last executing test programs:

2m38.345597797s ago: executing program 1 (id=2260):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f9010000480", @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

2m38.341620465s ago: executing program 1 (id=2262):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xede3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9e}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m38.229393423s ago: executing program 1 (id=2264):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x12, 0x0, 0x0)

2m38.229132327s ago: executing program 1 (id=2265):
r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9a72, 0x6}, 0x114905, 0x4, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10)

2m38.035310315s ago: executing program 1 (id=2268):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x100000001}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m36.438816301s ago: executing program 1 (id=2282):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=""/158, 0x9e}, 0x2100)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdf7ffff0a0000094890a9a1ebcd2a00060000000000000e05000000010000e1096000302e615f5f61e40000"], 0x0, 0x4c}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="700b5e47b7faf35f70eb12152e4caa893b1b40bbef44ef68d2b64772e4cba6b5461cf34d3f70fe8e6cb632ae6c1f615a9e8a3335a723914aa5cc26395b12b254f18de4d3c944633204e57640ad2830465f2750c2f4a52c1cad59e5e5398b84411689", 0x62}, {&(0x7f0000000800)="f998a86bdb2f9b7443530128895b732c9fff70fe0f3e66885802e108224df736f3c7fcae9c774c38e426f2f33f6cbd6f417e0c2177eeeef4ce5296c0e084a44f1512bc388e00a89e477d5d632b9e0184f1c08fbe601a7058c10cba018446c3b4933909433d80ddc6df766100881f18eec8ee6b951b4192201f0c3a6a065d59797a4a947d093d842d3c4feab8e2efbfc2289cb1c9060b68cc81f0d4a4ef48a5ddcff0d67f28fb9592a066df05f0899ed2b845411b4feeca53437ba143cde8ddb88d29f7d59bb5360688df9b213985b97cdebfd6e362b57e79ec96cb3d665d38050b13b4b643f55545ff2c97c7d5b908821ad1643698", 0xf5}], 0x2, &(0x7f0000000940)=[{0xd8, 0x84, 0xff, "74857486f5221d503de050eefec8cb327b9ee4cc2b73965b84cbd5c324948ffa09a677cab86a753281508c36c23746b2da525bedf3e954c99f70119b22bb87f19cdb78208d907498774de8e4ee5462fd94b65edd1294dd446604e79ea5f94d638d2029e290dd03042da85b3a6bacabdf4f8010ae68bace5e0bebea24bd94839c485bed273463e773d5d0b30d908609e4cfeb474f75f799011880fbb691a55f87f27790909298658845780948cdfa7897de7cb3a210468d2490a82b3174b5171d03bec451af8c6e"}, {0xc8, 0x111, 0x7, "c3bbdfacd332cba0e0c0230db769d3b3cbd242c48f45a062b5cbcdd267c5dfef8a0853b2629da3261d70027579415049adada6e58bc1d5fb93d624bb0b90680fe66a402dab6839438b20c0ed8c348164290b032d8612208fba73f9546e3a5c204302897c0c5b0217551ad099f53b2b291b00831d39487b196165b7c73f69e0d7811403a5cea7fd092843e27d97c03e2d302ba23114bd669fda31879e15f75ca2f3a981e571e6265125de4e02675b48569cb9"}, {0xb8, 0x0, 0x7, "c9b5fa8a364fbc7acb23c7f87920c8204dbf98e477898fccd35bc59f1905ed772164c0a162cf529c4c99eace082d9d82d63eb517bc43931871461643a996f420df4b325f96dfe45eeaf77512c95273dc0537312b37f1f72e968c15ba60a3e8bfbf806fde1b985333983334e907929bbda8e7edda841da9b991678e2cc5f02848b694913e1300f02286cf8ebdd84c634eb2e12b1d45edf220c8cda2bffc07fe80c470"}], 0x258}, 0xc054)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x18)
perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x6, 0x0, 0x9, 0x0, 0x0, 0x2, 0xa0110, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000c00), 0x8}, 0x488a, 0x100000001, 0xc, 0x1, 0x9f4, 0x0, 0x2ed9, 0x0, 0x0, 0x0, 0xac6b}, 0x0, 0xb, r3, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})

2m21.466814955s ago: executing program 32 (id=2282):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=""/158, 0x9e}, 0x2100)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdf7ffff0a0000094890a9a1ebcd2a00060000000000000e05000000010000e1096000302e615f5f61e40000"], 0x0, 0x4c}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="700b5e47b7faf35f70eb12152e4caa893b1b40bbef44ef68d2b64772e4cba6b5461cf34d3f70fe8e6cb632ae6c1f615a9e8a3335a723914aa5cc26395b12b254f18de4d3c944633204e57640ad2830465f2750c2f4a52c1cad59e5e5398b84411689", 0x62}, {&(0x7f0000000800)="f998a86bdb2f9b7443530128895b732c9fff70fe0f3e66885802e108224df736f3c7fcae9c774c38e426f2f33f6cbd6f417e0c2177eeeef4ce5296c0e084a44f1512bc388e00a89e477d5d632b9e0184f1c08fbe601a7058c10cba018446c3b4933909433d80ddc6df766100881f18eec8ee6b951b4192201f0c3a6a065d59797a4a947d093d842d3c4feab8e2efbfc2289cb1c9060b68cc81f0d4a4ef48a5ddcff0d67f28fb9592a066df05f0899ed2b845411b4feeca53437ba143cde8ddb88d29f7d59bb5360688df9b213985b97cdebfd6e362b57e79ec96cb3d665d38050b13b4b643f55545ff2c97c7d5b908821ad1643698", 0xf5}], 0x2, &(0x7f0000000940)=[{0xd8, 0x84, 0xff, "74857486f5221d503de050eefec8cb327b9ee4cc2b73965b84cbd5c324948ffa09a677cab86a753281508c36c23746b2da525bedf3e954c99f70119b22bb87f19cdb78208d907498774de8e4ee5462fd94b65edd1294dd446604e79ea5f94d638d2029e290dd03042da85b3a6bacabdf4f8010ae68bace5e0bebea24bd94839c485bed273463e773d5d0b30d908609e4cfeb474f75f799011880fbb691a55f87f27790909298658845780948cdfa7897de7cb3a210468d2490a82b3174b5171d03bec451af8c6e"}, {0xc8, 0x111, 0x7, "c3bbdfacd332cba0e0c0230db769d3b3cbd242c48f45a062b5cbcdd267c5dfef8a0853b2629da3261d70027579415049adada6e58bc1d5fb93d624bb0b90680fe66a402dab6839438b20c0ed8c348164290b032d8612208fba73f9546e3a5c204302897c0c5b0217551ad099f53b2b291b00831d39487b196165b7c73f69e0d7811403a5cea7fd092843e27d97c03e2d302ba23114bd669fda31879e15f75ca2f3a981e571e6265125de4e02675b48569cb9"}, {0xb8, 0x0, 0x7, "c9b5fa8a364fbc7acb23c7f87920c8204dbf98e477898fccd35bc59f1905ed772164c0a162cf529c4c99eace082d9d82d63eb517bc43931871461643a996f420df4b325f96dfe45eeaf77512c95273dc0537312b37f1f72e968c15ba60a3e8bfbf806fde1b985333983334e907929bbda8e7edda841da9b991678e2cc5f02848b694913e1300f02286cf8ebdd84c634eb2e12b1d45edf220c8cda2bffc07fe80c470"}], 0x258}, 0xc054)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x18)
perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x6, 0x0, 0x9, 0x0, 0x0, 0x2, 0xa0110, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000c00), 0x8}, 0x488a, 0x100000001, 0xc, 0x1, 0x9f4, 0x0, 0x2ed9, 0x0, 0x0, 0x0, 0xac6b}, 0x0, 0xb, r3, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})

1m44.467897405s ago: executing program 3 (id=2867):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x12}], 0x1}, 0x40)
recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x40000002)

1m44.384866662s ago: executing program 3 (id=2870):
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a3, &(0x7f0000000080))

1m44.382642581s ago: executing program 3 (id=2871):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000a78500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)

1m44.258539206s ago: executing program 3 (id=2873):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmsg$kcm(r0, 0x0, 0x12020)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

1m44.127126151s ago: executing program 3 (id=2877):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m44.008295504s ago: executing program 3 (id=2879):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xe7b8d9c5b5d01a1f]}}, 0x0, 0x2d, 0x0, 0x6}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000190059"], 0xfe33)

1m28.260663931s ago: executing program 33 (id=2879):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xe7b8d9c5b5d01a1f]}}, 0x0, 0x2d, 0x0, 0x6}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000190059"], 0xfe33)

53.921030951s ago: executing program 4 (id=3557):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

53.748474275s ago: executing program 2 (id=3561):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="91102d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

53.746978431s ago: executing program 2 (id=3562):
socketpair(0x22, 0x2, 0x2, &(0x7f0000000200))

53.698583765s ago: executing program 4 (id=3563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)

53.696800694s ago: executing program 2 (id=3564):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48)
r5 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r2, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x10003)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x0)

53.685753994s ago: executing program 4 (id=3565):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf7ff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100))

53.557477885s ago: executing program 4 (id=3568):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38)

53.530331883s ago: executing program 2 (id=3569):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x14}, 0x108003, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)

53.378324588s ago: executing program 2 (id=3572):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000081401"], 0x20}}, 0xc800)

53.378042493s ago: executing program 4 (id=3573):
mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

53.206539596s ago: executing program 2 (id=3574):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040043000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

53.158326423s ago: executing program 34 (id=3574):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040043000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

53.108397519s ago: executing program 4 (id=3576):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30001300000500040000000000050005000a00000014000780050015000200000008001240", @ANYRESOCT], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x418f, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="e400000001018101000000000000000000000005080003400000100008001a40000000090800074000001ad2080008"], 0xe4}, 0x1, 0x0, 0x0, 0x4044}, 0x40)
r6 = socket$kcm(0x2b, 0x1, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff}}}, 0xb8}}, 0x80)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000100070000000900020073797a300000000014000780080012400000000008001300000000030c0003"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000200)=r6, 0x21)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}}, 0x0)

53.017427016s ago: executing program 35 (id=3576):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30001300000500040000000000050005000a00000014000780050015000200000008001240", @ANYRESOCT], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x418f, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="e400000001018101000000000000000000000005080003400000100008001a40000000090800074000001ad2080008"], 0xe4}, 0x1, 0x0, 0x0, 0x4044}, 0x40)
r6 = socket$kcm(0x2b, 0x1, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff}}}, 0xb8}}, 0x80)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000100070000000900020073797a300000000014000780080012400000000008001300000000030c0003"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000200)=r6, 0x21)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}}, 0x0)

40.132893957s ago: executing program 5 (id=3721):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000002850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

40.045377011s ago: executing program 5 (id=3722):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

39.948647343s ago: executing program 5 (id=3724):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

39.508172851s ago: executing program 5 (id=3725):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="61109f000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)

39.427781323s ago: executing program 5 (id=3727):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x0, 0xc, 0x559, 0xa, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x62, 0x0, 0x4, 0x448, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8722b10, 0x80000001}, 0x0, 0x5, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41)

38.764201262s ago: executing program 5 (id=3731):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r1, 0x0, 0x24000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0))
socket$kcm(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2a, 0x3, 0x12, &(0x7f00000002c0))
close(r0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x8008801}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

23.704333745s ago: executing program 36 (id=3731):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r1, 0x0, 0x24000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0))
socket$kcm(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2a, 0x3, 0x12, &(0x7f00000002c0))
close(r0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x8008801}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

18.504557688s ago: executing program 7 (id=3956):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0)
socket$kcm(0x10, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0)

18.298083048s ago: executing program 6 (id=3961):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x11}}}, @dstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x58}, 0x20040000)

18.178103966s ago: executing program 6 (id=3964):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d087c06007c06e8fe55a1bc0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

18.177398949s ago: executing program 0 (id=3966):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, 0x0, 0x0)

18.085907438s ago: executing program 6 (id=3967):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="800100001a000100feffffdf00010000e0000001000000000000000000000000ff0100000000000000000000000000010001071c4e230003000020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414250000000000000000000000005534f5b2000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff05000000000000001f00000000000000fefffffffffffffffafffffffc0300000000000080000000003500000a0001800000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002"], 0x180}}, 0x844)

18.085705628s ago: executing program 0 (id=3968):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x6, 0x0, &(0x7f0000000080)="e6e55eb1f55d", 0x0, 0xff, 0x0, 0x1, 0x0, &(0x7f0000000000)='P', 0x0, 0x2, 0x0, 0x5}, 0x50)

17.997104369s ago: executing program 6 (id=3969):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0xffffff80, 0x61, 0x11, 0xffc3}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

17.996927403s ago: executing program 0 (id=3970):
r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x38000000000, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0xc000000000, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffff8dbbfc60, 0x100001}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0x2, 0x5, 0x0, 0x400, 0x0, 0x8000000000000001})

17.917328941s ago: executing program 0 (id=3971):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x100}, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x800, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f3c00db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa0afbc9"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

17.916966154s ago: executing program 6 (id=3972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00'}, 0x94)
r2 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}, 0x4000000)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$kcm(r2, &(0x7f0000000680)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/216, 0xd8}, {0x0}, {0x0}], 0x3, &(0x7f0000000600)=""/128, 0x80}, 0x20)
sendmsg$inet(r4, 0x0, 0x40008d4)
r6 = socket$kcm(0x2a, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r7}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8000000000000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0x14, 0x0, &(0x7f00000002c0)="f8c348cc02cb29dcc8007f5b08009ccaa57b0fdf", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.838216244s ago: executing program 0 (id=3973):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000016006b2b9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002)

17.725583886s ago: executing program 0 (id=3974):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x800, 0x6, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc)
getpid()
close(r5)

17.086783016s ago: executing program 7 (id=3975):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000001040101000000e90c0004000000000005000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0)

16.967774263s ago: executing program 7 (id=3976):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in=@broadcast, {0x2abe9d7c, 0x40000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {}, {0x0, 0x0, 0xfffffff7}, 0xfffffffd, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "9300d719ed77ad60765ae9de6eb27926"}}]}, 0x14c}}, 0x0)

16.90321478s ago: executing program 7 (id=3977):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0xb5}}, &(0x7f0000000480)='GPL\x00'}, 0x90)

16.903040591s ago: executing program 7 (id=3978):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, 0x34, 0x107, 0x0, 0x400, {0x3, 0x7c}, [@nested={0x28, 0x1, 0x0, 0x1, [@typed={0x22, 0x2006, 0x0, 0x0, @str='\x80J\xe1%\x93\xa3\xea\x94\xad\x96\x86\xa2br\x0fT\xf1\x14_\xe7\xf3\x05S@av\\\x19f\x95'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

16.798230175s ago: executing program 7 (id=3979):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0x20000000)

15.778043279s ago: executing program 6 (id=3980):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)

1.976130627s ago: executing program 37 (id=3974):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x800, 0x6, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc)
getpid()
close(r5)

920.067698ms ago: executing program 38 (id=3979):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0x20000000)

0s ago: executing program 39 (id=3980):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)

kernel console output (not intermixed with test programs):

 blocking state
[  127.265278][ T8004] bridge0: port 4(team0) entered disabled state
[  127.289805][ T8004] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  127.296892][ T8002] lo speed is unknown, defaulting to 1000
[  127.613992][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'.
[  127.844750][ T8018] netlink: 'syz.1.919': attribute type 12 has an invalid length.
[  127.850060][ T8018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.919'.
[  127.993846][ T8020] netlink: 'syz.2.920': attribute type 7 has an invalid length.
[  128.000327][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'.
[  128.161486][ T8026] netlink: 'syz.1.922': attribute type 33 has an invalid length.
[  128.164995][ T8026] netlink: 152 bytes leftover after parsing attributes in process `syz.1.922'.
[  128.395514][ T8033] netlink: 'syz.0.926': attribute type 21 has an invalid length.
[  128.399819][ T8033] netlink: 'syz.0.926': attribute type 4 has an invalid length.
[  129.542624][ T8063] netlink: 'syz.0.939': attribute type 27 has an invalid length.
[  129.546532][ T8063] __nla_validate_parse: 2 callbacks suppressed
[  129.546549][ T8063] netlink: 164 bytes leftover after parsing attributes in process `syz.0.939'.
[  129.672636][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.941'.
[  129.676711][ T8069] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  129.923372][ T8083] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.949'.
[  130.870135][ T8105] netlink: 180 bytes leftover after parsing attributes in process `syz.2.958'.
[  130.926424][ T8108] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  130.929260][ T8109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.959'.
[  130.945951][ T8108] validate_nla: 1 callbacks suppressed
[  130.945964][ T8108] netlink: 'syz.2.960': attribute type 10 has an invalid length.
[  130.961805][ T8108] team0: Port device wlan1 removed
[  131.036312][ T8113] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.962'.
[  131.125014][ T8121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'.
[  131.129327][ T8121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'.
[  131.132762][ T8121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'.
[  131.220709][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'.
[  131.485191][ T8140] netlink: 'syz.0.975': attribute type 3 has an invalid length.
[  132.831216][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.833945][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  134.507976][ T8163] veth1_vlan: left allmulticast mode
[  134.516766][ T8171] netlink: 'syz.0.985': attribute type 1 has an invalid length.
[  134.520490][ T8171] netlink: 'syz.0.985': attribute type 2 has an invalid length.
[  134.763083][ T8163] bond0: (slave macvlan0): Releasing backup interface
[  135.008870][ T8173] tap0: tun_chr_ioctl cmd 1074025675
[  135.010986][ T8173] tap0: persist enabled
[  135.012604][ T8174] tap0: tun_chr_ioctl cmd 1074025675
[  135.014608][ T8174] tap0: persist enabled
[  135.961245][ T8198] __nla_validate_parse: 2 callbacks suppressed
[  135.961261][ T8198] netlink: 2 bytes leftover after parsing attributes in process `syz.0.997'.
[  136.150515][ T8209] netlink: 1018 bytes leftover after parsing attributes in process `syz.1.1002'.
[  136.250232][ T8215] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1005'.
[  136.334652][ T8221] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1008'.
[  136.593334][ T5235] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  136.829227][ T8272] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1025'.
[  136.932888][ T8276] netlink: 'syz.2.1026': attribute type 28 has an invalid length.
[  136.935662][ T8276] netlink: 'syz.2.1026': attribute type 3 has an invalid length.
[  136.938883][ T8276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1026'.
[  136.951419][ T8278] netlink: 'syz.0.1028': attribute type 2 has an invalid length.
[  136.954791][ T8278] netlink: 130532 bytes leftover after parsing attributes in process `syz.0.1028'.
[  137.036217][ T8286] netlink: 'syz.2.1032': attribute type 30 has an invalid length.
[  137.142293][ T8290] netlink: 'syz.2.1033': attribute type 2 has an invalid length.
[  137.284353][ T8292] netlink: 'syz.2.1034': attribute type 6 has an invalid length.
[  137.290280][ T8292] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1034'.
[  137.794261][ T8294] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1035'.
[  137.821218][ T8296] netlink: 'syz.2.1036': attribute type 41 has an invalid length.
[  137.913678][ T8304] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  138.012784][ T8314] netlink: 'syz.2.1045': attribute type 32 has an invalid length.
[  138.017011][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  138.136060][ T8326] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  138.196263][ T8330] netlink: 'syz.2.1053': attribute type 21 has an invalid length.
[  138.667175][ T5235] Bluetooth: hci1: command tx timeout
[  140.925644][ T5235] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  140.925800][ T5235] Bluetooth: hci2: connection err: -111
[  141.045679][ T8397] __nla_validate_parse: 3 callbacks suppressed
[  141.045697][ T8397] netlink: 492 bytes leftover after parsing attributes in process `syz.2.1073'.
[  141.704373][ T8429] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1085'.
[  142.863675][ T8458] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1098'.
[  142.895054][ T8461] netlink: 'syz.1.1100': attribute type 2 has an invalid length.
[  142.899126][ T8461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1100'.
[  143.249015][ T8487] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  143.361017][ T5235] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  143.592921][ T8509] netlink: 'syz.0.1123': attribute type 25 has an invalid length.
[  143.598991][ T8509] netlink: 'syz.0.1123': attribute type 28 has an invalid length.
[  143.665809][ T8515] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1126'.
[  143.778062][ T8527] netlink: 294 bytes leftover after parsing attributes in process `syz.1.1133'.
[  143.893263][ T8545] lo: entered allmulticast mode
[  143.902629][ T5908] lo speed is unknown, defaulting to 1000
[  143.904853][ T5908] syz2: Port: 1 Link DOWN
[  143.907689][ T8545] lo: entered promiscuous mode
[  143.910925][ T8545] lo: left allmulticast mode
[  143.927155][ T5908] lo speed is unknown, defaulting to 1000
[  143.929191][ T5908] syz2: Port: 1 Link ACTIVE
[  143.981807][ T8551] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1143'.
[  144.015042][ T8549] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1141'.
[  144.025908][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'.
[  144.268369][ T8558] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1146'.
[  144.826190][ T8598] netlink: 'syz.2.1165': attribute type 29 has an invalid length.
[  144.832168][ T8598] netlink: 'syz.2.1165': attribute type 29 has an invalid length.
[  144.835251][ T8598] netlink: 'syz.2.1165': attribute type 29 has an invalid length.
[  145.311769][ T8641] : port 1(veth0_to_bridge) entered blocking state
[  145.314242][ T8641] : port 1(veth0_to_bridge) entered disabled state
[  145.317701][ T8641] veth0_to_bridge: entered allmulticast mode
[  145.321762][ T8641] veth0_to_bridge: entered promiscuous mode
[  145.324291][ T8643] xt_bpf: check failed: parse error
[  145.338579][ T8641] : port 2(veth0_to_team) entered blocking state
[  145.341159][ T8641] : port 2(veth0_to_team) entered disabled state
[  145.344204][ T8641] veth0_to_team: entered allmulticast mode
[  145.349957][ T8641] veth0_to_team: entered promiscuous mode
[  145.626457][ T5235] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  146.013119][ T8675] delete_channel: no stack
[  146.061101][ T8681] netlink: 'syz.1.1201': attribute type 6 has an invalid length.
[  146.063920][ T8681] netlink: 'syz.1.1201': attribute type 1 has an invalid length.
[  146.066594][ T8681] __nla_validate_parse: 7 callbacks suppressed
[  146.066601][ T8681] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1201'.
[  146.162337][ T8684] netlink: 'syz.1.1202': attribute type 1 has an invalid length.
[  146.164969][ T8684] netlink: 'syz.1.1202': attribute type 4 has an invalid length.
[  146.189455][ T8684] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1202'.
[  146.200090][ T8684] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1202'.
[  146.232973][ T8690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1205'.
[  146.246680][ T8690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1205'.
[  146.251295][ T8690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1205'.
[  146.292415][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'.
[  146.604153][ T8723] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.1221'.
[  146.761140][ T8733] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1223'.
[  146.799562][ T8730] netlink: 211924 bytes leftover after parsing attributes in process `syz.2.1224'.
[  148.714290][ T8778] validate_nla: 13 callbacks suppressed
[  148.714300][ T8778] netlink: 'syz.1.1243': attribute type 11 has an invalid length.
[  148.860614][ T8780] option changes via remount are deprecated (pid=8779 comm=syz.1.1244)
[  149.063826][ T8809] C: renamed from team_slave_0 (while UP)
[  149.101445][ T8809] netlink: 'syz.2.1256': attribute type 3 has an invalid length.
[  149.113399][ T8809] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  149.469053][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  150.446332][ T8848] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  150.453341][ T8850] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  150.581073][ T8848] team0: Device ipvlan1 failed to register rx_handler
[  150.622630][ T8853] netlink: 'syz.0.1272': attribute type 29 has an invalid length.
[  150.625846][ T8853] netlink: 'syz.0.1272': attribute type 3 has an invalid length.
[  152.001478][ T8903] netlink: 'syz.0.1294': attribute type 1 has an invalid length.
[  152.020856][ T8905] __nla_validate_parse: 6 callbacks suppressed
[  152.020867][ T8905] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1295'.
[  153.479534][ T8928] lo speed is unknown, defaulting to 1000
[  153.543119][ T8933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1306'.
[  153.722265][ T8944] netlink: 'syz.0.1313': attribute type 6 has an invalid length.
[  153.726175][ T8944] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1313'.
[  154.115813][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'.
[  155.206537][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  155.772258][ T8999] netlink: 'syz.2.1333': attribute type 13 has an invalid length.
[  156.623686][ T8995] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1332'.
[  157.233023][ T9027] netlink: 'syz.1.1345': attribute type 10 has an invalid length.
[  157.236525][ T9027] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1345'.
[  160.597633][ T9137] netlink: 'syz.1.1368': attribute type 9 has an invalid length.
[  160.785385][ T9138] delete_channel: no stack
[  161.045523][ T9156] netlink: 'syz.0.1377': attribute type 9 has an invalid length.
[  161.049885][ T9156] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1377'.
[  161.201656][ T9162] netlink: 'syz.0.1380': attribute type 2 has an invalid length.
[  161.205437][ T9162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1380'.
[  161.435184][ T9172] netlink: 'syz.1.1385': attribute type 6 has an invalid length.
[  161.863730][ T9176] netlink: 'syz.1.1387': attribute type 1 has an invalid length.
[  161.876743][ T9176] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1387'.
[  161.883328][ T9176] netlink: 'syz.1.1387': attribute type 1 has an invalid length.
[  161.886357][ T9176] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1387'.
[  162.209555][ T9197] netlink: 'syz.0.1397': attribute type 29 has an invalid length.
[  162.214412][ T9197] netlink: 'syz.0.1397': attribute type 10 has an invalid length.
[  162.228235][ T9197] bridge0: port 3(bond0) entered disabled state
[  162.233874][ T9197] bond0: left allmulticast mode
[  162.236393][ T9197] @: left allmulticast mode
[  162.242648][ T9197] bond_slave_1: left allmulticast mode
[  162.245218][ T9197] bond0: left promiscuous mode
[  162.248378][ T9197] @: left promiscuous mode
[  162.250763][ T9197] bond_slave_1: left promiscuous mode
[  162.253494][ T9197] bridge0: port 3(bond0) entered disabled state
[  162.500016][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.503923][ T9197] bond0: entered promiscuous mode
[  162.506320][ T9197] @: entered promiscuous mode
[  162.511980][ T9197] bond_slave_1: entered promiscuous mode
[  162.514881][ T9197] bond0: entered allmulticast mode
[  162.518865][ T9197] @: entered allmulticast mode
[  162.521302][ T9197] bond_slave_1: entered allmulticast mode
[  162.524830][ T9197] team0: Port device bond0 added
[  162.742915][ T9210] syzkaller1: tun_chr_ioctl cmd 1074025677
[  162.745827][ T9210] syzkaller1: linktype set to 1
[  162.851218][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  162.972177][ T5235] Bluetooth: hci2: Malformed HCI Event: 0x22
[  163.227534][ T9220] netlink: 'syz.0.1405': attribute type 2 has an invalid length.
[  163.230836][ T9220] netlink: 8196 bytes leftover after parsing attributes in process `syz.0.1405'.
[  163.471567][ T9235] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1414'.
[  164.150814][ T9265] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1427'.
[  164.155256][ T9265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  164.235460][ T9267] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1428'.
[  164.519754][ T9281] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1434'.
[  165.220567][ T9316] netlink: 'syz.0.1450': attribute type 4 has an invalid length.
[  165.436545][ T9318] batman_adv: batadv0: Adding interface: netdevsim0
[  165.467786][ T9318] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.479658][ T9318] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  165.487445][ T9320] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1452'.
[  166.456176][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'.
[  166.469369][ T9377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.581528][ T9386] validate_nla: 2 callbacks suppressed
[  166.581543][ T9386] netlink: 'syz.1.1480': attribute type 21 has an invalid length.
[  166.662889][ T5235] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  166.674585][ T9394] netlink: 'syz.2.1484': attribute type 10 has an invalid length.
[  166.803473][ T9401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1487'.
[  166.814460][ T9394] team0: Device ipvlan1 failed to register rx_handler
[  166.924626][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1493'.
[  167.001999][ T9422] netlink: 'syz.2.1497': attribute type 39 has an invalid length.
[  167.003706][ T9419] netlink: 'syz.0.1496': attribute type 21 has an invalid length.
[  167.543958][ T9444] netlink: 'syz.2.1507': attribute type 1 has an invalid length.
[  167.551888][ T9444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.631906][ T9452] netlink: 'syz.2.1510': attribute type 1 has an invalid length.
[  167.635250][ T9452] netlink: 'syz.2.1510': attribute type 4 has an invalid length.
[  167.669321][ T9448] openvswitch: netlink: Message has 6 unknown bytes.
[  167.728369][ T9448] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.732900][ T9448] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.304457][ T9481] netlink: 'syz.2.1521': attribute type 2 has an invalid length.
[  168.309732][ T9481] netlink: 'syz.2.1521': attribute type 2 has an invalid length.
[  169.293345][ T9520] __nla_validate_parse: 5 callbacks suppressed
[  169.293362][ T9520] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1537'.
[  169.873736][ T9545] netlink: 'syz.1.1549': attribute type 27 has an invalid length.
[  169.879854][ T9545] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1549'.
[  169.884631][ T9545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  170.213522][ T9561] netlink: 103 bytes leftover after parsing attributes in process `syz.1.1556'.
[  170.344996][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'.
[  170.406524][ T9573] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  170.863957][ T9586] sock: sock_timestamping_bind_phc: sock not bind to device
[  171.181932][ T9596] xt_HMARK: proto mask must be zero with L3 mode
[  171.193551][ T9596] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1570'.
[  171.197178][ T9596] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  171.201057][ T9596] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  171.737514][ T9610] : renamed from gre0 (while UP)
[  172.026238][ T9609] syzkaller0: entered promiscuous mode
[  172.032059][ T9609] syzkaller0: entered allmulticast mode
[  173.195588][ T9622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1581'.
[  173.308667][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'.
[  173.393013][ T9640] validate_nla: 1 callbacks suppressed
[  173.393029][ T9640] netlink: 'syz.2.1587': attribute type 1 has an invalid length.
[  173.488901][ T5235] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  174.337653][ T9682] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  174.340525][ T9682] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  174.376680][ T9680] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  175.874222][ T9713] netlink: 'syz.2.1621': attribute type 9 has an invalid length.
[  175.900359][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'.
[  177.110953][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'.
[  177.164214][   T33] audit: type=1107 audit(1758221799.942:2): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  177.264181][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'.
[  178.537345][ T9786] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1654'.
[  179.504148][ T9814] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.981353][ T9829] netlink: 'syz.2.1673': attribute type 29 has an invalid length.
[  179.986253][ T9829] netlink: 'syz.2.1673': attribute type 29 has an invalid length.
[  179.990654][ T9829] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1673'.
[  180.177784][ T9843] netlink: 'syz.1.1680': attribute type 21 has an invalid length.
[  180.181705][ T9843] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1680'.
[  180.426859][ T9862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1689'.
[  181.989064][ T9907] netlink: 'syz.2.1708': attribute type 2 has an invalid length.
[  181.992866][ T9907] netlink: 'syz.2.1708': attribute type 7 has an invalid length.
[  181.996149][ T9907] netlink: 85 bytes leftover after parsing attributes in process `syz.2.1708'.
[  182.002918][ T9907] netlink: 130140 bytes leftover after parsing attributes in process `syz.2.1708'.
[  182.006873][ T9907] netlink: 'syz.2.1708': attribute type 2 has an invalid length.
[  182.014216][ T9907] netlink: 'syz.2.1708': attribute type 7 has an invalid length.
[  182.021476][ T9907] netlink: 85 bytes leftover after parsing attributes in process `syz.2.1708'.
[  182.119561][ T9915] netlink: 'syz.2.1712': attribute type 10 has an invalid length.
[  182.201582][ T9918] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1712'.
[  182.790144][ T9915] team0 (unregistering): Port device C removed
[  182.800332][ T9915] team0 (unregistering): Port device team_slave_1 removed
[  182.836496][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'.
[  182.963554][ T9935] netlink: 'syz.2.1721': attribute type 2 has an invalid length.
[  183.490709][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'.
[  183.673717][ T9971] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  183.810431][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1739'.
[  184.041052][ T9984] openvswitch: netlink: Unknown key attributes 1
[  184.178275][ T9993] syzkaller0: entered promiscuous mode
[  184.180846][ T9993] syzkaller0: entered allmulticast mode
[  184.269500][ T9997] netlink: 'syz.1.1748': attribute type 4 has an invalid length.
[  184.272873][ T9997] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1748'.
[  184.336225][T10000] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1746'.
[  185.431362][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'.
[  187.452150][T10076] syzkaller0: entered promiscuous mode
[  187.454873][T10076] syzkaller0: entered allmulticast mode
[  187.978719][T10064] delete_channel: no stack
[  189.426462][T10117] __nla_validate_parse: 2 callbacks suppressed
[  189.426479][T10117] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1798'.
[  189.821390][T10137] netlink: 'syz.0.1807': attribute type 41 has an invalid length.
[  189.998397][T10142] netlink: 'syz.1.1808': attribute type 1 has an invalid length.
[  190.001325][T10142] netlink: 'syz.1.1808': attribute type 1 has an invalid length.
[  190.016471][T10142] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  190.416857][T10154] netlink: 'syz.1.1815': attribute type 10 has an invalid length.
[  190.553426][T10154] bridge0: port 3(netdevsim0) entered blocking state
[  190.558028][T10154] bridge0: port 3(netdevsim0) entered disabled state
[  190.562786][T10154] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  190.583339][T10154] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  190.728443][T10174] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1819'.
[  190.732348][T10174] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1819'.
[  190.738639][T10174] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1819'.
[  190.871650][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1821'.
[  191.278247][T10093] Bluetooth: hci1: command 0x0406 tx timeout
[  191.281035][T10093] Bluetooth: hci2: command 0x0406 tx timeout
[  191.674530][T10213] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1832'.
[  192.447998][T10222] pim6reg1: entered promiscuous mode
[  192.450434][T10222] pim6reg1: entered allmulticast mode
[  192.846186][T10251] netlink: 'syz.0.1851': attribute type 3 has an invalid length.
[  192.850718][T10251] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1851'.
[  193.748075][T10261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1857'.
[  193.752373][T10261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1857'.
[  193.756674][T10261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1857'.
[  193.764689][T10263] netlink: 'syz.2.1856': attribute type 29 has an invalid length.
[  194.271864][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.273984][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.368487][T10300] syzkaller0: entered promiscuous mode
[  194.370342][T10300] syzkaller0: entered allmulticast mode
[  194.378186][T10300] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  194.618276][ T5848] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[  194.779761][T10319] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1883'.
[  194.786408][T10319] tc_dump_action: action bad kind
[  194.886045][ T5848] Bluetooth: hci1: ACL packet too small
[  196.063423][ T5848] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7
[  196.438293][T10396] netlink: 'syz.0.1918': attribute type 13 has an invalid length.
[  196.443803][T10396] netlink: 'syz.0.1918': attribute type 58 has an invalid length.
[  196.446399][T10396] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1918'.
[  196.568509][T10402] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1921'.
[  196.606569][T10404] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1923'.
[  197.113227][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'.
[  197.475078][T10463] netlink: 'syz.1.1950': attribute type 6 has an invalid length.
[  197.479830][T10463] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1950'.
[  197.638855][T10476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1956'.
[  197.642908][T10476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1956'.
[  197.655192][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'.
[  197.914590][T10487] openvswitch: netlink: Duplicate or invalid key (type 0).
[  197.914840][T10485] netlink: 'syz.1.1960': attribute type 39 has an invalid length.
[  197.918189][T10487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.963586][T10485] veth0_macvtap: left promiscuous mode
[  198.263365][T10505] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1970'.
[  198.618094][T10524] netlink: 'syz.2.1979': attribute type 9 has an invalid length.
[  198.706333][T10534] lo speed is unknown, defaulting to 1000
[  199.228034][T10561] netlink: 'syz.0.1991': attribute type 1 has an invalid length.
[  199.860173][T10594] syz.0.2004: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  199.866683][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.0.2004 Not tainted syzkaller #0 PREEMPT(full) 
[  199.866728][T10594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.866737][T10594] Call Trace:
[  199.866743][T10594]  <TASK>
[  199.866750][T10594]  dump_stack_lvl+0x189/0x250
[  199.866777][T10594]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.866794][T10594]  ? __pfx__printk+0x10/0x10
[  199.866816][T10594]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  199.866833][T10594]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  199.866852][T10594]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  199.866871][T10594]  warn_alloc+0x214/0x310
[  199.866885][T10594]  ? stack_depot_save_flags+0x40/0x860
[  199.866928][T10594]  ? __pfx_warn_alloc+0x10/0x10
[  199.866945][T10594]  ? kasan_save_track+0x4f/0x80
[  199.866964][T10594]  ? xskq_create+0x56/0x170
[  199.866976][T10594]  ? xsk_init_queue+0xb0/0x110
[  199.866986][T10594]  ? xsk_setsockopt+0x57b/0x8d0
[  199.867006][T10594]  ? do_sock_setsockopt+0x17c/0x1b0
[  199.867023][T10594]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  199.867038][T10594]  ? do_syscall_64+0xfa/0x3b0
[  199.867052][T10594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.867070][T10594]  __vmalloc_node_range_noprof+0x125/0x12f0
[  199.867132][T10594]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  199.867157][T10594]  ? __kasan_kmalloc+0x93/0xb0
[  199.867177][T10594]  vmalloc_user_noprof+0xad/0xf0
[  199.867196][T10594]  ? xskq_create+0xbf/0x170
[  199.867209][T10594]  xskq_create+0xbf/0x170
[  199.867223][T10594]  xsk_init_queue+0xb0/0x110
[  199.867238][T10594]  xsk_setsockopt+0x57b/0x8d0
[  199.867259][T10594]  ? __pfx_xsk_setsockopt+0x10/0x10
[  199.867276][T10594]  ? __pfx_aa_sk_perm+0x10/0x10
[  199.867290][T10594]  ? __fget_files+0x2a/0x420
[  199.867300][T10594]  ? aa_sock_opt_perm+0xff/0x1b0
[  199.867316][T10594]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  199.867338][T10594]  ? __pfx_xsk_setsockopt+0x10/0x10
[  199.867358][T10594]  do_sock_setsockopt+0x17c/0x1b0
[  199.867377][T10594]  __x64_sys_setsockopt+0x13f/0x1b0
[  199.867397][T10594]  do_syscall_64+0xfa/0x3b0
[  199.867411][T10594]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.867422][T10594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.867433][T10594]  ? exc_page_fault+0x9f/0xf0
[  199.867447][T10594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.867458][T10594] RIP: 0033:0x7f8e36f8eba9
[  199.867469][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.867479][T10594] RSP: 002b:00007f8e37e73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  199.867493][T10594] RAX: ffffffffffffffda RBX: 00007f8e371d6090 RCX: 00007f8e36f8eba9
[  199.867504][T10594] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  199.867511][T10594] RBP: 00007f8e37011e19 R08: 0000000000000004 R09: 0000000000000000
[  199.867519][T10594] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  199.867527][T10594] R13: 00007f8e371d6128 R14: 00007f8e371d6090 R15: 00007ffe193a10c8
[  199.867549][T10594]  </TASK>
[  200.013774][T10594] Mem-Info:
[  200.015645][T10594] active_anon:10617 inactive_anon:0 isolated_anon:0
[  200.015645][T10594]  active_file:13663 inactive_file:38290 isolated_file:0
[  200.015645][T10594]  unevictable:1768 dirty:206 writeback:0
[  200.015645][T10594]  slab_reclaimable:10150 slab_unreclaimable:66487
[  200.015645][T10594]  mapped:18034 shmem:2404 pagetables:920
[  200.015645][T10594]  sec_pagetables:0 bounce:0
[  200.015645][T10594]  kernel_misc_reclaimable:0
[  200.015645][T10594]  free:265939 free_pcp:22290 free_cma:0
[  200.037428][T10594] Node 0 active_anon:24152kB inactive_anon:0kB active_file:23012kB inactive_file:6384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32684kB dirty:600kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6644kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  200.052701][T10594] Node 1 active_anon:18316kB inactive_anon:0kB active_file:31640kB inactive_file:146776kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39452kB dirty:224kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4816kB pagetables:1716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  200.069365][T10594] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  200.083479][T10594] lowmem_reserve[]: 0 811 811 811 811
[  200.086339][T10594] Node 0 DMA32 free:332536kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24152kB inactive_anon:0kB active_file:23012kB inactive_file:6384kB unevictable:3536kB writepending:600kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:34788kB local_pcp:18024kB free_cma:0kB
[  200.100499][T10594] lowmem_reserve[]: 0 0 0 0 0
[  200.102172][T10594] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  200.116108][T10594] lowmem_reserve[]: 0 0 854 854 854
[  200.119973][T10594] Node 1 Normal free:256496kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18520kB inactive_anon:0kB active_file:31640kB inactive_file:146776kB unevictable:3536kB writepending:224kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:54184kB local_pcp:18600kB free_cma:0kB
[  200.133608][T10594] lowmem_reserve[]: 0 0 0 0 0
[  200.135677][T10594] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  200.142583][T10594] Node 0 DMA32: 14*4kB (UME) 246*8kB (UM) 457*16kB (UME) 302*32kB (UME) 257*64kB (UME) 179*128kB (UME) 33*256kB (UME) 13*512kB (UM) 9*1024kB (UME) 2*2048kB (UE) 60*4096kB (M) = 332536kB
[  200.151290][T10594] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  200.160989][T10594] Node 1 Normal: 402*4kB (UME) 125*8kB (UM) 372*16kB (UME) 308*32kB (UM) 128*64kB (UM) 88*128kB (UME) 62*256kB (UME) 22*512kB (UM) 17*1024kB (UME) 5*2048kB (UE) 40*4096kB (M) = 256496kB
[  200.170045][T10594] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  200.174318][T10594] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  200.179868][T10594] 54357 total pagecache pages
[  200.182019][T10594] 0 pages in swap cache
[  200.183789][T10594] Free swap  = 124996kB
[  200.185538][T10594] Total swap = 124996kB
[  200.187822][T10594] 786301 pages RAM
[  200.189456][T10594] 0 pages HighMem/MovableOnly
[  200.191548][T10594] 241347 pages reserved
[  200.193442][T10594] 0 pages cma reserved
[  200.206139][T10603] __nla_validate_parse: 9 callbacks suppressed
[  200.206154][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'.
[  200.214561][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'.
[  200.240544][T10605] proc: Unknown parameter 'uid>00000000000000000000'
[  200.869295][T10653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.071916][T10664] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2037'.
[  201.494426][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  201.652600][T10682] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.2044'.
[  201.655774][T10682] netlink: 62239 bytes leftover after parsing attributes in process `syz.1.2044'.
[  202.134486][T10707] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2053'.
[  203.132225][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2068'.
[  203.155124][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2068'.
[  203.176029][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2068'.
[  203.490029][T10747] svc: failed to register nfsdv3 RPC service (errno 22).
[  203.495963][T10747] svc: failed to register nfsaclv3 RPC service (errno 22).
[  203.508304][T10753] pim6reg1: entered allmulticast mode
[  203.513724][T10753] pim6reg1: left allmulticast mode
[  204.640120][ T5848] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  204.815452][T10813] netlink: 'syz.0.2099': attribute type 7 has an invalid length.
[  204.983271][T10829] netlink: 'syz.0.2106': attribute type 25 has an invalid length.
[  207.036840][T10870] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2124'.
[  208.338813][ T5848] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[  208.422923][T10900] openvswitch: netlink: Multiple metadata blocks provided
[  208.460985][T10904] netlink: 'syz.2.2139': attribute type 21 has an invalid length.
[  208.465492][T10906] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2140'.
[  208.506108][T10911] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2143'.
[  208.551397][T10914] netlink: 'syz.1.2144': attribute type 3 has an invalid length.
[  208.554955][T10914] netlink: 'syz.1.2144': attribute type 1 has an invalid length.
[  208.558796][T10914] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2144'.
[  208.643685][T10924] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  208.716337][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2151'.
[  208.869746][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'.
[  208.936825][T10949] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2162'.
[  208.951163][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'.
[  208.954966][T10951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2161'.
[  208.962250][T10951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2161'.
[  209.032127][ T5848] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[  209.046026][T10955] netlink: 'syz.2.2164': attribute type 10 has an invalid length.
[  209.196739][T10964] bpf: Bad value for 'gid'
[  209.836439][T10993] netlink: 'syz.2.2181': attribute type 1 has an invalid length.
[  209.839548][T10993] netlink: 'syz.2.2181': attribute type 2 has an invalid length.
[  210.102221][T11019] netlink: 'syz.2.2194': attribute type 21 has an invalid length.
[  210.392617][T11037] delete_channel: no stack
[  211.641804][T11071] netlink: 'syz.2.2218': attribute type 25 has an invalid length.
[  212.216418][T11104] netlink: 'syz.0.2233': attribute type 7 has an invalid length.
[  213.035807][T11119] __nla_validate_parse: 8 callbacks suppressed
[  213.035818][T11119] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2241'.
[  213.065346][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2242'.
[  213.147492][T11128] netlink: 'syz.1.2245': attribute type 1 has an invalid length.
[  213.150058][T11128] netlink: 'syz.1.2245': attribute type 4 has an invalid length.
[  213.222186][T11138] lo speed is unknown, defaulting to 1000
[  213.230932][ T5848] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  213.252473][T11140] netlink: 'syz.1.2250': attribute type 3 has an invalid length.
[  213.258882][T11140] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  213.262004][T11140] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2250'.
[  213.426231][T11150] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2254'.
[  213.429787][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'.
[  213.433539][T11150] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2254'.
[  213.437052][T11150] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2254'.
[  214.725052][T11167] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2260'.
[  215.979866][T11202] netlink: 'syz.0.2277': attribute type 3 has an invalid length.
[  215.982510][T11202] netlink: 'syz.0.2277': attribute type 2 has an invalid length.
[  215.985766][T11202] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.2277'.
[  216.629821][T11215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2281'.
[  216.990951][T11217] netlink: 'syz.0.2283': attribute type 3 has an invalid length.
[  219.091939][T11260] __nla_validate_parse: 2 callbacks suppressed
[  219.091955][T11260] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2303'.
[  219.504718][T11279] sctp: [Deprecated]: syz.0.2311 (pid 11279) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.504718][T11279] Use struct sctp_sack_info instead
[  221.128087][T11311] tap0: tun_chr_ioctl cmd 21731
[  221.140364][T11311] tap0: tun_chr_ioctl cmd 2147767521
[  221.621478][ T5848] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  221.647653][T11327] netlink: 'syz.2.2333': attribute type 1 has an invalid length.
[  221.664811][T11327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2333'.
[  221.678197][T11327] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  222.033982][ T5848] Bluetooth: hci0: unknown advertising packet type: 0x80
[  222.034020][ T5848] Bluetooth: hci0: Malformed LE Event: 0x02
[  222.424178][T11341] netlink: 'syz.0.2340': attribute type 4 has an invalid length.
[  222.927335][T11353] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  222.989233][   T33] audit: type=1107 audit(1758221845.782:3): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':8=5MHCIT2x'!{x5	E&'
[  223.273653][T11363] netlink: 'syz.0.2350': attribute type 14 has an invalid length.
[  223.575323][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'.
[  223.691391][T11380] netlink: 'syz.0.2358': attribute type 7 has an invalid length.
[  223.778998][T11384] netlink: 'syz.0.2360': attribute type 13 has an invalid length.
[  223.782289][T11384] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2360'.
[  223.904068][T11390] netlink: 'syz.0.2363': attribute type 46 has an invalid length.
[  223.906754][T11390] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2363'.
[  224.728627][T11409] : renamed from pim6reg1
[  224.954608][T11421] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2377'.
[  224.960434][T11421] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2377'.
[  224.964859][T11421] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2377'.
[  225.020665][T11425] netlink: 'syz.0.2379': attribute type 12 has an invalid length.
[  225.024055][T11425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2379'.
[  225.215071][   T13] syzkaller0: tun_net_xmit 76
[  225.219339][   T13] syzkaller0: tun_net_xmit 48
[  225.237412][ T5908] syzkaller0: tun_net_xmit 76
[  225.252092][T11433] syzkaller0: tun_net_xmit 1280
[  225.254455][T11433] syzkaller0: create flow: hash 27617269 index 1
[  225.267267][ T5908] syzkaller0: tun_net_xmit 76
[  225.288816][T11435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.331767][T11432] syzkaller0: delete flow: hash 27617269 index 1
[  227.454961][T11475] netlink: 'syz.0.2401': attribute type 13 has an invalid length.
[  227.458854][T11475] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2401'.
[  227.974718][T11484] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2405'.
[  228.814590][T11514] netlink: 'syz.0.2416': attribute type 39 has an invalid length.
[  229.829495][T11514] hsr_slave_0 (unregistering): left promiscuous mode
[  230.221087][T11539] netlink: 'syz.0.2427': attribute type 9 has an invalid length.
[  230.223634][T11539] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.2427'.
[  230.280242][T11545] netlink: 'syz.2.2430': attribute type 13 has an invalid length.
[  230.396345][T11554] netlink: 'syz.2.2434': attribute type 10 has an invalid length.
[  230.452393][T11558] netlink: 'syz.0.2436': attribute type 21 has an invalid length.
[  230.455227][T11558] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2436'.
[  230.464446][T11558] netlink: 'syz.0.2436': attribute type 4 has an invalid length.
[  230.467650][T11558] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2436'.
[  230.509677][T11560] netlink: 'syz.2.2437': attribute type 3 has an invalid length.
[  230.513486][T11560] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2437'.
[  230.680366][T11568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2441'.
[  230.689435][T11568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2441'.
[  231.569702][T11575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2444'.
[  231.574181][T11575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2444'.
[  231.577839][T11575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2444'.
[  231.669761][T11577] netlink: 'syz.0.2445': attribute type 15 has an invalid length.
[  231.672461][T11578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2444'.
[  231.865980][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  231.874287][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  231.885433][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  231.888800][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  231.893758][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.939956][T11582] lo speed is unknown, defaulting to 1000
[  232.102836][T11595] openvswitch: netlink: Unknown nsh attribute 0
[  232.105306][T11595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.113634][T11582] chnl_net:caif_netlink_parms(): no params data found
[  232.212635][T11582] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.237390][T11582] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.240089][T11582] bridge_slave_0: entered allmulticast mode
[  232.244371][T11582] bridge_slave_0: entered promiscuous mode
[  232.248719][T11582] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.251618][T11582] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.255009][T11582] bridge_slave_1: entered allmulticast mode
[  232.258644][T11582] bridge_slave_1: entered promiscuous mode
[  232.294385][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.301261][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.325589][T11582] team0: Port device team_slave_0 added
[  232.345045][T11582] team0: Port device team_slave_1 added
[  232.369031][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.371481][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.384216][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.390894][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.394054][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.406540][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.438996][T11582] hsr_slave_0: entered promiscuous mode
[  232.442202][T11582] hsr_slave_1: entered promiscuous mode
[  232.444792][T11582] debugfs: 'hsr0' already exists in 'hsr'
[  232.446864][T11582] Cannot create hsr debugfs directory
[  232.515094][T11602] netlink: zone id is out of range
[  232.523797][T11602] netlink: zone id is out of range
[  232.526122][T11602] netlink: zone id is out of range
[  232.542538][T11602] netlink: zone id is out of range
[  232.546009][T11602] netlink: zone id is out of range
[  232.559195][T11602] netlink: zone id is out of range
[  232.562850][T11602] netlink: zone id is out of range
[  232.569608][T11602] netlink: zone id is out of range
[  232.601363][T11582] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  232.612775][T11582] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  232.623662][T11582] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  232.635287][T11582] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  232.692945][T11582] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.696075][T11582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.699941][T11582] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.703312][T11582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.785410][T11582] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.815831][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.823978][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.834755][T11582] 8021q: adding VLAN 0 to HW filter on device team0
[  232.844144][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.846827][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.855709][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.858363][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.026520][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.058955][T11582] veth0_vlan: entered promiscuous mode
[  233.065596][T11582] veth1_vlan: entered promiscuous mode
[  233.085989][T11582] veth0_macvtap: entered promiscuous mode
[  233.095720][T11582] veth1_macvtap: entered promiscuous mode
[  233.112634][T11582] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.121196][T11582] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.129046][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.133960][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.139527][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.157985][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.282829][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.296462][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.355638][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.359791][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.782670][T11637] netlink: 'syz.0.2464': attribute type 25 has an invalid length.
[  233.947616][ T5848] Bluetooth: hci3: command tx timeout
[  234.135764][T11648] netlink: 'syz.0.2469': attribute type 11 has an invalid length.
[  235.008225][T11666] netlink: 'syz.3.2478': attribute type 13 has an invalid length.
[  235.270361][ T5848] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  235.772201][T11674] __nla_validate_parse: 6 callbacks suppressed
[  235.772219][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'.
[  236.027406][ T5848] Bluetooth: hci3: command tx timeout
[  236.155745][T11680] syzkaller0: entered promiscuous mode
[  236.160415][T11680] syzkaller0: entered allmulticast mode
[  237.361451][T11695] netlink: 'syz.2.2491': attribute type 10 has an invalid length.
[  237.364161][T11695] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2491'.
[  237.412293][T11701] netlink: 'syz.0.2494': attribute type 3 has an invalid length.
[  237.415698][T11701] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2494'.
[  237.533030][T11709] netlink: 'syz.3.2497': attribute type 27 has an invalid length.
[  237.536745][T11709] netlink: 'syz.3.2497': attribute type 3 has an invalid length.
[  237.543610][T11709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2497'.
[  238.019091][T11736] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2511'.
[  238.107454][ T5848] Bluetooth: hci3: command tx timeout
[  238.269394][T11747] netlink: 'syz.3.2510': attribute type 10 has an invalid length.
[  238.272929][T11747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2510'.
[  238.276714][T11747] ipvlan1: entered promiscuous mode
[  238.280264][T11747] ipvlan1: entered allmulticast mode
[  238.282055][T11747] veth0_vlan: entered allmulticast mode
[  238.285915][T11747] bridge0: port 3(ipvlan1) entered blocking state
[  238.290554][T11747] bridge0: port 3(ipvlan1) entered disabled state
[  238.295308][T11747] net_ratelimit: 16 callbacks suppressed
[  238.295317][T11747] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  238.446113][T11752] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2518'.
[  238.700076][T11760] netlink: 'syz.2.2520': attribute type 2 has an invalid length.
[  238.703373][T11760] netlink: 'syz.2.2520': attribute type 1 has an invalid length.
[  239.115102][T11778] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2529'.
[  239.120270][T11780] netlink: 'syz.0.2528': attribute type 1 has an invalid length.
[  239.151974][T11782] netlink: 'syz.0.2530': attribute type 1 has an invalid length.
[  239.154558][T11782] netlink: 'syz.0.2530': attribute type 4 has an invalid length.
[  239.159518][T11782] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2530'.
[  239.239170][T11786] tap0: tun_chr_ioctl cmd 1074025677
[  239.241521][T11786] tap0: linktype set to 6
[  239.473058][ T5848] Bluetooth: hci2: unknown advertising packet type: 0x5f
[  239.813733][T11803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2540'.
[  239.943020][ T5848] Bluetooth: hci2: Unable to find connection for big 0x00
[  240.187150][ T5848] Bluetooth: hci3: command tx timeout
[  240.692857][T11838] netlink: 'syz.3.2554': attribute type 23 has an invalid length.
[  241.773255][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'.
[  242.079005][T11899] xt_policy: neither incoming nor outgoing policy selected
[  245.921758][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.996897][T11916] netlink: 'syz.3.2591': attribute type 3 has an invalid length.
[  245.997930][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.000308][T11916] netlink: 'syz.3.2591': attribute type 3 has an invalid length.
[  246.006476][T11916] netlink: 130500 bytes leftover after parsing attributes in process `syz.3.2591'.
[  246.122106][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.346212][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  246.351498][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  246.355556][   T12] bridge0: port 3(netdevsim0) entered disabled state
[  246.363128][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.371604][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'.
[  246.484819][   T12] bridge_slave_1: left allmulticast mode
[  246.487835][   T12] bridge_slave_1: left promiscuous mode
[  246.490727][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.498349][   T12] bridge_slave_0: left allmulticast mode
[  246.500398][   T12] bridge_slave_0: left promiscuous mode
[  246.502800][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.818902][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.825698][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.834306][   T12] bond0 (unregistering): Released all slaves
[  247.278486][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2604'.
[  247.282485][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2604'.
[  247.316387][T11955] netlink: 'syz.0.2602': attribute type 12 has an invalid length.
[  247.324661][T11955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2602'.
[  248.260908][   T12] hsr_slave_0: left promiscuous mode
[  248.280246][   T12] hsr_slave_1: left promiscuous mode
[  248.282619][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.287289][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.291673][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.300852][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.327978][   T12] veth1_macvtap: left promiscuous mode
[  248.656169][   T12] team0 (unregistering): Port device team_slave_1 removed
[  248.682258][   T12] team0 (unregistering): Port device team_slave_0 removed
[  248.957316][   T47] infiniband syz0: ib_query_port failed (-19)
[  248.961898][ T5911] lo speed is unknown, defaulting to 1000
[  248.963811][ T5911] syz2: Port: 1 Link DOWN
[  249.233984][T12013] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2621'.
[  249.367966][T12016] netlink: 'syz.0.2619': attribute type 10 has an invalid length.
[  249.486681][T12021] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2624'.
[  252.003848][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'.
[  252.404492][T12070] netlink: 'syz.2.2643': attribute type 2 has an invalid length.
[  252.944258][T12111] netlink: 'syz.0.2664': attribute type 28 has an invalid length.
[  252.946887][T12111] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2664'.
[  252.970101][T12116] netlink: 'syz.2.2666': attribute type 21 has an invalid length.
[  253.078623][T12123] netlink: 'syz.2.2669': attribute type 10 has an invalid length.
[  253.776884][T12143] : entered promiscuous mode
[  253.857075][T12147] netlink: 'syz.2.2680': attribute type 16 has an invalid length.
[  253.865593][T12147] netlink: 'syz.2.2680': attribute type 3 has an invalid length.
[  253.873901][T12147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2680'.
[  254.016408][T12149] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2681'.
[  254.046761][T12149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2681'.
[  254.058867][T12139] netlink: 'syz.3.2673': attribute type 13 has an invalid length.
[  254.062144][T12139] netlink: 'syz.3.2673': attribute type 17 has an invalid length.
[  254.190299][T12139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.195842][T12160] veth0_vlan: entered allmulticast mode
[  254.345437][T12171] netlink: 'syz.2.2691': attribute type 25 has an invalid length.
[  254.582506][T12190] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2700'.
[  254.607165][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'.
[  254.611941][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'.
[  254.662683][T12200] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2704'.
[  254.794628][T12211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.016788][T12220] netlink: 'syz.3.2711': attribute type 6 has an invalid length.
[  255.020859][T12220] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2711'.
[  255.041481][T12209] syz.2.2708: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  255.047174][T12209] CPU: 1 UID: 0 PID: 12209 Comm: syz.2.2708 Not tainted syzkaller #0 PREEMPT(full) 
[  255.047188][T12209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.047192][T12209] Call Trace:
[  255.047198][T12209]  <TASK>
[  255.047202][T12209]  dump_stack_lvl+0x189/0x250
[  255.047217][T12209]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.047227][T12209]  ? __pfx__printk+0x10/0x10
[  255.047239][T12209]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  255.047248][T12209]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  255.047258][T12209]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  255.047268][T12209]  warn_alloc+0x214/0x310
[  255.047276][T12209]  ? stack_depot_save_flags+0x40/0x860
[  255.047289][T12209]  ? __pfx_warn_alloc+0x10/0x10
[  255.047297][T12209]  ? kasan_save_track+0x4f/0x80
[  255.047306][T12209]  ? xskq_create+0x56/0x170
[  255.047314][T12209]  ? xsk_init_queue+0xb0/0x110
[  255.047320][T12209]  ? xsk_setsockopt+0x57b/0x8d0
[  255.047332][T12209]  ? do_sock_setsockopt+0x17c/0x1b0
[  255.047341][T12209]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  255.047373][T12209]  ? do_syscall_64+0xfa/0x3b0
[  255.047387][T12209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.047399][T12209]  __vmalloc_node_range_noprof+0x125/0x12f0
[  255.047426][T12209]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  255.047440][T12209]  ? __kasan_kmalloc+0x93/0xb0
[  255.047452][T12209]  vmalloc_user_noprof+0xad/0xf0
[  255.047463][T12209]  ? xskq_create+0xbf/0x170
[  255.047471][T12209]  xskq_create+0xbf/0x170
[  255.047479][T12209]  xsk_init_queue+0xb0/0x110
[  255.047488][T12209]  xsk_setsockopt+0x57b/0x8d0
[  255.047500][T12209]  ? __pfx_xsk_setsockopt+0x10/0x10
[  255.047511][T12209]  ? __pfx_aa_sk_perm+0x10/0x10
[  255.047519][T12209]  ? __fget_files+0x2a/0x420
[  255.047525][T12209]  ? aa_sock_opt_perm+0xff/0x1b0
[  255.047534][T12209]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  255.047543][T12209]  ? __pfx_xsk_setsockopt+0x10/0x10
[  255.047554][T12209]  do_sock_setsockopt+0x17c/0x1b0
[  255.047565][T12209]  __x64_sys_setsockopt+0x13f/0x1b0
[  255.047577][T12209]  do_syscall_64+0xfa/0x3b0
[  255.047585][T12209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.047592][T12209]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  255.047601][T12209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.047609][T12209] RIP: 0033:0x7f4981d8eba9
[  255.047617][T12209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.047623][T12209] RSP: 002b:00007f4982ca3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  255.047633][T12209] RAX: ffffffffffffffda RBX: 00007f4981fd5fa0 RCX: 00007f4981d8eba9
[  255.047638][T12209] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  255.047643][T12209] RBP: 00007f4981e11e19 R08: 0000000000000004 R09: 0000000000000000
[  255.047647][T12209] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  255.047651][T12209] R13: 00007f4981fd6038 R14: 00007f4981fd5fa0 R15: 00007ffcb5e63a88
[  255.047663][T12209]  </TASK>
[  255.047703][T12209] Mem-Info:
[  255.340402][T12209] active_anon:17987 inactive_anon:0 isolated_anon:0
[  255.340402][T12209]  active_file:13696 inactive_file:38312 isolated_file:0
[  255.340402][T12209]  unevictable:1768 dirty:253 writeback:0
[  255.340402][T12209]  slab_reclaimable:5334 slab_unreclaimable:82423
[  255.340402][T12209]  mapped:23164 shmem:9201 pagetables:1257
[  255.340402][T12209]  sec_pagetables:0 bounce:0
[  255.340402][T12209]  kernel_misc_reclaimable:0
[  255.340402][T12209]  free:250100 free_pcp:20193 free_cma:0
[  255.359200][T12209] Node 0 active_anon:49208kB inactive_anon:0kB active_file:23012kB inactive_file:6408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37504kB dirty:804kB writeback:0kB shmem:28636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7136kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  255.374075][T12226] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  255.374397][T12209] Node 1 active_anon:22740kB inactive_anon:0kB active_file:31772kB inactive_file:146840kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55220kB dirty:208kB writeback:0kB shmem:8168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4784kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  255.379288][T12226] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  255.400009][T12209] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  255.413644][T12209] lowmem_reserve[]: 0 811 811 811 811
[  255.417576][T12209] Node 0 DMA32 free:271116kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50228kB inactive_anon:0kB active_file:23012kB inactive_file:6408kB unevictable:3536kB writepending:804kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:30224kB local_pcp:20724kB free_cma:0kB
[  255.432277][T12209] lowmem_reserve[]: 0 0 0 0 0
[  255.435539][T12209] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  255.449047][T12209] lowmem_reserve[]: 0 0 854 854 854
[  255.452428][T12209] Node 1 Normal free:255036kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22740kB inactive_anon:0kB active_file:31772kB inactive_file:146840kB unevictable:3536kB writepending:208kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50056kB local_pcp:30124kB free_cma:0kB
[  255.465095][T12209] lowmem_reserve[]: 0 0 0 0 0
[  255.467941][T12209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  255.476538][T12209] Node 0 DMA32: 3*4kB (UME) 91*8kB (UE) 257*16kB (UME) 27*32kB (UE) 182*64kB (UE) 67*128kB (UE) 39*256kB (UME) 12*512kB (U) 9*1024kB (UME) 2*2048kB (ME) 52*4096kB (M) = 268372kB
[  255.483890][T12209] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  255.490631][T12209] Node 1 Normal: 565*4kB (UME) 663*8kB (UE) 553*16kB (UE) 263*32kB (UME) 350*64kB (UME) 243*128kB (UME) 92*256kB (UME) 49*512kB (UME) 15*1024kB (UME) 3*2048kB (ME) 26*4096kB (M) = 254972kB
[  255.500325][T12209] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  255.503410][T12209] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  255.507429][T12209] 62382 total pagecache pages
[  255.509719][T12209] 0 pages in swap cache
[  255.511515][T12209] Free swap  = 124996kB
[  255.513171][T12209] Total swap = 124996kB
[  255.514879][T12209] 786301 pages RAM
[  255.516872][T12209] 0 pages HighMem/MovableOnly
[  255.519224][T12209] 241347 pages reserved
[  255.521259][T12209] 0 pages cma reserved
[  255.714269][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.721135][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.747092][T12235] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2717'.
[  257.052842][T12284] dummy0: entered promiscuous mode
[  257.055126][T12284] dummy0: entered allmulticast mode
[  257.058581][T12284] team0: Port device dummy0 added
[  257.154620][ T5848] Bluetooth: hci0: unknown advertising packet type: 0x0c
[  257.322561][T12294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.714704][T12322] netlink: 'syz.0.2758': attribute type 11 has an invalid length.
[  257.728944][T12322] netlink: 'syz.0.2758': attribute type 11 has an invalid length.
[  257.843405][T12331] validate_nla: 7 callbacks suppressed
[  257.843417][T12331] netlink: 'syz.2.2762': attribute type 17 has an invalid length.
[  257.855758][T12331] netlink: 'syz.2.2762': attribute type 16 has an invalid length.
[  257.900882][T12335] netlink: 'syz.3.2763': attribute type 13 has an invalid length.
[  257.994600][T12342] __nla_validate_parse: 6 callbacks suppressed
[  257.994618][T12342] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2767'.
[  258.043308][ T5848] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4
[  258.137491][T12352] netlink: 802 bytes leftover after parsing attributes in process `syz.0.2772'.
[  258.242471][T12359] raw_sendmsg: syz.0.2775 forgot to set AF_INET. Fix it!
[  258.301189][T12359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2775'.
[  258.342405][T12359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2775'.
[  258.429682][T12359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2775'.
[  259.623653][T12389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2784'.
[  259.835847][T12408] netlink: 'syz.0.2793': attribute type 11 has an invalid length.
[  259.840097][T12408] netlink: 'syz.0.2793': attribute type 15 has an invalid length.
[  259.843495][T12408] netlink: 'syz.0.2793': attribute type 16 has an invalid length.
[  259.846807][T12408] netlink: 'syz.0.2793': attribute type 21 has an invalid length.
[  259.850815][T12408] netlink: 'syz.0.2793': attribute type 25 has an invalid length.
[  259.854646][T12408] netlink: 'syz.0.2793': attribute type 27 has an invalid length.
[  259.859827][T12408] netlink: 'syz.0.2793': attribute type 28 has an invalid length.
[  262.187773][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  263.092588][T12430] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.2800'.
[  263.158099][T12432] validate_nla: 2 callbacks suppressed
[  263.158115][T12432] netlink: 'syz.0.2801': attribute type 21 has an invalid length.
[  263.173362][T12432] netlink: 'syz.0.2801': attribute type 4 has an invalid length.
[  263.231674][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'.
[  263.243914][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2806'.
[  263.257058][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2806'.
[  263.352502][T12449] netlink: zone id is out of range
[  263.354703][T12449] netlink: zone id is out of range
[  263.400724][T12449] netlink: set zone limit has 4 unknown bytes
[  263.411119][T12449] netlink: del zone limit has 4 unknown bytes
[  263.672574][T12474] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  264.346185][T12500] netlink: 'syz.3.2824': attribute type 4 has an invalid length.
[  265.209668][T12504] netlink: 'syz.0.2825': attribute type 10 has an invalid length.
[  265.212895][T12504] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2825'.
[  265.340352][T12514] netlink: 'syz.2.2831': attribute type 13 has an invalid length.
[  265.343486][T12514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2831'.
[  265.346574][T12514] : renamed from syz_tun (while UP)
[  265.363691][T12514] : refused to change device tx_queue_len
[  265.366108][T12514] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  265.411670][T12508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2828'.
[  265.663315][T12533] delete_channel: no stack
[  265.665394][T12533] delete_channel: no stack
[  265.761466][T12541] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  265.768785][T12541] netlink: 'syz.0.2845': attribute type 10 has an invalid length.
[  265.771635][T12541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.783576][T12541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.788813][T12541] batadv_slave_0: entered promiscuous mode
[  265.799389][T12541] batadv_slave_0: entered allmulticast mode
[  265.808729][T12541] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  265.917402][T12551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2849'.
[  266.882899][T12568] netlink: 'syz.2.2857': attribute type 7 has an invalid length.
[  266.974262][T12570] syzkaller0: entered promiscuous mode
[  266.976882][T12570] syzkaller0: entered allmulticast mode
[  267.250994][T12574] netlink: 'syz.3.2860': attribute type 13 has an invalid length.
[  267.253671][T12574] netlink: 'syz.3.2860': attribute type 17 has an invalid length.
[  267.305428][T12578] netlink: 'syz.0.2862': attribute type 10 has an invalid length.
[  267.448808][T12579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2862'.
[  267.463796][T12579] unsupported nlmsg_type 40
[  267.470639][T12579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2862'.
[  268.496633][T12574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.507100][T12578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.511010][T12578] batadv0: entered promiscuous mode
[  268.513840][T12578] batadv0: entered allmulticast mode
[  268.519248][T12578] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  268.523977][T12579] bond0: (slave batadv0): Releasing backup interface
[  268.533376][T12579] bridge0: port 3(batadv0) entered blocking state
[  268.539812][T12579] bridge0: port 3(batadv0) entered disabled state
[  268.819551][ T5874] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  268.823257][ T5874] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  268.963352][T12607] validate_nla: 1 callbacks suppressed
[  268.963366][T12607] netlink: 'syz.2.2875': attribute type 27 has an invalid length.
[  268.969006][T12607] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2875'.
[  269.118458][T12611] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2878'.
[  269.259554][T12614] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2878'.
[  269.263144][T12614] lo speed is unknown, defaulting to 1000
[  269.575481][T12617] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2880'.
[  270.066391][T12624] netlink: 'syz.2.2883': attribute type 1 has an invalid length.
[  270.140458][ T5848] Bluetooth: hci2: adv larger than maximum supported
[  270.521791][T12635] netlink: 'syz.2.2888': attribute type 23 has an invalid length.
[  275.234337][T12666] xt_l2tp: missing protocol rule (udp|l2tpip)
[  276.738771][T12701] netlink: 'syz.0.2916': attribute type 210 has an invalid length.
[  277.214201][T12717] netlink: 'syz.2.2921': attribute type 2 has an invalid length.
[  277.218857][T12717] netlink: 'syz.2.2921': attribute type 8 has an invalid length.
[  277.223187][T12717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2921'.
[  277.402610][T12721] netlink: 'syz.2.2923': attribute type 4 has an invalid length.
[  279.645518][T12739] netlink: 'syz.2.2931': attribute type 6 has an invalid length.
[  279.667321][T12739] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2931'.
[  279.708782][T12743] netlink: 'syz.0.2933': attribute type 22 has an invalid length.
[  279.711710][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'.
[  279.924065][T12752] netlink: 'syz.0.2937': attribute type 29 has an invalid length.
[  279.927596][T12752] netlink: 'syz.0.2937': attribute type 3 has an invalid length.
[  279.937115][T12752] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2937'.
[  280.035822][T12758] openvswitch: netlink: IP tunnel dst address not specified
[  280.176596][T12766] netlink: 'syz.2.2944': attribute type 33 has an invalid length.
[  280.183228][T12766] netlink: 'syz.2.2944': attribute type 3 has an invalid length.
[  280.186401][T12766] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2944'.
[  280.330077][ T5874] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  280.337058][ T5848] Bluetooth: hci0: Malformed HCI Event
[  280.684771][T12780] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2951'.
[  280.708288][T12782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2952'.
[  281.287714][T12793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2956'.
[  281.301362][T12793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2956'.
[  281.322341][T12792] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2956'.
[  283.043803][T12851] __nla_validate_parse: 3 callbacks suppressed
[  283.043821][T12851] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2976'.
[  283.068421][T12851] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.2976'.
[  283.087065][T12851] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2976'.
[  283.256667][T12864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2980'.
[  283.268699][T12859] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2980'.
[  283.279895][T12859] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2980'.
[  283.448897][T12868] syzkaller0: entered promiscuous mode
[  283.451381][T12868] syzkaller0: entered allmulticast mode
[  284.942709][T12882] validate_nla: 2 callbacks suppressed
[  284.942725][T12882] netlink: 'syz.2.2989': attribute type 14 has an invalid length.
[  284.952197][T12882] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2989'.
[  285.350214][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  285.354732][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  285.359038][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  285.371879][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  285.375774][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  285.440681][T12904] netlink: 4868 bytes leftover after parsing attributes in process `syz.0.2998'.
[  285.444685][T12904] netlink: 4868 bytes leftover after parsing attributes in process `syz.0.2998'.
[  285.462618][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2998'.
[  285.522549][T12909] netlink: 'syz.0.3000': attribute type 6 has an invalid length.
[  285.627594][T12899] chnl_net:caif_netlink_parms(): no params data found
[  285.725773][T12899] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.731909][T12899] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.737731][T12899] bridge_slave_0: entered allmulticast mode
[  285.742048][T12899] bridge_slave_0: entered promiscuous mode
[  285.752691][T12899] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.761524][T12899] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.765788][T12899] bridge_slave_1: entered allmulticast mode
[  285.771974][T12899] bridge_slave_1: entered promiscuous mode
[  285.844610][T12899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.874272][T12924] netlink: 'syz.2.3003': attribute type 10 has an invalid length.
[  285.922378][T12924] macvlan0: entered allmulticast mode
[  286.436403][T12899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.480328][T12899] team0: Port device team_slave_0 added
[  286.484299][T12899] team0: Port device team_slave_1 added
[  286.510461][T12899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.513343][T12899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.524336][T12899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.531775][T12899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.535311][T12899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.547337][T12899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.610314][T12899] hsr_slave_0: entered promiscuous mode
[  286.622694][T12899] hsr_slave_1: entered promiscuous mode
[  286.626335][T12899] debugfs: 'hsr0' already exists in 'hsr'
[  286.630388][T12899] Cannot create hsr debugfs directory
[  286.639913][T12939] : entered promiscuous mode
[  286.695657][T12942] sctp: [Deprecated]: syz.2.3012 (pid 12942) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.695657][T12942] Use struct sctp_sack_info instead
[  287.124386][T12899] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  287.138726][T12899] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  287.153262][T12899] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  287.165801][T12899] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  287.293292][T12899] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.307818][T12899] 8021q: adding VLAN 0 to HW filter on device team0
[  287.322365][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.324950][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.336463][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.339519][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.387274][ T5235] Bluetooth: hci1: command tx timeout
[  287.516701][T12899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.733442][T12899] veth0_vlan: entered promiscuous mode
[  287.742731][T12899] veth1_vlan: entered promiscuous mode
[  287.768013][T12899] veth0_macvtap: entered promiscuous mode
[  287.772760][T12899] veth1_macvtap: entered promiscuous mode
[  287.785892][T12899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.800282][T12899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.813896][ T5874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.824181][ T5874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.844126][ T5874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.860189][ T5874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.956896][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.961792][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.994110][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.998838][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.456354][T13023] netlink: 'syz.0.3041': attribute type 41 has an invalid length.
[  288.766615][T13045] __nla_validate_parse: 1 callbacks suppressed
[  288.766628][T13045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3050'.
[  289.102063][T13058] netlink: 'syz.4.3056': attribute type 1 has an invalid length.
[  289.477565][ T5235] Bluetooth: hci1: command tx timeout
[  289.495011][ T5235] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  289.678894][T13079] netlink: 5844 bytes leftover after parsing attributes in process `syz.2.3066'.
[  290.066074][T13101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3077'.
[  290.272394][T13110] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  290.752758][T13127] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3089'.
[  290.809760][T13129] netlink: 'syz.0.3090': attribute type 13 has an invalid length.
[  290.814269][T13129] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.3090'.
[  291.053440][ T5235] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  291.053604][ T5235] Bluetooth: unknown link type 110
[  291.063428][ T5235] Bluetooth: hci0: connection err: -111
[  291.222819][T13144] tap0: tun_chr_ioctl cmd 1074025677
[  291.225245][T13144] tap0: linktype set to 774
[  291.548429][ T5235] Bluetooth: hci1: command tx timeout
[  291.742857][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.340267][T13198] netlink: 'syz.2.3116': attribute type 1 has an invalid length.
[  292.343768][T13198] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3116'.
[  292.362901][T13199] netlink: 'syz.4.3120': attribute type 19 has an invalid length.
[  292.366344][T13199] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3120'.
[  292.533689][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'.
[  292.829652][T13225] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  292.894189][T13229] netlink: 'syz.4.3133': attribute type 12 has an invalid length.
[  292.897670][T13229] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3133'.
[  293.633398][ T5848] Bluetooth: hci1: command tx timeout
[  293.716003][T13243] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  294.236533][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3150'.
[  294.635235][T13301] openvswitch: netlink: IP tunnel TTL not specified.
[  295.493178][ T5848] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  295.585407][ T5848] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  295.654124][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'.
[  296.421500][T13377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3201'.
[  298.428643][T13430] netlink: 'syz.0.3217': attribute type 29 has an invalid length.
[  298.432369][T13430] netlink: 'syz.0.3217': attribute type 29 has an invalid length.
[  298.436235][T13430] netlink: 'syz.0.3217': attribute type 29 has an invalid length.
[  298.474097][T13432] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  298.742278][T13437] netlink: 'syz.0.3219': attribute type 12 has an invalid length.
[  298.745579][T13437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3219'.
[  298.835489][T13442] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3221'.
[  298.911750][T13448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.440310][T13501] netlink: 731 bytes leftover after parsing attributes in process `syz.4.3245'.
[  300.446859][T13503] netlink: 'syz.2.3246': attribute type 11 has an invalid length.
[  300.449935][T13503] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3246'.
[  300.865337][T13522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3254'.
[  300.877458][T13521] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3254'.
[  301.212037][T13542] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.3263'.
[  301.386819][T13547] delete_channel: no stack
[  301.863686][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'.
[  301.868157][T13566] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  301.871550][T13566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.983389][T13575] veth0_vlan: entered allmulticast mode
[  302.063109][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'.
[  302.282256][T13584] veth0_vlan: left promiscuous mode
[  302.284903][T13584] veth0_vlan: entered promiscuous mode
[  302.419643][T13597] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3284'.
[  302.961780][T13612] netlink: 'syz.2.3291': attribute type 12 has an invalid length.
[  302.966000][T13612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3291'.
[  303.338700][T13624] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  304.270464][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3302'.
[  305.397232][T13674] netlink: 'syz.2.3317': attribute type 13 has an invalid length.
[  305.402013][T13676] netlink: 'syz.4.3318': attribute type 1 has an invalid length.
[  305.424908][T13674] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.427851][T13674] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.493848][T13674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.503085][T13674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.630167][ T5874] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.634301][ T5874] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.644084][ T5874] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.928102][T13707] __nla_validate_parse: 4 callbacks suppressed
[  305.928114][T13707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3333'.
[  306.614641][T13739] netdevsim netdevsim0 : renamed from netdevsim0
[  307.200727][T13743] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3350'.
[  308.951735][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'.
[  308.991036][T13776] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3366'.
[  309.636574][T13812] netlink: 'syz.4.3382': attribute type 5 has an invalid length.
[  309.780343][T13817] hsr0: entered promiscuous mode
[  310.298187][T13829] netlink: 'syz.4.3390': attribute type 4 has an invalid length.
[  310.301933][T13829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3390'.
[  310.808489][T13829] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3390'.
[  310.813221][T13829] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  310.857180][T13833] netlink: 'syz.2.3391': attribute type 3 has an invalid length.
[  310.952861][T13851] netlink: 'syz.2.3398': attribute type 10 has an invalid length.
[  310.998053][T13851] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3398'.
[  311.009055][T13829] syz.4.3390 (13829) used greatest stack depth: 18424 bytes left
[  311.065834][T13857] openvswitch: netlink: Missing valid actions attribute.
[  311.073584][T13857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.728332][T13897] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3419'.
[  311.764522][T13901] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3421'.
[  311.773752][T13901] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3421'.
[  311.783587][T13900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.808684][T13936] netlink: 'syz.0.3437': attribute type 29 has an invalid length.
[  312.814526][T13936] netlink: 'syz.0.3437': attribute type 29 has an invalid length.
[  312.945046][T13951] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3445'.
[  312.951385][T13951] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3445'.
[  313.134896][T13956] netlink: 'syz.2.3447': attribute type 29 has an invalid length.
[  313.143186][T13956] netlink: 'syz.2.3447': attribute type 29 has an invalid length.
[  313.150630][T13956] netlink: 'syz.2.3447': attribute type 29 has an invalid length.
[  313.902211][T14000] openvswitch: netlink: Multiple metadata blocks provided
[  314.059014][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'.
[  314.069349][T14014] netlink: 'syz.2.3472': attribute type 10 has an invalid length.
[  314.121615][T14022] netlink: 'syz.0.3476': attribute type 10 has an invalid length.
[  314.126233][T14022] : entered allmulticast mode
[  314.142002][T14024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.156390][T14022] : entered promiscuous mode
[  314.163425][T14022] team0: Port device  added
[  314.266120][T14035] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3483'.
[  314.273028][T14035] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3483'.
[  314.351861][ T5848] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  315.357847][T14085] netlink: 'syz.2.3505': attribute type 1 has an invalid length.
[  315.364206][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'.
[  315.813734][T14103] sit0: entered allmulticast mode
[  315.836505][T14103] sit0: entered promiscuous mode
[  317.156762][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.160474][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.503679][T14152] validate_nla: 2 callbacks suppressed
[  317.503691][T14152] netlink: 'syz.0.3535': attribute type 21 has an invalid length.
[  317.511305][T14152] __nla_validate_parse: 1 callbacks suppressed
[  317.511314][T14152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3535'.
[  317.516698][T14152] netlink: 'syz.0.3535': attribute type 1 has an invalid length.
[  317.969212][T14171] netlink: 'syz.0.3543': attribute type 29 has an invalid length.
[  317.974382][T14171] netlink: 'syz.0.3543': attribute type 29 has an invalid length.
[  318.164201][T14141] delete_channel: no stack
[  318.538629][T14187] syzkaller0: entered promiscuous mode
[  318.541183][T14187] syzkaller0: entered allmulticast mode
[  319.290812][T14207] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3557'.
[  319.605453][ T5848] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  320.940942][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.946632][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.950799][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.955089][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.962681][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.981028][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.986544][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.991474][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.999757][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.003681][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.330378][T14258] chnl_net:caif_netlink_parms(): no params data found
[  321.379860][T14260] chnl_net:caif_netlink_parms(): no params data found
[  321.453398][T14258] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.456044][T14258] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.460551][T14258] bridge_slave_0: entered allmulticast mode
[  321.463735][T14258] bridge_slave_0: entered promiscuous mode
[  321.468461][T14258] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.471088][T14258] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.474639][T14258] bridge_slave_1: entered allmulticast mode
[  321.480379][T14258] bridge_slave_1: entered promiscuous mode
[  321.541005][T14258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.565558][T14258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.570345][T14260] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.573350][T14260] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.575960][T14260] bridge_slave_0: entered allmulticast mode
[  321.581864][T14260] bridge_slave_0: entered promiscuous mode
[  321.594523][T14260] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.599003][T14260] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.602300][T14260] bridge_slave_1: entered allmulticast mode
[  321.605334][T14260] bridge_slave_1: entered promiscuous mode
[  321.634188][T14258] team0: Port device team_slave_0 added
[  321.650975][T14258] team0: Port device team_slave_1 added
[  321.655762][T14260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.670110][T14260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.694775][T14258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.697647][T14258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.708316][T14258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.724977][T14258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.727573][T14258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.736382][T14258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.749027][T14260] team0: Port device team_slave_0 added
[  321.753596][T14260] team0: Port device team_slave_1 added
[  321.798508][T14260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.801485][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.813713][T14260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.834390][T14260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.837450][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.847718][T14260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.861099][T14258] hsr_slave_0: entered promiscuous mode
[  321.863557][T14258] hsr_slave_1: entered promiscuous mode
[  321.865889][T14258] debugfs: 'hsr0' already exists in 'hsr'
[  321.873135][T14258] Cannot create hsr debugfs directory
[  321.922898][T14260] hsr_slave_0: entered promiscuous mode
[  321.925826][T14260] hsr_slave_1: entered promiscuous mode
[  321.929470][T14260] debugfs: 'hsr0' already exists in 'hsr'
[  321.932028][T14260] Cannot create hsr debugfs directory
[  322.143795][T14258] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  322.153065][T14258] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  322.159705][T14258] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  322.174763][T14258] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  322.214479][T14260] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  322.230146][T14260] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  322.236322][T14260] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  322.258022][T14260] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  322.294077][T14258] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.296778][T14258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.355175][T14260] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.359161][T14260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.362216][T14260] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.365976][T14260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.432596][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.443622][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.450484][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.473318][T14258] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.502864][T14260] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.545065][T14258] 8021q: adding VLAN 0 to HW filter on device team0
[  322.553975][T14260] 8021q: adding VLAN 0 to HW filter on device team0
[  322.571132][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.573481][ T9125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.585043][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.587954][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.601305][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.605029][ T9125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.611209][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.614189][ T9125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.716231][T14258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  322.812051][T14315] openvswitch: netlink: IPv4 tunnel dst address is zero
[  322.913803][T14322] netlink: 'syz.0.3591': attribute type 39 has an invalid length.
[  322.926233][T14260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.934932][T14258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.028691][ T5235] Bluetooth: hci1: command tx timeout
[  323.072115][ T5235] Bluetooth: hci2: command tx timeout
[  323.999589][T14260] veth0_vlan: entered promiscuous mode
[  324.010834][T14258] veth0_vlan: entered promiscuous mode
[  324.021690][T14260] veth1_vlan: entered promiscuous mode
[  324.034567][T14258] veth1_vlan: entered promiscuous mode
[  324.070479][T14260] veth0_macvtap: entered promiscuous mode
[  324.080013][T14260] veth1_macvtap: entered promiscuous mode
[  324.094106][T14258] veth0_macvtap: entered promiscuous mode
[  324.119437][T14258] veth1_macvtap: entered promiscuous mode
[  324.130991][T14260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.140974][T14260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.150175][T14258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.161347][T14258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.164663][ T5873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.172621][ T5873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.182248][ T5873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.189432][ T5873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.206163][ T5873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.225937][ T5873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.253028][ T5873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.267573][ T5859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.332048][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.335068][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.377512][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.380412][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.390100][T14349] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3596'.
[  324.393992][T14349] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.3596'.
[  324.406655][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.406681][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.452033][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.462679][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.516037][T14353] tmpfs: Bad value for 'uid'
[  324.523057][T14353] tmpfs: Bad value for 'uid'
[  324.575006][T14357] netlink: 'syz.6.3598': attribute type 28 has an invalid length.
[  324.592159][T14357] netlink: 'syz.6.3598': attribute type 29 has an invalid length.
[  324.596093][T14357] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3598'.
[  324.766686][T14367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3603'.
[  324.821208][T14369] netlink: 'syz.5.3604': attribute type 1 has an invalid length.
[  324.824412][T14369] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.3604'.
[  324.848539][T14365] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3602'.
[  325.007825][T14376] netlink: 'syz.6.3607': attribute type 21 has an invalid length.
[  325.051469][T14376] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3607'.
[  325.055533][T14376] netlink: 'syz.6.3607': attribute type 1 has an invalid length.
[  325.068636][ T5235] Bluetooth: hci1: command tx timeout
[  325.149539][ T5235] Bluetooth: hci2: command tx timeout
[  325.646512][T14393] netlink: 'syz.6.3614': attribute type 13 has an invalid length.
[  325.652031][T14393] netlink: 'syz.6.3614': attribute type 17 has an invalid length.
[  326.226722][T14393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.371348][T14414] netlink: 'syz.5.3624': attribute type 10 has an invalid length.
[  326.374815][T14414] geneve0: entered promiscuous mode
[  326.393663][T14414] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  326.398529][T14416] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3623'.
[  326.506781][T14422] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3628'.
[  326.680776][T14444] netlink: 137592 bytes leftover after parsing attributes in process `syz.5.3636'.
[  326.684288][T14444] nbd: must specify a size in bytes for the device
[  326.779498][T14452] netlink: 'syz.6.3641': attribute type 2 has an invalid length.
[  326.943730][T14465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.950403][T14465] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.970116][T14465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.973264][T14465] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.147127][ T5235] Bluetooth: hci1: command tx timeout
[  327.227968][ T5235] Bluetooth: hci2: command tx timeout
[  328.410656][T14514] netlink: 'syz.5.3670': attribute type 10 has an invalid length.
[  328.614567][T14520] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.666719][T14520] bridge_slave_0 (unregistering): left allmulticast mode
[  328.674184][T14520] bridge_slave_0 (unregistering): left promiscuous mode
[  328.677322][T14520] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.822781][T14535] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  328.867161][T14535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.228149][ T5235] Bluetooth: hci1: command tx timeout
[  329.308846][ T5235] Bluetooth: hci2: command tx timeout
[  329.399295][T14549] __nla_validate_parse: 3 callbacks suppressed
[  329.399316][T14549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3684'.
[  330.891985][T14543] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3683'.
[  331.313346][T14576] sit0: entered allmulticast mode
[  331.423194][T14578] sit0: entered promiscuous mode
[  332.081226][T14587] syzkaller0: tun_chr_ioctl cmd 2147767506
[  332.165975][T14593] openvswitch: netlink: Flow key attribute not present in set flow.
[  332.173808][T14592] netlink: 'syz.0.3703': attribute type 1 has an invalid length.
[  332.456672][T14602] tun1: tun_chr_ioctl cmd 1074025677
[  332.471403][T14602] tun1: linktype set to 270
[  332.491703][T14606] netlink: 'syz.5.3711': attribute type 21 has an invalid length.
[  332.494454][T14606] netlink: 'syz.5.3711': attribute type 1 has an invalid length.
[  332.826906][T14615] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3716'.
[  332.851311][T14615] openvswitch: netlink: Missing key (keys=40, expected=100)
[  332.944779][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3718'.
[  333.046471][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  333.054046][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  333.058567][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  333.062319][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  333.064889][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  333.230080][T14624] chnl_net:caif_netlink_parms(): no params data found
[  333.719426][T14624] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.722911][T14624] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.731649][T14624] bridge_slave_0: entered allmulticast mode
[  333.736028][T14624] bridge_slave_0: entered promiscuous mode
[  333.746337][T14624] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.750181][T14624] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.756820][T14647] netlink: 'syz.0.3728': attribute type 2 has an invalid length.
[  333.761577][T14624] bridge_slave_1: entered allmulticast mode
[  333.769146][T14624] bridge_slave_1: entered promiscuous mode
[  334.278087][T14624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.291900][T14624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.363892][T14624] team0: Port device team_slave_0 added
[  334.371960][T14624] team0: Port device team_slave_1 added
[  334.417413][T14624] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.420594][T14624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.435150][T14624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.440922][T14624] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.444194][T14624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.457281][T14624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.512297][T14624] hsr_slave_0: entered promiscuous mode
[  334.514723][T14624] hsr_slave_1: entered promiscuous mode
[  334.531099][T14624] debugfs: 'hsr0' already exists in 'hsr'
[  334.533539][T14624] Cannot create hsr debugfs directory
[  334.536582][T14656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3732'.
[  334.547086][T14656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3732'.
[  334.810278][T14624] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.982663][T14624] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.138338][T14624] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.148329][ T5235] Bluetooth: hci2: command tx timeout
[  335.262699][T14624] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.482324][T14624] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  335.490226][T14624] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  335.496734][T14624] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  335.503337][T14624] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  335.586534][T14624] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.604793][T14624] 8021q: adding VLAN 0 to HW filter on device team0
[  335.614104][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.617260][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.631876][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.634772][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.810535][T14624] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.044950][T14624] veth0_vlan: entered promiscuous mode
[  336.053989][T14624] veth1_vlan: entered promiscuous mode
[  336.088431][T14624] veth0_macvtap: entered promiscuous mode
[  336.099107][T14624] veth1_macvtap: entered promiscuous mode
[  336.115811][T14624] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.125996][T14624] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.136608][ T5873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.141969][ T5873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.146221][ T5873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.152167][ T5873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.209643][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.212293][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.232199][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.235558][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.276708][T14693] netlink: 'syz.6.3714': attribute type 10 has an invalid length.
[  336.282796][T14693] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3714'.
[  336.286592][T14693] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  336.292093][T14693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  337.243013][ T5235] Bluetooth: hci2: command tx timeout
[  337.476675][T14717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3750'.
[  337.508974][T14719] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3751'.
[  337.555498][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3752'.
[  337.875732][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3761'.
[  338.194698][T14755] netlink: 'syz.6.3768': attribute type 29 has an invalid length.
[  338.202738][T14755] netlink: 'syz.6.3768': attribute type 29 has an invalid length.
[  338.212149][T14755] netlink: 'syz.6.3768': attribute type 29 has an invalid length.
[  338.247453][T14757] netlink: 'syz.6.3769': attribute type 1 has an invalid length.
[  338.613655][T14773] netlink: 'syz.6.3777': attribute type 2 has an invalid length.
[  338.622001][T14773] netlink: 'syz.6.3777': attribute type 8 has an invalid length.
[  338.625292][T14773] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3777'.
[  339.050079][ T5235] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  339.317152][ T5235] Bluetooth: hci2: command tx timeout
[  339.794262][T14792] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3785'.
[  340.037580][T14804] bridge_slave_1: left allmulticast mode
[  340.040452][T14804] bridge_slave_1: left promiscuous mode
[  340.043053][T14804] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.874102][T14804] bridge_slave_0: left allmulticast mode
[  340.876730][T14804] bridge_slave_0: left promiscuous mode
[  340.881153][T14804] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.949271][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3790'.
[  340.952482][T14805] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3790'.
[  340.990982][T14811] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3793'.
[  341.005211][T14809] delete_channel: no stack
[  341.388263][ T5235] Bluetooth: hci2: command tx timeout
[  343.158653][T14872] syzkaller0: entered promiscuous mode
[  343.160678][T14872] syzkaller0: entered allmulticast mode
[  344.837459][T14883] netlink: 'syz.0.3824': attribute type 5 has an invalid length.
[  345.713138][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'.
[  345.716595][T14911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3837'.
[  346.536889][T14947] openvswitch: netlink: Flow actions attr not present in new flow.
[  346.542387][T14947] syzkaller0: entered promiscuous mode
[  346.799255][T14964] nbd: must specify an index to disconnect
[  347.961564][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3875'.
[  347.965534][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3875'.
[  348.371712][T15007] netlink: 'syz.0.3881': attribute type 29 has an invalid length.
[  348.476435][ T5235] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  348.872246][T15024] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3889'.
[  348.885046][T15024] netlink: 'syz.6.3889': attribute type 2 has an invalid length.
[  348.903533][T15024] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3889'.
[  348.924717][T15024] netlink: 'syz.6.3889': attribute type 2 has an invalid length.
[  348.928887][T15024] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3889'.
[  349.014562][ T5848] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  349.015420][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0000
[  349.723127][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  349.729257][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  349.733442][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  349.736987][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  349.739612][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  349.964650][T15037] chnl_net:caif_netlink_parms(): no params data found
[  350.124088][T15060] syzkaller0: entered promiscuous mode
[  350.126515][T15060] syzkaller0: entered allmulticast mode
[  350.131290][T15037] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.134420][T15037] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.141158][T15037] bridge_slave_0: entered allmulticast mode
[  350.144287][T15037] bridge_slave_0: entered promiscuous mode
[  351.653658][T15037] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.656264][T15037] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.659381][T15037] bridge_slave_1: entered allmulticast mode
[  351.662199][T15037] bridge_slave_1: entered promiscuous mode
[  351.735980][T15037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.750267][T15037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.787491][ T5235] Bluetooth: hci3: command tx timeout
[  351.803560][T15037] team0: Port device team_slave_0 added
[  351.808115][T15037] team0: Port device team_slave_1 added
[  351.844023][T15037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.850517][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.861561][T15037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.869407][T15037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.871837][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.887287][T15037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.925645][T15037] hsr_slave_0: entered promiscuous mode
[  351.938827][T15037] hsr_slave_1: entered promiscuous mode
[  351.941638][T15037] debugfs: 'hsr0' already exists in 'hsr'
[  351.943639][T15037] Cannot create hsr debugfs directory
[  352.202352][T15086] netlink: 'syz.6.3915': attribute type 21 has an invalid length.
[  352.235522][T15086] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3915'.
[  352.250874][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.262397][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.279311][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.284454][T15037] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  352.294851][T15086] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  352.320130][T15037] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  352.331365][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.334572][T15037] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  352.342051][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.344898][T15037] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  352.361216][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.375911][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.381581][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.388866][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.396092][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.400327][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.406103][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.409354][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.419893][T15086] hsr0 speed is unknown, defaulting to 1000
[  352.560541][T15037] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.632979][T15037] 8021q: adding VLAN 0 to HW filter on device team0
[  352.719459][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.723216][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.731913][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.735066][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.792889][T15037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  352.971794][T15037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.068012][ T5235] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  353.072504][ T5235] Bluetooth: hci2: Injecting HCI hardware error event
[  353.080134][ T5235] Bluetooth: hci2: hardware error 0x00
[  353.085438][T15110] _Z`Ԁ@S: entered promiscuous mode
[  353.418951][T15037] veth0_vlan: entered promiscuous mode
[  353.424838][T15037] veth1_vlan: entered promiscuous mode
[  353.459694][T15037] veth0_macvtap: entered promiscuous mode
[  353.464587][T15037] veth1_macvtap: entered promiscuous mode
[  353.474556][T15122] : renamed from vlan0 (while UP)
[  353.535578][T15037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.559302][T15037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.566251][T15134] netlink: 'syz.0.3931': attribute type 33 has an invalid length.
[  353.574455][T15134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3931'.
[  353.580983][ T5873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.586206][ T5873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.592159][ T5873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.596826][ T5873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.649734][   T33] audit: type=1107 audit(1758221976.432:4): pid=15137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  353.702618][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.705378][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.745877][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.750339][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.867890][   T55] Bluetooth: hci3: command tx timeout
[  353.935306][T15152] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3939'.
[  354.986362][T15208] netlink: 'syz.6.3964': attribute type 21 has an invalid length.
[  355.148627][ T5235] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  355.954880][ T5235] Bluetooth: hci3: command tx timeout
[  356.292204][T15240] netlink: 'syz.7.3978': attribute type 1 has an invalid length.
[  358.027930][ T5235] Bluetooth: hci3: command tx timeout
[  363.181957][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 6274240032 wd_nsec: 6274241176
[  372.808271][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  372.821651][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  372.825867][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  372.830841][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  372.836434][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  373.014742][T15250] hsr0 speed is unknown, defaulting to 1000
[  373.804228][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  373.809006][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  373.812122][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  373.815139][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.820240][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.980355][T15257] hsr0 speed is unknown, defaulting to 1000
[  374.057779][T15250] chnl_net:caif_netlink_parms(): no params data found
[  374.437723][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  374.442743][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  374.446378][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  374.451797][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  374.455024][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  374.937484][   T55] Bluetooth: hci4: command tx timeout
[  375.867173][   T55] Bluetooth: hci5: command tx timeout
[  376.520349][   T55] Bluetooth: hci6: command tx timeout
[  376.987113][   T55] Bluetooth: hci4: command tx timeout
[  377.947463][   T55] Bluetooth: hci5: command tx timeout
[  378.595606][   T55] Bluetooth: hci6: command tx timeout
[  378.605083][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.607907][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  379.050728][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 15340571454 wd_nsec: 15340571871
[  379.068353][ T5235] Bluetooth: hci4: command tx timeout
[  380.027307][ T5235] Bluetooth: hci5: command tx timeout
[  380.672438][ T5235] Bluetooth: hci6: command tx timeout
[  381.147757][ T5235] Bluetooth: hci4: command tx timeout
[  382.107274][ T5235] Bluetooth: hci5: command tx timeout
[  382.747561][ T5235] Bluetooth: hci6: command tx timeout
[  421.467344][   T34] INFO: task kworker/u10:6:1094 blocked for more than 160 seconds.
[  421.470287][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  421.527402][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  421.531429][   T34] task:kworker/u10:6   state:D stack:24624 pid:1094  tgid:1094  ppid:2      task_flags:0x4208160 flags:0x00004000
[  421.536012][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  421.627466][   T34] Call Trace:
[  421.628964][   T34]  <TASK>
[  421.630274][   T34]  __schedule+0x1798/0x4cc0
[  421.632080][   T34]  ? __pfx___schedule+0x10/0x10
[  421.634057][   T34]  ? schedule+0x91/0x360
[  421.635986][   T34]  ? schedule+0x91/0x360
[  421.707021][   T34]  schedule+0x165/0x360
[  421.708731][   T34]  schedule_timeout+0x9a/0x270
[  421.710593][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  421.712375][   T34]  ? wait_for_completion+0x2b7/0x5d0
[  421.714179][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  421.757028][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.759285][   T34]  ? wait_for_completion+0x267/0x5d0
[  421.761894][   T34]  wait_for_completion+0x2bf/0x5d0
[  421.764630][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  421.852850][   T34]  ? up_write+0x1c4/0x420
[  421.854871][   T34]  ? remove_client_context+0xc0/0x1e0
[  421.907019][   T34]  disable_device+0x1c6/0x320
[  421.909113][   T34]  ? __pfx_disable_device+0x10/0x10
[  421.911343][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  421.913661][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  421.915946][   T34]  ib_unregister_work+0x19/0x30
[  422.017060][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  422.019869][   T34]  process_scheduled_works+0xae1/0x17b0
[  422.022642][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  422.025326][   T34]  worker_thread+0x8a0/0xda0
[  422.097236][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  422.100319][   T34]  ? __kthread_parkme+0x7b/0x200
[  422.102389][   T34]  kthread+0x711/0x8a0
[  422.104043][   T34]  ? __pfx_worker_thread+0x10/0x10
[  422.106190][   T34]  ? __pfx_kthread+0x10/0x10
[  422.197838][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  422.200179][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  422.202766][   T34]  ? __pfx_kthread+0x10/0x10
[  422.205286][   T34]  ret_from_fork+0x439/0x7d0
[  422.267010][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  422.269316][   T34]  ? __switch_to_asm+0x39/0x70
[  422.271439][   T34]  ? __switch_to_asm+0x33/0x70
[  422.273518][   T34]  ? __pfx_kthread+0x10/0x10
[  422.275454][   T34]  ret_from_fork_asm+0x1a/0x30
[  422.428067][   T34]  </TASK>
[  422.429694][   T34] 
[  422.429694][   T34] Showing all locks held in the system:
[  422.433328][   T34] 4 locks held by kworker/u8:0/12:
[  422.435555][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  422.547020][   T34]  #1: ffffc900000f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  422.551952][   T34]  #2: ffffffff8f52d350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  422.555969][   T34]  #3: ffffffff8e13fa80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  422.647016][   T34] 2 locks held by rcu_tasks_trace/31:
[  422.649429][   T34]  #0: ffffffff8e13ae50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  422.654278][   T34]  #1: ffffffff8e13fbb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  422.707016][   T34] 1 lock held by khungtaskd/34:
[  422.709163][   T34]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  422.713442][   T34] 3 locks held by kworker/u10:2/40:
[  422.716093][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  422.807026][   T34]  #1: ffffc900006efbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  422.811861][   T34]  #2: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  422.816095][   T34] 3 locks held by kworker/u10:6/1094:
[  422.846992][   T34]  #0: ffff888104c87948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  422.851056][   T34]  #1: ffffc90007067bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  422.856000][   T34]  #2: ffff88802f9fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  422.897033][   T34] 2 locks held by getty/5672:
[  422.898701][   T34]  #0: ffff8880235190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  422.902223][   T34]  #1: ffffc900025282f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  422.906046][   T34] 3 locks held by kworker/u8:5/14343:
[  422.959984][   T34]  #0: ffff888107dad948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  422.963833][   T34]  #1: ffffc90007397bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  423.004721][   T34]  #2: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  423.016979][   T34] 1 lock held by syz-executor/14624:
[  423.018760][   T34]  #0: ffffffff8e13fbb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  423.022333][   T34] 2 locks held by syz.5.3731/14654:
[  423.024067][   T34]  #0: ffffffff8f52d350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  423.047627][   T34]  #1: ffff88802f9fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  423.052038][   T34] 1 lock held by syz.0.3974/15228:
[  423.054494][   T34]  #0: ffff88802eacb4a8 (&ctx->mutex){+.+.}-{4:4}, at: perf_event_ctx_lock_nested+0x38f/0x460
[  423.109500][   T34] 4 locks held by syz.0.3974/15229:
[  423.111681][   T34] 1 lock held by dhcpcd/15247:
[  423.113849][   T34]  #0: ffff8881161d2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  423.167004][   T34] 2 locks held by syz-executor/15250:
[  423.169775][   T34]  #0: ffffffff8eca9820 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  423.174488][   T34]  #1: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  423.217019][   T34] 2 locks held by syz-executor/15257:
[  423.219352][   T34]  #0: ffffffff8f52d350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  423.223265][   T34]  #1: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0
[  423.277015][   T34] 1 lock held by syz-executor/15260:
[  423.279362][   T34]  #0: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  423.283744][   T34] 
[  423.285150][   T34] =============================================
[  423.285150][   T34] 
[  423.337097][   T34] NMI backtrace for cpu 1
[  423.337115][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  423.337128][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  423.337136][   T34] Call Trace:
[  423.337142][   T34]  <TASK>
[  423.337147][   T34]  dump_stack_lvl+0x189/0x250
[  423.337168][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  423.337181][   T34]  ? __pfx__printk+0x10/0x10
[  423.337206][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  423.337225][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  423.337273][   T34]  ? __pfx__printk+0x10/0x10
[  423.337292][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  423.337312][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  423.337332][   T34]  watchdog+0xf93/0xfe0
[  423.337352][   T34]  ? watchdog+0x1de/0xfe0
[  423.337372][   T34]  kthread+0x711/0x8a0
[  423.337390][   T34]  ? __pfx_watchdog+0x10/0x10
[  423.337405][   T34]  ? __pfx_kthread+0x10/0x10
[  423.337422][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  423.337433][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  423.337444][   T34]  ? __pfx_kthread+0x10/0x10
[  423.337460][   T34]  ret_from_fork+0x439/0x7d0
[  423.337475][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  423.337491][   T34]  ? __switch_to_asm+0x39/0x70
[  423.337505][   T34]  ? __switch_to_asm+0x33/0x70
[  423.337520][   T34]  ? __pfx_kthread+0x10/0x10
[  423.337535][   T34]  ret_from_fork_asm+0x1a/0x30
[  423.337559][   T34]  </TASK>
[  423.337565][   T34] Sending NMI from CPU 1 to CPUs 0:
[  423.404979][    C0] NMI backtrace for cpu 0
[  423.404997][    C0] CPU: 0 UID: 0 PID: 15229 Comm: syz.0.3974 Not tainted syzkaller #0 PREEMPT(full) 
[  423.405010][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  423.405018][    C0] RIP: 0010:debug_object_activate+0x104/0x420
[  423.405039][    C0] Code: 31 ff eb 07 4d 8b 6d 00 41 ff c7 4d 85 ed 74 3c 4d 8d 65 18 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 9c 97 52 fd <49> 39 1c 24 0f 84 ef 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 30 00
[  423.405050][    C0] RSP: 0018:ffffc900000070c8 EFLAGS: 00000046
[  423.405063][    C0] RAX: 1ffff11021d3acf1 RBX: ffff888042c8d2a8 RCX: dffffc0000000000
[  423.405071][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000006fa0
[  423.405079][    C0] RBP: ffffffff99ca6908 R08: 0000000000000003 R09: 0000000000000004
[  423.405086][    C0] R10: dffffc0000000000 R11: fffff52000000df4 R12: ffff88810e9d6788
[  423.405093][    C0] R13: ffff88810e9d6770 R14: dffffc0000000000 R15: 0000000000000000
[  423.405101][    C0] FS:  00007f8e37e946c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  423.405110][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  423.405118][    C0] CR2: 0000563f732c2680 CR3: 0000000021894000 CR4: 00000000000006f0
[  423.405125][    C0] Call Trace:
[  423.405130][    C0]  <IRQ>
[  423.405138][    C0]  enqueue_hrtimer+0x30/0x3a0
[  423.405154][    C0]  __hrtimer_run_queues+0x656/0xc60
[  423.405173][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  423.405185][    C0]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  423.405202][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  423.405223][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  423.405280][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  423.405295][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  423.405306][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  423.405323][    C0] Code: 89 fb e8 23 00 00 00 48 8b 3d f4 73 fe 0b 48 89 de 5b e9 73 ac 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 d0 a0 92 65 8b 15 18 0f
[  423.405332][    C0] RSP: 0018:ffffc900000074f8 EFLAGS: 00000246
[  423.405343][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888030e53980
[  423.405351][    C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000
[  423.405358][    C0] RBP: ffffc900000077b0 R08: ffff888030e53980 R09: 0000000000000003
[  423.405365][    C0] R10: 00000000000000d0 R11: 0000000000000100 R12: 0000000000000001
[  423.405372][    C0] R13: dffffc0000000000 R14: 0000000000000080 R15: ffffc90000007ac8
[  423.405387][    C0]  ieee80211_rx_handlers+0x2f1f/0xb760
[  423.405415][    C0]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  423.405443][    C0]  ieee80211_prepare_and_rx_handle+0x266f/0x63f0
[  423.405464][    C0]  ? sta_info_get_bss+0x54/0x320
[  423.405477][    C0]  ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10
[  423.405495][    C0]  ? ieee80211_rx_for_interface+0x545/0x630
[  423.405511][    C0]  ieee80211_rx_list+0x21b8/0x2a90
[  423.405524][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  423.405537][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  423.405552][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  423.405563][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  423.405577][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  423.405587][    C0]  ieee80211_rx_napi+0x1a8/0x3d0
[  423.405599][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  423.405612][    C0]  ? skb_dequeue+0x10e/0x150
[  423.405623][    C0]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  423.405641][    C0]  tasklet_action_common+0x36c/0x580
[  423.405656][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  423.405670][    C0]  ? run_timer_softirq+0x168/0x180
[  423.405685][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  423.405699][    C0]  handle_softirqs+0x286/0x870
[  423.405712][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  423.405726][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  423.405738][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  423.405755][    C0]  __irq_exit_rcu+0xca/0x1f0
[  423.405766][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  423.405780][    C0]  irq_exit_rcu+0x9/0x30
[  423.405789][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  423.405800][    C0]  </IRQ>
[  423.405804][    C0]  <TASK>
[  423.405809][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  423.405821][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[  423.405835][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 df c4 eb 09 e8 8a 41 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  423.405843][    C0] RSP: 0018:ffffc90004e2f718 EFLAGS: 00000286
[  423.405852][    C0] RAX: 9524e2b717e96000 RBX: 0000000000000000 RCX: 9524e2b717e96000
[  423.405861][    C0] RDX: 0000000000000006 RSI: ffffffff8d9ba18e RDI: ffffffff8be33e00
[  423.405867][    C0] RBP: ffffc90004e2f770 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  423.405880][    C0] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffff888030e53980
[  423.405888][    C0] R13: dffffc0000000000 R14: ffff888107c85640 R15: ffff88804b03ab58
[  423.405901][    C0]  ? finish_task_switch+0x266/0x950
[  423.405919][    C0]  __schedule+0x17a0/0x4cc0
[  423.405933][    C0]  ? irqentry_enter+0x3d/0x60
[  423.405945][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  423.405963][    C0]  ? __pfx___schedule+0x10/0x10
[  423.405973][    C0]  ? irqentry_exit+0x74/0x90
[  423.405985][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  423.405999][    C0]  ? preempt_schedule+0xae/0xc0
[  423.406010][    C0]  preempt_schedule_common+0x83/0xd0
[  423.406021][    C0]  preempt_schedule+0xae/0xc0
[  423.406032][    C0]  ? __pfx_preempt_schedule+0x10/0x10
[  423.406041][    C0]  ? __pfx_remote_function+0x10/0x10
[  423.406057][    C0]  ? __pfx_generic_exec_single+0x10/0x10
[  423.406070][    C0]  preempt_schedule_thunk+0x16/0x30
[  423.406089][    C0]  ? smp_call_function_single+0x46b/0x590
[  423.406101][    C0]  smp_call_function_single+0x470/0x590
[  423.406112][    C0]  ? __pfx_remote_function+0x10/0x10
[  423.406126][    C0]  ? __pfx_smp_call_function_single+0x10/0x10
[  423.406138][    C0]  ? __pfx_remote_function+0x10/0x10
[  423.406152][    C0]  ? irqentry_enter+0x3d/0x60
[  423.406167][    C0]  perf_install_in_context+0x593/0x8f0
[  423.406180][    C0]  ? irqentry_exit+0x74/0x90
[  423.406190][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  423.406203][    C0]  ? __pfx_perf_install_in_context+0x10/0x10
[  423.406215][    C0]  ? __pfx___perf_install_in_context+0x10/0x10
[  423.406228][    C0]  ? anon_inode_getfile+0x10d/0x1a0
[  423.406267][    C0]  ? perf_event__header_size+0x168/0x230
[  423.406284][    C0]  __se_sys_perf_event_open+0x193a/0x1d70
[  423.406301][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  423.406321][    C0]  ? __x64_sys_perf_event_open+0x6e/0xc0
[  423.406334][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  423.406348][    C0]  do_syscall_64+0xfa/0x3b0
[  423.406360][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.406370][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  423.406383][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.406392][    C0] RIP: 0033:0x7f8e36f8eba9
[  423.406403][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.406412][    C0] RSP: 002b:00007f8e37e94038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  423.406424][    C0] RAX: ffffffffffffffda RBX: 00007f8e371d5fa0 RCX: 00007f8e36f8eba9
[  423.406433][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  423.406440][    C0] RBP: 00007f8e37011e19 R08: 0000000000000000 R09: 0000000000000000
[  423.406446][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  423.406454][    C0] R13: 00007f8e371d6038 R14: 00007f8e371d5fa0 R15: 00007ffe193a10c8
[  423.406466][    C0]  </TASK>
[  423.966998][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  423.970084][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  423.974732][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  423.979058][   T34] Call Trace:
[  423.980438][   T34]  <TASK>
[  423.981669][   T34]  dump_stack_lvl+0x99/0x250
[  423.983629][   T34]  ? __asan_memcpy+0x40/0x70
[  423.985557][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  423.987622][   T34]  ? __pfx__printk+0x10/0x10
[  423.989603][   T34]  vpanic+0x281/0x750
[  423.991603][   T34]  ? __pfx_vpanic+0x10/0x10
[  423.993848][   T34]  ? preempt_schedule+0xae/0xc0
[  423.996191][   T34]  ? preempt_schedule_common+0x83/0xd0
[  423.998607][   T34]  panic+0xb9/0xc0
[  424.000197][   T34]  ? __pfx_panic+0x10/0x10
[  424.002097][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  424.004343][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  424.006889][   T34]  watchdog+0xfd2/0xfe0
[  424.008643][   T34]  ? watchdog+0x1de/0xfe0
[  424.010698][   T34]  kthread+0x711/0x8a0
[  424.012816][   T34]  ? __pfx_watchdog+0x10/0x10
[  424.015608][   T34]  ? __pfx_kthread+0x10/0x10
[  424.017699][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  424.019910][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.022136][   T34]  ? __pfx_kthread+0x10/0x10
[  424.024131][   T34]  ret_from_fork+0x439/0x7d0
[  424.026049][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  424.028210][   T34]  ? __switch_to_asm+0x39/0x70
[  424.030347][   T34]  ? __switch_to_asm+0x33/0x70
[  424.032478][   T34]  ? __pfx_kthread+0x10/0x10
[  424.034757][   T34]  ret_from_fork_asm+0x1a/0x30
[  424.037168][   T34]  </TASK>
[  424.039626][   T34] Kernel Offset: disabled
[  424.041447][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:00:44  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000000cd RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000000cd RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000006ce8
R8 =0000000000000000 R9 =ffffffff81ae170e R10=0000000000000003 R11=ffffffff81704490
R12=00000000100001ad R13=dffffc0000000000 R14=00000000000000cd R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8e37e946c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563f732c2680 CR3=0000000021894000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=00000000000f0602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=d5fae142593a3900 RDX=0000000000000000
RSI=ffffffff8d9cdcbc RDI=ffffffff8dba9860 RBP=00000000ffffffff RSP=ffffc900001b7a70
R8 =ffffffff8fa3a837 R9 =1ffffffff1f47506 R10=dffffc0000000000 R11=fffffbfff1f47507
R12=0000000000000246 R13=ffff888100685640 R14=ffffffff8e13a1e0 R15=dffffc0000000000
RIP=ffffffff8b7a7280 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0609a16794 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00005555929794a8
XMM02=e46e7f890000005d e7c513f300000000 XMM03=135cf8ba00000096 c478088d00000000
XMM04=0000000000000000 0000000000000014 XMM05=00005555929ad181 00005555929acda0
XMM06=000055559297ab04 000055559297ab00 XMM07=0000000000000000 000000000003bf12
XMM08=d25e51e100000000 36f4dd390000005e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
