last executing test programs:

4m16.268262747s ago: executing program 2 (id=791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)

4m16.109504939s ago: executing program 2 (id=795):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

4m16.02876469s ago: executing program 2 (id=796):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xe9}], 0x1}, 0x0)

4m16.02858743s ago: executing program 2 (id=797):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0xffbf)

4m14.980403224s ago: executing program 2 (id=803):
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x101)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000740)=@in6={0xa, 0x4e01, 0x4, @mcast2, 0xd}, 0x80, 0x0}, 0x24000001)

4m14.653339465s ago: executing program 2 (id=808):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x406}]}, 0x48}}, 0x0)

4m14.556842645s ago: executing program 32 (id=808):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x406}]}, 0x48}}, 0x0)

2m54.573623017s ago: executing program 0 (id=2178):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00  \x00'})

2m54.512771865s ago: executing program 0 (id=2181):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5451, 0x0)

2m54.435740546s ago: executing program 0 (id=2183):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080))

2m54.301270945s ago: executing program 0 (id=2186):
r0 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x3)

2m54.300959831s ago: executing program 0 (id=2187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m54.241140595s ago: executing program 0 (id=2189):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3400cc00)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x541b, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$sock(r4, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x102200, &(0x7f00000000c0)="c66010bd98566f0b4e91c22290b83cf9ed41da5a09015c", 0x17, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18)
r7 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)
r8 = socket$kcm(0xa, 0x3, 0x73)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102)

2m39.074845921s ago: executing program 33 (id=2189):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3400cc00)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x541b, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$sock(r4, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x102200, &(0x7f00000000c0)="c66010bd98566f0b4e91c22290b83cf9ed41da5a09015c", 0x17, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18)
r7 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)
r8 = socket$kcm(0xa, 0x3, 0x73)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102)

2m28.051912568s ago: executing program 1 (id=2438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

2m27.980019929s ago: executing program 3 (id=2439):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff8100632f77fb86dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

2m27.841998937s ago: executing program 1 (id=2440):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0)

2m27.779210996s ago: executing program 3 (id=2443):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0)

2m27.701274003s ago: executing program 1 (id=2444):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x3e)

2m27.700887628s ago: executing program 3 (id=2445):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810)

2m27.700328633s ago: executing program 3 (id=2446):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m27.642338628s ago: executing program 1 (id=2448):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa3}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)

2m27.641984019s ago: executing program 3 (id=2449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
close(r0)

2m27.641848457s ago: executing program 1 (id=2450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)

2m27.352397255s ago: executing program 3 (id=2451):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22)
recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2m27.237700302s ago: executing program 34 (id=2451):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22)
recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2m27.185795965s ago: executing program 1 (id=2453):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40012)

2m27.185654555s ago: executing program 35 (id=2453):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40012)

41.154577126s ago: executing program 4 (id=3922):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000200), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000300)=""/106, 0x6a}], 0x2, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x140)

41.153623663s ago: executing program 5 (id=3924):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x15}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0)

41.094664977s ago: executing program 4 (id=3926):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8410, 0x0, 0x0, 0x8, 0x3fb, 0xb, 0x48f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

41.094445364s ago: executing program 5 (id=3927):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x500}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

41.093943914s ago: executing program 5 (id=3928):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x1000, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xff}, 0xfe}, [{}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x10000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x1}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x10000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x9}, {0x0, 0xffffffff}, {0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x10000000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {0x0, 0x101}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4c2d6625}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x80000}, {}, {0x0, 0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x2e, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x80000001}, {}, {0x0, 0x2, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0xfffffff4}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x10001}, {}, {}, {}, {0xfffffffd}, {}, {0x0, 0x4000000}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x4}, {0xfffffffe}, {0x80000000, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {0x3, 0x1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0xd}, {}, {}, {0x0, 0x1}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x40000)

41.092198836s ago: executing program 5 (id=3929):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0), 0x0}, 0x20)

41.063913992s ago: executing program 5 (id=3930):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x2001)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0xc, 0x5, 0x0, 0x3, 0x0, 0xe, 0x40040, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x814, 0x2, 0xd7, 0x5, 0x3, 0x2, 0x7, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x3, r0, 0x5)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0fffffe00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

40.979191411s ago: executing program 4 (id=3931):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x800, 0x1000, &(0x7f0000000380)=""/4096, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x1, 0x9, 0x2f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000013c0)=[{0x2, 0x2, 0x7, 0x9}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0x24e0}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)

40.784249582s ago: executing program 4 (id=3935):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

40.724031117s ago: executing program 4 (id=3937):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300))
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000036004b63d25a59ce0630fc60105d52d9", 0x14}], 0x1}, 0x20000040)

40.72376487s ago: executing program 5 (id=3938):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

40.639723791s ago: executing program 4 (id=3940):
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(0x0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='(pu&\"0\t&&')
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xc, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0x80000000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
unlink(&(0x7f0000000200)='./cgroup\x00')
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x33a, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x19, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x40000400, &(0x7f00000003c0), 0x0, &(0x7f00000004c0), &(0x7f00000006c0), &(0x7f0000000700)="0b4d02a7fdd30532c5cc594bd97feb3374c7f19805401738b1b3eeb56f1bac5dd18f1327bcc36e804eeeb13cb69d42c228d7a825a8a0c5e6e9f034420102cd17c8088038ba872963380f697dd08434fb6c7720cc37b37995fc0f035f25792856e5dff8c4ffce94dbbe12cf58b2a5356fc559356ce292cdefb02fb240f0ec67fa92a91564ff6723209b3130f3485ae5d5eff009ce610e12c6fb2a991ec4a9ef580979fdaf9c92e1a5ecb603e0d24ee61e4767e08bedad17d7a56172c0ede3dd0a5a1c66aa17fd54ed0d3a48524f6fe1334ba7fcb8")

25.697335054s ago: executing program 36 (id=3938):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

25.639291499s ago: executing program 37 (id=3940):
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(0x0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='(pu&\"0\t&&')
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xc, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0x80000000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
unlink(&(0x7f0000000200)='./cgroup\x00')
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x33a, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x19, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x40000400, &(0x7f00000003c0), 0x0, &(0x7f00000004c0), &(0x7f00000006c0), &(0x7f0000000700)="0b4d02a7fdd30532c5cc594bd97feb3374c7f19805401738b1b3eeb56f1bac5dd18f1327bcc36e804eeeb13cb69d42c228d7a825a8a0c5e6e9f034420102cd17c8088038ba872963380f697dd08434fb6c7720cc37b37995fc0f035f25792856e5dff8c4ffce94dbbe12cf58b2a5356fc559356ce292cdefb02fb240f0ec67fa92a91564ff6723209b3130f3485ae5d5eff009ce610e12c6fb2a991ec4a9ef580979fdaf9c92e1a5ecb603e0d24ee61e4767e08bedad17d7a56172c0ede3dd0a5a1c66aa17fd54ed0d3a48524f6fe1334ba7fcb8")

16.709519897s ago: executing program 6 (id=4169):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0)

16.686788565s ago: executing program 6 (id=4171):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8970, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

16.559433881s ago: executing program 6 (id=4174):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)

16.398667189s ago: executing program 6 (id=4175):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000540)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000004c0)=0x200000000000001, 0x12)

16.398409461s ago: executing program 6 (id=4177):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000201050000000000000000000a000005180002801400018008003bb2ac72ac75b4210200e00000020c001980080002008a"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000800)

16.265148028s ago: executing program 6 (id=4178):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x28, 0x1, 0x28, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8000, 0xfffffffe, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000210001000200000004000000fc020000000000000000000000000000fc02000000000000000000000000000000007fff000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x21c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000500)=""/116, 0x1a, 0x74, 0x0, 0x9}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x10)
r6 = socket$kcm(0x2, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

16.052263973s ago: executing program 7 (id=4181):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8)

15.921009671s ago: executing program 7 (id=4182):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000023001a00"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810)

15.920738409s ago: executing program 7 (id=4183):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053a79e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.798842981s ago: executing program 7 (id=4184):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

15.798424577s ago: executing program 8 (id=4185):
socket$kcm(0x2, 0x3, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

15.721558292s ago: executing program 7 (id=4186):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}}, 0x0)

15.721079491s ago: executing program 8 (id=4187):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}]}, 0x4)

15.662638521s ago: executing program 7 (id=4188):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x4000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4)

15.662097378s ago: executing program 8 (id=4189):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x800}, 0x50)

15.661940224s ago: executing program 8 (id=4190):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)={'b', ' *:* ', 'rwm\x00'}, 0xa)

15.600416691s ago: executing program 8 (id=4191):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x3ed, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x400c804}, 0x8)

15.521788157s ago: executing program 8 (id=4192):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000001200001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @rand_addr=0x64010102}, 0x2, 0x2}}, 0x80, 0x0}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b79, 0x1, @perf_bp={0x0, 0xb}, 0x14341, 0x2e, 0xfffffbff, 0x9, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x29, 0x32}}], 0x10}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)

1.017595051s ago: executing program 38 (id=4178):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x28, 0x1, 0x28, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8000, 0xfffffffe, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000210001000200000004000000fc020000000000000000000000000000fc02000000000000000000000000000000007fff000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x21c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000500)=""/116, 0x1a, 0x74, 0x0, 0x9}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x10)
r6 = socket$kcm(0x2, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

21.422043ms ago: executing program 39 (id=4192):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @rand_addr=0x64010102}, 0x2, 0x2}}, 0x80, 0x0}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b79, 0x1, @perf_bp={0x0, 0xb}, 0x14341, 0x2e, 0xfffffbff, 0x9, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x29, 0x32}}], 0x10}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)

0s ago: executing program 40 (id=4188):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x4000000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4)

kernel console output (not intermixed with test programs):

e type 29 has an invalid length.
[   72.937785][ T6475] netlink: 'syz.2.256': attribute type 29 has an invalid length.
[   72.957649][ T6475] netlink: 'syz.2.256': attribute type 29 has an invalid length.
[   73.507176][ T6493] syzkaller0: entered promiscuous mode
[   74.498894][ T6520] netlink: 'syz.0.275': attribute type 2 has an invalid length.
[   74.507540][ T6520] __nla_validate_parse: 4 callbacks suppressed
[   74.507551][ T6520] netlink: 110008 bytes leftover after parsing attributes in process `syz.0.275'.
[   74.508657][ T6522] netlink: 'syz.2.276': attribute type 10 has an invalid length.
[   74.515406][ T6522] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.276'.
[   74.790237][ T6542] : entered promiscuous mode
[   74.834277][ T6544] delete_channel: no stack
[   74.836912][ T6544] delete_channel: no stack
[   75.098200][ T6552] Illegal XDP return value 4294967274 on prog  (id 59) dev N/A, expect packet loss!
[   75.119764][ T6552] veth0_vlan: entered allmulticast mode
[   75.176593][ T6552] : renamed from vlan0
[   75.703906][ T6578] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.303'.
[   75.805790][ T6580] syzkaller0: entered promiscuous mode
[   75.808246][ T6580] syzkaller0: entered allmulticast mode
[   75.965661][ T6588] netlink: 'syz.1.306': attribute type 10 has an invalid length.
[   75.974814][ T6588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'.
[   77.030409][ T6588] dummy0: entered promiscuous mode
[   77.033485][ T6588] bridge0: port 3(dummy0) entered blocking state
[   77.035830][ T6588] bridge0: port 3(dummy0) entered disabled state
[   77.037966][ T6588] dummy0: entered allmulticast mode
[   77.042476][ T6588] bridge0: port 3(dummy0) entered blocking state
[   77.044567][ T6588] bridge0: port 3(dummy0) entered forwarding state
[   77.276442][ T6605] netlink: 'syz.0.313': attribute type 39 has an invalid length.
[   77.567503][ T6624] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   77.880124][ T6647] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.332'.
[   77.886997][ T6647] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.332'.
[   78.203427][ T6671] netlink: 'syz.0.342': attribute type 8 has an invalid length.
[   78.220990][ T6671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.342'.
[   78.741505][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'.
[   78.937031][ T6674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'.
[   78.940553][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'.
[   79.264716][ T6690] netlink: 'syz.1.351': attribute type 39 has an invalid length.
[   79.269584][ T6690] veth0_macvtap: left promiscuous mode
[   79.732713][ T5848] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   80.102771][ T6722] __nla_validate_parse: 5 callbacks suppressed
[   80.102849][ T6722] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.367'.
[   80.150490][ T6731] netlink: 'syz.2.367': attribute type 2 has an invalid length.
[   80.154622][ T6730] netlink: 'syz.0.371': attribute type 58 has an invalid length.
[   80.157915][ T6730] netlink: 144 bytes leftover after parsing attributes in process `syz.0.371'.
[   80.162098][ T6731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.367'.
[   80.432257][ T6757] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   80.520473][ T6764] pim6reg1: entered allmulticast mode
[   80.569833][ T6768] netlink: 160 bytes leftover after parsing attributes in process `syz.1.388'.
[   80.606003][ T6767] delete_channel: no stack
[   80.715734][ T6774] netlink: 'syz.1.390': attribute type 39 has an invalid length.
[   80.825479][ T6777] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.391'.
[   80.857049][ T6777] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.391'.
[   80.892530][ T6779] netlink: 'syz.1.392': attribute type 21 has an invalid length.
[   80.895718][ T6779] netlink: 156 bytes leftover after parsing attributes in process `syz.1.392'.
[   80.958526][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'.
[   81.156924][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'.
[   81.289239][   T10] cfg80211: failed to load regulatory.db
[   81.478016][ T6798] netlink: 'syz.2.401': attribute type 27 has an invalid length.
[   82.117869][ T6808] netlink: 'syz.2.403': attribute type 10 has an invalid length.
[   82.122655][ T6808] macvlan1: entered allmulticast mode
[   82.124866][ T6808] veth1_vlan: entered allmulticast mode
[   82.127337][ T6808] team0: Device macvlan1 is up. Set it down before adding it as a team port
[   82.263642][ T6820] netlink: 152 bytes leftover after parsing attributes in process `syz.2.411'.
[   82.268061][ T6820] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   82.294148][ T6818] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   82.541136][ T6834] validate_nla: 1 callbacks suppressed
[   82.541153][ T6834] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[   82.546229][ T5848] Bluetooth: hci0: Malformed HCI Event: 0x22
[   84.423105][ T6893] netlink: 'syz.0.445': attribute type 2 has an invalid length.
[   84.458708][ T6892] netlink: 'syz.1.444': attribute type 29 has an invalid length.
[   84.481757][ T6895] netlink: 'syz.1.444': attribute type 29 has an invalid length.
[   84.811712][ T6912] unsupported nlmsg_type 40
[   85.369275][ T6947] netlink: 'syz.0.470': attribute type 10 has an invalid length.
[   85.403110][ T6947] veth0_vlan: left promiscuous mode
[   85.408058][ T6947] veth0_vlan: entered promiscuous mode
[   85.419463][ T6947] team0: Device veth0_vlan failed to register rx_handler
[   85.543201][ T6953] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[   85.625768][ T6959] __nla_validate_parse: 4 callbacks suppressed
[   85.625792][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'.
[   85.736617][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[   85.985629][ T6979] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.485'.
[   86.569860][ T7015] netlink: 64 bytes leftover after parsing attributes in process `syz.2.499'.
[   86.953189][ T7054] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'.
[   86.962131][ T7054] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'.
[   86.965989][ T7054] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'.
[   87.163763][ T7071] netlink: 'syz.2.514': attribute type 10 has an invalid length.
[   87.166957][ T7071] netlink: 156 bytes leftover after parsing attributes in process `syz.2.514'.
[   87.704552][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.532'.
[   87.707423][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.532'.
[   88.156407][ T7150] syzkaller0: entered promiscuous mode
[   88.158629][ T7150] syzkaller0: entered allmulticast mode
[   88.657234][ T7161] xt_HMARK: proto mask must be zero with L3 mode
[   92.287019][ T7171] netlink: 'syz.0.558': attribute type 10 has an invalid length.
[   92.294602][ T7171] netlink: 168 bytes leftover after parsing attributes in process `syz.0.558'.
[   93.059708][ T7177] netlink: 92 bytes leftover after parsing attributes in process `syz.1.561'.
[   93.066393][ T7177] netlink: 92 bytes leftover after parsing attributes in process `syz.1.561'.
[   93.101409][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'.
[   93.166998][ T7187] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   93.191118][ T7187] netlink: 'syz.1.566': attribute type 3 has an invalid length.
[   93.197157][ T7187] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.566'.
[   93.314368][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[   93.357120][ T7200] netlink: 'syz.2.572': attribute type 10 has an invalid length.
[   93.380940][ T7200] batman_adv: batadv0: Adding interface: netdevsim0
[   93.383135][ T7200] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.395156][ T7200] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   93.460854][ T7208] netlink: 'syz.2.576': attribute type 29 has an invalid length.
[   93.465917][ T7208] netlink: 'syz.2.576': attribute type 29 has an invalid length.
[   93.475519][ T5848] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[   93.476101][ T7208] netlink: 500 bytes leftover after parsing attributes in process `syz.2.576'.
[   94.461772][ T7229] netlink: 'syz.0.584': attribute type 1 has an invalid length.
[   94.464421][ T7229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.505765][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'.
[   95.469526][   T33] audit: type=1107 audit(1755608951.940:2): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   95.531334][ T7250] netlink: 'syz.0.594': attribute type 1 has an invalid length.
[   95.569224][ T7250] netlink: 'syz.0.594': attribute type 2 has an invalid length.
[   95.616866][   T33] audit: type=1107 audit(1755608952.100:3): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[   95.616866][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[   95.616866][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[   95.616866][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[   95.617318][ T7261] netlink: 'syz.1.598': attribute type 1 has an invalid length.
[   95.723163][ T7260] delete_channel: no stack
[   95.754429][ T7270] netlink: 104 bytes leftover after parsing attributes in process `syz.2.604'.
[   95.825763][ T7277] netlink: 'syz.0.607': attribute type 2 has an invalid length.
[   95.969443][ T7287] debugfs: '!' already exists in 'ieee80211'
[   96.246935][ T7306] netlink: 2 bytes leftover after parsing attributes in process `syz.2.619'.
[   96.293683][ T7301] Dead loop on virtual device ip6_vti0, fix it urgently!
[   96.308570][ T7301] Dead loop on virtual device ip6_vti0, fix it urgently!
[   96.314588][ T7301] Dead loop on virtual device ip6_vti0, fix it urgently!
[   96.476997][ T7321] bpf: Bad value for 'mode'
[   97.453624][ T7349] validate_nla: 3 callbacks suppressed
[   97.453637][ T7349] netlink: 'syz.2.639': attribute type 3 has an invalid length.
[   97.859370][ T7372] lo speed is unknown, defaulting to 1000
[   97.863527][ T7372] lo speed is unknown, defaulting to 1000
[   97.866565][ T7372] lo speed is unknown, defaulting to 1000
[   97.971634][ T7372] infiniband syz1: set active
[   97.973348][ T7372] infiniband syz1: added lo
[   97.979616][ T5895] lo speed is unknown, defaulting to 1000
[   98.002384][ T7372] RDS/IB: syz1: added
[   98.004096][ T7372] smc: adding ib device syz1 with port count 1
[   98.006136][ T7372] smc:    ib device syz1 port 1 has pnetid 
[   98.009131][ T5895] lo speed is unknown, defaulting to 1000
[   98.012826][ T7372] lo speed is unknown, defaulting to 1000
[   98.215603][ T7372] lo speed is unknown, defaulting to 1000
[   98.289813][ T7387] delete_channel: no stack
[   98.475460][ T7372] lo speed is unknown, defaulting to 1000
[   99.264009][ T7425] netlink: 'syz.1.671': attribute type 3 has an invalid length.
[   99.345901][ T7433] netlink: 'syz.1.675': attribute type 3 has an invalid length.
[   99.348806][ T7433] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.675'.
[   99.381781][ T7432] netlink: 'syz.2.674': attribute type 10 has an invalid length.
[   99.445688][ T7432] team0: Port device geneve1 added
[   99.506185][ T7441] netlink: 'syz.1.679': attribute type 10 has an invalid length.
[   99.813700][ T7463] hsr0: entered promiscuous mode
[   99.901776][ T7465] netlink: 'syz.2.689': attribute type 29 has an invalid length.
[  101.486318][ T7502] sctp: [Deprecated]: syz.2.704 (pid 7502) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.486318][ T7502] Use struct sctp_sack_info instead
[  102.296493][ T7508] netlink: 'syz.1.707': attribute type 4 has an invalid length.
[  102.360477][ T7514] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.710'.
[  102.473308][ T7519] netlink: 'syz.2.712': attribute type 10 has an invalid length.
[  102.476284][ T7519] netlink: 2 bytes leftover after parsing attributes in process `syz.2.712'.
[  102.483696][ T7519] bond0: entered promiscuous mode
[  102.491127][ T7519] bond_slave_0: entered promiscuous mode
[  102.495174][ T7519] bond_slave_1: entered promiscuous mode
[  102.503397][ T7519] bridge0: port 3(bond0) entered blocking state
[  102.508646][ T7519] bridge0: port 3(bond0) entered disabled state
[  102.526602][ T7519] bond0: entered allmulticast mode
[  102.535875][ T7519] bond_slave_0: entered allmulticast mode
[  102.538554][ T7519] bond_slave_1: entered allmulticast mode
[  102.559460][ T7522] netlink: 'syz.2.712': attribute type 4 has an invalid length.
[  102.568570][ T7522] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.712'.
[  102.577549][ T7519] bridge0: port 3(bond0) entered blocking state
[  102.580565][ T7519] bridge0: port 3(bond0) entered forwarding state
[  103.830599][ T5848] Bluetooth: hci2: ISO packet too small
[  105.052965][ T7580] openvswitch: netlink: IP tunnel dst address not specified
[  105.099162][ T7581] netlink: 92 bytes leftover after parsing attributes in process `syz.2.738'.
[  105.110439][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'.
[  105.118106][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.738'.
[  105.157500][ T7586] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.738'.
[  105.174336][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'.
[  105.219885][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.738'.
[  105.494150][ T7596] netlink: 830 bytes leftover after parsing attributes in process `syz.1.745'.
[  105.545553][ T7593] syzkaller0: entered promiscuous mode
[  105.547284][ T7593] syzkaller0: entered allmulticast mode
[  107.015103][ T7623] netlink: 68 bytes leftover after parsing attributes in process `syz.1.757'.
[  107.425385][ T7658] netlink: 64019 bytes leftover after parsing attributes in process `syz.0.775'.
[  107.469208][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'.
[  107.500415][ T5848] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  107.828105][ T7687] netlink: 'syz.2.789': attribute type 3 has an invalid length.
[  109.027079][ T7683] lo speed is unknown, defaulting to 1000
[  109.476662][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.568105][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.692632][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.748658][   T12] batman_adv: batadv0: Removing interface: netdevsim0
[  109.754454][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.868032][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.873044][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.879690][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.886869][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.890242][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.923805][   T12] bond0: left allmulticast mode
[  109.925924][   T12] bond_slave_0: left allmulticast mode
[  109.927631][   T12] bond_slave_1: left allmulticast mode
[  109.930320][   T12] bridge0: port 3(bond0) entered disabled state
[  109.967291][   T12] bridge_slave_1: left allmulticast mode
[  109.969043][   T12] bridge_slave_1: left promiscuous mode
[  109.978880][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.002340][ T7749] netlink: 'syz.0.816': attribute type 5 has an invalid length.
[  110.008437][   T12] bridge_slave_0: left allmulticast mode
[  110.021151][   T12] bridge_slave_0: left promiscuous mode
[  110.023622][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.186750][ T7759] netlink: 'syz.1.821': attribute type 21 has an invalid length.
[  110.189552][ T7759] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.352734][   T12] team0: Port device geneve1 removed
[  110.395191][ T7766] netlink: 'syz.1.823': attribute type 3 has an invalid length.
[  110.399444][ T7766] __nla_validate_parse: 7 callbacks suppressed
[  110.399456][ T7766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.823'.
[  110.547270][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.552027][   T12] bond_slave_0: left promiscuous mode
[  110.566700][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.580515][   T12] bond_slave_1: left promiscuous mode
[  110.595164][   T12] bond0 (unregistering): Released all slaves
[  110.637757][ T7741] lo speed is unknown, defaulting to 1000
[  110.670951][   T12] : left promiscuous mode
[  110.724808][ T7783] netlink: 'syz.0.829': attribute type 10 has an invalid length.
[  110.728396][ T7783] macvlan0: entered promiscuous mode
[  110.730242][ T7783] macvlan0: entered allmulticast mode
[  110.742499][ T7783] veth1_vlan: entered allmulticast mode
[  110.854840][ T7789] netlink: 388 bytes leftover after parsing attributes in process `syz.1.831'.
[  111.467454][   T12] hsr_slave_0: left promiscuous mode
[  111.480842][   T12] hsr_slave_1: left promiscuous mode
[  111.488399][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.500288][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.513581][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.521594][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.557775][   T12] veth1_macvtap: left promiscuous mode
[  111.562062][   T12] veth0_macvtap: left promiscuous mode
[  111.566867][   T12] veth1_vlan: left allmulticast mode
[  111.570545][   T12] veth1_vlan: left promiscuous mode
[  111.922665][ T5848] Bluetooth: hci0: command tx timeout
[  112.153866][ T7836] netlink: 'syz.0.842': attribute type 21 has an invalid length.
[  112.156689][ T7836] netlink: 14045 bytes leftover after parsing attributes in process `syz.0.842'.
[  112.266478][   T12] team0 (unregistering): Port device team_slave_1 removed
[  112.306756][   T12] team0 (unregistering): Port device team_slave_0 removed
[  112.636862][ T7840] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.844'.
[  112.705209][ T7843] netlink: 204 bytes leftover after parsing attributes in process `syz.1.846'.
[  112.746859][ T7741] chnl_net:caif_netlink_parms(): no params data found
[  112.857160][ T7852] veth0_vlan: left promiscuous mode
[  112.859394][ T7852] veth0_vlan: entered promiscuous mode
[  112.863628][ T7852] veth0_vlan: entered allmulticast mode
[  112.999577][ T7864] netlink: 'syz.1.851': attribute type 1 has an invalid length.
[  113.012224][ T7864] netlink: 124 bytes leftover after parsing attributes in process `syz.1.851'.
[  113.015041][ T7864] netlink: 125920 bytes leftover after parsing attributes in process `syz.1.851'.
[  113.017832][ T7864] netlink: 'syz.1.851': attribute type 1 has an invalid length.
[  113.020144][ T7864] netlink: 124 bytes leftover after parsing attributes in process `syz.1.851'.
[  113.029613][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.032529][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.035234][ T7741] bridge_slave_0: entered allmulticast mode
[  113.038013][ T7741] bridge_slave_0: entered promiscuous mode
[  113.046067][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.049019][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.054660][ T7741] bridge_slave_1: entered allmulticast mode
[  113.057396][ T7741] bridge_slave_1: entered promiscuous mode
[  113.093479][ T7741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.100501][ T7741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.129236][ T7741] team0: Port device team_slave_0 added
[  113.133081][ T7741] team0: Port device team_slave_1 added
[  113.155787][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.158150][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.167929][ T7741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.174091][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.176307][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.193952][ T7741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.286758][ T7741] hsr_slave_0: entered promiscuous mode
[  113.302515][ T7741] hsr_slave_1: entered promiscuous mode
[  114.051964][ T5848] Bluetooth: hci0: command tx timeout
[  114.368049][ T7741] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  114.413584][ T7741] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  114.425673][ T7741] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  114.684797][ T7741] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  114.828550][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.851196][ T7741] 8021q: adding VLAN 0 to HW filter on device team0
[  114.854621][ T7912] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.862'.
[  114.867482][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.870597][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.883521][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.886701][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.179359][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.272692][ T7741] veth0_vlan: entered promiscuous mode
[  115.311999][ T7741] veth1_vlan: entered promiscuous mode
[  115.368527][ T7741] veth0_macvtap: entered promiscuous mode
[  115.375262][ T7741] veth1_macvtap: entered promiscuous mode
[  115.383017][ T7937] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.868'.
[  115.406301][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.416795][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.447280][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.480820][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.483766][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.486919][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.556436][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.558966][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.609904][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.625847][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.109963][ T5848] Bluetooth: hci0: command tx timeout
[  116.245738][ T7979] netlink: 176 bytes leftover after parsing attributes in process `syz.0.881'.
[  117.367357][ T8014] netlink: 'syz.3.886': attribute type 21 has an invalid length.
[  117.370270][ T8014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.886'.
[  117.375200][ T8014] netlink: 'syz.3.886': attribute type 1 has an invalid length.
[  117.390083][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'.
[  117.396266][ T8014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.886'.
[  117.540504][ T8031] netlink: 188 bytes leftover after parsing attributes in process `syz.0.901'.
[  117.886689][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'.
[  117.956871][ T8053] netlink: 'syz.3.909': attribute type 4 has an invalid length.
[  117.959403][ T8053] netlink: 'syz.3.909': attribute type 11 has an invalid length.
[  117.963435][ T8053] netlink: 196896 bytes leftover after parsing attributes in process `syz.3.909'.
[  118.064758][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[  118.068783][ T8062] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  118.073221][ T8062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.162286][ T5848] Bluetooth: hci0: command tx timeout
[  118.982959][ T8078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.920'.
[  119.064982][ T8085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.923'.
[  119.144934][ T8091] netlink: 'syz.3.926': attribute type 2 has an invalid length.
[  119.148170][ T8091] nbd: must specify at least one socket
[  119.269950][ T8095] netlink: 'syz.1.928': attribute type 1 has an invalid length.
[  119.440487][ T8107] netlink: 'syz.3.933': attribute type 13 has an invalid length.
[  119.772711][ T8113] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.776952][ T8113] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.014774][ T8095] netlink: 'syz.1.928': attribute type 3 has an invalid length.
[  120.090119][ T8116] netlink: 'syz.1.937': attribute type 21 has an invalid length.
[  120.306865][ T8129] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  120.446503][ T8144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.587053][ T8176] __nla_validate_parse: 5 callbacks suppressed
[  121.587071][ T8176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.964'.
[  121.834156][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'.
[  122.088504][ T8205] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  122.588647][ T8230] syz.3.988 uses obsolete (PF_INET,SOCK_PACKET)
[  125.703248][ T8270] sit0: entered allmulticast mode
[  125.715286][ T8273] sit0: entered promiscuous mode
[  125.824206][ T8279] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  125.858281][ T8281] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  125.927177][ T8286] netlink: 'syz.3.1004': attribute type 1 has an invalid length.
[  126.258408][ T8310] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1015'.
[  126.335498][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'.
[  126.600361][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'.
[  127.003414][ T8354] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1036'.
[  127.418950][ T8370] netlink: 'syz.0.1041': attribute type 10 has an invalid length.
[  127.581655][ T8370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'.
[  128.063589][ T8370] dummy0: entered promiscuous mode
[  128.066385][ T8370] bridge0: port 3(dummy0) entered blocking state
[  128.068683][ T8370] bridge0: port 3(dummy0) entered disabled state
[  128.073434][ T8370] dummy0: entered allmulticast mode
[  128.089588][ T8370] bridge0: port 3(dummy0) entered blocking state
[  128.091917][ T8370] bridge0: port 3(dummy0) entered forwarding state
[  128.228677][ T8385] pim6reg1: entered allmulticast mode
[  128.253168][ T8392] netlink: 'syz.0.1048': attribute type 13 has an invalid length.
[  128.738961][ T8392] bridge0: port 3(dummy0) entered disabled state
[  128.742090][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.746655][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.275743][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.290202][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.344610][ T8392] veth1_vlan: left allmulticast mode
[  129.433732][   T10] lo speed is unknown, defaulting to 1000
[  129.435582][   T10] syz1: Port: 1 Link DOWN
[  129.437275][   T10] lo speed is unknown, defaulting to 1000
[  129.473234][ T8399] bridge_slave_1: left allmulticast mode
[  129.475735][ T8399] bridge_slave_1: left promiscuous mode
[  129.478388][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.489221][ T8399] bridge_slave_0: left allmulticast mode
[  129.491240][ T8399] bridge_slave_0: left promiscuous mode
[  129.493113][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.575569][ T5894] syz0: Port: 1 Link DOWN
[  129.578257][   T12] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[  129.585282][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.588460][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.608869][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.635830][ T8413] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1054'.
[  130.199167][ T8462] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1069'.
[  130.464081][ T8476] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1071'.
[  131.090428][ T8507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1079'.
[  131.100433][ T8502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1079'.
[  131.131833][ T8509] netlink: 'syz.3.1081': attribute type 10 has an invalid length.
[  131.134266][ T8509] netlink: 'syz.3.1081': attribute type 19 has an invalid length.
[  131.136783][ T8509] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1081'.
[  131.162950][ T8507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1079'.
[  131.605969][ T8536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1090'.
[  132.157243][ T8560] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1101'.
[  132.373621][ T8560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.386364][ T8560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.403416][ T8560] bond0 (unregistering): Released all slaves
[  132.484110][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.486871][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.108772][ T8606] netlink: 'syz.3.1119': attribute type 27 has an invalid length.
[  133.112176][ T8606] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1119'.
[  133.337087][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'.
[  133.342144][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'.
[  133.346681][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'.
[  133.476473][ T8630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'.
[  133.490989][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1131'.
[  133.661220][ T8644] netlink: zone id is out of range
[  133.663350][ T8644] netlink: zone id is out of range
[  133.665429][ T8644] netlink: zone id is out of range
[  133.667500][ T8644] netlink: zone id is out of range
[  133.669581][ T8644] netlink: zone id is out of range
[  133.679152][ T8644] netlink: zone id is out of range
[  133.685329][ T8644] netlink: zone id is out of range
[  133.690502][ T8644] netlink: zone id is out of range
[  133.695503][ T8644] netlink: zone id is out of range
[  133.700267][ T8644] netlink: zone id is out of range
[  133.951905][ T8657] syzkaller0: entered promiscuous mode
[  133.953895][ T8657] syzkaller0: entered allmulticast mode
[  134.209438][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'.
[  134.375831][ T8680] can: request_module (can-proto-0) failed.
[  135.509250][ T8675] : entered promiscuous mode
[  137.390299][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'.
[  137.515938][ T8787] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1204'.
[  137.525773][ T8787] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1204'.
[  137.617815][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'.
[  137.795899][ T8805] netlink: 'syz.1.1213': attribute type 32 has an invalid length.
[  137.799125][ T8805] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1213'.
[  137.873181][ T8812] netlink: 'syz.1.1215': attribute type 21 has an invalid length.
[  137.876543][ T8812] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1215'.
[  139.039164][ T8863] netlink: 'syz.3.1238': attribute type 10 has an invalid length.
[  139.044916][ T8863] vlan0: entered allmulticast mode
[  139.047452][ T8863] veth0_vlan: entered allmulticast mode
[  139.060580][ T8863] team0: Port device vlan0 added
[  139.428777][ T8876] netlink: 'syz.3.1244': attribute type 29 has an invalid length.
[  139.433746][ T8876] netlink: 'syz.3.1244': attribute type 29 has an invalid length.
[  139.437113][ T8876] netlink: 'syz.3.1244': attribute type 29 has an invalid length.
[  139.950835][ T8898] lo speed is unknown, defaulting to 1000
[  140.504494][ T8927] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1264'.
[  140.553368][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'.
[  140.597566][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'.
[  142.892842][ T9000] net_ratelimit: 78 callbacks suppressed
[  142.892854][ T9000] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  142.987842][ T9010] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  143.350522][ T9033] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1313'.
[  143.456352][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  143.513744][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1320'.
[  143.539950][ T9049] lo speed is unknown, defaulting to 1000
[  143.608234][ T9056] netlink: 948 bytes leftover after parsing attributes in process `syz.3.1324'.
[  143.624703][ T5848] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  143.627190][ T5848] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  145.789536][ T9092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.792622][ T9092] IPv6: NLM_F_CREATE should be set when creating new route
[  145.795421][ T9092] IPv6: NLM_F_CREATE should be set when creating new route
[  145.798305][ T9092] IPv6: NLM_F_CREATE should be set when creating new route
[  145.903599][ T5848] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  146.187528][ T9117] netlink: 'syz.1.1351': attribute type 25 has an invalid length.
[  146.193314][ T9117] netlink: 'syz.1.1351': attribute type 1 has an invalid length.
[  146.197325][ T9117] bridge0: port 1(bridge_slave_0) entered learning state
[  146.356981][ T9119] lo speed is unknown, defaulting to 1000
[  146.609760][ T9129] netlink: 'syz.3.1356': attribute type 19 has an invalid length.
[  146.760574][ T9144] netlink: 'syz.0.1362': attribute type 4 has an invalid length.
[  146.834802][ T9153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.089103][ T9165] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1372'.
[  147.232163][ T5848] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  147.938581][ T9192] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1385'.
[  147.978470][ T9194] netlink: 'syz.1.1386': attribute type 33 has an invalid length.
[  147.981548][ T9194] netlink: 'syz.1.1386': attribute type 3 has an invalid length.
[  147.984081][ T9194] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1386'.
[  148.715045][ T9211] netlink: 'syz.0.1394': attribute type 10 has an invalid length.
[  148.717574][ T9211] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1394'.
[  148.720568][ T9211] bond0: entered promiscuous mode
[  148.723848][ T9211] bond_slave_0: entered promiscuous mode
[  148.728586][ T9211] bond_slave_1: entered promiscuous mode
[  148.734127][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.736725][ T9211] bridge0: port 4(bond0) entered blocking state
[  148.740327][ T9211] bridge0: port 4(bond0) entered disabled state
[  148.742713][ T9211] bond0: entered allmulticast mode
[  148.744402][ T9211] bond_slave_0: entered allmulticast mode
[  148.746247][ T9211] bond_slave_1: entered allmulticast mode
[  149.436628][ T9244] netlink: 'syz.3.1409': attribute type 21 has an invalid length.
[  149.441780][ T9244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1409'.
[  150.592825][ T9316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1444'.
[  151.176968][ T9355] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  151.294411][ T9369] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1468'.
[  151.298277][ T9369] netlink: zone id is out of range
[  151.314823][ T9369] netlink: zone id is out of range
[  151.317039][ T9369] netlink: zone id is out of range
[  151.319206][ T9369] netlink: zone id is out of range
[  151.328437][ T9369] netlink: zone id is out of range
[  151.330320][ T9369] netlink: zone id is out of range
[  151.337103][ T9369] netlink: zone id is out of range
[  151.338897][ T9369] netlink: zone id is out of range
[  151.341128][ T9369] netlink: zone id is out of range
[  151.343247][ T9369] netlink: zone id is out of range
[  152.265668][ T9395] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1478'.
[  153.267644][ T9430] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1494'.
[  154.738089][ T9475] netlink: 'syz.3.1516': attribute type 10 has an invalid length.
[  154.766679][ T9475] team0: Port device geneve1 added
[  154.891023][ T5848] Bluetooth: hci2: adv larger than maximum supported
[  154.891061][ T5848] Bluetooth: hci2: Unknown advertising packet type: 0x73
[  155.039558][ T5848] Bluetooth: hci0: Malformed LE Event: 0x0d
[  155.478774][ T9524] netlink: 'syz.1.1540': attribute type 14 has an invalid length.
[  155.482096][ T9524] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1540'.
[  155.663334][ T9533] netlink: 'syz.3.1544': attribute type 21 has an invalid length.
[  155.665886][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'.
[  155.703175][ T9536] netlink: 'syz.3.1545': attribute type 16 has an invalid length.
[  155.706301][ T9536] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1545'.
[  156.097574][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[  156.768643][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'.
[  157.557655][ T9570] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1561'.
[  157.562687][ T9570] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1561'.
[  157.814503][ T9590] netlink: 'syz.3.1571': attribute type 46 has an invalid length.
[  157.957106][ T9601] netlink: 'syz.1.1575': attribute type 21 has an invalid length.
[  157.962696][ T9601] netlink: 14532 bytes leftover after parsing attributes in process `syz.1.1575'.
[  157.973833][ T9598] syzkaller0: entered promiscuous mode
[  157.975638][ T9598] syzkaller0: entered allmulticast mode
[  159.754037][ T9645] net_ratelimit: 77 callbacks suppressed
[  159.754135][ T9645] openvswitch: netlink: Duplicate or invalid key (type 0).
[  159.758529][ T9645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.950381][ T9653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'.
[  160.079648][ T9658] netlink: 'syz.1.1601': attribute type 10 has an invalid length.
[  160.101810][ T9658] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1601'.
[  160.460720][ T5848] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  160.708155][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1609'.
[  163.337103][ T5848] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[  163.938786][ T9741] netlink: 'syz.3.1638': attribute type 46 has an invalid length.
[  164.010143][ T9743] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1639'.
[  164.278953][ T9751] netlink: 'syz.3.1643': attribute type 11 has an invalid length.
[  164.282476][ T9751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1643'.
[  164.287445][ T9751] netlink: 'syz.3.1643': attribute type 11 has an invalid length.
[  164.294162][ T9751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1643'.
[  164.380134][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.796069][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'.
[  165.014019][ T9780] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.272441][ T9793] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1663'.
[  165.387708][ T9805] netlink: 'syz.0.1668': attribute type 29 has an invalid length.
[  165.393813][ T9805] netlink: 'syz.0.1668': attribute type 29 has an invalid length.
[  165.401208][ T9805] netlink: 'syz.0.1668': attribute type 29 has an invalid length.
[  165.406604][ T9808] netlink: 'syz.1.1669': attribute type 1 has an invalid length.
[  165.438732][ T9812] netlink: 'syz.1.1671': attribute type 29 has an invalid length.
[  165.446084][ T9812] netlink: 'syz.1.1671': attribute type 29 has an invalid length.
[  165.449235][ T9812] netlink: 'syz.1.1671': attribute type 29 has an invalid length.
[  165.817780][ T9844] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1686'.
[  165.896393][ T9848] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1688'.
[  165.899462][ T9848] netlink: 'syz.1.1688': attribute type 1 has an invalid length.
[  166.478347][ T9863] nftables ruleset with unbound chain
[  168.802150][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'.
[  168.805063][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'.
[  168.807870][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  169.128549][ T9959] netlink: 'syz.3.1735': attribute type 3 has an invalid length.
[  169.139830][ T9959] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1735'.
[  169.406838][ T9971] netlink: 'syz.1.1744': attribute type 21 has an invalid length.
[  169.748090][ T9997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1755'.
[  170.056199][T10004] openvswitch: netlink: IPv4 tunnel dst address is zero
[  170.106626][T10007] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1759'.
[  170.761339][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'.
[  170.767328][T10026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1767'.
[  171.243892][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'.
[  171.249997][T10054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1778'.
[  171.553615][T10058] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1781'.
[  171.657998][T10064] 0: renamed from bond_slave_1
[  171.724340][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1785'.
[  171.728367][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1785'.
[  171.767100][T10068] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1786'.
[  171.945945][T10080] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  171.998201][T10084] validate_nla: 1 callbacks suppressed
[  171.998219][T10084] netlink: 'syz.3.1794': attribute type 10 has an invalid length.
[  172.012319][T10084] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1794'.
[  172.016897][T10084] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  172.405487][T10098] netlink: 'syz.0.1800': attribute type 13 has an invalid length.
[  172.408689][T10098] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1800'.
[  172.409113][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'.
[  172.842503][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'.
[  173.846235][T10147] netlink: 'syz.0.1822': attribute type 2 has an invalid length.
[  174.407494][T10162] netlink: 'syz.1.1827': attribute type 21 has an invalid length.
[  174.411069][T10162] netlink: 'syz.1.1827': attribute type 1 has an invalid length.
[  174.486864][T10172] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  174.593431][T10174] bridge0: port 3(dummy0) entered disabled state
[  174.595949][T10174] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.600027][T10174] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.604847][T10174] bridge0: entered allmulticast mode
[  175.488917][T10228] netlink: 'syz.3.1860': attribute type 3 has an invalid length.
[  175.625536][T10243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.062978][T10263] macvtap0: refused to change device tx_queue_len
[  176.201596][T10275] netlink: 'syz.1.1882': attribute type 25 has an invalid length.
[  176.427205][T10288] netlink: 'syz.0.1885': attribute type 9 has an invalid length.
[  176.429776][T10288] __nla_validate_parse: 5 callbacks suppressed
[  176.429852][T10288] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1885'.
[  176.525889][T10302] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1886'.
[  176.529651][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'.
[  176.533133][T10304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.671642][T10318] netdevsim netdevsim1 : renamed from netdevsim0
[  176.864713][T10339] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1904'.
[  177.297520][T10374] smc: removing ib device syz1
[  177.364827][   T54] Bluetooth: hci2: Opcode 0x206a failed: -110
[  177.367090][ T5848] Bluetooth: hci2: command 0x206a tx timeout
[  177.437918][T10383] netlink: 'syz.3.1924': attribute type 6 has an invalid length.
[  177.664778][T10390] C: renamed from team_slave_0
[  177.671743][T10390] netlink: 'syz.3.1928': attribute type 8 has an invalid length.
[  177.679654][T10390] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  177.952078][T10397] sctp: [Deprecated]: syz.1.1930 (pid 10397) Use of int in max_burst socket option deprecated.
[  177.952078][T10397] Use struct sctp_assoc_value instead
[  178.071327][T10403] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1933'.
[  178.074506][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1933'.
[  178.180470][T10410] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1936'.
[  178.608268][T10438] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1949'.
[  178.916960][T10462] netlink: 'syz.3.1959': attribute type 4 has an invalid length.
[  179.052856][T10476] netlink: 'syz.0.1967': attribute type 5 has an invalid length.
[  179.065513][T10476] : entered promiscuous mode
[  179.314653][T10500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1978'.
[  179.354634][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'.
[  179.554092][T10518] veth1_macvtap: left promiscuous mode
[  179.556126][T10518] macsec0: entered allmulticast mode
[  180.241984][T10558] netlink: 'syz.3.2000': attribute type 2 has an invalid length.
[  180.244526][T10558] netlink: 'syz.3.2000': attribute type 3 has an invalid length.
[  180.415554][T10571] netlink: 'syz.3.2010': attribute type 10 has an invalid length.
[  180.647102][T10436] Bluetooth: hci2: command 0x206a tx timeout
[  180.649710][T10436] Bluetooth: hci1: command 0x0406 tx timeout
[  181.007697][   T54] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  181.077598][T10618] netlink: 'syz.0.2032': attribute type 10 has an invalid length.
[  181.115096][T10618] team0: Port device wlan1 added
[  182.669567][T10681] __nla_validate_parse: 14 callbacks suppressed
[  182.669582][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'.
[  182.734246][T10683] netlink: 'syz.1.2061': attribute type 10 has an invalid length.
[  182.807935][T10683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.814133][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'.
[  182.820542][T10683] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  182.834414][T10686] bond0: entered promiscuous mode
[  182.836256][T10686] batadv0: entered promiscuous mode
[  182.871374][T10683] syz.1.2061 (10683) used greatest stack depth: 19264 bytes left
[  182.991770][T10701] netlink: 'syz.3.2070': attribute type 13 has an invalid length.
[  183.105924][T10702] syzkaller0: entered promiscuous mode
[  183.108612][T10702] syzkaller0: entered allmulticast mode
[  183.127394][T10708] delete_channel: no stack
[  183.322545][T10727] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.2082'.
[  183.434443][T10737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.448712][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'.
[  183.468569][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'.
[  183.486333][T10742] netlink: 'syz.3.2089': attribute type 1 has an invalid length.
[  183.488959][T10742] netlink: 'syz.3.2089': attribute type 4 has an invalid length.
[  183.491905][T10742] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2089'.
[  183.644098][T10752] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2093'.
[  183.702641][T10760] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2098'.
[  184.323671][T10773] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2104'.
[  184.954484][T10797] netlink: 'syz.1.2115': attribute type 5 has an invalid length.
[  185.065900][T10808] netlink: 'syz.0.2120': attribute type 21 has an invalid length.
[  185.084773][T10808] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2120'.
[  185.161949][T10812] macsec0: entered promiscuous mode
[  185.164209][T10812] macsec0: left allmulticast mode
[  185.258974][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  185.259359][   T54] Bluetooth: hci2: connection err: -111
[  185.266125][T10818] @: renamed from bond_slave_0
[  185.343379][T10826] netlink: 'syz.1.2128': attribute type 1 has an invalid length.
[  185.479909][T10836] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  185.569210][T10839] netlink: 'syz.1.2135': attribute type 12 has an invalid length.
[  186.376147][T10891] netlink: 'syz.1.2160': attribute type 2 has an invalid length.
[  186.379308][T10891] netlink: 'syz.1.2160': attribute type 1 has an invalid length.
[  189.377118][T10917] __nla_validate_parse: 8 callbacks suppressed
[  189.377136][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2172'.
[  189.532993][T10927] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  189.536257][T10927] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  189.613209][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'.
[  189.616350][T10935] validate_nla: 1 callbacks suppressed
[  189.616361][T10935] netlink: 'syz.3.2180': attribute type 3 has an invalid length.
[  189.629164][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.637159][T10931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.645060][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.658086][T10931] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.732532][T10931] bond0: (slave batadv0): Releasing backup interface
[  189.736538][T10931] batadv0 (unregistering): left promiscuous mode
[  189.896651][T10952] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2188'.
[  190.124269][T10959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.131029][T10959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  191.663956][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2196'.
[  191.799139][T10976] netlink: 'syz.3.2198': attribute type 10 has an invalid length.
[  193.693359][T10980] netlink: 'syz.1.2200': attribute type 2 has an invalid length.
[  193.696091][T10980] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2200'.
[  194.488634][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.492520][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.867070][T10984] netlink: 'syz.1.2202': attribute type 13 has an invalid length.
[  194.916821][T10986] netlink: 'syz.1.2203': attribute type 21 has an invalid length.
[  196.838277][T11015] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  196.889081][T11018] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2217'.
[  196.893740][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'.
[  200.203516][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3711651850 wd_nsec: 3711651813
[  202.714967][   T23] sched: DL replenish lagged too much
[  203.013132][T11023] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  203.016316][T11023] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2219'.
[  203.142999][T11032] netlink: 'syz.1.2223': attribute type 10 has an invalid length.
[  204.200916][T11032] syz.1.2223 (11032) used greatest stack depth: 17528 bytes left
[  204.284542][T11043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2225'.
[  204.412795][T11050] netlink: 'syz.1.2227': attribute type 2 has an invalid length.
[  204.416284][T11050] netlink: 'syz.1.2227': attribute type 8 has an invalid length.
[  204.419588][T11050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2227'.
[  205.262983][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  205.266914][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  205.270220][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  205.276257][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  205.278833][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  205.402807][T11057] chnl_net:caif_netlink_parms(): no params data found
[  205.637997][T11068] netlink: 202232 bytes leftover after parsing attributes in process `syz.3.2231'.
[  205.643898][T11068] netlink: zone id is out of range
[  205.646297][T11068] netlink: zone id is out of range
[  206.115792][T11057] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.128733][T11057] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.135299][T11057] bridge_slave_0: entered allmulticast mode
[  206.145365][T11057] bridge_slave_0: entered promiscuous mode
[  206.154460][T11057] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.164146][T11057] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.166681][T11057] bridge_slave_1: entered allmulticast mode
[  206.179724][T11057] bridge_slave_1: entered promiscuous mode
[  206.224790][T11057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.238321][T11057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.265968][T11057] team0: Port device team_slave_0 added
[  206.275947][T11057] team0: Port device team_slave_1 added
[  206.298078][T11057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.300197][T11057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.313839][T11057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.326288][T11057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.329906][T11057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.351001][T11057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.478008][T11057] hsr_slave_0: entered promiscuous mode
[  206.493110][T11057] hsr_slave_1: entered promiscuous mode
[  206.496095][T11057] debugfs: 'hsr0' already exists in 'hsr'
[  206.498467][T11057] Cannot create hsr debugfs directory
[  206.864016][T11057] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  206.884274][T11057] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  206.901962][T11057] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  206.914968][T11057] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  207.023399][T11057] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.038173][T11057] 8021q: adding VLAN 0 to HW filter on device team0
[  207.048984][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.051426][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.066162][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.068514][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.187392][   T54] Bluetooth: hci1: adv larger than maximum supported
[  207.187459][   T54] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  207.190371][   T54] Bluetooth: hci1: Malformed LE Event: 0x0d
[  207.266597][T11057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.360893][   T54] Bluetooth: hci3: command tx timeout
[  207.508318][T11057] veth0_vlan: entered promiscuous mode
[  207.515314][T11057] veth1_vlan: entered promiscuous mode
[  207.517306][T11130] netlink: 'syz.1.2252': attribute type 2 has an invalid length.
[  207.521925][T11130] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2252'.
[  207.529879][T11130] netlink: 'syz.1.2252': attribute type 2 has an invalid length.
[  207.537545][T11130] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2252'.
[  207.549525][T11057] veth0_macvtap: entered promiscuous mode
[  207.554901][T11057] veth1_macvtap: entered promiscuous mode
[  207.569247][T11057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.578230][T11057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.578391][T11132] netlink: 'syz.1.2253': attribute type 21 has an invalid length.
[  207.587319][ T5723] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.590318][T11132] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2253'.
[  207.591387][ T5723] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.632539][ T5723] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.635699][ T5723] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.749515][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.752349][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.793107][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.796062][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.280624][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.337548][T11154] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2262'.
[  208.445654][T11160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2265'.
[  209.271127][T11195] netlink: 'syz.4.2280': attribute type 1 has an invalid length.
[  209.442535][   T54] Bluetooth: hci3: command tx timeout
[  209.554823][T11207] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2287'.
[  209.759163][T11218] netlink: 'syz.1.2289': attribute type 5 has an invalid length.
[  209.770757][T11218] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2289'.
[  209.778384][T11219] netlink: 'syz.4.2285': attribute type 40 has an invalid length.
[  210.029005][T11219] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.309693][   T54] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6
[  210.524622][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'.
[  210.649209][T11249] netlink: 'syz.3.2301': attribute type 2 has an invalid length.
[  210.682783][T11249] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.2301'.
[  210.898270][T11265] netlink: 'syz.4.2309': attribute type 10 has an invalid length.
[  210.949145][T11268] netlink: 'syz.1.2310': attribute type 4 has an invalid length.
[  210.949232][T11268] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2310'.
[  211.334391][T11265] team0: Device ipvlan1 failed to register rx_handler
[  211.521878][   T54] Bluetooth: hci3: command tx timeout
[  211.617181][T11285] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2318'.
[  212.279134][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2334'.
[  212.285446][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2334'.
[  212.346138][T11322] netlink: 'syz.4.2335': attribute type 29 has an invalid length.
[  212.349574][T11322] netlink: 'syz.4.2335': attribute type 29 has an invalid length.
[  212.807187][T11353] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  213.670944][   T54] Bluetooth: hci3: command tx timeout
[  213.693296][T11387] netlink: 'syz.3.2364': attribute type 21 has an invalid length.
[  213.709821][T11387] __nla_validate_parse: 2 callbacks suppressed
[  213.709843][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2364'.
[  213.777889][T11393] netlink: 'syz.1.2366': attribute type 2 has an invalid length.
[  213.789695][T11393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2366'.
[  213.792862][   T54] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  214.352792][T11440] netlink: 492 bytes leftover after parsing attributes in process `syz.3.2391'.
[  214.361615][T11442] validate_nla: 1 callbacks suppressed
[  214.361626][T11442] netlink: 'syz.1.2390': attribute type 22 has an invalid length.
[  214.366557][T11442] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2390'.
[  214.409367][T11444] netlink: 'syz.3.2392': attribute type 10 has an invalid length.
[  214.412633][T11444] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2392'.
[  214.463514][T11448] Q6\bY4: renamed from lo (while UP)
[  214.718584][T11469] netlink: 'syz.3.2404': attribute type 6 has an invalid length.
[  215.041929][T11498] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2417'.
[  215.050578][T11500] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2420'.
[  215.056800][T11500] netlink: zone id is out of range
[  215.058502][T11500] netlink: zone id is out of range
[  215.060194][T11500] netlink: zone id is out of range
[  215.066433][T11500] netlink: get zone limit has 8 unknown bytes
[  215.096178][T11504] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2422'.
[  215.099454][T11504] netlink: zone id is out of range
[  215.103203][T11504] netlink: zone id is out of range
[  215.104867][T11504] netlink: zone id is out of range
[  215.106546][T11504] netlink: zone id is out of range
[  215.108407][T11504] netlink: zone id is out of range
[  215.110121][T11504] netlink: zone id is out of range
[  215.139565][T11508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2423'.
[  215.202364][T11510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  215.204879][T11510] IPv6: NLM_F_CREATE should be set when creating new route
[  215.207303][T11510] IPv6: NLM_F_CREATE should be set when creating new route
[  215.561462][ T4929] wlan1: Trigger new scan to find an IBSS to join
[  215.723405][ T5848] Bluetooth: hci3: ISO packet for unknown connection handle 2815
[  215.728300][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'.
[  215.794522][T11531] netlink: 'syz.3.2433': attribute type 1 has an invalid length.
[  215.848566][ T5848] Bluetooth: hci3: command tx timeout
[  216.374308][T11552] netlink: 'syz.3.2443': attribute type 1 has an invalid length.
[  218.534443][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  218.537860][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  218.544086][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  218.547868][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  218.551758][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  218.571183][   T52] wlan1: Trigger new scan to find an IBSS to join
[  218.734146][T11601] chnl_net:caif_netlink_parms(): no params data found
[  218.816028][T11601] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.819163][T11601] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.822861][T11601] bridge_slave_0: entered allmulticast mode
[  218.827793][T11601] bridge_slave_0: entered promiscuous mode
[  218.834386][T11601] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.837429][T11601] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.840501][T11601] bridge_slave_1: entered allmulticast mode
[  218.844617][T11601] bridge_slave_1: entered promiscuous mode
[  218.880246][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.887833][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.912170][T11601] team0: Port device team_slave_0 added
[  218.916233][T11601] team0: Port device team_slave_1 added
[  218.936234][T11601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.939043][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.947080][T11601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.951777][T11601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.953975][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.962116][T11601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.991919][T11601] hsr_slave_0: entered promiscuous mode
[  218.994306][T11601] hsr_slave_1: entered promiscuous mode
[  218.996594][T11601] debugfs: 'hsr0' already exists in 'hsr'
[  218.998407][T11601] Cannot create hsr debugfs directory
[  219.110380][T11601] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  219.117145][T11601] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.123054][T11601] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  219.129286][T11601] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  219.153392][T11601] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.156159][T11601] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.159105][T11601] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.161588][T11601] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.204164][T11601] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.214056][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.217164][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.227364][T11601] 8021q: adding VLAN 0 to HW filter on device team0
[  219.235463][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.237841][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.247944][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.250292][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.407416][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.566074][T11601] veth0_vlan: entered promiscuous mode
[  219.575488][T11601] veth1_vlan: entered promiscuous mode
[  219.603206][T11601] veth0_macvtap: entered promiscuous mode
[  219.608052][T11601] veth1_macvtap: entered promiscuous mode
[  219.620447][T11601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.629155][T11601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.637299][ T8400] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.641489][ T5723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.645879][ T5723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.649066][ T5723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.716099][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.719107][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.757076][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.760108][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.963467][T11633] netlink: 'syz.6.2458': attribute type 1 has an invalid length.
[  220.187637][T11643] __nla_validate_parse: 2 callbacks suppressed
[  220.187680][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'.
[  220.187973][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.202364][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.206542][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.211911][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.215754][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.265371][T11647] netlink: 'syz.4.2464': attribute type 16 has an invalid length.
[  220.268817][T11647] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2464'.
[  220.509521][T11657] net_ratelimit: 78 callbacks suppressed
[  220.509581][T11657] netlink: ct family unspecified
[  220.521448][T11657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.568070][T11644] chnl_net:caif_netlink_parms(): no params data found
[  220.627932][T11662] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  220.647013][   T54] Bluetooth: hci0: command tx timeout
[  220.697381][T11644] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.699881][T11644] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.703221][T11644] bridge_slave_0: entered allmulticast mode
[  220.706419][T11644] bridge_slave_0: entered promiscuous mode
[  220.722292][T11644] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.724997][T11644] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.727838][T11644] bridge_slave_1: entered allmulticast mode
[  220.734802][T11644] bridge_slave_1: entered promiscuous mode
[  220.774259][T11644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.780597][T11644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.810139][T11644] team0: Port device team_slave_0 added
[  220.815149][T11644] team0: Port device team_slave_1 added
[  220.847060][T11644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.849702][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.859855][T11644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.866807][T11644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.869036][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.883038][T11644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.922451][T11644] hsr_slave_0: entered promiscuous mode
[  220.930245][T11644] hsr_slave_1: entered promiscuous mode
[  220.938372][T11644] debugfs: 'hsr0' already exists in 'hsr'
[  220.940321][T11644] Cannot create hsr debugfs directory
[  221.189674][T11644] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  221.196912][T11644] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  221.205256][T11644] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  221.238555][T11644] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  221.313122][T11676] delete_channel: no stack
[  221.326532][T11684] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2475'.
[  221.346460][T11676] delete_channel: no stack
[  221.469997][T11644] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.521532][ T1088] wlan1: Trigger new scan to find an IBSS to join
[  221.541747][T11644] 8021q: adding VLAN 0 to HW filter on device team0
[  221.588862][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.591268][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.619078][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.622296][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.995523][T11644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.212535][T11644] veth0_vlan: entered promiscuous mode
[  222.234793][T11644] veth1_vlan: entered promiscuous mode
[  222.247399][   T54] Bluetooth: hci1: command tx timeout
[  222.267396][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2480'.
[  222.279314][T11644] veth0_macvtap: entered promiscuous mode
[  222.287126][T11644] veth1_macvtap: entered promiscuous mode
[  222.314538][T11644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.344439][T11644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.354963][ T5723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.380488][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.390161][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.395307][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.492731][   T69] wlan1: Creating new IBSS network, BSSID 92:89:d7:56:22:d1
[  222.504590][ T3822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.507250][ T3822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.537992][ T3822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.540522][ T3822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.667908][T11720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2452'.
[  222.673683][T11720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2452'.
[  222.723774][   T54] Bluetooth: hci0: command tx timeout
[  223.146371][T11725] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  223.359489][T11744] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2496'.
[  223.888501][T11759] vxcan1: entered allmulticast mode
[  224.159322][T11785] sock: sock_timestamping_bind_phc: sock not bind to device
[  224.321569][   T54] Bluetooth: hci1: command tx timeout
[  224.513639][T11807] netlink: 'syz.4.2525': attribute type 2 has an invalid length.
[  224.516331][T11807] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2525'.
[  224.613807][T11810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.800820][   T54] Bluetooth: hci0: command tx timeout
[  225.130222][T11841] netlink: 'syz.6.2541': attribute type 29 has an invalid length.
[  225.142657][T11844] netlink: 'syz.6.2541': attribute type 29 has an invalid length.
[  225.241467][T11841] netlink: 'syz.6.2541': attribute type 29 has an invalid length.
[  225.384053][T11853] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  225.386199][T11853] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  225.941372][T11859] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  226.075115][   T13] bond0: left allmulticast mode
[  226.081734][   T13] @: left allmulticast mode
[  226.087020][   T13] bond_slave_1: left allmulticast mode
[  226.112594][   T13] bridge0: port 4(bond0) entered disabled state
[  226.128706][   T13] dummy0: left allmulticast mode
[  226.142304][   T13] bridge0: port 3(dummy0) entered disabled state
[  226.162934][   T13] bridge_slave_1: left allmulticast mode
[  226.165320][   T13] bridge_slave_1: left promiscuous mode
[  226.167814][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.195747][   T13] bridge_slave_0: left promiscuous mode
[  226.198394][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.332655][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'.
[  226.403903][   T54] Bluetooth: hci1: command tx timeout
[  226.694060][   T13] bond0 (unregistering): (slave c@): Releasing backup interface
[  226.697234][   T13] @: left promiscuous mode
[  226.700159][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.704448][   T13] bond_slave_1: left promiscuous mode
[  226.706769][   T13] bond0 (unregistering): Released all slaves
[  226.812289][   T13] : left promiscuous mode
[  226.870635][T11892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2557'.
[  226.882752][   T54] Bluetooth: hci0: command tx timeout
[  226.905293][   T13] : left promiscuous mode
[  227.098310][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2562'.
[  227.376892][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2570'.
[  227.467699][   T13] team0: Port device wlan1 removed
[  227.562026][T11934] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  227.711912][   T13] hsr_slave_0: left promiscuous mode
[  227.725274][   T13] hsr_slave_1: left promiscuous mode
[  227.729062][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.753560][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.907600][T11966] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2584'.
[  228.491043][   T54] Bluetooth: hci1: command tx timeout
[  228.914146][T11978] delete_channel: no stack
[  228.915718][T11978] delete_channel: no stack
[  229.127891][   T13] team0 (unregistering): Port device team_slave_1 removed
[  229.169255][   T13] team0 (unregistering): Port device team_slave_0 removed
[  229.607099][T11989] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  229.848880][T11997] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  229.854661][T11997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.115972][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2601'.
[  230.588900][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2617'.
[  231.620982][T12100] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.624738][T12100] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.637109][T12103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2625'.
[  231.643586][T12103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2625'.
[  232.497988][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'.
[  233.094152][T12132] syzkaller0: entered promiscuous mode
[  233.096373][T12132] syzkaller0: entered allmulticast mode
[  233.542586][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2640'.
[  233.689567][T12149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2644'.
[  233.708762][T12149] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.744811][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2644'.
[  233.775620][T12149] bridge_slave_0 (unregistering): left allmulticast mode
[  233.778906][T12149] bridge_slave_0 (unregistering): left promiscuous mode
[  233.782567][T12149] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.807784][T12076] Set syz1 is full, maxelem 65536 reached
[  233.897190][T12154] netlink: 'syz.6.2646': attribute type 10 has an invalid length.
[  233.901349][T12154] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2646'.
[  234.073580][T12167] netlink: 'syz.5.2650': attribute type 10 has an invalid length.
[  234.088873][T12166] netlink: 'syz.4.2652': attribute type 41 has an invalid length.
[  235.523741][   T52] wlan1: Trigger new scan to find an IBSS to join
[  236.019116][T12167] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.026622][T12167] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.028861][T12167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.037219][T12167] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  236.289476][T12179] netlink: 'syz.5.2656': attribute type 10 has an invalid length.
[  237.130960][   T54] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[  237.336379][T12215] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2669'.
[  237.345748][T12215] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2669'.
[  237.388510][T12220] netlink: 'syz.4.2671': attribute type 10 has an invalid length.
[  237.399054][T12220] team0: Device veth1_macvtap failed to register rx_handler
[  237.600579][T12240] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2681'.
[  237.679338][T12242] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2682'.
[  237.684388][T12242] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2682'.
[  237.728014][T12251] netlink: 'syz.5.2687': attribute type 3 has an invalid length.
[  237.730497][T12251] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.2687'.
[  237.751348][T12253] netlink: 1057 bytes leftover after parsing attributes in process `syz.6.2686'.
[  238.024281][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2692'.
[  238.027736][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2692'.
[  238.108874][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2699'.
[  238.268570][T12293] netlink: 'syz.6.2704': attribute type 10 has an invalid length.
[  239.119218][T12336] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  239.930072][   T54] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[  240.184260][T12379] netlink: zone id is out of range
[  240.188312][T12379] netlink: get zone limit has 8 unknown bytes
[  240.268168][T12386] C: renamed from team_slave_0 (while UP)
[  240.274796][T12386] netlink: 'syz.6.2747': attribute type 3 has an invalid length.
[  240.284584][T12386] netlink: 'syz.6.2747': attribute type 1 has an invalid length.
[  240.448429][T12405] bpf: Bad value for 'gid'
[  240.452976][T12402] nftables ruleset with unbound set
[  240.484514][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  240.496667][T12407] syzkaller0: entered promiscuous mode
[  240.506561][T12407] syzkaller0: entered allmulticast mode
[  240.890865][T12442] netlink: 'syz.4.2774': attribute type 29 has an invalid length.
[  240.927886][T12455] netlink: 'syz.5.2779': attribute type 29 has an invalid length.
[  240.937077][T12448] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  240.940546][T12448] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  240.949122][T12455] netlink: 'syz.5.2779': attribute type 29 has an invalid length.
[  240.954069][T12455] netlink: 'syz.5.2779': attribute type 29 has an invalid length.
[  240.978908][T12456] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  240.989259][T12456] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  242.090426][ T3822] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  242.305774][T12488] netlink: 'syz.6.2790': attribute type 21 has an invalid length.
[  243.188077][T12484] __nla_validate_parse: 17 callbacks suppressed
[  243.188094][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2788'.
[  243.194720][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2788'.
[  243.405590][T12502] netlink: 'syz.4.2795': attribute type 1 has an invalid length.
[  244.380140][   T54] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[  244.504686][T12534] netlink: 'syz.5.2806': attribute type 29 has an invalid length.
[  244.520996][T12534] netlink: 'syz.5.2806': attribute type 29 has an invalid length.
[  244.620331][   T54] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4
[  245.065737][T12539] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.2808'.
[  245.217618][T12544] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2809'.
[  245.243413][T12541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2809'.
[  245.253634][T12546] syzkaller0: entered promiscuous mode
[  245.255397][T12546] syzkaller0: entered allmulticast mode
[  245.410152][T12552] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2813'.
[  246.028509][T12600] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  246.165963][T12610] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  246.346731][T12629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2848'.
[  246.881499][T12642] tap0: tun_chr_ioctl cmd 2147767517
[  247.408554][T12648] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2857'.
[  247.425561][T12651] validate_nla: 2 callbacks suppressed
[  247.425579][T12651] netlink: 'syz.5.2859': attribute type 10 has an invalid length.
[  247.783823][T12682] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2873'.
[  248.405805][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  248.409892][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  248.413992][   T54] Bluetooth: hci0: hardware error 0x00
[  248.880570][T12706] netlink: 'syz.4.2883': attribute type 1 has an invalid length.
[  249.102538][T12715] netlink: 'syz.5.2887': attribute type 2 has an invalid length.
[  249.104939][T12715] netlink: 137592 bytes leftover after parsing attributes in process `syz.5.2887'.
[  250.641239][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  250.718780][T12752] netlink: 'syz.4.2902': attribute type 29 has an invalid length.
[  250.725398][T12752] netlink: 'syz.4.2902': attribute type 29 has an invalid length.
[  250.729238][T12752] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2902'.
[  251.052528][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'.
[  251.662584][T12803] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2928'.
[  251.742951][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'.
[  251.745879][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2929'.
[  251.749497][T12805] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2929'.
[  251.757538][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2929'.
[  251.762464][T12805] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2929'.
[  252.215331][T12826] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2938'.
[  252.233978][T12828] netlink: 'syz.4.2939': attribute type 10 has an invalid length.
[  254.155442][T12856] netlink: 'syz.4.2951': attribute type 4 has an invalid length.
[  254.259637][T12866] __nla_validate_parse: 1 callbacks suppressed
[  254.259652][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'.
[  254.265558][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'.
[  254.376865][T12875] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2957'.
[  254.682358][   T33] audit: type=1107 audit(1755609111.170:4): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  254.755064][T12890] syz.4.2967 (12890) used obsolete PPPIOCDETACH ioctl
[  254.855064][T12896] netlink: 'syz.6.2970': attribute type 3 has an invalid length.
[  254.859556][T12896] netlink: 201336 bytes leftover after parsing attributes in process `syz.6.2970'.
[  255.350447][T12931] netlink: 'syz.6.2986': attribute type 29 has an invalid length.
[  255.355229][T12931] netlink: 'syz.6.2986': attribute type 29 has an invalid length.
[  255.375196][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.377849][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.462234][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2990'.
[  255.617883][T12961] netlink: 'syz.5.3000': attribute type 1 has an invalid length.
[  255.620505][T12961] netlink: 'syz.5.3000': attribute type 2 has an invalid length.
[  255.624361][T12961] netlink: 'syz.5.3000': attribute type 7 has an invalid length.
[  255.626907][T12961] netlink: 37 bytes leftover after parsing attributes in process `syz.5.3000'.
[  255.629731][T12961] netlink: 'syz.5.3000': attribute type 1 has an invalid length.
[  255.635209][T12961] netlink: 'syz.5.3000': attribute type 2 has an invalid length.
[  255.638176][T12961] netlink: 130076 bytes leftover after parsing attributes in process `syz.5.3000'.
[  256.214723][T12978] netlink: 'syz.5.3008': attribute type 1 has an invalid length.
[  258.955289][T13075] netlink: 183676 bytes leftover after parsing attributes in process `syz.6.3049'.
[  259.507030][T13086] validate_nla: 3 callbacks suppressed
[  259.507046][T13086] netlink: 'syz.5.3056': attribute type 21 has an invalid length.
[  259.528232][T13086] netlink: 'syz.5.3056': attribute type 20 has an invalid length.
[  259.579762][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3057'.
[  259.596047][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3057'.
[  259.599213][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3057'.
[  262.274604][T13166] syzkaller0: entered promiscuous mode
[  262.276937][T13166] syzkaller0: entered allmulticast mode
[  262.491509][T13178] netlink: 'syz.5.3097': attribute type 1 has an invalid length.
[  263.660413][T13221] netlink: 'syz.6.3115': attribute type 21 has an invalid length.
[  263.664659][T13221] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3115'.
[  264.104963][T13240] netlink: 'syz.5.3123': attribute type 10 has an invalid length.
[  264.125066][T13240] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  264.918809][T13277] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3139'.
[  265.025280][T13277] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.276541][T13277] bridge_slave_0 (unregistering): left allmulticast mode
[  265.279560][T13277] bridge_slave_0 (unregistering): left promiscuous mode
[  265.285125][T13277] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.599915][T13283] netlink: 'syz.4.3142': attribute type 4 has an invalid length.
[  266.438436][T13326] netlink: 'syz.5.3162': attribute type 2 has an invalid length.
[  266.442835][T13326] netlink: 'syz.5.3162': attribute type 8 has an invalid length.
[  266.445519][T13326] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3162'.
[  266.619393][T13342] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3169'.
[  266.630414][T13342] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3169'.
[  266.636606][T13342] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3169'.
[  271.529712][T13399] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3196'.
[  271.611583][T13403] netlink: 'syz.5.3198': attribute type 2 has an invalid length.
[  271.614828][T13403] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.3198'.
[  271.772554][T13410] netlink: 'syz.4.3201': attribute type 12 has an invalid length.
[  271.775832][T13410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3201'.
[  272.115934][T13432] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3211'.
[  273.160923][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3242'.
[  273.350646][T13502] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3244'.
[  275.210260][T13571] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3273'.
[  275.585886][T13577] syzkaller0: entered promiscuous mode
[  275.594191][T13577] syzkaller0: entered allmulticast mode
[  279.317196][T13618] netlink: 'syz.4.3293': attribute type 10 has an invalid length.
[  280.312923][T13618] team0 (unregistering): Port device team_slave_0 removed
[  280.319766][T13618] team0 (unregistering): Port device team_slave_1 removed
[  284.604176][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'.
[  284.607462][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'.
[  284.839366][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3363'.
[  288.584217][T13792] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3375'.
[  288.588254][T13792] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3375'.
[  288.595022][T13792] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3375'.
[  288.684200][T13796] netlink: 'syz.4.3377': attribute type 3 has an invalid length.
[  288.775696][T13799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.778437][T13799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.823955][T13799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.829175][T13799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.300170][T13806] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3382'.
[  289.618144][T13816] sit0: entered allmulticast mode
[  289.627246][T13816] sit0: entered promiscuous mode
[  289.755049][T13820] netlink: 'syz.5.3389': attribute type 11 has an invalid length.
[  290.869265][T13848] netlink: 'syz.5.3400': attribute type 10 has an invalid length.
[  290.885629][T13848] veth0_vlan: left promiscuous mode
[  290.888661][T13848] veth0_vlan: entered promiscuous mode
[  290.896716][T13848] team0: Device veth0_vlan failed to register rx_handler
[  291.179380][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.183537][T13850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.199367][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.242319][T13850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.359529][T13856] sit0: entered allmulticast mode
[  291.374103][T13856] sit0: entered promiscuous mode
[  291.985666][T13873] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3408'.
[  292.435720][T13890] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  292.437920][T13890] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  292.611943][T13896] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3419'.
[  293.281426][T13908] netlink: 'syz.4.3423': attribute type 2 has an invalid length.
[  293.346405][T13918] netlink: 'syz.6.3428': attribute type 12 has an invalid length.
[  293.348812][T13918] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3428'.
[  293.528228][T13936] netlink: 'syz.6.3436': attribute type 12 has an invalid length.
[  293.531991][T13936] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3436'.
[  293.598324][T13936] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  293.600542][T13936] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  293.718302][T13950] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3443'.
[  294.004020][T13961] syzkaller0: entered promiscuous mode
[  294.006203][T13961] syzkaller0: entered allmulticast mode
[  295.376140][T14004] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3468'.
[  296.038016][T14031] : entered promiscuous mode
[  296.041007][T14031] : entered allmulticast mode
[  296.236216][T14041] netlink: 'syz.4.3484': attribute type 1 has an invalid length.
[  296.239182][T14041] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3484'.
[  296.565123][T14063] netlink: 146936 bytes leftover after parsing attributes in process `syz.5.3495'.
[  296.569624][T14063] openvswitch: netlink: Message has 6 unknown bytes.
[  296.577010][T14065] netlink: 'syz.4.3496': attribute type 2 has an invalid length.
[  296.580195][T14065] netlink: 'syz.4.3496': attribute type 1 has an invalid length.
[  296.586419][T14065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3496'.
[  296.668588][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3501'.
[  296.803447][T14091] netlink: 'syz.4.3509': attribute type 2 has an invalid length.
[  297.010430][T14111] netlink: 'syz.6.3517': attribute type 10 has an invalid length.
[  297.013497][T14111] __nla_validate_parse: 2 callbacks suppressed
[  297.013506][T14111] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3517'.
[  297.018132][T14111] dummy0: entered promiscuous mode
[  298.391491][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  298.991606][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'.
[  299.150048][T14154] netlink: 22 bytes leftover after parsing attributes in process `syz.6.3535'.
[  299.439722][T14170] netlink: 'syz.5.3541': attribute type 29 has an invalid length.
[  299.448111][T14170] netlink: 'syz.5.3541': attribute type 29 has an invalid length.
[  299.452338][T14170] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3541'.
[  299.565548][T14183] syzkaller1: tun_chr_ioctl cmd 1074025677
[  299.567786][T14183] syzkaller1: linktype set to 780
[  300.607153][   T33] audit: type=1107 audit(1755609157.080:5): pid=14205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  300.785439][T14217] netlink: 'syz.6.3564': attribute type 2 has an invalid length.
[  300.788740][T14217] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.3564'.
[  300.925077][T14229] netlink: 'syz.6.3569': attribute type 1 has an invalid length.
[  302.875505][T14256] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3581'.
[  303.388744][T14267] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.3585'.
[  303.459886][T14258] syzkaller0: entered promiscuous mode
[  303.466106][T14258] syzkaller0: entered allmulticast mode
[  304.102607][T14282] netlink: 'syz.6.3592': attribute type 21 has an invalid length.
[  304.760357][T14292] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3597'.
[  304.860341][T14299] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3600'.
[  304.874358][T14299] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3600'.
[  304.941739][T14306] Dead loop on virtual device ip6_vti0, fix it urgently!
[  305.177719][T14326] net veth1_virt_wifi : renamed from virt_wifi0
[  305.806507][T14370] netlink: 'syz.5.3634': attribute type 10 has an invalid length.
[  305.809152][T14370] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3634'.
[  306.722360][T14377] netlink: 'syz.5.3637': attribute type 10 has an invalid length.
[  307.117255][T14398] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.239790][T14409] netlink: 'syz.5.3652': attribute type 21 has an invalid length.
[  307.248952][T14409] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3652'.
[  307.255077][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3652'.
[  307.657535][T14434] sctp: [Deprecated]: syz.5.3660 (pid 14434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  307.657535][T14434] Use struct sctp_sack_info instead
[  307.866274][T14443] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.3665'.
[  307.869840][T14443] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  308.322563][T14457] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3672'.
[  308.326343][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3672'.
[  308.776343][T14491] netlink: 'syz.6.3689': attribute type 9 has an invalid length.
[  308.841159][T14496] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3691'.
[  308.925184][T14500] netlink: 182 bytes leftover after parsing attributes in process `syz.6.3693'.
[  310.265165][   T54] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13
[  310.359967][T14527] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3704'.
[  310.407257][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'.
[  310.494729][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3711'.
[  310.537513][T14547] x_tables: ip_tables: TPROXY target: only valid in mangle table, not syz0
[  310.613218][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3720'.
[  310.678519][T14566] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3719'.
[  310.999401][T14576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3727'.
[  311.627940][T14594] openvswitch: netlink: IP tunnel dst address not specified
[  311.757746][T14600] netlink: 'syz.6.3738': attribute type 21 has an invalid length.
[  311.767137][T14600] netlink: 'syz.6.3738': attribute type 6 has an invalid length.
[  313.933151][T14626] __nla_validate_parse: 2 callbacks suppressed
[  313.933165][T14626] netlink: 42496 bytes leftover after parsing attributes in process `syz.5.3750'.
[  314.401658][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  315.089786][T14667] netdevsim netdevsim6: Direct firmware load for  failed with error -2
[  315.098661][T14667] netdevsim netdevsim6: Falling back to sysfs fallback for: 
[  315.615101][T14685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3777'.
[  315.662280][T14687] netlink: 'syz.5.3778': attribute type 10 has an invalid length.
[  315.666296][T14687] 8021q: adding VLAN 0 to HW filter on device team0
[  315.670083][T14687] bond0: (slave team0): Enslaving as an active interface with an up link
[  316.079250][T14701] openvswitch: netlink: Message has 16 unknown bytes.
[  316.305355][T14711] veth1_macvtap: left promiscuous mode
[  316.813598][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.816505][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  316.959265][T14727] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3795'.
[  316.999722][T14729] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3796'.
[  317.003113][T14729] bond_slave_0: entered promiscuous mode
[  317.005223][T14729] bond_slave_1: entered promiscuous mode
[  317.372797][T14746] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.3804'.
[  317.509188][T14722] delete_channel: no stack
[  317.792398][T14778] netlink: 'syz.5.3820': attribute type 1 has an invalid length.
[  318.596489][T14834] netlink: 'syz.6.3844': attribute type 3 has an invalid length.
[  318.599649][T14834] netlink: 201336 bytes leftover after parsing attributes in process `syz.6.3844'.
[  318.599770][T14833] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3845'.
[  318.609085][T14833] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3845'.
[  318.832265][T14850] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3851'.
[  318.837773][T14848] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3851'.
[  319.652172][T14874] __nla_validate_parse: 3 callbacks suppressed
[  319.652186][T14874] netlink: 304 bytes leftover after parsing attributes in process `syz.5.3862'.
[  319.742200][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3866'.
[  321.597184][T14936] sit0: left promiscuous mode
[  321.627171][T14936] sit0: entered promiscuous mode
[  321.709111][T14940] netlink: 'syz.6.3891': attribute type 10 has an invalid length.
[  321.712786][T14940] dummy0: left promiscuous mode
[  321.720542][T14940] dummy0: entered promiscuous mode
[  321.723060][T14940] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  322.368092][T14967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.698903][T14992] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3915'.
[  322.728500][T14992] netlink: zone id is out of range
[  322.730314][T14992] netlink: zone id is out of range
[  322.733519][T14992] netlink: zone id is out of range
[  322.735199][T14992] netlink: zone id is out of range
[  322.736883][T14992] netlink: zone id is out of range
[  322.738509][T14992] netlink: zone id is out of range
[  322.740161][T14992] netlink: zone id is out of range
[  322.747410][T14992] netlink: zone id is out of range
[  322.750465][T14992] netlink: zone id is out of range
[  322.756058][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3916'.
[  323.089869][T15025] netlink: 'syz.5.3930': attribute type 10 has an invalid length.
[  323.098204][T15025] macvlan0: entered allmulticast mode
[  323.164004][T15027] netlink: 'syz.4.3931': attribute type 3 has an invalid length.
[  323.166467][T15027] netlink: 'syz.4.3931': attribute type 1 has an invalid length.
[  323.168994][T15027] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3931'.
[  323.188478][T15025] veth1_vlan: entered allmulticast mode
[  323.192436][T15029] netlink: 'syz.6.3932': attribute type 39 has an invalid length.
[  323.249584][T15025] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  323.708786][T15051] netlink: 'syz.6.3942': attribute type 39 has an invalid length.
[  324.641773][T15071] netlink: 'syz.6.3951': attribute type 1 has an invalid length.
[  324.644853][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3951'.
[  324.648169][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3951'.
[  326.326380][T15101] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.3964'.
[  326.331511][T15101] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.3964'.
[  326.608672][T15113] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3970'.
[  326.674565][T15115] netlink: 'syz.6.3971': attribute type 3 has an invalid length.
[  326.914927][T15120] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.918211][T15120] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.825383][T15122] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  327.956159][T15126] netlink: 'syz.6.3976': attribute type 3 has an invalid length.
[  327.958773][T15126] netlink: 'syz.6.3976': attribute type 1 has an invalid length.
[  327.961258][T15126] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.3976'.
[  328.745753][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3984'.
[  328.749142][T15144] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3984'.
[  328.967122][T15154] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3989'.
[  329.121424][ T5848] Bluetooth: hci3: command 0x0406 tx timeout
[  331.976134][T15186] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4003'.
[  332.256756][T15194] netlink: 'syz.6.4007': attribute type 3 has an invalid length.
[  332.259691][T15194] netlink: 'syz.6.4007': attribute type 1 has an invalid length.
[  332.263666][T15194] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.4007'.
[  332.274535][T15194] netlink: 'syz.6.4007': attribute type 8 has an invalid length.
[  335.918425][T15249] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4031'.
[  337.145248][T15263] netlink: 'syz.6.4038': attribute type 1 has an invalid length.
[  338.280639][T15284] delete_channel: no stack
[  338.682600][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  338.686154][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  338.689171][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  338.700032][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  338.703507][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  338.715284][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  338.721594][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.724249][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.728529][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.731470][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.932415][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4055'.
[  338.949212][T15294] chnl_net:caif_netlink_parms(): no params data found
[  339.108799][T15297] chnl_net:caif_netlink_parms(): no params data found
[  339.116270][T15294] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.119385][T15294] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.123306][T15294] bridge_slave_0: entered allmulticast mode
[  339.126454][T15294] bridge_slave_0: entered promiscuous mode
[  339.142185][T15294] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.145184][T15294] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.148183][T15294] bridge_slave_1: entered allmulticast mode
[  339.153300][T15294] bridge_slave_1: entered promiscuous mode
[  339.205294][T15294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.215262][T15294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.265404][T15294] team0: Port device team_slave_0 added
[  339.268027][T15297] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.270621][T15297] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.275510][T15297] bridge_slave_0: entered allmulticast mode
[  339.279401][T15297] bridge_slave_0: entered promiscuous mode
[  339.284899][T15294] team0: Port device team_slave_1 added
[  339.287740][T15297] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.290076][T15297] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.293230][T15297] bridge_slave_1: entered allmulticast mode
[  339.296203][T15297] bridge_slave_1: entered promiscuous mode
[  339.344574][T15294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.347588][T15294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.358403][T15294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.385902][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.392521][T15294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.395442][T15294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.405447][T15294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.415725][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.465370][T15297] team0: Port device team_slave_0 added
[  339.487021][T15297] team0: Port device team_slave_1 added
[  339.525144][T15294] hsr_slave_0: entered promiscuous mode
[  339.527540][T15294] hsr_slave_1: entered promiscuous mode
[  339.529750][T15294] debugfs: 'hsr0' already exists in 'hsr'
[  339.532055][T15294] Cannot create hsr debugfs directory
[  339.556905][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.559983][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.572747][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.596559][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.599686][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.619036][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.743123][T15297] hsr_slave_0: entered promiscuous mode
[  339.747400][T15297] hsr_slave_1: entered promiscuous mode
[  339.752849][T15297] debugfs: 'hsr0' already exists in 'hsr'
[  339.755551][T15297] Cannot create hsr debugfs directory
[  339.876915][T15294] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  340.136986][T15323] bridge_slave_1: left allmulticast mode
[  340.139511][T15323] bridge_slave_1: left promiscuous mode
[  340.143077][T15323] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.292543][T15294] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  340.316321][T15294] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  340.334788][T15294] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  340.577842][T15297] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  340.588059][T15297] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  340.601171][T15297] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  340.615936][T15297] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  340.683633][T15342] netlink: 'syz.6.4060': attribute type 10 has an invalid length.
[  340.684000][T15294] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.704153][T15294] 8021q: adding VLAN 0 to HW filter on device team0
[  340.721943][ T5848] Bluetooth: hci2: command tx timeout
[  340.738094][T14952] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.740378][T14952] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.744243][T14952] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.746652][T14952] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.777874][T15345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4061'.
[  340.801034][ T5848] Bluetooth: hci4: command tx timeout
[  340.874396][T15297] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.899126][T15297] 8021q: adding VLAN 0 to HW filter on device team0
[  340.919558][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.922556][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.939623][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.942465][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.978587][T15297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  340.983249][T15297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  340.996852][T15294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.144788][T15297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.187991][T15294] veth0_vlan: entered promiscuous mode
[  341.195524][T15294] veth1_vlan: entered promiscuous mode
[  341.216356][T15294] veth0_macvtap: entered promiscuous mode
[  341.237314][T15294] veth1_macvtap: entered promiscuous mode
[  341.266012][T15294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.281780][T15294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.294689][ T5874] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.297888][ T5874] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.330546][ T5874] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.334179][ T5874] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.399296][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.407606][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.428675][T15297] veth0_vlan: entered promiscuous mode
[  341.454354][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.457119][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.459979][T15297] veth1_vlan: entered promiscuous mode
[  341.513799][T15297] veth0_macvtap: entered promiscuous mode
[  341.519572][T15297] veth1_macvtap: entered promiscuous mode
[  341.558515][T15297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.583265][T15297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.596065][ T5873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.599822][ T5873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.605069][ T5873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.609098][ T5873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.614352][T15381] netlink: 'syz.8.4068': attribute type 21 has an invalid length.
[  341.617041][T15381] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4068'.
[  341.620518][T15381] netlink: 'syz.8.4068': attribute type 5 has an invalid length.
[  341.630059][T15381] netlink: 'syz.8.4068': attribute type 6 has an invalid length.
[  341.633610][T15381] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4068'.
[  341.764799][ T4929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.768116][ T4929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.812832][T14952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.816138][T14952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.959061][T15395] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.4050'.
[  342.226360][T15415] net_ratelimit: 78 callbacks suppressed
[  342.226374][T15415] netdevsim0: mtu less than device minimum
[  342.367008][T15424] netlink: 'syz.7.4087': attribute type 10 has an invalid length.
[  342.420929][T15426] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4088'.
[  342.423094][T15424] team0: Device ipvlan1 failed to register rx_handler
[  342.424898][T15426] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4088'.
[  342.801175][ T5848] Bluetooth: hci2: command tx timeout
[  342.883853][ T5848] Bluetooth: hci4: command tx timeout
[  343.039324][T15439] netlink: 'syz.6.4093': attribute type 1 has an invalid length.
[  343.044742][T15439] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4093'.
[  343.355327][T15454] netlink: 'syz.6.4099': attribute type 2 has an invalid length.
[  343.358184][T15454] netlink: 'syz.6.4099': attribute type 1 has an invalid length.
[  343.366228][T15453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.369805][T15454] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4099'.
[  343.373919][T15454] nbd: couldn't find device at index 65542
[  343.849927][T15481] delete_channel: no stack
[  343.880628][T15478] netlink: 'syz.8.4110': attribute type 3 has an invalid length.
[  343.885696][T15478] netlink: 'syz.8.4110': attribute type 2 has an invalid length.
[  343.888308][T15478] netlink: 198112 bytes leftover after parsing attributes in process `syz.8.4110'.
[  344.425643][T15508] veth0_macvtap: left promiscuous mode
[  344.482824][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  344.882790][   T54] Bluetooth: hci2: command tx timeout
[  344.965136][   T54] Bluetooth: hci4: command tx timeout
[  346.961255][   T54] Bluetooth: hci2: command tx timeout
[  347.041250][   T54] Bluetooth: hci4: command tx timeout
[  347.117630][T15601] validate_nla: 6 callbacks suppressed
[  347.117644][T15601] netlink: 'syz.7.4160': attribute type 1 has an invalid length.
[  347.128993][T15601] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4160'.
[  347.162559][T15603] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4161'.
[  347.257635][T15613] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4166'.
[  347.263090][T15613] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4166'.
[  347.267467][T15613] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4166'.
[  347.285996][T15611] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4165'.
[  347.317395][T15616] netlink: 'syz.8.4167': attribute type 3 has an invalid length.
[  347.322460][T15616] netlink: 201372 bytes leftover after parsing attributes in process `syz.8.4167'.
[  347.331473][T15616] netlink: 'syz.8.4167': attribute type 10 has an invalid length.
[  347.377659][T15616] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  347.718043][T15637] netlink: 'syz.8.4173': attribute type 1 has an invalid length.
[  347.720560][T15637] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4173'.
[  347.746216][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4177'.
[  363.382189][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.385952][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.388876][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.394221][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.398948][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.566811][T15673] chnl_net:caif_netlink_parms(): no params data found
[  364.479485][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.485865][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.489332][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.495025][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.498252][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.527724][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  364.532558][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  364.535968][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  364.538786][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.542950][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.441143][   T54] Bluetooth: hci5: command tx timeout
[  366.561290][ T5848] Bluetooth: hci7: command tx timeout
[  366.564122][ T5848] Bluetooth: hci6: command tx timeout
[  367.521170][   T54] Bluetooth: hci5: command tx timeout
[  368.642055][   T54] Bluetooth: hci6: command tx timeout
[  368.644331][   T54] Bluetooth: hci7: command tx timeout
[  369.601226][ T5848] Bluetooth: hci5: command tx timeout
[  370.721111][   T54] Bluetooth: hci6: command tx timeout
[  370.723583][ T5848] Bluetooth: hci7: command tx timeout
[  371.681005][ T5848] Bluetooth: hci5: command tx timeout
[  372.801218][ T5848] Bluetooth: hci7: command tx timeout
[  372.803441][ T5848] Bluetooth: hci6: command tx timeout
[  376.321629][   T34] INFO: task kworker/u10:5:1091 blocked for more than 143 seconds.
[  376.324296][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  376.349510][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  376.360360][   T34] task:kworker/u10:5   state:D stack:21200 pid:1091  tgid:1091  ppid:2      task_flags:0x4208060 flags:0x00004000
[  376.374561][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  376.376642][   T34] Call Trace:
[  376.377926][   T34]  <TASK>
[  376.379087][   T34]  __schedule+0x1798/0x4cc0
[  376.393859][   T34]  ? __lock_acquire+0xab9/0xd20
[  376.395584][   T34]  ? __pfx___schedule+0x10/0x10
[  376.397204][   T34]  ? schedule+0x91/0x360
[  376.398619][   T34]  schedule+0x165/0x360
[  376.400230][   T34]  schedule_timeout+0x9a/0x270
[  376.413184][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  376.415200][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.417368][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.419527][   T34]  ? wait_for_completion+0x267/0x5d0
[  376.434859][   T34]  wait_for_completion+0x2bf/0x5d0
[  376.437203][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  376.442280][   T34]  ? up_write+0x1c4/0x420
[  376.444234][   T34]  ? remove_client_context+0xc0/0x1e0
[  376.446614][   T34]  disable_device+0x1c6/0x320
[  376.448817][   T34]  ? __pfx_disable_device+0x10/0x10
[  376.464543][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  376.466956][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.469324][   T34]  ib_unregister_work+0x19/0x30
[  376.489566][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  376.493373][   T34]  process_scheduled_works+0xae1/0x17b0
[  376.495826][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  376.498480][   T34]  worker_thread+0x8a0/0xda0
[  376.500524][   T34]  kthread+0x711/0x8a0
[  376.520778][   T34]  ? __pfx_worker_thread+0x10/0x10
[  376.523012][   T34]  ? __pfx_kthread+0x10/0x10
[  376.524971][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.527294][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.529500][   T34]  ? __pfx_kthread+0x10/0x10
[  376.596008][   T34]  ret_from_fork+0x3fc/0x770
[  376.598103][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  376.600354][   T34]  ? __switch_to_asm+0x39/0x70
[  376.622970][   T34]  ? __switch_to_asm+0x33/0x70
[  376.625167][   T34]  ? __pfx_kthread+0x10/0x10
[  376.627172][   T34]  ret_from_fork_asm+0x1a/0x30
[  376.629238][   T34]  </TASK>
[  376.644690][   T34] 
[  376.644690][   T34] Showing all locks held in the system:
[  376.648099][   T34] 4 locks held by kworker/u8:1/13:
[  376.650344][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  376.670810][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  376.675398][   T34]  #2: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  376.679410][   T34]  #3: ffffffff8e13f800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  376.690145][   T34] 2 locks held by rcu_tasks_trace/32:
[  376.692843][   T34]  #0: ffffffff8e13abd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  376.697382][   T34]  #1: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  376.715887][   T34] 1 lock held by khungtaskd/34:
[  376.718078][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  376.722640][   T34] 3 locks held by kworker/u10:5/1091:
[  376.725015][   T34]  #0: ffff888105397148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  376.729912][   T34]  #1: ffffc90007027bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  376.739476][   T34]  #2: ffff88802641c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  376.744844][   T34] 2 locks held by getty/5673:
[  376.746943][   T34]  #0: ffff88802088d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  376.754786][   T34]  #1: ffffc900025682f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  376.759234][   T34] 3 locks held by kworker/u8:5/8400:
[  376.763618][   T34]  #0: ffff888022355148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  376.768595][   T34]  #1: ffffc9000440fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  376.777957][   T34]  #2: ffffffff8f537dc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  376.782577][   T34] 2 locks held by syz.5.3938/15040:
[  376.784883][   T34]  #0: ffffffff99e66858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  376.789205][   T34]  #1: ffff88802641c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  376.798928][   T34] 2 locks held by syz.4.3940/15047:
[  376.803647][   T34]  #0: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  376.808000][   T34]  #1: ffff88802641c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  376.822609][   T34] 3 locks held by kworker/u10:0/15529:
[  376.825032][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  376.830025][   T34]  #1: ffffc90007d77bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  376.836199][   T34]  #2: ffffffff8f537dc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  376.840100][   T34] 5 locks held by syz.8.4192/15671:
[  376.845305][   T34] 3 locks held by syz-executor/15673:
[  376.847650][   T34]  #0: ffffffff8eca8200 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  376.852988][   T34]  #1: ffffffff8f537dc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  376.856928][   T34]  #2: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  376.864567][   T34] 1 lock held by syz-executor/15682:
[  376.866424][   T34]  #0: ffffffff8f537dc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  376.869415][   T34] 1 lock held by syz-executor/15684:
[  376.873311][   T34]  #0: ffffffff8f537dc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  376.877162][   T34] 
[  376.878146][   T34] =============================================
[  376.878146][   T34] 
[  376.883777][   T34] NMI backtrace for cpu 1
[  376.883800][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  376.883809][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.883814][   T34] Call Trace:
[  376.883818][   T34]  <TASK>
[  376.883821][   T34]  dump_stack_lvl+0x189/0x250
[  376.883836][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.883845][   T34]  ? __pfx__printk+0x10/0x10
[  376.883862][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  376.883873][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  376.883883][   T34]  ? __pfx__printk+0x10/0x10
[  376.883896][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  376.883909][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  376.883919][   T34]  watchdog+0xf93/0xfe0
[  376.883933][   T34]  ? watchdog+0x1de/0xfe0
[  376.883946][   T34]  kthread+0x711/0x8a0
[  376.883957][   T34]  ? __pfx_watchdog+0x10/0x10
[  376.883994][   T34]  ? __pfx_kthread+0x10/0x10
[  376.884004][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.884014][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.884023][   T34]  ? __pfx_kthread+0x10/0x10
[  376.884033][   T34]  ret_from_fork+0x3fc/0x770
[  376.884043][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  376.884054][   T34]  ? __switch_to_asm+0x39/0x70
[  376.884062][   T34]  ? __switch_to_asm+0x33/0x70
[  376.884071][   T34]  ? __pfx_kthread+0x10/0x10
[  376.884080][   T34]  ret_from_fork_asm+0x1a/0x30
[  376.884097][   T34]  </TASK>
[  376.884100][   T34] Sending NMI from CPU 1 to CPUs 0:
[  376.941545][    C0] NMI backtrace for cpu 0
[  376.941562][    C0] CPU: 0 UID: 0 PID: 15671 Comm: syz.8.4192 Not tainted syzkaller #0 PREEMPT(full) 
[  376.941573][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.941579][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  376.941597][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 52 64 8e 03 66
[  376.941605][    C0] RSP: 0018:ffffc90000007868 EFLAGS: 00000046
[  376.941613][    C0] RAX: 000000000000008d RBX: ffff88804b023900 RCX: 0000000000000838
[  376.941618][    C0] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000000000000838
[  376.941623][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ae033e
[  376.941628][    C0] R10: 0000000000000003 R11: ffffffff81703490 R12: 0000000010003fc0
[  376.941633][    C0] R13: dffffc0000000000 R14: 000000000000008d R15: 0000000000000020
[  376.941638][    C0] FS:  00007fd3d36246c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  376.941644][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  376.941649][    C0] CR2: 0000000000000004 CR3: 000000010a1fa000 CR4: 00000000000006f0
[  376.941671][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  376.941676][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  376.941681][    C0] Call Trace:
[  376.941686][    C0]  <IRQ>
[  376.941694][    C0]  lapic_next_event+0x11/0x20
[  376.941704][    C0]  clockevents_program_event+0x1cf/0x360
[  376.941722][    C0]  hrtimer_interrupt+0x620/0xaa0
[  376.941738][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  376.941748][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  376.941760][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  376.941769][    C0] RIP: 0010:bitmap_port_gc+0x191/0x560
[  376.941780][    C0] Code: 00 4c 8b 74 24 30 74 08 4c 89 f7 e8 b9 5e 55 f8 41 0f b7 dc 4d 8b 36 89 d8 c1 e8 06 49 8d 3c c6 be 08 00 00 00 e8 0f 61 55 f8 <31> f6 49 0f a3 1e 0f 92 c3 40 0f 92 c6 bf 02 00 00 00 e8 f8 ec f1
[  376.941786][    C0] RSP: 0018:ffffc90000007ad0 EFLAGS: 00000256
[  376.941793][    C0] RAX: 0000000000000101 RBX: 0000000000005159 RCX: ffffffff89cdc241
[  376.941798][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880377d0a28
[  376.941803][    C0] RBP: ffff888036bb14a0 R08: ffff8880377d0a2f R09: 1ffff11006efa145
[  376.941808][    C0] R10: dffffc0000000000 R11: ffffed1006efa146 R12: 0000000000005159
[  376.941813][    C0] R13: ffff888036bb14c0 R14: ffff8880377d0000 R15: ffff888043c0000c
[  376.941821][    C0]  ? bitmap_port_gc+0x191/0x560
[  376.941840][    C0]  call_timer_fn+0x17e/0x5f0
[  376.941850][    C0]  ? __pfx_bitmap_port_gc+0x10/0x10
[  376.941859][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.941867][    C0]  ? call_timer_fn+0xbe/0x5f0
[  376.941876][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  376.941890][    C0]  ? __pfx_bitmap_port_gc+0x10/0x10
[  376.941900][    C0]  __run_timer_base+0x61a/0x860
[  376.941914][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  376.941925][    C0]  ? __pfx_run_timer_softirq+0x10/0x10
[  376.941934][    C0]  ? run_timer_softirq+0x8a/0x180
[  376.941945][    C0]  run_timer_softirq+0xb7/0x180
[  376.941954][    C0]  handle_softirqs+0x286/0x870
[  376.941994][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  376.942003][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  376.942011][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  376.942022][    C0]  __irq_exit_rcu+0xca/0x1f0
[  376.942029][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  376.942039][    C0]  irq_exit_rcu+0x9/0x30
[  376.942045][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  376.942055][    C0]  </IRQ>
[  376.942057][    C0]  <TASK>
[  376.942060][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  376.942068][    C0] RIP: 0010:trace_call_bpf+0x15c/0x850
[  376.942076][    C0] Code: 0a a8 f4 ff eb 24 e8 03 a8 f4 ff c6 05 42 41 c2 0d 01 48 c7 c7 60 69 90 8b be 4b 03 00 00 48 c7 c2 a0 69 90 8b e8 34 82 d2 ff <4c> 89 74 24 18 4c 89 6c 24 20 49 83 c7 68 4c 89 f8 48 c1 e8 03 48
[  376.942082][    C0] RSP: 0018:ffffc90007e67800 EFLAGS: 00000283
[  376.942089][    C0] RAX: ffffffff81cb0414 RBX: 0000000000000000 RCX: 0000000000080000
[  376.942093][    C0] RDX: ffffc9002906b000 RSI: 00000000000003b9 RDI: 00000000000003ba
[  376.942098][    C0] RBP: ffffc90007e678f8 R08: 0000000000000000 R09: ffffffff81cb03c7
[  376.942103][    C0] R10: dffffc0000000000 R11: fffff91fe28d5edb R12: 0000000000000001
[  376.942108][    C0] R13: 1ffff92000fccf0c R14: ffffffff81cb03c7 R15: ffffffff8e008fa0
[  376.942113][    C0]  ? trace_call_bpf+0xb7/0x850
[  376.942120][    C0]  ? trace_call_bpf+0xb7/0x850
[  376.942126][    C0]  ? trace_call_bpf+0x104/0x850
[  376.942137][    C0]  ? lock_release+0x2b5/0x3e0
[  376.942147][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  376.942154][    C0]  ? mt_find+0x15c/0x5f0
[  376.942167][    C0]  perf_trace_run_bpf_submit+0x78/0x170
[  376.942178][    C0]  perf_trace_lock+0x2f8/0x3b0
[  376.942188][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  376.942197][    C0]  ? find_vma+0xe7/0x160
[  376.942206][    C0]  ? lock_mm_and_find_vma+0xfa/0x300
[  376.942217][    C0]  ? lock_mm_and_find_vma+0xfa/0x300
[  376.942226][    C0]  lock_release+0x3b2/0x3e0
[  376.942238][    C0]  up_read+0x16/0x20
[  376.942246][    C0]  lock_mm_and_find_vma+0xfa/0x300
[  376.942257][    C0]  do_user_addr_fault+0x331/0x1390
[  376.942272][    C0]  ? rcu_is_watching+0x15/0xb0
[  376.942280][    C0]  ? trace_page_fault_kernel+0x84/0x1e0
[  376.942292][    C0]  exc_page_fault+0x76/0xf0
[  376.942302][    C0]  asm_exc_page_fault+0x26/0x30
[  376.942309][    C0] RIP: 0010:__get_user_4+0x14/0x20
[  376.942317][    C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 1f 00 <8b> 10 31 c0 0f 1f 00 e9 50 03 04 00 90 90 90 90 90 90 90 90 90 90
[  376.942322][    C0] RSP: 0018:ffffc90007e67ca0 EFLAGS: 00010283
[  376.942328][    C0] RAX: 0000000000000004 RBX: ffffc90007e67da0 RCX: 2c39ac5c8650dd00
[  376.942333][    C0] RDX: 00007ffffffff000 RSI: ffffffff8dba5cac RDI: ffffffff8be33300
[  376.942338][    C0] RBP: ffffc90007e67ee0 R08: ffffc90007e67a6f R09: 0000000000000000
[  376.942342][    C0] R10: ffffc90007e67a60 R11: ffffffffa0000850 R12: ffffc90007e67da0
[  376.942348][    C0] R13: 0000000000000004 R14: 000000000000000b R15: 0000000000000000
[  376.942354][    C0]  ? 0xffffffffa0000850
[  376.942365][    C0]  perf_copy_attr+0x45/0x880
[  376.942376][    C0]  __se_sys_perf_event_open+0xdd/0x1d70
[  376.942384][    C0]  ? perf_trace_preemptirq_template+0x280/0x340
[  376.942395][    C0]  ? irqentry_enter+0x3d/0x60
[  376.942404][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  376.942413][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  376.942422][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  376.942438][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  376.942447][    C0]  do_syscall_64+0xfa/0x3b0
[  376.942457][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.942463][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  376.942472][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.942479][    C0] RIP: 0033:0x7fd3d278ebe9
[  376.942486][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.942492][    C0] RSP: 002b:00007fd3d3624038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  376.942499][    C0] RAX: ffffffffffffffda RBX: 00007fd3d29b5fa0 RCX: 00007fd3d278ebe9
[  376.942504][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000
[  376.942509][    C0] RBP: 00007fd3d2811e19 R08: 000000000000000b R09: 0000000000000000
[  376.942513][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  376.942518][    C0] R13: 00007fd3d29b6038 R14: 00007fd3d29b5fa0 R15: 00007fff8d605b58
[  376.942528][    C0]  </TASK>
[  376.959683][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  376.959701][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  376.959716][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.959725][   T34] Call Trace:
[  376.959731][   T34]  <TASK>
[  376.959739][   T34]  dump_stack_lvl+0x99/0x250
[  376.959761][   T34]  ? __asan_memcpy+0x40/0x70
[  376.959779][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.959791][   T34]  ? __pfx__printk+0x10/0x10
[  376.959819][   T34]  vpanic+0x281/0x750
[  376.959837][   T34]  ? __pfx_vpanic+0x10/0x10
[  376.959852][   T34]  ? preempt_schedule+0xae/0xc0
[  376.959873][   T34]  ? preempt_schedule_common+0x83/0xd0
[  377.234711][   T34]  panic+0xb9/0xc0
[  377.236223][   T34]  ? __pfx_panic+0x10/0x10
[  377.237726][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  377.239418][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  377.241366][   T34]  watchdog+0xfd2/0xfe0
[  377.242725][   T34]  ? watchdog+0x1de/0xfe0
[  377.244125][   T34]  kthread+0x711/0x8a0
[  377.245419][   T34]  ? __pfx_watchdog+0x10/0x10
[  377.246976][   T34]  ? __pfx_kthread+0x10/0x10
[  377.248459][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.250093][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.251750][   T34]  ? __pfx_kthread+0x10/0x10
[  377.253357][   T34]  ret_from_fork+0x3fc/0x770
[  377.254862][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  377.256468][   T34]  ? __switch_to_asm+0x39/0x70
[  377.257992][   T34]  ? __switch_to_asm+0x33/0x70
[  377.259502][   T34]  ? __pfx_kthread+0x10/0x10
[  377.261096][   T34]  ret_from_fork_asm+0x1a/0x30
[  377.263060][   T34]  </TASK>
[  377.264978][   T34] Kernel Offset: disabled
[  377.266452][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:13:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000092 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000000092 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000006f18
R8 =0000000000000000 R9 =ffffffff81ae033e R10=0000000000000003 R11=ffffffff81703490
R12=0000000010003fc0 R13=dffffc0000000000 R14=0000000000000092 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd3d36246c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=000000010a1fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd3d2987498 00007fd3d2987470 XMM03=00007fd3d29874a8 00007fd3d29874a0
XMM04=00007fd3d34ed100 00007fd3d2987460 XMM05=00007fd3d2987478 00007fd3d29874c0
XMM06=00007fd3d29874b8 00007fd3d29874b0 XMM07=00007fd3d29874a8 00007fd3d29874a0
XMM08=448873de18db67f9 35800c68b94cdb28 XMM09=0000000000000000 00007fd3d2812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc900030df380 RCX=285296e575275000 RDX=dffffc0000000000
RSI=ffffffff8218b5c6 RDI=ffffc900030df2c0 RBP=1ffff9200061be5a RSP=ffffc900030df1b8
R8 =ffffc900030df2d0 R9 =0000000000000001 R10=ffffc900030df258 R11=ffffffff81ac3930
R12=0000000000000000 R13=1ffff9200061be59 R14=ffffc900030df2c8 R15=0000000000000002
RIP=ffffffff81ac3a14 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd276d26800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffefd101ff8 CR3=0000000023f1c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
