last executing test programs:

2m49.935192436s ago: executing program 0 (id=1022):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"/353], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
r3 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x4f, 0x5, 0x9, 0x0, 0x4, 0x8809, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8240, 0x7, 0x9, 0xb, 0x80000001, 0x8, 0x0, 0x0, 0x5, 0x0, 0x7}, r0, 0x0, r0, 0x2)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8918, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000004000)=""/4073, 0xfe9}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f0000001380)=""/61, 0x3d}, {&(0x7f0000000940)=""/158, 0x9e}, {&(0x7f0000002680)=""/199, 0xc7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x8}, 0x40012100)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4008, r2}, 0x18)
r6 = socket$pptp(0x18, 0x1, 0x2)
r7 = getpid()
fstat(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = syz_clone(0x40000000, &(0x7f0000000c00)="844ecd", 0x3, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)="c88347804a02476f868dd67607b2ee959ae7199725615dcef4897797668ed793c2a10eeaefdbdcc62fb813e9a09e7afb61ad95ae0a243e88a52f2ff5d5209565d26e6199b8b0131e66ae7afc380bfefb8848509df615d46c48428e7e13b0dd226157e60d3203ba395c220755edcb821af6259226f402e31576a2c3b9a1e2c094cf70b619b5284445024931ffb61e011fb0bce901d9acab0460ca350ee6e1ec3e172966e48d02b6990d69c5b8933c4823e9de34638afd9718533487a4057a79bd5b37b03fc488d43daad93bb5090a19b1bdcdfc9f69f0d0d4c6")
getpid()
fstat(r4, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = syz_clone(0x1000000, &(0x7f0000000e40)="aa666453ac7d6ac227dfcd498220c9d4a9aea08672d577a8504f68b19c4288913b518a24", 0x24, &(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)="e79e067a8e74c60d29fb51ea140fc1ac0accb944a973424454d2ca6b8fe5bd31de9dbc2fef4be8d5b9dbba3615df2fa1f055ee74a608397258d37608ccc5edd27eca00abdcdfabf45269916837514975a7c30175d7b70e89e760c2fbf602a30a7febbd3581166075")
fstat(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fstat(r4, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmsg$unix(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)}, {&(0x7f0000000300)="631f7034f63af226d1c73c9c06f2cfada92a4513cec82243479bde74bfd999a5a1e6e207441322f2237b69056f02b5f7c6d3704baa2742362b83ac6e6993cb8a51b8aeab679b37992b708a28978725f9d01e1e408b4e7866aeb0205d92f9ea52d895ad331d0fc1b483f87562d7497c4664971267830281cbedee219b8dfb4976d7bb65a086347316ecd593dbfbefaf859125d7326fb129b90cbd0b382d6d5e5c58aa6591cd573572eb2de4aa72e2b8d8e1d90283f57124519b31b09695f79922bd32e570a2a04f854a7835ab340909725cac4d3f29", 0xd5}, {&(0x7f0000000400)="e889ca32fbb2c2b36edf2fa7276acea5f4bfbc5efb97b4ec312b84e008796723685e3b2f27ca7317e0899a338d4466b49dcd3bd5eb6e61441899d0788854a6c61bb62b87cea4c281ec25429b76ca68684960dbdb9ca5a956c4e0af717b502c0567437d02", 0x64}, {&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="3576c7ecfde2c0b6f68881255c2c60a27b4effbe93f861b99d1b7f51c9e160698a9e10d66994a9cbf357fb08e0e274b64dd51902391b18f26d64645e3e8556c81ad72f9f2c37476084c0e9cb756cbfaced8731a7b26ac6d5ae692e67c637a6198bcfa9eb2156179c11fafd727ef07e4a442a0c19627c55a1078fc76b4e7399847e9756", 0x83}, {&(0x7f0000000880)="42accd77e6c46e1736e29de72715610ccb37a64df51e2bd417d08efa0066189f382d034829d40c8d1d9811663c6194d252b3fc9053877d07c697f363526a25a0de523cc54881d08bf6", 0x49}], 0x6, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r8, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB="0d0000ecb35931beac151fef37c2bf9a71910f296ca29c47", @ANYRES8=r3, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x40008801}, 0x20004010)
ioctl$SIOCSIFHWADDR(r0, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"})
r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="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"/455], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r16 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0300000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00'], 0x50)
r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r17}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32=r16, @ANYRES32=r15, @ANYBLOB='&'], 0x10)

2m49.488878532s ago: executing program 0 (id=1026):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000700001d71185e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m49.476324622s ago: executing program 0 (id=1027):
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x230, 0x15, 0x800, 0x70bd2a, 0x25dfdbfc, {0xf, 0xe5}, [@INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "ace8130a3b4bd815fa62eae29ff421efc416c65bcab5d04df5ee40953567752cd2b847375c369ad453e135cfd49be841b07f0958499739f3082cb95dbd873f89b5cf8a30ab2c78b1efe833754ed17038d413af479e4e7e3568ce90b91ba273000123f85069b5b3ab682a094c7ae4c0ade31dea8bdb90c2a036787bf6bfaa76fddc06d7682d09a74a84f1dea44ad67ee59dc4fd2a6d8094f1fefaa5bd890f4c3b612c73540677d0d521f3b278e87529d21b90daffa9448eb74ba0182023ff3fb31752ee13b166cff296063c552dde90c4acfe27fcdb868981"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "6314dda098d69c85ce291a7fc57a093b35be95c1e73355e9b3205e02e794a6b2943cd775ea7b12c1090526d2021b78e6b369d2799bf288c2353d1e33f99afa2fc89644bda78efdfc800ac4d7d51b2b7946e8"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "e608509eea50c6aac03ab6455e2ff98891e29226203a93d046ee306a983e65d3cee6275f9080e630f347c307d936b4932d82da8bdb80f4360809fb4f8180c3e86406bab7ab135d5157d06874a8df16e9b0dd0bb5d25c5f9e6794d0f88afd5bc8c0465f6e4f97f151463b82948d1c421b3132f15297552ab244481037b762a055e4b98d5495b27ab7c4353b4747722e13282d8861028fa397328e31fea1261886c10510a532016df0461794ad0574a09fe69b57742a6a45afb43b12cc82b93cf6805d443d0f44d466ab6a2906ddb7d50d5975724effb391aeb29d84d7588b3c6ea6a6110c"}]}, 0x230}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x9, &(0x7f0000000040)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000000c0)='syzkaller\x00', 0x20a9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x7, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x4, 0x8, 0x1}, {0x1, 0x3, 0x2, 0x5}, {0x5, 0x4, 0xb}, {0x3, 0x2, 0xf, 0x5}, {0x3, 0x1, 0x0, 0x4}, {0x2, 0x2, 0x4, 0x6}], 0x10, 0x1d}, 0x94)
recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x2, &(0x7f0000000580)=""/252, 0xfc}, 0x2040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='netfs_sreq\x00', r2, 0x0, 0x6}, 0x18)

2m49.346721111s ago: executing program 0 (id=1028):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0) (async)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xe, 0x5, 0x2, 0x4, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_ident={0x2, 0xb, 0x5, 0x0, 0x400}]}, 0x20}}, 0x40) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

2m49.310817561s ago: executing program 0 (id=1029):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
socket$kcm(0xa, 0x3, 0x3a)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x50)
socket$kcm(0x10, 0x2, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, &(0x7f0000000080), &(0x7f0000000500)=r3, 0x8}, 0x20)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044943, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@ifindex, 0xffffffffffffffff, 0x16, 0x4}, 0x20)
socket$kcm(0xa, 0x2, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x9, 0x4}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

2m47.453441573s ago: executing program 0 (id=1031):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r3, 0x20}, 0x38)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r3, 0x20}, 0x38) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async)

2m37.827113774s ago: executing program 1 (id=1116):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) (async)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) (async)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61107000010400"/16], 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x142d0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 64)
socket$kcm(0x2, 0x1, 0x84) (async, rerun: 64)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40440e1) (async)
close(r1) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18fe0000009e0000f1ffffffffffffff95141d46de6df1481d67507f6250b7e97d0987ff491a9f91b66fb705e49210846794a6c70390b27f31d33ad9e70ccbff5d062388032df1b0820d19099c008e4536d2708da6e8f46542f2da1c252b7ef131174ebc27a86c772e7fce55208cef0bbce65964bcc727a2d51535d0b1e4a39ca2282ca658ecb610679621b663f93a4e2184ca4a1e120edb15ef03bb5fbbb20ca7447f843aac451383ef1b85f725ac6bc10588577304b84df5bb0b107a710ab700fc3c95422ba87cd88c162af2e24eff6df950ac346727f5b7ba2a4dc134c0ef9298d87065d79349e77f28382327"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='contention_begin\x00', r2, 0x0, 0x100000000000000}, 0x18) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="06000000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000500"/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000040000000400e1ff0900000000000000", @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000400"/28], 0x50) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000640)}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
unlink(&(0x7f0000000200)='./cgroup\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES32=r4], &(0x7f0000000680)='syzkaller\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff03}, 0x94)

2m37.767202106s ago: executing program 1 (id=1117):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00070ff2e4278520842900000000000000000000bcfcc7ad67e6b97e7b884fe39a31591aeba1edd634879b5c54b10b6962c403b494bec76e38ae4a63ab3f0f6490bc9f087921f997382a06bb1ba6479370879a176cdf039a5494fde189f842df86172e37840f0fb1426b8aa443dacd432f2eea144c35340afabdfa801b30d9fcd72f87d2c31cc25441782a11d2a417b97f34807343765c7e04156627e4362aadf9b94bf673f8d4ece1ede04260612a0a78c2ff2cdfaf0614998c04c7ff466bf35e49df87c9748374f7b0488b890e2980bc357bfe7b0c54baa47b96ab71702e78e2350cd0393ba283e47116cc7b530c9045bb51bfe42d5da8ab91e02ce6eaa85fbfe34c067364298084963324eb20359117b8d392219357a313fff5f7aa8a6114c360a8bee2d0290ad94933da5df4eec48d68815b37cb553430d250fcb42f067a48e9032f8277e623d217b0bf119325f8f7cb003d2faa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES64, @ANYRES8=r0, @ANYRESOCT=r0], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r1}, 0xc)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x21)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x4, 0x10}, 0xfffffffffffffd92)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000010000000085000000890000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x3ffc, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001)
r5 = syz_clone(0x4804200, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef3}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYRESHEX], 0x26c0}}, 0x20000000)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r8], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='itimer_expire\x00', r10}, 0x18)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000600)={0x0, 0xffffffffffffff78, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000169d00000000000000000000020000080000000000000000000000000000ff070000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000e100000400fdbfffffe80a000000000000000000000a000200702712b95d77c5e63b000e00fe80000000000000dfff000000001cbb24000900b4000000000000000100000000ddff7fb4000000000021e5521c5ddcc53d2d030aecaf6b5978a54ba7ef13a1d5167e5b5a3b3b6ce62f925473b8bd85c91b6513e05561ac08188b41900337e8de986413c1a40efedcbb212f191d2bff3faa909cde7158ca31819e46a6abc0983a0ba629cf55d9cd677bf6733dcc7da11434b41fcb95da2cae4cb9fe42fda6b5666df768bfc3ad0259450e0526f5425fa809351b101a6b454924455efc309547aaf8f645dab2ebc1c23ac5aeb511f0d130892a88dd2bbe88dcdc76e8cc1508bc05df7dd7e955ff326c10f7a17d87c0561667da9338557a4e51393434c0a685a8ee738225d6c885059a69f3cc6a5983b149b283c58df8565c07d53d26755f1edda6e1dd2fe087e4085d4ee14c4f7676c18b359190b6b87ea39fb312e0f195d18b0c5483f4ad4367ebb77c7829aa63d5b4af0d55b67979f22ae4fa18198af359d9d89b6a267d6274d4430bd0bf21bb96dd2a3cb0045689740999d278f02d0b5bc0c6a919ab76728d4a0fd95d10850e8b1a02ca774af2739ff1649afc92c03e1997467c88d602d36b718e579f4741c5459fe324b9e8b25b9eb21fc63c1b5dd6607f5a962567aa0e4fad845bb02be7dad619d40b389b9ddca48362b58ab2fc1d039d2fd4d3f91d54f67cc8110354206e886fa531562ef0dc713742b2e5407065efaa9770bc70f0b942d2342265471a676a85ce4449d1294ea278ddb9b9ba3488a796e7ae36566e9d560a8f7e26b621f625b85cc5920c4fd497a04b920bb694f0b6a688a1f70ff412ef1026247028"], 0x128}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)

2m36.813349109s ago: executing program 1 (id=1126):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x101, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2e, 0x2, 0x4, 0x402, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xb}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000070000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000280), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2m35.112386378s ago: executing program 1 (id=1134):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2c001)
perf_event_open(&(0x7f0000000380)={0x0, 0x41, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0xc052, 0x200000000000c8, 0x2, 0x9, 0xfffffffffffffff8, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x41, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0xc052, 0x200000000000c8, 0x2, 0x9, 0xfffffffffffffff8, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r0=>0xffffffffffffffff]}}], 0x18}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x111903, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0) (async)
write$cgroup_int(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x1b) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x1b)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
mkdir(&(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
close(0x3)
perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x7}, 0x9220, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x7}, 0x9220, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc9, 0xd, 0x0, 0x0, 0x0, 0x6, 0x7013a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x4}, 0x108, 0x0, 0x4000000, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0xa, 0x2, 0x73) (async)
socket$kcm(0xa, 0x2, 0x73)

2m34.619575078s ago: executing program 1 (id=1139):
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00')
socket$kcm(0x11, 0x3, 0x0) (async)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffe, 0xffffffff}, 0x7402, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xff, 0xb}, 0x500, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12) (async)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xcc060)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/4296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/4296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r3, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x9bf25d505e568ce)

2m33.667338579s ago: executing program 1 (id=1146):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000001400791048000000000069001d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x1d, &(0x7f00000006c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000740), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
sendmsg$can_raw(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x1d, r2}, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=@can={{0x2, 0x1}, 0x2, 0x4, 0x0, 0x0, "0a552a1835d2c90c"}, 0x10}}, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', r2, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000250001002abd7000ffdbdb250200000008000100090000006affc22a4249de"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={&(0x7f0000000080)="0d6d02b6b120bf2bcdd7b65951aa30c5bb61a89541f1f05201c7c853977fd918d3715b1642cb6183dcb9ee35ff752899bae78aad22e8de8b1a3e49d420a2c0c5de08c58fd914a7c147fc090dd3e5c90bc8f3e736cb040f0459229558611f402179691ad1a0249c666b1f24af55276599238636a8f46ba9dbf0f1e9253b3d91e627eb02e8777240c0dca57e3f5c9791b3ea93782acca1324e23b6171b6aca06dc80bf8d1a0ca83fa70607ba78581d715607fac136f06b829d4ca1fb8e43a8e14e749f55e12c6ea4480ca4bb8ec61785623b9a9ad47c61a0e5f8f5f07df8ecbd9cdda03e696090f7e6c27841170a626d1b83b0f3", &(0x7f0000000180)=""/193, &(0x7f0000000280)="7423e7b85e1260089593198b891d2d26d9d208980ea92dc54517edfb86c73198a6decc1fdd5a04f2427bb8b1f22edb5526ec3b15af1e74573d0a62aea35e90853568c8587d71d2eb7405f60a096a3e13d33959090bc30c06fcd8708eb2733645b00bd83628a8ba0c4a4acb3cdae6e39c66f98a3ca084607669d276a7d9f625dc450a1a4a8b8ac042fe0396ce293b07f767d43af495344865505fd463887334aac6cca5f20cef0c67aa058153c3a05869d9b9afb0c50ab676ba5acdb0fd3f64d9ff953d5add234fb27a321afae4928b4cdd", &(0x7f0000000380)="b7cbed30b8abb4ffcc38f75552be1fed39c04ce90ed1ada783b2abb4a18274c5dc8d1a53c5a5250154c6956e9c7deb9af32d6ad6ea56700fb80393d6ce8f7067ead5e0211f1b32216a320907d4ef3c9f03c25e390b2709108a628d3f5f9b1fd53c6040c0c743f1774fca3b97cb69b265ea13856a3398000a1db1d108c91d4909fe3f", 0x100, r7, 0x4}, 0x38)

2m32.486279179s ago: executing program 32 (id=1031):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r3, 0x20}, 0x38)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r3, 0x20}, 0x38) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async)

2m18.690344125s ago: executing program 33 (id=1146):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000001400791048000000000069001d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x1d, &(0x7f00000006c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000740), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
sendmsg$can_raw(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x1d, r2}, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=@can={{0x2, 0x1}, 0x2, 0x4, 0x0, 0x0, "0a552a1835d2c90c"}, 0x10}}, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', r2, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000250001002abd7000ffdbdb250200000008000100090000006affc22a4249de"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={&(0x7f0000000080)="0d6d02b6b120bf2bcdd7b65951aa30c5bb61a89541f1f05201c7c853977fd918d3715b1642cb6183dcb9ee35ff752899bae78aad22e8de8b1a3e49d420a2c0c5de08c58fd914a7c147fc090dd3e5c90bc8f3e736cb040f0459229558611f402179691ad1a0249c666b1f24af55276599238636a8f46ba9dbf0f1e9253b3d91e627eb02e8777240c0dca57e3f5c9791b3ea93782acca1324e23b6171b6aca06dc80bf8d1a0ca83fa70607ba78581d715607fac136f06b829d4ca1fb8e43a8e14e749f55e12c6ea4480ca4bb8ec61785623b9a9ad47c61a0e5f8f5f07df8ecbd9cdda03e696090f7e6c27841170a626d1b83b0f3", &(0x7f0000000180)=""/193, &(0x7f0000000280)="7423e7b85e1260089593198b891d2d26d9d208980ea92dc54517edfb86c73198a6decc1fdd5a04f2427bb8b1f22edb5526ec3b15af1e74573d0a62aea35e90853568c8587d71d2eb7405f60a096a3e13d33959090bc30c06fcd8708eb2733645b00bd83628a8ba0c4a4acb3cdae6e39c66f98a3ca084607669d276a7d9f625dc450a1a4a8b8ac042fe0396ce293b07f767d43af495344865505fd463887334aac6cca5f20cef0c67aa058153c3a05869d9b9afb0c50ab676ba5acdb0fd3f64d9ff953d5add234fb27a321afae4928b4cdd", &(0x7f0000000380)="b7cbed30b8abb4ffcc38f75552be1fed39c04ce90ed1ada783b2abb4a18274c5dc8d1a53c5a5250154c6956e9c7deb9af32d6ad6ea56700fb80393d6ce8f7067ead5e0211f1b32216a320907d4ef3c9f03c25e390b2709108a628d3f5f9b1fd53c6040c0c743f1774fca3b97cb69b265ea13856a3398000a1db1d108c91d4909fe3f", 0x100, r7, 0x4}, 0x38)

2.823557575s ago: executing program 3 (id=2334):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x6, 0x0)
sendmsg$tipc(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x9004}, 0x404c080)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000003940)=""/4058, 0xfda}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f00000007c0)=""/164, 0xa4}], 0x5}, 0x10100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28)

2.731206621s ago: executing program 3 (id=2336):
r0 = socket$kcm(0x10, 0x2, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$kcm(0x2c, 0x3, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.numa_stat\x00', 0x26e1, 0x0)
r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/248, 0x64}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000680)=""/252, 0xfc}], 0x4, &(0x7f0000000540)=""/181, 0xb5}, 0x100)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12)
setsockopt$sock_attach_bpf(r9, 0x11b, 0x6, &(0x7f0000000000)=r10, 0x4)

2.391619738s ago: executing program 4 (id=2338):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000044)
socket$kcm(0x29, 0x7, 0x0)

1.800031813s ago: executing program 3 (id=2342):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0xff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
close(r1) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d805000100fec04d1b34ca3b808de2abea6c110000983cfcce7657581d5f602f3a000000080005007a010401a80016002000034011000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbae5dc92b7f9f15284bd38d150e2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f4e278d8016a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9a", 0xd8}], 0x1}, 0x20008854) (async, rerun: 32)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x28002, 0x0) (async)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) (async)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10394, 0x0, 0x40, 0x8, 0x10000000002, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000048000000800000001008c000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$kcm(0x2, 0x5, 0x84) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4581, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x7ff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) (async)
r8 = socket$kcm(0x10, 0x2, 0x0) (async)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.450776233s ago: executing program 4 (id=2343):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x7, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040))

1.449858459s ago: executing program 3 (id=2344):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a80)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES64, @ANYRESOCT=r0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x7, 0x29, &(0x7f0000001cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}, @call={0x85, 0x0, 0x0, 0x4b}, @alu={0x7, 0x1, 0xd, 0x3, 0x5, 0xfffffffffffffff4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x0, 0x0, 0x5, 0x4, 0x6, 0x50, 0x8}, @generic={0x5, 0x0, 0x1, 0x6, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='cq_reschedule\x00', r4, 0x0, 0x10000}, 0x18)
socket$kcm(0x10, 0x2, 0x10) (async)
r6 = socket$kcm(0x10, 0x2, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$sock(r7, &(0x7f00000002c0)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000200)}, 0x804)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001e40)=ANY=[@ANYBLOB="5000000002060102000034e4edc60000000000000008050005000500000005000100060000000d000300686173683a6d616300000000050004008300000011000300686173683a69702c706f727400000000c4a452376454527df2d105d439c8de77040c58eb9639131080bdc25eb0a227293acca5412d08c5ddce31830e92dd52f50cb480b1a5d94b19daa970145aaf2581c6f883e7e9566b76006e11b7170b90d426337c3462735b1f7004f0dd62bc4c924e689eff2d9a20716f477b062f086d3ea40782220dbf81e29ebd86bff88d062063266b8688b6c4bc25565dffaf7fdf7a5cec47a9283c506d4b1f7eafb0c1f1c9e4252803f8cde542c0fa73893afa3caccf2d64b71582697d937cd1d1d3fd29521912"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601797400000000000000020000000900020073200007801800018014000240fe8000000000000800000000000000bb0600044000040000050007000600"/84], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
socketpair(0x2a, 0x2, 0x0, &(0x7f0000000380))
recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/4096, 0x1000}], 0xa}, 0x40000020) (async)
recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/4096, 0x1000}], 0xa}, 0x40000020)
recvmsg$kcm(r6, &(0x7f00000017c0)={&(0x7f0000000400)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/32, 0x20}, {&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000680)=""/131, 0x83}, 0x10103)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYBLOB="2d6834389b43df70202d6d656d6f627920172f8b8b8e967284992add7436d88b9260fdf327835162437b005c29146b910e52ad06e957ecaca673dde7d8af8b35a31bb89692651ce855dfe7b890dbb3a1df1d6b32bf87c36a959acecb97b6d18ccb173ea2334c8b5a1ca3febffaca1c5b8a9488aecdfef28b5563a652e195e3c412d49ba502161fb0a94b35c596ac3b332b337b52fb6f3b65e53efce957eb3f94c28611a88654df4192f6ce7baca3cf09adcd44726cba24254afeb60d081b961387942a5fd7d8afd52fbc92f6eecfcdffdc1324efe730c4339eefc6578eb40691c73fc3a2ae55845ca6d7e7303c77c891e034740e52"], 0x11)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000140)=@newtaction={0x94, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x80, 0x1, [@m_simple={0x7c, 0x16, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1, 0xffffffffffffffff, 0x9, 0xfffff8b4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x5d2, 0x20000000, 0x9d4}}]}, {0x1d, 0x6, "19ba19b0a36de0c61616af737eb696077c9530386a3f840000"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000140)=@newtaction={0x94, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x80, 0x1, [@m_simple={0x7c, 0x16, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1, 0xffffffffffffffff, 0x9, 0xfffff8b4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x5d2, 0x20000000, 0x9d4}}]}, {0x1d, 0x6, "19ba19b0a36de0c61616af737eb696077c9530386a3f840000"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)

1.446233222s ago: executing program 4 (id=2346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0xffffff00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x3}}]}, {0xffffffffffffff1b}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x800})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002100000000000000000000000000000000000000416f4e557353de229d694610a0af6d09058d502c0001000007e26247c363722a271ad5b5640b07c2399dbcf514beb07f73e4df6139153a596ccb2cb2c44e5635ddf7433ec1c568ca7fa85787fb69f9548717d90ca73fbf8b7ae1278694248109c39c2501b2901e1cfe98ba1be102ae4d1c39495460d1dd14183cb504ce5dbb899fabc339d551b6e30d0a3665b0f50a72da64f7f66ba354187ba09d4c3f2b455d9a429964fe25c23f634c106b6871eb8e9341ea983097785d13dfface7149b6ec5b82e7ddab8ca9b5cc36c8bb686a69dd4c1ba63cf05e3adea32d3dfc78583f30f7c0c9c07d80"], 0x48)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001114410029bd70000000000008004a0000000000080001000000000008004b0013000000080003"], 0x30}}, 0x0)

1.404709017s ago: executing program 2 (id=2347):
r0 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

1.121789638s ago: executing program 3 (id=2348):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b00002d42ef03bb50000f00000000a0001106d2613bf552f48b000000080000002e00003061610000000000"], &(0x7f0000000380)=""/33, 0x33, 0x21, 0x1, 0x2}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='flush_foreign\x00', r3}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0xc000)
r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x9, 0x20, 0x7fff}, 0x2f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
close(r6)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="9d2401e6b8ae1f6bb87025c643ab00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000000950000000000000018100000000000000000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8], 0x9a)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r10 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r10, 0x28, 0x2, 0x0, 0x41)

1.062580309s ago: executing program 4 (id=2349):
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4000091)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x922000000001, 0x106)
syz_clone(0x20a22000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000008000000040000000600000015010000", @ANYRES32], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

1.009559174s ago: executing program 4 (id=2350):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, 0x0, 0x4}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

932.358279ms ago: executing program 3 (id=2351):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=""/158, 0x9e}, 0x2100)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdf7ffff0a0000094890a9a1ebcd2a00060000000000000e05000000010000e1096000302e615f5f61e40000"], 0x0, 0x4c}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="700b5e47b7faf35f70eb12152e4caa893b1b40bbef44ef68d2b64772e4cba6b5461cf34d3f70fe8e6cb632ae6c1f615a9e8a3335a723914aa5cc26395b12b254f18de4d3c944633204e57640ad2830465f2750c2f4a52c1cad59e5e5398b84411689", 0x62}, {&(0x7f0000000800)="f998a86bdb2f9b7443530128895b732c9fff70fe0f3e66885802e108224df736f3c7fcae9c774c38e426f2f33f6cbd6f417e0c2177eeeef4ce5296c0e084a44f1512bc388e00a89e477d5d632b9e0184f1c08fbe601a7058c10cba018446c3b4933909433d80ddc6df766100881f18eec8ee6b951b4192201f0c3a6a065d59797a4a947d093d842d3c4feab8e2efbfc2289cb1c9060b68cc81f0d4a4ef48a5ddcff0d67f28fb9592a066df05f0899ed2b845411b4feeca53437ba143cde8ddb88d29f7d59bb5360688df9b213985b97cdebfd6e362b57e79ec96cb3d665d38050b13b4b643f55545ff2c97c7d5b908821ad1643698", 0xf5}], 0x2, &(0x7f0000000cc0)=[{0xd8, 0x84, 0xff, "74857486f5221d503de050eefec8cb327b9ee4cc2b73965b84cbd5c324948ffa09a677cab86a753281508c36c23746b2da525bedf3e954c99f70119b22bb87f19cdb78208d907498774de8e4ee5462fd94b65edd1294dd446604e79ea5f94d638d2029e290dd03042da85b3a6bacabdf4f8010ae68bace5e0bebea24bd94839c485bed273463e773d5d0b30d908609e4cfeb474f75f799011880fbb691a55f87f27790909298658845780948cdfa7897de7cb3a210468d2490a82b3174b5171d03bec451af8c6e"}, {0x110, 0x111, 0x7, "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"}, {0xb8, 0x10f, 0x7, "c9b5fa8a364fbc7acb23c7f87920c8204dbf98e477898fccd35bc59f1905ed772164c0a162cf529c4c99eace082d9d82d63eb517bc43931871461643a996f420df4b325f96dfe45eeaf77512c95273dc0537312b37f1f72e968c15ba60a3e8bfbf806fd61b985333983334e907929bbda8e7edda841da9b991678e2cc5f02848b694913e1300f02286cf8ebdd84c634eb2e12b1d45edf220c8cda2bffc07fe80c470"}], 0x2a0}, 0xc054)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x18)
perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x6, 0x0, 0x9, 0x0, 0x0, 0x2, 0xa0110, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000c00), 0x8}, 0x488a, 0x100000001, 0xc, 0x1, 0x9f4, 0x0, 0x2ed9, 0x0, 0x0, 0x0, 0xac6b}, 0x0, 0xb, r3, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})

930.146566ms ago: executing program 2 (id=2352):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1) (async)
r2 = socket$kcm(0x2, 0x1, 0x84) (async)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x71, &(0x7f0000000000)=r3, 0x8) (async)
socketpair(0x1a, 0x800, 0xfbfffffe, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'batadv0\x00', 0x1201})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r5}) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x4, 0x0, 0x0, 0x6f794020, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xe, 0x9}, 0x90b, 0x80000004, 0x2, 0x1, 0x0, 0x4, 0x1, 0x0, 0x2, 0x0, 0x20000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r11 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async)
openat$cgroup_procs(r8, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) (async)
r12 = getpid() (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f00000005c0)="3f46074a5907dc4382b4cb6b653389f2b003e3043c19ce9f81da914777c40708903006605cffa749d0e3cf35a152bed693219626c1e9b5a628d460dbaa70c5832f4c7a3a68fea2f12e0541fb9fd4037cf23fd0771d255003ea289267f57b81cedfe72eb96fb59d04ccda022f3aeee910461a3e", &(0x7f0000000640)=""/138, &(0x7f00000003c0)="102003779aaba6af4c509ef955304103df7762c691476c29d8098dafdcf1da57b5d6e1b5338695904390177a24ac6447d40a059fc4c6743b", &(0x7f0000000840), 0xffffffc0, r3, 0x4}, 0x38) (async)
fstat(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}) (async)
fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000a00)="4cd690d727d67d53b0d35919fadd29af0188e214b896da302709150e3a1937c1c6074ad892de9a1f178fc1c07587edd821cb831b108272f4da9776aa0e2a64d81223266f164b5b161f63381a41f66f3ab5681310385f285af833fb77b1c7dadcf571d5b24e136bdcfa797be03a5f59f6035292bcf8d936200bcce79482b9e399e216c812853e95590e29bfeb9346ebbc2e847e7f97610a00b5b38401773b3ef8b59f13e9de9be1e183667587b70cf8b6c5d0fa627dbedbdbc599f0f808ffe6bf25f48fe67f8be3c37c3469f5c02913caf1ff5560d15eb0a1ebda603f90fd5a3300a25464f9322614e640de64eb1726ca6476963366585f", 0xf7}, {&(0x7f0000000540)="341eede19b14f54705cc455f3e3535d148557b41ba2b52c9dad5c67894626ad1134eb5625f02d30acae79e449030e324a5f025c11e1efa87df79a1059463297005934423665049d0db0f36f1b414488d5e4bf0cefca26ffd92992b13ec4370b1b6cc98dc7745f851679a104a0bd0e432f4", 0x71}], 0x2, &(0x7f0000000940)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="040000"], 0xb0, 0x20048044}, 0x0)
r15 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) (async)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x8) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000000c0)={'bond0\x00'})

929.899476ms ago: executing program 2 (id=2353):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3f, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2}, 0x14000)

840.082508ms ago: executing program 2 (id=2354):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f0000000d800000121f", 0x2e}], 0x1}, 0x0)

839.758973ms ago: executing program 2 (id=2355):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0xffffff00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x3}}]}, {0xffffffffffffff1b}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x800})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
socket$kcm(0x2, 0x3, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001114410029bd70000000000008004a0000000000080001000000000008004b0013000000080003"], 0x30}}, 0x0)

366.213138ms ago: executing program 2 (id=2356):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x1, 0x6}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0xffff, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000780), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4788}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r5, 0x0, 0x12, 0x0, 0x44)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, 0x0, 0xfe33)
socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000240)={'lo\x00', @local})
setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4)

0s ago: executing program 4 (id=2357):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x1, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000085000000500000001811000000000000", @ANYRES32=r0, @ANYBLOB="ec7d01607c1f3a8d3a5be65b33a1b388d25d36ec92b3d9c83b6114a31b99cc0d6886287dc3fe31a0bd4f3ff66332f9865d58973ea1c89d2c20a915806b6b65d1524b6794920bc5c33aa0702d64d7e81cbf3ca33a03d8650c899079b4a6124d3b96bc4a7892d5cb84c45e2960736fd44b259dcd131e9530cc0535286ec8f7d2bfd1a60336c0cbdefc01ec4ee87ca90862013bb1f659eb251c6b3f3e434aa33559f1cbb190c67e39398d299c5eb999c42ebcaab0eac38bb2"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, 0x0, 0x4}, 0x94)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x5, 0xfffff038}, {0x6, 0x0, 0x0, 0x361}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000400000000000100ffffffff85000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33392' (ED25519) to the list of known hosts.
syzkaller login: [   56.523524][ T5827] cgroup: Unknown subsys name 'net'
[   56.654251][ T5827] cgroup: Unknown subsys name 'cpuset'
[   56.662466][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.005064][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.521749][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.525043][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.527897][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.531128][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.534334][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.635340][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.638565][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.641646][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.644814][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.647731][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.705156][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.717553][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.721239][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.729968][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.734610][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.756983][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   64.916980][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.921322][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.924730][ T5846] bridge_slave_0: entered allmulticast mode
[   64.928553][ T5846] bridge_slave_0: entered promiscuous mode
[   64.949465][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.952361][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.954946][ T5846] bridge_slave_1: entered allmulticast mode
[   64.958275][ T5846] bridge_slave_1: entered promiscuous mode
[   64.995692][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.043824][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.085116][ T5846] team0: Port device team_slave_0 added
[   65.092914][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.107445][ T5846] team0: Port device team_slave_1 added
[   65.141642][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.144656][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.154544][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.177396][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.180357][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.190322][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.283383][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.286312][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.290060][ T5851] bridge_slave_0: entered allmulticast mode
[   65.294056][ T5851] bridge_slave_0: entered promiscuous mode
[   65.318669][ T5846] hsr_slave_0: entered promiscuous mode
[   65.322515][ T5846] hsr_slave_1: entered promiscuous mode
[   65.325880][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.329484][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.331984][ T5851] bridge_slave_1: entered allmulticast mode
[   65.335088][ T5851] bridge_slave_1: entered promiscuous mode
[   65.373293][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.395657][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.415619][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.453188][ T5851] team0: Port device team_slave_0 added
[   65.470244][ T5851] team0: Port device team_slave_1 added
[   65.547628][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.550402][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.558154][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.594675][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.597298][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.606362][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.661862][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.664555][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.667610][ T5853] bridge_slave_0: entered allmulticast mode
[   65.672018][ T5853] bridge_slave_0: entered promiscuous mode
[   65.676758][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.679910][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.683004][ T5853] bridge_slave_1: entered allmulticast mode
[   65.687038][ T5853] bridge_slave_1: entered promiscuous mode
[   65.777318][ T5851] hsr_slave_0: entered promiscuous mode
[   65.780594][ T5851] hsr_slave_1: entered promiscuous mode
[   65.783306][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.785288][ T5851] Cannot create hsr debugfs directory
[   65.789879][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.795814][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.883635][ T5853] team0: Port device team_slave_0 added
[   65.888428][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.907385][ T5853] team0: Port device team_slave_1 added
[   65.925990][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.960731][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.968627][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.972783][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.982074][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.998415][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.004851][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.007612][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.020198][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.111657][ T5853] hsr_slave_0: entered promiscuous mode
[   66.114764][ T5853] hsr_slave_1: entered promiscuous mode
[   66.117669][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   66.120625][ T5853] Cannot create hsr debugfs directory
[   66.235146][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.252208][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.260031][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.269853][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.401444][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.477295][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   66.488119][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.498150][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.508346][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.511322][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.519140][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.533741][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.536990][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.540935][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.589802][   T54] Bluetooth: hci0: command tx timeout
[   66.627878][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.672077][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.680363][   T54] Bluetooth: hci1: command tx timeout
[   66.701622][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.704532][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.723918][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.726895][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.807674][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.830027][   T54] Bluetooth: hci2: command tx timeout
[   66.853432][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.872490][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.875689][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.922101][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.925104][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.984630][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.055734][ T5846] veth0_vlan: entered promiscuous mode
[   67.084603][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.092973][ T5846] veth1_vlan: entered promiscuous mode
[   67.166455][ T5846] veth0_macvtap: entered promiscuous mode
[   67.189946][ T5846] veth1_macvtap: entered promiscuous mode
[   67.219293][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.232688][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.255534][ T5851] veth0_vlan: entered promiscuous mode
[   67.259952][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.271289][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.280098][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.297557][ T5851] veth1_vlan: entered promiscuous mode
[   67.301722][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.328323][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.425172][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.441422][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.466227][ T5851] veth0_macvtap: entered promiscuous mode
[   67.488639][ T5853] veth0_vlan: entered promiscuous mode
[   67.495202][ T5851] veth1_macvtap: entered promiscuous mode
[   67.507740][ T5853] veth1_vlan: entered promiscuous mode
[   67.518367][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.524480][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.527979][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.542730][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.562728][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.572650][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.576059][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.590491][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.613180][ T5853] veth0_macvtap: entered promiscuous mode
[   67.614571][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.639894][ T5853] veth1_macvtap: entered promiscuous mode
[   67.700044][ T5914] openvswitch: netlink: Invalid VLAN frame
[   67.703896][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.705352][ T5915] openvswitch: netlink: Invalid VLAN frame
[   67.727258][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.746130][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.769114][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.772254][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.818494][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.830282][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.855957][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.861387][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.864679][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.025169][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.034303][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.087538][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.091932][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.203159][ T5930] netlink: 'syz.0.7': attribute type 21 has an invalid length.
[   68.206373][ T5930] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   68.403000][ T5946] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.408320][ T5947] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.419906][ T5946] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[   68.435680][ T5946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.440006][ T5947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.622133][ T5954] Zero length message leads to an empty skb
[   68.632147][    C0] hrtimer: interrupt took 53222 ns
[   68.673295][   T54] Bluetooth: hci0: command tx timeout
[   68.752486][   T54] Bluetooth: hci1: command tx timeout
[   68.909252][   T54] Bluetooth: hci2: command tx timeout
[   69.577471][ T5969] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.17'.
[   69.826881][ T5979] netlink: 'syz.0.20': attribute type 39 has an invalid length.
[   70.526024][ T5998] netlink: 188 bytes leftover after parsing attributes in process `syz.2.22'.
[   70.626855][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'.
[   70.749196][   T54] Bluetooth: hci0: command tx timeout
[   70.793555][ T6006] netlink: 'syz.1.24': attribute type 41 has an invalid length.
[   70.796878][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24'.
[   70.822618][ T6006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.829426][   T54] Bluetooth: hci1: command tx timeout
[   71.008844][   T54] Bluetooth: hci2: command tx timeout
[   71.064630][ T6013] netlink: 'syz.0.27': attribute type 10 has an invalid length.
[   71.197653][ T6022] delete_channel: no stack
[   71.203077][ T6022] delete_channel: no stack
[   71.239974][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.243133][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.294691][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   71.394781][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   72.296320][ T6049] netlink: 'syz.0.39': attribute type 10 has an invalid length.
[   72.829788][   T54] Bluetooth: hci0: command tx timeout
[   72.839862][ T6049] batman_adv: batadv0: Adding interface: virt_wifi0
[   72.842712][ T6049] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.851926][ T6049] batman_adv: batadv0: Interface activated: virt_wifi0
[   72.909063][   T54] Bluetooth: hci1: command tx timeout
[   72.911570][ T6058] netlink: 'syz.1.42': attribute type 13 has an invalid length.
[   73.068970][   T54] Bluetooth: hci2: command tx timeout
[   73.305332][ T6075] syzkaller0: entered promiscuous mode
[   73.307377][ T6075] syzkaller0: entered allmulticast mode
[   73.367059][   T54] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   73.633940][ T6083] __nla_validate_parse: 4 callbacks suppressed
[   73.633997][ T6083] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.50'.
[   75.510965][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   76.576517][ T6112] netlink: 'syz.2.57': attribute type 10 has an invalid length.
[   76.581948][ T6112] netlink: 168 bytes leftover after parsing attributes in process `syz.2.57'.
[   76.784408][ T6115] -1: renamed from syzkaller0
[   77.045299][ T6134] =======================================================
[   77.045299][ T6134] WARNING: The mand mount option has been deprecated and
[   77.045299][ T6134]          and is ignored by this kernel. Remove the mand
[   77.045299][ T6134]          option from the mount to silence this warning.
[   77.045299][ T6134] =======================================================
[   77.077167][ T6134] option changes via remount are deprecated (pid=6132 comm=syz.0.64)
[   77.234889][ T6138] netlink: 'syz.2.66': attribute type 10 has an invalid length.
[   77.267080][ T6138] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.963998][ T6149] netlink: 10 bytes leftover after parsing attributes in process `syz.1.70'.
[   78.083460][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   78.098201][ T6164] netlink: 'syz.0.75': attribute type 3 has an invalid length.
[   78.109045][ T6164] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.75'.
[   80.294247][ T6193] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.87'.
[   80.308403][ T6193] openvswitch: netlink: Message has 6 unknown bytes.
[   80.319764][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.326270][ T6204] netlink: 'syz.2.89': attribute type 13 has an invalid length.
[   80.329928][ T6203] netlink: 'syz.2.89': attribute type 13 has an invalid length.
[   80.333219][ T6203] netlink: 'syz.2.89': attribute type 17 has an invalid length.
[   80.341923][ T6204] netlink: 'syz.2.89': attribute type 17 has an invalid length.
[   82.005591][ T6204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.023906][ T6203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.082992][ T6211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.91'.
[   82.087983][   T95] cfg80211: failed to load regulatory.db
[   82.345777][ T6223] warning: `syz.2.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.413316][ T6230] netlink: 'syz.1.96': attribute type 12 has an invalid length.
[   82.416995][ T6230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.96'.
[   82.474929][ T6228] openvswitch: netlink: Flow actions attr not present in new flow.
[   82.480230][ T6228] syzkaller0: entered promiscuous mode
[   82.488964][ T6228] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   82.523754][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   82.535174][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   82.576666][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   82.591461][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   82.791477][ T6242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.810263][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   82.814149][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[   83.125339][ T6254] netlink: 168 bytes leftover after parsing attributes in process `syz.0.102'.
[   83.194129][ T6262] netlink: 'syz.0.106': attribute type 41 has an invalid length.
[   83.371048][ T6273] netlink: 'syz.0.109': attribute type 13 has an invalid length.
[   83.444928][ T6278] Illegal XDP return value 3106391814 on prog  (id 92) dev N/A, expect packet loss!
[   83.582419][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.588022][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.817088][ T6273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.839650][ T6273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.933078][ T6273] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   84.075077][ T6295] syz.2.113 uses obsolete (PF_INET,SOCK_PACKET)
[   84.263257][ T6273] syz.0.109 (6273) used greatest stack depth: 19072 bytes left
[   84.298246][ T5877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.306212][ T5877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.781651][ T5877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.785577][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.791004][ T6301] __nla_validate_parse: 2 callbacks suppressed
[   85.791018][ T6301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'.
[   85.796972][ T6301] tc_dump_action: action bad kind
[   85.872914][ T6322] bridge0: port 3(veth0_to_team) entered blocking state
[   85.875739][ T6322] bridge0: port 3(veth0_to_team) entered disabled state
[   85.878470][ T6322] veth0_to_team: entered allmulticast mode
[   85.894228][ T6322] veth0_to_team: entered promiscuous mode
[   86.041208][ T6331] netlink: 'syz.2.118': attribute type 39 has an invalid length.
[   86.158334][ T6338] netlink: 'syz.1.122': attribute type 10 has an invalid length.
[   86.163018][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'.
[   86.167507][ T6338] vcan0: entered promiscuous mode
[   86.170230][ T6338] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   86.278550][ T6342] netlink: 'syz.1.124': attribute type 16 has an invalid length.
[   86.281906][ T6342] netlink: 168 bytes leftover after parsing attributes in process `syz.1.124'.
[   86.793614][ T6349] veth0_vlan: entered allmulticast mode
[   86.900328][ T6349] veth0_vlan: left promiscuous mode
[   86.910921][ T6349] veth0_vlan: entered promiscuous mode
[   88.507454][ T6377] netlink: 822 bytes leftover after parsing attributes in process `syz.0.134'.
[   88.634431][ T6381] syzkaller0: entered promiscuous mode
[   88.636706][ T6381] syzkaller0: entered allmulticast mode
[   89.509799][ T6434] netlink: 'syz.1.147': attribute type 1 has an invalid length.
[   89.513108][ T6434] netlink: 'syz.1.147': attribute type 4 has an invalid length.
[   90.639027][ T6466] netlink: 'syz.0.156': attribute type 10 has an invalid length.
[   90.651635][ T6466] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   91.053835][ T6478] : renamed from gre0 (while UP)
[   91.136225][ T6480] netlink: 'syz.0.161': attribute type 3 has an invalid length.
[   91.743895][ T6508] netlink: 'syz.1.170': attribute type 30 has an invalid length.
[   91.803307][ T6508] netlink: 13 bytes leftover after parsing attributes in process `syz.1.170'.
[   92.071945][ T6514] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[   92.075620][ T6514] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   92.097384][ T6514] bridge0: port 1(bridge_slave_0) entered learning state
[   92.114748][ T6519] netlink: 192 bytes leftover after parsing attributes in process `syz.2.174'.
[   93.963584][ T6563] netlink: 'syz.0.187': attribute type 10 has an invalid length.
[   95.687191][ T6629] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.206'.
[   95.760806][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'.
[   96.189366][ T6657] netlink: 'syz.0.218': attribute type 8 has an invalid length.
[   96.954216][ T6701] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   96.966855][ T6701] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   96.972500][ T6701] netlink: 'syz.0.229': attribute type 29 has an invalid length.
[   97.188671][ T6717] macsec0: entered allmulticast mode
[   97.193493][ T6717] veth1_macvtap: entered allmulticast mode
[   97.195743][ T6717] macsec0: entered promiscuous mode
[   97.247193][ T6715] netlink: zone id is out of range
[   97.250505][ T6715] netlink: zone id is out of range
[   97.252862][ T6715] netlink: zone id is out of range
[   97.255528][ T6715] netlink: zone id is out of range
[   97.258521][ T6715] netlink: zone id is out of range
[   97.263359][ T6715] netlink: zone id is out of range
[   97.265396][ T6715] netlink: zone id is out of range
[   97.270653][ T6715] netlink: zone id is out of range
[   97.273221][ T6715] netlink: zone id is out of range
[   97.275021][ T6715] netlink: zone id is out of range
[   97.537327][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'.
[   97.541095][ T6730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.240'.
[   98.494024][ T6744] delete_channel: no stack
[   98.851377][ T6761] netlink: 'syz.0.252': attribute type 13 has an invalid length.
[   98.854438][ T6761] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.252'.
[   98.858548][ T6761] netlink: 'syz.0.252': attribute type 29 has an invalid length.
[   98.867495][ T6761] netlink: 'syz.0.252': attribute type 29 has an invalid length.
[   98.944816][ T6764] netlink: 'syz.2.251': attribute type 10 has an invalid length.
[   98.948318][ T6764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.251'.
[   98.957307][ T6764] ipvlan1: entered promiscuous mode
[   98.960173][ T6764] ipvlan1: entered allmulticast mode
[   98.981698][ T6764] bridge0: port 3(ipvlan1) entered blocking state
[   98.985643][ T6764] bridge0: port 3(ipvlan1) entered disabled state
[   99.180499][ T6773] netlink: 'syz.0.255': attribute type 21 has an invalid length.
[   99.877635][ T6802] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.147308][ T6808] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.265'.
[  100.155738][ T6806] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.265'.
[  100.196143][ T6808] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.265'.
[  100.267546][ T6806] netlink: 'syz.1.265': attribute type 1 has an invalid length.
[  100.282334][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'.
[  101.477609][ T6854] netlink: 'syz.2.278': attribute type 21 has an invalid length.
[  102.011273][ T6854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.278'.
[  102.277959][ T6870] netlink: 'syz.2.280': attribute type 11 has an invalid length.
[  102.286485][ T6870] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.280'.
[  102.394274][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.865655][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[  103.222814][ T6885] netlink: 'syz.2.282': attribute type 1 has an invalid length.
[  103.225974][ T6885] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.282'.
[  103.259535][ T6883] netlink: 'syz.2.282': attribute type 1 has an invalid length.
[  103.264394][ T6883] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.282'.
[  104.363629][ T6898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.285'.
[  104.445545][ T6904] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.287'.
[  104.576970][ T6906] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.287'.
[  104.836419][ T6912] net_ratelimit: 12 callbacks suppressed
[  104.836545][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.158534][ T6905] netlink: 220 bytes leftover after parsing attributes in process `syz.1.286'.
[  105.522022][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[  106.033677][ T6926] syzkaller0: entered promiscuous mode
[  106.038351][ T6926] syzkaller0: entered allmulticast mode
[  106.116234][ T6946] netlink: 'syz.0.296': attribute type 39 has an invalid length.
[  107.626889][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'.
[  108.155889][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.304'.
[  108.723274][ T6988] netlink: 'syz.0.305': attribute type 12 has an invalid length.
[  108.729016][ T6988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.305'.
[  108.763783][ T6988] netlink: 'syz.0.305': attribute type 21 has an invalid length.
[  108.974511][ T7004] raw_sendmsg: syz.1.314 forgot to set AF_INET. Fix it!
[  108.993551][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'.
[  110.328091][ T7025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'.
[  110.347175][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.428491][ T7025] bridge_slave_0 (unregistering): left allmulticast mode
[  110.433768][ T7025] bridge_slave_0 (unregistering): left promiscuous mode
[  110.444400][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.120038][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'.
[  111.213030][ T7038] netlink: 'syz.2.325': attribute type 3 has an invalid length.
[  111.366078][ T7044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.324'.
[  111.371581][ T7044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.324'.
[  111.375664][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[  111.692302][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'.
[  112.176492][ T7076] netlink: 'syz.0.338': attribute type 10 has an invalid length.
[  112.185834][ T7076] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  113.195098][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'.
[  113.280538][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'.
[  113.350951][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'.
[  113.356813][ T7113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'.
[  113.371593][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'.
[  113.960236][ T7136] netlink: 763 bytes leftover after parsing attributes in process `syz.2.350'.
[  114.206938][ T7140] netlink: 'syz.0.354': attribute type 12 has an invalid length.
[  114.209892][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.354'.
[  115.498420][ T7165] netlink: 'syz.1.360': attribute type 4 has an invalid length.
[  115.522296][ T7166] netlink: 'syz.0.362': attribute type 27 has an invalid length.
[  115.524856][ T7166] netlink: 164 bytes leftover after parsing attributes in process `syz.0.362'.
[  115.673376][ T7169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.677237][ T7169] IPv6: NLM_F_CREATE should be set when creating new route
[  115.681077][ T7169] IPv6: NLM_F_CREATE should be set when creating new route
[  115.744266][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'.
[  115.748678][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'.
[  115.974721][ T7183] netlink: 'syz.1.365': attribute type 4 has an invalid length.
[  116.151711][ T7194] openvswitch: netlink: Multiple metadata blocks provided
[  116.247015][ T7189] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  116.859580][ T7252] netlink: 'syz.1.383': attribute type 11 has an invalid length.
[  118.966241][ T7289] __nla_validate_parse: 2 callbacks suppressed
[  118.966252][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'.
[  119.602303][ T7300] netlink: 92 bytes leftover after parsing attributes in process `syz.2.399'.
[  119.760165][ T7305] syzkaller0: entered promiscuous mode
[  119.766503][ T7305] syzkaller0: entered allmulticast mode
[  121.415404][ T7323] netlink: 'syz.0.405': attribute type 16 has an invalid length.
[  121.455127][ T7323] netlink: 48 bytes leftover after parsing attributes in process `syz.0.405'.
[  121.693227][ T7344] netlink: 'syz.2.413': attribute type 21 has an invalid length.
[  121.951388][ T7353] netlink: 'syz.2.415': attribute type 28 has an invalid length.
[  121.958092][ T7353] netlink: 'syz.2.415': attribute type 3 has an invalid length.
[  121.964991][ T7353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.415'.
[  122.400093][ T7373] netlink: 'syz.2.421': attribute type 10 has an invalid length.
[  122.404141][ T7372] netlink: 'syz.2.421': attribute type 10 has an invalid length.
[  122.456998][ T7372] team0: Port device geneve1 added
[  122.604209][ T7386] netlink: 212 bytes leftover after parsing attributes in process `syz.2.425'.
[  122.805159][ T7398] netlink: 'syz.2.429': attribute type 29 has an invalid length.
[  122.812972][ T7398] netlink: 'syz.2.429': attribute type 29 has an invalid length.
[  122.817647][ T7398] netlink: 'syz.2.429': attribute type 29 has an invalid length.
[  122.932897][ T7402] netlink: 140 bytes leftover after parsing attributes in process `syz.2.431'.
[  122.936777][ T7402] netlink: 6 bytes leftover after parsing attributes in process `syz.2.431'.
[  123.375882][ T7411] netlink: 'syz.0.434': attribute type 10 has an invalid length.
[  123.525914][ T7420] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.436'.
[  123.663211][ T7422] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  123.675526][ T7422] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  124.401982][ T7444] openvswitch: netlink: Message has 72 unknown bytes.
[  124.537864][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'.
[  124.565787][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'.
[  124.574081][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'.
[  124.880401][ T7463] netlink: 17 bytes leftover after parsing attributes in process `syz.0.448'.
[  125.247420][ T7468] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.450'.
[  125.253843][ T7468] nbd: must specify at least one socket
[  125.824458][ T7479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'.
[  126.205805][ T7502] netlink: 55 bytes leftover after parsing attributes in process `syz.1.460'.
[  126.317805][ T7507] netlink: 51 bytes leftover after parsing attributes in process `syz.2.461'.
[  126.637154][ T7522] veth0_vlan: left promiscuous mode
[  126.645409][ T7522] veth0_vlan: entered promiscuous mode
[  126.876297][ T7526] syzkaller1: tun_chr_ioctl cmd 1074812117
[  126.914368][ T7536] validate_nla: 6 callbacks suppressed
[  126.914430][ T7536] netlink: 'syz.1.471': attribute type 2 has an invalid length.
[  126.923121][ T7536] netlink: 'syz.1.471': attribute type 8 has an invalid length.
[  126.926441][ T7536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.471'.
[  127.069870][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[  129.884217][ T7601] netlink: 'syz.2.490': attribute type 12 has an invalid length.
[  129.887540][ T7601] __nla_validate_parse: 4 callbacks suppressed
[  129.887556][ T7601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.490'.
[  132.623741][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'.
[  132.674346][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.676608][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.921279][ T7626] veth1_macvtap: left promiscuous mode
[  132.923060][ T7626] macsec0: entered promiscuous mode
[  133.113092][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'.
[  133.417719][ T7645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'.
[  133.424389][ T7645] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  133.534631][ T7633] netlink: 56 bytes leftover after parsing attributes in process `syz.1.498'.
[  134.128118][ T7667] syzkaller0: entered promiscuous mode
[  134.133911][ T7667] syzkaller0: entered allmulticast mode
[  134.291545][ T7675] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  135.733680][ T7691] delete_channel: no stack
[  135.906831][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[  135.913787][ T7707] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  135.918509][ T7707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.928508][ T7709] netlink: 'syz.0.523': attribute type 14 has an invalid length.
[  135.990928][ T7717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.677942][ T7757] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.532'.
[  136.804334][ T7760] netlink: 56 bytes leftover after parsing attributes in process `syz.1.533'.
[  137.170841][ T7766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.536'.
[  137.174573][ T7766] netlink: 35 bytes leftover after parsing attributes in process `syz.2.536'.
[  137.182196][ T7766] netlink: 35 bytes leftover after parsing attributes in process `syz.2.536'.
[  137.375194][ T7779] netlink: 56 bytes leftover after parsing attributes in process `syz.2.538'.
[  137.432845][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'.
[  137.436164][ T7782] openvswitch: netlink: Flow key attr not present in new flow.
[  137.552930][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'.
[  138.055743][ T7805] netlink: 'syz.1.546': attribute type 12 has an invalid length.
[  138.063218][ T7805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.546'.
[  138.581002][ T7815] netlink: 'syz.1.547': attribute type 7 has an invalid length.
[  139.257730][ T7835] veth0_vlan: entered allmulticast mode
[  139.447231][ T7835] veth0_vlan: left promiscuous mode
[  139.467418][ T7835] veth0_vlan: entered promiscuous mode
[  140.562034][ T7861] netlink: 'syz.1.563': attribute type 41 has an invalid length.
[  140.618297][ T7861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.484406][ T7880] __nla_validate_parse: 3 callbacks suppressed
[  141.484425][ T7880] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.568'.
[  141.545833][ T7875] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.566'.
[  141.584835][ T7880] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.568'.
[  141.800596][ T7882] veth0_vlan: left promiscuous mode
[  141.817098][ T7882] veth0_vlan: entered promiscuous mode
[  142.020063][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'.
[  142.051250][ T7886] netlink: 300 bytes leftover after parsing attributes in process `syz.0.570'.
[  142.224641][ T7874] delete_channel: no stack
[  142.602665][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  142.611397][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  142.621801][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  142.632530][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  142.646906][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  143.215172][ T7961] openvswitch: netlink: Missing key (keys=40, expected=100)
[  143.310071][ T7966] openvswitch: netlink: Flow actions attr not present in new flow.
[  143.581279][ T7973] netlink: 'syz.2.583': attribute type 12 has an invalid length.
[  143.748573][ T7980] macsec0: left promiscuous mode
[  143.751365][ T7980] macsec0: entered allmulticast mode
[  143.765028][ T7980] veth1_macvtap: entered promiscuous mode
[  143.767159][ T7980] veth1_macvtap: entered allmulticast mode
[  143.772267][ T7980] macsec0: entered promiscuous mode
[  144.894411][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.913864][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.927012][ T7985] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  144.940843][ T7985] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  144.952619][ T7985] bond0 (unregistering): Released all slaves
[  144.988443][ T7990] _Z`Ԁ@S!: entered promiscuous mode
[  145.173621][ T8003] netlink: 'syz.2.594': attribute type 10 has an invalid length.
[  146.211495][ T5855] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  146.348668][ T8041] netlink: 'syz.1.607': attribute type 6 has an invalid length.
[  146.351942][ T8041] netlink: 'syz.1.607': attribute type 1 has an invalid length.
[  146.490501][ T8057] __nla_validate_parse: 72 callbacks suppressed
[  146.490513][ T8057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'.
[  146.496634][ T8057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'.
[  146.503955][ T8057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'.
[  146.554356][ T8063] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.614'.
[  146.914423][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  146.920026][ T8082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.620'.
[  146.994192][ T8086] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.622'.
[  147.048682][ T8094] netlink: 'syz.1.624': attribute type 29 has an invalid length.
[  147.054661][ T8093] netlink: 'syz.1.624': attribute type 29 has an invalid length.
[  147.231750][ T8103] netlink: 'syz.0.625': attribute type 2 has an invalid length.
[  147.236824][ T8103] netlink: 'syz.0.625': attribute type 2 has an invalid length.
[  147.374723][ T8111] tap0: tun_chr_ioctl cmd 1074025677
[  147.377473][ T8111] tap0: linktype set to 774
[  147.770126][ T8123] netlink: 'syz.2.633': attribute type 10 has an invalid length.
[  148.600564][ T8147] netlink: 'syz.0.641': attribute type 2 has an invalid length.
[  148.603696][ T8147] netlink: 119 bytes leftover after parsing attributes in process `syz.0.641'.
[  148.620978][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'.
[  148.624603][ T8147] netlink: 356 bytes leftover after parsing attributes in process `syz.0.641'.
[  148.648506][ T8153] bpf: Bad value for 'mode'
[  149.044762][ T8168] netlink: 'syz.2.647': attribute type 6 has an invalid length.
[  150.087346][ T8178] syzkaller0: entered promiscuous mode
[  150.098580][ T8178] syzkaller0: entered allmulticast mode
[  153.103084][ T8192] validate_nla: 2 callbacks suppressed
[  153.103096][ T8192] netlink: 'syz.1.653': attribute type 10 has an invalid length.
[  154.256184][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.262619][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.270745][ T8192] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  154.466830][ T8204] __nla_validate_parse: 2 callbacks suppressed
[  154.466841][ T8204] netlink: 763 bytes leftover after parsing attributes in process `syz.2.656'.
[  154.473323][ T8204] netlink: 'syz.2.656': attribute type 10 has an invalid length.
[  154.476156][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.656'.
[  154.479306][ T8204] team0: entered promiscuous mode
[  154.481330][ T8204] team_slave_0: entered promiscuous mode
[  154.482645][ T8203] netlink: 'syz.0.658': attribute type 3 has an invalid length.
[  154.483248][ T8204] team_slave_1: entered promiscuous mode
[  154.488273][ T8203] netlink: 'syz.0.658': attribute type 1 has an invalid length.
[  154.490257][ T8204] geneve1: entered promiscuous mode
[  154.492556][ T8204] team0: entered allmulticast mode
[  154.494686][ T8204] team_slave_0: entered allmulticast mode
[  154.497113][ T8204] team_slave_1: entered allmulticast mode
[  154.498323][ T8203] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.658'.
[  154.500731][ T8204] geneve1: entered allmulticast mode
[  154.505361][ T8204] bridge0: port 3(team0) entered blocking state
[  154.507467][ T8204] bridge0: port 3(team0) entered disabled state
[  154.744709][ T8215] netlink: 'syz.1.662': attribute type 30 has an invalid length.
[  154.800109][ T8215] netlink: 13 bytes leftover after parsing attributes in process `syz.1.662'.
[  154.862082][ T8218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.663'.
[  154.865766][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'.
[  154.880436][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'.
[  154.891543][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'.
[  154.926682][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.664'.
[  154.938656][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'.
[  155.552651][ T8242] netlink: 'syz.1.669': attribute type 2 has an invalid length.
[  156.686910][ T8261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.871067][ T8351] netlink: 'syz.0.707': attribute type 6 has an invalid length.
[  159.754353][ T5855] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  160.088843][ T8406] __nla_validate_parse: 9 callbacks suppressed
[  160.088854][ T8406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.723'.
[  160.186876][ T8412] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.725'.
[  160.912186][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'.
[  160.915737][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'.
[  161.045906][ T8437] netlink: 'syz.1.732': attribute type 2 has an invalid length.
[  161.054015][ T8437] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  161.081656][ T8437] netlink: 163464 bytes leftover after parsing attributes in process `syz.1.732'.
[  161.483212][ T8450] netlink: 'syz.2.734': attribute type 10 has an invalid length.
[  161.486403][ T8450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.734'.
[  161.490912][ T8450] dummy0: entered promiscuous mode
[  161.499072][ T8449] netlink: 'syz.2.734': attribute type 10 has an invalid length.
[  161.506065][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.734'.
[  161.798399][ T8474] syzkaller0: entered promiscuous mode
[  161.805156][ T8474] syzkaller0: entered allmulticast mode
[  161.943382][ T5855] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  162.092499][ T8495] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.746'.
[  162.172122][ T8503] netlink: 108 bytes leftover after parsing attributes in process `syz.2.750'.
[  162.238027][ T8503] syzkaller0: entered promiscuous mode
[  162.241351][ T8503] syzkaller0: entered allmulticast mode
[  164.921648][ T8542] netlink: 'syz.2.763': attribute type 29 has an invalid length.
[  165.138574][ T8544] bridge0: port 4(syz_tun) entered blocking state
[  165.143470][ T8544] bridge0: port 4(syz_tun) entered disabled state
[  165.151856][ T8544] syz_tun: entered allmulticast mode
[  165.174962][ T8544] syz_tun: entered promiscuous mode
[  165.183712][ T8544] bridge0: port 4(syz_tun) entered blocking state
[  165.186551][ T8544] bridge0: port 4(syz_tun) entered forwarding state
[  165.277281][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  165.672662][ T8580] netlink: 'syz.0.776': attribute type 10 has an invalid length.
[  165.675623][ T8580] netlink: 2 bytes leftover after parsing attributes in process `syz.0.776'.
[  166.063644][ T8589] : entered promiscuous mode
[  166.248283][ T8601] netlink: 60 bytes leftover after parsing attributes in process `syz.1.782'.
[  166.316379][ T8604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.782'.
[  166.355013][ T8612] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  166.430513][ T8618] netlink: 'syz.2.787': attribute type 39 has an invalid length.
[  167.460228][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'.
[  167.607446][ T8630] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  168.317338][ T8653] nft_compat: unsupported protocol 0
[  168.595882][ T8666] netlink: 'syz.0.802': attribute type 10 has an invalid length.
[  169.315837][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.805'.
[  169.471426][ T8676] openvswitch: netlink: Flow key attr not present in new flow.
[  170.017621][ T8693] netlink: 'syz.0.810': attribute type 10 has an invalid length.
[  170.227593][ T8705] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.814'.
[  170.268389][ T8708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.282910][ T8711] netlink: 'syz.1.816': attribute type 7 has an invalid length.
[  170.330104][ T8718] netlink: 'syz.2.818': attribute type 10 has an invalid length.
[  170.426179][ T8722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.820'.
[  171.287808][ T8745] netlink: 'syz.1.827': attribute type 10 has an invalid length.
[  172.118100][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.842'.
[  172.123295][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.842'.
[  172.280329][ T8801] netlink: 'syz.1.847': attribute type 39 has an invalid length.
[  173.310644][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[  173.314401][ T8836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.857'.
[  173.728911][ T8863] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  173.907589][ T8871] netlink: 'syz.1.866': attribute type 10 has an invalid length.
[  174.368974][ T8880] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.498440][ T8889] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  174.535388][ T8891] netlink: 202232 bytes leftover after parsing attributes in process `syz.2.872'.
[  174.539120][ T8891] netlink: zone id is out of range
[  174.540866][ T8891] netlink: zone id is out of range
[  174.584265][ T8893] netlink: 14 bytes leftover after parsing attributes in process `syz.2.873'.
[  174.587860][ T8893] bridge0: port 4(syz_tun) entered disabled state
[  174.590413][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.593933][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.800873][ T8907] netlink: 763 bytes leftover after parsing attributes in process `syz.2.878'.
[  174.848640][ T8901] netlink: 'syz.0.876': attribute type 9 has an invalid length.
[  174.975224][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  174.976895][ T8919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.050835][ T8918] netlink: 'syz.2.881': attribute type 13 has an invalid length.
[  175.053879][ T8918] netlink: 164 bytes leftover after parsing attributes in process `syz.2.881'.
[  175.057734][ T8918] syz_tun: refused to change device tx_queue_len
[  177.065879][ T8971] netlink: 220 bytes leftover after parsing attributes in process `syz.2.900'.
[  177.397406][ T8986] netlink: 830 bytes leftover after parsing attributes in process `syz.2.904'.
[  177.403031][ T8974] netlink: 'syz.0.901': attribute type 2 has an invalid length.
[  177.407461][ T8974] netlink: 110008 bytes leftover after parsing attributes in process `syz.0.901'.
[  177.491771][ T8989] netlink: 14 bytes leftover after parsing attributes in process `syz.1.905'.
[  177.495132][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.967308][ T8999] netlink: 'syz.0.909': attribute type 29 has an invalid length.
[  178.002052][ T9001] netlink: 'syz.0.909': attribute type 29 has an invalid length.
[  178.036129][ T9003] netlink: 'syz.0.909': attribute type 29 has an invalid length.
[  178.201421][ T9008] netlink: 'syz.0.911': attribute type 9 has an invalid length.
[  178.367932][ T9020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.916'.
[  178.399200][ T9020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.916'.
[  178.410515][ T9020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.916'.
[  178.618849][ T9027] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  178.621226][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  178.836449][ T9031] netlink: 'syz.1.920': attribute type 16 has an invalid length.
[  178.946307][ T9031] netlink: 156 bytes leftover after parsing attributes in process `syz.1.920'.
[  179.857529][ T9055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.083329][ T9062] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.928'.
[  182.327251][ T9130] netlink: 'syz.0.946': attribute type 4 has an invalid length.
[  182.336529][ T9130] __nla_validate_parse: 3 callbacks suppressed
[  182.336546][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'.
[  182.825515][ T9142] netlink: 'syz.1.950': attribute type 2 has an invalid length.
[  185.313226][ T9192] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  185.317971][ T9192] netlink: 7 bytes leftover after parsing attributes in process `syz.0.965'.
[  185.325504][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.965'.
[  185.369444][ T9193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.965'.
[  185.800294][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  186.189725][ T9229] netlink: 7 bytes leftover after parsing attributes in process `syz.2.976'.
[  186.197679][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'.
[  186.208129][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.976'.
[  186.717918][ T9242] netlink: 'syz.1.979': attribute type 3 has an invalid length.
[  186.803468][ T9248] netlink: 'syz.1.979': attribute type 4 has an invalid length.
[  186.808610][ T9248] netlink: 'syz.1.979': attribute type 10 has an invalid length.
[  186.812907][ T9248] vlan0: entered allmulticast mode
[  186.814824][ T9248] veth0_vlan: entered allmulticast mode
[  186.845278][ T9248] team0: Port device vlan0 added
[  187.168693][ T9261] netlink: 10 bytes leftover after parsing attributes in process `syz.2.984'.
[  187.261976][ T9264] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.985'.
[  187.284933][ T9262] delete_channel: no stack
[  188.393582][ T9292] netlink: 830 bytes leftover after parsing attributes in process `syz.2.993'.
[  188.802862][ T9308] netlink: 'syz.2.998': attribute type 1 has an invalid length.
[  190.037884][ T9345] syzkaller0: entered promiscuous mode
[  190.041419][ T9345] syzkaller0: entered allmulticast mode
[  190.851847][ T9354] netlink: 'syz.1.1012': attribute type 2 has an invalid length.
[  190.860343][ T9354] netlink: 'syz.1.1012': attribute type 8 has an invalid length.
[  190.863227][ T9354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1012'.
[  191.079046][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  191.081333][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  191.081454][ T5855] Bluetooth: hci2: command 0x0406 tx timeout
[  192.306006][ T9365] netlink: 'syz.0.1015': attribute type 29 has an invalid length.
[  192.312698][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'.
[  192.327044][ T9365] netlink: 'syz.0.1015': attribute type 29 has an invalid length.
[  192.796554][ T9380] netlink: 'syz.2.1020': attribute type 21 has an invalid length.
[  192.806860][ T9380] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1020'.
[  192.813863][ T9380] netlink: 'syz.2.1020': attribute type 4 has an invalid length.
[  192.817713][ T9380] netlink: 'syz.2.1020': attribute type 3 has an invalid length.
[  192.835629][ T9380] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1020'.
[  194.119459][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.123973][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  196.122058][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'.
[  196.800214][ T9486] netlink: 'syz.2.1047': attribute type 29 has an invalid length.
[  196.804986][ T9486] netlink: 'syz.2.1047': attribute type 29 has an invalid length.
[  197.160898][ T9500] netlink: 996 bytes leftover after parsing attributes in process `syz.2.1051'.
[  197.714135][ T9508] netlink: 'syz.1.1055': attribute type 6 has an invalid length.
[  197.756003][ T9508] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1055'.
[  198.024223][ T9524] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  198.027178][ T9524] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  198.621604][ T9578] netlink: 'syz.1.1070': attribute type 29 has an invalid length.
[  198.642070][ T9586] netlink: 'syz.1.1070': attribute type 29 has an invalid length.
[  198.652017][ T9578] netlink: 'syz.1.1070': attribute type 29 has an invalid length.
[  198.690975][ T9578] netlink: 'syz.1.1070': attribute type 29 has an invalid length.
[  198.950989][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  198.954004][ T9601] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1074'.
[  198.957203][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  198.963705][ T9601] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1074'.
[  198.966876][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  199.485732][ T9603] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1073'.
[  199.489651][ T9603] netlink: 'syz.2.1073': attribute type 10 has an invalid length.
[  199.492617][ T9603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1073'.
[  200.054806][ T9617] netlink: 'syz.2.1079': attribute type 29 has an invalid length.
[  200.058093][ T9615] netlink: 'syz.2.1079': attribute type 29 has an invalid length.
[  202.226710][ T9656] tmpfs: Bad value for 'gid'
[  202.228420][ T9656] tmpfs: Bad value for 'gid'
[  203.104079][ T9663] validate_nla: 1 callbacks suppressed
[  203.104093][ T9663] netlink: 'syz.2.1094': attribute type 21 has an invalid length.
[  203.607131][ T9676] __nla_validate_parse: 5 callbacks suppressed
[  203.607199][ T9676] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1099'.
[  203.734646][ T9684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.886867][ T9696] netlink: 'syz.2.1104': attribute type 29 has an invalid length.
[  203.892151][ T9696] netlink: 'syz.2.1104': attribute type 29 has an invalid length.
[  203.953192][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  204.237314][ T9710] netlink: 'syz.1.1108': attribute type 27 has an invalid length.
[  205.266015][ T9741] netlink: zone id is out of range
[  205.270061][ T9741] netlink: zone id is out of range
[  205.273565][ T9741] netlink: zone id is out of range
[  205.275900][ T9741] netlink: zone id is out of range
[  205.281147][ T9741] netlink: zone id is out of range
[  205.283458][ T9741] netlink: zone id is out of range
[  205.285652][ T9741] netlink: zone id is out of range
[  205.287926][ T9741] netlink: zone id is out of range
[  205.292029][ T9741] netlink: zone id is out of range
[  205.592971][ T9749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1120'.
[  205.597798][ T9749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1120'.
[  205.603487][ T9749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1120'.
[  205.796883][ T9756] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1123'.
[  205.998362][ T9765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1126'.
[  206.094988][ T9769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1128'.
[  206.101026][ T9769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1128'.
[  206.244265][ T9774] netlink: 'syz.2.1129': attribute type 1 has an invalid length.
[  206.248991][ T9774] netlink: 'syz.2.1129': attribute type 2 has an invalid length.
[  206.251464][ T9774] netlink: 'syz.2.1129': attribute type 4 has an invalid length.
[  206.254786][ T9774] netlink: 'syz.2.1129': attribute type 1 has an invalid length.
[  206.257844][ T9774] netlink: 'syz.2.1129': attribute type 2 has an invalid length.
[  206.266849][ T9774] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.1129'.
[  206.276242][ T9774] netlink: 'syz.2.1129': attribute type 1 has an invalid length.
[  208.695391][ T9814] validate_nla: 1 callbacks suppressed
[  208.695448][ T9814] netlink: 'syz.2.1142': attribute type 1 has an invalid length.
[  208.702268][ T9814] netlink: 'syz.2.1142': attribute type 1 has an invalid length.
[  208.794679][ T9816] __nla_validate_parse: 4 callbacks suppressed
[  208.794695][ T9816] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1143'.
[  209.021894][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'.
[  210.485317][ T9845] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1154'.
[  210.618962][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  210.623509][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  210.627497][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  210.637687][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  210.642206][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  210.660565][ T9850] netlink: 'syz.2.1156': attribute type 7 has an invalid length.
[  210.663635][ T9850] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1156'.
[  210.886371][ T9849] chnl_net:caif_netlink_parms(): no params data found
[  211.003426][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.007113][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.012103][ T9849] bridge_slave_0: entered allmulticast mode
[  211.015564][ T9849] bridge_slave_0: entered promiscuous mode
[  211.022697][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.025031][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.027377][ T9849] bridge_slave_1: entered allmulticast mode
[  211.032153][ T9849] bridge_slave_1: entered promiscuous mode
[  211.071820][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.077149][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.107231][ T9849] team0: Port device team_slave_0 added
[  211.111518][ T9849] team0: Port device team_slave_1 added
[  211.142349][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.145526][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.165886][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.172024][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.174739][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.183750][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.344657][ T9849] hsr_slave_0: entered promiscuous mode
[  211.348066][ T9849] hsr_slave_1: entered promiscuous mode
[  211.366312][ T9849] debugfs: 'hsr0' already exists in 'hsr'
[  211.370948][ T9849] Cannot create hsr debugfs directory
[  211.510898][ T9849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  211.517311][ T9849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  211.523636][ T9849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  211.529534][ T9849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  211.671464][ T9876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'.
[  211.894773][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.926747][ T9849] 8021q: adding VLAN 0 to HW filter on device team0
[  211.942282][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.945270][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.961430][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.964412][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.199179][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.260015][ T9849] veth0_vlan: entered promiscuous mode
[  212.267605][ T9849] veth1_vlan: entered promiscuous mode
[  212.311049][ T9849] veth0_macvtap: entered promiscuous mode
[  212.325638][ T9849] veth1_macvtap: entered promiscuous mode
[  212.353440][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.364178][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.375380][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.380373][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.383902][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.387515][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.649814][ T9561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.653103][ T9561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.670372][   T54] Bluetooth: hci3: command tx timeout
[  212.694023][ T9558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.698271][ T9558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.380351][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'.
[  213.385000][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'.
[  213.634743][ T9922] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.1170'.
[  213.638109][ T9922] bridge: RTM_NEWNEIGH with invalid ether address
[  213.656076][ T9922] netlink: 'syz.3.1170': attribute type 10 has an invalid length.
[  213.659658][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.669790][ T9922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.680428][ T9922] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  213.705123][ T9918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1169'.
[  213.755790][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'.
[  214.028317][ T9944] netlink: 'syz.3.1176': attribute type 2 has an invalid length.
[  214.034089][ T9944] netlink: 'syz.3.1176': attribute type 1 has an invalid length.
[  214.037386][ T9944] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1176'.
[  214.043192][ T9944] nbd: must specify at least one socket
[  214.372340][ T9958] netlink: 'syz.2.1180': attribute type 1 has an invalid length.
[  214.375854][ T9958] netlink: 'syz.2.1180': attribute type 1 has an invalid length.
[  214.456397][ T9957] net_ratelimit: 27 callbacks suppressed
[  214.456487][ T9957] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  214.461576][ T9960] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.666531][ T9971] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1183'.
[  214.727658][ T9977] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1183'.
[  214.748942][   T54] Bluetooth: hci3: command tx timeout
[  215.598625][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'.
[  216.828909][   T54] Bluetooth: hci3: command tx timeout
[  217.526115][T10052] netlink: 'syz.3.1205': attribute type 3 has an invalid length.
[  217.557384][T10052] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1205'.
[  217.562718][T10052] netlink: 'syz.3.1205': attribute type 2 has an invalid length.
[  217.565891][T10052] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1205'.
[  217.582802][T10052] netlink: 'syz.3.1205': attribute type 2 has an invalid length.
[  217.585691][T10052] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1205'.
[  217.633649][T10054] netlink: 'syz.3.1206': attribute type 10 has an invalid length.
[  217.636462][T10054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1206'.
[  217.821997][T10060] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  218.116820][T10071] netlink: 'syz.2.1211': attribute type 10 has an invalid length.
[  218.121995][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1211'.
[  218.162538][T10057] infiniband syz!: set active
[  218.164832][T10057] infiniband syz!: added team_slave_0
[  218.222935][T10057] RDS/IB: syz!: added
[  218.225709][T10057] smc: adding ib device syz! with port count 1
[  218.228435][T10057] smc:    ib device syz! port 1 has pnetid 
[  218.908917][   T54] Bluetooth: hci3: command tx timeout
[  219.004219][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'.
[  219.042167][T10075] __nla_validate_parse: 9 callbacks suppressed
[  219.042184][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'.
[  219.049659][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'.
[  220.154632][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  220.158440][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1219'.
[  221.933346][T10115] delete_channel: no stack
[  221.935435][T10115] delete_channel: no stack
[  221.979772][T10116] netlink: 826 bytes leftover after parsing attributes in process `syz.2.1223'.
[  222.342285][T10135] netlink: 'syz.2.1229': attribute type 7 has an invalid length.
[  222.421423][T10140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1230'.
[  222.500003][T10136] netlink: 'syz.3.1227': attribute type 16 has an invalid length.
[  222.504038][T10136] netlink: 'syz.3.1227': attribute type 3 has an invalid length.
[  222.507008][T10136] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1227'.
[  223.354004][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1239'.
[  223.357812][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'.
[  223.370566][T10179] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  223.566339][T10187] xt_socket: unknown flags 0x20
[  223.625689][T10187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1243'.
[  225.123378][T10220] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  225.126502][T10220] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  225.130519][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  225.135913][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  225.142358][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  225.147637][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  225.159913][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  225.258999][T10230] __nla_validate_parse: 1 callbacks suppressed
[  225.259021][T10230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1255'.
[  225.267960][T10230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1255'.
[  225.276787][T10230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1255'.
[  225.583843][T10240] TCP: TCP_TX_DELAY enabled
[  225.705372][T10226] chnl_net:caif_netlink_parms(): no params data found
[  225.744018][T10237] netlink: 'syz.2.1257': attribute type 3 has an invalid length.
[  225.747443][T10237] netlink: 150428 bytes leftover after parsing attributes in process `syz.2.1257'.
[  227.240131][   T54] Bluetooth: hci4: command tx timeout
[  227.416713][T10226] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.420094][T10226] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.423341][T10226] bridge_slave_0: entered allmulticast mode
[  227.427595][T10226] bridge_slave_0: entered promiscuous mode
[  227.433297][T10251] netlink: 12077 bytes leftover after parsing attributes in process `syz.2.1260'.
[  227.438083][T10226] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.441433][T10226] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.444648][T10226] bridge_slave_1: entered allmulticast mode
[  227.450622][T10226] bridge_slave_1: entered promiscuous mode
[  227.464689][T10253] netlink: 12077 bytes leftover after parsing attributes in process `syz.2.1260'.
[  227.534767][T10226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.542047][T10226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.567078][T10258] netlink: 'syz.3.1262': attribute type 7 has an invalid length.
[  227.641735][T10226] team0: Port device team_slave_0 added
[  227.646877][T10226] team0: Port device team_slave_1 added
[  227.701148][T10261] netlink: 'syz.2.1263': attribute type 9 has an invalid length.
[  227.704607][T10261] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.1263'.
[  227.724340][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'.
[  227.892406][T10226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.903590][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.941041][T10226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.963856][T10226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.981805][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.998711][T10226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.155886][T10226] hsr_slave_0: entered promiscuous mode
[  228.162895][T10226] hsr_slave_1: entered promiscuous mode
[  228.166380][T10269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1266'.
[  228.172340][T10226] debugfs: 'hsr0' already exists in 'hsr'
[  228.175519][T10226] Cannot create hsr debugfs directory
[  228.589435][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'.
[  228.604082][T10274] netlink: 'syz.3.1268': attribute type 1 has an invalid length.
[  228.615328][T10226] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.620947][T10226] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.647067][T10226] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.659940][T10226] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  228.791525][T10226] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.846732][T10226] 8021q: adding VLAN 0 to HW filter on device team0
[  228.855801][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.858672][ T9561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.893316][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.896439][ T9561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.322215][   T54] Bluetooth: hci4: command tx timeout
[  230.003534][T10226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.194217][T10226] veth0_vlan: entered promiscuous mode
[  230.210420][T10226] veth1_vlan: entered promiscuous mode
[  230.234964][T10226] veth0_macvtap: entered promiscuous mode
[  230.246332][T10226] veth1_macvtap: entered promiscuous mode
[  230.257307][T10226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.273286][T10226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.296370][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.309443][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.315258][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.320709][T10316] netlink: 'syz.2.1275': attribute type 2 has an invalid length.
[  230.323534][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.388587][T10323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.468668][ T9556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.479250][ T9556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.537822][ T9556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.542420][ T9556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.389027][   T54] Bluetooth: hci4: command tx timeout
[  233.441318][T10377] netlink: 'syz.4.1289': attribute type 29 has an invalid length.
[  233.445118][T10377] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.448581][T10377] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.469054][   T54] Bluetooth: hci4: command tx timeout
[  233.782352][T10389] netlink: 'syz.2.1293': attribute type 10 has an invalid length.
[  234.128887][T10389] geneve0: entered promiscuous mode
[  234.467547][T10389] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  234.606834][T10401] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1297'.
[  234.642732][T10400] netlink: 'syz.3.1296': attribute type 9 has an invalid length.
[  234.651668][T10401] sit0: entered promiscuous mode
[  234.922333][T10409] netlink: 'syz.4.1299': attribute type 30 has an invalid length.
[  235.360774][T10407] netlink: 'syz.2.1298': attribute type 2 has an invalid length.
[  236.937730][T10450] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.941985][T10450] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.405080][T10459] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  237.407671][T10459] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  237.515161][T10470] netlink: 'syz.3.1320': attribute type 10 has an invalid length.
[  237.806704][T10497] openvswitch: netlink: Duplicate or invalid key (type 0).
[  237.812572][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.815441][T10500] openvswitch: netlink: IP tunnel dst address not specified
[  238.577544][T10527] syzkaller0: entered promiscuous mode
[  238.582285][T10527] syzkaller0: entered allmulticast mode
[  239.068702][T10543] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  239.690255][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  239.723902][T10556] sit0: entered promiscuous mode
[  239.813808][T10563] siw: device registration error -23
[  239.944285][T10566] netlink: 'syz.3.1348': attribute type 3 has an invalid length.
[  239.947404][T10566] netlink: 'syz.3.1348': attribute type 2 has an invalid length.
[  239.951727][T10566] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.1348'.
[  240.016205][T10572] netlink: 'syz.3.1350': attribute type 1 has an invalid length.
[  240.257730][T10580] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1352'.
[  240.577328][T10591] netlink: 'syz.2.1357': attribute type 21 has an invalid length.
[  240.580998][T10591] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  241.047405][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'.
[  242.487617][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'.
[  242.491808][T10637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1369'.
[  242.528220][T10639] netlink: 'syz.4.1370': attribute type 1 has an invalid length.
[  242.532929][T10639] netlink: 'syz.4.1370': attribute type 4 has an invalid length.
[  242.536283][T10639] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1370'.
[  242.650620][T10648] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1373'.
[  242.829245][T10660] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1377'.
[  242.835589][T10660] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1377'.
[  242.841035][T10661] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1377'.
[  244.133238][T10720] netlink: 'syz.4.1397': attribute type 1 has an invalid length.
[  244.135657][T10718] netlink: 'syz.4.1397': attribute type 1 has an invalid length.
[  244.136896][T10720] netlink: 'syz.4.1397': attribute type 3 has an invalid length.
[  244.676366][T10759] : entered promiscuous mode
[  244.682877][   T54] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9
[  246.680234][T10828] __nla_validate_parse: 6 callbacks suppressed
[  246.680246][T10828] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1431'.
[  246.788018][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'.
[  246.843176][T10837] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1434'.
[  246.854974][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'.
[  247.038539][T10842] validate_nla: 3 callbacks suppressed
[  247.038556][T10842] netlink: 'syz.2.1435': attribute type 2 has an invalid length.
[  247.426148][T10857] syzkaller0: entered promiscuous mode
[  247.428439][T10857] syzkaller0: entered allmulticast mode
[  247.470488][T10859] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1437'.
[  247.673767][T10863] netlink: 'syz.3.1441': attribute type 7 has an invalid length.
[  247.741953][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1441'.
[  248.240242][T10878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1447'.
[  248.649101][T10891] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  248.654674][T10891] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  248.740435][T10892] xt_time: unknown flags 0xf4
[  249.153845][T10894] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1451'.
[  249.161609][T10897] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1452'.
[  249.254033][   T54] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  249.257735][   T54] Bluetooth: hci4: Unable to find connection for dst 00:00:02:00:00:00 sid 0x00
[  249.314773][T10903] netlink: 'syz.2.1454': attribute type 4 has an invalid length.
[  249.603409][T10922] netlink: 'syz.3.1459': attribute type 1 has an invalid length.
[  249.605892][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'.
[  249.854460][T10941] netlink: 'syz.4.1465': attribute type 28 has an invalid length.
[  249.857958][T10941] netlink: 'syz.4.1465': attribute type 3 has an invalid length.
[  250.730667][T10974] netlink: 'syz.3.1476': attribute type 39 has an invalid length.
[  251.955775][T11004] veth0_vlan: left promiscuous mode
[  251.968523][T11004] veth0_vlan: entered promiscuous mode
[  252.105499][T11015] netlink: 'syz.2.1487': attribute type 21 has an invalid length.
[  252.108620][T11015] __nla_validate_parse: 9 callbacks suppressed
[  252.108634][T11015] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1487'.
[  252.125363][T11013] openvswitch: netlink: Flow actions attr not present in new flow.
[  252.224423][T11017] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1488'.
[  252.969832][T11042] netlink: 'syz.4.1495': attribute type 10 has an invalid length.
[  253.002589][T11044] netlink: 'syz.2.1496': attribute type 1 has an invalid length.
[  253.381200][T11053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1500'.
[  253.775309][T11075] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1507'.
[  253.856956][T11077] siw: device registration error -23
[  253.877202][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'.
[  253.897365][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'.
[  253.944659][T11081] bridge0: entered allmulticast mode
[  253.945339][T11080] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1509'.
[  253.951546][T11081] syz_tun: left allmulticast mode
[  253.951581][T11081] syz_tun: left promiscuous mode
[  253.952519][T11081] bridge0: port 4(syz_tun) entered disabled state
[  253.982531][T11081] bridge0: port 3(team0) entered disabled state
[  253.987160][T11081] bridge_slave_1: left allmulticast mode
[  253.989637][T11081] bridge_slave_1: left promiscuous mode
[  253.991572][T11081] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.996177][T11081] bridge_slave_0: left allmulticast mode
[  253.998417][T11081] bridge_slave_0: left promiscuous mode
[  254.005371][T11081] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.011985][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1509'.
[  254.137429][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1510'.
[  254.146939][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1510'.
[  254.261630][T11087] netlink: 'syz.4.1510': attribute type 21 has an invalid length.
[  254.265504][T11087] netlink: 'syz.4.1510': attribute type 4 has an invalid length.
[  254.268360][T11087] netlink: 'syz.4.1510': attribute type 5 has an invalid length.
[  254.470631][   T54] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8
[  255.008282][T11113] netlink: 'syz.3.1518': attribute type 13 has an invalid length.
[  255.016162][T11113] netlink: 'syz.3.1518': attribute type 17 has an invalid length.
[  255.044414][T11113] sit0: left promiscuous mode
[  255.131530][T11113] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.134804][T11113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.138304][T11113] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.141918][T11113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.168154][T11113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.553736][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.555853][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.542649][T11155] netlink: 'syz.2.1532': attribute type 10 has an invalid length.
[  256.553609][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.558408][T11155] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  257.175612][T11181] netlink: 'syz.3.1539': attribute type 1 has an invalid length.
[  257.179165][T11181] __nla_validate_parse: 8 callbacks suppressed
[  257.179177][T11181] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1539'.
[  257.274186][T11185] netlink: 'syz.4.1541': attribute type 15 has an invalid length.
[  257.277387][T11185] netlink: 'syz.4.1541': attribute type 7 has an invalid length.
[  257.283761][T11185] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1541'.
[  258.098248][T11191] netlink: 'syz.3.1543': attribute type 29 has an invalid length.
[  258.106313][T11191] netlink: 'syz.3.1543': attribute type 29 has an invalid length.
[  258.912206][T11196] netlink: 61 bytes leftover after parsing attributes in process `syz.4.1545'.
[  259.068981][T11206] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1549'.
[  259.074209][T11206] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1549'.
[  259.078604][T11206] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1549'.
[  259.334040][T11215] netlink: 'syz.4.1552': attribute type 1 has an invalid length.
[  259.344595][T11215] netlink: 'syz.4.1552': attribute type 3 has an invalid length.
[  259.347744][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1552'.
[  259.439040][T11220] syzkaller0: entered promiscuous mode
[  259.440834][T11220] syzkaller0: entered allmulticast mode
[  260.652693][T11237] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  260.657467][T11237] netlink: 2451 bytes leftover after parsing attributes in process `syz.2.1559'.
[  261.081209][T11246] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1561'.
[  261.602362][T11265] netlink: 'syz.4.1568': attribute type 41 has an invalid length.
[  261.605310][T11265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1568'.
[  262.453620][T11309] __nla_validate_parse: 1 callbacks suppressed
[  262.453643][T11309] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1582'.
[  262.454304][T11311] netlink: 'syz.2.1583': attribute type 10 has an invalid length.
[  262.470682][T11309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1582'.
[  263.110644][T11334] netlink: 'syz.4.1590': attribute type 3 has an invalid length.
[  263.114700][T11334] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1590'.
[  263.413964][T11344] netlink: 'syz.2.1592': attribute type 8 has an invalid length.
[  263.422021][T11344] netlink: 'syz.2.1592': attribute type 6 has an invalid length.
[  263.425386][T11344] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1592'.
[  263.846055][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'.
[  263.946170][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'.
[  264.162598][T11355] syzkaller0: entered promiscuous mode
[  264.165132][T11355] syzkaller0: entered allmulticast mode
[  264.174304][T11355] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1597'.
[  265.440155][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'.
[  265.466266][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'.
[  265.489412][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'.
[  265.905207][T11386] netlink: 'syz.2.1606': attribute type 6 has an invalid length.
[  265.907547][T11386] netlink: 'syz.2.1606': attribute type 5 has an invalid length.
[  266.677252][T11415] netlink: 'syz.3.1614': attribute type 39 has an invalid length.
[  267.493776][T11422] netlink: 'syz.3.1616': attribute type 7 has an invalid length.
[  267.567819][T11434] __nla_validate_parse: 4 callbacks suppressed
[  267.567860][T11434] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1620'.
[  268.193178][T11444] netlink: 'syz.2.1623': attribute type 13 has an invalid length.
[  268.197059][T11444] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1623'.
[  268.202775][T11444] syz_tun: refused to change device tx_queue_len
[  269.118706][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1631'.
[  269.210636][T11480] netlink: 'syz.4.1633': attribute type 10 has an invalid length.
[  269.213792][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1633'.
[  269.223866][T11480] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  269.227909][T11480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  269.464384][T11493] netlink: 'syz.3.1637': attribute type 10 has an invalid length.
[  269.467551][T11493] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.470235][T11493] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.476609][T11493] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.479058][T11493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.481849][T11493] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.484388][T11493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.492446][T11493] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  270.347217][T11505] netlink: 'syz.3.1641': attribute type 1 has an invalid length.
[  270.354375][T11505] netlink: 'syz.3.1641': attribute type 1 has an invalid length.
[  270.365427][T11505] netlink: 'syz.3.1641': attribute type 1 has an invalid length.
[  270.370668][T11505] netlink: 'syz.3.1641': attribute type 1 has an invalid length.
[  270.374048][T11505] netlink: 'syz.3.1641': attribute type 2 has an invalid length.
[  270.377853][T11505] netlink: 'syz.3.1641': attribute type 1 has an invalid length.
[  271.639363][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'.
[  272.070734][T11583] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1664'.
[  272.076653][T11583] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1664'.
[  272.814322][T11593] syzkaller0: entered promiscuous mode
[  272.816405][T11593] syzkaller0: entered allmulticast mode
[  272.975615][T11597] openvswitch: netlink: Unknown key attributes 1
[  274.284122][T11610] validate_nla: 3 callbacks suppressed
[  274.284138][T11610] netlink: 'syz.2.1672': attribute type 39 has an invalid length.
[  275.133409][T11624] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1676'.
[  275.453183][T11644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  275.978496][T11656] delete_channel: no stack
[  276.306566][T11656] delete_channel: no stack
[  276.482791][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1694'.
[  276.564490][T11687] netlink: 'syz.3.1695': attribute type 10 has an invalid length.
[  276.567527][T11687] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.570294][T11687] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.619430][T11687] bond0: (slave bridge0): Releasing backup interface
[  276.742792][T11695] netlink: 'syz.4.1696': attribute type 10 has an invalid length.
[  276.782536][T11695] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  277.375220][T11711] netlink: 'syz.2.1700': attribute type 33 has an invalid length.
[  277.378574][T11711] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1700'.
[  278.056850][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'.
[  278.065718][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'.
[  278.472670][T11741] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1710'.
[  278.483844][T11741] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1710'.
[  278.693223][T11748] netlink: 'syz.3.1711': attribute type 1 has an invalid length.
[  278.697948][T11748] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1711'.
[  279.376430][T11763] netlink: 'syz.2.1717': attribute type 1 has an invalid length.
[  279.399428][T11763] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1717'.
[  280.673769][T11777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1722'.
[  280.680659][T11778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1722'.
[  280.959462][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'.
[  280.980802][T11781] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1723'.
[  281.004478][T11783] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1725'.
[  282.277213][T11811] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1733'.
[  282.304706][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'.
[  282.425213][T11817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1735'.
[  283.829765][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1742'.
[  283.833747][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1742'.
[  283.990441][T11859] netlink: 'syz.4.1747': attribute type 10 has an invalid length.
[  284.085578][   T54] Bluetooth: hci4: ISO packet for unknown connection handle 62
[  287.561441][T11891] netlink: 'syz.2.1755': attribute type 21 has an invalid length.
[  287.564730][T11891] __nla_validate_parse: 1 callbacks suppressed
[  287.564745][T11891] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1755'.
[  287.602810][T11883] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1754'.
[  287.811685][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1758'.
[  287.815548][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1758'.
[  287.819384][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1758'.
[  287.950339][T11905] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'.
[  287.958403][T11905] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'.
[  288.021049][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'.
[  288.025576][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'.
[  288.972464][T11923] netlink: 'syz.4.1764': attribute type 16 has an invalid length.
[  288.975713][T11923] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1764'.
[  288.983517][T11923] sit0: entered allmulticast mode
[  289.009494][T11923] sit0: entered promiscuous mode
[  291.874529][T11992] netlink: 'syz.4.1781': attribute type 19 has an invalid length.
[  291.899964][T11988] : left promiscuous mode
[  292.601954][T12005] netlink: 'syz.3.1787': attribute type 64 has an invalid length.
[  292.605791][T12005] netlink: 'syz.3.1787': attribute type 64 has an invalid length.
[  292.615731][T12005] netlink: 'syz.3.1787': attribute type 64 has an invalid length.
[  294.560759][T12041] netlink: 'syz.4.1797': attribute type 1 has an invalid length.
[  294.567367][T12042] __nla_validate_parse: 3 callbacks suppressed
[  294.567379][T12042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1796'.
[  294.573536][T12039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1796'.
[  294.583328][T12042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1796'.
[  294.635086][T12048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1799'.
[  294.694333][T12054] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1801'.
[  294.785716][T12065] netlink: 'syz.4.1803': attribute type 10 has an invalid length.
[  294.793756][T12065] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.796657][T12065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.799864][T12065] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.802997][T12065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.810040][T12067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1804'.
[  294.811636][T12065] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  294.817810][T12067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1804'.
[  294.822182][T12067] openvswitch: netlink: Missing key (keys=40, expected=100)
[  295.173683][T12088] netlink: 'syz.3.1812': attribute type 10 has an invalid length.
[  295.179275][T12088] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.182403][T12088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.186010][T12088] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.189300][T12088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.199766][T12088] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  295.603319][T12108] netlink: 'syz.3.1817': attribute type 27 has an invalid length.
[  295.607080][T12108] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1817'.
[  295.613488][T12108] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  295.896636][T12117] netlink: 'syz.3.1820': attribute type 10 has an invalid length.
[  295.904883][T12117] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.908152][T12117] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.168428][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'.
[  296.177334][T12136] netlink: 'syz.3.1827': attribute type 2 has an invalid length.
[  296.185675][T12139] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1828'.
[  296.216543][T12146] netlink: 'syz.4.1829': attribute type 10 has an invalid length.
[  296.223403][T12146] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.226699][T12146] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.597884][T12222] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  297.696851][T12227] netlink: 'syz.4.1854': attribute type 21 has an invalid length.
[  297.708627][T12227] netlink: 'syz.4.1854': attribute type 1 has an invalid length.
[  297.918057][T12231] netlink: 'syz.2.1855': attribute type 3 has an invalid length.
[  298.319194][T12231] netlink: 'syz.2.1855': attribute type 10 has an invalid length.
[  298.824273][T12257] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  298.829876][T12259] netlink: 'syz.4.1862': attribute type 10 has an invalid length.
[  298.863323][T12262] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  298.879119][T12262] netlink: 'syz.2.1864': attribute type 10 has an invalid length.
[  298.882430][T12262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.897910][T12262] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.910093][T12262] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  299.019664][T12271] netlink: 'syz.2.1866': attribute type 25 has an invalid length.
[  299.132998][T12277] syzkaller0: entered promiscuous mode
[  299.134906][T12277] syzkaller0: entered allmulticast mode
[  299.179725][T12278] netlink: 'syz.4.1868': attribute type 10 has an invalid length.
[  299.218647][T12280] netlink: 'syz.2.1869': attribute type 10 has an invalid length.
[  299.303095][T12278] 8021q: adding VLAN 0 to HW filter on device team0
[  299.445812][T12286] netlink: 'syz.3.1870': attribute type 21 has an invalid length.
[  299.662082][T12278] bond0: (slave team0): Enslaving as an active interface with an up link
[  300.479738][T12291] __nla_validate_parse: 6 callbacks suppressed
[  300.479752][T12291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1872'.
[  300.540380][T12291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.965171][T12307] bond0: (slave bridge0): Releasing backup interface
[  301.347922][T12321] syzkaller0: entered promiscuous mode
[  303.262057][T12363] validate_nla: 5 callbacks suppressed
[  303.262068][T12363] netlink: 'syz.2.1891': attribute type 10 has an invalid length.
[  303.324996][T12365] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1893'.
[  303.733377][T12385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1901'.
[  303.999204][T12399] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1904'.
[  304.396184][T12408] syzkaller0: entered promiscuous mode
[  304.402508][T12408] syzkaller0: entered allmulticast mode
[  307.149770][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1928'.
[  307.154746][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1928'.
[  308.203764][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.206532][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.224564][T12512] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1937'.
[  308.227650][T12512] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  308.230959][T12512] openvswitch: netlink: Message has 2 unknown bytes.
[  308.242521][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.252760][T12508] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  308.270403][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.273933][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.277025][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.284737][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.293613][T12508] wlan1 speed is unknown, defaulting to 1000
[  308.379761][T12520] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  308.818025][T12540] netlink: 'syz.2.1945': attribute type 29 has an invalid length.
[  309.683502][T12551] netlink: 'syz.3.1948': attribute type 21 has an invalid length.
[  309.693846][T12551] netlink: 'syz.3.1948': attribute type 6 has an invalid length.
[  309.698410][T12551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1948'.
[  309.798101][T12564] netlink: 'syz.2.1952': attribute type 10 has an invalid length.
[  309.873365][T12567] netlink: 'syz.4.1954': attribute type 10 has an invalid length.
[  309.896117][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'.
[  309.933318][T12570] netlink: 'syz.2.1953': attribute type 2 has an invalid length.
[  310.260596][T12575] syzkaller0: entered promiscuous mode
[  310.262292][T12575] syzkaller0: entered allmulticast mode
[  310.316464][T12575] netlink: 'syz.2.1956': attribute type 39 has an invalid length.
[  310.349730][T12573] netlink: 'syz.4.1955': attribute type 41 has an invalid length.
[  310.564282][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1958'.
[  312.072147][T12590] netlink: 'syz.3.1960': attribute type 10 has an invalid length.
[  312.096273][T12590] bond0: (slave bridge0): Releasing backup interface
[  312.347586][T12612] netlink: 'syz.4.1966': attribute type 27 has an invalid length.
[  313.619930][T12640] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1975'.
[  314.148160][T12668] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1981'.
[  314.274854][T12664] wlan1 speed is unknown, defaulting to 1000
[  314.434289][T12685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1986'.
[  314.440294][T12685] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1986'.
[  314.450151][T12685] validate_nla: 2 callbacks suppressed
[  314.450166][T12685] netlink: 'syz.3.1986': attribute type 5 has an invalid length.
[  314.465225][T12685] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1986'.
[  314.518455][T12686] netlink: 'syz.2.1984': attribute type 4 has an invalid length.
[  315.573855][T12714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1995'.
[  315.843772][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'.
[  316.995558][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.998348][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.035160][T12729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2000'.
[  317.248915][T12731] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1999'.
[  319.484270][   T54] Bluetooth: hci4: adv larger than maximum supported
[  319.537753][T12796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2015'.
[  319.552126][T12796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'.
[  319.552703][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'.
[  319.567900][T12796] netlink: 'syz.3.2015': attribute type 6 has an invalid length.
[  319.803368][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'.
[  320.152828][T12824] netlink: 'syz.3.2024': attribute type 10 has an invalid length.
[  320.197930][T12826] netlink: 'syz.3.2025': attribute type 10 has an invalid length.
[  320.242568][T12826] geneve0: entered promiscuous mode
[  320.266591][T12826] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  320.295764][T12829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2026'.
[  320.305408][T12829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2026'.
[  320.313526][T12829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2026'.
[  320.318420][T12830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2026'.
[  320.391711][T12834] IPv6: NLM_F_CREATE should be specified when creating new route
[  320.396739][T12834] netlink: 'syz.3.2027': attribute type 5 has an invalid length.
[  320.496312][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'.
[  320.574348][T12849] netlink: 'syz.4.2032': attribute type 10 has an invalid length.
[  320.686008][T12854] netlink: 'syz.4.2033': attribute type 2 has an invalid length.
[  320.757282][T12859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2035'.
[  320.762073][T12859] netlink: 'syz.4.2035': attribute type 4 has an invalid length.
[  320.913305][T12866] xt_socket: unknown flags 0x40
[  322.873299][T12915] syzkaller0: entered promiscuous mode
[  322.875967][T12915] syzkaller0: entered allmulticast mode
[  322.896649][T12919] netlink: 'syz.3.2052': attribute type 2 has an invalid length.
[  322.932131][T12919] netlink: 'syz.3.2052': attribute type 2 has an invalid length.
[  323.184736][T12937] netlink: 'syz.4.2057': attribute type 1 has an invalid length.
[  323.616073][T12949] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  325.161516][T12983] __nla_validate_parse: 12 callbacks suppressed
[  325.161616][T12983] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2071'.
[  325.912377][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'.
[  326.180515][T13035] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2089'.
[  326.441286][T13047] validate_nla: 1 callbacks suppressed
[  326.441301][T13047] netlink: 'syz.4.2091': attribute type 29 has an invalid length.
[  326.461294][T13047] netlink: 'syz.4.2091': attribute type 29 has an invalid length.
[  326.474406][T13047] netlink: 'syz.4.2091': attribute type 29 has an invalid length.
[  327.289687][T13056] netlink: 'syz.2.2094': attribute type 4 has an invalid length.
[  332.931965][T13086] wlan1 speed is unknown, defaulting to 1000
[  333.052098][T13093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2102'.
[  333.065461][T13093] netlink: 'syz.2.2102': attribute type 6 has an invalid length.
[  333.983738][T13118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2110'.
[  334.119682][ T5858] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5
[  334.196310][T13129] netlink: 'syz.2.2115': attribute type 9 has an invalid length.
[  334.210677][T13129] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2115'.
[  334.222367][T13128] netlink: 'syz.2.2115': attribute type 9 has an invalid length.
[  334.225178][T13128] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2115'.
[  334.232533][T13143] netlink: 'syz.3.2118': attribute type 10 has an invalid length.
[  334.414322][T13153] netlink: 'syz.4.2123': attribute type 10 has an invalid length.
[  334.440943][ T5858] Bluetooth: hci3: command 0x0406 tx timeout
[  334.531633][T13153] team0: Port device geneve1 added
[  334.547938][T13163] netlink: 'syz.2.2126': attribute type 3 has an invalid length.
[  334.552398][T13163] netlink: 'syz.2.2126': attribute type 1 has an invalid length.
[  334.555197][T13163] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2126'.
[  334.558383][T13165] netlink: 'syz.3.2127': attribute type 10 has an invalid length.
[  334.794252][T13183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2133'.
[  334.864627][T13187] netlink: 'syz.2.2135': attribute type 10 has an invalid length.
[  334.902272][T13187] batman_adv: batadv0: Adding interface: netdevsim0
[  334.905160][T13187] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.922645][T13187] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  335.227357][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2138'.
[  335.314426][T13203] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2139'.
[  335.320492][T13203] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2139'.
[  335.333849][T13203] IPv6: NLM_F_REPLACE set, but no existing node found!
[  335.340350][T13203] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2139'.
[  335.389908][T13213] netlink: 'syz.3.2142': attribute type 1 has an invalid length.
[  335.529247][T13222] veth0_vlan: entered allmulticast mode
[  335.634598][T13222] veth0_vlan: left promiscuous mode
[  335.646286][T13222] veth0_vlan: entered promiscuous mode
[  335.738628][T13226] IPv6: NLM_F_CREATE should be specified when creating new route
[  337.083675][T13272] wlan1 speed is unknown, defaulting to 1000
[  338.526765][T13339] validate_nla: 2 callbacks suppressed
[  338.526777][T13339] netlink: 'syz.2.2181': attribute type 10 has an invalid length.
[  339.320229][T13363] bridge0: entered allmulticast mode
[  339.325752][T13365] netlink: 'syz.3.2190': attribute type 10 has an invalid length.
[  339.384293][T13363] bridge_slave_1: left allmulticast mode
[  339.386665][T13363] bridge_slave_1: left promiscuous mode
[  339.419117][T13363] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.908363][T13363] bridge_slave_0: left allmulticast mode
[  339.922936][T13363] bridge_slave_0: left promiscuous mode
[  339.940498][T13363] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.087122][T13377] netlink: 'syz.2.2192': attribute type 6 has an invalid length.
[  340.095233][T13377] netlink: 'syz.2.2192': attribute type 3 has an invalid length.
[  340.107128][T13377] __nla_validate_parse: 3 callbacks suppressed
[  340.107145][T13377] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2192'.
[  340.594255][T13395] netlink: 'syz.2.2197': attribute type 12 has an invalid length.
[  340.596937][T13395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2197'.
[  340.679248][T13398] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2198'.
[  340.819374][T13404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2199'.
[  340.938037][T13404] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2199'.
[  341.144079][T13438] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2204'.
[  341.221967][T13450] netlink: 211576 bytes leftover after parsing attributes in process `syz.3.2206'.
[  341.252806][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2207'.
[  342.228414][T13498] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2214'.
[  343.050152][T13514] openvswitch: netlink: Flow actions attr not present in new flow.
[  344.295561][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2227'.
[  344.327228][T13552] netlink: 'syz.4.2226': attribute type 39 has an invalid length.
[  344.426250][T13538] wlan1 speed is unknown, defaulting to 1000
[  344.431536][T13552] veth0_macvtap: left promiscuous mode
[  347.328210][T13592] __nla_validate_parse: 2 callbacks suppressed
[  347.328227][T13592] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2235'.
[  349.463841][T13615] netlink: 'syz.4.2241': attribute type 1 has an invalid length.
[  349.467681][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2241'.
[  349.622421][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2245'.
[  349.626225][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2245'.
[  349.631783][T13627] netlink: 'syz.3.2245': attribute type 4 has an invalid length.
[  349.790992][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  349.808462][T13634] netlink: 495 bytes leftover after parsing attributes in process `syz.3.2247'.
[  350.627785][T13643] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  350.632645][T13643] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  350.666141][T13648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2251'.
[  350.805559][T13654] netlink: 'syz.2.2254': attribute type 10 has an invalid length.
[  350.818681][T13656] netlink: 'syz.3.2255': attribute type 7 has an invalid length.
[  351.028022][T13667] openvswitch: netlink: Flow actions attr not present in new flow.
[  351.195610][T13676] netlink: 'syz.2.2263': attribute type 10 has an invalid length.
[  351.394978][T13694] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  351.629600][T13710] netlink: 'syz.4.2274': attribute type 10 has an invalid length.
[  351.632806][T13710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2274'.
[  351.646480][T13710] team0: Port device geneve0 added
[  351.655647][T13710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2274'.
[  351.767788][T13713] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2275'.
[  351.876157][T13715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2276'.
[  352.231771][T13721] veth1_macvtap: left promiscuous mode
[  352.234152][T13721] macsec0: entered promiscuous mode
[  352.920521][T13758] delete_channel: no stack
[  353.022046][T13766] netlink: 'syz.3.2291': attribute type 1 has an invalid length.
[  353.024726][T13766] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2291'.
[  353.181905][T13764] netlink: 5447 bytes leftover after parsing attributes in process `syz.4.2290'.
[  353.319512][T13782] netlink: 'syz.2.2294': attribute type 7 has an invalid length.
[  353.925943][T13793] wlan1 speed is unknown, defaulting to 1000
[  354.229316][T13807] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2304'.
[  354.236368][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  354.688416][T13821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2308'.
[  355.085092][T13830] netlink: 'syz.3.2311': attribute type 10 has an invalid length.
[  355.088419][T13830] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.090855][T13830] bridge0: port 2(bridge_slave_1) entered listening state
[  355.093688][T13830] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.096217][T13830] bridge0: port 1(bridge_slave_0) entered listening state
[  355.119330][T13830] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  355.142413][T13832] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2312'.
[  355.205223][T13836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2314'.
[  355.271674][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2315'.
[  355.280987][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2315'.
[  355.284398][T13839] netlink: 'syz.3.2315': attribute type 4 has an invalid length.
[  355.515341][T13837] wlan1 speed is unknown, defaulting to 1000
[  355.655044][T13849] netlink: 'syz.3.2317': attribute type 10 has an invalid length.
[  355.658521][T13849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2317'.
[  355.668396][T13849] vcan0: entered promiscuous mode
[  355.672395][T13849] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  355.998691][T13856] syzkaller0: entered promiscuous mode
[  356.104710][T13858] netlink: 'syz.2.2320': attribute type 10 has an invalid length.
[  358.288671][T13881] wlan1 speed is unknown, defaulting to 1000
[  358.416478][T13895] __nla_validate_parse: 1 callbacks suppressed
[  358.416495][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'.
[  358.430386][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'.
[  358.434461][T13895] netlink: 'syz.3.2328': attribute type 4 has an invalid length.
[  359.310799][T13898] netlink: 'syz.3.2329': attribute type 10 has an invalid length.
[  359.376118][T13898] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.379491][T13898] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.641147][T13900] veth1_macvtap: left promiscuous mode
[  359.651418][T13900] macsec0: entered promiscuous mode
[  360.035236][T13916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2334'.
[  360.039420][T13916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2334'.
[  360.044579][T13916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2334'.
[  360.063642][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'.
[  360.067326][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'.
[  360.072850][T13918] netlink: 'syz.4.2335': attribute type 4 has an invalid length.
[  360.393511][T13924] netlink: 'syz.4.2337': attribute type 10 has an invalid length.
[  361.224583][T13940] : port 1(vlan0) entered blocking state
[  361.233198][T13940] : port 1(vlan0) entered disabled state
[  361.238285][T13940] vlan0: entered allmulticast mode
[  361.248424][T13940] vlan0: entered promiscuous mode
[  361.257990][T13941] : port 1(vlan0) entered blocking state
[  361.260591][T13941] : port 1(vlan0) entered forwarding state
[  361.275299][T13947] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2342'.
[  361.426335][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2346'.
[  361.434347][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2346'.
[  361.442104][T13958] netlink: 'syz.4.2346': attribute type 4 has an invalid length.
[  361.892854][T13981] netlink: 'syz.2.2353': attribute type 29 has an invalid length.
[  361.897774][T13981] netlink: 'syz.2.2353': attribute type 29 has an invalid length.
[  361.948003][T13984] netlink: 'syz.2.2354': attribute type 10 has an invalid length.
[  361.961582][T13982] netlink: 'syz.3.2351': attribute type 39 has an invalid length.
[  362.178178][T13986] netlink: 'syz.2.2355': attribute type 4 has an invalid length.
[  363.709327][   T34] INFO: task syz.1.1146:9824 blocked for more than 143 seconds.
[  363.713660][   T34]       Not tainted syzkaller #0
[  363.715764][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  363.721630][   T34] task:syz.1.1146      state:D stack:25744 pid:9824  tgid:9823  ppid:5853   task_flags:0x400140 flags:0x00004004
[  363.725488][   T34] Call Trace:
[  363.726913][   T34]  <TASK>
[  363.728216][   T34]  __schedule+0x1798/0x4cc0
[  363.730369][   T34]  ? __lock_acquire+0xab9/0xd20
[  363.732417][   T34]  ? __pfx___schedule+0x10/0x10
[  363.734385][   T34]  ? schedule+0x91/0x360
[  363.736101][   T34]  schedule+0x165/0x360
[  363.737729][   T34]  schedule_preempt_disabled+0x13/0x30
[  363.739970][   T34]  __mutex_lock+0x7e6/0x1350
[  363.741672][   T34]  ? __mutex_lock+0x5bb/0x1350
[  363.743240][   T34]  ? nfsd_nl_threads_set_doit+0x2cb/0x960
[  363.745087][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  363.746785][   T34]  ? net_generic+0x1e/0x240
[  363.748407][   T34]  ? net_generic+0x1e/0x240
[  363.750727][   T34]  ? net_generic+0x1e/0x240
[  363.752470][   T34]  ? net_generic+0x1e/0x240
[  363.754319][   T34]  nfsd_nl_threads_set_doit+0x2cb/0x960
[  363.756422][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  363.758538][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  363.761165][   T34]  ? bpf_lsm_capable+0x9/0x20
[  363.762874][   T34]  ? security_capable+0x7e/0x2e0
[  363.764568][   T34]  genl_rcv_msg+0x60e/0x790
[  363.766249][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  363.767922][   T34]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  363.770348][   T34]  ? perf_trace_lock_acquire+0xf5/0x410
[  363.772412][   T34]  netlink_rcv_skb+0x208/0x470
[  363.774329][   T34]  ? __lock_acquire+0xab9/0xd20
[  363.776255][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  363.778016][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  363.781069][   T34]  ? down_read+0x1ad/0x2e0
[  363.782661][   T34]  genl_rcv+0x28/0x40
[  363.783923][   T34]  netlink_unicast+0x82f/0x9e0
[  363.785699][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  363.787508][   T34]  ? netlink_sendmsg+0x642/0xb30
[  363.789297][   T34]  ? skb_put+0x11b/0x210
[  363.790693][   T34]  netlink_sendmsg+0x805/0xb30
[  363.792483][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.794317][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  363.796049][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  363.797840][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.799694][   T34]  __sock_sendmsg+0x21c/0x270
[  363.801405][   T34]  ____sys_sendmsg+0x505/0x830
[  363.803212][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  363.805148][   T34]  ? import_iovec+0x74/0xa0
[  363.806665][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  363.808406][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  363.810350][   T34]  ? __fget_files+0x2a/0x420
[  363.812039][   T34]  ? __fget_files+0x3a0/0x420
[  363.813891][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  363.815751][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  363.817734][   T34]  ? rcu_is_watching+0x15/0xb0
[  363.819697][   T34]  ? do_syscall_64+0xbe/0x3b0
[  363.821463][   T34]  do_syscall_64+0xfa/0x3b0
[  363.823072][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.824886][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.827270][   T34]  ? exc_page_fault+0x9f/0xf0
[  363.829106][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.831104][   T34] RIP: 0033:0x7f71bcd8eba9
[  363.832690][   T34] RSP: 002b:00007f71bdb4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.835696][   T34] RAX: ffffffffffffffda RBX: 00007f71bcfd5fa0 RCX: 00007f71bcd8eba9
[  363.838516][   T34] RDX: 0000000004000000 RSI: 0000200000000780 RDI: 0000000000000006
[  363.841503][   T34] RBP: 00007f71bce11e19 R08: 0000000000000000 R09: 0000000000000000
[  363.844295][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.846963][   T34] R13: 00007f71bcfd6038 R14: 00007f71bcfd5fa0 R15: 00007ffd9eb50668
[  363.849862][   T34]  </TASK>
[  363.851131][   T34] 
[  363.851131][   T34] Showing all locks held in the system:
[  363.853836][   T34] 1 lock held by rcu_tasks_trace/31:
[  363.855671][   T34]  #0: ffffffff8e13ae50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  363.859883][   T34] 1 lock held by khungtaskd/34:
[  363.861485][   T34]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  363.864777][   T34] 2 locks held by getty/5672:
[  363.866458][   T34]  #0: ffff88810b9f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  363.869693][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  363.873015][   T34] 2 locks held by syz.0.1031/9424:
[  363.874716][   T34]  #0: ffffffff8f59f9b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  363.877474][   T34]  #1: ffffffff8e418c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  363.881026][   T34] 2 locks held by syz.1.1146/9824:
[  363.882733][   T34]  #0: ffffffff8f59f9b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  363.885600][   T34]  #1: ffffffff8e418c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  363.889973][   T34] 1 lock held by syz.3.2351/13972:
[  363.891666][   T34]  #0: ffffffff8e19d6c8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  363.894888][   T34] 1 lock held by syz.2.2356/13991:
[  363.896622][   T34]  #0: ffffffff8e19d6c8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  363.900038][   T34] 1 lock held by syz.4.2357/13994:
[  363.901789][   T34]  #0: ffffffff8e19d6c8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  363.907059][   T34] 
[  363.907941][   T34] =============================================
[  363.907941][   T34] 
[  363.911691][   T34] NMI backtrace for cpu 0
[  363.911723][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  363.911737][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.911745][   T34] Call Trace:
[  363.911752][   T34]  <TASK>
[  363.911759][   T34]  dump_stack_lvl+0x189/0x250
[  363.911782][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.911830][   T34]  ? __pfx__printk+0x10/0x10
[  363.911860][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  363.911892][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  363.911929][   T34]  ? __pfx__printk+0x10/0x10
[  363.911945][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  363.911960][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  363.911980][   T34]  watchdog+0xf93/0xfe0
[  363.912003][   T34]  ? watchdog+0x1de/0xfe0
[  363.912029][   T34]  kthread+0x711/0x8a0
[  363.912050][   T34]  ? __pfx_watchdog+0x10/0x10
[  363.912066][   T34]  ? __pfx_kthread+0x10/0x10
[  363.912086][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  363.912100][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.912114][   T34]  ? __pfx_kthread+0x10/0x10
[  363.912132][   T34]  ret_from_fork+0x439/0x7d0
[  363.912149][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  363.912171][   T34]  ? __switch_to_asm+0x39/0x70
[  363.912186][   T34]  ? __switch_to_asm+0x33/0x70
[  363.912202][   T34]  ? __pfx_kthread+0x10/0x10
[  363.912221][   T34]  ret_from_fork_asm+0x1a/0x30
[  363.912247][   T34]  </TASK>
[  363.912251][   T34] Sending NMI from CPU 0 to CPUs 1:
[  363.967410][    C1] NMI backtrace for cpu 1
[  363.967445][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  363.967454][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.967460][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  363.967475][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  363.967485][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  363.967497][    C1] RAX: 0620b5355ecd3900 RBX: ffffffff819695f8 RCX: 0620b5355ecd3900
[  363.967504][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba1cf RDI: ffffffff8be33e80
[  363.967510][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  363.967516][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa3a930
[  363.967522][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  363.967528][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  363.967536][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.967542][    C1] CR2: 000055c8a6da77e8 CR3: 000000010f39a000 CR4: 00000000000006f0
[  363.967572][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  363.967580][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  363.967586][    C1] Call Trace:
[  363.967595][    C1]  <TASK>
[  363.967601][    C1]  default_idle+0x13/0x20
[  363.967613][    C1]  default_idle_call+0x74/0xb0
[  363.967627][    C1]  do_idle+0x1e8/0x510
[  363.967642][    C1]  ? __pfx_do_idle+0x10/0x10
[  363.967650][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.967667][    C1]  cpu_startup_entry+0x44/0x60
[  363.967676][    C1]  start_secondary+0x101/0x110
[  363.967692][    C1]  common_startup_64+0x13e/0x147
[  363.967712][    C1]  </TASK>
[  363.968390][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  364.041616][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  364.045090][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.049113][   T34] Call Trace:
[  364.050458][   T34]  <TASK>
[  364.051670][   T34]  dump_stack_lvl+0x99/0x250
[  364.053522][   T34]  ? __asan_memcpy+0x40/0x70
[  364.055291][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.057304][   T34]  ? __pfx__printk+0x10/0x10
[  364.059139][   T34]  vpanic+0x281/0x750
[  364.060758][   T34]  ? __pfx_vpanic+0x10/0x10
[  364.062568][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  364.064688][   T34]  ? preempt_schedule+0xae/0xc0
[  364.066616][   T34]  ? preempt_schedule_common+0x83/0xd0
[  364.068655][   T34]  panic+0xb9/0xc0
[  364.069991][   T34]  ? __pfx_panic+0x10/0x10
[  364.071810][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  364.073991][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  364.076352][   T34]  watchdog+0xfd2/0xfe0
[  364.077984][   T34]  ? watchdog+0x1de/0xfe0
[  364.079722][   T34]  kthread+0x711/0x8a0
[  364.081286][   T34]  ? __pfx_watchdog+0x10/0x10
[  364.082742][   T34]  ? __pfx_kthread+0x10/0x10
[  364.084183][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.085929][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.087817][   T34]  ? __pfx_kthread+0x10/0x10
[  364.089559][   T34]  ret_from_fork+0x439/0x7d0
[  364.091445][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  364.093288][   T34]  ? __switch_to_asm+0x39/0x70
[  364.095102][   T34]  ? __switch_to_asm+0x33/0x70
[  364.096942][   T34]  ? __pfx_kthread+0x10/0x10
[  364.098539][   T34]  ret_from_fork_asm+0x1a/0x30
[  364.100383][   T34]  </TASK>
[  364.102091][   T34] Kernel Offset: disabled
[  364.103710][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:48:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff88801f518237 R9 =1ffff11003ea3046 R10=dffffc0000000000 R11=ffffffff854fa300
R12=dffffc0000000000 R13=ffffffff99b028cc R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa37c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd514e01866 CR3=000000002e338000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1a0c612e53
XMM06=0000000000000000 00007f1a0c612e4d XMM07=0000000000000000 00007f1a0c612e61
XMM08=0000000000000000 00007f1a0c612ee7 XMM09=0000000000000000 00007f1a0c612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0620b5355ecd3900 RBX=ffffffff819695f8 RCX=0620b5355ecd3900 RDX=0000000000000001
RSI=ffffffff8d9ba1cf RDI=ffffffff8be33e80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a930 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c8a6da77e8 CR3=000000010f39a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000555576e62979 0000555576e54560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000555576e3d4a8 XMM05=0200199403000200 19920303dc020019
XMM06=19a0030008001998 0300020019960302 XMM07=0019b00301808080 8080808080961000
XMM08=0102a81000308004 0a1000060102a800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
