last executing test programs:

3m36.253943494s ago: executing program 0 (id=753):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x5, 0x0, 0x0, 0x0, 0xb7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

3m36.105672558s ago: executing program 0 (id=757):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)

3m36.025946117s ago: executing program 0 (id=758):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@ifindex, 0xffffffffffffffff, 0x19, 0x11}, 0x20)

3m35.961762207s ago: executing program 0 (id=760):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

3m35.776732778s ago: executing program 0 (id=762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

3m35.5825766s ago: executing program 0 (id=763):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0xc4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0413000037000100feffffff0000000001"], 0x1304}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)

3m35.369489443s ago: executing program 32 (id=763):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0xc4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0413000037000100feffffff0000000001"], 0x1304}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)

2m55.975174511s ago: executing program 3 (id=1170):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)

2m55.974758284s ago: executing program 3 (id=1171):
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)=ANY=[@ANYBLOB='nod'])

2m55.895485071s ago: executing program 3 (id=1173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0xfffffffffffffe4d, 0x3, 0x39}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

2m55.837043151s ago: executing program 3 (id=1176):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0xfc5f}, 0x28)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)

2m55.691076871s ago: executing program 3 (id=1182):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x29, 0xb, 0x70bd27, 0x0, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0xa, 0x3, 0x87)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xa, 0x0, 0x4)
sendmsg$unix(r5, &(0x7f0000000540)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x58, 0x801}, 0x40820)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
sendmsg$inet(r3, 0x0, 0x81)
ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0)

2m55.048534713s ago: executing program 2 (id=1191):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000)

2m54.886216823s ago: executing program 2 (id=1192):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0)

2m54.823837742s ago: executing program 2 (id=1193):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}}, 0x0)

2m54.81537389s ago: executing program 2 (id=1195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007012fbd7000fcdbdf25047c000004000000200001800600060080350000140019"], 0x38}}, 0x0)

2m54.736582216s ago: executing program 2 (id=1197):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m54.497213149s ago: executing program 2 (id=1199):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3ffffc, 0x866d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x2088, 0x2000000, 0x200, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='cpu\t>0&&\t')

2m54.496705227s ago: executing program 3 (id=1200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d840009aa58b9e45fdb"], 0xffdd)

2m39.258085049s ago: executing program 33 (id=1200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d840009aa58b9e45fdb"], 0xffdd)

2m38.985703928s ago: executing program 34 (id=1199):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3ffffc, 0x866d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x2088, 0x2000000, 0x200, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='cpu\t>0&&\t')

2m12.900005053s ago: executing program 5 (id=1487):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m12.834008678s ago: executing program 5 (id=1489):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)

2m12.752356653s ago: executing program 5 (id=1490):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x64, &(0x7f0000000280)=[{&(0x7f0000002240)=""/60, 0x3c}], 0x1}, 0x40fd)

2m12.752049682s ago: executing program 5 (id=1491):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8)

2m12.091656033s ago: executing program 5 (id=1496):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

2m11.882989416s ago: executing program 5 (id=1501):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x8}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x2, 0x73)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a000000050001000600000014000780080006402000000008000840", @ANYRESOCT=r3], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
fstat(r5, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r6, &(0x7f00000011c0))
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000880), 0x200020, &(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=r7, @ANYRESDEC=r7, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYRES16=r4])

1m56.813028209s ago: executing program 35 (id=1501):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x8}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x2, 0x73)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a000000050001000600000014000780080006402000000008000840", @ANYRESOCT=r3], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
fstat(r5, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r6, &(0x7f00000011c0))
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000880), 0x200020, &(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=r7, @ANYRESDEC=r7, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYRES16=r4])

1m53.487055303s ago: executing program 4 (id=1698):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13)
ioctl$TUNGETIFF(r0, 0x400454ce, 0x0)

1m53.350831377s ago: executing program 4 (id=1701):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001840)="b564", 0x2}, {&(0x7f0000000400)="8365", 0x2}], 0x2, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000001000000000000", 0x18}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x308)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100"], 0x18}, 0x0)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x73)
recvmsg$kcm(r7, &(0x7f00000012c0)={&(0x7f00000011c0)=@l2, 0x80, &(0x7f0000001140)=[{0x0}], 0x1}, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084)
sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69c", 0x17}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x20, 0x1411, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040)
socket$igmp(0x2, 0x3, 0x2)

1m52.385925361s ago: executing program 4 (id=1714):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x40012062)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

1m52.275379286s ago: executing program 4 (id=1716):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0xfc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x8802, 0x7ff, 0x0, 0x7, 0x7, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040))

1m52.071738258s ago: executing program 4 (id=1719):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f03000000010000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a", 0x43}, {&(0x7f0000000900)="8d47487e5461ba7b8d2c87fe38df2f1b003ea2ccddbefcfdcc", 0x19}, {0x0, 0x300}], 0x3, 0x0, 0x0, 0x1f000801}, 0x4000)

1m52.07131287s ago: executing program 4 (id=1720):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/243, 0xf3}], 0x1, &(0x7f0000000380)=""/2, 0x2}, 0x20)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x104084}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xa, 0x3, 0xdb, 0x5, 0x0, 0x6619, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x200, 0xfffffffffffffffc, 0x800, 0x3, 0x800, 0x7, 0x800, 0x0, 0x0, 0x0, 0x5})
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001680), 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="d0000000000000002d01000008000000c5fa6bfbc5db26f3a5756d61f9e5616dd6f36399e051024bccee38a7f40b862b132650ab6f82869a83c4505ed0df4b2d7e8193a36dcda7a229bea753b92c8ffb11507a67fcd5d3a00af85098ea0de5f065b1ee40350804c4c57de8585baadb46bd8cbc0eb9101e7798382c26d2729e8e42345b0bfc43bbb785f68f3b83a54979798c2d709e0979552075eb9fa40b87699c4686ed2b4f01cb9006691b138ec5f423a9a2c2938e9555eddde0b36fa36c82ad410e7d05fdeac01670ea7fe9000000000000002000000000000001000009000000a280b7b8963fa98d5ca4135e340000"], 0xf0}, 0x20004000)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000012c0)={0x3}, 0x8)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000740), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000040000000400000002", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='.'], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m36.894014586s ago: executing program 36 (id=1720):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/243, 0xf3}], 0x1, &(0x7f0000000380)=""/2, 0x2}, 0x20)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x104084}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xa, 0x3, 0xdb, 0x5, 0x0, 0x6619, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x200, 0xfffffffffffffffc, 0x800, 0x3, 0x800, 0x7, 0x800, 0x0, 0x0, 0x0, 0x5})
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001680), 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="d0000000000000002d01000008000000c5fa6bfbc5db26f3a5756d61f9e5616dd6f36399e051024bccee38a7f40b862b132650ab6f82869a83c4505ed0df4b2d7e8193a36dcda7a229bea753b92c8ffb11507a67fcd5d3a00af85098ea0de5f065b1ee40350804c4c57de8585baadb46bd8cbc0eb9101e7798382c26d2729e8e42345b0bfc43bbb785f68f3b83a54979798c2d709e0979552075eb9fa40b87699c4686ed2b4f01cb9006691b138ec5f423a9a2c2938e9555eddde0b36fa36c82ad410e7d05fdeac01670ea7fe9000000000000002000000000000001000009000000a280b7b8963fa98d5ca4135e340000"], 0xf0}, 0x20004000)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000012c0)={0x3}, 0x8)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000740), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000040000000400000002", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='.'], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.888544207s ago: executing program 7 (id=3030):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x30}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.830418251s ago: executing program 7 (id=3033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

1.7286351s ago: executing program 7 (id=3034):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x5, 0x10000000000002, 0xfffffffd, 0x6, 0x0, 0x10000, 0x0, 0xa9e6}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9)

768.125713ms ago: executing program 7 (id=3040):
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002540)=""/246, 0xf6}, {&(0x7f0000000300)=""/79, 0x4f}], 0x4, &(0x7f0000002800)=""/4096, 0x1000}, 0x40000000)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x40002142)

642.433668ms ago: executing program 1 (id=3043):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "98"}]}], {0x14}}, 0x94}}, 0x0)

641.993492ms ago: executing program 7 (id=3044):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="130000004e007f049e3ab018a75ab611b87647", 0x13}], 0x1}, 0x0)

578.143597ms ago: executing program 1 (id=3046):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, 0x0, 0x300)

577.85106ms ago: executing program 7 (id=3047):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000a51f09f852f0009000000080000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

507.910999ms ago: executing program 1 (id=3049):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0xe, @in={0x2, 0x4e21, @empty}}]}, 0x28}, 0x1, 0x400000000000000}, 0x0)

409.930705ms ago: executing program 1 (id=3050):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0)

322.981171ms ago: executing program 1 (id=3051):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)

322.337195ms ago: executing program 6 (id=3053):
r0 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, 0x0, 0x0)

239.742486ms ago: executing program 6 (id=3054):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x801c581f, 0x0)

239.44498ms ago: executing program 6 (id=3055):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48)

239.050433ms ago: executing program 1 (id=3056):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xfff, 0x4, 0x8cf, 0x7fffffdf}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
write$cgroup_type(r0, &(0x7f0000000980), 0xffffffffffffff5e)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000001980)=""/4096, 0x1000, <r4=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x0, 0x0, 0x0, 0x3, 0x5f, &(0x7f00000005c0)=""/95, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1c, r3, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x9}, 0x10, r4, r1, 0x4, &(0x7f0000000840)=[r2], &(0x7f0000000880)=[{0x0, 0x5, 0xe, 0x3}, {0x2, 0x2, 0x1, 0x1}, {0x5, 0x2, 0x9}, {0x2, 0x2, 0x10, 0x9}]}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x0, 0x20000, 0x8004, 0x41534, 0xffffffffffffffff, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

109.765168ms ago: executing program 6 (id=3057):
r0 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x28, 0x2, 0x0, 0x41)

109.355154ms ago: executing program 6 (id=3058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)

0s ago: executing program 6 (id=3059):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000064c1000000030006000000000002"], 0x50}}, 0x20008004)

kernel console output (not intermixed with test programs):

evsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.254273][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.277406][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.386172][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.399890][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.425083][ T5847] veth0_vlan: entered promiscuous mode
[   67.454878][ T5854] veth0_vlan: entered promiscuous mode
[   67.459473][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.465469][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.477564][ T5847] veth1_vlan: entered promiscuous mode
[   67.490809][ T5854] veth1_vlan: entered promiscuous mode
[   67.557122][ T5847] veth0_macvtap: entered promiscuous mode
[   67.568069][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.574829][ T5854] veth0_macvtap: entered promiscuous mode
[   67.586073][ T5847] veth1_macvtap: entered promiscuous mode
[   67.596913][ T5854] veth1_macvtap: entered promiscuous mode
[   67.629442][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.645318][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.656065][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.684839][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.689675][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.693296][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.717036][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.726361][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.763693][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.766768][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.800095][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.803396][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.886079][ T5919] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.910467][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.913100][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.943226][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.947398][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.985513][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.991242][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.027837][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.034647][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.144238][ T5929] : renamed from dummy0 (while UP)
[   68.182155][ T5929] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.958907][ T5850] Bluetooth: hci0: command tx timeout
[   68.960991][ T5850] Bluetooth: hci1: command tx timeout
[   69.032693][ T5958] netlink: 356 bytes leftover after parsing attributes in process `syz.0.20'.
[   69.035595][ T5958] netlink: 356 bytes leftover after parsing attributes in process `syz.0.20'.
[   69.108745][   T55] Bluetooth: hci2: command tx timeout
[   69.406385][ T5972] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.27'.
[   69.416798][ T5972] netlink: zone id is out of range
[   69.423343][ T5972] netlink: get zone limit has 8 unknown bytes
[   69.673953][ T5974] netlink: 'syz.1.28': attribute type 29 has an invalid length.
[   69.692411][ T5974] netlink: 'syz.1.28': attribute type 10 has an invalid length.
[   69.789800][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.823129][ T5974] team0: Port device bond0 added
[   69.920112][ T5974] syz.1.28 (5974) used greatest stack depth: 19896 bytes left
[   70.056084][ T5998] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[   70.113243][ T6001] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[   70.375814][ T6015] netlink: 260 bytes leftover after parsing attributes in process `syz.2.47'.
[   70.385874][ T6015] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   70.450857][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   70.783517][ T6037] netlink: 64967 bytes leftover after parsing attributes in process `syz.2.57'.
[   70.958060][ T6047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.62'.
[   71.028935][   T55] Bluetooth: hci1: command tx timeout
[   71.031220][   T55] Bluetooth: hci0: command tx timeout
[   71.112313][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.189563][ T5850] Bluetooth: hci2: command tx timeout
[   71.594830][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.597406][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.693638][    C1] hrtimer: interrupt took 57129 ns
[   72.530939][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'.
[   72.660378][ T6121] netlink: 'syz.2.96': attribute type 10 has an invalid length.
[   72.732730][ T6119] netlink: 'syz.1.97': attribute type 4 has an invalid length.
[   73.034797][ T6111] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   73.046072][ T6134] netlink: 'syz.2.103': attribute type 10 has an invalid length.
[   73.120030][ T5850] Bluetooth: hci0: command tx timeout
[   73.122341][   T55] Bluetooth: hci1: command tx timeout
[   73.279714][   T55] Bluetooth: hci2: command tx timeout
[   73.460586][ T6136] openvswitch: netlink: VXLAN extension 233 out of range max 1
[   74.117693][ T6145] __nla_validate_parse: 1 callbacks suppressed
[   74.117714][ T6145] netlink: 830 bytes leftover after parsing attributes in process `syz.2.107'.
[   74.216899][ T6149] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   74.228375][ T6149] netlink: 'syz.1.108': attribute type 2 has an invalid length.
[   75.171135][ T6157] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   75.243593][ T6159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.113'.
[   75.752913][ T6168] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.114'.
[   76.036925][ T6176] openvswitch: netlink: Flow actions attr not present in new flow.
[   76.368482][ T6187] netlink: 'syz.1.125': attribute type 39 has an invalid length.
[   77.233732][ T6220] netlink: 'syz.1.138': attribute type 2 has an invalid length.
[   77.974682][ T6222] : entered promiscuous mode
[   78.444258][ T6227] netlink: 'syz.1.141': attribute type 4 has an invalid length.
[   78.447664][ T6227] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.141'.
[   79.343332][ T6229] netlink: 'syz.0.142': attribute type 8 has an invalid length.
[   79.345736][ T6229] netlink: 'syz.0.142': attribute type 6 has an invalid length.
[   79.353729][ T6229] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.142'.
[   79.467707][ T6233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.144'.
[   80.223598][ T6252] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.228261][ T6256] netlink: 'syz.1.155': attribute type 10 has an invalid length.
[   80.295944][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.153'.
[   80.336602][ T6260] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.157'.
[   80.342873][ T6260] bridge: RTM_NEWNEIGH with invalid state 0x1
[   80.775804][ T6207] Set syz1 is full, maxelem 65536 reached
[   80.912950][ T6266] netlink: 'syz.2.159': attribute type 28 has an invalid length.
[   80.916230][ T6266] netlink: 'syz.2.159': attribute type 29 has an invalid length.
[   80.932789][ T6266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.159'.
[   82.714097][ T6306] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[   83.011724][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'.
[   83.079935][ T6324] delete_channel: no stack
[   83.081810][ T6324] delete_channel: no stack
[   84.047935][ T6352] netlink: 80 bytes leftover after parsing attributes in process `syz.2.199'.
[   84.715367][ T6362] Zero length message leads to an empty skb
[   85.810485][ T6380] xt_bpf: check failed: parse error
[   86.097831][ T6402] netlink: 'syz.2.223': attribute type 2 has an invalid length.
[   86.484410][ T6418] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   86.489207][ T6418] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   86.544777][ T6422] netlink: 'syz.0.233': attribute type 1 has an invalid length.
[   86.547889][ T6422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.962348][   T96] cfg80211: failed to load regulatory.db
[   87.137646][ T6464] nftables ruleset with unbound chain
[   87.693886][ T6491] =======================================================
[   87.693886][ T6491] WARNING: The mand mount option has been deprecated and
[   87.693886][ T6491]          and is ignored by this kernel. Remove the mand
[   87.693886][ T6491]          option from the mount to silence this warning.
[   87.693886][ T6491] =======================================================
[   88.042266][ T6499] netlink: 180 bytes leftover after parsing attributes in process `syz.0.263'.
[   88.451790][ T6518] netlink: 'syz.0.272': attribute type 39 has an invalid length.
[   88.586885][ T6520] netlink: 'syz.1.273': attribute type 28 has an invalid length.
[   88.881910][ T6537] xt_limit: Overflow, try lower: 271964/0
[   88.981007][ T6541] netlink: 'syz.1.282': attribute type 2 has an invalid length.
[   89.782202][ T6576] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.296'.
[   89.785240][ T6576] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   89.789329][ T6576] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   89.849706][ T6581] netlink: 'syz.1.300': attribute type 10 has an invalid length.
[   89.860988][ T6581] 8021q: adding VLAN 0 to HW filter on device team0
[   90.036334][ T6594] warning: `syz.1.306' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   90.178625][ T6600] netlink: 'syz.2.309': attribute type 5 has an invalid length.
[   90.263872][ T6603] netlink: 104 bytes leftover after parsing attributes in process `syz.1.311'.
[   91.885660][ T6648] netlink: 'syz.2.332': attribute type 21 has an invalid length.
[   92.212535][ T6659] netlink: 'syz.0.337': attribute type 29 has an invalid length.
[   92.226906][ T6659] netlink: 'syz.0.337': attribute type 29 has an invalid length.
[   92.233535][ T6659] netlink: 'syz.0.337': attribute type 29 has an invalid length.
[   92.244660][ T6659] netlink: 'syz.0.337': attribute type 29 has an invalid length.
[   92.638759][   T55] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[   92.747577][ T6684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'.
[   92.757806][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'.
[   92.767266][ T6684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'.
[   92.978276][ T6697] netlink: 'syz.1.355': attribute type 29 has an invalid length.
[   94.109040][ T6737] netlink: 'syz.1.374': attribute type 6 has an invalid length.
[   94.232842][ T6742] netlink: 14 bytes leftover after parsing attributes in process `syz.0.377'.
[   94.621628][ T6765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.386'.
[   97.104286][ T6794] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.400'.
[  100.577978][ T6833] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.418'.
[  101.371432][ T6867] syz.1.433 uses obsolete (PF_INET,SOCK_PACKET)
[  101.458062][ T6869] netlink: 'syz.0.434': attribute type 3 has an invalid length.
[  101.461893][ T6869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.434'.
[  101.738019][ T6887] netlink: 'syz.2.441': attribute type 39 has an invalid length.
[  101.831809][ T6885] netlink: 277 bytes leftover after parsing attributes in process `syz.0.442'.
[  102.225773][ T6910] netlink: 'syz.2.452': attribute type 2 has an invalid length.
[  102.229805][ T6910] netlink: 'syz.2.452': attribute type 1 has an invalid length.
[  102.232922][ T6910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.452'.
[  102.285848][ T6905] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  102.472870][ T6913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.491968][ T6918] netlink: 830 bytes leftover after parsing attributes in process `syz.1.454'.
[  102.497378][ T6913] syz.2.453 (6913) used greatest stack depth: 19576 bytes left
[  102.778281][ T6937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'.
[  102.824678][ T6937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'.
[  102.861265][ T6942] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.463'.
[  102.927398][ T6937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'.
[  102.927805][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.950115][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.376375][ T6958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.470'.
[  104.491602][ T6983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.700328][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1681669547 wd_nsec: 1681669590
[  111.770808][ T6998] __nla_validate_parse: 2 callbacks suppressed
[  111.770825][ T6998] netlink: 88 bytes leftover after parsing attributes in process `syz.1.484'.
[  111.916019][ T7006] veth0_vlan: entered allmulticast mode
[  111.943489][ T7008] netlink: 'syz.2.489': attribute type 11 has an invalid length.
[  111.957244][ T7008] netlink: 'syz.2.489': attribute type 11 has an invalid length.
[  112.145168][ T7012] veth0_vlan: left promiscuous mode
[  112.685167][ T7012] veth0_vlan: entered promiscuous mode
[  114.971587][   T55] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[  115.004182][ T7075] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  115.012359][ T7075] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  115.140436][ T7086] netlink: 1 bytes leftover after parsing attributes in process `syz.1.522'.
[  115.255995][ T5854] cgroup: fork rejected by pids controller in /syz0
[  115.358658][ T7095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.526'.
[  115.363491][ T7095] unsupported nlmsg_type 40
[  115.405168][ T7097] netlink: 64 bytes leftover after parsing attributes in process `syz.1.527'.
[  116.192120][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.540'.
[  116.363421][ T7142] netlink: 'syz.2.542': attribute type 10 has an invalid length.
[  116.394777][ T7142] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  116.506331][ T7155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.587225][ T7160] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  116.849422][ T7181] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.556'.
[  117.034401][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  117.347629][ T5879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.476093][ T5879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.552255][ T5879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.635267][ T5879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.692078][ T7218] netlink: 'syz.2.572': attribute type 21 has an invalid length.
[  117.696219][ T7218] netlink: 'syz.2.572': attribute type 4 has an invalid length.
[  117.717981][ T7218] netlink: 14453 bytes leftover after parsing attributes in process `syz.2.572'.
[  117.847125][ T5879] bridge_slave_1: left allmulticast mode
[  117.854982][ T5879] bridge_slave_1: left promiscuous mode
[  117.859404][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.866161][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[  117.893128][ T5879] bridge_slave_0: left allmulticast mode
[  117.895266][ T5879] bridge_slave_0: left promiscuous mode
[  117.897449][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.028273][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.034361][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.038441][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.043451][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.053992][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.319624][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.327033][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.333220][ T5879] bond0 (unregistering): Released all slaves
[  118.470701][ T7237] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.577'.
[  118.489918][ T7237] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  119.135965][ T7255] netlink: 628 bytes leftover after parsing attributes in process `syz.2.582'.
[  119.213430][ T5879] hsr_slave_0: left promiscuous mode
[  119.217985][ T5879] hsr_slave_1: left promiscuous mode
[  119.259639][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.265433][ T7259] netlink: 'syz.2.584': attribute type 1 has an invalid length.
[  119.275553][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.281607][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.284533][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.323357][ T5879] veth1_macvtap: left promiscuous mode
[  119.326070][ T5879] veth0_macvtap: left promiscuous mode
[  119.331437][ T5879] veth1_vlan: left promiscuous mode
[  119.334441][ T5879] veth0_vlan: left promiscuous mode
[  120.161791][ T5850] Bluetooth: hci2: command tx timeout
[  120.389260][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  120.422987][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  120.825675][ T7233] chnl_net:caif_netlink_parms(): no params data found
[  121.126352][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.136201][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.146344][ T7233] bridge_slave_0: entered allmulticast mode
[  121.157731][ T7233] bridge_slave_0: entered promiscuous mode
[  121.168402][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.183359][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.195916][ T7233] bridge_slave_1: entered allmulticast mode
[  121.205854][ T7233] bridge_slave_1: entered promiscuous mode
[  121.227420][ T7297] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  121.279169][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.283914][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.354099][ T7233] team0: Port device team_slave_0 added
[  121.366721][ T7233] team0: Port device team_slave_1 added
[  121.500888][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.503256][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[  121.513480][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.540974][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.548335][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.551113][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.573923][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.653161][ T7319] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[  121.653872][ T7233] hsr_slave_0: entered promiscuous mode
[  121.656513][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'.
[  121.663797][ T7233] hsr_slave_1: entered promiscuous mode
[  121.666184][ T7233] debugfs: 'hsr0' already exists in 'hsr'
[  121.668175][ T7233] Cannot create hsr debugfs directory
[  122.191204][ T7347] netlink: 596 bytes leftover after parsing attributes in process `syz.1.610'.
[  122.228758][ T5850] Bluetooth: hci2: command tx timeout
[  122.441488][ T7233] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  122.462413][ T7233] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  122.471903][ T7233] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  122.482901][ T7233] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  122.523449][ T7364] netlink: 294 bytes leftover after parsing attributes in process `syz.1.615'.
[  122.655214][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.689610][ T7233] 8021q: adding VLAN 0 to HW filter on device team0
[  122.702796][ T4004] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.705106][ T4004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.734758][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.737375][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.041776][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.087371][ T7233] veth0_vlan: entered promiscuous mode
[  123.113416][ T7233] veth1_vlan: entered promiscuous mode
[  123.181559][ T7233] veth0_macvtap: entered promiscuous mode
[  123.195785][ T7233] veth1_macvtap: entered promiscuous mode
[  123.214858][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.227073][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.236962][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.244424][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.254907][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.274421][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.322878][ T7403] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.361609][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.364495][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.383435][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.386009][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.521321][ T7415] netlink: 188 bytes leftover after parsing attributes in process `syz.0.629'.
[  123.542461][ T7417] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.628'.
[  123.576037][ T7419] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.630'.
[  124.224654][ T7407] syzkaller0: entered promiscuous mode
[  124.231085][ T7407] syzkaller0: entered allmulticast mode
[  124.308663][ T5850] Bluetooth: hci2: command tx timeout
[  125.594968][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.606797][ T7435] erspan0 speed is unknown, defaulting to 1000
[  125.620138][ T7435] erspan0 speed is unknown, defaulting to 1000
[  125.623925][ T7435] erspan0 speed is unknown, defaulting to 1000
[  125.831845][ T5899] erspan0 speed is unknown, defaulting to 1000
[  125.834087][ T7435] infiniband syz0: set active
[  125.836707][ T7435] infiniband syz0: added erspan0
[  125.843519][ T7435] syz0: rxe_create_cq: returned err = -12
[  125.846119][ T7435] infiniband syz0: Couldn't create ib_mad CQ
[  125.849425][ T7435] infiniband syz0: Couldn't open port 1
[  125.850660][ T7442] netlink: 'syz.0.639': attribute type 22 has an invalid length.
[  125.897767][ T7435] RDS/IB: syz0: added
[  125.912302][ T7435] smc: adding ib device syz0 with port count 1
[  125.914656][ T7435] smc:    ib device syz0 port 1 has pnetid 
[  125.922649][ T5899] erspan0 speed is unknown, defaulting to 1000
[  125.942881][ T7435] erspan0 speed is unknown, defaulting to 1000
[  125.963269][ T5850] Bluetooth: hci2: Malformed LE Event: 0x02
[  126.254727][ T7435] erspan0 speed is unknown, defaulting to 1000
[  126.388874][ T5850] Bluetooth: hci2: command tx timeout
[  126.587888][ T7460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.646'.
[  126.704783][ T7435] erspan0 speed is unknown, defaulting to 1000
[  128.002285][ T7491] syz.2.658: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  128.012253][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: syz.2.658 Not tainted syzkaller #0 PREEMPT(full) 
[  128.012277][ T7491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.012289][ T7491] Call Trace:
[  128.012299][ T7491]  <TASK>
[  128.012309][ T7491]  dump_stack_lvl+0x189/0x250
[  128.012370][ T7491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.012397][ T7491]  ? __pfx__printk+0x10/0x10
[  128.012427][ T7491]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  128.012452][ T7491]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  128.012479][ T7491]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  128.012512][ T7491]  warn_alloc+0x214/0x310
[  128.012541][ T7491]  ? stack_depot_save_flags+0x41b/0x860
[  128.012570][ T7491]  ? __pfx_warn_alloc+0x10/0x10
[  128.012602][ T7491]  ? kasan_save_track+0x4f/0x80
[  128.012633][ T7491]  ? xskq_create+0x56/0x170
[  128.012650][ T7491]  ? xsk_init_queue+0xb0/0x110
[  128.012665][ T7491]  ? xsk_setsockopt+0x57b/0x8d0
[  128.012677][ T7491]  ? do_sock_setsockopt+0x17c/0x1b0
[  128.012697][ T7491]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  128.012714][ T7491]  ? do_syscall_64+0xfa/0x3b0
[  128.012732][ T7491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.012812][ T7491]  __vmalloc_node_range_noprof+0x125/0x12f0
[  128.012944][ T7491]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  128.012992][ T7491]  ? __kasan_kmalloc+0x93/0xb0
[  128.013030][ T7491]  vmalloc_user_noprof+0xad/0xf0
[  128.013051][ T7491]  ? xskq_create+0xbf/0x170
[  128.013076][ T7491]  xskq_create+0xbf/0x170
[  128.013107][ T7491]  xsk_init_queue+0xb0/0x110
[  128.013138][ T7491]  xsk_setsockopt+0x57b/0x8d0
[  128.013169][ T7491]  ? __pfx_xsk_setsockopt+0x10/0x10
[  128.013191][ T7491]  ? __pfx_aa_sk_perm+0x10/0x10
[  128.013224][ T7491]  ? __fget_files+0x2a/0x420
[  128.013239][ T7491]  ? aa_sock_opt_perm+0xff/0x1b0
[  128.013273][ T7491]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  128.013292][ T7491]  ? __pfx_xsk_setsockopt+0x10/0x10
[  128.013318][ T7491]  do_sock_setsockopt+0x17c/0x1b0
[  128.013360][ T7491]  __x64_sys_setsockopt+0x13f/0x1b0
[  128.013404][ T7491]  do_syscall_64+0xfa/0x3b0
[  128.013422][ T7491]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.013444][ T7491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.013461][ T7491]  ? exc_page_fault+0x9f/0xf0
[  128.013489][ T7491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.013505][ T7491] RIP: 0033:0x7f819e58eba9
[  128.013525][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.013539][ T7491] RSP: 002b:00007f819f3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  128.013557][ T7491] RAX: ffffffffffffffda RBX: 00007f819e7d5fa0 RCX: 00007f819e58eba9
[  128.013567][ T7491] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  128.013577][ T7491] RBP: 00007f819e611e19 R08: 0000000000000004 R09: 0000000000000000
[  128.013587][ T7491] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  128.013597][ T7491] R13: 00007f819e7d6038 R14: 00007f819e7d5fa0 R15: 00007ffc79507658
[  128.013667][ T7491]  </TASK>
[  128.013677][ T7491] Mem-Info:
[  128.047554][ T7493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.659'.
[  128.083533][ T7491] active_anon:7258 inactive_anon:0 isolated_anon:0
[  128.083533][ T7491]  active_file:6728 inactive_file:38268 isolated_file:0
[  128.083533][ T7491]  unevictable:1768 dirty:234 writeback:0
[  128.083533][ T7491]  slab_reclaimable:9765 slab_unreclaimable:54171
[  128.083533][ T7491]  mapped:18109 shmem:2439 pagetables:893
[  128.083533][ T7491]  sec_pagetables:0 bounce:0
[  128.083533][ T7491]  kernel_misc_reclaimable:0
[  128.083533][ T7491]  free:296366 free_pcp:17353 free_cma:0
[  128.111718][ T7493] openvswitch: netlink: Missing key (keys=40, expected=100)
[  128.183481][ T7491] Node 0 active_anon:21448kB inactive_anon:0kB active_file:22296kB inactive_file:74172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36840kB dirty:876kB writeback:0kB shmem:4764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6756kB pagetables:1732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  128.199632][ T7491] Node 1 active_anon:7560kB inactive_anon:0kB active_file:4616kB inactive_file:78900kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35572kB dirty:64kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4528kB pagetables:1868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  128.241777][ T7491] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  128.257809][ T7491] lowmem_reserve[]: 0 811 811 811 811
[  128.276117][ T7491] Node 0 DMA32 free:294812kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21448kB inactive_anon:0kB active_file:22296kB inactive_file:74172kB unevictable:3536kB writepending:876kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:41688kB local_pcp:18856kB free_cma:0kB
[  128.293604][ T7491] lowmem_reserve[]: 0 0 0 0 0
[  128.295363][ T7491] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  128.319166][ T7491] lowmem_reserve[]: 0 0 854 854 854
[  128.321152][ T7491] Node 1 Normal free:416752kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7560kB inactive_anon:0kB active_file:4616kB inactive_file:78900kB unevictable:3536kB writepending:64kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:27360kB local_pcp:9388kB free_cma:0kB
[  128.339893][ T7491] lowmem_reserve[]: 0 0 0 0 0
[  128.341732][ T7491] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  128.346118][ T7491] Node 0 DMA32: 70*4kB (ME) 433*8kB (UME) 212*16kB (UME) 167*32kB (UME) 63*64kB (UM) 108*128kB (UME) 29*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 5*2048kB (UM) 58*4096kB (M) = 294784kB
[  128.357156][ T7491] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  128.394995][ T7491] Node 1 Normal: 70*4kB (UME) 79*8kB (ME) 526*16kB (UME) 146*32kB (UM) 103*64kB (UM) 57*128kB (UM) 21*256kB (UM) 11*512kB (UME) 3*1024kB (U) 7*2048kB (UE) 88*4096kB (M) = 416752kB
[  128.410842][ T7491] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  128.414794][ T7491] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  128.428889][ T7491] 47435 total pagecache pages
[  128.431194][ T7491] 0 pages in swap cache
[  128.433208][ T7491] Free swap  = 124996kB
[  128.437327][ T7491] Total swap = 124996kB
[  128.443598][ T7491] 786301 pages RAM
[  128.445298][ T7491] 0 pages HighMem/MovableOnly
[  128.448124][ T7491] 241350 pages reserved
[  128.450605][ T7491] 0 pages cma reserved
[  129.054913][ T7528] netlink: 64019 bytes leftover after parsing attributes in process `syz.0.674'.
[  132.177268][ T7548] netlink: 'syz.2.683': attribute type 2 has an invalid length.
[  132.180869][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'.
[  132.507513][ T7554] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  132.695757][ T7567] netlink: 56 bytes leftover after parsing attributes in process `syz.0.691'.
[  133.043846][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  133.046589][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.093999][ T7575] netlink: 'syz.0.693': attribute type 10 has an invalid length.
[  133.097232][ T7575] netlink: 'syz.0.693': attribute type 1 has an invalid length.
[  133.167964][ T7577] netlink: 2 bytes leftover after parsing attributes in process `syz.0.694'.
[  135.707762][ T7657] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  135.710532][ T7657] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  136.377602][ T5850] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  139.572426][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.736'.
[  139.785175][ T7699] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.792767][ T7699] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.038404][ T7718] netlink: 'syz.0.748': attribute type 27 has an invalid length.
[  140.048446][ T7718] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.748'.
[  140.122619][ T7722] sit0: entered allmulticast mode
[  141.252460][ T7739] netlink: 180 bytes leftover after parsing attributes in process `syz.1.756'.
[  142.561323][ T7763] netlink: 'syz.2.767': attribute type 10 has an invalid length.
[  142.931160][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.935872][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.941185][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.945150][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.951830][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.012048][ T7774] erspan0 speed is unknown, defaulting to 1000
[  143.118011][ T7783] netlink: 'syz.2.776': attribute type 21 has an invalid length.
[  143.423508][ T7774] chnl_net:caif_netlink_parms(): no params data found
[  145.039963][ T5850] Bluetooth: hci2: command tx timeout
[  146.133152][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.137307][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.141869][ T7774] bridge_slave_0: entered allmulticast mode
[  146.144838][ T7774] bridge_slave_0: entered promiscuous mode
[  146.150629][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.159380][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.162062][ T7774] bridge_slave_1: entered allmulticast mode
[  146.165119][ T7774] bridge_slave_1: entered promiscuous mode
[  146.237240][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.248232][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.317370][ T7774] team0: Port device team_slave_0 added
[  146.323132][ T7774] team0: Port device team_slave_1 added
[  146.357055][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.360579][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.384599][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.393054][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.395186][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.406877][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.644812][ T7774] hsr_slave_0: entered promiscuous mode
[  146.648344][ T7774] hsr_slave_1: entered promiscuous mode
[  146.651883][ T7774] debugfs: 'hsr0' already exists in 'hsr'
[  146.654422][ T7774] Cannot create hsr debugfs directory
[  147.147905][ T5850] Bluetooth: hci2: command tx timeout
[  149.194203][ T5850] Bluetooth: hci2: command tx timeout
[  149.853942][ T7774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  149.873089][ T7774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  149.879627][ T7774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  149.886053][ T7774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  150.048389][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.068005][ T7774] 8021q: adding VLAN 0 to HW filter on device team0
[  150.086067][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.089276][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.109773][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.112783][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.240949][ T7846] netlink: 'syz.2.795': attribute type 4 has an invalid length.
[  150.438195][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.494875][ T7774] veth0_vlan: entered promiscuous mode
[  150.510867][ T7774] veth1_vlan: entered promiscuous mode
[  150.550567][ T7774] veth0_macvtap: entered promiscuous mode
[  150.560007][ T7774] veth1_macvtap: entered promiscuous mode
[  150.576687][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.600751][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.614838][ T5874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.641554][ T5874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.645359][ T5874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.663840][ T5874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.757304][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.768397][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.782902][ T7865] netlink: 104 bytes leftover after parsing attributes in process `syz.1.803'.
[  150.802611][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.805828][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.093170][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'.
[  151.097303][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'.
[  151.270037][ T5850] Bluetooth: hci2: command tx timeout
[  152.551776][ T7911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.820'.
[  152.662663][ T7919] netlink: 'syz.2.824': attribute type 29 has an invalid length.
[  152.666444][ T7919] netlink: 'syz.2.824': attribute type 29 has an invalid length.
[  152.670201][ T7919] netlink: 500 bytes leftover after parsing attributes in process `syz.2.824'.
[  152.764752][ T7927] netlink: 'syz.3.828': attribute type 1 has an invalid length.
[  152.767182][ T7927] netlink: 'syz.3.828': attribute type 2 has an invalid length.
[  152.797944][ T7929] netlink: 'syz.2.829': attribute type 21 has an invalid length.
[  152.808759][ T7929] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.829'.
[  154.923786][ T7988] netlink: 'syz.3.856': attribute type 22 has an invalid length.
[  154.927037][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'.
[  154.956742][ T7990] netlink: 'syz.2.857': attribute type 10 has an invalid length.
[  155.181896][ T8002] netlink: 136 bytes leftover after parsing attributes in process `syz.3.863'.
[  155.255456][ T8002] netlink: 'syz.3.863': attribute type 39 has an invalid length.
[  155.307735][ T8011] netlink: 'syz.1.867': attribute type 10 has an invalid length.
[  155.311246][ T8011] netlink: 3531 bytes leftover after parsing attributes in process `syz.1.867'.
[  155.450292][ T8023] netlink: 'syz.3.873': attribute type 29 has an invalid length.
[  155.454349][ T8023] netlink: 'syz.3.873': attribute type 29 has an invalid length.
[  155.553784][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.877'.
[  156.065433][ T5850] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  156.175812][ T8062] __nla_validate_parse: 2 callbacks suppressed
[  156.175829][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'.
[  156.182702][ T8062] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  156.186109][ T8062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.075274][ T8075] netlink: 'syz.3.895': attribute type 64 has an invalid length.
[  157.760270][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'.
[  160.085347][ T8101] option changes via remount are deprecated (pid=8100 comm=syz.3.908)
[  160.960306][ T8112] netlink: 112 bytes leftover after parsing attributes in process `syz.2.911'.
[  161.991007][ T8140] tap0: tun_chr_ioctl cmd 21731
[  162.026090][ T8140] tap0: tun_chr_ioctl cmd 2147767521
[  162.527785][ T8159] veth0_vlan: entered allmulticast mode
[  162.693302][ T8170] veth0_vlan: left promiscuous mode
[  162.711781][ T8170] veth0_vlan: entered promiscuous mode
[  162.758303][ T8173] netlink: 'syz.1.936': attribute type 3 has an invalid length.
[  162.766270][ T8173] netlink: 'syz.1.936': attribute type 1 has an invalid length.
[  162.774418][ T8173] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.936'.
[  164.683498][ T8199] syzkaller0: tun_chr_ioctl cmd 1074025677
[  164.687498][ T8199] syzkaller0: linktype set to 768
[  164.963039][ T8216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.968136][ T8218] netlink: 'syz.2.956': attribute type 12 has an invalid length.
[  164.972365][ T8218] netlink: 172 bytes leftover after parsing attributes in process `syz.2.956'.
[  165.063333][ T8220] netlink: 'syz.2.957': attribute type 29 has an invalid length.
[  165.106155][ T8220] netlink: 'syz.2.957': attribute type 29 has an invalid length.
[  165.139751][ T8220] netlink: 'syz.2.957': attribute type 29 has an invalid length.
[  165.154342][ T8220] netlink: 'syz.2.957': attribute type 29 has an invalid length.
[  166.566184][ T8262] netlink: 'syz.1.969': attribute type 10 has an invalid length.
[  167.314442][ T8262] bond0: (slave bond_slave_0): Releasing backup interface
[  167.449872][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.976'.
[  167.452839][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.976'.
[  167.872223][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.991'.
[  167.875000][ T8299] netlink: 46 bytes leftover after parsing attributes in process `syz.2.991'.
[  167.877768][ T8299] netlink: 46 bytes leftover after parsing attributes in process `syz.2.991'.
[  168.085304][ T8313] netlink: 'syz.2.997': attribute type 11 has an invalid length.
[  168.088032][ T8313] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.997'.
[  168.104806][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.156175][ T8319] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1000'.
[  168.176042][ T8319] netlink: 'syz.3.1000': attribute type 4 has an invalid length.
[  168.213046][ T8323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1002'.
[  168.262195][ T8323] netlink: 'syz.2.1002': attribute type 10 has an invalid length.
[  168.436893][ T8325] netlink: 'syz.3.1000': attribute type 10 has an invalid length.
[  168.829639][ T8325] team0: Port device dummy0 added
[  168.915073][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'.
[  168.931593][ T8325] syz.3.1000 (8325) used greatest stack depth: 18280 bytes left
[  169.033390][ T8344] netlink: 'syz.1.1009': attribute type 10 has an invalid length.
[  169.036192][ T8344] netlink: 'syz.1.1009': attribute type 19 has an invalid length.
[  169.038857][ T8344] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1009'.
[  169.403507][ T8350] syzkaller0: entered promiscuous mode
[  169.406512][ T8350] syzkaller0: entered allmulticast mode
[  170.821913][ T8378] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1022'.
[  171.100630][ T8398] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1028'.
[  172.070751][ T8425] netlink: 'syz.2.1043': attribute type 21 has an invalid length.
[  172.123703][ T8427] netlink: 'syz.3.1044': attribute type 21 has an invalid length.
[  173.013685][ T8431] netlink: 'syz.3.1048': attribute type 21 has an invalid length.
[  173.019994][ T8431] IPv6: NLM_F_CREATE should be specified when creating new route
[  173.024305][ T8431] IPv6: Can't replace route, no match found
[  173.220545][ T8451] netlink: 'syz.2.1055': attribute type 46 has an invalid length.
[  173.280785][ T8453] netlink: 'syz.2.1057': attribute type 9 has an invalid length.
[  173.346235][ T8455] netlink: 'syz.1.1058': attribute type 1 has an invalid length.
[  173.350488][ T8455] __nla_validate_parse: 1 callbacks suppressed
[  173.350541][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'.
[  176.089653][ T5850] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  176.144496][ T8495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1075'.
[  177.157206][ T8534] netlink: 'syz.3.1089': attribute type 10 has an invalid length.
[  177.167339][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1089'.
[  177.184820][ T8534] ipvlan1: entered promiscuous mode
[  177.187103][ T8534] ipvlan1: entered allmulticast mode
[  177.192950][ T8534] veth0_vlan: entered allmulticast mode
[  177.198042][ T8534] bridge0: port 3(ipvlan1) entered blocking state
[  177.200557][ T8534] bridge0: port 3(ipvlan1) entered disabled state
[  177.204571][ T8534] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  177.693830][ T8545] : renamed from wg2 (while UP)
[  177.913288][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'.
[  178.022930][ T8570] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  178.303596][ T8586] netlink: 'syz.3.1115': attribute type 21 has an invalid length.
[  178.348193][ T8590] netlink: 'syz.1.1116': attribute type 1 has an invalid length.
[  179.498225][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'.
[  179.539755][ T8616] netlink: 'syz.2.1127': attribute type 29 has an invalid length.
[  179.545683][ T8616] netlink: 'syz.2.1127': attribute type 29 has an invalid length.
[  179.559180][ T8600] delete_channel: no stack
[  179.606585][ T8621] netlink: 'syz.1.1130': attribute type 4 has an invalid length.
[  179.610511][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'.
[  179.847945][ T8640] tap0: tun_chr_ioctl cmd 2148553947
[  180.070668][ T8653] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1145'.
[  180.263597][ T5850] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  180.735031][ T8687] netlink: 'syz.2.1157': attribute type 29 has an invalid length.
[  180.830955][ T8693] netlink: 'syz.3.1159': attribute type 4 has an invalid length.
[  180.833845][ T8693] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1159'.
[  180.840031][ T8693] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  181.065929][ T8702] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1164'.
[  181.167023][ T8707] netlink: 'syz.2.1166': attribute type 2 has an invalid length.
[  181.187041][ T8707] : entered promiscuous mode
[  181.247822][ T8710] @: renamed from bond_slave_0 (while UP)
[  181.261046][ T5850] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  181.265361][ T8669] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1151'.
[  181.426930][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'.
[  181.579546][ T8743] netlink: 'syz.2.1179': attribute type 21 has an invalid length.
[  181.599701][ T8745] netlink: 'syz.1.1180': attribute type 4 has an invalid length.
[  181.602988][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'.
[  181.676757][ T8751] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1183'.
[  182.039935][ T8764] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1188'.
[  182.141027][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.144857][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.173966][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.177407][ T8768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.180585][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.183120][ T8768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.202544][ T8768] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  182.532528][ T8781] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  191.345169][ T8816] __nla_validate_parse: 4 callbacks suppressed
[  191.345189][ T8816] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1210'.
[  191.354223][ T8816] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1210'.
[  191.758710][ T5852] Bluetooth: hci0: command 0x0406 tx timeout
[  191.761933][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  195.809413][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  195.812234][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  198.415351][ T8825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  198.420203][ T8825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  198.424168][ T8825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  198.428072][ T8825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  198.432605][ T8825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  198.534972][ T8823] erspan0 speed is unknown, defaulting to 1000
[  198.641248][ T8831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  198.646052][ T8831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  198.650720][ T8831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  198.655380][ T8831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  198.659385][ T8831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  198.870356][ T8829] erspan0 speed is unknown, defaulting to 1000
[  199.214484][ T8823] chnl_net:caif_netlink_parms(): no params data found
[  200.697506][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.702556][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.705057][ T8823] bridge_slave_0: entered allmulticast mode
[  200.708478][ T8823] bridge_slave_0: entered promiscuous mode
[  200.786453][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.795519][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.798764][ T8823] bridge_slave_1: entered allmulticast mode
[  200.806524][ T8823] bridge_slave_1: entered promiscuous mode
[  200.875694][ T8823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.884205][ T8823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.966267][ T8844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1216'.
[  200.975180][ T8823] team0: Port device team_slave_0 added
[  201.058687][ T5879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.092945][ T8823] team0: Port device team_slave_1 added
[  201.218137][ T8848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.218134][ T5879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.248094][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.257738][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.276889][ T8823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.304796][ T5879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.323868][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.326949][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.338399][ T8823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.367189][ T8829] chnl_net:caif_netlink_parms(): no params data found
[  201.451304][ T5879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.487296][ T8823] hsr_slave_0: entered promiscuous mode
[  201.490899][ T8823] hsr_slave_1: entered promiscuous mode
[  201.493940][ T8823] debugfs: 'hsr0' already exists in 'hsr'
[  201.496340][ T8823] Cannot create hsr debugfs directory
[  201.619545][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.622732][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.625285][ T8829] bridge_slave_0: entered allmulticast mode
[  201.629149][ T8829] bridge_slave_0: entered promiscuous mode
[  201.633007][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.635386][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.637932][ T8829] bridge_slave_1: entered allmulticast mode
[  201.641126][ T8829] bridge_slave_1: entered promiscuous mode
[  201.693276][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.700467][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.771358][ T8829] team0: Port device team_slave_0 added
[  201.798950][ T8829] team0: Port device team_slave_1 added
[  201.858277][ T5879] bridge_slave_1: left allmulticast mode
[  201.861357][ T5879] bridge_slave_1: left promiscuous mode
[  201.863907][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.877503][ T5879] bridge_slave_0: left allmulticast mode
[  201.880713][ T5879] bridge_slave_0: left promiscuous mode
[  201.883252][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.114625][ T8854] validate_nla: 3 callbacks suppressed
[  202.114663][ T8854] netlink: 'syz.1.1218': attribute type 2 has an invalid length.
[  202.120553][ T8854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1218'.
[  202.280915][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.287440][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.293693][ T5879] bond0 (unregistering): Released all slaves
[  202.304025][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.306840][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.317351][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.356170][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.365884][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.375160][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.435519][ T8856] netlink: 'syz.1.1219': attribute type 1 has an invalid length.
[  202.468923][ T5850] Bluetooth: hci3: command tx timeout
[  202.491225][ T8829] hsr_slave_0: entered promiscuous mode
[  202.494796][ T8829] hsr_slave_1: entered promiscuous mode
[  202.497962][ T8829] debugfs: 'hsr0' already exists in 'hsr'
[  202.500834][ T8829] Cannot create hsr debugfs directory
[  202.561888][ T5850] Bluetooth: hci4: command tx timeout
[  203.079837][ T8823] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  203.165396][ T8823] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  203.189408][ T8823] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  203.223407][ T5879] hsr_slave_0: left promiscuous mode
[  203.228865][ T5879] hsr_slave_1: left promiscuous mode
[  203.231714][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.234129][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.237754][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.240554][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.253881][ T5879] veth1_macvtap: left promiscuous mode
[  203.255928][ T5879] veth0_macvtap: left promiscuous mode
[  203.258202][ T5879] veth1_vlan: left promiscuous mode
[  203.262092][ T5879] veth0_vlan: left promiscuous mode
[  203.847886][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  203.893344][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  204.196673][ T5879] team0 (unregistering): Port device dummy0 removed
[  204.335014][ T8823] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  204.432408][ T8829] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  204.447910][ T8829] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  204.480214][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'.
[  204.481484][ T8829] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  204.522260][ T8829] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  204.552879][ T5850] Bluetooth: hci3: command tx timeout
[  204.638995][ T5850] Bluetooth: hci4: command tx timeout
[  204.744951][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.879697][ T8823] 8021q: adding VLAN 0 to HW filter on device team0
[  204.908270][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.911346][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.941996][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.945501][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.986811][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.051267][ T8829] 8021q: adding VLAN 0 to HW filter on device team0
[  205.083402][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.084544][ T8900] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1226'.
[  205.086631][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.120503][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.123608][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.137873][ T8823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.517102][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.613148][ T8823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.881946][ T8829] veth0_vlan: entered promiscuous mode
[  205.895500][ T8829] veth1_vlan: entered promiscuous mode
[  205.953195][ T8829] veth0_macvtap: entered promiscuous mode
[  205.957493][ T8829] veth1_macvtap: entered promiscuous mode
[  206.000491][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.014772][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.061585][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.098013][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.102902][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.106154][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.282847][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.286096][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.326276][ T8823] veth0_vlan: entered promiscuous mode
[  206.356151][ T8823] veth1_vlan: entered promiscuous mode
[  206.364410][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.377633][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.451889][ T8823] veth0_macvtap: entered promiscuous mode
[  206.467173][ T8823] veth1_macvtap: entered promiscuous mode
[  206.518300][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.552818][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.596454][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.611814][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.615232][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.641543][ T5850] Bluetooth: hci3: command tx timeout
[  206.675944][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.709212][ T5850] Bluetooth: hci4: command tx timeout
[  206.723002][ T8938] netlink: 'syz.5.1227': attribute type 10 has an invalid length.
[  206.732020][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.735755][ T8938] team0: Port device batadv0 added
[  206.806878][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.810658][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.867840][ T4004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.875065][ T4004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.881315][ T8940] netlink: 'syz.5.1228': attribute type 29 has an invalid length.
[  206.896095][ T8940] netlink: 'syz.5.1228': attribute type 29 has an invalid length.
[  206.903080][ T8940] netlink: 'syz.5.1228': attribute type 29 has an invalid length.
[  207.347068][ T8963] syzkaller0: entered promiscuous mode
[  207.352244][ T8963] syzkaller0: entered allmulticast mode
[  207.365299][ T8963] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  207.412989][ T8966] netlink: 'syz.5.1239': attribute type 2 has an invalid length.
[  207.415562][ T8966] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1239'.
[  207.467514][ T8968] netlink: 'syz.5.1239': attribute type 2 has an invalid length.
[  207.471016][ T8968] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1239'.
[  207.706816][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'.
[  207.715550][ T8977] bond_slave_1: mtu less than device minimum
[  207.904042][ T8993] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1248'.
[  208.708925][ T5850] Bluetooth: hci3: command tx timeout
[  208.874631][ T5850] Bluetooth: hci4: command tx timeout
[  209.143619][ T9026] netlink: 'syz.1.1264': attribute type 4 has an invalid length.
[  209.175930][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'.
[  209.236065][ T9036] openvswitch: netlink: IP tunnel dst address not specified
[  209.538235][ T9049] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1274'.
[  209.547049][ T9049] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1274'.
[  209.562512][ T9049] netlink: 'syz.1.1274': attribute type 10 has an invalid length.
[  209.676353][ T9050] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1274'.
[  209.715158][ T9049] veth0_vlan: left promiscuous mode
[  209.732554][ T9049] veth0_vlan: entered promiscuous mode
[  209.802391][ T9049] team0: Device veth0_vlan failed to register rx_handler
[  210.006484][ T9049] syz.1.1274 (9049) used greatest stack depth: 17144 bytes left
[  210.243090][ T9053] netlink: 'syz.4.1275': attribute type 4 has an invalid length.
[  210.619746][ T9082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.807424][ T9092] netlink: 'syz.5.1292': attribute type 10 has an invalid length.
[  210.858455][ T9092] team0: Device ipvlan1 failed to register rx_handler
[  210.951821][ T9092] netlink: 'syz.5.1292': attribute type 29 has an invalid length.
[  210.954653][ T9092] netlink: 'syz.5.1292': attribute type 3 has an invalid length.
[  210.958009][ T9092] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1292'.
[  210.984430][ T9099] netlink: 'syz.4.1294': attribute type 10 has an invalid length.
[  211.092696][ T9100] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1294'.
[  211.102510][ T9099] team0 (unregistering): Port device team_slave_0 removed
[  211.109328][ T9099] team0 (unregistering): Port device team_slave_1 removed
[  212.889365][ T9206] __nla_validate_parse: 5 callbacks suppressed
[  212.889384][ T9206] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1341'.
[  212.896448][ T9206] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1341'.
[  212.901736][ T9206] netlink: 'syz.5.1341': attribute type 5 has an invalid length.
[  212.905416][ T9206] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1341'.
[  212.956558][ T9209] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1342'.
[  212.971922][ T9211] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1343'.
[  213.124328][ T9222] netlink: 'syz.5.1349': attribute type 9 has an invalid length.
[  213.138043][ T9222] netlink: 204732 bytes leftover after parsing attributes in process `syz.5.1349'.
[  213.215076][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'.
[  213.255170][ T9226] netlink: 'syz.5.1351': attribute type 1 has an invalid length.
[  213.267121][ T9226] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1351'.
[  214.097044][ T9232] netlink: 'syz.5.1352': attribute type 1 has an invalid length.
[  214.110748][ T9232] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1352'.
[  214.206718][ T9237] netlink: 'syz.1.1354': attribute type 3 has an invalid length.
[  214.213076][ T9237] netlink: 'syz.1.1354': attribute type 1 has an invalid length.
[  214.217612][ T9238] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1355'.
[  214.224737][ T9238] netlink: 'syz.5.1355': attribute type 2 has an invalid length.
[  215.004155][ T5874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.123885][ T5874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.142562][ T9279] netlink: 'syz.4.1374': attribute type 1 has an invalid length.
[  215.187693][ T5874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.264238][ T9282] IPv6: Can't replace route, no match found
[  215.282209][ T5874] bond0: (slave netdevsim0): Releasing backup interface
[  215.293695][ T5874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.320603][ T9282] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.477705][ T5874] bridge_slave_1: left allmulticast mode
[  215.480986][ T5874] bridge_slave_1: left promiscuous mode
[  215.483055][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.487345][ T5874] bridge_slave_0: left allmulticast mode
[  215.489682][ T5874] bridge_slave_0: left promiscuous mode
[  215.491698][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.721409][   T27] smc: removing ib device syz0
[  216.850691][ T5874] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  217.026991][ T5874] bond0 (unregistering): (slave c@): Releasing backup interface
[  217.041556][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.057974][ T5874] bond0 (unregistering): Released all slaves
[  217.088303][ T8924] erspan0 speed is unknown, defaulting to 1000
[  217.103172][ T8924] syz0: Port: 1 Link DOWN
[  217.103221][ T5912] erspan0 speed is unknown, defaulting to 1000
[  217.253818][ T9311] netlink: 'syz.5.1388': attribute type 9 has an invalid length.
[  218.313203][ T9353] __nla_validate_parse: 10 callbacks suppressed
[  218.313224][ T9353] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1402'.
[  218.385632][ T9356] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1402'.
[  218.621001][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1404'.
[  219.646320][ T9361] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.1405'.
[  219.834153][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'.
[  220.563455][ T9421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.599435][ T9416] netlink: 'syz.4.1424': attribute type 2 has an invalid length.
[  220.603218][ T9416] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1424'.
[  220.618692][ T9416] nbd: must specify a device to reconfigure
[  220.852688][ T9439] netlink: 'syz.4.1433': attribute type 29 has an invalid length.
[  220.863644][ T9439] netlink: 'syz.4.1433': attribute type 29 has an invalid length.
[  221.032618][ T9448] netlink: 'syz.5.1436': attribute type 1 has an invalid length.
[  221.035689][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1436'.
[  221.634307][ T9483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1445'.
[  221.776571][ T9492] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1448'.
[  221.979074][ T9505] netlink: 'syz.4.1454': attribute type 16 has an invalid length.
[  221.985486][ T9505] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1454'.
[  223.096038][ T9533] netlink: 'syz.1.1465': attribute type 21 has an invalid length.
[  223.648350][ T9554] netlink: 'syz.4.1472': attribute type 10 has an invalid length.
[  223.653430][ T9554] __nla_validate_parse: 2 callbacks suppressed
[  223.653446][ T9554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'.
[  223.662381][ T9554] bridge0: port 3(batadv0) entered blocking state
[  223.665100][ T9554] bridge0: port 3(batadv0) entered disabled state
[  223.667743][ T9554] batadv0: entered allmulticast mode
[  223.674420][ T9554] batadv0: entered promiscuous mode
[  223.677408][ T9554] bridge0: port 3(batadv0) entered blocking state
[  223.680370][ T9554] bridge0: port 3(batadv0) entered forwarding state
[  223.856857][ T9556] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1473'.
[  223.869153][ T5879] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  223.873257][ T5879] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  223.881945][ T9556] erspan0 speed is unknown, defaulting to 1000
[  224.133803][ T9567] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  224.136534][ T9567] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  224.196915][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1481'.
[  224.342188][ T9578] siw: device registration error -23
[  224.496721][ T9590] netlink: 'syz.4.1488': attribute type 1 has an invalid length.
[  224.512608][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.667526][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'.
[  224.870495][ T9606] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  224.873772][ T9606] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  225.151381][ T9612] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1495'.
[  225.159854][ T9608] : port 1(vlan0) entered blocking state
[  225.162020][ T9608] : port 1(vlan0) entered disabled state
[  225.164453][ T9608] vlan0: entered allmulticast mode
[  225.170981][ T9608] veth0_vlan: entered allmulticast mode
[  225.189612][ T9608] vlan0: entered promiscuous mode
[  225.271345][ T9616] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1497'.
[  225.281019][ T9616] netlink: 'syz.4.1497': attribute type 2 has an invalid length.
[  225.284408][ T9616] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1497'.
[  225.302560][ T9616] netlink: 'syz.4.1497': attribute type 2 has an invalid length.
[  225.305996][ T9616] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1497'.
[  225.323229][ T9618] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1498'.
[  225.343791][ T9620] sysfs: Unknown parameter 'subj_type'
[  225.421095][ T9623] xt_l2tp: missing protocol rule (udp|l2tpip)
[  225.503828][ T9628] netlink: 825 bytes leftover after parsing attributes in process `syz.4.1503'.
[  226.248852][ T5850] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  226.499109][ T9661] syzkaller0: entered promiscuous mode
[  226.501316][ T9661] syzkaller0: entered allmulticast mode
[  228.538201][ T9674] netlink: 'syz.4.1521': attribute type 12 has an invalid length.
[  228.795691][ T9681] netlink: 'syz.1.1520': attribute type 10 has an invalid length.
[  228.798310][ T9681] __nla_validate_parse: 6 callbacks suppressed
[  228.798325][ T9681] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1520'.
[  228.829353][ T9681] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  229.399894][ T9668] syz.1.1520 (9668) used greatest stack depth: 16880 bytes left
[  229.459537][ T9703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.551074][ T9708] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  229.642752][ T9713] net veth1_virt_wifi : renamed from virt_wifi0
[  229.916809][ T9725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1544'.
[  230.449378][ T9745] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1552'.
[  230.521426][ T9741] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1552'.
[  230.821186][ T9743] netlink: 'syz.4.1551': attribute type 10 has an invalid length.
[  231.105135][ T9743] macvlan0: entered allmulticast mode
[  231.156079][ T9743] veth1_vlan: entered allmulticast mode
[  231.170312][ T9743] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  231.929541][ T9784] netlink: 'syz.1.1569': attribute type 4 has an invalid length.
[  232.107627][ T9793] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1571'.
[  232.119393][ T9789] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1571'.
[  232.125955][ T9791] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1572'.
[  232.133016][ T9789] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1571'.
[  232.362564][ T9799] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1574'.
[  232.384353][ T9799] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1574'.
[  232.422009][ T9805] netlink: 'syz.1.1576': attribute type 29 has an invalid length.
[  232.433073][ T9805] netlink: 'syz.1.1576': attribute type 29 has an invalid length.
[  232.441181][ T9805] netlink: 'syz.1.1576': attribute type 29 has an invalid length.
[  233.993622][ T9851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1584'.
[  234.340884][ T9867] netlink: 'syz.1.1587': attribute type 4 has an invalid length.
[  234.464094][ T9873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1591'.
[  234.766364][ T9880] netlink: 'syz.1.1592': attribute type 29 has an invalid length.
[  234.788415][ T9884] netlink: 'syz.1.1592': attribute type 29 has an invalid length.
[  234.870692][ T9880] netlink: 'syz.1.1592': attribute type 29 has an invalid length.
[  234.964672][ T9884] netlink: 'syz.1.1592': attribute type 29 has an invalid length.
[  235.018165][ T9891] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1598'.
[  235.026860][ T9884] netlink: 'syz.1.1592': attribute type 2 has an invalid length.
[  235.048844][ T9884] netlink: 'syz.1.1592': attribute type 9 has an invalid length.
[  235.055276][ T9884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1592'.
[  235.132235][ T9893] netlink: 'syz.4.1599': attribute type 13 has an invalid length.
[  236.927209][ T9925] openvswitch: netlink: EtherType 50a is less than min 600
[  237.707359][ T9946] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  237.720979][ T9946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.120534][ T9953] delete_channel: no stack
[  238.426966][ T9963] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1633'.
[  238.565547][ T9967] netlink: 'syz.1.1635': attribute type 37 has an invalid length.
[  238.827348][ T9978] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1638'.
[  238.935383][ T9980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1641'.
[  239.273179][ T9993] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1647'.
[  240.674457][T10029] netlink: 'syz.1.1662': attribute type 2 has an invalid length.
[  240.890028][T10038] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1667'.
[  240.942753][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1666'.
[  240.949413][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1666'.
[  240.954704][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.958745][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.963093][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.967431][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.974181][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.205656][T10042] chnl_net:caif_netlink_parms(): no params data found
[  241.213608][T10056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.262791][T10060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.297783][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'.
[  241.319687][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'.
[  241.356785][T10067] : entered promiscuous mode
[  241.360965][T10042] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.363475][T10042] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.376155][T10042] bridge_slave_0: entered allmulticast mode
[  241.380038][T10042] bridge_slave_0: entered promiscuous mode
[  241.384939][T10042] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.391528][T10042] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.393931][T10042] bridge_slave_1: entered allmulticast mode
[  241.406225][T10042] bridge_slave_1: entered promiscuous mode
[  241.473707][T10042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.482432][T10042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.535666][T10042] team0: Port device team_slave_0 added
[  241.541321][T10042] team0: Port device team_slave_1 added
[  241.583678][T10042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.586031][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.595380][T10042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.708058][T10042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.715025][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.731530][T10042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.781654][T10042] hsr_slave_0: entered promiscuous mode
[  241.785218][T10042] hsr_slave_1: entered promiscuous mode
[  241.787613][T10042] debugfs: 'hsr0' already exists in 'hsr'
[  241.790767][T10042] Cannot create hsr debugfs directory
[  242.032152][T10097] syzkaller0: entered promiscuous mode
[  242.033901][T10097] syzkaller0: entered allmulticast mode
[  242.057321][T10042] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  242.065842][T10042] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  242.107888][T10042] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  243.033477][   T55] Bluetooth: hci1: command tx timeout
[  243.415490][T10042] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  243.423648][T10100] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  243.565872][T10042] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.596292][T10042] 8021q: adding VLAN 0 to HW filter on device team0
[  243.603641][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.606104][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.629853][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.632162][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.652567][T10110] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1692'.
[  243.811277][T10042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.825533][T10127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1697'.
[  243.828442][T10127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1697'.
[  243.834078][T10124] tap0: tun_chr_ioctl cmd 1074025678
[  243.835892][T10124] tap0: group set to 0
[  244.034143][T10042] veth0_vlan: entered promiscuous mode
[  244.043090][T10042] veth1_vlan: entered promiscuous mode
[  244.064463][T10042] veth0_macvtap: entered promiscuous mode
[  244.070496][T10042] veth1_macvtap: entered promiscuous mode
[  244.086292][T10042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.098415][T10042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.107960][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.116953][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.129550][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.136207][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.212237][T10149] netlink: 'syz.1.1706': attribute type 16 has an invalid length.
[  244.221114][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.223714][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.238473][T10149] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1706'.
[  244.442836][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.446507][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.887285][T10169] netlink: 'syz.1.1713': attribute type 25 has an invalid length.
[  244.895329][T10169] netlink: 'syz.1.1713': attribute type 28 has an invalid length.
[  245.057391][T10176] : port 1(veth0_to_bridge) entered blocking state
[  245.062827][T10176] : port 1(veth0_to_bridge) entered disabled state
[  245.065535][T10176] veth0_to_bridge: entered allmulticast mode
[  245.073762][T10176] veth0_to_bridge: entered promiscuous mode
[  245.081018][T10176] : port 2(veth0_to_team) entered blocking state
[  245.083457][T10176] : port 2(veth0_to_team) entered disabled state
[  245.086010][T10176] veth0_to_team: entered allmulticast mode
[  245.093362][T10176] veth0_to_team: entered promiscuous mode
[  245.121093][   T55] Bluetooth: hci1: command tx timeout
[  245.204811][T10180] syzkaller0: entered promiscuous mode
[  245.211401][T10180] syzkaller0: entered allmulticast mode
[  245.792941][T10191] netlink: 'syz.6.1722': attribute type 7 has an invalid length.
[  246.941617][T10200] netlink: 'syz.6.1725': attribute type 1 has an invalid length.
[  247.193918][   T55] Bluetooth: hci1: command tx timeout
[  247.266489][T10213] netlink: 'syz.6.1731': attribute type 10 has an invalid length.
[  247.272120][T10213] __nla_validate_parse: 3 callbacks suppressed
[  247.272133][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1731'.
[  247.281210][T10213] ipvlan1: entered promiscuous mode
[  247.282912][T10213] ipvlan1: entered allmulticast mode
[  247.284576][T10213] veth0_vlan: entered allmulticast mode
[  247.288418][T10213] bridge0: port 3(ipvlan1) entered blocking state
[  247.291382][T10213] bridge0: port 3(ipvlan1) entered disabled state
[  247.295232][T10213] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  247.580168][T10222] delete_channel: no stack
[  247.586589][T10222] delete_channel: no stack
[  247.626587][T10222] netlink: 'syz.1.1734': attribute type 6 has an invalid length.
[  247.630895][T10222] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1734'.
[  247.944363][   T33] audit: type=1107 audit(1758208128.470:2): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  249.269890][   T55] Bluetooth: hci1: command tx timeout
[  249.280368][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'.
[  249.340513][T10264] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1752'.
[  249.794544][T10275] netlink: 'syz.6.1757': attribute type 1 has an invalid length.
[  250.296733][T10306] netlink: 202232 bytes leftover after parsing attributes in process `syz.6.1772'.
[  250.304158][T10306] netlink: zone id is out of range
[  250.306333][T10306] netlink: zone id is out of range
[  250.353744][T10307] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1771'.
[  250.357445][T10307] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1771'.
[  250.536472][T10310] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1771'.
[  250.706539][T10310] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1771'.
[  251.138465][T10333] netlink: 'syz.6.1784': attribute type 21 has an invalid length.
[  251.141303][T10333] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1784'.
[  253.250000][T10393] __nla_validate_parse: 2 callbacks suppressed
[  253.250016][T10393] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1812'.
[  253.645203][T10410] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1816'.
[  253.649525][T10409] netlink: 'syz.1.1819': attribute type 10 has an invalid length.
[  253.652743][T10409] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1819'.
[  254.277861][T10409] vlan0 (unregistering): left allmulticast mode
[  254.280681][T10409] veth0_vlan (unregistering): left allmulticast mode
[  254.283461][T10409] vlan0 (unregistering): left promiscuous mode
[  254.286309][T10409] : port 1(vlan0) entered disabled state
[  255.912260][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.915064][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  256.007810][T10460] netlink: 'syz.1.1835': attribute type 10 has an invalid length.
[  256.021741][T10460] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1835'.
[  256.095157][T10466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  256.316829][T10478] netlink: 'syz.1.1844': attribute type 21 has an invalid length.
[  256.324002][T10478] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1844'.
[  256.327716][T10478] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1844'.
[  256.601673][T10489] netlink: 'syz.1.1848': attribute type 10 has an invalid length.
[  256.635367][T10489] geneve0: entered promiscuous mode
[  256.665041][T10489] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  257.004844][T10496] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1851'.
[  257.009472][T10495] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1851'.
[  257.050892][T10498] netlink: 'syz.1.1852': attribute type 39 has an invalid length.
[  258.423104][T10531] netlink: 'syz.6.1868': attribute type 1 has an invalid length.
[  258.536251][T10538] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  258.694471][T10542] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.1873'.
[  258.900390][T10547] netlink: 'syz.6.1875': attribute type 4 has an invalid length.
[  258.902819][T10547] netlink: 211448 bytes leftover after parsing attributes in process `syz.6.1875'.
[  259.044734][T10552] netlink: 'syz.6.1877': attribute type 21 has an invalid length.
[  259.337440][T10570] netlink: 'syz.1.1886': attribute type 4 has an invalid length.
[  259.339890][T10570] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1886'.
[  259.514128][T10584] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.1892'.
[  260.703431][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  260.709074][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  260.712838][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  260.719787][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  260.720113][T10606] netlink: 'syz.1.1902': attribute type 10 has an invalid length.
[  260.725829][T10606] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1902'.
[  260.732081][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  261.028329][T10602] chnl_net:caif_netlink_parms(): no params data found
[  261.188389][T10602] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.193487][T10602] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.196479][T10602] bridge_slave_0: entered allmulticast mode
[  261.201063][T10602] bridge_slave_0: entered promiscuous mode
[  261.210493][T10602] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.213427][T10602] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.216409][T10602] bridge_slave_1: entered allmulticast mode
[  261.221382][T10602] bridge_slave_1: entered promiscuous mode
[  261.326646][T10602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.364371][T10602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.429172][T10602] team0: Port device team_slave_0 added
[  261.432856][T10602] team0: Port device team_slave_1 added
[  261.458707][T10602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.461033][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.471190][T10602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.479529][T10602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.481894][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.492593][T10602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.536394][T10602] hsr_slave_0: entered promiscuous mode
[  261.539494][T10602] hsr_slave_1: entered promiscuous mode
[  261.542278][T10602] debugfs: 'hsr0' already exists in 'hsr'
[  261.544699][T10602] Cannot create hsr debugfs directory
[  261.736821][T10639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1914'.
[  261.743743][T10639] openvswitch: netlink: Missing key (keys=40, expected=100)
[  261.774005][T10602] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  261.780605][T10602] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  261.786977][T10602] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  261.796766][T10602] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  261.839691][T10602] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.842453][T10602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.845190][T10602] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.848276][T10602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.898926][T10651] netlink: 'syz.1.1916': attribute type 1 has an invalid length.
[  261.902835][T10651] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1916'.
[  261.906932][T10602] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.915724][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.921613][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.964753][T10602] 8021q: adding VLAN 0 to HW filter on device team0
[  261.978267][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.981262][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.992289][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.995218][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.792241][   T55] Bluetooth: hci2: command tx timeout
[  262.942435][T10667] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1921'.
[  263.554199][T10602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.629539][T10674] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.1923'.
[  263.838417][T10602] veth0_vlan: entered promiscuous mode
[  263.852150][T10602] veth1_vlan: entered promiscuous mode
[  263.874774][T10602] veth0_macvtap: entered promiscuous mode
[  263.879723][T10602] veth1_macvtap: entered promiscuous mode
[  263.901293][T10602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.915265][T10602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.923318][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.937323][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.953405][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'.
[  263.995464][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.001913][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.057289][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'.
[  264.062803][T10691] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1929'.
[  264.066638][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'.
[  264.100507][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.103754][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.166952][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.171663][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.184312][T10697] netlink: 802 bytes leftover after parsing attributes in process `syz.1.1932'.
[  264.227300][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1930'.
[  264.288267][T10699] netlink: 'syz.6.1930': attribute type 1 has an invalid length.
[  264.302839][T10699] openvswitch: netlink: Key type 10768 is out of range max 32
[  264.522662][T10716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.870890][   T55] Bluetooth: hci2: command tx timeout
[  265.158098][T10734] netlink: 'syz.1.1946': attribute type 21 has an invalid length.
[  265.165056][T10734] IPv6: NLM_F_CREATE should be specified when creating new route
[  265.346175][T10747] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1952'.
[  265.390173][T10747] hsr_slave_0: left promiscuous mode
[  265.393301][T10747] hsr_slave_1: left promiscuous mode
[  265.492244][T10757] netlink: 'syz.7.1957': attribute type 1 has an invalid length.
[  265.564059][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1959'.
[  265.567232][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1959'.
[  265.574143][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'.
[  266.254163][T10801] openvswitch: netlink: Message has 5588 unknown bytes.
[  266.257035][T10801] openvswitch: netlink: Actions may not be safe on all matching packets
[  266.595710][T10817] netlink: 'syz.6.1985': attribute type 1 has an invalid length.
[  266.599282][T10817] netlink: 'syz.6.1985': attribute type 1 has an invalid length.
[  266.978677][   T55] Bluetooth: hci2: command tx timeout
[  267.395507][T10849] netlink: 'syz.1.2000': attribute type 2 has an invalid length.
[  267.398282][T10849] netlink: 'syz.1.2000': attribute type 8 has an invalid length.
[  267.406077][T10849] netlink: 'syz.1.2000': attribute type 9 has an invalid length.
[  267.414743][T10849] netlink: 'syz.1.2000': attribute type 10 has an invalid length.
[  267.417453][T10849] netlink: 'syz.1.2000': attribute type 11 has an invalid length.
[  267.428001][T10851] netlink: 'syz.6.2001': attribute type 7 has an invalid length.
[  267.877166][T10872] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  268.256004][T10879] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  269.030041][   T55] Bluetooth: hci2: command tx timeout
[  269.703947][T10902] delete_channel: no stack
[  269.735095][T10902] delete_channel: no stack
[  270.213300][T10937] netlink: 'syz.7.2039': attribute type 17 has an invalid length.
[  270.287886][T10943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  270.290882][T10943] IPv6: NLM_F_CREATE should be set when creating new route
[  270.293777][T10943] IPv6: NLM_F_CREATE should be set when creating new route
[  270.296647][T10943] IPv6: NLM_F_CREATE should be set when creating new route
[  270.441261][T10954] __nla_validate_parse: 15 callbacks suppressed
[  270.441281][T10954] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2043'.
[  270.458408][T10949] netlink: 'syz.6.2043': attribute type 13 has an invalid length.
[  270.468354][T10949] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2043'.
[  270.486585][T10949] : renamed from syz_tun (while UP)
[  270.510573][T10949] : refused to change device tx_queue_len
[  270.513034][T10949] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  270.540859][T10956] delete_channel: no stack
[  270.668646][T10964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2050'.
[  270.676321][T10965] netlink: 'syz.6.2051': attribute type 1 has an invalid length.
[  270.684466][T10965] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2051'.
[  270.776493][T10974] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2056'.
[  271.050434][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'.
[  271.054858][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'.
[  271.062785][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'.
[  271.127840][T10988] netlink: 'syz.1.2063': attribute type 2 has an invalid length.
[  271.132354][T10988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2063'.
[  271.421133][T11002] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2067'.
[  272.489240][T11016] netlink: 'syz.6.2074': attribute type 22 has an invalid length.
[  272.987700][T11048] netlink: 'syz.6.2088': attribute type 10 has an invalid length.
[  273.004534][T11048] batman_adv: batadv0: Adding interface: hsr_slave_1
[  273.012816][T11048] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.031604][T11048] batman_adv: batadv0: Interface activated: hsr_slave_1
[  273.220362][T11051] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  273.887060][T11124] netlink: 'syz.1.2095': attribute type 21 has an invalid length.
[  274.225662][T11128] netlink: 'syz.1.2097': attribute type 10 has an invalid length.
[  274.231271][T11128] bond0: entered promiscuous mode
[  274.234399][T11128] bond_slave_1: entered promiscuous mode
[  274.399258][T11128] team0: Port device bond0 removed
[  274.403119][T11128] bridge0: port 3(bond0) entered blocking state
[  274.405777][T11128] bridge0: port 3(bond0) entered disabled state
[  274.408961][T11128] bond0: entered allmulticast mode
[  274.411376][T11128] bond_slave_1: entered allmulticast mode
[  274.413898][T11128] geneve0: entered allmulticast mode
[  274.501861][T11141] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  274.531941][T11143] netlink: 'syz.7.2104': attribute type 7 has an invalid length.
[  275.546666][T11194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.624527][T11199] __nla_validate_parse: 7 callbacks suppressed
[  275.624541][T11199] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2130'.
[  276.695416][T11218] netlink: 'syz.6.2137': attribute type 13 has an invalid length.
[  276.739771][T11218] netlink: 'syz.6.2137': attribute type 17 has an invalid length.
[  277.075250][T11218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.567517][T11239] : renamed from gre0 (while UP)
[  278.641027][T11270] netlink: 'syz.6.2160': attribute type 39 has an invalid length.
[  278.959512][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2162'.
[  278.963790][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2162'.
[  278.972445][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2162'.
[  279.734545][T11299] netlink: 'syz.7.2172': attribute type 5 has an invalid length.
[  279.862457][T11303] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.2174'.
[  282.259904][T11347] svc: failed to register nfsdv3 RPC service (errno 111).
[  282.266080][T11347] svc: failed to register nfsaclv3 RPC service (errno 111).
[  282.353024][T11349] netlink: 'syz.1.2191': attribute type 16 has an invalid length.
[  282.356922][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2191'.
[  282.416822][T11349] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.928167][T11376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.757406][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2221'.
[  284.875712][T11421] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.2223'.
[  284.890427][T11414] -1: renamed from syzkaller0
[  285.100608][T11423] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2224'.
[  285.398280][T11431] netlink: 'syz.7.2228': attribute type 32 has an invalid length.
[  285.401046][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2228'.
[  285.521212][T11437] IPv6: NLM_F_CREATE should be specified when creating new route
[  285.627610][T11444] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2232'.
[  285.631998][T11439] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2232'.
[  286.207049][T11464] netlink: zone id is out of range
[  286.211986][T11474] netlink: del zone limit has 4 unknown bytes
[  286.243731][T11464] netlink: zone id is out of range
[  286.257485][T11464] netlink: zone id is out of range
[  286.846694][ T5879] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.887532][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2253'.
[  286.918351][T11464] netlink: set zone limit has 4 unknown bytes
[  287.197732][T11500] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2258'.
[  287.366376][T11511] netlink: 'syz.1.2263': attribute type 21 has an invalid length.
[  288.126839][T11533] netlink: 'syz.6.2273': attribute type 3 has an invalid length.
[  288.132568][T11533] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.2273'.
[  288.705635][T11537] syzkaller0: tun_chr_ioctl cmd 1074025677
[  288.708328][T11537] syzkaller0: Linktype set failed because interface is up
[  288.854277][T11539] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  288.859962][T11539] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  290.634892][T11559] netlink: 'syz.1.2278': attribute type 16 has an invalid length.
[  290.640001][T11559] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2278'.
[  290.760649][T11565] netlink: 'syz.7.2281': attribute type 41 has an invalid length.
[  290.763829][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2281'.
[  290.847675][T11571] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2284'.
[  290.857339][T11571] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2284'.
[  290.861966][T11571] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2284'.
[  290.984155][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2286'.
[  290.987786][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2286'.
[  291.168327][T11591] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2293'.
[  291.179241][T11591] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2293'.
[  291.505197][T11604] raw_sendmsg: syz.6.2299 forgot to set AF_INET. Fix it!
[  291.651926][T11618] openvswitch: netlink: Flow key attr not present in new flow.
[  292.143518][T11650] netlink: 'syz.1.2316': attribute type 4 has an invalid length.
[  292.154068][T11650] netlink: 'syz.1.2316': attribute type 10 has an invalid length.
[  292.903246][T11656] IPv6: Can't replace route, no match found
[  297.470762][T11711] netlink: 'syz.1.2344': attribute type 27 has an invalid length.
[  297.473806][T11711] __nla_validate_parse: 5 callbacks suppressed
[  297.473822][T11711] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2344'.
[  297.561191][T11713] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2345'.
[  297.638311][T11720] netlink: 'syz.1.2348': attribute type 1 has an invalid length.
[  297.671401][T11720] netlink: 'syz.1.2348': attribute type 2 has an invalid length.
[  297.837599][T11720] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2348'.
[  297.953819][T11733] netlink: 'syz.6.2354': attribute type 21 has an invalid length.
[  298.074496][T11738] C: renamed from team_slave_0 (while UP)
[  298.125568][T11741] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2354'.
[  298.317525][T11738] netlink: 'syz.6.2354': attribute type 4 has an invalid length.
[  298.323217][T11738] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2354'.
[  298.328198][T11738] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  300.275199][T11747] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  300.305563][T11748] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  300.383964][T11752] syzkaller0: entered promiscuous mode
[  300.385785][T11752] syzkaller0: entered allmulticast mode
[  301.141865][T11772] netlink: 'syz.6.2369': attribute type 13 has an invalid length.
[  301.145378][T11772] netlink: 'syz.6.2369': attribute type 17 has an invalid length.
[  302.268212][T11772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  302.316296][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2373'.
[  302.343878][T11782] netlink: 'syz.1.2374': attribute type 21 has an invalid length.
[  302.347472][T11782] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2374'.
[  302.354745][T11782] netlink: 'syz.1.2374': attribute type 4 has an invalid length.
[  303.283977][T11796] netlink: 'syz.7.2379': attribute type 1 has an invalid length.
[  303.411774][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2382'.
[  303.637254][T11816] netlink: 'syz.7.2388': attribute type 21 has an invalid length.
[  303.730077][T11818] netlink: 'syz.7.2389': attribute type 3 has an invalid length.
[  303.736979][T11818] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2389'.
[  307.505183][T11851] : entered promiscuous mode
[  307.806592][T11860] netlink: 'syz.6.2407': attribute type 10 has an invalid length.
[  307.953778][T11865] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2409'.
[  308.070356][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  308.073657][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  308.077379][   T55] Bluetooth: hci2: hardware error 0x00
[  308.945870][T11876] bpf: Bad value for 'gid'
[  310.311782][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  311.455225][T11893] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2421'.
[  311.474595][T11893] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2421'.
[  311.478224][T11895] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2422'.
[  311.537014][T11893] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2421'.
[  311.926985][T11911] netlink: 'syz.1.2428': attribute type 3 has an invalid length.
[  311.949736][T11911] netlink: 'syz.1.2428': attribute type 3 has an invalid length.
[  312.264051][T11931] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2437'.
[  312.274066][T11931] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2437'.
[  312.281528][T11931] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2437'.
[  312.425227][T11944] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2443'.
[  312.508022][T11950] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2446'.
[  312.600940][T11946] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.626376][T11955] netlink: 147608 bytes leftover after parsing attributes in process `syz.6.2449'.
[  312.720921][T11959] netlink: 'syz.6.2451': attribute type 1 has an invalid length.
[  313.219667][T11981] netlink: 'syz.6.2462': attribute type 10 has an invalid length.
[  313.522871][T11993] netlink: 'syz.7.2466': attribute type 2 has an invalid length.
[  313.600267][T11997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.898247][T12011] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  313.998223][T12015] netlink: 'syz.6.2477': attribute type 1 has an invalid length.
[  315.847531][T12066] syzkaller0: entered promiscuous mode
[  315.888405][T12066] syzkaller0: entered allmulticast mode
[  317.364551][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  317.367128][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  318.307314][T12095] __nla_validate_parse: 8 callbacks suppressed
[  318.307327][T12095] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.2513'.
[  318.582304][T12116] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2523'.
[  318.668097][T12122] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2527'.
[  318.677652][T12123] netlink: 'syz.6.2526': attribute type 2 has an invalid length.
[  318.691744][T12123] netlink: 'syz.6.2526': attribute type 8 has an invalid length.
[  318.694617][T12123] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2526'.
[  318.801476][T12131] netlink: 'syz.1.2530': attribute type 5 has an invalid length.
[  318.919655][T12140] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2534'.
[  319.447840][T12170] netlink: 'syz.6.2548': attribute type 25 has an invalid length.
[  319.452948][T12170] netlink: 'syz.6.2548': attribute type 28 has an invalid length.
[  320.416094][T12202] netlink: 'syz.6.2561': attribute type 10 has an invalid length.
[  320.422143][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2561'.
[  320.455697][T12202] bridge0: port 3(ipvlan1) entered blocking state
[  320.461070][T12202] bridge0: port 3(ipvlan1) entered disabled state
[  320.505450][T12202] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  321.332657][T12235] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2577'.
[  321.335880][T12235] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2577'.
[  321.474557][T12241] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.2580'.
[  321.701622][T12258] netlink: 'syz.6.2587': attribute type 3 has an invalid length.
[  322.051874][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2591'.
[  323.351916][T12271] netlink: 'syz.1.2592': attribute type 29 has an invalid length.
[  323.357779][T12271] netlink: 'syz.1.2592': attribute type 29 has an invalid length.
[  323.366769][T12271] netlink: 'syz.1.2592': attribute type 29 has an invalid length.
[  323.469520][T12276] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2595'.
[  323.473245][T12276] dummy0: entered promiscuous mode
[  323.483109][T12276] bridge0: port 3(dummy0) entered blocking state
[  323.487600][T12276] bridge0: port 3(dummy0) entered disabled state
[  323.490609][T12276] dummy0: entered allmulticast mode
[  323.496982][T12276] bridge0: port 3(dummy0) entered blocking state
[  323.500176][T12276] bridge0: port 3(dummy0) entered forwarding state
[  323.600373][T12287] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2600'.
[  324.406110][T12313] validate_nla: 3 callbacks suppressed
[  324.406125][T12313] netlink: 'syz.7.2611': attribute type 6 has an invalid length.
[  324.548750][ T5850] Bluetooth: hci3: command 0x0406 tx timeout
[  324.671734][T12322] delete_channel: no stack
[  325.607147][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'.
[  325.611737][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2621'.
[  325.754184][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2628'.
[  325.793677][T12350] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  325.904093][T12365] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2635'.
[  326.794995][T12396] netlink: 'syz.1.2649': attribute type 2 has an invalid length.
[  326.835772][T12399] IPv6: NLM_F_CREATE should be specified when creating new route
[  326.925428][T12406] netlink: 'syz.6.2653': attribute type 39 has an invalid length.
[  327.156792][T12423] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2662'.
[  327.522134][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  327.526225][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  329.189209][T12508] netlink: 'syz.6.2699': attribute type 2 has an invalid length.
[  329.324481][T12510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  329.327292][T12510] IPv6: NLM_F_CREATE should be set when creating new route
[  329.331521][T12510] IPv6: NLM_F_CREATE should be set when creating new route
[  330.138253][T12518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2703'.
[  330.142428][T12518] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2703'.
[  330.326533][T12528] netlink: 'syz.1.2707': attribute type 62 has an invalid length.
[  330.760175][T12546] netlink: 'syz.1.2716': attribute type 10 has an invalid length.
[  331.709441][T12600] netlink: 'syz.7.2729': attribute type 64 has an invalid length.
[  332.307826][T12643] netlink: 763 bytes leftover after parsing attributes in process `syz.6.2749'.
[  332.365468][T12641] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  332.377202][T12641] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  332.536619][T12651] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  332.634581][T12656] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  334.074780][T12677] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2759'.
[  335.691317][T12720] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2775'.
[  335.753664][   T55] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  335.974749][T12728] netlink: 'syz.1.2780': attribute type 21 has an invalid length.
[  335.984204][T12729] pimreg: tun_chr_ioctl cmd 1074025678
[  335.985510][T12728] netlink: 'syz.1.2780': attribute type 4 has an invalid length.
[  335.997125][T12726] pimreg: tun_chr_ioctl cmd 1074025677
[  336.006342][T12726] pimreg: linktype set to 778
[  336.049074][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'.
[  336.054229][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'.
[  336.413931][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'.
[  336.480768][T12763] netlink: 'syz.6.2796': attribute type 11 has an invalid length.
[  336.483660][T12763] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2796'.
[  337.007061][T12780] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2804'.
[  337.190450][T12790] netlink: 'syz.7.2809': attribute type 1 has an invalid length.
[  337.335790][T12796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2812'.
[  337.811292][T12803] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2815'.
[  337.815096][T12803] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2815'.
[  337.841225][   T55] Bluetooth: hci1: command tx timeout
[  338.789213][T12826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2824'.
[  339.202040][T12851] netlink: 'syz.1.2836': attribute type 10 has an invalid length.
[  339.205716][T12851] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  339.330661][T12853] netlink: 'syz.7.2837': attribute type 3 has an invalid length.
[  340.020708][T12882] syzkaller0: entered promiscuous mode
[  340.023043][T12882] syzkaller0: entered allmulticast mode
[  342.255283][T12921] __nla_validate_parse: 1 callbacks suppressed
[  342.255299][T12921] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2867'.
[  343.276890][T12950] netlink: 'syz.7.2879': attribute type 10 has an invalid length.
[  343.580698][T12955] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2882'.
[  345.698047][T13016] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2911'.
[  345.702282][T13016] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2911'.
[  346.875104][T13040] netlink: 'syz.6.2920': attribute type 17 has an invalid length.
[  346.879214][T13040] netlink: 'syz.6.2920': attribute type 16 has an invalid length.
[  346.883154][T13040] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2920'.
[  346.923943][T13038] netlink: 'syz.1.2919': attribute type 10 has an invalid length.
[  347.177362][T13044] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2921'.
[  347.223564][T13038] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  348.196115][T13051] netlink: 'syz.1.2925': attribute type 11 has an invalid length.
[  348.325290][T13060] netlink: 5844 bytes leftover after parsing attributes in process `syz.1.2928'.
[  348.370032][T13062] netlink: 'syz.1.2929': attribute type 1 has an invalid length.
[  348.629849][T13076] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.2935'.
[  349.214298][T13125] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2959'.
[  350.387497][T13152] netlink: 'syz.6.2969': attribute type 1 has an invalid length.
[  350.395018][T13152] netlink: 'syz.6.2969': attribute type 2 has an invalid length.
[  350.556127][   T55] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  350.654515][T13165] netlink: 'syz.1.2976': attribute type 29 has an invalid length.
[  350.661254][T13165] netlink: 'syz.1.2976': attribute type 29 has an invalid length.
[  350.868330][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'.
[  350.996009][T13193] : renamed from gre0 (while UP)
[  351.109069][T13188] netlink: 'syz.1.2987': attribute type 1 has an invalid length.
[  351.111641][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2987'.
[  351.126699][T13197] netlink: 'syz.7.2991': attribute type 29 has an invalid length.
[  351.131229][T13197] netlink: 'syz.7.2991': attribute type 29 has an invalid length.
[  351.134058][T13197] netlink: 'syz.7.2991': attribute type 29 has an invalid length.
[  351.166583][T13199] netlink: 'syz.6.2992': attribute type 21 has an invalid length.
[  351.174173][T13199] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2992'.
[  351.293186][T13207] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2996'.
[  351.317774][T13208] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2995'.
[  351.452662][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3002'.
[  351.816993][T13226] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  351.825694][T13226] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  352.023510][T13244] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3008'.
[  352.155436][T13249] openvswitch: netlink: Missing valid actions attribute.
[  352.161222][T13249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.353834][T13255] syzkaller0: entered promiscuous mode
[  352.356450][T13255] syzkaller0: entered allmulticast mode
[  353.536778][T13267] validate_nla: 4 callbacks suppressed
[  353.536799][T13267] netlink: 'syz.1.3020': attribute type 12 has an invalid length.
[  353.543409][T13267] __nla_validate_parse: 4 callbacks suppressed
[  353.543425][T13267] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3020'.
[  355.270808][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3024'.
[  356.785793][T13329] syzkaller0: entered promiscuous mode
[  356.788110][T13329] syzkaller0: entered allmulticast mode
[  356.945658][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3052'.
[  356.997429][T13340] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3051'.
[  357.299759][ T5874] unregister_netdevice: waiting for erspan0 to become free. Usage count = 4
[  357.318378][ T5874] ref_tracker: netdev@ffff88802ac6a610 has 1/1 users at
[  357.318378][ T5874]      ib_device_set_netdev+0x31f/0x6d0
[  357.318378][ T5874]      rxe_register_device+0x1c7/0x310
[  357.318378][ T5874]      rxe_net_add+0x81/0x110
[  357.318378][ T5874]      rxe_newlink+0xdd/0x190
[  357.318378][ T5874]      nldev_newlink+0x4a5/0x5a0
[  357.318378][ T5874]      rdma_nl_rcv+0x6ae/0x980
[  357.318378][ T5874]      netlink_unicast+0x82f/0x9e0
[  357.318378][ T5874]      netlink_sendmsg+0x805/0xb30
[  357.318378][ T5874]      __sock_sendmsg+0x21c/0x270
[  357.318378][ T5874]      ____sys_sendmsg+0x505/0x830
[  357.318378][ T5874]      ___sys_sendmsg+0x21f/0x2a0
[  357.318378][ T5874]      __x64_sys_sendmsg+0x19b/0x260
[  357.318378][ T5874]      do_syscall_64+0xfa/0x3b0
[  357.318378][ T5874]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.318378][ T5874] 
[  364.068969][   T34] INFO: task kworker/u10:0:27 blocked for more than 143 seconds.
[  364.072346][   T34]       Not tainted syzkaller #0
[  364.074458][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  364.078042][   T34] task:kworker/u10:0   state:D stack:22312 pid:27    tgid:27    ppid:2      task_flags:0x4208060 flags:0x00004000
[  364.087359][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  364.090046][   T34] Call Trace:
[  364.092472][   T34]  <TASK>
[  364.093919][   T34]  __schedule+0x1798/0x4cc0
[  364.095941][   T34]  ? validate_chain+0x897/0x2140
[  364.098107][   T34]  ? __lock_acquire+0xab9/0xd20
[  364.101601][   T34]  ? __pfx___schedule+0x10/0x10
[  364.103700][   T34]  ? schedule+0x91/0x360
[  364.105469][   T34]  schedule+0x165/0x360
[  364.107236][   T34]  schedule_timeout+0x9a/0x270
[  364.109697][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  364.111979][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.114122][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.116535][   T34]  ? wait_for_completion+0x267/0x5d0
[  364.119993][   T34]  wait_for_completion+0x2bf/0x5d0
[  364.122184][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  364.124517][   T34]  ? up_write+0x1c4/0x420
[  364.126317][   T34]  ? remove_client_context+0xc0/0x1e0
[  364.129550][   T34]  disable_device+0x1c6/0x320
[  364.131514][   T34]  ? __pfx_disable_device+0x10/0x10
[  364.133641][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  364.135818][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.137964][   T34]  ib_unregister_work+0x19/0x30
[  364.140394][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  364.142687][   T34]  process_scheduled_works+0xae1/0x17b0
[  364.144940][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  364.147426][   T34]  worker_thread+0x8a0/0xda0
[  364.149772][   T34]  kthread+0x711/0x8a0
[  364.151440][   T34]  ? __pfx_worker_thread+0x10/0x10
[  364.153511][   T34]  ? __pfx_kthread+0x10/0x10
[  364.155399][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.157453][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.159988][   T34]  ? __pfx_kthread+0x10/0x10
[  364.161862][   T34]  ret_from_fork+0x439/0x7d0
[  364.163722][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  364.165841][   T34]  ? __switch_to_asm+0x39/0x70
[  364.167802][   T34]  ? __switch_to_asm+0x33/0x70
[  364.170156][   T34]  ? __pfx_kthread+0x10/0x10
[  364.172098][   T34]  ret_from_fork_asm+0x1a/0x30
[  364.174143][   T34]  </TASK>
[  364.175693][   T34] 
[  364.175693][   T34] Showing all locks held in the system:
[  364.179534][   T34] 3 locks held by kworker/u10:0/27:
[  364.181766][   T34]  #0: ffff888104df7148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  364.186388][   T34]  #1: ffffc9000060fbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  364.193520][   T34]  #2: ffff88803a884700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  364.199597][   T34] 1 lock held by khungtaskd/34:
[  364.201629][   T34]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  364.205543][   T34] 2 locks held by getty/5676:
[  364.207415][   T34]  #0: ffff888022f230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  364.212233][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  364.216193][   T34] 3 locks held by kworker/u11:2/5850:
[  364.218300][   T34]  #0: ffff88810d851148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  364.222736][   T34]  #1: ffffc9000333fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  364.227608][   T34]  #2: ffff88811c5d4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  364.231844][   T34] 3 locks held by kworker/u8:3/5874:
[  364.233663][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  364.237185][   T34]  #1: ffffc9000344fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  364.241108][   T34]  #2: ffffffff8f52d5d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  364.244505][   T34] 2 locks held by syz.4.1720/10186:
[  364.246326][   T34]  #0: ffffffff8f52d5d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  364.249913][   T34]  #1: ffff88803a884700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  364.254184][   T34] 
[  364.255060][   T34] =============================================
[  364.255060][   T34] 
[  364.258230][   T34] NMI backtrace for cpu 1
[  364.258249][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  364.258265][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.258275][   T34] Call Trace:
[  364.258283][   T34]  <TASK>
[  364.258292][   T34]  dump_stack_lvl+0x189/0x250
[  364.258317][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.258334][   T34]  ? __pfx__printk+0x10/0x10
[  364.258362][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  364.258388][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  364.258412][   T34]  ? __pfx__printk+0x10/0x10
[  364.258434][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  364.258459][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  364.258521][   T34]  watchdog+0xf93/0xfe0
[  364.258547][   T34]  ? watchdog+0x1de/0xfe0
[  364.258570][   T34]  kthread+0x711/0x8a0
[  364.258591][   T34]  ? __pfx_watchdog+0x10/0x10
[  364.258609][   T34]  ? __pfx_kthread+0x10/0x10
[  364.258628][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.258642][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.258657][   T34]  ? __pfx_kthread+0x10/0x10
[  364.258674][   T34]  ret_from_fork+0x439/0x7d0
[  364.258691][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  364.258710][   T34]  ? __switch_to_asm+0x39/0x70
[  364.258727][   T34]  ? __switch_to_asm+0x33/0x70
[  364.258743][   T34]  ? __pfx_kthread+0x10/0x10
[  364.258761][   T34]  ret_from_fork_asm+0x1a/0x30
[  364.258790][   T34]  </TASK>
[  364.309708][   T34] Sending NMI from CPU 1 to CPUs 0:
[  364.311856][    C0] NMI backtrace for cpu 0
[  364.311878][    C0] CPU: 0 UID: 0 PID: 5287 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) 
[  364.311895][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.311905][    C0] RIP: 0010:lock_acquire+0xd/0x360
[  364.311935][    C0] Code: e9 08 ed df 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 49 89
[  364.311950][    C0] RSP: 0018:ffffc9000398f680 EFLAGS: 00000246
[  364.311962][    C0] RAX: 0000000000000001 RBX: ffffffff82232f6e RCX: 0000000000000002
[  364.311973][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13a120
[  364.311981][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  364.311990][    C0] R10: ffffc9000398f7d8 R11: ffffffff81ac4d00 R12: 1ffff92000731ef1
[  364.312001][    C0] R13: ffffc9000398f7c0 R14: ffffc9000398f788 R15: ffffffff8172d195
[  364.312012][    C0] FS:  00007f05d6543380(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  364.312022][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  364.312032][    C0] CR2: 00007ffc4f883d3c CR3: 000000010f7e6000 CR4: 00000000000006f0
[  364.312064][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  364.312074][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  364.312082][    C0] Call Trace:
[  364.312089][    C0]  <TASK>
[  364.312098][    C0]  ? unwind_next_frame+0xa5/0x2390
[  364.312116][    C0]  unwind_next_frame+0xc2/0x2390
[  364.312131][    C0]  ? unwind_next_frame+0xa5/0x2390
[  364.312148][    C0]  ? unwind_next_frame+0xa5/0x2390
[  364.312161][    C0]  ? stack_trace_save+0x9c/0xe0
[  364.312180][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  364.312196][    C0]  arch_stack_walk+0x11c/0x150
[  364.312216][    C0]  ? kasan_save_track+0x3e/0x80
[  364.312237][    C0]  stack_trace_save+0x9c/0xe0
[  364.312252][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  364.312271][    C0]  ? __lock_acquire+0xab9/0xd20
[  364.312288][    C0]  kasan_save_track+0x3e/0x80
[  364.312304][    C0]  ? kasan_save_track+0x3e/0x80
[  364.312342][    C0]  kasan_save_free_info+0x46/0x50
[  364.312359][    C0]  __kasan_slab_free+0x5b/0x80
[  364.312377][    C0]  ? syslog_print+0x515/0x590
[  364.312391][    C0]  kfree+0x18e/0x440
[  364.312411][    C0]  syslog_print+0x515/0x590
[  364.312427][    C0]  ? __pfx_syslog_print+0x10/0x10
[  364.312444][    C0]  ? __lock_acquire+0xab9/0xd20
[  364.312502][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  364.312523][    C0]  ? bpf_lsm_capable+0x9/0x20
[  364.312549][    C0]  ? security_capable+0x7e/0x2e0
[  364.312566][    C0]  do_syslog+0x544/0x760
[  364.312581][    C0]  ? __pfx_do_syslog+0x10/0x10
[  364.312593][    C0]  ? rcu_is_watching+0x15/0xb0
[  364.312608][    C0]  ? __rseq_handle_notify_resume+0x37e/0x11f0
[  364.312631][    C0]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[  364.312649][    C0]  ? rcu_is_watching+0x15/0xb0
[  364.312665][    C0]  __x64_sys_syslog+0x7c/0x90
[  364.312697][    C0]  do_syscall_64+0xfa/0x3b0
[  364.312718][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.312731][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  364.312747][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.312761][    C0] RIP: 0033:0x7f05d66a4fa7
[  364.312775][    C0] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48
[  364.312786][    C0] RSP: 002b:00007ffce53dad28 EFLAGS: 00000206 ORIG_RAX: 0000000000000067
[  364.312799][    C0] RAX: ffffffffffffffda RBX: 00007f05d68434a0 RCX: 00007f05d66a4fa7
[  364.312809][    C0] RDX: 00000000000003ff RSI: 00007f05d68434a0 RDI: 0000000000000002
[  364.312818][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 6e7320daddd2378b
[  364.312826][    C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f05d68434a0
[  364.312835][    C0] R13: 00007f05d6833212 R14: 00007f05d6843521 R15: 00007f05d6843521
[  364.312852][    C0]  </TASK>
[  364.314438][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  364.454357][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  364.457282][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.460362][   T34] Call Trace:
[  364.461392][   T34]  <TASK>
[  364.462325][   T34]  dump_stack_lvl+0x99/0x250
[  364.463789][   T34]  ? __asan_memcpy+0x40/0x70
[  364.465249][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.467062][   T34]  ? __pfx__printk+0x10/0x10
[  364.468898][   T34]  vpanic+0x281/0x750
[  364.470414][   T34]  ? __pfx_vpanic+0x10/0x10
[  364.471884][   T34]  ? preempt_schedule+0xae/0xc0
[  364.473399][   T34]  ? preempt_schedule_common+0x83/0xd0
[  364.475113][   T34]  panic+0xb9/0xc0
[  364.476381][   T34]  ? __pfx_panic+0x10/0x10
[  364.478154][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  364.480193][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  364.482289][   T34]  watchdog+0xfd2/0xfe0
[  364.483776][   T34]  ? watchdog+0x1de/0xfe0
[  364.485628][   T34]  kthread+0x711/0x8a0
[  364.487356][   T34]  ? __pfx_watchdog+0x10/0x10
[  364.489288][   T34]  ? __pfx_kthread+0x10/0x10
[  364.491486][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.493559][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.495606][   T34]  ? __pfx_kthread+0x10/0x10
[  364.497375][   T34]  ret_from_fork+0x439/0x7d0
[  364.499178][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  364.501226][   T34]  ? __switch_to_asm+0x39/0x70
[  364.503101][   T34]  ? __switch_to_asm+0x33/0x70
[  364.504991][   T34]  ? __pfx_kthread+0x10/0x10
[  364.506867][   T34]  ret_from_fork_asm+0x1a/0x30
[  364.508788][   T34]  </TASK>
[  364.510441][   T34] Kernel Offset: disabled
[  364.511847][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:10:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88810798db82 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000002 RDI=0000000000000002 RBP=dffffc0000000000 RSP=ffffc90002ecf8a8
R8 =0000000000000000 R9 =ffffffff8b790010 R10=ffffc90002ecf990 R11=fffff520005d9f35
R12=ffff88810798db80 R13=ffffc90002ecf988 R14=000000000000000d R15=1ffff920005d9f31
RIP=ffffffff8b785272 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555556329500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffea0de9b48 CR3=0000000036128000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fe9c4412e53
XMM06=0000000000000000 00007fe9c4412e4d XMM07=0000000000000000 00007fe9c4412e61
XMM08=0000000000000000 00007fe9c4412ee7 XMM09=0000000000000000 00007fe9c4412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000017a00 RBX=0000000000000bf3 RCX=0000000000017a00 RDX=ffffffff93a49358
RSI=ffffffff93a49358 RDI=ffffffff9352e8f8 RBP=ffffffff93a897b0 RSP=ffffc900079e7958
R8 =0000000000000000 R9 =ffffffff81aa9748 R10=dffffc0000000000 R11=fffffbfff1f47567
R12=0000000000023bac R13=ffffffff93b3c5f0 R14=ffffffff92ac88f8 R15=0000000001706114
RIP=ffffffff819de902 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555556d6c500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32718ff8 CR3=000000010f8d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4b52e12e53
XMM06=0000000000000000 00007f4b52e12e4d XMM07=0000000000000000 00007f4b52e12e61
XMM08=0000000000000000 00007f4b52e12ee7 XMM09=0000000000000000 00007f4b52e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
