last executing test programs:

6m41.606768541s ago: executing program 2 (id=539):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000001200)={'sit0\x00', @random="010000201000"})

6m41.60344759s ago: executing program 2 (id=541):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x6, 0xfffffffe, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x50, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010)

6m41.522701799s ago: executing program 0 (id=543):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000002100010027bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c010000000000000a0002000c001c"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x4040)

6m41.520827157s ago: executing program 0 (id=545):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)

6m41.512271154s ago: executing program 2 (id=546):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000000008010800000000000000000300000209000100737900"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m41.437199247s ago: executing program 0 (id=548):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x741f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0xf}]}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0xfffe, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='@', 0x1}], 0x1}, 0x10)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8)

6m41.345209144s ago: executing program 2 (id=550):
close(0xffffffffffffffff)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r6, 0x0, 0xfdef)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001040)=ANY=[], 0x258}, 0x1, 0x0, 0x0, 0x20000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

6m40.551688502s ago: executing program 0 (id=562):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000000), 0x90)

6m40.544444997s ago: executing program 0 (id=564):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240088c0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

6m40.441848247s ago: executing program 2 (id=565):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@loopback}, {@in, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0xffffffff}}, 0xf8}}, 0x0)

6m40.244430932s ago: executing program 0 (id=566):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

6m40.045197254s ago: executing program 32 (id=566):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

6m39.995969638s ago: executing program 2 (id=568):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000001c0081044e81f782db44b90404000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a000d4003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbfb4c2ee5a7cef4090000001fb391643f6f3a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f7deb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ea1789bf7", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

6m39.995913275s ago: executing program 33 (id=568):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000001c0081044e81f782db44b90404000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a000d4003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbfb4c2ee5a7cef4090000001fb391643f6f3a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f7deb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ea1789bf7", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

6m12.897737096s ago: executing program 3 (id=878):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
write$cgroup_subtree(r0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

6m12.840414601s ago: executing program 3 (id=880):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x110000, 0x0, 0x0, 0x9, 0x3fe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1a500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0)
sendmsg$kcm(r0, 0x0, 0x10)

6m12.296701666s ago: executing program 3 (id=886):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f26}, 0x0, 0xffffffffffffec25, 0x7, 0x8, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

6m12.154698897s ago: executing program 3 (id=888):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r1, 0x0, 0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40002041)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f", 0x85}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x0, 0x827ed272583e9fa3, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0x25, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116f00000000008510000002000000850000000000000095000000000000009500a50500df0000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

6m11.962778217s ago: executing program 3 (id=891):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x15, 0x0, 0x50)

6m11.646538723s ago: executing program 3 (id=892):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x72, 0x0, 0x0)

6m11.516140603s ago: executing program 34 (id=892):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x72, 0x0, 0x0)

5m15.762571595s ago: executing program 5 (id=1613):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10801, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)

5m15.696072375s ago: executing program 5 (id=1614):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

5m14.855813398s ago: executing program 5 (id=1616):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28)

5m14.832722529s ago: executing program 5 (id=1617):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200063f01c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

5m14.697326244s ago: executing program 5 (id=1622):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28)

5m14.696625998s ago: executing program 5 (id=1626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

4m59.627102486s ago: executing program 35 (id=1626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

2m43.432187467s ago: executing program 6 (id=3916):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0xc0189436, &(0x7f00000020c0)=""/4109)

2m43.350798994s ago: executing program 6 (id=3918):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="170000006a00f96b1324", 0x18}], 0x1}, 0x4080)

2m43.26217762s ago: executing program 6 (id=3919):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2m43.238396896s ago: executing program 6 (id=3920):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="40d2eca6c45597f807733387d719d17831c0ec03fff99a7a05256e650a8f5fb8f8a0135d730c71a16b633bdc9239f658838ee51c6a0900000000000000000000f8881415989ae8f7f0e9926a4aecd3d2847b5e5fde400fe6fe940fbc7af700822bf1bb0f36d9a5274830b828dc7692ffc72349a374a0c93b006e8b7417c8868acb2d0f2e91d154445e3f0958c04f8793d92ed373d63d3ac631a8b38f62f7d5a474fabbc37909b62ae10c2a3c13a8c807ad841b26bfa8fec53ee23ef0", 0x1}, {0x0, 0x63}], 0x2}, 0x400c0)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

2m42.364448729s ago: executing program 6 (id=3927):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001400300", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e00"], 0xfe33)

2m42.331805658s ago: executing program 6 (id=3928):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)

2m27.2965946s ago: executing program 36 (id=3928):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)

2m4.203775593s ago: executing program 4 (id=4515):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x9, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000340)}, 0x20)

2m4.203484825s ago: executing program 4 (id=4516):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x7}, 0x14327, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)
syz_clone(0x8110e000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m4.203239141s ago: executing program 7 (id=4517):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

2m3.954287085s ago: executing program 7 (id=4521):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0xfffffffffffffefe, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x9, 0x0, &(0x7f0000000a40)="30dd0d6c12d6fae2fc", 0x0}, 0x50)

2m3.894745049s ago: executing program 7 (id=4523):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c0002800800014080ffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)

2m3.894449687s ago: executing program 4 (id=4524):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x268, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x2}, 0x2, 0x0, 0xcd, 0x3, 0x0, 'syz1\x00', "22f4c5cfd5b8ce0b2c6c9cd13ad3aebaf68835254268515a06eb990dc8857762", "79ebf7c4d0ff114aec9df814cd9c0d23f79a65383990e420b5f789dc03f3eefc", [{0x349, 0x0, {0x1, 0x5}}, {0x7, 0x4, {0x3}}, {0xffff, 0xfff9, {0x1, 0xba}}, {0x68, 0x1, {0x4, 0xffffff04}}, {0xd7e, 0x1, {0x2, 0xfffff1d3}}, {0x26, 0x9, {0x0, 0x40}}, {0x1, 0x7, {0x0, 0xc}}, {0x1, 0xfff9, {0x3, 0x7}}, {0xb, 0x800, {0x2, 0xacc}}, {0x5, 0x1, {0x3, 0x4}}, {0x6, 0x7fff, {0x1, 0x1d90}}, {0x8, 0xc, {0x0, 0x4}}, {0x1, 0x0, {0x1, 0x915}}, {0x7, 0x7, {0x1, 0x40}}, {0x2, 0xffff, {0x0, 0xbd9a0000}}, {0x0, 0x69, {0x0, 0x3f}}, {0x1, 0xe1e3, {0x3, 0x6}}, {0xb, 0x5, {0x3, 0x1a}}, {0x7e4, 0x0, {0x0, 0x2}}, {0x8, 0x800, {0x2, 0x2}}, {0x3, 0x5, {0x1, 0x8}}, {0xe9, 0x1, {0x2, 0x7fff}}, {0x3, 0x9, {0x0, 0x2}}, {0x3, 0x9}, {0x9, 0x8, {0x0, 0x2}}, {0xcd3, 0xffff, {0x2, 0x2}}, {0x4, 0x2, {0x0, 0x3}}, {0x3, 0x6, {0x0, 0xe475}}, {0x1000, 0xc071, {0x3, 0x5}}, {0x0, 0x1, {0x0, 0x41f1}}, {0x8, 0xfe6e, {0x0, 0x1}}, {0x8000, 0x1, {0x2, 0x1}}, {0xfffb, 0xedc, {0x1, 0x21a}}, {0x200, 0x5, {0x3, 0x5}}, {0x5, 0x1, {0x1, 0xbdd6}}, {0x2, 0x7ff, {0x1, 0x8001}}, {0x6, 0x3, {0x0, 0x401}}, {0x8001, 0x1d, {0x2, 0x1}}, {0x8000, 0x80, {0x3, 0x7fffffff}}, {0x7, 0x8001, {0x1, 0x40}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x20000800)

2m3.833732076s ago: executing program 4 (id=4527):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000940)="1cebd111cfc7556586ef17b17e67", 0xe, 0x1}, 0x20000040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300))
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000036004b63d25a59ce0630fc", 0xf}], 0x1}, 0x20000040)

2m3.833521841s ago: executing program 7 (id=4528):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r5 = socket$kcm(0x2c, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r7 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x20040080)
socket$kcm(0x10, 0x2, 0x2)

2m3.672107191s ago: executing program 4 (id=4530):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
r1 = getpid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4)
perf_event_open(0x0, r1, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe7d)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1470c, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x10, 0x4, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x37, 0x0, 0x9}, 0x28)

2m3.316705207s ago: executing program 4 (id=4531):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000001851000000600000018180000", @ANYRES32], 0x0, 0xa}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)

2m3.191140866s ago: executing program 37 (id=4531):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000001851000000600000018180000", @ANYRES32], 0x0, 0xa}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)

2m3.143205669s ago: executing program 7 (id=4533):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a8000800a40004080032a0901461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e216d25b4084121d9d322fe7c9f8775730d16a4683f5a360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15952503fdee7a129d8d9e604196", 0xd8}], 0x1}, 0x24002040)

2m2.771761147s ago: executing program 7 (id=4534):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044"], 0xfc}, 0x1, 0x0, 0x0, 0x64008050}, 0x20040000)

2m2.771666283s ago: executing program 38 (id=4534):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044"], 0xfc}, 0x1, 0x0, 0x0, 0x64008050}, 0x20040000)

791.582052ms ago: executing program 1 (id=6566):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@generic={0x1d, "18fdf2aa6382cd05d0373334325b31b36bf15273784da2c7230496461d742ea2e1afcadc72dd5ba3c75171352a0ccb49d2c0ab74cb64844b734666c6866ba47b05c51560f5e5277adc39b91fb4ee48559370cb94e5b76595d3774ae174c1370465532ce1d45766b136ffaa067902e456e94327f95c2287aa879767b3041a"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="4c935c3f4471f2", 0x7}], 0x1}, 0x0)

731.589533ms ago: executing program 1 (id=6568):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180d0000000000000000000000000000850000008d00000095000000000000a7"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x8, 0xffffffffffffffff, 0x41000, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

671.73337ms ago: executing program 1 (id=6572):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/112, 0x70}], 0x5}, 0x10002)

608.510327ms ago: executing program 9 (id=6575):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r2, 0x88, 0xa, &(0x7f00000002c0), 0x4)
sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x20000080)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)

608.404671ms ago: executing program 8 (id=6576):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)

608.254569ms ago: executing program 1 (id=6577):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20)

541.525429ms ago: executing program 8 (id=6578):
r0 = socket$kcm(0x2, 0x3, 0x84)
syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="184b0c96f1983a")
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="09a6000000000000f37538e486dd630080fc5c082c00db5bffffffffff00000006016c040000000000000000000000000000ac1414aa33200007d60b"], 0xfdef)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891c, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x2, 0x78, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x90}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @generic={0x2, 0x3, 0x4, 0x8, 0xffffff56}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x6, 0x51, &(0x7f0000000440)=""/81, 0x41100, 0x20, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x956, 0xf7ed}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x10, 0xeed}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='erofs_lookup\x00', r4, 0x0, 0x800}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x6b)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0x25)

541.14538ms ago: executing program 1 (id=6579):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0)

399.49834ms ago: executing program 9 (id=6580):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4)

396.199423ms ago: executing program 8 (id=6581):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)=0x20000)

310.715102ms ago: executing program 9 (id=6582):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069114e00000000008510000002000000850000008800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

310.559583ms ago: executing program 8 (id=6583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000070605000000000000000000050000050800064000000005050001000700000009"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

310.448643ms ago: executing program 9 (id=6584):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

269.882271ms ago: executing program 8 (id=6585):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000140)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)

269.632021ms ago: executing program 9 (id=6586):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="020707fe02000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0)

198.485805ms ago: executing program 8 (id=6587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, 0x0, 0x20000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="000003009165a101010000aaaaaaaa07aaaaaaaaaaaa"])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r4 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=""/167, 0xa7}, 0x50)
sendmsg$kcm(r4, 0x0, 0x40)
r5 = socket$kcm(0x28, 0x1, 0x0)
recvmsg(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)
close(r0)
sendmsg$sock(r4, 0x0, 0x4004840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x28, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000006000000000000000000b80e85200000010000004d6a0100fcffffff8510000002000000b7080000000000007b8af8ff00000000b7080000530a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb7183793a37e907e0204000002000000850000008200000004960400060000008122fe0000007f000000000000009d000000000200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000e2828fef16ae9b9e89d25957165a3e5c286b395efddc0839546b1ca4ec19ca74a13429b373d4877b489f6ff1fb56b3bab84674d0185e0b9bf5ca4a99f8f34ecbf720e6164cc356f87f661d9020b1d2b385d3e4bab0885abcb5230ada352810efa3d86590a29957983e8d15184a670b586e3160ed0cd3762bef02bd"], 0x0, 0xef89, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x8, 0x7f, 0x80}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000b40)=[{0x1, 0x2, 0x7, 0x6}, {0x2, 0x3, 0xe, 0xc8cd675a08617988}, {0x3, 0x3, 0x7, 0x7}, {0x3, 0x5, 0x7, 0xa}, {0x5, 0x3, 0xd, 0x6}], 0x10, 0x7}, 0x94)

167.359µs ago: executing program 9 (id=6588):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

0s ago: executing program 1 (id=6589):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

kernel console output (not intermixed with test programs):

T12021]  warn_alloc+0x214/0x310
[  268.543451][T12021]  ? stack_depot_save_flags+0x41b/0x860
[  268.543472][T12021]  ? __pfx_warn_alloc+0x10/0x10
[  268.543494][T12021]  ? kasan_save_track+0x4f/0x80
[  268.543511][T12021]  ? xskq_create+0x56/0x170
[  268.543527][T12021]  ? xsk_init_queue+0xb0/0x110
[  268.543541][T12021]  ? xsk_setsockopt+0x57b/0x8d0
[  268.543557][T12021]  ? do_sock_setsockopt+0x17c/0x1b0
[  268.543576][T12021]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  268.543587][T12021]  ? do_syscall_64+0xfa/0x3b0
[  268.543603][T12021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.543624][T12021]  __vmalloc_node_range_noprof+0x125/0x12f0
[  268.543667][T12021]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  268.543690][T12021]  ? __kasan_kmalloc+0x93/0xb0
[  268.543711][T12021]  vmalloc_user_noprof+0xad/0xf0
[  268.543731][T12021]  ? xskq_create+0xbf/0x170
[  268.543749][T12021]  xskq_create+0xbf/0x170
[  268.543769][T12021]  xsk_init_queue+0xb0/0x110
[  268.543789][T12021]  xsk_setsockopt+0x57b/0x8d0
[  268.543807][T12021]  ? __pfx_xsk_setsockopt+0x10/0x10
[  268.543824][T12021]  ? __pfx_aa_sk_perm+0x10/0x10
[  268.543861][T12021]  ? __fget_files+0x2a/0x420
[  268.543874][T12021]  ? aa_sock_opt_perm+0xff/0x1b0
[  268.543891][T12021]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  268.543909][T12021]  ? __pfx_xsk_setsockopt+0x10/0x10
[  268.543927][T12021]  do_sock_setsockopt+0x17c/0x1b0
[  268.543954][T12021]  __x64_sys_setsockopt+0x13f/0x1b0
[  268.543971][T12021]  do_syscall_64+0xfa/0x3b0
[  268.543989][T12021]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.544007][T12021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.544021][T12021]  ? exc_page_fault+0x9f/0xf0
[  268.544041][T12021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.544055][T12021] RIP: 0033:0x7f2068f8ebe9
[  268.544070][T12021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.544083][T12021] RSP: 002b:00007f2069de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  268.544101][T12021] RAX: ffffffffffffffda RBX: 00007f20691b6180 RCX: 00007f2068f8ebe9
[  268.544112][T12021] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  268.544121][T12021] RBP: 00007f2069011e19 R08: 0000000000000004 R09: 0000000000000000
[  268.544131][T12021] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  268.544141][T12021] R13: 00007f20691b6218 R14: 00007f20691b6180 R15: 00007ffc8b7f20d8
[  268.544165][T12021]  </TASK>
[  268.544173][T12021] Mem-Info:
[  268.553991][T12023] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  268.561617][T12021] active_anon:15423 inactive_anon:0 isolated_anon:0
[  268.561617][T12021]  active_file:15649 inactive_file:38303 isolated_file:0
[  268.561617][T12021]  unevictable:1768 dirty:271 writeback:0
[  268.561617][T12021]  slab_reclaimable:10397 slab_unreclaimable:59219
[  268.561617][T12021]  mapped:23237 shmem:2461 pagetables:1282
[  268.561617][T12021]  sec_pagetables:0 bounce:0
[  268.561617][T12021]  kernel_misc_reclaimable:0
[  268.561617][T12021]  free:255498 free_pcp:18105 free_cma:0
[  268.573667][T12023] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  268.577809][T12021] Node 0 active_anon:35416kB inactive_anon:0kB active_file:31024kB inactive_file:142140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46760kB dirty:700kB writeback:0kB shmem:4900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4688kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  268.718020][T12021] Node 1 active_anon:26412kB inactive_anon:0kB active_file:31572kB inactive_file:11072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50268kB dirty:384kB writeback:0kB shmem:4944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8088kB pagetables:3176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  268.732426][T12021] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  268.756494][T12021] lowmem_reserve[]: 0 811 811 811 811
[  268.758820][T12021] Node 0 DMA32 free:193156kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35416kB inactive_anon:0kB active_file:31024kB inactive_file:142140kB unevictable:3536kB writepending:700kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:40296kB local_pcp:25008kB free_cma:0kB
[  268.780603][T12035] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2383'.
[  268.784846][T12021] lowmem_reserve[]: 0 0 0 0 0
[  268.794145][T12021] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  268.807149][T12021] lowmem_reserve[]: 0 0 854 854 854
[  268.808982][T12021] Node 1 Normal free:354472kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26220kB inactive_anon:0kB active_file:31572kB inactive_file:11072kB unevictable:3536kB writepending:392kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33192kB local_pcp:15960kB free_cma:0kB
[  268.833309][T12021] lowmem_reserve[]: 0 0 0 0 0
[  268.835431][T12021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  268.844764][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2385'.
[  268.845080][T12021] Node 0 DMA32: 
[  268.848132][T12039] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2385'.
[  268.849706][T12021] 833*4kB (ME) 418*8kB (ME) 347*16kB (UME) 348*32kB (UM) 167*64kB (UM) 93*128kB (UME) 31*256kB (UM) 18*512kB (UME) 11*1024kB (UM) 8*2048kB (UE) 25*4096kB (UM) = 193156kB
[  268.863615][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2385'.
[  268.869721][T12021] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  268.878443][T12021] Node 1 Normal: 94*4kB (UE) 250*8kB (UE) 218*16kB (UME) 266*32kB (UE) 231*64kB (UME) 162*128kB (UME) 46*256kB (UME) 22*512kB (UME) 15*1024kB (UM) 12*2048kB (UME) 59*4096kB (UM) = 354536kB
[  268.898132][T12021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  268.901642][T12021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  268.905067][T12021] 56415 total pagecache pages
[  268.906995][T12021] 0 pages in swap cache
[  268.908789][T12021] Free swap  = 124996kB
[  268.910620][T12021] Total swap = 124996kB
[  268.912328][T12021] 786301 pages RAM
[  268.916592][T12021] 0 pages HighMem/MovableOnly
[  268.918410][T12021] 241329 pages reserved
[  268.919997][T12021] 0 pages cma reserved
[  269.067636][T12053] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2392'.
[  269.875657][T12069] netlink: 'syz.1.2399': attribute type 6 has an invalid length.
[  269.879471][T12069] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2399'.
[  269.964357][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2410'.
[  269.989879][T12096] netlink: 'syz.1.2411': attribute type 21 has an invalid length.
[  270.106880][T12102] netlink: 'syz.6.2412': attribute type 1 has an invalid length.
[  270.416105][T12109] netlink: 'syz.4.2416': attribute type 4 has an invalid length.
[  270.562055][T12121] netlink: 'syz.4.2422': attribute type 1 has an invalid length.
[  270.567026][T12121] netlink: 'syz.4.2422': attribute type 1 has an invalid length.
[  270.718477][T12133] netlink: 'syz.4.2428': attribute type 1 has an invalid length.
[  270.724287][T12133] netlink: 'syz.4.2428': attribute type 2 has an invalid length.
[  270.905155][T12148] net_ratelimit: 76 callbacks suppressed
[  270.905172][T12148] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  271.199922][T12179] openvswitch: netlink: Flow actions attr not present in new flow.
[  272.973113][T12206] delete_channel: no stack
[  273.101299][T12260] netlink: 'syz.1.2487': attribute type 2 has an invalid length.
[  273.113525][T12260] netlink: 'syz.1.2487': attribute type 2 has an invalid length.
[  273.155611][T12263] netlink: 'syz.6.2488': attribute type 39 has an invalid length.
[  273.160548][T12263] veth0_macvtap: left promiscuous mode
[  273.977462][T12282] netlink: 'syz.4.2497': attribute type 4 has an invalid length.
[  274.042273][T12286] netlink: 'syz.1.2499': attribute type 2 has an invalid length.
[  274.229820][T12301] netlink: 'syz.4.2505': attribute type 21 has an invalid length.
[  274.238263][T12301] __nla_validate_parse: 8 callbacks suppressed
[  274.238274][T12301] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2505'.
[  274.251963][T12301] netlink: 'syz.4.2505': attribute type 5 has an invalid length.
[  274.256645][T12301] netlink: 'syz.4.2505': attribute type 6 has an invalid length.
[  274.259993][T12301] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2505'.
[  275.228958][T12295] infiniband syz!: set active
[  275.231909][T12295] infiniband syz!: added team_slave_0
[  275.241054][T12295] syz!: rxe_create_cq: returned err = -12
[  275.244690][T12295] infiniband syz!: Couldn't create ib_mad CQ
[  275.247656][T12295] infiniband syz!: Couldn't open port 1
[  275.272266][T12295] RDS/IB: syz!: added
[  275.276340][T12295] smc: adding ib device syz! with port count 1
[  275.279558][T12295] smc:    ib device syz! port 1 has pnetid 
[  275.343405][T12332] netlink: 'syz.1.2518': attribute type 28 has an invalid length.
[  275.346804][T12332] netlink: 'syz.1.2518': attribute type 29 has an invalid length.
[  275.350181][T12332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2518'.
[  275.373496][T12328] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2518'.
[  275.408629][T12328] netlink: 143452 bytes leftover after parsing attributes in process `syz.1.2518'.
[  275.562041][T12341] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2522'.
[  276.064679][T12361] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2531'.
[  276.464647][T12385] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2542'.
[  276.670198][T12395] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  276.674940][T12395] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  276.956555][T12410] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2554'.
[  276.959955][T12410] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  276.964339][T12410] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  278.070474][T12476] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2584'.
[  279.047880][T12512] validate_nla: 5 callbacks suppressed
[  279.047990][T12512] netlink: 'syz.1.2600': attribute type 39 has an invalid length.
[  279.590279][T12529] __nla_validate_parse: 1 callbacks suppressed
[  279.590294][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2605'.
[  279.597936][T12529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2605'.
[  279.785237][T12539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2610'.
[  279.876717][T12545] netlink: 'syz.4.2612': attribute type 1 has an invalid length.
[  280.000478][T12547] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2611'.
[  280.045562][T12555] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2617'.
[  280.306125][T12570] netlink: 'syz.6.2624': attribute type 10 has an invalid length.
[  280.332920][T12570] 8021q: adding VLAN 0 to HW filter on device team0
[  280.341276][T12570] bond0: (slave team0): Enslaving as an active interface with an up link
[  280.345579][ T5863] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  280.380538][T12566] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  280.385699][T12566] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  280.402256][T12570] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  280.448154][T12570] can: request_module (can-proto-0) failed.
[  280.499573][T12576] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2626'.
[  280.504631][T12576] netlink: 6264 bytes leftover after parsing attributes in process `syz.4.2626'.
[  280.509198][T12576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2626'.
[  280.595016][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2628'.
[  280.636610][T12585] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2630'.
[  280.786301][T12599] netlink: 'syz.4.2634': attribute type 1 has an invalid length.
[  280.826645][T12603] delete_channel: no stack
[  280.828697][T12603] delete_channel: no stack
[  282.159529][T12647] netlink: zone id is out of range
[  282.162240][T12647] netlink: zone id is out of range
[  282.165376][T12647] netlink: zone id is out of range
[  282.167862][T12647] netlink: zone id is out of range
[  282.169782][T12647] netlink: zone id is out of range
[  282.171561][T12647] netlink: zone id is out of range
[  282.174880][T12647] netlink: zone id is out of range
[  282.176733][T12647] netlink: zone id is out of range
[  282.179417][T12647] netlink: zone id is out of range
[  282.181272][T12647] netlink: zone id is out of range
[  282.196028][T12648] netlink: 'syz.4.2654': attribute type 10 has an invalid length.
[  282.285171][T12652] netlink: 'syz.6.2659': attribute type 2 has an invalid length.
[  282.288505][T12652] netlink: 'syz.6.2659': attribute type 8 has an invalid length.
[  283.272157][ T5865] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4
[  283.634316][T12698] netlink: 'syz.4.2681': attribute type 13 has an invalid length.
[  283.651753][T12698] netlink: 'syz.4.2681': attribute type 17 has an invalid length.
[  284.101718][T12698] sit0: left promiscuous mode
[  284.105094][T12698] sit0: left allmulticast mode
[  284.223473][T12698] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.384587][T12698] syz.4.2681 (12698) used greatest stack depth: 18616 bytes left
[  284.430961][T12722] netlink: 'syz.1.2691': attribute type 10 has an invalid length.
[  284.436905][T12722] : (slave bond_slave_0): Releasing backup interface
[  284.680584][T12747] __nla_validate_parse: 4 callbacks suppressed
[  284.680600][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'.
[  284.803410][T12753] netlink: 'syz.1.2705': attribute type 6 has an invalid length.
[  284.807079][T12753] netlink: 'syz.1.2705': attribute type 1 has an invalid length.
[  284.810376][T12753] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2705'.
[  285.223987][T12771] netlink: 'syz.1.2714': attribute type 13 has an invalid length.
[  285.227162][T12771] netlink: 'syz.1.2714': attribute type 17 has an invalid length.
[  285.907715][T12771] sit0: left allmulticast mode
[  286.028894][T12787] netlink: 'syz.6.2720': attribute type 39 has an invalid length.
[  286.103062][T12771] vcan0: left promiscuous mode
[  286.106029][T12771] bond_slave_1: entered promiscuous mode
[  286.108700][T12771] batadv_slave_0: entered promiscuous mode
[  286.116187][T12771] 8021q: adding VLAN 0 to HW filter on device 
[  286.124078][   T10] lo speed is unknown, defaulting to 1000
[  286.238463][T12795] netlink: 'syz.6.2723': attribute type 12 has an invalid length.
[  286.257577][T12795] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2723'.
[  286.506411][T12814] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2733'.
[  286.596352][T12814] hsr_slave_0: left promiscuous mode
[  286.618365][T12814] hsr_slave_1: left promiscuous mode
[  286.644816][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2737'.
[  287.134417][T12834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2742'.
[  287.138241][T12834] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2742'.
[  287.142367][T12834] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2742'.
[  287.249363][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2746'.
[  287.331906][T12848] syzkaller0: entered promiscuous mode
[  287.334519][T12848] syzkaller0: entered allmulticast mode
[  287.550702][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  287.952794][T12892] dvmrp1: tun_chr_ioctl cmd 35108
[  288.396711][T12919] syzkaller0: tun_chr_ioctl cmd 2147767506
[  289.080260][T12949] syzkaller1: tun_chr_ioctl cmd 1074025677
[  289.086523][T12949] syzkaller1: linktype set to 776
[  289.260718][T12961] netlink: 'syz.1.2802': attribute type 1 has an invalid length.
[  289.264932][T12961] netlink: 'syz.1.2802': attribute type 3 has an invalid length.
[  289.307978][T12963] netlink: 'syz.4.2803': attribute type 10 has an invalid length.
[  289.629698][T12989] netlink: 'syz.4.2817': attribute type 1 has an invalid length.
[  289.640615][T12991] netlink: 'syz.6.2816': attribute type 39 has an invalid length.
[  289.756538][T12998] netlink: 'syz.1.2820': attribute type 1 has an invalid length.
[  289.762134][T12998] __nla_validate_parse: 9 callbacks suppressed
[  289.762149][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2820'.
[  289.809412][T13001] netlink: 'syz.4.2822': attribute type 39 has an invalid length.
[  290.116596][T13022] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2833'.
[  290.119687][T13022] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2833'.
[  290.365847][T13037] netlink: 'syz.4.2839': attribute type 1 has an invalid length.
[  290.455862][T13041] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2841'.
[  290.527084][T13045] netlink: 'syz.6.2843': attribute type 10 has an invalid length.
[  290.935433][T13061] netlink: 11382 bytes leftover after parsing attributes in process `syz.6.2849'.
[  291.737476][T13079] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2856'.
[  292.332330][T13101] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2866'.
[  292.344489][T13101] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2866'.
[  292.453727][T13103] netlink: 'syz.6.2867': attribute type 21 has an invalid length.
[  293.572834][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  293.687795][T13119] netlink: 'syz.1.2873': attribute type 21 has an invalid length.
[  293.691239][T13119] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2873'.
[  293.707970][T13119] netlink: 'syz.1.2873': attribute type 4 has an invalid length.
[  293.711263][T13119] netlink: 'syz.1.2873': attribute type 3 has an invalid length.
[  293.724435][T13119] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2873'.
[  293.924932][T13139] net_ratelimit: 78 callbacks suppressed
[  293.924950][T13139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.115650][T13164] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  295.277644][T13171] __nla_validate_parse: 2 callbacks suppressed
[  295.277659][T13171] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2897'.
[  296.380344][T13196] netlink: 'syz.6.2905': attribute type 11 has an invalid length.
[  296.385659][T13196] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.2905'.
[  298.270217][T13224] validate_nla: 1 callbacks suppressed
[  298.270231][T13224] netlink: 'syz.6.2914': attribute type 1 has an invalid length.
[  298.276308][T13224] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2914'.
[  298.402100][T13236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2919'.
[  298.406718][T13236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2919'.
[  300.661915][T13337] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2968'.
[  300.664103][T13338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2967'.
[  300.669082][T13338] netlink: 'syz.4.2967': attribute type 2 has an invalid length.
[  300.674406][T13337] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2968'.
[  301.045835][T13362] syzkaller0: entered promiscuous mode
[  301.048265][T13362] syzkaller0: entered allmulticast mode
[  301.394384][   T33] audit: type=1107 audit(1755321332.671:4): pid=13367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  301.726007][T13377] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2985'.
[  302.534295][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3013'.
[  302.735546][T13450] netlink: 'syz.4.3021': attribute type 11 has an invalid length.
[  302.807422][T13453] netlink: 'syz.1.3022': attribute type 3 has an invalid length.
[  302.810027][T13453] netlink: 135800 bytes leftover after parsing attributes in process `syz.1.3022'.
[  303.060380][T13464] netlink: 'syz.1.3026': attribute type 39 has an invalid length.
[  304.248432][T13489] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3038'.
[  304.422355][T13497] ]X: renamed from veth0_vlan (while UP)
[  304.438952][T13485] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3036'.
[  304.447177][T13485] netlink: 'syz.1.3036': attribute type 10 has an invalid length.
[  304.450125][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3036'.
[  304.689092][ T5865] Bluetooth: hci0: Malformed LE Event: 0x0b
[  304.739184][T13516] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3051'.
[  305.268498][T13533] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  305.911555][T13524] delete_channel: no stack
[  306.874294][T13571] netlink: 'syz.6.3076': attribute type 13 has an invalid length.
[  307.164370][T13573] netlink: 'syz.4.3074': attribute type 10 has an invalid length.
[  307.167800][T13573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3074'.
[  307.171753][T13573] team0: entered promiscuous mode
[  307.174109][T13573] C: entered promiscuous mode
[  307.176342][T13573] team_slave_1: entered promiscuous mode
[  307.178980][T13573] team0: entered allmulticast mode
[  307.181168][T13573] C: entered allmulticast mode
[  307.192399][T13573] team_slave_1: entered allmulticast mode
[  307.205167][T13573] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  307.232490][T13575] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3077'.
[  307.743013][T13572] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3074'.
[  308.215950][T13600] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3082'.
[  308.229210][T13597] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3082'.
[  308.249791][T13597] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3082'.
[  309.880406][T13640] netlink: 'syz.1.3099': attribute type 10 has an invalid length.
[  309.883530][T13640] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3099'.
[  310.136791][T13659] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.3108'.
[  310.185543][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3109'.
[  310.189433][T13661] netlink: 33 bytes leftover after parsing attributes in process `syz.6.3109'.
[  310.196154][T13661] bridge_slave_0: entered allmulticast mode
[  310.343545][T13667] netlink: 'syz.6.3112': attribute type 4 has an invalid length.
[  310.349369][T13667] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  310.358788][ T5863] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0000:00ff:fe00:0006 error=-28
[  310.903135][ T5865] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  311.154250][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.690591][T13755] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  311.694833][T13755] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  312.272177][ T5865] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  312.393676][T13800] IPv6: NLM_F_CREATE should be specified when creating new route
[  312.446848][T13803] netlink: 'syz.6.3175': attribute type 3 has an invalid length.
[  312.450269][T13803] __nla_validate_parse: 11 callbacks suppressed
[  312.450280][T13803] netlink: 199752 bytes leftover after parsing attributes in process `syz.6.3175'.
[  312.490929][T13794] netlink: ct family unspecified
[  312.580948][T13794] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.715501][T13814] netlink: 'syz.4.3179': attribute type 7 has an invalid length.
[  312.718410][T13814] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3179'.
[  313.543954][T13836] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3189'.
[  313.863100][T13854] netlink: 'syz.1.3196': attribute type 21 has an invalid length.
[  314.787675][T13869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.853541][T13875] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.3202'.
[  314.918524][T13881] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3205'.
[  315.030991][T13891] lo: left promiscuous mode
[  315.037481][T13891] lo: entered allmulticast mode
[  315.057984][T13891] lo: entered promiscuous mode
[  315.060086][T13891] lo: left allmulticast mode
[  316.389533][T13915] mac80211_hwsim hwsim4 .3#c: renamed from wlan1
[  316.450165][T13919] netlink: 'syz.4.3224': attribute type 1 has an invalid length.
[  316.474495][T13919] netlink: 'syz.4.3224': attribute type 3 has an invalid length.
[  316.478466][T13919] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3224'.
[  316.660506][T13930] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3229'.
[  316.665969][T13930] netlink: zone id is out of range
[  316.668176][T13930] netlink: zone id is out of range
[  316.670378][T13930] netlink: zone id is out of range
[  316.696241][T13930] netlink: zone id is out of range
[  316.698549][T13930] netlink: zone id is out of range
[  316.700827][T13930] netlink: zone id is out of range
[  316.723969][T13930] netlink: zone id is out of range
[  316.849559][T13937] netlink: 'syz.1.3232': attribute type 21 has an invalid length.
[  316.858256][T13937] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3232'.
[  316.879499][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'.
[  316.949608][T13943] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3235'.
[  317.089352][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.092092][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.420228][T13953] netlink: 'syz.4.3240': attribute type 1 has an invalid length.
[  318.011259][T13966] netlink: 'syz.4.3246': attribute type 29 has an invalid length.
[  318.073373][T13966] netlink: 'syz.4.3246': attribute type 29 has an invalid length.
[  318.475466][T13978] netlink: 'syz.6.3251': attribute type 1 has an invalid length.
[  318.605623][T13985] __nla_validate_parse: 5 callbacks suppressed
[  318.605637][T13985] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3254'.
[  319.365448][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3265'.
[  319.553204][T14025] netlink: 'syz.4.3272': attribute type 21 has an invalid length.
[  319.556675][T14025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.559734][T14025] IPv6: NLM_F_CREATE should be set when creating new route
[  319.563707][T14025] IPv6: NLM_F_CREATE should be set when creating new route
[  319.566947][T14025] IPv6: NLM_F_CREATE should be set when creating new route
[  319.584665][T14029] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3274'.
[  320.668144][T14073] C: renamed from team_slave_0 (while UP)
[  320.674765][T14073] netlink: 'syz.6.3292': attribute type 1 has an invalid length.
[  320.678085][T14073] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3292'.
[  320.704113][T14073] net_ratelimit: 76 callbacks suppressed
[  320.704122][T14073] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  320.944433][T14076] netlink: 'syz.4.3294': attribute type 29 has an invalid length.
[  321.244584][T14076] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.410060][T14076] bond0: entered promiscuous mode
[  321.413459][T14076] bond_slave_0: entered promiscuous mode
[  321.421787][T14076] bond_slave_1: entered promiscuous mode
[  321.448560][T14076] netdevsim netdevsim4 : entered promiscuous mode
[  321.461577][T14076] bond0: entered allmulticast mode
[  321.464624][T14076] bond_slave_0: entered allmulticast mode
[  321.467213][T14076] bond_slave_1: entered allmulticast mode
[  321.470414][T14076] netdevsim netdevsim4 : entered allmulticast mode
[  321.567723][T14076] team0: Port device bond0 added
[  321.595421][T14092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.078701][T14128] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.3315'.
[  322.231699][T14136] netlink: 64019 bytes leftover after parsing attributes in process `syz.1.3319'.
[  322.918237][T14159] validate_nla: 1 callbacks suppressed
[  322.918281][T14159] netlink: 'syz.4.3327': attribute type 28 has an invalid length.
[  322.924991][T14159] netlink: 'syz.4.3327': attribute type 29 has an invalid length.
[  322.928846][T14159] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3327'.
[  322.937305][T14159] netlink: 'syz.4.3327': attribute type 9 has an invalid length.
[  322.940573][T14159] netlink: 'syz.4.3327': attribute type 8 has an invalid length.
[  322.945714][T14159] netlink: 143452 bytes leftover after parsing attributes in process `syz.4.3327'.
[  323.001587][T14164] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3329'.
[  324.839834][T14229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3355'.
[  324.846220][T14229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3355'.
[  324.850078][T14229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3355'.
[  324.866264][T14231] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3356'.
[  324.979776][T14238] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3359'.
[  325.028140][T14239] netlink: 'syz.1.3360': attribute type 10 has an invalid length.
[  325.627204][T14266] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3371'.
[  325.677786][T14268] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3372'.
[  325.820830][T14274] netlink: 'syz.1.3375': attribute type 4 has an invalid length.
[  325.829669][T14274] netlink: 'syz.1.3375': attribute type 11 has an invalid length.
[  325.842223][T14274] netlink: 196896 bytes leftover after parsing attributes in process `syz.1.3375'.
[  327.328741][T14309] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.3392'.
[  327.427845][T14313] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  327.431476][T14313] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  327.763694][T14330] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3403'.
[  327.771521][T14335] syzkaller0: tun_chr_ioctl cmd 1074025677
[  327.779632][T14335] syzkaller0: Linktype set failed because interface is up
[  327.783564][ T8494] syzkaller0: tun_net_xmit 76
[  327.785482][ T8494] syzkaller0: tun_net_xmit 48
[  327.814518][ T5911] syzkaller0: tun_net_xmit 76
[  327.883340][ T5911] syzkaller0: tun_net_xmit 76
[  327.996400][T14358] netlink: 'syz.4.3413': attribute type 11 has an invalid length.
[  329.472094][T14389] netlink: 'syz.1.3426': attribute type 10 has an invalid length.
[  329.479077][T14389] dummy0: entered promiscuous mode
[  329.483694][T14389] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  329.759776][T14412] netlink: 'syz.4.3437': attribute type 21 has an invalid length.
[  329.880348][T14423] __nla_validate_parse: 6 callbacks suppressed
[  329.880362][T14423] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3441'.
[  330.232085][T14416] can: request_module (can-proto-0) failed.
[  330.306262][T14437] delete_channel: no stack
[  330.308241][T14437] delete_channel: no stack
[  330.972193][T14482] netlink: 'syz.1.3466': attribute type 1 has an invalid length.
[  331.975383][T14497] delete_channel: no stack
[  332.228931][T14519] netlink: 'syz.6.3481': attribute type 4 has an invalid length.
[  332.231714][T14519] netlink: 'syz.6.3481': attribute type 2 has an invalid length.
[  332.235840][T14519] netlink: 199288 bytes leftover after parsing attributes in process `syz.6.3481'.
[  332.309902][T14529] netlink: 'syz.1.3487': attribute type 3 has an invalid length.
[  332.319168][T14529] netlink: 'syz.1.3487': attribute type 1 has an invalid length.
[  332.321755][T14529] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3487'.
[  332.506046][T14545] netlink: 'syz.6.3494': attribute type 1 has an invalid length.
[  332.562667][T14545] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3494'.
[  332.739114][T14558] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3499'.
[  332.822414][T14562] : entered promiscuous mode
[  334.176310][T14613] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3523'.
[  334.243299][T14619] netlink: 703 bytes leftover after parsing attributes in process `syz.6.3526'.
[  334.684458][T14628] netlink: 'syz.4.3530': attribute type 29 has an invalid length.
[  334.688136][T14628] netlink: 'syz.4.3530': attribute type 29 has an invalid length.
[  334.738498][T14632] netlink: 'syz.4.3532': attribute type 29 has an invalid length.
[  334.742084][T14632] netlink: 'syz.4.3532': attribute type 29 has an invalid length.
[  334.746532][T14632] netlink: 'syz.4.3532': attribute type 29 has an invalid length.
[  334.749830][T14632] netlink: 'syz.4.3532': attribute type 29 has an invalid length.
[  334.897651][T14650] netlink: 'syz.4.3541': attribute type 11 has an invalid length.
[  334.901243][T14650] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3541'.
[  335.081532][T14666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3549'.
[  335.220584][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'.
[  335.352865][T14678] netlink: 'syz.4.3554': attribute type 29 has an invalid length.
[  335.396449][T14683] netlink: 'syz.4.3556': attribute type 10 has an invalid length.
[  335.399853][T14683] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3556'.
[  335.500122][T14686] netlink: 'syz.6.3555': attribute type 10 has an invalid length.
[  336.127907][T14696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3561'.
[  336.517203][T14717] netlink: 'syz.1.3571': attribute type 10 has an invalid length.
[  337.102371][T14722] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  337.207913][T14728] syzkaller0: refused to change device tx_queue_len
[  337.299869][T14729] bond0: (slave team0): Releasing backup interface
[  337.309034][T14729] team0 (unregistering): Port device C removed
[  337.316599][T14729] team0 (unregistering): Port device team_slave_1 removed
[  337.326255][T14729] team0 (unregistering): Port device wlan1 removed
[  337.332119][T14729] team0 (unregistering): Port device vlan0 removed
[  337.352125][ T5912] syz!: Port: 1 Link DOWN
[  337.476647][T14741] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3581'.
[  337.480018][T14741] : entered promiscuous mode
[  337.483128][T14741] macvlan0: entered promiscuous mode
[  338.083880][T14748] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.3583'.
[  338.170876][T14752] lo speed is unknown, defaulting to 1000
[  338.389099][T14763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.391676][T14763] IPv6: NLM_F_CREATE should be set when creating new route
[  338.394364][T14763] IPv6: NLM_F_CREATE should be set when creating new route
[  339.079872][T14774] dummy0: mtu less than device minimum
[  340.231337][T14802] validate_nla: 2 callbacks suppressed
[  340.231352][T14802] netlink: 'syz.1.3606': attribute type 10 has an invalid length.
[  340.240610][T14802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3606'.
[  340.246155][T14802] ipvlan1: entered promiscuous mode
[  340.248181][T14802] ipvlan1: entered allmulticast mode
[  340.250946][T14802] veth0_vlan: entered allmulticast mode
[  340.254324][T14802] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  340.259858][T14804] netlink: 'syz.4.3607': attribute type 1 has an invalid length.
[  340.264413][T14804] netlink: 'syz.4.3607': attribute type 3 has an invalid length.
[  340.267391][T14804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3607'.
[  340.289940][T14808] netlink: 'syz.6.3609': attribute type 4 has an invalid length.
[  340.384575][T14818] netlink: 'syz.4.3614': attribute type 1 has an invalid length.
[  340.392703][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3615'.
[  340.409469][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3615'.
[  340.416063][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3615'.
[  341.833848][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'.
[  341.852319][T14870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3633'.
[  341.862595][T14870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3633'.
[  342.367096][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3641'.
[  342.474891][T14888] lo speed is unknown, defaulting to 1000
[  343.478461][ T5865] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[  343.830637][T14918] sit0: entered allmulticast mode
[  343.908449][T14925] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3654'.
[  346.111084][T14937] __nla_validate_parse: 1 callbacks suppressed
[  346.111096][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3659'.
[  346.169643][T14940] netlink: 'syz.1.3660': attribute type 10 has an invalid length.
[  346.232411][T14945] netlink: 'syz.6.3662': attribute type 5 has an invalid length.
[  346.516917][T14968] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3672'.
[  346.600196][T14970] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3673'.
[  347.284984][T15006] netlink: 'syz.1.3688': attribute type 12 has an invalid length.
[  347.291720][T15006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3688'.
[  347.699711][T15015] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3691'.
[  347.954537][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3696'.
[  348.601631][ T5869] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  349.886779][ T5865] Bluetooth: hci3: command tx timeout
[  350.009379][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'.
[  350.129010][T15082] netlink: 'syz.1.3722': attribute type 10 has an invalid length.
[  350.313233][T15095] netlink: 'syz.6.3729': attribute type 2 has an invalid length.
[  350.316597][T15095] netlink: 'syz.6.3729': attribute type 1 has an invalid length.
[  350.319819][T15095] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.3729'.
[  351.347967][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3744'.
[  351.351275][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3744'.
[  351.407454][T15135] netlink: 763 bytes leftover after parsing attributes in process `syz.6.3745'.
[  351.706884][T15139] netlink: 'syz.6.3746': attribute type 3 has an invalid length.
[  351.710217][T15139] netlink: 'syz.6.3746': attribute type 4 has an invalid length.
[  351.740041][T15139] netlink: 9067 bytes leftover after parsing attributes in process `syz.6.3746'.
[  351.938691][T15152] netlink: 198328 bytes leftover after parsing attributes in process `syz.1.3753'.
[  351.942964][T15152] netlink: 'syz.1.3753': attribute type 1 has an invalid length.
[  351.946203][T15152] netlink: 'syz.1.3753': attribute type 2 has an invalid length.
[  352.002234][T15157] netlink: 'syz.1.3755': attribute type 2 has an invalid length.
[  352.181833][T15161] syzkaller1: tun_chr_ioctl cmd 1074025677
[  352.186535][T15161] syzkaller1: linktype set to 780
[  352.238926][T15161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3757'.
[  352.245067][T15161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3757'.
[  352.251403][T15161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3757'.
[  352.369144][T15170] netlink: 684 bytes leftover after parsing attributes in process `syz.6.3761'.
[  352.425277][T15172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3762'.
[  352.630977][T15188] netlink: 'syz.1.3770': attribute type 7 has an invalid length.
[  353.009912][T15204] netlink: 'syz.4.3776': attribute type 29 has an invalid length.
[  353.022351][T15204] netlink: 'syz.4.3776': attribute type 29 has an invalid length.
[  353.029482][T15204] netlink: 'syz.4.3776': attribute type 29 has an invalid length.
[  353.408386][T15218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  353.411605][T15218] IPv6: NLM_F_CREATE should be set when creating new route
[  353.414762][T15218] IPv6: NLM_F_CREATE should be set when creating new route
[  353.417812][T15218] IPv6: NLM_F_CREATE should be set when creating new route
[  353.693829][T15221] netlink: 'syz.6.3784': attribute type 10 has an invalid length.
[  357.092322][T15267] validate_nla: 3 callbacks suppressed
[  357.092339][T15267] netlink: 'syz.1.3802': attribute type 22 has an invalid length.
[  357.098867][T15267] __nla_validate_parse: 3 callbacks suppressed
[  357.098882][T15267] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3802'.
[  357.294996][T15269] syzkaller1: tun_chr_ioctl cmd 1074025677
[  357.300486][T15269] syzkaller1: linktype set to 780
[  357.321542][T15269] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3803'.
[  357.335992][T15269] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3803'.
[  357.692284][T15296] lo speed is unknown, defaulting to 1000
[  357.813642][ T5865] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1
[  357.814065][ T5865] Bluetooth: hci0: hardware error 0x00
[  358.452020][T15324] netlink: 'syz.6.3824': attribute type 6 has an invalid length.
[  358.456615][T15324] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3824'.
[  359.044623][T15351] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3836'.
[  359.048051][T15351] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3836'.
[  359.165721][T15355] netlink: 'syz.4.3838': attribute type 16 has an invalid length.
[  359.172341][T15355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3838'.
[  359.883590][ T5865] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  361.489274][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3868'.
[  361.758616][T15451] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3880'.
[  361.804004][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'.
[  361.807409][T15453] openvswitch: netlink: Missing key (keys=40, expected=80)
[  361.918578][T15460] netlink: 'syz.1.3885': attribute type 21 has an invalid length.
[  361.928343][T15463] netlink: 'syz.6.3886': attribute type 27 has an invalid length.
[  361.977358][T15469] netlink: 'syz.4.3889': attribute type 21 has an invalid length.
[  362.085154][T15473] netlink: 'syz.6.3892': attribute type 21 has an invalid length.
[  362.536619][T15502] netlink: 'syz.1.3905': attribute type 3 has an invalid length.
[  362.539968][T15502] __nla_validate_parse: 4 callbacks suppressed
[  362.539980][T15502] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3905'.
[  362.853669][T15525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3915'.
[  363.395083][T15542] netlink: 'syz.1.3921': attribute type 4 has an invalid length.
[  363.398368][T15542] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.3921'.
[  364.026124][T15564] netlink: 'syz.1.3930': attribute type 4 has an invalid length.
[  364.065256][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'.
[  364.151272][T15578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3934'.
[  365.064399][T15584] netlink: 492 bytes leftover after parsing attributes in process `syz.1.3937'.
[  365.310717][T15601] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3945'.
[  365.485559][T15607] pim6reg1: entered allmulticast mode
[  365.513963][T15613] netlink: 'syz.4.3951': attribute type 13 has an invalid length.
[  365.517310][T15613] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3951'.
[  365.635718][T15619] netlink: 'syz.1.3954': attribute type 29 has an invalid length.
[  365.640030][T15619] netlink: 'syz.1.3954': attribute type 29 has an invalid length.
[  365.646014][T15619] netlink: 'syz.1.3954': attribute type 29 has an invalid length.
[  365.650392][T15619] netlink: 'syz.1.3954': attribute type 29 has an invalid length.
[  365.709984][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3953'.
[  365.796277][T15621] netlink: 'syz.4.3953': attribute type 10 has an invalid length.
[  365.799085][T15621] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3953'.
[  365.839978][T15626] netlink: 'syz.1.3957': attribute type 3 has an invalid length.
[  366.628209][T15644] : port 1(vlan0) entered blocking state
[  366.630790][T15644] : port 1(vlan0) entered disabled state
[  366.636235][T15644] vlan0: entered allmulticast mode
[  366.640193][T15644] vlan0: entered promiscuous mode
[  368.158004][T15722] __nla_validate_parse: 5 callbacks suppressed
[  368.158021][T15722] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4000'.
[  368.227923][T15726] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4002'.
[  369.298641][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4006'.
[  369.823985][T15744] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4010'.
[  370.320538][T15767] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4021'.
[  370.406930][T15767] bond0 (unregistering): left promiscuous mode
[  370.409739][T15767] bond_slave_0: left promiscuous mode
[  370.412240][T15767] bond_slave_1: left promiscuous mode
[  370.414918][T15767] netdevsim netdevsim4 : left promiscuous mode
[  370.417874][T15767] bond0 (unregistering): left allmulticast mode
[  370.420594][T15767] bond_slave_0: left allmulticast mode
[  370.423083][T15767] bond_slave_1: left allmulticast mode
[  370.425353][T15767] netdevsim netdevsim4 : left allmulticast mode
[  370.429320][T15767] team0: Port device bond0 removed
[  370.434460][T15767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.440963][T15767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.447693][T15767] bond0 (unregistering): (slave ): Releasing backup interface
[  370.451771][T15767] bond0 (unregistering): Released all slaves
[  370.605523][T15779] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.4027'.
[  370.717120][T15788] validate_nla: 5 callbacks suppressed
[  370.717135][T15788] netlink: 'syz.1.4031': attribute type 7 has an invalid length.
[  370.826590][T15798] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4036'.
[  371.649286][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4047'.
[  371.735845][T15832] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4050'.
[  371.758467][T15834] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4051'.
[  372.118750][T15857] netlink: 'syz.1.4062': attribute type 21 has an invalid length.
[  374.847262][T15877] __nla_validate_parse: 7 callbacks suppressed
[  374.847281][T15877] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4070'.
[  374.903109][T15879] IPv6: Can't replace route, no match found
[  375.153072][T15891] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.4077'.
[  375.546554][T15909] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.4086'.
[  375.549723][T15911] openvswitch: netlink: IP tunnel dst address not specified
[  376.744594][T15959] netlink: 'syz.1.4110': attribute type 13 has an invalid length.
[  376.821728][   T52] lo speed is unknown, defaulting to 1000
[  376.824978][ T5911] lo speed is unknown, defaulting to 1000
[  377.483679][T16007] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4131'.
[  378.601187][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.607809][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.930678][T16027] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.4139'.
[  378.986303][T16026] delete_channel: no stack
[  379.195654][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.200595][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.204741][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.208337][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.210944][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.233091][T16033] lo speed is unknown, defaulting to 1000
[  379.393472][T16033] chnl_net:caif_netlink_parms(): no params data found
[  379.437543][T16033] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.440213][T16033] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.443085][T16033] bridge_slave_0: entered allmulticast mode
[  379.445955][T16033] bridge_slave_0: entered promiscuous mode
[  379.449455][T16033] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.451927][T16033] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.454834][T16033] bridge_slave_1: entered allmulticast mode
[  379.457524][T16033] bridge_slave_1: entered promiscuous mode
[  379.476329][T16033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.480878][T16033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.505574][T16033] team0: Port device team_slave_0 added
[  379.510296][T16033] team0: Port device team_slave_1 added
[  379.537622][T16033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.540635][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.550352][T16033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.555999][T16033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.558994][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.569792][T16033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.618246][T16033] hsr_slave_0: entered promiscuous mode
[  379.620930][T16033] hsr_slave_1: entered promiscuous mode
[  379.790553][T16033] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  379.797093][T16033] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  379.801667][T16033] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  379.807027][T16033] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  379.835520][T16033] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.838049][T16033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.841077][T16033] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.843540][T16033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.882306][T16033] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.893507][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.896754][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.905057][T16033] 8021q: adding VLAN 0 to HW filter on device team0
[  379.913161][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.915559][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.927275][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.929726][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.135461][T16033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.230069][T16088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4155'.
[  380.275462][T16033] veth0_vlan: entered promiscuous mode
[  380.285952][T16033] veth1_vlan: entered promiscuous mode
[  380.314918][T16033] veth0_macvtap: entered promiscuous mode
[  380.338742][T16033] veth1_macvtap: entered promiscuous mode
[  380.358611][T16033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.408831][T16033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.452256][ T5863] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.481319][ T5863] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.498923][ T5863] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.515054][T16092] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4157'.
[  380.521723][ T5863] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.800603][ T9737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.806767][ T9737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.835117][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.837824][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.879029][T16101] netlink: 'syz.4.4160': attribute type 10 has an invalid length.
[  380.882412][T16101] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4160'.
[  380.949311][T16101] delete_channel: no stack
[  381.059501][ T5865] Bluetooth: hci2: Malformed LE Event: 0x0d
[  381.099992][T16119] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4168'.
[  381.243031][ T5865] Bluetooth: hci4: command tx timeout
[  381.616853][T16132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4174'.
[  381.620491][T16132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4174'.
[  381.635212][T16134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  381.638700][T16134] IPv6: NLM_F_CREATE should be set when creating new route
[  381.642102][T16134] IPv6: NLM_F_CREATE should be set when creating new route
[  381.645153][T16134] IPv6: NLM_F_CREATE should be set when creating new route
[  382.092086][T16171] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4191'.
[  382.200763][T16184] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4198'.
[  382.227311][ T5865] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7
[  382.810692][T16230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4219'.
[  382.828329][T16230] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4219'.
[  382.868783][T16236] netlink: 'syz.1.4222': attribute type 1 has an invalid length.
[  383.323047][ T5865] Bluetooth: hci4: command tx timeout
[  383.684967][T16298] netlink: 'syz.4.4252': attribute type 21 has an invalid length.
[  383.775411][T16302] -1: renamed from syzkaller0
[  385.251046][T16328] netlink: 'syz.4.4266': attribute type 8 has an invalid length.
[  385.255167][T16328] netlink: 'syz.4.4266': attribute type 3 has an invalid length.
[  385.258700][T16328] __nla_validate_parse: 3 callbacks suppressed
[  385.258712][T16328] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.4266'.
[  385.455537][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.464743][ T5865] Bluetooth: hci4: command tx timeout
[  386.078424][T16353] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4274'.
[  386.506913][T16352] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  386.702051][T16360] syzkaller0: entered promiscuous mode
[  386.704371][T16360] syzkaller0: entered allmulticast mode
[  386.706855][T16362] netlink: 'syz.7.4278': attribute type 3 has an invalid length.
[  386.710191][T16362] netlink: 'syz.7.4278': attribute type 1 has an invalid length.
[  386.874164][ T5865] Bluetooth: hci4: unknown advertising packet type: 0xc5
[  387.484932][ T5865] Bluetooth: hci4: command tx timeout
[  387.888957][T16364] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4280'.
[  387.903608][T16384] syzkaller0: tun_chr_ioctl cmd 1074025677
[  387.908300][T16384] syzkaller0: linktype set to 801
[  387.968008][T16394] netlink: 809 bytes leftover after parsing attributes in process `syz.1.4292'.
[  387.971186][T16394] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.4292'.
[  388.049682][T16393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4291'.
[  388.155468][T16393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  388.235959][T16402] lo speed is unknown, defaulting to 1000
[  390.150152][T16430] netlink: 'syz.7.4304': attribute type 10 has an invalid length.
[  390.258504][T16430] team0 (unregistering): Port device team_slave_0 removed
[  390.264623][T16430] team0 (unregistering): Port device team_slave_1 removed
[  390.290443][T16438] netlink: 948 bytes leftover after parsing attributes in process `syz.4.4308'.
[  390.394310][T16442] netlink: 'syz.4.4311': attribute type 10 has an invalid length.
[  390.397679][T16442] netlink: 'syz.4.4311': attribute type 19 has an invalid length.
[  390.401032][T16442] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4311'.
[  390.743700][T16459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4316'.
[  390.887595][T16461] netlink: 'syz.7.4317': attribute type 2 has an invalid length.
[  390.891821][T16461] netlink: 'syz.7.4317': attribute type 1 has an invalid length.
[  390.896632][T16461] netlink: 'syz.7.4317': attribute type 1 has an invalid length.
[  392.130680][T16493] netlink: 'syz.1.4332': attribute type 10 has an invalid length.
[  392.165437][T16498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4334'.
[  392.169431][T16498] D`: renamed from hsr_slave_1 (while UP)
[  392.600083][T16512] netlink: 'syz.7.4340': attribute type 2 has an invalid length.
[  392.740132][T16522] netlink: 'syz.1.4345': attribute type 1 has an invalid length.
[  392.744553][T16522] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4345'.
[  392.818014][T16527] netlink: 'syz.4.4347': attribute type 1 has an invalid length.
[  392.821319][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4347'.
[  392.949567][T16528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4348'.
[  392.953975][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4348'.
[  393.690808][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'.
[  393.694492][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'.
[  394.105670][T16563] pim6reg0: tun_chr_ioctl cmd 1074025681
[  394.367374][T16559] veth1_to_bond: entered allmulticast mode
[  395.316812][T16636] __nla_validate_parse: 3 callbacks suppressed
[  395.316827][T16636] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4397'.
[  395.532906][T16654] validate_nla: 5 callbacks suppressed
[  395.532926][T16654] netlink: 'syz.4.4405': attribute type 17 has an invalid length.
[  395.539962][T16654] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4405'.
[  395.552391][T16654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  395.601806][T16660] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4408'.
[  395.770747][T16671] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4411'.
[  396.035132][T16680] lo speed is unknown, defaulting to 1000
[  396.167328][T16683] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4414'.
[  396.577613][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4426'.
[  396.589369][ T5865] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  396.670931][T16714] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4428'.
[  396.907044][ T5865] Bluetooth: hci4: adv larger than maximum supported
[  396.907068][ T5865] Bluetooth: hci4: Unknown advertising packet type: 0x18
[  396.910223][ T5865] Bluetooth: hci4: Malformed LE Event: 0x0d
[  397.137218][T16732] C: renamed from team_slave_0
[  397.144633][T16732] netlink: 'syz.7.4436': attribute type 4 has an invalid length.
[  397.147841][T16732] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  397.388798][T16745] netlink: 'syz.4.4441': attribute type 21 has an invalid length.
[  397.392133][T16745] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4441'.
[  397.833356][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4448'.
[  397.968790][T16770] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4453'.
[  398.539682][T16793] netlink: 'syz.4.4464': attribute type 39 has an invalid length.
[  399.610458][T16832] netlink: 'syz.7.4480': attribute type 21 has an invalid length.
[  400.154666][T16850] netlink: 'syz.1.4487': attribute type 40 has an invalid length.
[  401.317930][T16862] __nla_validate_parse: 4 callbacks suppressed
[  401.317945][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4492'.
[  401.963367][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4508'.
[  402.062356][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4514'.
[  402.187766][T16927] : renamed from pim6reg1
[  403.061843][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.128444][T16957] netlink: 'syz.7.4533': attribute type 21 has an invalid length.
[  403.157507][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.226270][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.275270][   T12] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.781248][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  403.788129][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  403.795753][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  403.799875][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  403.809064][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  403.912979][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  403.919404][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  403.934729][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  403.937519][T16971] lo speed is unknown, defaulting to 1000
[  403.947633][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  403.953754][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  404.035311][T16976] lo speed is unknown, defaulting to 1000
[  404.601655][T16971] chnl_net:caif_netlink_parms(): no params data found
[  404.871232][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.874609][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.879886][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.883882][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.901162][   T12] veth0_macvtap: left promiscuous mode
[  405.145704][   T12] team_slave_1 (unregistering): left promiscuous mode
[  405.148544][   T12] team_slave_1 (unregistering): left allmulticast mode
[  405.152076][   T12] team0 (unregistering): Port device team_slave_1 removed
[  405.188072][   T12] C (unregistering): left promiscuous mode
[  405.190515][   T12] C (unregistering): left allmulticast mode
[  405.195892][   T12] team0 (unregistering): Port device C removed
[  405.496909][T17019] C: renamed from team_slave_0
[  405.500720][T17019] netlink: 'syz.1.4548': attribute type 3 has an invalid length.
[  405.504211][T17019] netlink: 'syz.1.4548': attribute type 1 has an invalid length.
[  405.507532][T17019] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4548'.
[  405.533101][T16971] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.538105][T16971] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.541364][T16971] bridge_slave_0: entered allmulticast mode
[  405.546818][T16971] bridge_slave_0: entered promiscuous mode
[  405.570154][T16971] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.576872][T16971] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.580212][T16971] bridge_slave_1: entered allmulticast mode
[  405.587245][T16971] bridge_slave_1: entered promiscuous mode
[  405.644861][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.657160][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.698077][T16971] team0: Port device team_slave_0 added
[  405.721147][T16971] team0: Port device team_slave_1 added
[  405.763649][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.767066][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.808017][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.815619][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.818547][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.835780][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.868459][T16976] chnl_net:caif_netlink_parms(): no params data found
[  405.883254][ T5865] Bluetooth: hci0: command tx timeout
[  405.929719][T16971] hsr_slave_0: entered promiscuous mode
[  405.935638][T16971] hsr_slave_1: entered promiscuous mode
[  405.938166][T16971] debugfs: 'hsr0' already exists in 'hsr'
[  405.940323][T16971] Cannot create hsr debugfs directory
[  406.011059][T17042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4555'.
[  406.044231][ T5865] Bluetooth: hci4: command tx timeout
[  406.121765][T16976] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.124931][T16976] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.127469][T16976] bridge_slave_0: entered allmulticast mode
[  406.130406][T16976] bridge_slave_0: entered promiscuous mode
[  406.151515][T16976] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.159522][T16976] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.162186][T16976] bridge_slave_1: entered allmulticast mode
[  406.165362][T16976] bridge_slave_1: entered promiscuous mode
[  406.213993][T16976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.220620][T16976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.229038][T17050] netlink: 'syz.1.4557': attribute type 29 has an invalid length.
[  406.289281][T16976] team0: Port device team_slave_0 added
[  406.324739][T16976] team0: Port device team_slave_1 added
[  406.402038][T16976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.413240][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.434038][T16976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.452280][T17063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4561'.
[  406.452619][T16976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.463965][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.492623][T16976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.520376][T16971] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  406.542980][T16971] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  406.567949][T16971] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  406.589216][T16971] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  406.600032][T16976] hsr_slave_0: entered promiscuous mode
[  406.603845][T16976] hsr_slave_1: entered promiscuous mode
[  406.613369][T16976] debugfs: 'hsr0' already exists in 'hsr'
[  406.615859][T16976] Cannot create hsr debugfs directory
[  406.866820][T16971] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.928196][T16971] 8021q: adding VLAN 0 to HW filter on device team0
[  406.938041][T16976] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  406.951019][T16976] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  406.970396][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.973466][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.061524][T16976] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  407.076148][T16976] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  407.108460][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.111564][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.240014][T16976] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.272294][T16976] 8021q: adding VLAN 0 to HW filter on device team0
[  407.300015][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.302585][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.307542][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.310423][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.561684][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.655469][T16976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.963421][ T5865] Bluetooth: hci0: command tx timeout
[  407.967247][T16971] veth0_vlan: entered promiscuous mode
[  407.971995][T16971] veth1_vlan: entered promiscuous mode
[  408.018229][T16971] veth0_macvtap: entered promiscuous mode
[  408.030693][T16971] veth1_macvtap: entered promiscuous mode
[  408.055878][T16976] veth0_vlan: entered promiscuous mode
[  408.065579][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.076036][T16976] veth1_vlan: entered promiscuous mode
[  408.084071][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.096884][ T5863] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.100609][ T5863] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.109425][ T5863] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.112384][ T5863] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.123128][ T5865] Bluetooth: hci4: command tx timeout
[  408.165949][T16976] veth0_macvtap: entered promiscuous mode
[  408.173410][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.176799][T16976] veth1_macvtap: entered promiscuous mode
[  408.186909][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.218228][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.220781][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.221731][T16976] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.235559][T16976] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.247277][ T5876] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.250701][ T5876] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.256831][ T5876] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.264188][ T5876] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.400444][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.420799][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.495249][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.498611][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.619274][T17152] netlink: 'syz.1.4572': attribute type 46 has an invalid length.
[  408.621829][T17152] netlink: 212868 bytes leftover after parsing attributes in process `syz.1.4572'.
[  409.867737][T17202] netlink: 51563 bytes leftover after parsing attributes in process `syz.1.4592'.
[  410.131553][ T5865] Bluetooth: hci0: command tx timeout
[  410.253905][ T5865] Bluetooth: hci4: command tx timeout
[  410.716946][T17239] netlink: 'syz.9.4608': attribute type 39 has an invalid length.
[  411.137483][T17247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4611'.
[  411.739448][T17266] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4620'.
[  411.913809][T17275] syzkaller0: entered promiscuous mode
[  411.916236][T17275] syzkaller0: entered allmulticast mode
[  412.062128][T17283] netlink: 'syz.1.4628': attribute type 2 has an invalid length.
[  412.067735][T17283] netlink: 'syz.1.4628': attribute type 1 has an invalid length.
[  412.071163][T17283] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4628'.
[  412.075445][T17283] nbd: must specify at least one socket
[  412.203171][ T5865] Bluetooth: hci0: command tx timeout
[  412.283126][ T5865] Bluetooth: hci4: command tx timeout
[  413.174919][T17286] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4629'.
[  413.215431][T17289] netlink: 'syz.1.4630': attribute type 21 has an invalid length.
[  414.076396][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4634'.
[  414.080319][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4634'.
[  414.191381][T17308] sock: sock_set_timeout: `syz.9.4637' (pid 17308) tries to set negative timeout
[  414.274349][T17310] : entered promiscuous mode
[  414.367745][T17318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4641'.
[  414.527038][T17325] netlink: 'syz.1.4644': attribute type 4 has an invalid length.
[  414.542777][T17325] netlink: 'syz.1.4644': attribute type 3 has an invalid length.
[  414.552088][T17325] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4644'.
[  415.166630][T17375] siw: device registration error -23
[  415.486855][T17399] netlink: 'syz.1.4678': attribute type 21 has an invalid length.
[  415.490188][T17399] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4678'.
[  415.496842][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4678'.
[  415.553852][T17403] netlink: 'syz.9.4679': attribute type 2 has an invalid length.
[  415.557454][T17403] netlink: 110008 bytes leftover after parsing attributes in process `syz.9.4679'.
[  416.218690][T17431] netlink: 'syz.8.4693': attribute type 1 has an invalid length.
[  416.450489][T17447] netlink: 'syz.8.4702': attribute type 29 has an invalid length.
[  416.475851][T17447] netlink: 'syz.8.4702': attribute type 29 has an invalid length.
[  416.808056][T17466] netlink: 'syz.8.4709': attribute type 21 has an invalid length.
[  416.811409][T17466] __nla_validate_parse: 1 callbacks suppressed
[  416.811420][T17466] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4709'.
[  416.818018][T17466] netlink: 'syz.8.4709': attribute type 5 has an invalid length.
[  416.821335][T17466] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4709'.
[  417.149853][T17477] netlink: 'syz.1.4713': attribute type 13 has an invalid length.
[  417.153604][T17477] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4713'.
[  417.227398][T17483] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4716'.
[  417.470748][T17505] netlink: 'syz.9.4728': attribute type 11 has an invalid length.
[  417.476505][T17505] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4728'.
[  417.500027][T17509] Q6\bY4: renamed from lo (while UP)
[  418.742439][T17535] netlink: 14556 bytes leftover after parsing attributes in process `syz.8.4739'.
[  419.033236][T17542] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4741'.
[  419.352020][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4748'.
[  420.193230][T17590] validate_nla: 1 callbacks suppressed
[  420.193244][T17590] netlink: 'syz.9.4755': attribute type 4 has an invalid length.
[  420.198989][T17590] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4755'.
[  420.301486][T17590] .`: renamed from bond0 (while UP)
[  420.305116][T17598] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4758'.
[  422.471931][ T5865] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  422.644822][T17745] __nla_validate_parse: 1 callbacks suppressed
[  422.644837][T17745] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4809'.
[  422.660016][T17745] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  423.487372][T17865] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4827'.
[  423.635172][T17878] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4833'.
[  424.021056][T17885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.030952][ T5865] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  424.273132][T17894] netlink: 196 bytes leftover after parsing attributes in process `syz.9.4839'.
[  425.355461][T17922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4851'.
[  425.362725][T17922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4851'.
[  426.210331][T17956] netlink: 'syz.1.4867': attribute type 39 has an invalid length.
[  426.822730][T17970] netlink: 'syz.9.4873': attribute type 15 has an invalid length.
[  426.826941][T17970] netlink: 'syz.9.4873': attribute type 7 has an invalid length.
[  426.830166][T17970] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4873'.
[  427.044575][T17980] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4878'.
[  427.278316][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4885'.
[  427.281647][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4885'.
[  427.446520][ T5865] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6
[  427.685560][T18019] syzkaller0: entered promiscuous mode
[  427.690051][T18019] syzkaller0: entered allmulticast mode
[  428.534496][T18023] __nla_validate_parse: 1 callbacks suppressed
[  428.534514][T18023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4899'.
[  428.855277][T18030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4902'.
[  428.906544][T18031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4902'.
[  429.281563][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4906'.
[  429.657630][T18065] netlink: 404 bytes leftover after parsing attributes in process `syz.1.4914'.
[  429.729774][T18072] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.4918'.
[  429.971791][T18089] lo speed is unknown, defaulting to 1000
[  429.999487][T18087] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  430.004883][T18087] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  430.362450][T18104] netlink: 'syz.1.4932': attribute type 11 has an invalid length.
[  430.367414][T18104] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4932'.
[  430.680342][T18111] netlink: 'syz.1.4935': attribute type 29 has an invalid length.
[  430.688328][T18111] netlink: 'syz.1.4935': attribute type 29 has an invalid length.
[  431.183349][T18148] delete_channel: no stack
[  431.374918][T18179] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4968'.
[  431.378904][T18179] netlink: zone id is out of range
[  431.380846][T18179] netlink: zone id is out of range
[  431.392735][T18179] netlink: zone id is out of range
[  431.394864][T18179] netlink: zone id is out of range
[  431.396916][T18179] netlink: zone id is out of range
[  431.399069][T18179] netlink: zone id is out of range
[  431.420230][T18179] netlink: zone id is out of range
[  431.438791][T18179] netlink: zone id is out of range
[  431.441074][T18179] netlink: zone id is out of range
[  431.447686][T18179] netlink: zone id is out of range
[  431.474220][T18184] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4970'.
[  431.594856][T18190] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4973'.
[  434.145219][T18308] : renamed from bond_slave_0 (while UP)
[  434.260286][T18316] __nla_validate_parse: 6 callbacks suppressed
[  434.260305][T18316] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5029'.
[  434.352749][T18322] netlink: 'syz.8.5032': attribute type 10 has an invalid length.
[  434.357919][T18322] veth1_macvtap: left promiscuous mode
[  434.371388][ T5865] Bluetooth: hci4: adv larger than maximum supported
[  434.514754][T18326] syzkaller0: entered promiscuous mode
[  434.519848][T18326] syzkaller0: entered allmulticast mode
[  434.758110][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5043'.
[  434.888014][T18348] netlink: 'syz.8.5045': attribute type 16 has an invalid length.
[  434.891405][T18348] netlink: 'syz.8.5045': attribute type 3 has an invalid length.
[  434.894980][T18348] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5045'.
[  435.059302][T18353] netlink: 'syz.9.5044': attribute type 16 has an invalid length.
[  435.062021][T18353] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5044'.
[  435.069088][T18353] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.178290][T18363] netlink: 'syz.8.5052': attribute type 22 has an invalid length.
[  435.181491][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5052'.
[  435.279582][T18367] netlink: 'syz.8.5054': attribute type 12 has an invalid length.
[  435.282308][T18367] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5054'.
[  435.313752][T18367] syz.8.5054 (18367) used obsolete PPPIOCDETACH ioctl
[  435.773685][T18374] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5057'.
[  435.889059][T18388] netlink: 'syz.8.5064': attribute type 4 has an invalid length.
[  435.892254][T18388] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5064'.
[  436.251441][T18403] netlink: 208344 bytes leftover after parsing attributes in process `syz.8.5071'.
[  436.287757][T18405] netlink: 'syz.9.5072': attribute type 2 has an invalid length.
[  436.290657][T18405] netlink: 'syz.9.5072': attribute type 1 has an invalid length.
[  436.294455][T18405] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.5072'.
[  436.298643][T18405] nbd: couldn't find device at index 65542
[  436.908791][T18438] netlink: 'syz.1.5088': attribute type 1 has an invalid length.
[  437.046354][T18446] netlink: 'syz.8.5092': attribute type 11 has an invalid length.
[  437.061801][T18446] netlink: 'syz.8.5092': attribute type 11 has an invalid length.
[  437.580591][T18501] veth0_vlan: left promiscuous mode
[  437.584065][T18501] veth0_vlan: entered promiscuous mode
[  437.588808][T18501] team0: Device veth0_vlan failed to register rx_handler
[  437.736258][T18495] dummy0: entered promiscuous mode
[  437.759046][T18495] bridge0: port 3(dummy0) entered blocking state
[  437.773636][T18495] bridge0: port 3(dummy0) entered disabled state
[  437.796245][T18495] dummy0: entered allmulticast mode
[  437.922585][T18495] bridge0: port 3(dummy0) entered blocking state
[  437.927663][T18495] bridge0: port 3(dummy0) entered forwarding state
[  439.387518][T18551] __nla_validate_parse: 6 callbacks suppressed
[  439.387528][T18551] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5141'.
[  439.393979][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5141'.
[  439.411774][T18552] netdevsim netdevsim9 : renamed from netdevsim0 (while UP)
[  439.451835][T18554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5140'.
[  439.600261][T18569] validate_nla: 2 callbacks suppressed
[  439.600279][T18569] netlink: 'syz.9.5148': attribute type 10 has an invalid length.
[  439.606786][T18569] netlink: 55 bytes leftover after parsing attributes in process `syz.9.5148'.
[  439.995095][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  439.998664][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  441.215836][T18631] wg0 speed is unknown, defaulting to 1000
[  441.218386][T18631] wg0 speed is unknown, defaulting to 1000
[  441.224258][T18631] wg0 speed is unknown, defaulting to 1000
[  441.258790][T18637] netlink: 'syz.1.5179': attribute type 9 has an invalid length.
[  441.261536][T18637] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.5179'.
[  441.296042][T18631] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  441.575407][T18631] wg0 speed is unknown, defaulting to 1000
[  441.594721][T18631] wg0 speed is unknown, defaulting to 1000
[  441.603435][T18631] wg0 speed is unknown, defaulting to 1000
[  441.614021][T18631] wg0 speed is unknown, defaulting to 1000
[  441.625938][T18631] wg0 speed is unknown, defaulting to 1000
[  441.636082][T18631] wg0 speed is unknown, defaulting to 1000
[  444.311394][T18679] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5198'.
[  444.329460][T18679] : left promiscuous mode
[  444.387429][T18681] syzkaller0: entered promiscuous mode
[  444.390322][T18681] syzkaller0: entered allmulticast mode
[  444.727968][T18689] netlink: 830 bytes leftover after parsing attributes in process `syz.8.5202'.
[  444.732165][T18689] : entered promiscuous mode
[  444.734536][T18689] bond_slave_1: entered promiscuous mode
[  445.062242][ T5865] Bluetooth: hci4: unexpected event 0x3c length: 15 > 7
[  445.127772][T18707] netlink: 'syz.8.5211': attribute type 10 has an invalid length.
[  445.138834][T18707] netlink: 55 bytes leftover after parsing attributes in process `syz.8.5211'.
[  445.346289][T18719] netlink: 15999 bytes leftover after parsing attributes in process `syz.9.5217'.
[  445.499156][T18727] netlink: 'syz.8.5221': attribute type 29 has an invalid length.
[  445.506578][T18727] netlink: 'syz.8.5221': attribute type 29 has an invalid length.
[  445.510353][T18727] netlink: 'syz.8.5221': attribute type 29 has an invalid length.
[  445.586196][T18735] netlink: 'syz.8.5225': attribute type 3 has an invalid length.
[  446.438090][T18755] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5233'.
[  446.900518][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5243'.
[  447.308713][T18796] netlink: 'syz.9.5252': attribute type 3 has an invalid length.
[  447.312208][T18796] netlink: 'syz.9.5252': attribute type 1 has an invalid length.
[  447.316446][T18796] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.5252'.
[  447.739075][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5268'.
[  447.978931][T18846] delete_channel: no stack
[  448.038563][T18846] delete_channel: no stack
[  448.101151][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5280'.
[  448.431176][T18872] netlink: 'syz.9.5287': attribute type 2 has an invalid length.
[  448.435916][T18872] netlink: 'syz.9.5287': attribute type 1 has an invalid length.
[  448.575939][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5291'.
[  448.691450][T18891] netlink: 'syz.1.5296': attribute type 1 has an invalid length.
[  448.738233][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5297'.
[  450.892906][T18950] netlink: 'syz.1.5321': attribute type 10 has an invalid length.
[  451.317521][T18956] lo speed is unknown, defaulting to 1000
[  451.803341][ T6049] wlan1: Trigger new scan to find an IBSS to join
[  452.051685][T18956] wg0 speed is unknown, defaulting to 1000
[  452.615108][T18996] netlink: 'syz.9.5339': attribute type 12 has an invalid length.
[  452.621216][T18996] __nla_validate_parse: 1 callbacks suppressed
[  452.621225][T18996] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5339'.
[  452.998288][T19006] netlink: 196 bytes leftover after parsing attributes in process `syz.9.5344'.
[  453.090038][T19012] netlink: 'syz.9.5347': attribute type 10 has an invalid length.
[  453.285818][T19016] netlink: 'syz.8.5348': attribute type 1 has an invalid length.
[  453.288622][T19016] netlink: 201392 bytes leftover after parsing attributes in process `syz.8.5348'.
[  454.159522][T19046] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.5361'.
[  454.843396][   T70] wlan1: Trigger new scan to find an IBSS to join
[  455.181082][T19066] netlink: 188 bytes leftover after parsing attributes in process `syz.9.5371'.
[  455.261898][T19072] netlink: 'syz.9.5374': attribute type 1 has an invalid length.
[  455.265919][T19072] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.5374'.
[  455.542017][T19090] net_ratelimit: 16 callbacks suppressed
[  455.542030][T19090] openvswitch: netlink: Message has 4 unknown bytes.
[  455.610010][T19093] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5384'.
[  455.634263][T19093] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5384'.
[  455.774499][T19100] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  456.140681][T19106] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5390'.
[  456.415893][T19130] netlink: 'syz.1.5402': attribute type 10 has an invalid length.
[  456.488872][T19136] netlink: 324 bytes leftover after parsing attributes in process `syz.9.5405'.
[  457.599374][T19163] sock: sock_timestamping_bind_phc: sock not bind to device
[  457.809242][   T70] wlan1: Creating new IBSS network, BSSID 12:88:59:f1:8d:8f
[  458.344260][T19199] netlink: 'syz.9.5434': attribute type 13 has an invalid length.
[  458.347023][T19199] __nla_validate_parse: 4 callbacks suppressed
[  458.347031][T19199] netlink: 24859 bytes leftover after parsing attributes in process `syz.9.5434'.
[  458.360172][T19203] netlink: 'syz.8.5436': attribute type 10 has an invalid length.
[  458.363307][T19203] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5436'.
[  458.569058][T19213] netlink: 2451 bytes leftover after parsing attributes in process `syz.8.5441'.
[  458.889750][ T5865] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9
[  460.220341][T19257] can: request_module (can-proto-0) failed.
[  461.559925][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5477'.
[  461.827741][T19320] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.5486'.
[  461.840339][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5485'.
[  461.916362][T19323] syzkaller0: entered promiscuous mode
[  461.918265][T19323] syzkaller0: entered allmulticast mode
[  463.068929][T19340] tap0: tun_chr_ioctl cmd 2147767521
[  463.766813][T19386] netlink: 'syz.1.5516': attribute type 12 has an invalid length.
[  463.777826][T19386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5516'.
[  464.459325][T19413] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.5525'.
[  464.465146][T19413] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.5525'.
[  465.152445][T19432] netlink: 'syz.9.5533': attribute type 5 has an invalid length.
[  465.157015][T19432] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5533'.
[  465.175788][T19434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5534'.
[  465.225053][T19438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5536'.
[  465.309635][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5540'.
[  465.317722][T19446] netlink: 33 bytes leftover after parsing attributes in process `syz.9.5540'.
[  465.320738][T19446] netlink: 33 bytes leftover after parsing attributes in process `syz.9.5540'.
[  466.893852][T19519] netlink: 'syz.8.5573': attribute type 21 has an invalid length.
[  466.896610][T19519] netlink: 'syz.8.5573': attribute type 4 has an invalid length.
[  467.019603][T19531] netlink: 'syz.8.5579': attribute type 3 has an invalid length.
[  467.027864][T19531] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5579'.
[  467.031716][T19531] netlink: 'syz.8.5579': attribute type 3 has an invalid length.
[  468.181655][T19593] netlink: 'syz.9.5609': attribute type 10 has an invalid length.
[  468.246950][T19599] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  468.249747][T19599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.382815][T19619] openvswitch: netlink: Flow key attr not present in new flow.
[  468.579181][T19643] netlink: 'syz.8.5633': attribute type 1 has an invalid length.
[  468.613619][   T33] audit: type=1107 audit(1755321499.881:5): pid=19646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  468.937548][T19670] netlink: 'syz.1.5646': attribute type 2 has an invalid length.
[  468.941739][T19670] __nla_validate_parse: 11 callbacks suppressed
[  468.941791][T19670] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.5646'.
[  469.682176][T19691] netlink: 'syz.8.5653': attribute type 6 has an invalid length.
[  469.685823][T19691] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.5653'.
[  472.009177][T19756] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5681'.
[  472.056050][T19754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.110441][T19757] netlink: 'syz.8.5679': attribute type 2 has an invalid length.
[  472.132611][T19757] netlink: 'syz.8.5679': attribute type 3 has an invalid length.
[  472.135679][T19757] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5679'.
[  472.796573][T19804] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5704'.
[  472.803343][T19804] hsr_slave_0: left promiscuous mode
[  472.811595][T19804] hsr_slave_1: left promiscuous mode
[  473.296575][T19846] netlink: 'syz.8.5725': attribute type 1 has an invalid length.
[  473.299347][T19846] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.5725'.
[  473.375685][T19852] netlink: 'syz.8.5728': attribute type 3 has an invalid length.
[  473.378970][T19852] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.5728'.
[  473.416517][ T5865] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  473.419113][ T5865] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  473.826684][T19861] wg0 speed is unknown, defaulting to 1000
[  475.697603][T19913] netlink: 'syz.9.5755': attribute type 39 has an invalid length.
[  475.751022][T19913] veth0_macvtap: left promiscuous mode
[  475.850923][T19921] netlink: 'syz.1.5758': attribute type 21 has an invalid length.
[  475.856894][T19921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5758'.
[  476.025544][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5763'.
[  476.029955][T19934] netlink: 2 bytes leftover after parsing attributes in process `syz.9.5764'.
[  476.210227][T19943] Dead loop on virtual device ip6_vti0, fix it urgently!
[  476.211780][T19941] delete_channel: no stack
[  476.217179][T19941] delete_channel: no stack
[  476.225154][T19941] netlink: 'syz.9.5767': attribute type 6 has an invalid length.
[  476.227825][T19941] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5767'.
[  476.365814][T19952] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5772'.
[  476.458402][T19956] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5774'.
[  476.502940][T19952] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5772'.
[  476.507877][T19952] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5772'.
[  476.545299][T19962] netlink: 64535 bytes leftover after parsing attributes in process `syz.9.5777'.
[  477.458307][T19996] IPv6: NLM_F_CREATE should be specified when creating new route
[  477.461776][T19996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  477.464934][T19996] IPv6: NLM_F_CREATE should be set when creating new route
[  477.558386][T20006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5798'.
[  477.631274][T20015] netlink: 'syz.8.5801': attribute type 16 has an invalid length.
[  477.951439][T20021] syzkaller0: entered promiscuous mode
[  477.953941][T20021] syzkaller0: entered allmulticast mode
[  478.542679][T20052] netlink: ct family unspecified
[  478.544500][T20052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.214377][T20102] sctp: [Deprecated]: syz.1.5840 (pid 20102) Use of struct sctp_assoc_value in delayed_ack socket option.
[  479.214377][T20102] Use struct sctp_sack_info instead
[  479.779181][T20115] netlink: 'syz.8.5846': attribute type 21 has an invalid length.
[  480.342427][T20136] team_slave_0: entered allmulticast mode
[  480.351739][T20136] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  480.380082][T20140] netlink: 'syz.1.5858': attribute type 11 has an invalid length.
[  480.533375][T20156] netlink: 'syz.1.5866': attribute type 2 has an invalid length.
[  480.937100][ T5865] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  481.421974][T20180] netlink: 'syz.1.5875': attribute type 19 has an invalid length.
[  481.425575][T20180] __nla_validate_parse: 5 callbacks suppressed
[  481.425591][T20180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5875'.
[  482.334186][T20193] !: renamed from bond_slave_0
[  483.002648][ T5869] Bluetooth: hci0: command tx timeout
[  485.901351][T20205] wg0 speed is unknown, defaulting to 1000
[  486.011464][T20267] netlink: 'syz.9.5909': attribute type 21 has an invalid length.
[  486.105684][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  486.120912][T20277] tc_dump_action: action bad kind
[  486.330639][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5923'.
[  486.473723][T20309] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5926'.
[  486.476783][T20309] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5926'.
[  486.546490][T20313] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5928'.
[  486.613175][T20317] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5930'.
[  486.617095][T20317] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5930'.
[  487.742146][T20382] syzkaller1: tun_chr_ioctl cmd 1074025677
[  487.745074][T20382] syzkaller1: linktype set to 780
[  487.751328][T20382] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5960'.
[  487.757676][T20382] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5960'.
[  487.759831][T20386] netlink: 'syz.9.5962': attribute type 1 has an invalid length.
[  487.761926][T20382] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5960'.
[  488.037681][ T5869] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  488.038132][T20398] @: renamed from bond_slave_0 (while UP)
[  488.081422][T20403] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5970'.
[  488.369805][T20424] : entered promiscuous mode
[  488.522140][T20437] netlink: 'syz.1.5986': attribute type 1 has an invalid length.
[  488.534571][T20437] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.5986'.
[  488.574267][T20440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.752345][T20452] netlink: 'syz.9.5993': attribute type 25 has an invalid length.
[  489.062226][T20477] netlink: 'syz.9.6004': attribute type 4 has an invalid length.
[  490.517089][T20491] pim6reg1: entered allmulticast mode
[  490.771082][ T5869] Bluetooth: hci0: adv larger than maximum supported
[  490.940531][T20544] dummy0: left allmulticast mode
[  490.951993][T20544] bridge0: port 3(dummy0) entered disabled state
[  490.957732][T20544] bridge_slave_1: left allmulticast mode
[  490.959632][T20544] bridge_slave_1: left promiscuous mode
[  490.961577][T20544] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.966687][T20544] bridge_slave_0: left promiscuous mode
[  490.968624][T20544] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.591628][T20570] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  491.692323][T20578] netlink: 'syz.8.6051': attribute type 6 has an invalid length.
[  491.700568][T20578] netlink: 'syz.8.6051': attribute type 7 has an invalid length.
[  491.703566][T20578] __nla_validate_parse: 7 callbacks suppressed
[  491.703573][T20578] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6051'.
[  491.708988][T20578] netlink: 130080 bytes leftover after parsing attributes in process `syz.8.6051'.
[  491.714110][T20578] netlink: 'syz.8.6051': attribute type 6 has an invalid length.
[  491.717351][T20578] netlink: 'syz.8.6051': attribute type 7 has an invalid length.
[  491.726057][T20578] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6051'.
[  491.840026][T20593] netlink: 'syz.1.6058': attribute type 21 has an invalid length.
[  491.843011][T20593] IPv6: NLM_F_CREATE should be specified when creating new route
[  492.213563][T20611] netlink: 'syz.1.6065': attribute type 21 has an invalid length.
[  492.455888][T20631] sit0: entered allmulticast mode
[  492.474032][T20631] sit0: entered promiscuous mode
[  492.807683][T20653] syzkaller0: entered promiscuous mode
[  492.809765][T20653] syzkaller0: entered allmulticast mode
[  492.829800][T20657] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6088'.
[  493.978747][T20672] netlink: 'syz.9.6095': attribute type 29 has an invalid length.
[  494.132099][T20682] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6098'.
[  494.152850][T20682] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  494.441866][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6108'.
[  494.475314][T20706] netlink: 'syz.9.6109': attribute type 29 has an invalid length.
[  494.479852][T20706] netlink: 'syz.9.6109': attribute type 29 has an invalid length.
[  494.485399][T20706] netlink: 'syz.9.6109': attribute type 29 has an invalid length.
[  494.635527][T20717] netlink: 'syz.1.6114': attribute type 21 has an invalid length.
[  494.638566][T20717] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6114'.
[  494.669131][T20721] netlink: 'syz.1.6116': attribute type 4 has an invalid length.
[  494.687276][T20723] netlink: 196 bytes leftover after parsing attributes in process `syz.9.6117'.
[  494.751299][T20729] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6120'.
[  494.756705][T20729] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6120'.
[  495.647530][T20740] netlink: 'syz.9.6124': attribute type 2 has an invalid length.
[  495.651907][T20740] netlink: 'syz.9.6124': attribute type 8 has an invalid length.
[  496.629685][T20791] netlink: 'syz.9.6149': attribute type 5 has an invalid length.
[  496.681614][T20801] netlink: 'syz.8.6152': attribute type 3 has an invalid length.
[  497.116913][T20827] __nla_validate_parse: 4 callbacks suppressed
[  497.116925][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6166'.
[  497.531277][T20846] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6174'.
[  497.567989][T20848] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6175'.
[  497.920111][T20873] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6187'.
[  497.985745][T20879] sctp: [Deprecated]: syz.8.6190 (pid 20879) Use of int in maxseg socket option.
[  497.985745][T20879] Use struct sctp_assoc_value instead
[  498.615570][T20889] sit0: entered allmulticast mode
[  498.662949][T20889] sit0: entered promiscuous mode
[  498.708651][T20895] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.6196'.
[  499.454886][T20911] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.614854][T20915] validate_nla: 1 callbacks suppressed
[  499.614909][T20915] netlink: 'syz.1.6203': attribute type 10 has an invalid length.
[  499.845567][T20933] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.6212'.
[  500.095289][ T5869] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5
[  500.265107][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6217'.
[  501.012441][T20954] netlink: 'syz.9.6221': attribute type 2 has an invalid length.
[  501.019822][T20954] netlink: 'syz.9.6221': attribute type 1 has an invalid length.
[  501.023724][T20954] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.6221'.
[  501.028148][T20954] nbd: illegal input index -404748436
[  501.091599][T20956] netlink: 'syz.9.6222': attribute type 10 has an invalid length.
[  501.430562][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  501.434552][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  501.800316][T20936] Set syz1 is full, maxelem 65536 reached
[  505.501436][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6241'.
[  505.561326][T21012] IPv6: NLM_F_REPLACE set, but no existing node found!
[  505.629818][T21019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.634590][ T5869] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  505.864559][T21028] netlink: 67 bytes leftover after parsing attributes in process `syz.9.6251'.
[  506.009984][T21038] netlink: 'syz.1.6256': attribute type 11 has an invalid length.
[  506.022827][T21038] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6256'.
[  506.125727][T21048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6261'.
[  506.304143][T21063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6268'.
[  506.315553][T21067] netlink: 'syz.9.6270': attribute type 3 has an invalid length.
[  506.320930][T21067] netlink: 'syz.9.6270': attribute type 8 has an invalid length.
[  506.324577][T21067] netlink: 'syz.9.6270': attribute type 6 has an invalid length.
[  506.327625][T21067] netlink: 144448 bytes leftover after parsing attributes in process `syz.9.6270'.
[  506.529395][ T5869] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  506.577225][T21083] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  506.718155][T21087] netlink: 'syz.8.6278': attribute type 46 has an invalid length.
[  507.281697][T21096] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  507.403577][ T5869] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  507.905537][T21158] netlink: 'syz.9.6309': attribute type 10 has an invalid length.
[  507.910862][T21158] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6309'.
[  507.920047][T21158] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  508.665303][T21144] wg0 speed is unknown, defaulting to 1000
[  508.767038][ T5865] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  509.758303][T21195] netlink: 'syz.9.6327': attribute type 1 has an invalid length.
[  509.921037][T21201] netlink: 'syz.9.6330': attribute type 10 has an invalid length.
[  509.929131][T21201] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6330'.
[  509.933439][T21208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  509.968789][T21201] batman_adv: batadv0: Adding interface: virt_wifi0
[  509.980686][T21201] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.995451][T21201] batman_adv: batadv0: Interface activated: virt_wifi0
[  510.024757][T21213] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.6330'.
[  510.138643][T21221] netlink: 'syz.8.6338': attribute type 3 has an invalid length.
[  510.141760][T21221] netlink: 4264 bytes leftover after parsing attributes in process `syz.8.6338'.
[  510.148513][T21221] netlink: 'syz.8.6338': attribute type 3 has an invalid length.
[  510.346556][T21227] netlink: 'syz.8.6341': attribute type 6 has an invalid length.
[  510.980465][T21256] __nla_validate_parse: 2 callbacks suppressed
[  510.980483][T21256] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6354'.
[  511.099387][T21256]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.105460][T21256] bond_slave_1: left promiscuous mode
[  511.110860][T21262] netlink: 55 bytes leftover after parsing attributes in process `syz.9.6355'.
[  511.117927][T21256]  (unregistering): (slave macvlan0): Releasing backup interface
[  511.121466][T21256] macvlan0: left promiscuous mode
[  511.127059][T21256] veth1_vlan: left allmulticast mode
[  511.132840][T21256]  (unregistering): (slave geneve0): Releasing backup interface
[  511.139975][T21256]  (unregistering): (slave batadv_slave_0): Releasing backup interface
[  511.146477][T21256] batadv_slave_0: left promiscuous mode
[  511.151401][T21256]  (unregistering): Released all slaves
[  511.520421][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6360'.
[  511.740961][T21275] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6361'.
[  512.061481][T21289] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6368'.
[  512.116753][T21293] validate_nla: 1 callbacks suppressed
[  512.116765][T21293] netlink: 'syz.1.6370': attribute type 1 has an invalid length.
[  512.121164][T21293] netlink: 'syz.1.6370': attribute type 2 has an invalid length.
[  512.128479][T21293] netlink: 'syz.1.6370': attribute type 7 has an invalid length.
[  512.131829][T21293] netlink: 37 bytes leftover after parsing attributes in process `syz.1.6370'.
[  512.136041][T21293] netlink: 'syz.1.6370': attribute type 1 has an invalid length.
[  512.138920][T21293] netlink: 'syz.1.6370': attribute type 2 has an invalid length.
[  512.141470][T21293] netlink: 130076 bytes leftover after parsing attributes in process `syz.1.6370'.
[  512.170598][T21296] netlink: 'syz.1.6372': attribute type 21 has an invalid length.
[  512.173567][T21297] netlink: 'syz.9.6371': attribute type 2 has an invalid length.
[  512.176640][T21296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6372'.
[  512.201594][T21299] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6373'.
[  512.376656][T21308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6377'.
[  512.550507][T21320] netlink: 'syz.1.6383': attribute type 10 has an invalid length.
[  512.565367][T21318] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  512.569912][T21318] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  512.617601][ T5876] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[  512.621097][ T5876] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  512.626383][ T5876] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  512.630640][ T5876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.584712][T21360] netlink: 'syz.9.6398': attribute type 49 has an invalid length.
[  513.670968][T21366] tap0: tun_chr_ioctl cmd 2148553947
[  513.808762][T21374] netlink: 'syz.8.6407': attribute type 11 has an invalid length.
[  513.988103][T21386] netlink: 'syz.9.6412': attribute type 4 has an invalid length.
[  515.021093][T21417] syz.8.6424: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  515.030653][T21417] CPU: 1 UID: 0 PID: 21417 Comm: syz.8.6424 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  515.030667][T21417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  515.030674][T21417] Call Trace:
[  515.030678][T21417]  <TASK>
[  515.030683][T21417]  dump_stack_lvl+0x189/0x250
[  515.030703][T21417]  ? __pfx_dump_stack_lvl+0x10/0x10
[  515.030715][T21417]  ? __pfx__printk+0x10/0x10
[  515.030732][T21417]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  515.030745][T21417]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  515.030757][T21417]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  515.030769][T21417]  warn_alloc+0x214/0x310
[  515.030784][T21417]  ? stack_depot_save_flags+0x40/0x860
[  515.030803][T21417]  ? __pfx_warn_alloc+0x10/0x10
[  515.030852][T21417]  ? kasan_save_track+0x4f/0x80
[  515.030867][T21417]  ? xskq_create+0x56/0x170
[  515.030878][T21417]  ? xsk_init_queue+0xb0/0x110
[  515.030887][T21417]  ? xsk_setsockopt+0x57b/0x8d0
[  515.030896][T21417]  ? do_sock_setsockopt+0x17c/0x1b0
[  515.030912][T21417]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  515.030922][T21417]  ? do_syscall_64+0xfa/0x3b0
[  515.030936][T21417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.030961][T21417]  __vmalloc_node_range_noprof+0x125/0x12f0
[  515.031018][T21417]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  515.031036][T21417]  ? __kasan_kmalloc+0x93/0xb0
[  515.031051][T21417]  vmalloc_user_noprof+0xad/0xf0
[  515.031063][T21417]  ? xskq_create+0xbf/0x170
[  515.031075][T21417]  xskq_create+0xbf/0x170
[  515.031089][T21417]  xsk_init_queue+0xb0/0x110
[  515.031110][T21417]  xsk_setsockopt+0x57b/0x8d0
[  515.031132][T21417]  ? __pfx_xsk_setsockopt+0x10/0x10
[  515.031152][T21417]  ? __pfx_aa_sk_perm+0x10/0x10
[  515.031168][T21417]  ? __fget_files+0x2a/0x420
[  515.031174][T21417]  ? aa_sock_opt_perm+0xff/0x1b0
[  515.031190][T21417]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  515.031205][T21417]  ? __pfx_xsk_setsockopt+0x10/0x10
[  515.031223][T21417]  do_sock_setsockopt+0x17c/0x1b0
[  515.031253][T21417]  __x64_sys_setsockopt+0x13f/0x1b0
[  515.031277][T21417]  do_syscall_64+0xfa/0x3b0
[  515.031291][T21417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.031298][T21417]  ? asm_sysvec_call_function_single+0x1a/0x20
[  515.031310][T21417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.031318][T21417] RIP: 0033:0x7f1e9578ebe9
[  515.031328][T21417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.031334][T21417] RSP: 002b:00007f1e9655f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  515.031346][T21417] RAX: ffffffffffffffda RBX: 00007f1e959b5fa0 RCX: 00007f1e9578ebe9
[  515.031355][T21417] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  515.031363][T21417] RBP: 00007f1e95811e19 R08: 0000000000000004 R09: 0000000000000000
[  515.031372][T21417] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  515.031379][T21417] R13: 00007f1e959b6038 R14: 00007f1e959b5fa0 R15: 00007ffc1b869428
[  515.031420][T21417]  </TASK>
[  515.031424][T21417] Mem-Info:
[  515.164639][T21417] active_anon:26510 inactive_anon:0 isolated_anon:0
[  515.164639][T21417]  active_file:16031 inactive_file:38405 isolated_file:0
[  515.164639][T21417]  unevictable:1768 dirty:214 writeback:0
[  515.164639][T21417]  slab_reclaimable:11312 slab_unreclaimable:83002
[  515.164639][T21417]  mapped:28363 shmem:2475 pagetables:1542
[  515.164639][T21417]  sec_pagetables:0 bounce:0
[  515.164639][T21417]  kernel_misc_reclaimable:0
[  515.164639][T21417]  free:206424 free_pcp:17541 free_cma:0
[  515.179543][T21417] Node 0 active_anon:62796kB inactive_anon:0kB active_file:30996kB inactive_file:142316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:69056kB dirty:524kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5080kB pagetables:3116kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  515.191123][T21417] Node 1 active_anon:43244kB inactive_anon:0kB active_file:33128kB inactive_file:11304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44396kB dirty:332kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8116kB pagetables:3052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  515.201979][T21417] Node 0 DMA free:8284kB boost:2048kB min:2688kB low:2848kB high:3008kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:800kB local_pcp:332kB free_cma:0kB
[  515.212380][T21417] lowmem_reserve[]: 0 811 811 811 811
[  515.214410][T21417] Node 0 DMA32 free:50148kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:2048KB free_highatomic:256KB active_anon:62840kB inactive_anon:0kB active_file:30996kB inactive_file:142308kB unevictable:3536kB writepending:524kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:22360kB local_pcp:13604kB free_cma:0kB
[  515.226541][T21417] lowmem_reserve[]: 0 0 0 0 0
[  515.229218][T21417] Node 1 DMA32 free:449532kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:9072kB local_pcp:9072kB free_cma:0kB
[  515.242065][T21417] lowmem_reserve[]: 0 0 854 854 854
[  515.244685][T21417] Node 1 Normal free:317732kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43244kB inactive_anon:0kB active_file:33128kB inactive_file:11304kB unevictable:3536kB writepending:332kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37960kB local_pcp:19316kB free_cma:0kB
[  515.274347][T21417] lowmem_reserve[]: 0 0 0 0 0
[  515.276466][T21417] Node 0 DMA: 10*4kB (UME) 18*8kB (UME) 18*16kB (UME) 4*32kB (UM) 30*64kB (UME) 13*128kB (UM) 12*256kB (UME) 2*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 8280kB
[  515.283542][T21417] Node 0 DMA32: 671*4kB (UM) 356*8kB (UME) 175*16kB (UMEH) 40*32kB (UMEH) 98*64kB (UME) 36*128kB (UME) 26*256kB (UME) 7*512kB (UME) 9*1024kB (UM) 3*2048kB (M) 1*4096kB (U) = 50188kB
[  515.295695][T21417] Node 1 DMA32: 5*4kB (UM) 5*8kB (UM) 4*16kB (UM) 4*32kB (UM) 4*64kB (UM) 0*128kB 4*256kB (UM) 3*512kB (M) 4*1024kB (UM) 2*2048kB (UM) 107*4096kB (M) = 449532kB
[  515.317724][T21417] Node 1 Normal: 881*4kB (UME) 616*8kB (UME) 568*16kB (UM) 531*32kB (UME) 285*64kB (UME) 114*128kB (UM) 34*256kB (UM) 20*512kB (UM) 26*1024kB (UME) 10*2048kB (U) 45*4096kB (UM) = 317732kB
[  515.325852][T21417] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  515.330592][T21417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  515.334881][T21417] 56911 total pagecache pages
[  515.336947][T21417] 0 pages in swap cache
[  515.338753][T21417] Free swap  = 124996kB
[  515.340590][T21417] Total swap = 124996kB
[  515.342408][T21417] 786301 pages RAM
[  515.344268][T21417] 0 pages HighMem/MovableOnly
[  515.346308][T21417] 241329 pages reserved
[  515.347688][T21417] 0 pages cma reserved
[  515.686232][T21441] openvswitch: netlink: Message has 8 unknown bytes.
[  516.947072][ T5876] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.021066][ T5876] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.110664][ T5876] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.170578][T21484] IPv6: NLM_F_CREATE should be specified when creating new route
[  517.198443][ T5876] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.368702][T21497] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  517.375812][ T5876] bridge_slave_1: left allmulticast mode
[  517.394054][ T5876] bridge_slave_1: left promiscuous mode
[  517.396221][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.401430][ T5876] bridge_slave_0: left allmulticast mode
[  517.412158][ T5876] bridge_slave_0: left promiscuous mode
[  517.419267][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.015148][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.020477][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.027392][ T5876] bond0 (unregistering): Released all slaves
[  518.120226][T21525] __nla_validate_parse: 10 callbacks suppressed
[  518.120245][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6465'.
[  518.519591][T21554] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6476'.
[  518.633738][ T5876] hsr_slave_0: left promiscuous mode
[  518.647653][ T5876] hsr_slave_1: left promiscuous mode
[  518.649849][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.652312][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.676017][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.683027][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.720124][ T5876] veth1_macvtap: left promiscuous mode
[  518.734001][ T5876] veth0_macvtap: left promiscuous mode
[  518.753741][ T5876] veth1_vlan: left promiscuous mode
[  518.756190][ T5876] veth0_vlan: left promiscuous mode
[  519.659959][T21589] validate_nla: 2 callbacks suppressed
[  519.660018][T21589] netlink: 'syz.1.6488': attribute type 10 has an invalid length.
[  519.876652][ T5865] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  520.238572][T21610] IPv6: ipvlan0: Disabled Multicast RS
[  520.537458][T21619] netlink: 'syz.9.6496': attribute type 1 has an invalid length.
[  520.577386][T21621] netlink: 182 bytes leftover after parsing attributes in process `syz.9.6497'.
[  521.438292][T21642] netlink: 'syz.1.6503': attribute type 2 has an invalid length.
[  521.441623][T21642] netlink: 'syz.1.6503': attribute type 1 has an invalid length.
[  521.450080][T21642] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6503'.
[  521.455357][T21642] block nbd5: not configured, cannot reconfigure
[  521.590754][T21645] : port 1(erspan0) entered blocking state
[  521.596287][T21645] : port 1(erspan0) entered disabled state
[  521.598724][T21645] erspan0: entered allmulticast mode
[  521.601437][T21645] erspan0: entered promiscuous mode
[  521.824615][T21665] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.6510'.
[  521.964042][ T5869] Bluetooth: hci2: command 0x0406 tx timeout
[  522.015983][ T5869] Bluetooth: hci2: Dropping invalid advertising data
[  522.018663][ T5869] Bluetooth: hci2: unknown advertising packet type: 0xff
[  522.418792][T21708] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6524'.
[  523.110028][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6535'.
[  523.569072][T21762] netlink: 182 bytes leftover after parsing attributes in process `syz.9.6545'.
[  523.699338][T21774] netlink: 16255 bytes leftover after parsing attributes in process `syz.9.6549'.
[  523.768971][T21776] syzkaller0: entered promiscuous mode
[  523.771414][T21776] syzkaller0: entered allmulticast mode
[  523.790802][ T5869] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  523.796524][T21781] netlink: 'syz.9.6553': attribute type 1 has an invalid length.
[  523.803195][T21781] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6553'.
[  525.525361][T21810] netlink: 'syz.9.6565': attribute type 1 has an invalid length.
[  525.528648][T21810] netlink: 'syz.9.6565': attribute type 4 has an invalid length.
[  525.531937][T21810] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.6565'.
[  525.995119][T21858] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6583'.
[  526.375442][   T34] INFO: task syz.6.3928:15560 blocked for more than 143 seconds.
[  526.378516][   T34]       Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0
[  526.393749][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  526.397283][   T34] task:syz.6.3928      state:D stack:26088 pid:15560 tgid:15559 ppid:10433  task_flags:0x400040 flags:0x00004004
[  526.401940][   T34] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  526.416857][   T34]  <TASK>
[  526.420203][   T34]  __schedule+0x1798/0x4cc0
[  526.429802][   T34]  ? __lock_acquire+0xab9/0xd20
[  526.446009][   T34]  ? __lock_acquire+0xab9/0xd20
[  526.453360][   T34]  ? __pfx___schedule+0x10/0x10
[  526.458906][   T34]  ? schedule+0x91/0x360
[  526.466761][   T34]  schedule+0x165/0x360
[  526.474085][   T34]  schedule_preempt_disabled+0x13/0x30
[  526.482297][   T34]  __mutex_lock+0x7e6/0x1360
[  526.489125][   T34]  ? __mutex_lock+0x5b6/0x1360
[  526.495119][   T34]  ? nfsd_nl_listener_get_doit+0x10a/0x5e0
[  526.501261][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  526.506380][   T34]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  526.509389][   T34]  ? __nlmsg_put+0xef/0x1b0
[  526.511422][   T34]  ? genlmsg_put+0x137/0x2e0
[  526.514452][   T34]  nfsd_nl_listener_get_doit+0x10a/0x5e0
[  526.516963][   T34]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  526.519537][   T34]  ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0
[  526.522289][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  526.528648][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  526.532189][   T34]  genl_rcv_msg+0x60e/0x790
[  526.535242][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  526.537517][   T34]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  526.540214][   T34]  ? __asan_memcpy+0x40/0x70
[  526.542303][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  526.551254][   T34]  netlink_rcv_skb+0x208/0x470
[  526.554264][   T34]  ? __lock_acquire+0xab9/0xd20
[  526.556565][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  526.558890][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  526.561240][   T34]  ? down_read+0x1ad/0x2e0
[  526.565156][   T34]  genl_rcv+0x28/0x40
[  526.566953][   T34]  netlink_unicast+0x82f/0x9e0
[  526.569158][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  526.571467][   T34]  ? netlink_sendmsg+0x642/0xb30
[  526.574767][   T34]  ? skb_put+0x11b/0x210
[  526.576831][   T34]  netlink_sendmsg+0x805/0xb30
[  526.579049][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.581464][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  526.587254][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  526.589962][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.592300][   T34]  __sock_sendmsg+0x21c/0x270
[  526.595272][   T34]  ____sys_sendmsg+0x505/0x830
[  526.597735][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.600122][   T34]  ? import_iovec+0x74/0xa0
[  526.602225][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  526.607155][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.609590][   T34]  ? __fget_files+0x2a/0x420
[  526.611717][   T34]  ? __fget_files+0x3a0/0x420
[  526.615921][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  526.618195][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  526.620578][   T34]  ? rcu_is_watching+0x15/0xb0
[  526.624751][   T34]  ? do_syscall_64+0xbe/0x3b0
[  526.627008][   T34]  do_syscall_64+0xfa/0x3b0
[  526.629119][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  526.631514][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.637182][   T34]  ? exc_page_fault+0x9f/0xf0
[  526.639392][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.642109][   T34] RIP: 0033:0x7f2a7fd8ebe9
[  526.646197][   T34] RSP: 002b:00007f2a80bbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.649965][   T34] RAX: ffffffffffffffda RBX: 00007f2a7ffb5fa0 RCX: 00007f2a7fd8ebe9
[  526.658594][   T34] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003
[  526.662128][   T34] RBP: 00007f2a7fe11e19 R08: 0000000000000000 R09: 0000000000000000
[  526.667564][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.671042][   T34] R13: 00007f2a7ffb6038 R14: 00007f2a7ffb5fa0 R15: 00007ffcf8611a08
[  526.675275][   T34]  </TASK>
[  526.677056][   T34] 
[  526.677056][   T34] Showing all locks held in the system:
[  526.680548][   T34] 1 lock held by khungtaskd/34:
[  526.686524][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  526.690991][   T34] 2 locks held by getty/5670:
[  526.695483][   T34]  #0: ffff8881109350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  526.699621][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  526.707958][   T34] 1 lock held by syz-executor/5828:
[  526.710376][   T34] 3 locks held by kworker/u9:4/6049:
[  526.714477][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  526.719603][   T34]  #1: ffffc90003f3fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  526.727340][   T34]  #2: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  526.731357][   T34] 2 locks held by syz.5.1626/10099:
[  526.735462][   T34]  #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  526.739108][   T34]  #1: ffffffff8e4184c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  526.746318][   T34] 2 locks held by syz.6.3928/15560:
[  526.748636][   T34]  #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  526.752242][   T34]  #1: ffffffff8e4184c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0
[  526.757714][   T34] 2 locks held by syz.8.6587/21869:
[  526.760119][   T34]  #0: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  526.769785][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  526.776883][   T34] 1 lock held by syz.1.6590/21884:
[  526.781743][   T34]  #0: ffff888106d568d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100
[  526.798173][   T34] 
[  526.803070][   T34] =============================================
[  526.803070][   T34] 
[  526.811678][   T34] NMI backtrace for cpu 0
[  526.811693][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  526.811709][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  526.811717][   T34] Call Trace:
[  526.811723][   T34]  <TASK>
[  526.811728][   T34]  dump_stack_lvl+0x189/0x250
[  526.811751][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  526.811766][   T34]  ? __pfx__printk+0x10/0x10
[  526.811793][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  526.811810][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  526.811826][   T34]  ? __pfx__printk+0x10/0x10
[  526.811845][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  526.811867][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  526.811883][   T34]  watchdog+0xf93/0xfe0
[  526.811905][   T34]  ? watchdog+0x1de/0xfe0
[  526.811926][   T34]  kthread+0x711/0x8a0
[  526.811944][   T34]  ? __pfx_watchdog+0x10/0x10
[  526.811960][   T34]  ? __pfx_kthread+0x10/0x10
[  526.811982][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  526.811999][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  526.812014][   T34]  ? __pfx_kthread+0x10/0x10
[  526.812030][   T34]  ret_from_fork+0x3fc/0x770
[  526.812046][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  526.812062][   T34]  ? __switch_to_asm+0x39/0x70
[  526.812077][   T34]  ? __switch_to_asm+0x33/0x70
[  526.812091][   T34]  ? __pfx_kthread+0x10/0x10
[  526.812107][   T34]  ret_from_fork_asm+0x1a/0x30
[  526.812133][   T34]  </TASK>
[  526.812138][   T34] Sending NMI from CPU 0 to CPUs 1:
[  526.867872][    C1] NMI backtrace for cpu 1
[  526.867890][    C1] CPU: 1 UID: 0 PID: 21869 Comm: syz.8.6587 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  526.867904][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  526.867912][    C1] RIP: 0010:kasan_check_range+0x7d/0x2c0
[  526.867932][    C1] Code: 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 <4d> 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c
[  526.867941][    C1] RSP: 0018:ffffc900001e0cd0 EFLAGS: 00000807
[  526.867948][    C1] RAX: ffffffff81ade201 RBX: dffffc0000000001 RCX: ffffffff81ade2b7
[  526.867954][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa37e30
[  526.867958][    C1] RBP: 0000000000000000 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  526.867962][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fc6 R12: dffffc0000000000
[  526.867967][    C1] R13: 0000000000000001 R14: fffffbfff1f46fc7 R15: 1ffffffff1f46fc6
[  526.867973][    C1] FS:  00007f1e9655f6c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  526.867979][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  526.867983][    C1] CR2: 00007fcc5f6d4000 CR3: 0000000111b52000 CR4: 00000000000006f0
[  526.868009][    C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300
[  526.868016][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  526.868020][    C1] Call Trace:
[  526.868023][    C1]  <IRQ>
[  526.868027][    C1]  enqueue_hrtimer+0x77/0x3a0
[  526.868037][    C1]  __hrtimer_run_queues+0x656/0xc60
[  526.868047][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  526.868055][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  526.868065][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  526.868075][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  526.868085][    C1]  </IRQ>
[  526.868087][    C1]  <TASK>
[  526.868090][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  526.868098][    C1] RIP: 0010:memset_orig+0x15/0xb0
[  526.868108][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84
[  526.868113][    C1] RSP: 0018:ffffc900069d6f38 EFLAGS: 00000206
[  526.868119][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  526.868123][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900069d70d0
[  526.868127][    C1] RBP: ffffc900069d7150 R08: ffffc900069d70df R09: 1ffff92000d3ae1b
[  526.868132][    C1] R10: ffffc900069d70d0 R11: fffff52000d3ae1c R12: 0000000000000000
[  526.868136][    C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff92000d3ae2c
[  526.868144][    C1]  __schedule+0xb9/0x4cc0
[  526.868154][    C1]  ? merge_sched_in+0xb37/0x14b0
[  526.868164][    C1]  ? visit_groups_merge+0x138d/0x1940
[  526.868172][    C1]  ? __asan_memcpy+0x40/0x70
[  526.868180][    C1]  ? __pfx___schedule+0x10/0x10
[  526.868188][    C1]  ? irqentry_exit+0x74/0x90
[  526.868195][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  526.868206][    C1]  preempt_schedule_irq+0xb5/0x150
[  526.868214][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  526.868229][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  526.868236][    C1]  irqentry_exit+0x6f/0x90
[  526.868245][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  526.868251][    C1] RIP: 0010:unwind_next_frame+0x1315/0x2390
[  526.868259][    C1] Code: 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 <4c> 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8
[  526.868265][    C1] RSP: 0018:ffffc900069d72d8 EFLAGS: 00000246
[  526.868270][    C1] RAX: fffffffff618ae4d RBX: ffffffff8fea9cc0 RCX: dffffc0000000000
[  526.868274][    C1] RDX: ffffffff8fea9cb4 RSI: ffffffff90803524 RDI: ffffffff8be332a0
[  526.868279][    C1] RBP: ffffffff8fea9cb4 R08: 0000000000000013 R09: ffffffff8172c195
[  526.868283][    C1] R10: ffffc900069d73f8 R11: ffffffff81ac3890 R12: ffffffff86034b75
[  526.868287][    C1] R13: ffffffff8fea9cb4 R14: ffffc900069d73a8 R15: ffffffff8fea9cb8
[  526.868292][    C1]  ? dpm_sysfs_remove+0x75/0xd0
[  526.868301][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  526.868309][    C1]  ? unwind_next_frame+0xa5/0x2390
[  526.868318][    C1]  ? unwind_next_frame+0xd4/0x2390
[  526.868325][    C1]  ? unwind_next_frame+0xa5/0x2390
[  526.868331][    C1]  ? dpm_sysfs_remove+0x76/0xd0
[  526.868339][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  526.868346][    C1]  arch_stack_walk+0x11c/0x150
[  526.868356][    C1]  ? dpm_sysfs_remove+0x76/0xd0
[  526.868363][    C1]  stack_trace_save+0x9c/0xe0
[  526.868371][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  526.868378][    C1]  ? __pfx___schedule+0x10/0x10
[  526.868386][    C1]  kasan_save_stack+0x3e/0x60
[  526.868393][    C1]  ? kasan_save_stack+0x3e/0x60
[  526.868400][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  526.868406][    C1]  ? call_rcu+0x157/0x9c0
[  526.868412][    C1]  ? kernfs_put+0x19e/0x480
[  526.868420][    C1]  ? kernfs_remove_by_name_ns+0xb7/0x130
[  526.868427][    C1]  ? sysfs_unmerge_group+0xd4/0x140
[  526.868434][    C1]  ? dpm_sysfs_remove+0x76/0xd0
[  526.868448][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  526.868454][    C1]  ? __pfx_kernfs_free_rcu+0x10/0x10
[  526.868460][    C1]  call_rcu+0x157/0x9c0
[  526.868467][    C1]  ? delete_node+0x93b/0xa50
[  526.868475][    C1]  ? delete_node+0x2de/0xa50
[  526.868481][    C1]  ? __pfx_call_rcu+0x10/0x10
[  526.868489][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  526.868498][    C1]  kernfs_put+0x19e/0x480
[  526.868506][    C1]  kernfs_remove_by_name_ns+0xb7/0x130
[  526.868514][    C1]  sysfs_unmerge_group+0xd4/0x140
[  526.868522][    C1]  dpm_sysfs_remove+0x76/0xd0
[  526.868529][    C1]  device_del+0x251/0x8e0
[  526.868536][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  526.868544][    C1]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  526.868551][    C1]  ? __pfx_device_del+0x10/0x10
[  526.868558][    C1]  ? netdev_unregister_kobject+0x344/0x450
[  526.868566][    C1]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  526.868577][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  526.868586][    C1]  ? queue_delayed_work_on+0x11a/0x280
[  526.868594][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  526.868603][    C1]  unregister_netdevice_queue+0x33c/0x380
[  526.868610][    C1]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  526.868617][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  526.868624][    C1]  ? linkwatch_urgent_event+0x62/0x3a0
[  526.868633][    C1]  __tun_detach+0xda4/0x1560
[  526.868643][    C1]  ? __pfx_tun_chr_close+0x10/0x10
[  526.868650][    C1]  tun_chr_close+0x10a/0x1c0
[  526.868691][    C1]  __fput+0x44c/0xa70
[  526.868707][    C1]  fput_close_sync+0x119/0x200
[  526.868715][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  526.868723][    C1]  __x64_sys_close+0x7f/0x110
[  526.868732][    C1]  do_syscall_64+0xfa/0x3b0
[  526.868742][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.868748][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  526.868755][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.868761][    C1] RIP: 0033:0x7f1e9578ebe9
[  526.868768][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.868776][    C1] RSP: 002b:00007f1e9655f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  526.868786][    C1] RAX: ffffffffffffffda RBX: 00007f1e959b5fa0 RCX: 00007f1e9578ebe9
[  526.868793][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  526.868799][    C1] RBP: 00007f1e95811e19 R08: 0000000000000000 R09: 0000000000000000
[  526.868806][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.868810][    C1] R13: 00007f1e959b6038 R14: 00007f1e959b5fa0 R15: 00007ffc1b869428
[  526.868818][    C1]  </TASK>
[  527.188536][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  527.190854][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  527.195161][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  527.198695][   T34] Call Trace:
[  527.199995][   T34]  <TASK>
[  527.201128][   T34]  dump_stack_lvl+0x99/0x250
[  527.202988][   T34]  ? __asan_memcpy+0x40/0x70
[  527.204919][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  527.207094][   T34]  ? __pfx__printk+0x10/0x10
[  527.208877][   T34]  vpanic+0x281/0x750
[  527.210283][   T34]  ? __pfx_vpanic+0x10/0x10
[  527.212025][   T34]  ? preempt_schedule+0xae/0xc0
[  527.214061][   T34]  ? preempt_schedule_common+0x83/0xd0
[  527.216327][   T34]  panic+0xb9/0xc0
[  527.217885][   T34]  ? __pfx_panic+0x10/0x10
[  527.219694][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  527.221693][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  527.223682][   T34]  watchdog+0xfd2/0xfe0
[  527.225203][   T34]  ? watchdog+0x1de/0xfe0
[  527.227104][   T34]  kthread+0x711/0x8a0
[  527.228831][   T34]  ? __pfx_watchdog+0x10/0x10
[  527.230804][   T34]  ? __pfx_kthread+0x10/0x10
[  527.232678][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  527.234477][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  527.236586][   T34]  ? __pfx_kthread+0x10/0x10
[  527.238512][   T34]  ret_from_fork+0x3fc/0x770
[  527.240426][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  527.242548][   T34]  ? __switch_to_asm+0x39/0x70
[  527.244315][   T34]  ? __switch_to_asm+0x33/0x70
[  527.245924][   T34]  ? __pfx_kthread+0x10/0x10
[  527.247478][   T34]  ret_from_fork_asm+0x1a/0x30
[  527.249108][   T34]  </TASK>
[  527.251009][   T34] Kernel Offset: disabled
[  527.252549][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:19:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000ffffffff RCX=2dbc65906f483500 RDX=0000000000000000
RSI=00000000ffffffff RDI=ffffffff8e139ee0 RBP=00000000ffffffff RSP=ffffc9000ae572c0
R8 =0000000000000000 R9 =ffffffff822e54ed R10=dffffc0000000000 R11=fffff940009983a9
R12=0000000000133075 R13=ffff888108db9cc0 R14=ffffffff8e139ee0 R15=0000000000001000
RIP=ffffffff8b793b55 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555565dc5500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000200 CR3=000000012b2ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8168898d ffffffff8167991b
XMM02=667ff856c34c16e6 ffffffff8167991b XMM03=23b5bc5a88b0bae4 d385b3d2b120901d
XMM04=8d3e985799a29065 d8a3ef102835da0a XMM05=bd02ef2b76d30ced 60316e580b674a18
XMM06=158d3e985799a290 65d8a3ef102835da XMM07=0a23b5bc5a88b0ba e4d385b3d2b12090
XMM08=1d667ff856c34c16 e620f7cb4ef3f899 XMM09=0000000000000000 00007f1e95812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff8881006bd640 RBX=0000000000000000 RCX=5b886cb4d821eb00 RDX=0000000000000000
RSI=ffffffff8172c1b2 RDI=1ffffffff1c273dc RBP=ffffffff8172c195 RSP=ffffc900001b7390
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900001b7558 R11=ffffffff81ac3890
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5b89 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3161cff8 CR3=0000000111b52000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
