.912535][T13770] openvswitch: netlink: Message has 1 unknown bytes.
[  270.916855][T13770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.987718][T13777] netlink: 'syz.1.3491': attribute type 3 has an invalid length.
[  271.060481][ T5847] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  271.064013][ T5847] Bluetooth: hci0: Injecting HCI hardware error event
[  271.067073][ T5847] Bluetooth: hci0: hardware error 0x00
[  271.198631][T13792] netlink: 'syz.0.3499': attribute type 29 has an invalid length.
[  271.207212][T13792] netlink: 'syz.0.3499': attribute type 29 has an invalid length.
[  271.232496][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  271.736872][T13826] __nla_validate_parse: 2 callbacks suppressed
[  271.736931][T13826] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3513'.
[  271.862511][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'.
[  271.869933][T13834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3517'.
[  271.969454][T13841] netlink: 294 bytes leftover after parsing attributes in process `syz.0.3518'.
[  272.324959][T13857] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3527'.
[  272.327966][T13857] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  272.633930][T13869] IPv6: NLM_F_CREATE should be specified when creating new route
[  273.150268][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  273.309039][T13899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3546'.
[  273.692551][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3554'.
[  273.904633][T13934] netlink: 'syz.1.3562': attribute type 1 has an invalid length.
[  274.106475][T13947] netlink: 'syz.0.3567': attribute type 10 has an invalid length.
[  274.223584][T13926] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3558'.
[  274.242201][T13947] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  274.832265][T13968] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  274.844040][T13969] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3577'.
[  274.866960][T13971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3579'.
[  275.079102][T13991] netlink: 'syz.2.3589': attribute type 1 has an invalid length.
[  275.082230][T13991] netlink: 'syz.2.3589': attribute type 4 has an invalid length.
[  275.096961][T13991] netlink: 'syz.2.3589': attribute type 1 has an invalid length.
[  275.100311][T13991] netlink: 'syz.2.3589': attribute type 4 has an invalid length.
[  275.151082][T13999] sctp: [Deprecated]: syz.0.3592 (pid 13999) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.151082][T13999] Use struct sctp_sack_info instead
[  275.804637][T14047] netlink: 'syz.2.3615': attribute type 3 has an invalid length.
[  276.006077][T14063] netlink: 'syz.0.3623': attribute type 21 has an invalid length.
[  276.553615][T14079] netlink: 'syz.1.3629': attribute type 10 has an invalid length.
[  276.833648][T14079] geneve0: entered promiscuous mode
[  276.843163][T14079] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  277.442531][T14121] __nla_validate_parse: 11 callbacks suppressed
[  277.442549][T14121] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3649'.
[  277.458488][T14124] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3647'.
[  277.469632][T14116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3647'.
[  277.480709][T14124] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3647'.
[  277.593581][ T5847] Bluetooth: hci2: unexpected event 0x3d length: 151 > 14
[  277.813156][T14150] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3662'.
[  277.976854][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3667'.
[  278.025842][T14163] netlink: 'syz.0.3669': attribute type 1 has an invalid length.
[  278.314578][T14175] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3673'.
[  281.435251][T14191] netlink: 'syz.2.3680': attribute type 10 has an invalid length.
[  281.438160][T14191] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.3680'.
[  282.083989][T14212] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3689'.
[  282.214566][T14223] netlink: 'syz.1.3694': attribute type 21 has an invalid length.
[  282.279489][T14225] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component
[  282.660355][T14229] : entered promiscuous mode
[  282.894848][T14263] siw: device registration error -23
[  283.287181][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'.
[  283.300719][T14281] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  283.307011][T14281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.373465][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'.
[  283.377777][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3714'.
[  283.443392][T14295] netlink: 'syz.0.3716': attribute type 29 has an invalid length.
[  283.447116][T14295] netlink: 'syz.0.3716': attribute type 29 has an invalid length.
[  283.455048][T14295] netlink: 'syz.0.3716': attribute type 29 has an invalid length.
[  283.953399][T14320] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.3728'.
[  284.993631][T14339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.600245][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'.
[  286.263555][T14390] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3761'.
[  287.481032][T14434] sctp: [Deprecated]: syz.2.3781 (pid 14434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.481032][T14434] Use struct sctp_sack_info instead
[  287.538682][T14438] netlink: 'syz.0.3783': attribute type 2 has an invalid length.
[  287.542409][T14438] netlink: 'syz.0.3783': attribute type 1 has an invalid length.
[  287.545603][T14438] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3783'.
[  287.550200][T14438] nbd: must specify at least one socket
[  288.825073][T14467] netlink: 'syz.2.3792': attribute type 1 has an invalid length.
[  288.828234][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'.
[  288.994306][T14480] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3799'.
[  289.213162][T14492] netlink: 'syz.0.3805': attribute type 1 has an invalid length.
[  290.615840][T14513] C: renamed from team_slave_0
[  290.621465][T14513] netlink: 'syz.2.3813': attribute type 3 has an invalid length.
[  290.624574][T14513] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3813'.
[  290.664459][T14517] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.3815'.
[  290.762970][T14523] netlink: 'syz.0.3818': attribute type 1 has an invalid length.
[  290.765966][T14523] netlink: 'syz.0.3818': attribute type 3 has an invalid length.
[  290.769745][T14523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3818'.
[  290.874839][T14531] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3822'.
[  290.918453][T14533] netlink: 'syz.0.3823': attribute type 21 has an invalid length.
[  291.102915][T14546] netlink: 'syz.2.3829': attribute type 39 has an invalid length.
[  291.417854][T14562] netlink: 208128 bytes leftover after parsing attributes in process `syz.2.3837'.
[  291.422690][T14562] openvswitch: netlink: Message has 4 unknown bytes.
[  291.820551][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3840'.
[  294.105478][T14581] netlink: 'syz.2.3845': attribute type 11 has an invalid length.
[  294.599483][T14600] netlink: 'syz.2.3855': attribute type 9 has an invalid length.
[  294.603590][T14600] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3855'.
[  295.755010][T14635] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3871'.
[  295.933614][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'.
[  296.581560][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'.
[  296.586080][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'.
[  296.596394][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'.
[  296.610013][T14663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.022191][T14692] netlink: 'syz.2.3897': attribute type 2 has an invalid length.
[  298.093044][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.097957][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.106642][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.113156][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.116844][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.152862][T14696] lo speed is unknown, defaulting to 1000
[  298.389867][T14717] netlink: 'syz.0.3905': attribute type 10 has an invalid length.
[  298.474183][T14717] team0: Device veth1_macvtap failed to register rx_handler
[  298.506574][T14696] chnl_net:caif_netlink_parms(): no params data found
[  298.602073][T14696] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.605172][T14696] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.609794][T14696] bridge_slave_0: entered allmulticast mode
[  298.613530][T14696] bridge_slave_0: entered promiscuous mode
[  298.627643][T14696] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.631459][T14696] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.634321][T14696] bridge_slave_1: entered allmulticast mode
[  298.638083][T14696] bridge_slave_1: entered promiscuous mode
[  300.188323][ T5847] Bluetooth: hci3: command tx timeout
[  300.692997][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.706855][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.756318][T14696] team0: Port device team_slave_0 added
[  300.765016][T14696] team0: Port device team_slave_1 added
[  300.786226][T14740] netlink: 'syz.0.3913': attribute type 5 has an invalid length.
[  300.788846][T14740] netlink: 'syz.0.3913': attribute type 7 has an invalid length.
[  300.791995][T14740] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.3913'.
[  300.802683][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.805370][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.815747][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.823423][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.826122][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.851181][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.674352][T14696] hsr_slave_0: entered promiscuous mode
[  301.677702][T14696] hsr_slave_1: entered promiscuous mode
[  301.703696][T14696] debugfs: 'hsr0' already exists in 'hsr'
[  301.706067][T14696] Cannot create hsr debugfs directory
[  302.259097][ T5847] Bluetooth: hci3: command tx timeout
[  302.986138][T14696] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  302.994652][T14696] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  303.006062][T14696] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  303.014173][T14696] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  303.022724][T14762] netlink: 'syz.0.3924': attribute type 4 has an invalid length.
[  303.025226][T14762] netlink: 'syz.0.3924': attribute type 2 has an invalid length.
[  303.027622][T14762] netlink: 199288 bytes leftover after parsing attributes in process `syz.0.3924'.
[  303.145908][T14696] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.157563][T14696] 8021q: adding VLAN 0 to HW filter on device team0
[  303.163394][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.165672][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.175478][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.177760][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.343240][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.363759][T14787] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3932'.
[  303.389851][T14696] veth0_vlan: entered promiscuous mode
[  303.403433][T14696] veth1_vlan: entered promiscuous mode
[  303.445960][T14696] veth0_macvtap: entered promiscuous mode
[  303.455297][T14696] veth1_macvtap: entered promiscuous mode
[  303.482357][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.493501][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.505761][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.510504][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.513581][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.531422][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.595488][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.598422][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.624147][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.626814][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.759108][T14804] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3939'.
[  304.000211][T14822] netlink: 'syz.2.3947': attribute type 33 has an invalid length.
[  304.002732][T14822] netlink: 'syz.2.3947': attribute type 3 has an invalid length.
[  304.005391][T14822] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.3947'.
[  304.067827][T14826] netlink: 'syz.2.3948': attribute type 41 has an invalid length.
[  304.339212][ T5847] Bluetooth: hci3: command tx timeout
[  304.732009][T14883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3974'.
[  304.939218][T14891] lo speed is unknown, defaulting to 1000
[  305.441687][T14916] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3989'.
[  305.526539][T14921] veth1_macvtap: left allmulticast mode
[  305.540960][T14921] veth1_macvtap: left promiscuous mode
[  305.543075][T14921] macsec0: left promiscuous mode
[  305.564915][T14921] veth1_macvtap: entered promiscuous mode
[  305.567217][T14921] veth1_macvtap: entered allmulticast mode
[  305.578997][T14921] macsec0: entered promiscuous mode
[  305.587302][T14924] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3993'.
[  306.233565][T14968] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4014'.
[  306.316958][T14975] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4017'.
[  306.357081][T14979] netlink: 'syz.0.4019': attribute type 13 has an invalid length.
[  306.368587][T14979] netlink: 'syz.0.4019': attribute type 58 has an invalid length.
[  306.375212][T14979] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4019'.
[  306.419062][ T5847] Bluetooth: hci3: command tx timeout
[  306.497736][T14989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4023'.
[  306.673412][T15005] netlink: 'syz.0.4031': attribute type 3 has an invalid length.
[  306.675987][T15005] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.4031'.
[  307.526084][T15033] delete_channel: no stack
[  308.605751][T15051] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4050'.
[  308.734723][T15055] : entered promiscuous mode
[  308.922259][T15064] netlink: 'syz.2.4057': attribute type 10 has an invalid length.
[  308.938056][T15057] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4053'.
[  308.959961][T15057] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4053'.
[  309.128208][T15057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  309.132672][T15057] IPv6: NLM_F_CREATE should be set when creating new route
[  309.136032][T15057] IPv6: NLM_F_CREATE should be set when creating new route
[  309.557898][T15090] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4069'.
[  309.673552][T15094] netlink: 'syz.0.4070': attribute type 39 has an invalid length.
[  309.701932][T15097] netlink: 'syz.2.4072': attribute type 11 has an invalid length.
[  309.704763][T15097] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.4072'.
[  309.733244][T15096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.233472][T15079] infiniband syz!: set active
[  310.235707][T15079] infiniband syz!: added team_slave_0
[  310.239524][T15079] syz!: rxe_create_cq: returned err = -12
[  310.242543][T15079] infiniband syz!: Couldn't create ib_mad CQ
[  310.245033][T15079] infiniband syz!: Couldn't open port 1
[  310.269893][T15079] RDS/IB: syz!: added
[  310.274146][T15079] smc: adding ib device syz! with port count 1
[  310.284274][T15079] smc:    ib device syz! port 1 has pnetid 
[  311.441633][T15145] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4093'.
[  311.451153][T15146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.460085][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4093'.
[  311.472687][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4093'.
[  311.480772][T15145] netlink: 'syz.3.4093': attribute type 1 has an invalid length.
[  311.747815][T15154] netlink: 'syz.3.4097': attribute type 3 has an invalid length.
[  311.751031][T15154] netlink: 'syz.3.4097': attribute type 1 has an invalid length.
[  311.753921][T15154] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4097'.
[  311.917360][T15164] syzkaller0: entered promiscuous mode
[  311.923923][T15164] syzkaller0: entered allmulticast mode
[  312.054178][T15171] netlink: 'syz.0.4104': attribute type 4 has an invalid length.
[  312.056855][T15171] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4104'.
[  314.126286][T15171] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  314.131470][T15177] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4107'.
[  314.396342][T15195] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4116'.
[  314.707805][T15210] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4123'.
[  315.213480][T15221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4129'.
[  315.326000][T15231] bpf: Bad value for 'gid'
[  315.407679][T15237] netlink: 'syz.2.4136': attribute type 10 has an invalid length.
[  315.410716][T15237] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4136'.
[  315.449052][T15240] raw_sendmsg: syz.3.4134 forgot to set AF_INET. Fix it!
[  316.152873][T15268] syzkaller0: entered promiscuous mode
[  316.155295][T15268] syzkaller0: entered allmulticast mode
[  317.067684][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.071653][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.583053][T15275] rdma_rxe: rxe_newlink: failed to add vcan0
[  321.602360][T15328] netlink: 'syz.3.4178': attribute type 29 has an invalid length.
[  321.612159][T15328] netlink: 'syz.3.4178': attribute type 29 has an invalid length.
[  321.704717][T15328] netlink: 'syz.3.4178': attribute type 29 has an invalid length.
[  321.747486][T15332] netlink: 'syz.3.4178': attribute type 29 has an invalid length.
[  321.895074][T15340] __nla_validate_parse: 2 callbacks suppressed
[  321.895090][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4182'.
[  321.902993][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4182'.
[  322.475135][T15353] netlink: 'syz.0.4188': attribute type 17 has an invalid length.
[  322.864103][T15365] netlink: 'syz.3.4194': attribute type 10 has an invalid length.
[  322.866990][T15365] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4194'.
[  323.045966][T15377] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  323.125120][T15382] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4203'.
[  323.237224][T15389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4204'.
[  323.254937][T15385] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4204'.
[  323.422870][T15402] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  323.488662][T15406] netlink: 'syz.3.4214': attribute type 2 has an invalid length.
[  323.496459][T15406] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.4214'.
[  324.885274][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4232'.
[  325.151202][T15457] netlink: 'syz.3.4237': attribute type 25 has an invalid length.
[  325.811787][T15468] netlink: 'syz.0.4242': attribute type 46 has an invalid length.
[  326.746991][T15511] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.4261'.
[  326.907361][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4267'.
[  326.910599][T15524] netlink: 'syz.0.4267': attribute type 1 has an invalid length.
[  326.913850][T15524] netlink: 'syz.0.4267': attribute type 2 has an invalid length.
[  326.928816][T15524] netlink: 'syz.0.4267': attribute type 1 has an invalid length.
[  327.202148][T15547] netlink: 'syz.0.4278': attribute type 3 has an invalid length.
[  327.204836][T15547] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4278'.
[  328.732114][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'.
[  328.863845][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4285'.
[  329.486845][T15595] netlink: 'syz.3.4297': attribute type 21 has an invalid length.
[  330.072867][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.185758][T15637] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4316'.
[  330.189709][T15636] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4316'.
[  330.193980][T15636] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4316'.
[  331.217422][T15647] batadv_slave_1: entered promiscuous mode
[  331.223877][T15647] batadv_slave_1: entered allmulticast mode
[  331.237790][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4321'.
[  331.247277][T15647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4321'.
[  331.370345][T15663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4326'.
[  331.384668][T15663] netlink: 'syz.2.4326': attribute type 27 has an invalid length.
[  331.387327][T15663] netlink: 'syz.2.4326': attribute type 4 has an invalid length.
[  331.863250][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.867026][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.870751][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.875070][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.880428][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.940919][T15675] lo speed is unknown, defaulting to 1000
[  332.584484][T15675] chnl_net:caif_netlink_parms(): no params data found
[  332.706075][T15675] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.709387][T15675] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.712643][T15675] bridge_slave_0: entered allmulticast mode
[  332.717202][T15675] bridge_slave_0: entered promiscuous mode
[  332.726138][T15675] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.730657][T15675] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.733795][T15675] bridge_slave_1: entered allmulticast mode
[  332.738065][T15675] bridge_slave_1: entered promiscuous mode
[  332.793794][T15675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.801845][T15675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.853698][T15675] team0: Port device team_slave_0 added
[  332.858583][T15675] team0: Port device team_slave_1 added
[  332.931476][T15675] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.943758][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.965576][T15675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.991054][T15675] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.994058][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.009611][T15675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.228262][T15675] hsr_slave_0: entered promiscuous mode
[  333.232393][T15675] hsr_slave_1: entered promiscuous mode
[  333.235400][T15675] debugfs: 'hsr0' already exists in 'hsr'
[  333.238024][T15675] Cannot create hsr debugfs directory
[  333.530123][T15675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.607537][T15675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.663602][T15675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.762648][T15675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.943157][ T5853] Bluetooth: hci2: command tx timeout
[  334.053044][T15675] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  334.113975][T15675] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  334.148298][T15675] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  334.160371][T15675] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  334.253505][T15675] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.269522][T15675] 8021q: adding VLAN 0 to HW filter on device team0
[  334.289433][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.291941][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.301586][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.304060][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.329086][T15739] __nla_validate_parse: 1 callbacks suppressed
[  334.329102][T15739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4353'.
[  334.412052][T15743] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4354'.
[  334.494796][T15675] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.561454][T15675] veth0_vlan: entered promiscuous mode
[  334.568624][T15675] veth1_vlan: entered promiscuous mode
[  334.607456][T15675] veth0_macvtap: entered promiscuous mode
[  334.622648][T15675] veth1_macvtap: entered promiscuous mode
[  334.661463][T15675] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.680222][T15675] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.858098][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.868444][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.892552][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.913766][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.989835][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.992433][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.051841][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.054930][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.019043][ T5853] Bluetooth: hci2: command tx timeout
[  338.100114][ T5853] Bluetooth: hci2: command tx timeout
[  340.202771][ T5853] Bluetooth: hci2: command tx timeout
[  340.575297][ T5853] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  341.062261][T15862] netlink: 'syz.0.4403': attribute type 10 has an invalid length.
[  342.222870][T15896] sit0: entered allmulticast mode
[  343.655738][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4427'.
[  344.471548][T15941] : renamed from gre0 (while UP)
[  344.565432][T15949] netlink: 'syz.0.4440': attribute type 3 has an invalid length.
[  344.571168][T15949] netlink: 'syz.0.4440': attribute type 2 has an invalid length.
[  344.575587][T15949] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.4440'.
[  344.604180][T15951] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4442'.
[  344.780331][T15966] lo speed is unknown, defaulting to 1000
[  346.092865][ T5853] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  346.119310][T16000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4460'.
[  346.133683][T16000] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.163622][T16000] bridge_slave_0 (unregistering): left allmulticast mode
[  346.166367][T16000] bridge_slave_0 (unregistering): left promiscuous mode
[  346.170056][T16000] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.238231][T16004] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4462'.
[  346.247542][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'.
[  346.417389][T16013] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4466'.
[  346.424910][T16013] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4466'.
[  346.782150][T16037] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4478'.
[  346.866531][T16047] netlink: 'syz.3.4481': attribute type 13 has an invalid length.
[  346.889622][T16047] netlink: 'syz.3.4481': attribute type 17 has an invalid length.
[  347.499074][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4485'.
[  349.266185][T16047] sit0: left allmulticast mode
[  349.315966][T16058] netlink: 948 bytes leftover after parsing attributes in process `syz.0.4487'.
[  349.350610][T16047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  349.659633][T16082] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  349.814841][T16088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.087389][ T5853] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  350.713451][T16125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4517'.
[  350.719553][T16125] openvswitch: netlink: Missing key (keys=40, expected=100)
[  350.803440][T16127] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4520'.
[  350.886550][T16139] netlink: 'syz.0.4526': attribute type 3 has an invalid length.
[  350.894925][T16139] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4526'.
[  354.020865][T16206] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4555'.
[  354.156540][T16211] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  354.177600][T16137] Set syz1 is full, maxelem 65536 reached
[  354.378287][T16228] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4563'.
[  354.509369][T16241] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4570'.
[  354.513391][T16241] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  356.739194][ T1088] wlan1: Trigger new scan to find an IBSS to join
[  356.766076][T16264] sit0: entered allmulticast mode
[  356.778928][T16266] sit0: entered promiscuous mode
[  356.909033][T16275] netlink: 'syz.0.4581': attribute type 10 has an invalid length.
[  356.913887][T16275] veth1_macvtap: left promiscuous mode
[  357.097590][T16286] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4587'.
[  357.110984][T16286] hsr_slave_0: left promiscuous mode
[  357.115286][T16286] hsr_slave_1: left promiscuous mode
[  357.294106][T16292] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4590'.
[  357.311947][T16292] netlink: zone id is out of range
[  357.314853][T16292] netlink: zone id is out of range
[  357.317484][T16292] netlink: zone id is out of range
[  357.320152][T16292] netlink: zone id is out of range
[  357.323177][T16292] netlink: zone id is out of range
[  357.325724][T16292] netlink: zone id is out of range
[  357.328450][T16292] netlink: zone id is out of range
[  357.331236][T16292] netlink: zone id is out of range
[  357.334841][T16292] netlink: zone id is out of range
[  357.651817][T16299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4592'.
[  357.660936][T16299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4592'.
[  359.154806][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4600'.
[  359.161361][T16317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4599'.
[  359.167421][T16317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4599'.
[  359.173815][T16317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4599'.
[  359.402368][T16333] netlink: 'syz.0.4608': attribute type 2 has an invalid length.
[  359.637827][T16349] __nla_validate_parse: 1 callbacks suppressed
[  359.637840][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4615'.
[  359.646079][T16347] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4614'.
[  359.660174][T16347] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4614'.
[  359.684102][T16351] netlink: 'syz.0.4616': attribute type 33 has an invalid length.
[  359.689203][T16351] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4616'.
[  360.067884][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4627'.
[  360.075013][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4627'.
[  360.119713][T16376] netlink: 'syz.3.4628': attribute type 1 has an invalid length.
[  360.123011][T16376] netlink: 376 bytes leftover after parsing attributes in process `syz.3.4628'.
[  360.376248][T16386] sit0: entered promiscuous mode
[  360.741489][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  361.183083][T16409] netlink: 'syz.0.4643': attribute type 2 has an invalid length.
[  361.185658][T16409] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4643'.
[  362.664903][T16446] sctp: [Deprecated]: syz.0.4658 (pid 16446) Use of int in max_burst socket option deprecated.
[  362.664903][T16446] Use struct sctp_assoc_value instead
[  362.809735][ T1092] wlan1: Creating new IBSS network, BSSID ee:40:f1:6c:17:2e
[  364.096020][T16512] syzkaller0: entered promiscuous mode
[  364.098011][T16512] syzkaller0: entered allmulticast mode
[  365.725865][T16514] lo speed is unknown, defaulting to 1000
[  366.302157][T16543] netlink: 'syz.0.4697': attribute type 2 has an invalid length.
[  366.305380][T16543] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.4697'.
[  366.456248][   T13] tipc: Subscription rejected, illegal request
[  367.036909][T16566] netlink: 'syz.0.4707': attribute type 1 has an invalid length.
[  367.051365][T16566] netlink: 'syz.0.4707': attribute type 4 has an invalid length.
[  367.054358][T16566] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4707'.
[  367.069897][T16566] netlink: 'syz.0.4707': attribute type 1 has an invalid length.
[  367.079023][T16566] netlink: 'syz.0.4707': attribute type 4 has an invalid length.
[  367.082128][T16566] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4707'.
[  368.157363][T16595] netlink: 'syz.0.4720': attribute type 46 has an invalid length.
[  368.432405][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'.
[  368.543061][T16629] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  368.575956][T16632] netlink: 'syz.3.4730': attribute type 39 has an invalid length.
[  369.373866][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4741'.
[  369.484730][T16648] netlink: 'syz.2.4740': attribute type 1 has an invalid length.
[  370.717185][T16686] tap0: tun_chr_ioctl cmd 2147767520
[  370.737183][T16688] netlink: 'syz.3.4761': attribute type 10 has an invalid length.
[  370.762406][T16688] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  370.967638][T16692] syzkaller0: entered promiscuous mode
[  370.979559][T16692] syzkaller0: entered allmulticast mode
[  372.099480][T16742] netlink: 'syz.0.4786': attribute type 13 has an invalid length.
[  372.103389][T16742] netlink: 'syz.0.4786': attribute type 17 has an invalid length.
[  372.243718][T16742] sit0: left promiscuous mode
[  372.246005][T16742] sit0: left allmulticast mode
[  372.425227][T16742] net_ratelimit: 76 callbacks suppressed
[  372.425315][T16742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.010427][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4804'.
[  373.014554][T16780] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4804'.
[  373.018073][T16782] netlink: 'syz.3.4805': attribute type 1 has an invalid length.
[  373.028205][T16782] netlink: 'syz.3.4805': attribute type 4 has an invalid length.
[  373.032080][T16782] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4805'.
[  373.082752][T16786] lo speed is unknown, defaulting to 1000
[  373.649372][T16822] netlink: 'syz.2.4821': attribute type 29 has an invalid length.
[  375.723114][T16858] syz.3.4836: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  375.736350][T16858] CPU: 0 UID: 0 PID: 16858 Comm: syz.3.4836 Not tainted syzkaller #0 PREEMPT(full) 
[  375.736374][T16858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  375.736386][T16858] Call Trace:
[  375.736395][T16858]  <TASK>
[  375.736423][T16858]  dump_stack_lvl+0x189/0x250
[  375.736462][T16858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.736486][T16858]  ? __pfx__printk+0x10/0x10
[  375.736512][T16858]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  375.736535][T16858]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  375.736560][T16858]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  375.736594][T16858]  warn_alloc+0x214/0x310
[  375.736627][T16858]  ? stack_depot_save_flags+0x40/0x860
[  375.736657][T16858]  ? __pfx_warn_alloc+0x10/0x10
[  375.736687][T16858]  ? kasan_save_track+0x4f/0x80
[  375.736713][T16858]  ? xskq_create+0x56/0x170
[  375.736732][T16858]  ? xsk_init_queue+0xb0/0x110
[  375.736747][T16858]  ? xsk_setsockopt+0x57b/0x8d0
[  375.736762][T16858]  ? do_sock_setsockopt+0x17c/0x1b0
[  375.736783][T16858]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  375.736795][T16858]  ? do_syscall_64+0xfa/0x3b0
[  375.736813][T16858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.736847][T16858]  __vmalloc_node_range_noprof+0x125/0x12f0
[  375.736932][T16858]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  375.736968][T16858]  ? __kasan_kmalloc+0x93/0xb0
[  375.736997][T16858]  vmalloc_user_noprof+0xad/0xf0
[  375.737022][T16858]  ? xskq_create+0xbf/0x170
[  375.737073][T16858]  xskq_create+0xbf/0x170
[  375.737104][T16858]  xsk_init_queue+0xb0/0x110
[  375.737131][T16858]  xsk_setsockopt+0x57b/0x8d0
[  375.737157][T16858]  ? __pfx_xsk_setsockopt+0x10/0x10
[  375.737179][T16858]  ? __pfx_aa_sk_perm+0x10/0x10
[  375.737210][T16858]  ? __fget_files+0x2a/0x420
[  375.737223][T16858]  ? aa_sock_opt_perm+0xff/0x1b0
[  375.737246][T16858]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  375.737263][T16858]  ? __pfx_xsk_setsockopt+0x10/0x10
[  375.737287][T16858]  do_sock_setsockopt+0x17c/0x1b0
[  375.737321][T16858]  __x64_sys_setsockopt+0x13f/0x1b0
[  375.737349][T16858]  do_syscall_64+0xfa/0x3b0
[  375.737366][T16858]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.737382][T16858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.737399][T16858]  ? exc_page_fault+0x9f/0xf0
[  375.737426][T16858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.737441][T16858] RIP: 0033:0x7f92ed98ebe9
[  375.737459][T16858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.737473][T16858] RSP: 002b:00007f92ee7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  375.737488][T16858] RAX: ffffffffffffffda RBX: 00007f92edbb5fa0 RCX: 00007f92ed98ebe9
[  375.737500][T16858] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  375.737510][T16858] RBP: 00007f92eda11e19 R08: 0000000000000004 R09: 0000000000000000
[  375.737520][T16858] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  375.737531][T16858] R13: 00007f92edbb6038 R14: 00007f92edbb5fa0 R15: 00007ffe855ebe38
[  375.737585][T16858]  </TASK>
[  375.737593][T16858] Mem-Info:
[  375.871393][T16858] active_anon:14325 inactive_anon:0 isolated_anon:0
[  375.871393][T16858]  active_file:13347 inactive_file:38335 isolated_file:0
[  375.871393][T16858]  unevictable:1768 dirty:98 writeback:0
[  375.871393][T16858]  slab_reclaimable:10209 slab_unreclaimable:96851
[  375.871393][T16858]  mapped:23238 shmem:2426 pagetables:1038
[  375.871393][T16858]  sec_pagetables:0 bounce:0
[  375.871393][T16858]  kernel_misc_reclaimable:0
[  375.871393][T16858]  free:207989 free_pcp:21876 free_cma:0
[  375.893263][T16858] Node 0 active_anon:44904kB inactive_anon:0kB active_file:30864kB inactive_file:151080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:78676kB dirty:292kB writeback:0kB shmem:5016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4588kB pagetables:2496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  375.907165][T16858] Node 1 active_anon:12396kB inactive_anon:0kB active_file:22524kB inactive_file:2260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:14276kB dirty:100kB writeback:0kB shmem:4688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7268kB pagetables:1656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  375.932498][T16858] Node 0 DMA free:6380kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:656kB local_pcp:264kB free_cma:0kB
[  375.946315][T16858] lowmem_reserve[]: 0 811 811 811 811
[  375.953994][T16858] Node 0 DMA32 free:57132kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44904kB inactive_anon:0kB active_file:30864kB inactive_file:151080kB unevictable:3536kB writepending:292kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:38144kB local_pcp:17312kB free_cma:0kB
[  375.968131][T16858] lowmem_reserve[]: 0 0 0 0 0
[  375.970465][T16858] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  375.984421][T16858] lowmem_reserve[]: 0 0 854 854 854
[  375.994616][T16858] Node 1 Normal free:309952kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12328kB inactive_anon:0kB active_file:22524kB inactive_file:2260kB unevictable:3536kB writepending:100kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50204kB local_pcp:20388kB free_cma:0kB
[  376.022388][T16858] lowmem_reserve[]: 0 0 0 0 0
[  376.029211][T16858] Node 0 DMA: 1*4kB (U) 3*8kB (M) 3*16kB (M) 5*32kB (UE) 4*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 0*2048kB 0*4096kB = 6380kB
[  376.044685][T16858] Node 0 DMA32: 398*4kB (UME) 134*8kB (UME) 143*16kB (UM) 195*32kB (UME) 42*64kB (UME) 20*128kB (ME) 49*256kB (UME) 19*512kB (UME) 10*1024kB (UM) 4*2048kB (ME) 0*4096kB = 57144kB
[  376.058290][T16858] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  376.080534][T16858] Node 1 Normal: 403*4kB (ME) 99*8kB (UM) 7*16kB (ME) 382*32kB (UM) 74*64kB (UME) 29*128kB (UM) 34*256kB (UME) 21*512kB (UM) 13*1024kB (UME) 8*2048kB (UE) 58*4096kB (M) = 309908kB
[  376.087654][T16858] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  376.103488][T16858] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  376.108111][T16858] 54110 total pagecache pages
[  376.116694][T16858] 0 pages in swap cache
[  376.118497][T16858] Free swap  = 124996kB
[  376.123954][T16858] Total swap = 124996kB
[  376.126484][T16858] 786301 pages RAM
[  376.127920][T16858] 0 pages HighMem/MovableOnly
[  376.132060][T16858] 241329 pages reserved
[  376.133535][T16858] 0 pages cma reserved
[  376.243188][T16879] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  376.246289][ T1092] wlan1: Selected IBSS BSSID ee:40:f1:6c:17:2e based on configured SSID
[  376.261584][T16879] netlink: 'syz.3.4845': attribute type 10 has an invalid length.
[  376.277103][ T1088] wlan1: Selected IBSS BSSID ee:40:f1:6c:17:2e based on configured SSID
[  376.282586][T16879] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  376.396860][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'.
[  377.558224][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4860'.
[  377.744596][T16920] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4865'.
[  377.840807][T16926] syzkaller1: tun_chr_ioctl cmd 1074025676
[  377.843443][T16926] syzkaller1: owner set to 778
[  378.017467][T16936] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.4873'.
[  378.467725][T16967] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4887'.
[  378.503112][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.505707][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.536339][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4889'.
[  378.810884][T16983] netlink: 'syz.0.4894': attribute type 2 has an invalid length.
[  380.112905][T17014] netlink: 'syz.2.4909': attribute type 1 has an invalid length.
[  380.116004][T17014] netlink: 'syz.2.4909': attribute type 4 has an invalid length.
[  380.139348][T17014] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4909'.
[  380.727406][T17047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4924'.
[  381.582823][T17060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4929'.
[  381.798053][T17073] macvtap0: refused to change device tx_queue_len
[  381.816913][T17077] netlink: 'syz.0.4937': attribute type 10 has an invalid length.
[  381.905422][T17077] team0: Device ipvlan1 failed to register rx_handler
[  382.092313][T17087] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4941'.
[  382.202866][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4946'.
[  382.785986][T17128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4960'.
[  382.790026][T17128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4960'.
[  382.796141][T17128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4960'.
[  382.875727][T17135] netlink: 'syz.3.4963': attribute type 29 has an invalid length.
[  382.880599][T17135] netlink: 'syz.3.4963': attribute type 29 has an invalid length.
[  382.884142][T17135] netlink: 'syz.3.4963': attribute type 29 has an invalid length.
[  382.888062][T17135] netlink: 'syz.3.4963': attribute type 29 has an invalid length.
[  385.419918][T17246] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4987'.
[  385.554909][T17250] netlink: 'syz.3.4989': attribute type 23 has an invalid length.
[  385.783301][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4997'.
[  385.895844][T17276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5001'.
[  386.366687][T17291] netlink: 'syz.2.5008': attribute type 10 has an invalid length.
[  386.374662][T17291] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5008'.
[  386.739936][T17315] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5019'.
[  386.857875][T17323] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5023'.
[  386.865345][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5023'.
[  386.925902][T17330] netlink: 'syz.2.5026': attribute type 11 has an invalid length.
[  387.464289][T17357] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5037'.
[  387.468577][T17357] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5037'.
[  388.499269][T17370] netlink: 'syz.2.5044': attribute type 23 has an invalid length.
[  388.619416][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  388.624230][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  388.627585][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  388.632150][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  388.636234][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  388.639890][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  388.643848][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  388.643953][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  388.652611][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  388.660330][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  388.702181][T17373] lo speed is unknown, defaulting to 1000
[  388.810458][T17371] lo speed is unknown, defaulting to 1000
[  389.052499][T17373] chnl_net:caif_netlink_parms(): no params data found
[  389.106438][T17387] lo speed is unknown, defaulting to 1000
[  389.175635][T17373] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.178680][T17373] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.191459][T17373] bridge_slave_0: entered allmulticast mode
[  389.194942][T17373] bridge_slave_0: entered promiscuous mode
[  389.198592][T17373] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.206084][T17373] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.208351][T17373] bridge_slave_1: entered allmulticast mode
[  389.237201][T17373] bridge_slave_1: entered promiscuous mode
[  389.308623][T17373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.322617][T17373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.370305][T17373] team0: Port device team_slave_0 added
[  389.375802][T17373] team0: Port device team_slave_1 added
[  389.417244][T17373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.419777][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.428459][T17373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.444522][T17373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.446967][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.468908][T17373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.586719][T17373] hsr_slave_0: entered promiscuous mode
[  389.595332][T17373] hsr_slave_1: entered promiscuous mode
[  389.597858][T17373] debugfs: 'hsr0' already exists in 'hsr'
[  389.602967][T17373] Cannot create hsr debugfs directory
[  389.865227][T17371] chnl_net:caif_netlink_parms(): no params data found
[  389.962929][T17371] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.966395][T17371] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.970836][T17371] bridge_slave_0: entered allmulticast mode
[  389.974884][T17371] bridge_slave_0: entered promiscuous mode
[  389.991366][T17371] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.994470][T17371] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.997464][T17371] bridge_slave_1: entered allmulticast mode
[  390.002730][T17371] bridge_slave_1: entered promiscuous mode
[  390.055636][T17371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.071927][T17371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.075709][T17373] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  390.100911][T17373] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  390.107357][T17371] team0: Port device team_slave_0 added
[  390.110372][T17373] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  390.117833][T17373] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  390.124041][T17371] team0: Port device team_slave_1 added
[  390.150750][T17371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.153084][T17371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.161477][T17371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.166207][T17371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.168402][T17371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.176863][T17371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.215286][T17371] hsr_slave_0: entered promiscuous mode
[  390.217808][T17371] hsr_slave_1: entered promiscuous mode
[  390.220779][T17371] debugfs: 'hsr0' already exists in 'hsr'
[  390.223114][T17371] Cannot create hsr debugfs directory
[  390.365856][T17371] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  390.372010][T17371] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  390.377586][T17371] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  390.382955][T17371] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  390.427403][T17373] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.435059][T17371] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.437415][T17371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.439923][T17371] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.442194][T17371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.468103][ T3628] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.475813][ T3628] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.493800][T17373] 8021q: adding VLAN 0 to HW filter on device team0
[  390.504344][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.506696][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.520978][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.523311][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.532640][T17371] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.562654][T17371] 8021q: adding VLAN 0 to HW filter on device team0
[  390.577752][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.580220][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.594807][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.597235][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.660688][ T5847] Bluetooth: hci2: command tx timeout
[  390.718491][T17373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.739621][ T5847] Bluetooth: hci3: command tx timeout
[  390.747255][T17371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.883046][T17373] veth0_vlan: entered promiscuous mode
[  390.893392][T17373] veth1_vlan: entered promiscuous mode
[  390.936658][T17371] veth0_vlan: entered promiscuous mode
[  390.962752][T17371] veth1_vlan: entered promiscuous mode
[  390.972648][T17373] veth0_macvtap: entered promiscuous mode
[  390.985728][T17373] veth1_macvtap: entered promiscuous mode
[  391.013838][T17373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.036562][T17371] veth0_macvtap: entered promiscuous mode
[  391.043775][T17373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.048569][T17371] veth1_macvtap: entered promiscuous mode
[  391.073982][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.082072][T17371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.085100][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.091769][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.105102][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.139337][T17371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.180768][ T5857] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.204371][ T5857] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.207740][ T5857] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.218303][ T5857] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.228620][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.233747][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.279325][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.283381][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.362688][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.365934][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.413210][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.416321][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.833261][T17449] netlink: 'syz.5.5054': attribute type 10 has an invalid length.
[  391.836576][T17449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5054'.
[  391.842186][T17449] dummy0: entered promiscuous mode
[  391.916865][T17451] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5055'.
[  391.975154][T17455] netdevsim0: mtu greater than device maximum
[  392.006484][T17457] netlink: 'syz.5.5058': attribute type 9 has an invalid length.
[  392.009679][T17457] netlink: 49779 bytes leftover after parsing attributes in process `syz.5.5058'.
[  392.137352][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'.
[  392.140941][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'.
[  392.739958][ T5847] Bluetooth: hci2: command tx timeout
[  392.819178][ T5847] Bluetooth: hci3: command tx timeout
[  393.084443][T17482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  393.593801][T17499] netlink: 'syz.4.5075': attribute type 40 has an invalid length.
[  393.692751][T17499] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.207209][T17509] netlink: 'syz.5.5078': attribute type 1 has an invalid length.
[  394.378663][ T5847] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8
[  394.522710][T17515] x_tables: ip_tables: TPROXY target: only valid in mangle table, not syz0
[  394.632429][T17523] netlink: 'syz.5.5085': attribute type 1 has an invalid length.
[  394.635185][T17523] netlink: 'syz.5.5085': attribute type 4 has an invalid length.
[  394.638430][T17523] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5085'.
[  394.646141][T17523] netlink: 'syz.5.5085': attribute type 1 has an invalid length.
[  394.650271][T17523] netlink: 'syz.5.5085': attribute type 4 has an invalid length.
[  394.653278][T17523] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5085'.
[  394.716567][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5086'.
[  394.820385][ T5847] Bluetooth: hci2: command tx timeout
[  394.900868][ T5847] Bluetooth: hci3: command tx timeout
[  395.094395][T17538] openvswitch: netlink: Message has 4 unknown bytes.
[  395.155505][T17540] syzkaller0: entered promiscuous mode
[  395.157333][T17540] syzkaller0: entered allmulticast mode
[  396.336388][T17542] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5094'.
[  396.560112][T17546] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5096'.
[  396.850147][T17556] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5100'.
[  396.899403][ T5847] Bluetooth: hci2: command tx timeout
[  396.978906][ T5847] Bluetooth: hci3: command tx timeout
[  398.245345][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5118'.
[  398.248273][T17595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5118'.
[  398.275790][T17595] rdma_rxe: rxe_newlink: failed to add bond0
[  398.305861][T17595] Dead loop on virtual device ip6_vti0, fix it urgently!
[  400.760367][T17646] netlink: 'syz.5.5142': attribute type 11 has an invalid length.
[  400.763413][T17646] netlink: 149476 bytes leftover after parsing attributes in process `syz.5.5142'.
[  400.832652][T17646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.883181][T17648] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5143'.
[  400.886855][T17648] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5143'.
[  400.890874][T17648] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5143'.
[  400.959689][ T5847] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  401.955481][T17664] netlink: 'syz.5.5150': attribute type 1 has an invalid length.
[  401.958510][T17664] netlink: 'syz.5.5150': attribute type 3 has an invalid length.
[  401.962022][T17664] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5150'.
[  402.155944][T17673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.264726][T17680] netlink: 'syz.4.5158': attribute type 10 has an invalid length.
[  402.814838][T17695] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5162'.
[  403.413894][T17716] smc: removing ib device syz2
[  404.328640][T17721] netlink: 'syz.5.5174': attribute type 1 has an invalid length.
[  404.486520][T17726] netlink: 'syz.5.5177': attribute type 4 has an invalid length.
[  404.489862][T17726] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5177'.
[  404.503004][T17726] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  404.644603][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  404.647954][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  404.650943][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  404.654194][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  404.656708][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  405.447211][T17729] chnl_net:caif_netlink_parms(): no params data found
[  405.641439][T17729] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.643810][T17729] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.646101][T17729] bridge_slave_0: entered allmulticast mode
[  405.677732][T17729] bridge_slave_0: entered promiscuous mode
[  405.681694][T17729] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.684993][T17729] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.687669][T17729] bridge_slave_1: entered allmulticast mode
[  405.691439][T17729] bridge_slave_1: entered promiscuous mode
[  405.726671][T17749] netlink: 'syz.5.5182': attribute type 10 has an invalid length.
[  405.734446][T17749] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5182'.
[  405.749248][T17729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.783035][ T5847] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  405.792583][T17749] batman_adv: batadv0: Adding interface: virt_wifi0
[  405.797579][T17749] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.817877][T17749] batman_adv: batadv0: Interface activated: virt_wifi0
[  405.826267][T17729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.841436][T17755] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5182'.
[  405.854752][T17729] team0: Port device team_slave_0 added
[  405.858556][T17729] team0: Port device team_slave_1 added
[  405.907039][T17729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.910171][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.921580][T17729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.930024][T17729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.932651][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.940879][T17729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.969691][T17729] hsr_slave_0: entered promiscuous mode
[  405.975431][T17729] hsr_slave_1: entered promiscuous mode
[  405.977681][T17729] debugfs: 'hsr0' already exists in 'hsr'
[  405.980126][T17729] Cannot create hsr debugfs directory
[  406.045524][T17763] netlink: 'syz.4.5189': attribute type 2 has an invalid length.
[  406.165328][T17729] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  406.171114][T17729] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  406.177890][T17729] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  406.201591][T17729] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  406.245274][T17729] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.247674][T17729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.250300][T17729] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.252723][T17729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.313190][T17729] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.349334][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.354848][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5194'.
[  406.365912][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.373425][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5194'.
[  406.386048][T17729] 8021q: adding VLAN 0 to HW filter on device team0
[  406.399247][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.401813][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.410444][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.412844][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.457908][T17790] netlink: 2451 bytes leftover after parsing attributes in process `syz.5.5198'.
[  406.567533][T17729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.717287][T17729] veth0_vlan: entered promiscuous mode
[  406.725817][T17729] veth1_vlan: entered promiscuous mode
[  406.747449][T17729] veth0_macvtap: entered promiscuous mode
[  406.750794][ T5847] Bluetooth: hci4: command tx timeout
[  406.755960][T17729] veth1_macvtap: entered promiscuous mode
[  406.774470][T17729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.786466][T17729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.795582][T17433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.800512][T17433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.810686][T17433] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.828521][T17433] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.898486][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.904231][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.947895][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.954634][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.381708][T17817] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5205'.
[  407.394374][T17817] bond_slave_0: entered promiscuous mode
[  407.396763][T17817] bond_slave_1: entered promiscuous mode
[  408.819317][ T5847] Bluetooth: hci4: command tx timeout
[  410.926298][ T5849] Bluetooth: hci4: command tx timeout
[  411.570177][T17882] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5236'.
[  411.983801][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  412.502450][T17904] netlink: 'syz.4.5245': attribute type 10 has an invalid length.
[  412.505991][T17904] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5245'.
[  412.651225][T17902] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5244'.
[  412.937387][T17929] syzkaller0: entered promiscuous mode
[  412.979791][ T5847] Bluetooth: hci4: command tx timeout
[  413.035963][T17933] siw: device registration error -23
[  414.096162][T17964] syzkaller0: entered promiscuous mode
[  414.105609][T17964] syzkaller0: entered allmulticast mode
[  415.774430][T17977] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5273'.
[  415.827134][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5275'.
[  416.817691][T18009] sctp: [Deprecated]: syz.4.5285 (pid 18009) Use of int in maxseg socket option.
[  416.817691][T18009] Use struct sctp_assoc_value instead
[  417.012573][T18015] netlink: 'syz.4.5288': attribute type 29 has an invalid length.
[  417.040130][T18017] netlink: 'syz.5.5289': attribute type 29 has an invalid length.
[  417.332007][T18028] nft_compat: unsupported protocol 0
[  418.967586][T18062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  418.972572][T18062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  419.877374][T18086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5318'.
[  420.086690][T18092] netlink: 'syz.4.5321': attribute type 21 has an invalid length.
[  420.769533][T18105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.771860][T18105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.775353][T18105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.780465][T18105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.013462][T18116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  421.036089][T18117] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5330'.
[  421.057619][T18117] netlink: zone id is out of range
[  421.063283][T18117] netlink: zone id is out of range
[  421.064955][T18117] netlink: zone id is out of range
[  421.066835][T18117] netlink: zone id is out of range
[  421.068470][T18117] netlink: zone id is out of range
[  421.078030][T18117] netlink: zone id is out of range
[  421.081812][T18117] netlink: zone id is out of range
[  421.083604][T18117] netlink: zone id is out of range
[  421.086492][T18117] netlink: zone id is out of range
[  421.195506][T18123] sit0: entered allmulticast mode
[  421.202559][T18123] sit0: entered promiscuous mode
[  422.106528][T18145] rdma_rxe: rxe_newlink: failed to add bond0
[  422.149985][T18143] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5342'.
[  422.218446][ T5847] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6
[  423.396307][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5350'.
[  423.731079][T18173] : entered promiscuous mode
[  424.316864][T18187] netlink: 'syz.4.5360': attribute type 10 has an invalid length.
[  424.322249][T18187] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5360'.
[  424.598141][T18189] netlink: 'syz.4.5361': attribute type 10 has an invalid length.
[  426.613818][T18234] netlink: 'syz.4.5382': attribute type 29 has an invalid length.
[  426.858252][T18249] netlink: 'syz.5.5389': attribute type 6 has an invalid length.
[  426.861833][T18249] netlink: 'syz.5.5389': attribute type 3 has an invalid length.
[  426.865122][T18249] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.5389'.
[  426.900842][T18251] netlink: 'syz.5.5390': attribute type 41 has an invalid length.
[  427.077859][T18263] netlink: 'syz.5.5396': attribute type 11 has an invalid length.
[  427.081624][T18263] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5396'.
[  427.116008][T18262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.716973][T18278] veth0_vlan: entered allmulticast mode
[  428.283176][T18295] netlink: 'syz.5.5410': attribute type 7 has an invalid length.
[  428.355522][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5412'.
[  428.639432][T18304] netlink: 'syz.5.5414': attribute type 1 has an invalid length.
[  428.744546][T18306] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.5416'.
[  428.850969][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  428.857728][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  428.863143][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  428.868008][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  428.872149][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  429.165630][T18323] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.5422'.
[  429.227776][T18312] chnl_net:caif_netlink_parms(): no params data found
[  429.406908][T18312] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.412170][T18312] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.414654][T18312] bridge_slave_0: entered allmulticast mode
[  429.417619][T18312] bridge_slave_0: entered promiscuous mode
[  429.421437][T18338] netlink: 'syz.5.5427': attribute type 29 has an invalid length.
[  429.427717][T18312] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.438382][T18312] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.443868][T18312] bridge_slave_1: entered allmulticast mode
[  429.449110][T18312] bridge_slave_1: entered promiscuous mode
[  429.481862][T18312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.487163][T18312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.547614][T18312] team0: Port device team_slave_0 added
[  429.554959][T18342] syzkaller0: entered promiscuous mode
[  429.556976][T18342] syzkaller0: entered allmulticast mode
[  429.562696][T18312] team0: Port device team_slave_1 added
[  429.610332][T18312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.613954][T18312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.624107][T18312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.633816][T18346] C: renamed from team_slave_0 (while UP)
[  429.644551][T18312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.647054][T18312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.655765][T18312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.747426][T18312] hsr_slave_0: entered promiscuous mode
[  429.753463][T18312] hsr_slave_1: entered promiscuous mode
[  429.757160][T18312] debugfs: 'hsr0' already exists in 'hsr'
[  429.761802][T18312] Cannot create hsr debugfs directory
[  429.884710][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5437'.
[  429.889025][T18360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5437'.
[  429.915618][T18312] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  429.920759][T18312] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  429.929864][T18312] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  429.938025][T18312] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  429.983397][T18312] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.986215][T18312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.989229][T18312] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.991562][T18312] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.064759][T18312] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.077951][T17502] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.084527][T17502] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.103831][T18312] 8021q: adding VLAN 0 to HW filter on device team0
[  430.118225][T17502] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.121203][T17502] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.130849][T17502] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.133801][T17502] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.191403][T18312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  430.334707][T18312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.395718][T18386] netlink: 'syz.4.5444': attribute type 46 has an invalid length.
[  430.398540][T18386] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5444'.
[  430.577235][T18312] veth0_vlan: entered promiscuous mode
[  430.590112][T18312] veth1_vlan: entered promiscuous mode
[  430.626294][T18312] veth0_macvtap: entered promiscuous mode
[  430.643458][T18312] veth1_macvtap: entered promiscuous mode
[  430.676176][T18312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.695524][T18312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.723261][ T5857] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.739353][ T5857] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.742357][ T5857] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.745421][ T5857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.836524][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.848322][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.885887][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.892140][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.896380][T18406] netlink: 'syz.4.5452': attribute type 21 has an invalid length.
[  430.902463][ T5849] Bluetooth: hci5: command tx timeout
[  431.055830][ T5849] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  431.057813][ T5849] Bluetooth: hci2: connection err: -111
[  431.623026][T18434] netlink: 332 bytes leftover after parsing attributes in process `syz.7.5464'.
[  432.979506][ T5849] Bluetooth: hci5: command tx timeout
[  433.192708][T18468] netlink: 'syz.4.5477': attribute type 4 has an invalid length.
[  433.541493][T18464] net_ratelimit: 76 callbacks suppressed
[  433.541513][T18464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.725591][T18477] netlink: 'syz.7.5480': attribute type 10 has an invalid length.
[  434.602036][T18489] netlink: 'syz.4.5484': attribute type 21 has an invalid length.
[  434.605160][T18489] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5484'.
[  434.700450][T18483] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5482'.
[  434.706296][T18489] netlink: 'syz.4.5484': attribute type 5 has an invalid length.
[  434.719243][T18489] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5484'.
[  435.058928][ T5849] Bluetooth: hci5: command tx timeout
[  435.177570][T18517] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5498'.
[  435.214538][T18521] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5500'.
[  435.408161][T18533] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5506'.
[  435.798618][T18550] netlink: 'syz.7.5514': attribute type 21 has an invalid length.
[  435.804653][T18550] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5514'.
[  436.732774][T18592] syzkaller1: tun_chr_ioctl cmd 1074025677
[  436.735437][T18592] syzkaller1: linktype set to 780
[  436.797824][T18584] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5529'.
[  436.802641][T18597] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  436.807245][T18584] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5529'.
[  436.814210][T18584] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5529'.
[  437.153540][ T5849] Bluetooth: hci5: command tx timeout
[  438.863474][   T34] INFO: task syz.1.3702:14263 blocked for more than 143 seconds.
[  438.866845][   T34]       Not tainted syzkaller #0
[  438.879028][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.882869][   T34] task:syz.1.3702      state:D stack:22144 pid:14263 tgid:14262 ppid:5844   task_flags:0x400140 flags:0x00004006
[  438.897489][   T34] Call Trace:
[  438.899800][   T34]  <TASK>
[  438.901044][   T34]  __schedule+0x1798/0x4cc0
[  438.903169][   T34]  ? validate_chain+0x897/0x2140
[  438.905004][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.906643][   T34]  ? __pfx___schedule+0x10/0x10
[  438.908180][   T34]  ? schedule+0x91/0x360
[  438.913858][   T34]  schedule+0x165/0x360
[  438.915549][   T34]  schedule_timeout+0x9a/0x270
[  438.917442][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  438.921638][   T34]  ? wait_for_completion+0x267/0x5d0
[  438.924019][   T34]  wait_for_completion+0x2bf/0x5d0
[  438.926305][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  438.928583][   T34]  ? up_write+0x1c4/0x420
[  438.934610][   T34]  ? remove_client_context+0xc0/0x1e0
[  438.936788][   T34]  disable_device+0x1c6/0x320
[  438.940379][   T34]  ? __pfx_disable_device+0x10/0x10
[  438.942536][   T34]  ? irqentry_exit+0x74/0x90
[  438.944668][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.946848][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  438.952742][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  438.955446][   T34]  nldev_dellink+0x2d1/0x320
[  438.957422][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  438.961423][   T34]  ? apparmor_capable+0x137/0x1b0
[  438.963569][   T34]  ? bpf_lsm_capable+0x9/0x20
[  438.965388][   T34]  ? security_capable+0x7e/0x2e0
[  438.967661][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  438.973679][   T34]  rdma_nl_rcv+0x6ae/0x980
[  438.975558][   T34]  ? irqentry_enter+0x3d/0x60
[  438.978278][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  438.996656][   T34]  ? irqentry_exit+0x74/0x90
[  438.999632][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  439.001843][   T34]  netlink_unicast+0x82f/0x9e0
[  439.003876][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  439.006072][   T34]  ? netlink_sendmsg+0x642/0xb30
[  439.008071][   T34]  ? skb_put+0x11b/0x210
[  439.016099][   T34]  netlink_sendmsg+0x805/0xb30
[  439.018151][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  439.020864][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  439.023163][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  439.025349][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  439.027493][   T34]  __sock_sendmsg+0x21c/0x270
[  439.033403][   T34]  ____sys_sendmsg+0x505/0x830
[  439.035387][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  439.037482][   T34]  ? import_iovec+0x74/0xa0
[  439.041299][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  439.043242][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  439.045498][   T34]  ? __fget_files+0x2a/0x420
[  439.047346][   T34]  ? __fget_files+0x3a0/0x420
[  439.052952][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  439.054907][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  439.057287][   T34]  do_syscall_64+0xfa/0x3b0
[  439.065221][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.067954][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.073879][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.076257][   T34] RIP: 0033:0x7f667ad8ebe9
[  439.080677][   T34] RSP: 002b:00007f667bc5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  439.084051][   T34] RAX: ffffffffffffffda RBX: 00007f667afb5fa0 RCX: 00007f667ad8ebe9
[  439.087115][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a
[  439.101523][   T34] RBP: 00007f667ae11e19 R08: 0000000000000000 R09: 0000000000000000
[  439.104826][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  439.108122][   T34] R13: 00007f667afb6038 R14: 00007f667afb5fa0 R15: 00007ffe047bf888
[  439.114223][   T34]  </TASK>
[  439.115669][   T34] 
[  439.115669][   T34] Showing all locks held in the system:
[  439.122595][   T34] 1 lock held by khungtaskd/34:
[  439.124899][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  439.131433][   T34] 5 locks held by kworker/u10:3/1088:
[  439.133800][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  439.138493][   T34]  #1: ffffc90006d2fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  439.146829][   T34]  #2: ffffffff8dfd3010 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20
[  439.152877][   T34]  #3: ffffffff8e1f2f48 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x250
[  439.157320][   T34]  #4: ffffffff8dfe6388 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x5f/0x110
[  439.164957][   T34] 2 locks held by getty/5675:
[  439.166918][   T34]  #0: ffff8880219700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  439.173180][   T34]  #1: ffffc900028902f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  439.177260][   T34] 4 locks held by kworker/u8:3/5875:
[  439.182858][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  439.187312][   T34]  #1: ffffc900042e7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  439.193986][   T34]  #2: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  439.197848][   T34]  #3: ffff888106d30700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  439.213340][   T34] 2 locks held by syz.1.3702/14263:
[  439.215427][   T34]  #0: ffffffff99e66858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  439.226794][   T34]  #1: ffff888106d30700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  439.235928][   T34] 2 locks held by syz.2.5049/17387:
[  439.238014][   T34]  #0: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  439.242939][   T34]  #1: ffff888106d30700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  439.247563][   T34] 2 locks held by syz.6.5265/17955:
[  439.252598][   T34]  #0: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  439.256309][   T34]  #1: ffff888106d30700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  439.263826][   T34] 2 locks held by syz.7.5537/18605:
[  439.265957][   T34]  #0: ffff88802aa54a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  439.478993][   T34]  #1: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  439.483009][   T34] 11 locks held by syz.7.5537/18606:
[  439.485107][   T34] 3 locks held by syz.4.5541/18613:
[  439.487268][   T34]  #0: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  439.511429][   T34]  #1: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf61/0x2be0
[  439.523662][   T34]  #2: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  439.538654][   T34] 3 locks held by syz.4.5541/18616:
[  439.548910][   T34]  #0: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  439.552957][   T34]  #1: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf61/0x2be0
[  439.574951][   T34]  #2: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  439.593624][   T34] 2 locks held by syz.5.5542/18614:
[  439.595881][   T34]  #0: ffff88802abba008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  439.600999][   T34]  #1: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  439.615961][   T34] 3 locks held by syz.5.5542/18615:
[  439.618134][   T34]  #0: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  439.629126][   T34]  #1: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf61/0x2be0
[  439.646643][   T34]  #2: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  439.663576][   T34] 3 locks held by syz.5.5542/18617:
[  439.665737][   T34]  #0: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: class_srcu_constructor+0x2c/0x60
[  439.713780][   T34]  #1: ffffffff99b0b6b0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xf61/0x2be0
[  439.717671][   T34]  #2: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
[  439.754643][   T34] 1 lock held by syz.5.5542/18619:
[  439.756751][   T34]  #0: ffffffff8dfe6388 (text_mutex){+.+.}-{4:4}, at: text_poke_copy+0x2a/0xe0
[  439.818850][   T34] 
[  439.819769][   T34] =============================================
[  439.819769][   T34] 
[  439.823433][   T34] NMI backtrace for cpu 1
[  439.823449][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  439.823465][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.823475][   T34] Call Trace:
[  439.823482][   T34]  <TASK>
[  439.823491][   T34]  dump_stack_lvl+0x189/0x250
[  439.823516][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.823532][   T34]  ? __pfx__printk+0x10/0x10
[  439.823560][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  439.823580][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  439.823597][   T34]  ? __pfx__printk+0x10/0x10
[  439.823618][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  439.823644][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  439.823661][   T34]  watchdog+0xf93/0xfe0
[  439.823684][   T34]  ? watchdog+0x1de/0xfe0
[  439.823730][   T34]  kthread+0x711/0x8a0
[  439.823751][   T34]  ? __pfx_watchdog+0x10/0x10
[  439.823768][   T34]  ? __pfx_kthread+0x10/0x10
[  439.823785][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.823804][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.823820][   T34]  ? __pfx_kthread+0x10/0x10
[  439.823836][   T34]  ret_from_fork+0x3fc/0x770
[  439.823853][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  439.823871][   T34]  ? __switch_to_asm+0x39/0x70
[  439.823888][   T34]  ? __switch_to_asm+0x33/0x70
[  439.823902][   T34]  ? __pfx_kthread+0x10/0x10
[  439.823920][   T34]  ret_from_fork_asm+0x1a/0x30
[  439.823947][   T34]  </TASK>
[  439.823952][   T34] Sending NMI from CPU 1 to CPUs 0:
[  439.887485][    C0] NMI backtrace for cpu 0
[  439.887504][    C0] CPU: 0 UID: 0 PID: 18606 Comm: syz.7.5537 Not tainted syzkaller #0 PREEMPT(full) 
[  439.887521][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.887530][    C0] RIP: 0010:debug_lockdep_rcu_enabled+0x18/0x40
[  439.887555][    C0] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 57 42 2a 04 00 74 1e 83 3d 7a 72 2a 04 00 74 15 <65> 48 8b 0c 25 08 40 a0 92 31 c0 83 b9 ec 0a 00 00 00 0f 94 c0 e9
[  439.887566][    C0] RSP: 0018:ffffc90000007690 EFLAGS: 00000202
[  439.887580][    C0] RAX: 0000000000000000 RBX: ffffc90000007701 RCX: ffffc900067dfa20
[  439.887589][    C0] RDX: ffffffff90398f01 RSI: 0000000000000000 RDI: ffffc90000007770
[  439.887598][    C0] RBP: dffffc0000000000 R08: ffffc900000077c7 R09: 0000000000000000
[  439.887607][    C0] R10: ffffc900000077b8 R11: fffff52000000ef9 R12: ffffc900067dfa18
[  439.887616][    C0] R13: ffffc900067d8000 R14: ffffc90000007768 R15: ffffffff8172c195
[  439.887627][    C0] FS:  00007f1d31d666c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  439.887638][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  439.887646][    C0] CR2: 000020000000f000 CR3: 000000011d882000 CR4: 00000000000006f0
[  439.887678][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300
[  439.887726][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  439.887734][    C0] Call Trace:
[  439.887739][    C0]  <IRQ>
[  439.887744][    C0]  unwind_next_frame+0x195c/0x2390
[  439.887767][    C0]  ? unwind_next_frame+0xa5/0x2390
[  439.887782][    C0]  ? tracepoint_probe_register+0x5d/0x90
[  439.887802][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  439.887819][    C0]  arch_stack_walk+0x11c/0x150
[  439.887837][    C0]  ? perf_trace_event_init+0x4e1/0x9d0
[  439.887851][    C0]  stack_trace_save+0x9c/0xe0
[  439.887866][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  439.887879][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  439.887896][    C0]  ? sched_clock_cpu+0x74/0x430
[  439.887916][    C0]  ? lapic_next_event+0x11/0x20
[  439.887929][    C0]  ? clockevents_program_event+0x24d/0x360
[  439.887958][    C0]  kasan_save_track+0x3e/0x80
[  439.887974][    C0]  ? kasan_save_track+0x3e/0x80
[  439.887987][    C0]  ? kasan_save_free_info+0x46/0x50
[  439.888001][    C0]  ? __kasan_slab_free+0x5b/0x80
[  439.888015][    C0]  ? kmem_cache_free+0x18f/0x400
[  439.888033][    C0]  ? mac80211_hwsim_beacon_tx+0x3f0/0x860
[  439.888048][    C0]  ? __iterate_interfaces+0x2ab/0x590
[  439.888070][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  439.888089][    C0]  ? mac80211_hwsim_beacon+0xbb/0x1c0
[  439.888104][    C0]  ? __hrtimer_run_queues+0x52c/0xc60
[  439.888117][    C0]  ? hrtimer_run_softirq+0x187/0x2b0
[  439.888128][    C0]  ? handle_softirqs+0x286/0x870
[  439.888141][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  439.888152][    C0]  ? irq_exit_rcu+0x9/0x30
[  439.888162][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  439.888177][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.888191][    C0]  ? __text_poke+0x7ac/0xa10
[  439.888204][    C0]  ? smp_text_poke_batch_finish+0xd0f/0x1130
[  439.888220][    C0]  ? __static_call_transform+0x4eb/0x750
[  439.888232][    C0]  ? arch_static_call_transform+0x98/0xc0
[  439.888245][    C0]  ? __static_call_update+0x3c3/0x5d0
[  439.888260][    C0]  ? tracepoint_add_func+0x91e/0xa10
[  439.888275][    C0]  ? tracepoint_probe_register+0x5d/0x90
[  439.888305][    C0]  ? mac80211_hwsim_beacon_tx+0x3f0/0x860
[  439.888318][    C0]  kasan_save_free_info+0x46/0x50
[  439.888332][    C0]  __kasan_slab_free+0x5b/0x80
[  439.888347][    C0]  kmem_cache_free+0x18f/0x400
[  439.888365][    C0]  mac80211_hwsim_beacon_tx+0x3f0/0x860
[  439.888381][    C0]  __iterate_interfaces+0x2ab/0x590
[  439.888400][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  439.888413][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  439.888433][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  439.888447][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  439.888466][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  439.888482][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  439.888499][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  439.888520][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  439.888536][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  439.888551][    C0]  handle_softirqs+0x286/0x870
[  439.888563][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  439.888578][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  439.888593][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  439.888611][    C0]  __irq_exit_rcu+0xca/0x1f0
[  439.888622][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  439.888638][    C0]  irq_exit_rcu+0x9/0x30
[  439.888649][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  439.888666][    C0]  </IRQ>
[  439.888670][    C0]  <TASK>
[  439.888675][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.888712][    C0] RIP: 0010:__text_poke+0x7ac/0xa10
[  439.888728][    C0] Code: 00 4d 85 f6 75 16 e8 43 56 58 00 eb 15 e8 3c 56 58 00 e8 07 e2 11 0a 4d 85 f6 74 ea e8 2d 56 58 00 fb 48 8b bc 24 e0 00 00 00 <e8> 7f 77 14 0a e8 aa e8 11 0a 89 c3 31 ff 89 c6 e8 4f 5a 58 00 85
[  439.888739][    C0] RSP: 0018:ffffc900067df480 EFLAGS: 00000283
[  439.888751][    C0] RAX: ffffffff81675623 RBX: 0000000000000000 RCX: 0000000000080000
[  439.888761][    C0] RDX: ffffc9003260a000 RSI: 00000000000038be RDI: ffff88801a475060
[  439.888770][    C0] RBP: ffffc900067df5d0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  439.888779][    C0] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: dffffc0000000000
[  439.888789][    C0] R13: ffff88801a476558 R14: 0000000000000200 R15: ffffffff8b7c0f25
[  439.888796][    C0]  ? resilient_queued_spin_lock_slowpath+0x1205/0x1254
[  439.888819][    C0]  ? __text_poke+0x7a3/0xa10
[  439.888841][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  439.888857][    C0]  ? resilient_queued_spin_lock_slowpath+0x1205/0x1254
[  439.888875][    C0]  ? __pfx___text_poke+0x10/0x10
[  439.888897][    C0]  smp_text_poke_batch_finish+0xd0f/0x1130
[  439.888918][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  439.888939][    C0]  ? resilient_queued_spin_lock_slowpath+0x1205/0x1254
[  439.888968][    C0]  __static_call_transform+0x4eb/0x750
[  439.888982][    C0]  ? resilient_queued_spin_lock_slowpath+0x1205/0x1254
[  439.889000][    C0]  ? __pfx___static_call_transform+0x10/0x10
[  439.889015][    C0]  ? __static_call_validate+0x8e/0x240
[  439.889028][    C0]  ? __pfx_perf_trace_contention_begin+0x10/0x10
[  439.889041][    C0]  ? resilient_queued_spin_lock_slowpath+0x1205/0x1254
[  439.889059][    C0]  ? resilient_queued_spin_lock_slowpath+0x1205/0x1254
[  439.889077][    C0]  arch_static_call_transform+0x98/0xc0
[  439.889090][    C0]  __static_call_update+0x3c3/0x5d0
[  439.889106][    C0]  ? __pfx_perf_trace_contention_begin+0x10/0x10
[  439.889119][    C0]  ? __SCT__tp_func_lock_release+0x8/0x8
[  439.889141][    C0]  ? __pfx___static_call_update+0x10/0x10
[  439.889158][    C0]  ? __pfx_perf_trace_contention_begin+0x10/0x10
[  439.889171][    C0]  ? __pfx_perf_trace_contention_begin+0x10/0x10
[  439.889186][    C0]  tracepoint_add_func+0x91e/0xa10
[  439.889204][    C0]  ? __pfx_perf_trace_contention_begin+0x10/0x10
[  439.889216][    C0]  tracepoint_probe_register+0x5d/0x90
[  439.889233][    C0]  ? __pfx_perf_trace_contention_begin+0x10/0x10
[  439.889247][    C0]  perf_trace_event_init+0x4e1/0x9d0
[  439.889262][    C0]  perf_trace_init+0x23d/0x2d0
[  439.889275][    C0]  perf_tp_event_init+0x8d/0x120
[  439.889288][    C0]  perf_try_init_event+0x17f/0x870
[  439.889303][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  439.889318][    C0]  perf_event_alloc+0x133e/0x2be0
[  439.889332][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  439.889352][    C0]  ? __pfx_perf_event_alloc+0x10/0x10
[  439.889369][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  439.889382][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  439.889392][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  439.889405][    C0]  __se_sys_perf_event_open+0x772/0x1d70
[  439.889426][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  439.889447][    C0]  ? __x64_sys_perf_event_open+0x49/0xc0
[  439.889461][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  439.889475][    C0]  do_syscall_64+0xfa/0x3b0
[  439.889495][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.889506][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.889522][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.889534][    C0] RIP: 0033:0x7f1d30f8ebe9
[  439.889547][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.889559][    C0] RSP: 002b:00007f1d31d66038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  439.889572][    C0] RAX: ffffffffffffffda RBX: 00007f1d311b5fa0 RCX: 00007f1d30f8ebe9
[  439.889581][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040
[  439.889590][    C0] RBP: 00007f1d31011e19 R08: 0000000000000000 R09: 0000000000000000
[  439.889598][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  439.889607][    C0] R13: 00007f1d311b6038 R14: 00007f1d311b5fa0 R15: 00007fff5436aab8
[  439.889622][    C0]  </TASK>
[  440.235002][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  440.237799][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  440.241467][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  440.245581][   T34] Call Trace:
[  440.247086][   T34]  <TASK>
[  440.248057][   T34]  dump_stack_lvl+0x99/0x250
[  440.249534][   T34]  ? __asan_memcpy+0x40/0x70
[  440.251034][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.252748][   T34]  ? __pfx__printk+0x10/0x10
[  440.254283][   T34]  vpanic+0x281/0x750
[  440.255592][   T34]  ? __pfx_vpanic+0x10/0x10
[  440.257038][   T34]  ? preempt_schedule+0xae/0xc0
[  440.258734][   T34]  ? preempt_schedule_common+0x83/0xd0
[  440.260695][   T34]  panic+0xb9/0xc0
[  440.262075][   T34]  ? __pfx_panic+0x10/0x10
[  440.263494][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  440.265180][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  440.267291][   T34]  watchdog+0xfd2/0xfe0
[  440.268713][   T34]  ? watchdog+0x1de/0xfe0
[  440.270201][   T34]  kthread+0x711/0x8a0
[  440.271598][   T34]  ? __pfx_watchdog+0x10/0x10
[  440.273112][   T34]  ? __pfx_kthread+0x10/0x10
[  440.274637][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.276691][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.278749][   T34]  ? __pfx_kthread+0x10/0x10
[  440.280628][   T34]  ret_from_fork+0x3fc/0x770
[  440.282508][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  440.284542][   T34]  ? __switch_to_asm+0x39/0x70
[  440.286407][   T34]  ? __switch_to_asm+0x33/0x70
[  440.288304][   T34]  ? __pfx_kthread+0x10/0x10
[  440.290067][   T34]  ret_from_fork_asm+0x1a/0x30
[  440.291914][   T34]  </TASK>
[  440.293545][   T34] Kernel Offset: disabled
[  440.294908][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:57:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc900007cf580 RCX=0000000000000002 RDX=0000000000000010
RSI=0000000000000000 RDI=ffffc900007cf598 RBP=dffffc0000000000 RSP=ffffc900007cf410
R8 =ffffc900007cf5a7 R9 =0000000000000000 R10=ffffc900007cf598 R11=fffff520000f9eb5
R12=ffffc900007cf548 R13=ffffc900007cf598 R14=ffffc900007cf548 R15=ffffc900007cf590
RIP=ffffffff8b795d0a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=0000000041ba2000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff9a5a12e53
XMM06=0000000000000000 00007ff9a5a12e4d XMM07=0000000000000000 00007ff9a5a12e61
XMM08=0000000000000000 00007ff9a5a12ee7 XMM09=0000000000000000 00007ff9a5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000c6067 RBX=000000000000000a RCX=0000000000000001 RDX=0000000000000002
RSI=0000000000006000 RDI=ffff88802097b980 RBP=0000000000000000 RSP=ffffc900001e0110
R8 =0000000000000000 R9 =ffffffff81ada49a R10=dffffc0000000000 R11=ffffffff81ada3a0
R12=0000000000000002 R13=0000000000000002 R14=ffff88802097c628 R15=000000000000000b
RIP=ffffffff819d6566 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1d31d666c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff9a675bfc8 CR3=000000011d882000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff9a5b87498 00007ff9a5b87470 XMM03=00007ff9a5b874a8 00007ff9a5b874a0
XMM04=00007ff9a66ed100 00007ff9a5b87460 XMM05=00007ff9a5b87478 00007ff9a5b874c0
XMM06=00007ff9a5b874b8 00007ff9a5b874b0 XMM07=00007ff9a5b874a8 00007ff9a5b874a0
XMM08=0000000000000000 00007ff9a5a12ee7 XMM09=0000000000000000 00007ff9a5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
