last executing test programs:

1m45.91759638s ago: executing program 2 (id=1005):
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x18000}], 0x20}, 0x0)
close(0x3)

1m45.863476242s ago: executing program 2 (id=1008):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

1m45.056590803s ago: executing program 2 (id=1011):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001"], 0x178}}, 0x0)

1m44.973639754s ago: executing program 2 (id=1014):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x100)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, 0x0, 0x20000000)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000036004b63d25a59ce0630fc2b139a7ad9", 0x14}], 0x1}, 0x20000040)

1m44.814521022s ago: executing program 0 (id=1019):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2}}}], 0x20}, 0x0)

1m44.726989015s ago: executing program 0 (id=1021):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0xb7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4c880}, 0x884)

1m44.726526049s ago: executing program 0 (id=1023):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2500000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="d64575"], 0x20)

1m44.644570123s ago: executing program 0 (id=1025):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)

1m44.58702188s ago: executing program 0 (id=1026):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x40047438, 0x7f7c2739efff)

1m44.356120802s ago: executing program 0 (id=1027):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611861000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x40050)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x2000041, 0x0)

1m44.263580661s ago: executing program 32 (id=1027):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611861000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x40050)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x2000041, 0x0)

1m43.831549363s ago: executing program 2 (id=1029):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)

1m43.449846958s ago: executing program 2 (id=1031):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0c38f0ff10fd"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2da, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x681d3738, 0x1efb}, 0x5, 0xc8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7498, 0x0, 0x1000000000000}, 0x0, 0x7f8, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

1m43.449729729s ago: executing program 33 (id=1031):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0c38f0ff10fd"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2da, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x681d3738, 0x1efb}, 0x5, 0xc8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7498, 0x0, 0x1000000000000}, 0x0, 0x7f8, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

8.320742193s ago: executing program 1 (id=2513):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703021201f314000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0)

8.254069534s ago: executing program 1 (id=2515):
r0 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = getpid()
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30205, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x1062c4, 0x1218, 0x0, 0x0, 0x0, 0x0, 0x9bea}, r1, 0xffffffffffffffff, r0, 0x3)

8.253070539s ago: executing program 1 (id=2517):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)

1.843609992s ago: executing program 4 (id=2558):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000027c0000040042800c0001800600060086dd"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

1.751126563s ago: executing program 4 (id=2559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x20004000)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

718.988283ms ago: executing program 3 (id=2560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000)

710.404319ms ago: executing program 4 (id=2561):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8911, &(0x7f0000000080))

623.496715ms ago: executing program 3 (id=2562):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x9fbde75d38449f7e, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080))

623.316096ms ago: executing program 4 (id=2563):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002"], 0x5c}}, 0x0)

554.305894ms ago: executing program 4 (id=2564):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xb, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xa, 0x2}, {0xd, 0x5}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x0, 0x42, 0x6}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0x61, 0x2e, 0x61, 0x30, 0x30, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000840)=""/213, 0x87, 0xd5, 0x1, 0x5, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], <r6=>0x0, 0x2b, &(0x7f0000000b00)=[{}, {}], 0x10, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x17, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x5, 0x4, &(0x7f0000000640)=""/4, 0x41100, 0x7, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000000980)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0xa, 0x4, 0x1000}, 0x10, r6, r0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r7, &(0x7f00000009c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0xee2cd1c}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2c}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x36}}}}], 0x40}, 0x20000010)
r8 = socket(0x10, 0x80002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r9, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8946, &(0x7f0000000080))
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0xa0, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x88, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0xa0}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), &(0x7f00000002c0)='%pK    \x00'}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10)

553.715496ms ago: executing program 1 (id=2565):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x4, 0x8001}, 0x0, 0x3, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x12)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0)

455.691627ms ago: executing program 3 (id=2566):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x8}, 0x28)

455.289654ms ago: executing program 3 (id=2567):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2c, 0x0, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x7, 0x0, 0x3, 0xa, 0x80, 0x80, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0)

338.468272ms ago: executing program 3 (id=2568):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair(0x1, 0x5, 0x0, 0x0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

338.000156ms ago: executing program 1 (id=2569):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, 0x0, 0x10b8}, 0xff4c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x17, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

42.086865ms ago: executing program 1 (id=2570):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e08000007", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x100)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33)

8.160223ms ago: executing program 3 (id=2571):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xf7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4008744b, &(0x7f0000000180))

0s ago: executing program 4 (id=2572):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x224, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30453' (ED25519) to the list of known hosts.
syzkaller login: [   48.359122][ T5771] cgroup: Unknown subsys name 'net'
[   48.469289][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.473495][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.852560][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.426949][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.436218][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.440509][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.457309][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.464059][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.486225][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.489928][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.494490][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.498619][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.501890][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.539440][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.542338][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.545408][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.549108][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.555099][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.836338][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   58.857480][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   59.009558][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.012256][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.014748][ T5868] bridge_slave_0: entered allmulticast mode
[   59.018828][ T5868] bridge_slave_0: entered promiscuous mode
[   59.031165][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.033489][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.035816][ T5868] bridge_slave_1: entered allmulticast mode
[   59.039258][ T5868] bridge_slave_1: entered promiscuous mode
[   59.057084][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.059876][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.062350][ T5865] bridge_slave_0: entered allmulticast mode
[   59.065927][ T5865] bridge_slave_0: entered promiscuous mode
[   59.095820][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.100452][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.102987][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.105788][ T5865] bridge_slave_1: entered allmulticast mode
[   59.109468][ T5865] bridge_slave_1: entered promiscuous mode
[   59.123282][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   59.140569][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.157757][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.181582][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.225853][ T5868] team0: Port device team_slave_0 added
[   59.231194][ T5868] team0: Port device team_slave_1 added
[   59.238469][ T5865] team0: Port device team_slave_0 added
[   59.270563][ T5865] team0: Port device team_slave_1 added
[   59.273643][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.276603][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.285896][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.291164][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.293484][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.302915][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.352850][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.355722][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.367256][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.384398][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.387464][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.398656][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.423238][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.425822][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.429059][ T5871] bridge_slave_0: entered allmulticast mode
[   59.432905][ T5871] bridge_slave_0: entered promiscuous mode
[   59.449421][ T5868] hsr_slave_0: entered promiscuous mode
[   59.452884][ T5868] hsr_slave_1: entered promiscuous mode
[   59.456185][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.459322][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.462282][ T5871] bridge_slave_1: entered allmulticast mode
[   59.465834][ T5871] bridge_slave_1: entered promiscuous mode
[   59.525578][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.531757][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.554859][ T5865] hsr_slave_0: entered promiscuous mode
[   59.557308][ T5865] hsr_slave_1: entered promiscuous mode
[   59.559984][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[   59.562318][ T5865] Cannot create hsr debugfs directory
[   59.584970][ T5871] team0: Port device team_slave_0 added
[   59.602598][ T5871] team0: Port device team_slave_1 added
[   59.667478][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.670362][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.682513][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.699910][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.702542][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.712019][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.774465][ T5871] hsr_slave_0: entered promiscuous mode
[   59.777564][ T5871] hsr_slave_1: entered promiscuous mode
[   59.780510][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   59.782854][ T5871] Cannot create hsr debugfs directory
[   59.904104][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.924801][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.941919][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.974352][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.031130][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.041830][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.060104][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.078276][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.125980][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.133204][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.138700][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.144741][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.231209][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.264414][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   60.284977][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.288309][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.304711][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.307236][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.325847][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.333546][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.365339][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   60.381500][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.384526][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.398310][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.401114][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.410454][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   60.421583][  T704] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.424901][  T704] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.443327][  T704] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.445734][  T704] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.507284][ T5233] Bluetooth: hci0: command tx timeout
[   60.525338][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.574526][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.588139][ T5233] Bluetooth: hci2: command tx timeout
[   60.588247][ T5869] Bluetooth: hci1: command tx timeout
[   60.663502][ T5868] veth0_vlan: entered promiscuous mode
[   60.679675][ T5868] veth1_vlan: entered promiscuous mode
[   60.719505][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.740579][ T5868] veth0_macvtap: entered promiscuous mode
[   60.753673][ T5868] veth1_macvtap: entered promiscuous mode
[   60.764374][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.799762][ T5865] veth0_vlan: entered promiscuous mode
[   60.803787][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.817347][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.829581][ T5865] veth1_vlan: entered promiscuous mode
[   60.838503][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.842701][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.851435][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.873869][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.911656][ T5871] veth0_vlan: entered promiscuous mode
[   60.935724][ T5865] veth0_macvtap: entered promiscuous mode
[   60.951942][ T5871] veth1_vlan: entered promiscuous mode
[   60.962153][ T5865] veth1_macvtap: entered promiscuous mode
[   60.969995][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.972937][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.011458][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.022017][ T5871] veth0_macvtap: entered promiscuous mode
[   61.031372][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.035452][  T704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.041027][ T5871] veth1_macvtap: entered promiscuous mode
[   61.047360][  T704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.051980][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.059719][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.069487][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.085995][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.088876][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.101635][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.110906][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.125869][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.143094][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.151492][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.155400][ T5928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.171935][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.270667][  T704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.275585][  T704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.324936][  T704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.328494][  T704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.369299][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.371857][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.418881][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.421783][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.528563][ T5941] openvswitch: netlink: Actions may not be safe on all matching packets
[   61.621205][ T5949] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.20'.
[   61.904822][ T5970] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[   62.069913][ T5979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.36'.
[   62.078829][ T5979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.36'.
[   62.092384][ T5979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.36'.
[   62.225185][ T5993] netlink: 124 bytes leftover after parsing attributes in process `syz.2.42'.
[   62.406816][    C1] hrtimer: interrupt took 32044 ns
[   62.772658][ T5869] Bluetooth: hci0: command tx timeout
[   62.775548][ T5233] Bluetooth: hci2: command tx timeout
[   62.778434][ T5869] Bluetooth: hci1: command tx timeout
[   63.502478][ T6023] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   64.130824][ T6043] netlink: 'syz.2.65': attribute type 2 has an invalid length.
[   64.133748][ T6043] netlink: 'syz.2.65': attribute type 1 has an invalid length.
[   64.147068][ T6043] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.65'.
[   64.315092][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'.
[   64.593195][ T6061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.74'.
[   64.754234][ T5853] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   64.826943][ T5867] Bluetooth: hci2: command tx timeout
[   64.829304][ T5233] Bluetooth: hci1: command tx timeout
[   64.831585][ T5233] Bluetooth: hci0: command tx timeout
[   64.869236][ T6074] netlink: 752 bytes leftover after parsing attributes in process `syz.2.80'.
[   65.172432][ T6092] netlink: 'syz.0.89': attribute type 21 has an invalid length.
[   65.175754][ T6092] IPv6: NLM_F_CREATE should be specified when creating new route
[   65.184994][ T6092] IPv6: Can't replace route, no match found
[   65.354693][ T6097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.908493][ T5867] Bluetooth: hci2: command tx timeout
[   66.911155][ T5867] Bluetooth: hci0: command tx timeout
[   66.913650][ T5867] Bluetooth: hci1: command tx timeout
[   67.115556][ T6125] netlink: 'syz.1.100': attribute type 30 has an invalid length.
[   68.519692][ T5867] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[   68.771507][ T6159] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.114'.
[   68.818572][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[   68.914235][ T6164] netlink: 'syz.1.116': attribute type 2 has an invalid length.
[   68.937873][ T6164] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.116'.
[   69.053623][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.057743][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.090853][ T6172] bridge0: entered allmulticast mode
[   69.979601][ T6202] netlink: 'syz.1.132': attribute type 1 has an invalid length.
[   69.982834][ T6202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.069747][ T6208] Zero length message leads to an empty skb
[   70.082359][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.133'.
[   70.097225][ T6204] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   70.144155][ T6211] delete_channel: no stack
[   70.161286][ T6213] netlink: 80 bytes leftover after parsing attributes in process `syz.0.137'.
[   70.828251][ T6241] netlink: 'syz.1.148': attribute type 10 has an invalid length.
[   71.130687][ T6241] batman_adv: batadv0: Adding interface: netdevsim0
[   71.138406][ T6241] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.152218][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.153031][ T6241] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   71.155102][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.401481][ T6260] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.156'.
[   71.461342][ T6262] syz.1.157 uses obsolete (PF_INET,SOCK_PACKET)
[   71.507815][ T6265] netlink: 'syz.2.159': attribute type 23 has an invalid length.
[   71.604222][ T6262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.157'.
[   71.764656][ T6262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.157'.
[   72.311569][ T6262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.157'.
[   73.449699][ T6306] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.173'.
[   74.129347][ T6348] netlink: 'syz.1.191': attribute type 21 has an invalid length.
[   74.137495][ T6348] netlink: 'syz.1.191': attribute type 10 has an invalid length.
[   74.140891][ T6348] netlink: 55 bytes leftover after parsing attributes in process `syz.1.191'.
[   74.485625][ T6367] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   74.490089][ T6367] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.200'.
[   74.568609][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[   74.655376][ T6374] netlink: 'syz.2.204': attribute type 3 has an invalid length.
[   74.659506][ T6374] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   74.662876][ T6374] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.204'.
[   75.731213][ T6400] syzkaller0: entered promiscuous mode
[   75.733483][ T6400] syzkaller0: entered allmulticast mode
[   76.767521][ T6418] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.224'.
[   77.493101][ T6433] netlink: 56 bytes leftover after parsing attributes in process `syz.1.229'.
[   78.814085][ T6467] netlink: 'syz.0.245': attribute type 29 has an invalid length.
[   78.820681][ T6467] netlink: 'syz.0.245': attribute type 29 has an invalid length.
[   79.012585][ T6478] veth1_macvtap: left promiscuous mode
[   79.015153][ T6478] macsec0: entered promiscuous mode
[   80.819531][ T6487] netlink: 'syz.0.253': attribute type 29 has an invalid length.
[   80.824440][ T6487] netlink: 'syz.0.253': attribute type 29 has an invalid length.
[   81.390211][   T47] cfg80211: failed to load regulatory.db
[   81.490955][ T6495] delete_channel: no stack
[   81.823658][ T6522] netlink: 'syz.2.266': attribute type 3 has an invalid length.
[   81.827167][ T6522] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.266'.
[   82.134406][ T6542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.309858][ T6571] netlink: 'syz.2.290': attribute type 21 has an invalid length.
[   84.872145][ T6577] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.292'.
[   84.930180][ T6583] netlink: 1018 bytes leftover after parsing attributes in process `syz.1.294'.
[   84.998897][ T6588] warning: `syz.1.296' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.047773][ T6589] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.297'.
[   85.137898][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'.
[   85.142529][ T6593] sock: sock_timestamping_bind_phc: sock not bind to device
[   85.794915][ T6613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.307'.
[   87.764908][ T6724] netlink: 56 bytes leftover after parsing attributes in process `syz.0.356'.
[   88.350591][ T6760] netlink: 'syz.0.373': attribute type 12 has an invalid length.
[   88.354066][ T6760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.373'.
[   90.354770][ T6819] netlink: 'syz.2.401': attribute type 10 has an invalid length.
[   90.361034][ T6819] netlink: 2 bytes leftover after parsing attributes in process `syz.2.401'.
[   90.364793][ T6819] bond0: entered promiscuous mode
[   90.367178][ T6819] bond_slave_0: entered promiscuous mode
[   90.369765][ T6819] bond_slave_1: entered promiscuous mode
[   90.372711][ T6819] bridge0: port 3(bond0) entered blocking state
[   90.375578][ T6819] bridge0: port 3(bond0) entered disabled state
[   90.379588][ T6819] bond0: entered allmulticast mode
[   90.381493][ T6819] bond_slave_0: entered allmulticast mode
[   90.384260][ T6819] bond_slave_1: entered allmulticast mode
[   90.388913][ T6819] bridge0: port 3(bond0) entered blocking state
[   90.391149][ T6819] bridge0: port 3(bond0) entered forwarding state
[   90.435819][ T6825] netlink: 'syz.0.404': attribute type 3 has an invalid length.
[   90.439585][ T6825] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.404'.
[   90.484577][ T6827] netlink: 'syz.0.405': attribute type 2 has an invalid length.
[   90.490535][ T6827] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   90.494013][ T6827] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.405'.
[   90.500457][ T6827] nbd: couldn't find device at index 16
[   90.874905][ T6851] netlink: 'syz.2.416': attribute type 1 has an invalid length.
[   90.878653][ T6851] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.416'.
[   91.201014][ T6865] Dead loop on virtual device ip6_vti0, fix it urgently!
[   91.490207][ T6884] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.431'.
[   91.503769][ T6884] netlink: 'syz.1.431': attribute type 1 has an invalid length.
[   92.231981][ T6896] netlink: 'syz.0.436': attribute type 29 has an invalid length.
[   92.500120][ T6906] netlink: 'syz.0.440': attribute type 21 has an invalid length.
[   92.503446][ T6906] netlink: 156 bytes leftover after parsing attributes in process `syz.0.440'.
[   92.692709][ T6922] netlink: 128 bytes leftover after parsing attributes in process `syz.0.449'.
[   92.695790][ T6922] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   92.759218][ T6926] netlink: 'syz.2.451': attribute type 22 has an invalid length.
[   92.762547][ T6926] netlink: 148 bytes leftover after parsing attributes in process `syz.2.451'.
[   92.944237][ T6937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.450'.
[   93.200431][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'.
[   93.204020][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'.
[   94.050845][ T6946] netlink: 10 bytes leftover after parsing attributes in process `syz.1.460'.
[   94.740041][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[   95.127962][ T6990] netlink: 'syz.1.478': attribute type 41 has an invalid length.
[   95.718194][ T7008] syzkaller0: entered promiscuous mode
[   95.720254][ T7008] syzkaller0: entered allmulticast mode
[   96.023926][ T7015] netlink: 'syz.1.488': attribute type 3 has an invalid length.
[   96.034709][ T7015] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.488'.
[   96.618124][ T7021] netlink: 'syz.1.491': attribute type 29 has an invalid length.
[   96.622968][ T7022] netlink: 'syz.1.491': attribute type 29 has an invalid length.
[   96.925078][ T7042] netlink: 88 bytes leftover after parsing attributes in process `syz.0.500'.
[   96.940987][ T7039] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   96.944248][ T7039] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   97.875071][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'.
[   97.903328][ T7088] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.521'.
[   97.943610][ T7090] sctp: [Deprecated]: syz.1.522 (pid 7090) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.943610][ T7090] Use struct sctp_sack_info instead
[   98.049885][ T7096] C: renamed from team_slave_0 (while UP)
[   98.056085][ T7096] netlink: 'syz.1.524': attribute type 3 has an invalid length.
[   98.067073][ T7096] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[   98.070170][ T7096] netlink: 116 bytes leftover after parsing attributes in process `syz.1.524'.
[   98.084421][ T7099] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.526'.
[   98.096574][ T7099] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   98.100169][ T7099] openvswitch: netlink: Message has 6324 unknown bytes.
[   98.250299][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[   99.617707][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'.
[   99.652574][ T7156] netlink: 'syz.1.548': attribute type 3 has an invalid length.
[   99.659273][ T7156] netlink: 'syz.1.548': attribute type 2 has an invalid length.
[   99.665892][ T7156] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.548'.
[  100.057306][ T7175] sctp: [Deprecated]: syz.0.557 (pid 7175) Use of int in maxseg socket option.
[  100.057306][ T7175] Use struct sctp_assoc_value instead
[  100.315156][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'.
[  100.512446][ T5867] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  100.514974][ T7185] @: renamed from bond_slave_0 (while UP)
[  100.692726][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'.
[  100.696840][ T7194] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[  100.766974][ T7199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.567'.
[  101.652391][ T7240] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.577'.
[  101.837652][ T7252] netlink: 5 bytes leftover after parsing attributes in process `syz.1.582'.
[  102.205683][ T7285] netlink: 'syz.1.589': attribute type 3 has an invalid length.
[  102.312254][ T7290] netlink: 'syz.1.590': attribute type 3 has an invalid length.
[  102.323665][ T7290] netlink: 'syz.1.590': attribute type 2 has an invalid length.
[  102.363115][ T7297] netlink: 'syz.2.592': attribute type 28 has an invalid length.
[  102.368323][ T7297] netlink: 'syz.2.592': attribute type 4 has an invalid length.
[  103.312064][ T7375] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  103.316347][ T7375] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  103.815984][ T7391] netlink: 'syz.1.612': attribute type 21 has an invalid length.
[  103.819677][ T7391] __nla_validate_parse: 3 callbacks suppressed
[  103.819695][ T7391] netlink: 100 bytes leftover after parsing attributes in process `syz.1.612'.
[  104.172560][ T7395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.812756][ T7424] IPv6: NLM_F_CREATE should be specified when creating new route
[  105.110615][ T7437] netlink: 'syz.1.634': attribute type 10 has an invalid length.
[  106.331322][ T7477] netlink: 104 bytes leftover after parsing attributes in process `syz.0.650'.
[  106.450221][ T7483] netlink: 'syz.2.653': attribute type 12 has an invalid length.
[  106.453597][ T7483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.653'.
[  106.753664][ T7507] netlink: 'syz.2.666': attribute type 39 has an invalid length.
[  106.793135][ T7514] netlink: 'syz.0.668': attribute type 10 has an invalid length.
[  106.960845][ T7514] batman_adv: batadv0: Adding interface: team0
[  106.964572][ T7514] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.978071][ T7514] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  107.954838][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'.
[  109.122565][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.694'.
[  109.394035][ T7587] netlink: 208192 bytes leftover after parsing attributes in process `syz.0.700'.
[  109.399701][ T7587] netlink: 'syz.0.700': attribute type 1 has an invalid length.
[  109.403009][ T7587] netlink: 'syz.0.700': attribute type 2 has an invalid length.
[  109.464930][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'.
[  109.541351][ T7601] Q6\bY4: renamed from lo (while UP)
[  109.600205][ T7606] netlink: 'syz.0.708': attribute type 41 has an invalid length.
[  109.603356][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'.
[  109.730866][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'.
[  109.783612][ T7620] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[  109.787240][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'.
[  109.803414][ T7622] netlink: 152 bytes leftover after parsing attributes in process `syz.1.716'.
[  109.841923][ T7624] netlink: 'syz.2.718': attribute type 1 has an invalid length.
[  109.910100][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  110.034047][ T7640] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[  110.040741][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'.
[  110.056109][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[  110.883767][ T5867] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  112.937890][ T7763] bond0 (unregistering): (slave c@): Releasing backup interface
[  112.945877][ T7763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.954252][ T7763] bond0 (unregistering): Released all slaves
[  113.204106][ T7783] netlink: 'syz.2.789': attribute type 10 has an invalid length.
[  113.220745][ T7783] batman_adv: batadv0: Adding interface: team0
[  113.223103][ T7783] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.239826][ T7783] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  113.591073][ T7812] netlink: 'syz.2.801': attribute type 10 has an invalid length.
[  115.070900][ T7868] netlink: zone id is out of range
[  115.072732][ T7868] netlink: zone id is out of range
[  115.091666][ T7868] netlink: set zone limit has 4 unknown bytes
[  115.222294][ T7880] __nla_validate_parse: 4 callbacks suppressed
[  115.222307][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.832'.
[  115.234977][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.832'.
[  115.243669][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.832'.
[  115.271585][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'.
[  115.383459][ T7889] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.836'.
[  115.744414][ T7904] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.842'.
[  115.771892][ T7906] netlink: 'syz.0.843': attribute type 22 has an invalid length.
[  116.129711][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  116.264271][ T7954] netlink: 'syz.1.865': attribute type 11 has an invalid length.
[  116.268874][ T7954] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.865'.
[  116.282865][ T7954] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  116.322495][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.370985][ T7959] netlink: 'syz.1.866': attribute type 10 has an invalid length.
[  116.373901][ T7959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.866'.
[  117.095934][ T7965] netlink: 'syz.0.869': attribute type 10 has an invalid length.
[  117.218174][ T7967] syzkaller0: refused to change device tx_queue_len
[  117.340397][ T7974] netlink: 'syz.2.873': attribute type 6 has an invalid length.
[  117.347180][ T7974] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  117.353963][ T7974] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.873'.
[  117.998660][ T7997] netlink: zone id is out of range
[  118.017013][ T7997] netlink: zone id is out of range
[  118.019522][ T7997] netlink: zone id is out of range
[  118.036439][ T7997] netlink: zone id is out of range
[  118.038603][ T7997] netlink: zone id is out of range
[  118.077574][ T7997] netlink: zone id is out of range
[  118.079806][ T7997] netlink: zone id is out of range
[  118.315231][ T7996] netlink: 'syz.0.884': attribute type 10 has an invalid length.
[  119.258459][ T8059] netlink: 'syz.0.905': attribute type 9 has an invalid length.
[  121.848547][ T8109] netlink: 'syz.0.930': attribute type 11 has an invalid length.
[  121.916059][ T8109] __nla_validate_parse: 7 callbacks suppressed
[  121.916074][ T8109] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.930'.
[  122.113217][ T8108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.864097][ T8080] net_ratelimit: 76 callbacks suppressed
[  122.864109][ T8080] Set syz1 is full, maxelem 65536 reached
[  123.097524][ T8131] netlink: 'syz.0.940': attribute type 22 has an invalid length.
[  123.101621][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'.
[  123.325390][ T8137] netlink: 'syz.2.943': attribute type 5 has an invalid length.
[  123.436954][ T8143] delete_channel: no stack
[  123.438953][ T8143] delete_channel: no stack
[  123.498331][ T8141] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.942'.
[  123.571650][ T8149] netlink: 56 bytes leftover after parsing attributes in process `syz.2.947'.
[  123.575525][ T8149] netlink: 64 bytes leftover after parsing attributes in process `syz.2.947'.
[  124.168497][ T8161] netlink: 'syz.1.951': attribute type 23 has an invalid length.
[  124.228589][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  124.252767][ T8167] netlink: 'syz.0.953': attribute type 21 has an invalid length.
[  124.255413][ T8167] IPv6: NLM_F_CREATE should be specified when creating new route
[  124.260039][ T8167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.263163][ T8167] IPv6: NLM_F_CREATE should be set when creating new route
[  124.266017][ T8167] IPv6: NLM_F_CREATE should be set when creating new route
[  124.268614][ T8167] IPv6: NLM_F_CREATE should be set when creating new route
[  124.567717][ T5867] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  125.573010][ T8221] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  125.614632][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'.
[  125.619232][ T8227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.979'.
[  125.623646][ T8227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.979'.
[  125.753828][ T8237] netlink: 'syz.2.984': attribute type 10 has an invalid length.
[  125.760802][ T8237] netlink: 2 bytes leftover after parsing attributes in process `syz.2.984'.
[  126.655662][ T8279] sit0: entered allmulticast mode
[  126.718382][ T8279] sit0: entered promiscuous mode
[  127.222381][ T8294] netlink: 'syz.0.1009': attribute type 10 has an invalid length.
[  127.493731][ T8300] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1011'.
[  127.712956][ T8314] netlink: 3787 bytes leftover after parsing attributes in process `syz.0.1018'.
[  129.309825][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.314830][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.319354][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.324711][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.329484][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.333086][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.338472][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.341468][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.373846][ T8357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.379213][ T8357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.630344][ T8354] chnl_net:caif_netlink_parms(): no params data found
[  129.712223][ T8353] chnl_net:caif_netlink_parms(): no params data found
[  129.781231][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.784268][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.787813][ T8354] bridge_slave_0: entered allmulticast mode
[  129.791798][ T8354] bridge_slave_0: entered promiscuous mode
[  129.810319][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.813297][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.816327][ T8354] bridge_slave_1: entered allmulticast mode
[  129.822631][ T8354] bridge_slave_1: entered promiscuous mode
[  129.871795][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.891024][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.894783][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.899414][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.902133][ T8353] bridge_slave_0: entered allmulticast mode
[  129.905467][ T8353] bridge_slave_0: entered promiscuous mode
[  129.928617][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.931724][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.934814][ T8353] bridge_slave_1: entered allmulticast mode
[  129.939471][ T8353] bridge_slave_1: entered promiscuous mode
[  129.944443][ T8354] team0: Port device team_slave_0 added
[  129.962302][ T8354] team0: Port device team_slave_1 added
[  130.000377][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.004090][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.007567][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.018843][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.026031][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.043608][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.046733][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.057366][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.082815][ T8353] team0: Port device team_slave_0 added
[  130.088553][ T8353] team0: Port device team_slave_1 added
[  130.138788][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.141720][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.151222][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.161012][ T8354] hsr_slave_0: entered promiscuous mode
[  130.164462][ T8354] hsr_slave_1: entered promiscuous mode
[  130.168432][ T8354] debugfs: 'hsr0' already exists in 'hsr'
[  130.170900][ T8354] Cannot create hsr debugfs directory
[  130.173815][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.176322][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.186577][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.240118][ T8353] hsr_slave_0: entered promiscuous mode
[  130.243280][ T8353] hsr_slave_1: entered promiscuous mode
[  130.246126][ T8353] debugfs: 'hsr0' already exists in 'hsr'
[  130.248921][ T8353] Cannot create hsr debugfs directory
[  130.462379][ T8354] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  130.488065][ T8354] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  130.493053][ T8354] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  130.497633][ T8382] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1040'.
[  130.520639][ T8354] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  130.593205][ T8353] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  130.602624][ T8353] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  130.612660][ T8353] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  130.623408][ T8353] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  130.694500][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.749494][ T8354] 8021q: adding VLAN 0 to HW filter on device team0
[  130.759954][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.762828][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.777974][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.780398][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.824750][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.870654][ T8353] 8021q: adding VLAN 0 to HW filter on device team0
[  130.890201][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.892953][ T7344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.903323][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.906192][ T7344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.967323][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.031446][ T8354] veth0_vlan: entered promiscuous mode
[  131.048415][ T8354] veth1_vlan: entered promiscuous mode
[  131.073789][ T8354] veth0_macvtap: entered promiscuous mode
[  131.080338][ T8354] veth1_macvtap: entered promiscuous mode
[  131.107258][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.158698][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.171391][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.178700][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.182477][ T5911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.200380][ T5911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.211997][ T5911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.346813][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.349756][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.387191][ T5867] Bluetooth: hci2: command tx timeout
[  131.390274][ T7344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.394050][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'.
[  131.402292][ T7344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.469774][ T5867] Bluetooth: hci0: command tx timeout
[  131.498741][ T8353] veth0_vlan: entered promiscuous mode
[  131.504670][ T8353] veth1_vlan: entered promiscuous mode
[  131.589694][ T8353] veth0_macvtap: entered promiscuous mode
[  131.614376][ T8353] veth1_macvtap: entered promiscuous mode
[  131.652683][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.662429][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.676568][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.680966][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.689392][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.700179][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.811768][ T7344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.814493][ T7344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.883387][ T7344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.898494][ T7344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.526954][ T8457] netlink: 'syz.3.1057': attribute type 33 has an invalid length.
[  132.530575][ T8457] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1057'.
[  132.591088][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.593861][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.953258][ T8462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1059'.
[  133.446710][   T33] audit: type=1107 audit(1755291253.797:2): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  133.466543][ T5867] Bluetooth: hci2: command tx timeout
[  133.550638][ T5867] Bluetooth: hci0: command tx timeout
[  133.711658][ T8510] netlink: 'syz.1.1081': attribute type 21 has an invalid length.
[  133.714674][ T8510] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1081'.
[  133.762946][ T8515] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1083'.
[  133.803774][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1085'.
[  133.818397][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1085'.
[  133.826188][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1085'.
[  134.205013][ T8553] netlink: 'syz.1.1102': attribute type 10 has an invalid length.
[  134.211538][ T8553] batman_adv: batadv0: Removing interface: netdevsim0
[  134.965218][ T8595] netlink: 'syz.3.1122': attribute type 10 has an invalid length.
[  134.985028][ T8595] geneve0: entered promiscuous mode
[  135.000073][ T8595] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  135.196197][ T8608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.882865][ T8357] Bluetooth: hci0: command tx timeout
[  135.886137][ T5867] Bluetooth: hci2: command tx timeout
[  136.354625][ T8628] netlink: 'syz.1.1136': attribute type 2 has an invalid length.
[  136.358763][ T8628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1136'.
[  136.502046][ T8642] openvswitch: netlink: Message has 4 unknown bytes.
[  136.965226][ T8676] netlink: 'syz.1.1159': attribute type 2 has an invalid length.
[  136.971021][ T8676] netlink: 'syz.1.1159': attribute type 4 has an invalid length.
[  136.974320][ T8676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1159'.
[  137.959841][ T8357] Bluetooth: hci2: command tx timeout
[  137.961948][ T8357] Bluetooth: hci0: command tx timeout
[  138.188325][ T8696] netlink: 'syz.4.1166': attribute type 17 has an invalid length.
[  138.191733][ T8696] netlink: 'syz.4.1166': attribute type 16 has an invalid length.
[  138.195105][ T8696] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1166'.
[  138.451355][ T8709] netlink: 'syz.1.1173': attribute type 6 has an invalid length.
[  138.453942][ T8709] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1173'.
[  138.553011][ T8718] netlink: 'syz.1.1177': attribute type 13 has an invalid length.
[  138.560011][ T8718] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.1177'.
[  138.785477][ T8730] netlink: 'syz.1.1182': attribute type 13 has an invalid length.
[  138.870869][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.873598][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.032902][ T8730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.043484][ T8730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.150280][ T8739] tun0: tun_chr_ioctl cmd 1074025677
[  139.152581][ T8739] tun0: linktype set to 774
[  139.157922][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.168374][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.183070][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.186939][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.641173][ T8757] netlink: 'syz.3.1193': attribute type 6 has an invalid length.
[  139.643956][ T8757] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1193'.
[  139.832080][ T8771] netlink: 'syz.4.1197': attribute type 29 has an invalid length.
[  139.841544][ T8771] netlink: 'syz.4.1197': attribute type 29 has an invalid length.
[  139.850227][ T8771] netlink: 'syz.4.1197': attribute type 29 has an invalid length.
[  140.997707][ T8802] netlink: 'syz.4.1208': attribute type 6 has an invalid length.
[  141.001105][ T8802] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1208'.
[  141.841710][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'.
[  142.173083][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1228'.
[  142.178613][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1228'.
[  142.188714][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1228'.
[  142.419217][ T8853] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1234'.
[  143.252550][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'.
[  143.276330][ T8873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1243'.
[  144.134182][ T8903] validate_nla: 1 callbacks suppressed
[  144.134197][ T8903] netlink: 'syz.4.1251': attribute type 21 has an invalid length.
[  144.141190][ T8903] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1251'.
[  146.323012][ T8941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1269'.
[  146.336735][ T8941] unsupported nlmsg_type 40
[  146.521615][ T8949] netlink: 'syz.4.1273': attribute type 11 has an invalid length.
[  146.525184][ T8949] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.1273'.
[  146.592012][ T5867] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[  146.595791][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.678884][ T8954] delete_channel: no stack
[  147.313103][ T8968] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1279'.
[  147.714097][ T8960] delete_channel: no stack
[  148.008134][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'.
[  148.270844][ T9000] delete_channel: no stack
[  148.743141][ T9006] netlink: 'syz.3.1295': attribute type 13 has an invalid length.
[  148.748711][ T9006] netlink: 'syz.3.1295': attribute type 17 has an invalid length.
[  149.184833][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'.
[  149.197844][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'.
[  149.255343][ T9006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.122329][ T9042] netlink: 'syz.4.1309': attribute type 1 has an invalid length.
[  150.125689][ T9042] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1309'.
[  150.328967][ T9047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1312'.
[  150.380687][ T9057] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1317'.
[  150.578943][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'.
[  150.795937][ T9077] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1326'.
[  150.891802][ T9082] sctp: [Deprecated]: syz.3.1327 (pid 9082) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.891802][ T9082] Use struct sctp_sack_info instead
[  151.278760][ T9090] netlink: set zone limit has 4 unknown bytes
[  151.511717][ T9092] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1333'.
[  151.591960][ T9092] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  151.595088][ T9103] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1337'.
[  151.646051][ T9105] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1338'.
[  152.880084][ T9127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.412490][ T9138] netlink: 'syz.4.1354': attribute type 39 has an invalid length.
[  153.914798][ T9159] netlink: 'syz.3.1362': attribute type 33 has an invalid length.
[  154.354590][ T9185] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  154.422800][ T9189] __nla_validate_parse: 6 callbacks suppressed
[  154.422810][ T9189] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1376'.
[  155.820291][ T9248] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1402'.
[  156.373842][ T9256] netlink: 'syz.1.1405': attribute type 29 has an invalid length.
[  156.378078][ T9256] netlink: 'syz.1.1405': attribute type 29 has an invalid length.
[  156.490207][ T9263] netlink: 'syz.3.1408': attribute type 41 has an invalid length.
[  157.342225][ T9271] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1412'.
[  157.361491][ T9271] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1412'.
[  157.368399][ T9271] netlink: 'syz.3.1412': attribute type 10 has an invalid length.
[  157.497804][ T9271] team0 (unregistering): Port device team_slave_0 removed
[  157.506735][ T9271] team0 (unregistering): Port device team_slave_1 removed
[  157.645124][ T9287] netlink: 'syz.1.1419': attribute type 46 has an invalid length.
[  157.814291][ T9291] netlink: 'syz.4.1422': attribute type 39 has an invalid length.
[  158.044060][ T9307] : renamed from pim6reg1
[  158.223532][ T9311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1429'.
[  158.401096][ T9321] netlink: 'syz.4.1434': attribute type 1 has an invalid length.
[  159.365148][ T9353] netlink: 'syz.3.1445': attribute type 10 has an invalid length.
[  159.720499][ T9353] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  160.030688][ T9365] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1451'.
[  160.124645][ T9374] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1452'.
[  160.372098][   T33] audit: type=1107 audit(1755291280.727:3): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  160.372098][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  160.372098][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  160.372098][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  160.416331][ T9390] netlink: 'syz.3.1456': attribute type 10 has an invalid length.
[  160.457791][ T9390] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1456'.
[  160.479312][ T9393] delete_channel: no stack
[  161.408128][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1471'.
[  161.555032][ T9433] netlink: 'syz.4.1477': attribute type 29 has an invalid length.
[  161.563798][ T9433] netlink: 'syz.4.1477': attribute type 29 has an invalid length.
[  162.354876][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'.
[  162.541921][ T9469] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  162.545111][ T9469] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  162.810168][ T9475] netlink: 'syz.1.1493': attribute type 27 has an invalid length.
[  162.813226][ T9475] netlink: 'syz.1.1493': attribute type 3 has an invalid length.
[  162.816022][ T9475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1493'.
[  162.914338][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'.
[  162.923128][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'.
[  163.199727][ T9482] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1496'.
[  163.204835][ T9482] hsr_slave_0: left promiscuous mode
[  163.215436][ T9482] hsr_slave_1: left promiscuous mode
[  163.383180][ T9488] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1499'.
[  163.439890][ T9492] netlink: 'syz.4.1501': attribute type 3 has an invalid length.
[  163.487494][ T9490] lo speed is unknown, defaulting to 1000
[  163.491272][ T9490] lo speed is unknown, defaulting to 1000
[  163.494071][ T9490] lo speed is unknown, defaulting to 1000
[  163.671807][ T9490] infiniband syz1: set active
[  163.674547][  T973] lo speed is unknown, defaulting to 1000
[  163.676885][ T9490] infiniband syz1: added lo
[  163.767013][ T9508] netlink: 'syz.1.1507': attribute type 3 has an invalid length.
[  163.770071][ T9508] netlink: 'syz.1.1507': attribute type 1 has an invalid length.
[  163.850103][ T9490] RDS/IB: syz1: added
[  163.853313][ T9490] smc: adding ib device syz1 with port count 1
[  163.858556][ T9490] smc:    ib device syz1 port 1 has pnetid 
[  163.862854][ T5497] lo speed is unknown, defaulting to 1000
[  163.870136][ T9490] lo speed is unknown, defaulting to 1000
[  164.070677][ T9511] veth1_macvtap: entered allmulticast mode
[  164.115307][ T9490] lo speed is unknown, defaulting to 1000
[  164.237097][ T9490] lo speed is unknown, defaulting to 1000
[  164.597318][ T9490] lo speed is unknown, defaulting to 1000
[  164.813519][ T9490] lo speed is unknown, defaulting to 1000
[  165.209783][ T9558] __nla_validate_parse: 3 callbacks suppressed
[  165.209793][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1531'.
[  165.367223][ T9561] pim6reg1: entered allmulticast mode
[  165.542045][ T9567] netlink: 'syz.3.1535': attribute type 1 has an invalid length.
[  165.545333][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'.
[  165.856111][ T9586] netlink: 'syz.1.1543': attribute type 29 has an invalid length.
[  165.862500][ T9586] netlink: 'syz.1.1543': attribute type 29 has an invalid length.
[  166.032419][ T9600] lo: entered promiscuous mode
[  166.038735][ T9600] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  166.197709][ T9606] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'.
[  166.203449][ T9608] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1554'.
[  166.613992][ T9639] validate_nla: 2 callbacks suppressed
[  166.614151][ T9639] netlink: 'syz.3.1569': attribute type 10 has an invalid length.
[  166.622867][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.630027][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.726061][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.730366][ T9639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.735009][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.739129][ T9639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.756300][ T9639] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  166.770219][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'.
[  166.846182][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1575'.
[  166.850686][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1575'.
[  167.033006][ T5867] Bluetooth: hci0: Malformed LE Event: 0x0d
[  167.038860][ T9666] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1582'.
[  167.330727][ T9687] netlink: 'syz.3.1592': attribute type 10 has an invalid length.
[  167.565029][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1600'.
[  167.586346][ T9702] netlink: 'syz.3.1599': attribute type 10 has an invalid length.
[  167.589827][ T9702] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1599'.
[  167.634524][ T9708] netlink: 'syz.4.1602': attribute type 3 has an invalid length.
[  168.962947][ T9778] netlink: 'syz.3.1631': attribute type 2 has an invalid length.
[  168.965978][ T9778] netlink: 'syz.3.1631': attribute type 1 has an invalid length.
[  169.050462][ T9787] netlink: 'syz.4.1636': attribute type 10 has an invalid length.
[  169.077276][ T9787] 8021q: adding VLAN 0 to HW filter on device team0
[  169.082190][ T9787] bond0: (slave team0): Enslaving as an active interface with an up link
[  169.179477][ T9787] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  169.218689][ T9787] can: request_module (can-proto-0) failed.
[  170.005345][ T5867] Bluetooth: hci0: Malformed LE Event: 0x0b
[  170.278893][ T9850] __nla_validate_parse: 4 callbacks suppressed
[  170.278936][ T9850] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1660'.
[  170.285539][ T9850] netlink: zone id is out of range
[  170.288739][ T9850] netlink: zone id is out of range
[  170.290654][ T9850] netlink: zone id is out of range
[  170.292528][ T9850] netlink: zone id is out of range
[  170.294328][ T9850] netlink: zone id is out of range
[  170.296270][ T9850] netlink: zone id is out of range
[  170.300610][ T9850] netlink: zone id is out of range
[  170.302701][ T9850] netlink: zone id is out of range
[  170.305225][ T9850] netlink: zone id is out of range
[  170.308394][ T9850] netlink: zone id is out of range
[  170.317984][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'.
[  170.611312][ T9863] lo speed is unknown, defaulting to 1000
[  170.829902][ T9878] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  170.832298][ T9878] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1673'.
[  170.945696][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'.
[  171.124597][ T9903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1686'.
[  171.186163][ T9906] lo speed is unknown, defaulting to 1000
[  171.433153][ T9922] netlink: 'syz.3.1694': attribute type 5 has an invalid length.
[  171.438405][ T9918] syzkaller0: entered promiscuous mode
[  171.440688][ T9922] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1694'.
[  171.440805][ T9918] syzkaller0: entered allmulticast mode
[  172.433845][ T9962] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.1713'.
[  173.252284][T10008] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1735'.
[  173.361080][T10014] bridge_slave_1: left allmulticast mode
[  173.363851][T10014] bridge_slave_1: left promiscuous mode
[  173.370563][T10014] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.383546][T10014] bridge_slave_0: left allmulticast mode
[  173.385567][T10014] bridge_slave_0: left promiscuous mode
[  173.389085][T10014] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.820767][T10036] netlink: 'syz.1.1749': attribute type 11 has an invalid length.
[  173.854558][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'.
[  173.859552][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'.
[  173.898564][T10041] netlink: 'syz.1.1751': attribute type 29 has an invalid length.
[  174.084260][T10056] netlink: 'syz.1.1758': attribute type 21 has an invalid length.
[  174.445441][T10072] netlink: 'syz.1.1766': attribute type 19 has an invalid length.
[  174.857039][T10083] netlink: 'syz.3.1771': attribute type 2 has an invalid length.
[  174.859833][T10083] netlink: 'syz.3.1771': attribute type 1 has an invalid length.
[  174.940574][T10087] netlink: 'syz.3.1773': attribute type 29 has an invalid length.
[  174.949300][T10087] netlink: 'syz.3.1773': attribute type 29 has an invalid length.
[  174.985905][T10091] netlink: 'syz.1.1775': attribute type 5 has an invalid length.
[  175.533883][T10117] netlink: 'syz.3.1785': attribute type 10 has an invalid length.
[  175.560549][T10117] batman_adv: batadv0: Adding interface: netdevsim0
[  175.562659][T10117] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.583394][T10117] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  175.789012][T10121] __nla_validate_parse: 2 callbacks suppressed
[  175.789032][T10121] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1787'.
[  176.064326][T10130] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1791'.
[  176.160586][T10137] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.1795'.
[  176.163598][T10137] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1795'.
[  176.539278][T10149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1800'.
[  176.676140][T10155] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1803'.
[  177.270021][T10180] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1815'.
[  178.032079][T10213] netlink: 212868 bytes leftover after parsing attributes in process `syz.3.1829'.
[  178.600759][T10195] delete_channel: no stack
[  178.911077][T10233] validate_nla: 6 callbacks suppressed
[  178.911132][T10233] netlink: 'syz.4.1839': attribute type 29 has an invalid length.
[  178.970756][T10234] netlink: 'syz.4.1839': attribute type 29 has an invalid length.
[  178.996612][T10237] netlink: 'syz.4.1839': attribute type 29 has an invalid length.
[  179.020410][T10233] netlink: 'syz.4.1839': attribute type 29 has an invalid length.
[  179.215705][T10245] pim6reg1: entered allmulticast mode
[  179.355627][T10253] netlink: 'syz.4.1848': attribute type 21 has an invalid length.
[  179.358526][T10253] netlink: 'syz.4.1848': attribute type 15 has an invalid length.
[  179.361007][T10253] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1848'.
[  179.363851][T10253] IPv6: NLM_F_CREATE should be specified when creating new route
[  179.371806][T10253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  179.374456][T10253] IPv6: NLM_F_CREATE should be set when creating new route
[  179.377035][T10253] IPv6: NLM_F_CREATE should be set when creating new route
[  179.379543][T10253] IPv6: NLM_F_CREATE should be set when creating new route
[  180.386259][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1853'.
[  180.749770][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  182.160659][T10385] net_ratelimit: 74 callbacks suppressed
[  182.160669][T10385] bond_slave_1: mtu less than device minimum
[  183.831008][T10425] __nla_validate_parse: 3 callbacks suppressed
[  183.831022][T10425] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1899'.
[  183.927670][T10428] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1900'.
[  184.544652][T10446] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1908'.
[  184.644419][T10452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.848734][T10474] netlink: 'syz.4.1921': attribute type 41 has an invalid length.
[  184.905130][T10478] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1923'.
[  184.958312][T10484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1925'.
[  185.143952][T10497] netlink: 495 bytes leftover after parsing attributes in process `syz.3.1932'.
[  185.341424][T10505] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  185.345320][T10505] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.440072][T10511] netlink: 'syz.1.1938': attribute type 1 has an invalid length.
[  185.498931][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'.
[  185.910564][T10535] tap0: tun_chr_ioctl cmd 1074025675
[  185.913123][T10535] tap0: persist enabled
[  185.915439][T10535] tap0: tun_chr_ioctl cmd 1074025675
[  185.925839][T10535] tap0: persist enabled
[  186.253660][T10558] netlink: 'syz.4.1960': attribute type 29 has an invalid length.
[  186.259627][T10558] netlink: 'syz.4.1960': attribute type 29 has an invalid length.
[  186.272944][T10558] netlink: 'syz.4.1960': attribute type 29 has an invalid length.
[  186.280571][T10558] netlink: 'syz.4.1960': attribute type 29 has an invalid length.
[  187.156165][T10591] netlink: 'syz.3.1973': attribute type 2 has an invalid length.
[  187.161917][T10591] netlink: 'syz.3.1973': attribute type 1 has an invalid length.
[  187.164868][T10591] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1973'.
[  187.172361][T10591] block nbd5: not configured, cannot reconfigure
[  187.312661][T10602] netlink: 'syz.4.1978': attribute type 29 has an invalid length.
[  187.325005][T10602] netlink: 'syz.4.1978': attribute type 29 has an invalid length.
[  187.682830][T10611] -1: renamed from syzkaller0
[  187.849470][T10616] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1984'.
[  188.212349][T10647] blkio.reset_stats is deprecated
[  188.652631][T10675] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2012'.
[  188.996340][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'.
[  189.062404][ T5867] Bluetooth: hci0: Malformed HCI Event: 0x22
[  191.105912][T10741] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.2041'.
[  191.272150][T10759] validate_nla: 3 callbacks suppressed
[  191.272164][T10759] netlink: 'syz.4.2049': attribute type 1 has an invalid length.
[  191.278645][T10759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.550090][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'.
[  193.611791][T10882] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2104'.
[  193.939261][T10895] netlink: 948 bytes leftover after parsing attributes in process `syz.3.2112'.
[  194.033141][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.035721][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.350569][T10913] netlink: 'syz.3.2121': attribute type 16 has an invalid length.
[  194.354073][T10913] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2121'.
[  194.543531][T10927] netlink: 'syz.1.2128': attribute type 4 has an invalid length.
[  194.961930][ T5867] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[  195.094492][T10975] netlink: 'syz.4.2151': attribute type 1 has an invalid length.
[  195.229761][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2154'.
[  196.515661][T11002] lo speed is unknown, defaulting to 1000
[  196.714124][T11010] netlink: 'syz.4.2163': attribute type 22 has an invalid length.
[  196.784892][T11014] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2165'.
[  196.831283][T11018] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2167'.
[  196.834548][T11018] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2167'.
[  196.923183][T11023] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2169'.
[  198.590962][T11077] netlink: 'syz.4.2187': attribute type 15 has an invalid length.
[  198.594283][T11077] netlink: 'syz.4.2187': attribute type 7 has an invalid length.
[  198.626571][T11077] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2187'.
[  199.028364][T11085] bridge_slave_1: left allmulticast mode
[  199.037881][T11085] bridge_slave_1: left promiscuous mode
[  199.042930][T11085] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.094227][T11085] bridge_slave_0: left allmulticast mode
[  199.099736][T11085] bridge_slave_0: left promiscuous mode
[  199.108283][T11085] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.315489][T11085] bond0: (slave bridge0): Releasing backup interface
[  199.381977][T11092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.738894][ T5867] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[  199.798081][T11103] delete_channel: no stack
[  199.799917][T11103] delete_channel: no stack
[  199.820635][T11103] netlink: 'syz.3.2197': attribute type 21 has an invalid length.
[  199.835954][T11103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2197'.
[  199.853025][T11103] netlink: 'syz.3.2197': attribute type 10 has an invalid length.
[  199.855987][T11103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.863563][T11103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.875596][T11103] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  200.586321][T11139] netlink: 'syz.4.2214': attribute type 10 has an invalid length.
[  200.609281][T11139] veth0_vlan: left promiscuous mode
[  200.612141][T11139] veth0_vlan: entered promiscuous mode
[  200.632097][T11139] team0: Device veth0_vlan failed to register rx_handler
[  200.811542][T11158] netlink: 'syz.1.2221': attribute type 1 has an invalid length.
[  200.819574][T11158] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2221'.
[  200.946241][T11166] @: renamed from veth0_vlan
[  203.809622][T11261] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2265'.
[  203.813181][T11261] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.2265'.
[  204.312891][T11269] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2268'.
[  204.890824][T11289] netlink: 'syz.3.2278': attribute type 21 has an invalid length.
[  204.898020][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2277'.
[  204.986211][T11285] netlink: 'syz.1.2275': attribute type 10 has an invalid length.
[  205.985094][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'.
[  206.630259][T11365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.374273][T11377] netlink: 'syz.1.2314': attribute type 10 has an invalid length.
[  207.377953][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2314'.
[  208.340969][T11377] dummy0: entered promiscuous mode
[  208.349394][T11377] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  208.456066][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2320'.
[  208.765863][T11409] netlink: 'syz.3.2327': attribute type 21 has an invalid length.
[  208.772774][T11409] netlink: 'syz.3.2327': attribute type 6 has an invalid length.
[  208.781854][T11409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2327'.
[  208.938746][T11417] delete_channel: no stack
[  209.159289][ T5867] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  209.160220][ T5867] Bluetooth: hci2: connection err: -111
[  210.078537][T11455] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2347'.
[  210.364188][T11463] wg2: entered promiscuous mode
[  210.369971][T11463] wg2: entered allmulticast mode
[  210.611351][ T5867] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  210.722941][T11491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2362'.
[  210.865930][T11498] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2366'.
[  210.871772][T11498] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2366'.
[  210.992349][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2370'.
[  211.215317][T11533] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2383'.
[  211.221868][T11533] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2383'.
[  211.224908][T11533] netlink: 'syz.1.2383': attribute type 5 has an invalid length.
[  211.228644][T11533] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2383'.
[  211.722247][T11550] netlink: 'syz.3.2390': attribute type 39 has an invalid length.
[  212.000584][T11568] netlink: 'syz.3.2399': attribute type 12 has an invalid length.
[  212.005293][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2399'.
[  212.055040][T11570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2397'.
[  214.055264][T11624] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  214.061003][T11624] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  214.602622][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.661538][T11647] netlink: 'syz.3.2427': attribute type 21 has an invalid length.
[  214.667473][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.598665][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1011288814 wd_nsec: 1011288851
[  216.232286][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.385270][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.827256][   T13] bridge_slave_1: left allmulticast mode
[  216.829892][   T13] bridge_slave_1: left promiscuous mode
[  216.833354][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.895124][   T13] bridge_slave_0: left allmulticast mode
[  216.905405][   T13] bridge_slave_0: left promiscuous mode
[  216.926665][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.273165][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.278433][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.282400][   T13] bond0 (unregistering): Released all slaves
[  217.731134][T11726] netlink: 'syz.1.2456': attribute type 8 has an invalid length.
[  217.734323][T11726] netlink: 'syz.1.2456': attribute type 6 has an invalid length.
[  217.759653][T11726] __nla_validate_parse: 2 callbacks suppressed
[  217.759670][T11726] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.2456'.
[  217.844858][   T13] hsr_slave_0: left promiscuous mode
[  217.861260][   T13] hsr_slave_1: left promiscuous mode
[  217.863796][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.869784][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.878491][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.883737][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.893050][   T13] batman_adv: batadv0: Removing interface: team0
[  217.921441][   T13] veth1_macvtap: left promiscuous mode
[  217.929336][   T13] veth0_macvtap: left promiscuous mode
[  218.242665][   T13] team0 (unregistering): Port device team_slave_1 removed
[  218.271642][   T13] team0 (unregistering): Port device team_slave_0 removed
[  218.700960][T11763] netlink: 'syz.4.2465': attribute type 27 has an invalid length.
[  218.703759][T11763] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2465'.
[  218.745251][T11765] netlink: 'syz.4.2466': attribute type 21 has an invalid length.
[  218.935259][T11771] netlink: 'syz.3.2468': attribute type 29 has an invalid length.
[  218.942141][T11771] netlink: 'syz.3.2468': attribute type 29 has an invalid length.
[  218.946203][T11771] netlink: 'syz.3.2468': attribute type 29 has an invalid length.
[  219.328052][T11786] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2472'.
[  219.500986][T11801] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2476'.
[  219.803749][T11822] netlink: 'syz.4.2484': attribute type 21 has an invalid length.
[  220.023006][T11850] netlink: 'syz.1.2495': attribute type 21 has an invalid length.
[  220.025797][T11850] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2495'.
[  220.032511][T11850] netlink: 'syz.1.2495': attribute type 4 has an invalid length.
[  220.035183][T11850] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2495'.
[  220.139566][T11854] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2496'.
[  222.192070][T11881] bond0: (slave bond_slave_0): Releasing backup interface
[  222.374008][T11895] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2507'.
[  223.303745][T11903] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2510'.
[  224.464239][T11926] lo speed is unknown, defaulting to 1000
[  224.743074][T11945] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  224.914773][T11952] raw_sendmsg: syz.4.2527 forgot to set AF_INET. Fix it!
[  226.581037][T11984] validate_nla: 2 callbacks suppressed
[  226.581053][T11984] netlink: 'syz.3.2540': attribute type 2 has an invalid length.
[  226.592887][T11984] netlink: 'syz.3.2540': attribute type 1 has an invalid length.
[  230.522026][T12025] netlink: 'syz.4.2554': attribute type 2 has an invalid length.
[  230.525258][T12025] netlink: 'syz.4.2554': attribute type 1 has an invalid length.
[  230.707876][T12034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2558'.
[  230.711888][T12034] openvswitch: netlink: Missing key (keys=40, expected=100)
[  231.895212][T12060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2563'.
[  231.909042][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'.
[  232.079608][T12066] netlink: 'syz.1.2565': attribute type 10 has an invalid length.
[  232.093417][T12064] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2564'.
[  232.098733][T12064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2564'.
[  232.283876][T12077] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2569'.
[  232.598235][    C1] ==================================================================
[  232.601136][    C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0
[  232.603739][    C1] Write of size 8 at addr ffff88803f3d9a48 by task syz.4.2572/12083
[  232.607783][    C1] 
[  232.608820][    C1] CPU: 1 UID: 0 PID: 12083 Comm: syz.4.2572 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  232.608836][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.608844][    C1] Call Trace:
[  232.608850][    C1]  <IRQ>
[  232.608856][    C1]  dump_stack_lvl+0x189/0x250
[  232.608874][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  232.608890][    C1]  ? rcu_is_watching+0x15/0xb0
[  232.608901][    C1]  ? __kasan_check_byte+0x12/0x40
[  232.608918][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.608931][    C1]  ? rcu_is_watching+0x15/0xb0
[  232.608942][    C1]  ? lock_release+0x4b/0x3e0
[  232.608959][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  232.608974][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  232.608989][    C1]  print_report+0xca/0x240
[  232.609000][    C1]  ? __bpf_get_stackid+0x677/0xcf0
[  232.609016][    C1]  kasan_report+0x118/0x150
[  232.609033][    C1]  ? __bpf_get_stackid+0x677/0xcf0
[  232.609050][    C1]  ? bpf_prog_b724608cae728045+0x27/0x2f
[  232.609060][    C1]  __bpf_get_stackid+0x677/0xcf0
[  232.609081][    C1]  ? bpf_prog_b724608cae728045+0x27/0x2f
[  232.609091][    C1]  bpf_get_stackid_raw_tp+0x196/0x210
[  232.609106][    C1]  bpf_prog_b724608cae728045+0x27/0x2f
[  232.609116][    C1]  bpf_trace_run2+0x284/0x4b0
[  232.609130][    C1]  ? bpf_trace_run2+0x186/0x4b0
[  232.609142][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[  232.609156][    C1]  ? kasan_quarantine_put+0xdd/0x220
[  232.609168][    C1]  ? free_task+0x50/0x160
[  232.609177][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.609193][    C1]  ? __pfx___put_task_struct_rcu_cb+0x10/0x10
[  232.609204][    C1]  ? rcu_core+0xc37/0x1770
[  232.609218][    C1]  ? free_task+0x50/0x160
[  232.609227][    C1]  kfree+0x3a0/0x440
[  232.609241][    C1]  ? __pfx___put_task_struct_rcu_cb+0x10/0x10
[  232.609251][    C1]  ? rcu_core+0xc37/0x1770
[  232.609266][    C1]  free_task+0x50/0x160
[  232.609276][    C1]  rcu_core+0xcab/0x1770
[  232.609296][    C1]  ? __pfx_rcu_core+0x10/0x10
[  232.609312][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  232.609326][    C1]  ? sched_clock_cpu+0x74/0x430
[  232.609341][    C1]  ? ktime_get+0x3e/0x1f0
[  232.609354][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  232.609366][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  232.609380][    C1]  ? __local_bh_disable_ip+0xf1/0x190
[  232.609390][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  232.609404][    C1]  handle_softirqs+0x286/0x870
[  232.609422][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  232.609433][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  232.609446][    C1]  __irq_exit_rcu+0xca/0x1f0
[  232.609479][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  232.609499][    C1]  irq_exit_rcu+0x9/0x30
[  232.609509][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  232.609523][    C1]  </IRQ>
[  232.609527][    C1]  <TASK>
[  232.609533][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  232.609546][    C1] RIP: 0010:__read_once_word_nocheck+0x0/0x10
[  232.609562][    C1] Code: e8 d5 2d b0 00 48 ba 00 00 00 00 00 fc ff df e9 88 fc ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 c3 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90
[  232.609571][    C1] RSP: 0018:ffffc9000630ee58 EFLAGS: 00000202
[  232.609583][    C1] RAX: ffffc9000630f301 RBX: ffffc90006308000 RCX: 0000000000000001
[  232.609592][    C1] RDX: ffffc9000630efc8 RSI: dffffc0000000000 RDI: ffffc9000630f328
[  232.609601][    C1] RBP: 1ffff92000c61df1 R08: ffffc9000630f328 R09: 0000000000000000
[  232.609609][    C1] R10: ffffc9000630efd8 R11: fffff52000c61dfd R12: 1ffff92000c61df2
[  232.609616][    C1] R13: 1ffff92000c61df3 R14: ffffc90006310000 R15: dffffc0000000000
[  232.609629][    C1]  deref_stack_reg+0x19f/0x230
[  232.609642][    C1]  unwind_next_frame+0x17c4/0x2390
[  232.609656][    C1]  ? unwind_next_frame+0xa5/0x2390
[  232.609667][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  232.609682][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  232.609698][    C1]  arch_stack_walk+0x11c/0x150
[  232.609713][    C1]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  232.609730][    C1]  stack_trace_save+0x9c/0xe0
[  232.609742][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  232.609755][    C1]  ? perf_swevent_event+0x33e/0x5e0
[  232.609804][    C1]  kasan_save_track+0x3e/0x80
[  232.609817][    C1]  ? kasan_save_track+0x3e/0x80
[  232.609829][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  232.609858][    C1]  __kasan_kmalloc+0x93/0xb0
[  232.609873][    C1]  __kmalloc_cache_node_noprof+0x234/0x3d0
[  232.609888][    C1]  ? __get_vm_area_node+0x13f/0x300
[  232.609905][    C1]  __get_vm_area_node+0x13f/0x300
[  232.609920][    C1]  __vmalloc_node_range_noprof+0x301/0x12f0
[  232.609936][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  232.609948][    C1]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  232.609963][    C1]  ? __phys_addr+0xd3/0x180
[  232.609975][    C1]  ? __kasan_kmalloc_large+0x85/0xa0
[  232.609991][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  232.610006][    C1]  ? rcu_is_watching+0x15/0xb0
[  232.610016][    C1]  ? bpf_check+0xf9/0x1d2e0
[  232.610026][    C1]  ? rcu_is_watching+0x15/0xb0
[  232.610035][    C1]  ? bpf_check+0xf9/0x1d2e0
[  232.610045][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  232.610055][    C1]  vzalloc_noprof+0xb2/0xf0
[  232.610068][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  232.610079][    C1]  bpf_check+0x1a5/0x1d2e0
[  232.610093][    C1]  ? perf_tp_event+0x664/0x1380
[  232.610103][    C1]  ? __pfx_perf_tp_event+0x10/0x10
[  232.610124][    C1]  ? irqentry_enter+0x3d/0x60
[  232.610139][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  232.610152][    C1]  ? __lock_acquire+0xab9/0xd20
[  232.610169][    C1]  ? __pfx_bpf_check+0x10/0x10
[  232.610181][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  232.610198][    C1]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  232.610211][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.610225][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  232.610238][    C1]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  232.610251][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  232.610267][    C1]  ? __asan_memset+0x22/0x50
[  232.610279][    C1]  ? bpf_obj_name_cpy+0x194/0x1e0
[  232.610289][    C1]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  232.610303][    C1]  ? security_bpf_prog_load+0x7f/0x310
[  232.610320][    C1]  bpf_prog_load+0x1318/0x1930
[  232.610336][    C1]  ? __pfx_bpf_prog_load+0x10/0x10
[  232.610355][    C1]  ? bpf_lsm_bpf+0x9/0x20
[  232.610368][    C1]  ? security_bpf+0x7e/0x300
[  232.610383][    C1]  __sys_bpf+0x528/0x870
[  232.610397][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  232.610415][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  232.610431][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  232.610449][    C1]  __x64_sys_bpf+0x7c/0x90
[  232.610463][    C1]  do_syscall_64+0xfa/0x3b0
[  232.610479][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.610498][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  232.610511][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.610523][    C1] RIP: 0033:0x7f13ddd8ebe9
[  232.610535][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.610544][    C1] RSP: 002b:00007f13dec2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  232.610557][    C1] RAX: ffffffffffffffda RBX: 00007f13ddfb5fa0 RCX: 00007f13ddd8ebe9
[  232.610566][    C1] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  232.610572][    C1] RBP: 00007f13dde11e19 R08: 0000000000000000 R09: 0000000000000000
[  232.610578][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.610585][    C1] R13: 00007f13ddfb6038 R14: 00007f13ddfb5fa0 R15: 00007ffcf8f9cb08
[  232.610598][    C1]  </TASK>
[  232.610602][    C1] 
[  232.902786][    C1] Allocated by task 12083:
[  232.904724][    C1]  kasan_save_track+0x3e/0x80
[  232.906359][    C1]  __kasan_kmalloc+0x93/0xb0
[  232.908157][    C1]  __kmalloc_node_noprof+0x276/0x4e0
[  232.909929][    C1]  bpf_map_area_alloc+0x64/0x180
[  232.911964][    C1]  prealloc_elems_and_freelist+0x86/0x1d0
[  232.914045][    C1]  stack_map_alloc+0x33f/0x4c0
[  232.915749][    C1]  map_create+0xaa3/0x14d0
[  232.917550][    C1]  __sys_bpf+0x60f/0x870
[  232.918987][    C1]  __x64_sys_bpf+0x7c/0x90
[  232.920463][    C1]  do_syscall_64+0xfa/0x3b0
[  232.922006][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.923966][    C1] 
[  232.924800][    C1] The buggy address belongs to the object at ffff88803f3d9800
[  232.924800][    C1]  which belongs to the cache kmalloc-cg-1k of size 1024
[  232.929486][    C1] The buggy address is located 8 bytes to the right of
[  232.929486][    C1]  allocated 576-byte region [ffff88803f3d9800, ffff88803f3d9a40)
[  232.934204][    C1] 
[  232.935034][    C1] The buggy address belongs to the physical page:
[  232.937138][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3f3d8
[  232.940059][    C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  232.942846][    C1] memcg:ffff88802992e501
[  232.944266][    C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  232.947067][    C1] page_type: f5(slab)
[  232.948707][    C1] raw: 00fff00000000040 ffff88801a44b280 0000000000000000 dead000000000001
[  232.952054][    C1] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88802992e501
[  232.955062][    C1] head: 00fff00000000040 ffff88801a44b280 0000000000000000 dead000000000001
[  232.957950][    C1] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88802992e501
[  232.960835][    C1] head: 00fff00000000003 ffffea0000fcf601 00000000ffffffff 00000000ffffffff
[  232.963671][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  232.966536][    C1] page dumped because: kasan: bad access detected
[  232.968637][    C1] page_owner tracks the page as allocated
[  232.970686][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5871, tgid 5871 (syz-executor), ts 58637168929, free_ts 0
[  232.978957][    C1]  post_alloc_hook+0x240/0x2a0
[  232.980965][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  232.983245][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  232.985520][    C1]  alloc_pages_mpol+0x232/0x4a0
[  232.987209][    C1]  allocate_slab+0x8a/0x370
[  232.988788][    C1]  ___slab_alloc+0xbeb/0x1410
[  232.990520][    C1]  __kmalloc_noprof+0x305/0x4f0
[  232.992226][    C1]  __register_sysctl_table+0x72/0x1340
[  232.994125][    C1]  neigh_sysctl_register+0x9a2/0xa80
[  232.995898][    C1]  addrconf_sysctl_register+0xb3/0x1c0
[  232.997910][    C1]  ipv6_add_dev+0xd46/0x1370
[  232.999526][    C1]  addrconf_notify+0x794/0x1010
[  233.001251][    C1]  notifier_call_chain+0x1b6/0x3e0
[  233.003031][    C1]  register_netdevice+0x1608/0x1ae0
[  233.004836][    C1]  __ip_tunnel_create+0x3e7/0x560
[  233.006599][    C1]  ip_tunnel_init_net+0x2ba/0x800
[  233.008505][    C1] page_owner free stack trace missing
[  233.010444][    C1] 
[  233.011298][    C1] Memory state around the buggy address:
[  233.013304][    C1]  ffff88803f3d9900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  233.016234][    C1]  ffff88803f3d9980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  233.019385][    C1] >ffff88803f3d9a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  233.022407][    C1]                                               ^
[  233.024692][    C1]  ffff88803f3d9a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  233.027449][    C1]  ffff88803f3d9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  233.030394][    C1] ==================================================================
[  233.034195][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  233.037278][    C1] CPU: 1 UID: 0 PID: 12083 Comm: syz.4.2572 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  233.042574][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.046898][    C1] Call Trace:
[  233.048364][    C1]  <IRQ>
[  233.049653][    C1]  dump_stack_lvl+0x99/0x250
[  233.051696][    C1]  ? __asan_memcpy+0x40/0x70
[  233.053728][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.055991][    C1]  ? __pfx__printk+0x10/0x10
[  233.058004][    C1]  vpanic+0x281/0x750
[  233.059741][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  233.062011][    C1]  ? __pfx_vpanic+0x10/0x10
[  233.063983][    C1]  ? irqentry_exit+0x74/0x90
[  233.066007][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.068257][    C1]  panic+0xb9/0xc0
[  233.069933][    C1]  ? __pfx_panic+0x10/0x10
[  233.071859][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  233.074400][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.077159][    C1]  ? __bpf_get_stackid+0x677/0xcf0
[  233.079395][    C1]  check_panic_on_warn+0x89/0xb0
[  233.081541][    C1]  ? __bpf_get_stackid+0x677/0xcf0
[  233.083787][    C1]  end_report+0x78/0x160
[  233.085636][    C1]  kasan_report+0x129/0x150
[  233.087630][    C1]  ? __bpf_get_stackid+0x677/0xcf0
[  233.089874][    C1]  ? bpf_prog_b724608cae728045+0x27/0x2f
[  233.092276][    C1]  __bpf_get_stackid+0x677/0xcf0
[  233.094441][    C1]  ? bpf_prog_b724608cae728045+0x27/0x2f
[  233.096890][    C1]  bpf_get_stackid_raw_tp+0x196/0x210
[  233.099200][    C1]  bpf_prog_b724608cae728045+0x27/0x2f
[  233.101538][    C1]  bpf_trace_run2+0x284/0x4b0
[  233.103590][    C1]  ? bpf_trace_run2+0x186/0x4b0
[  233.105705][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[  233.107965][    C1]  ? kasan_quarantine_put+0xdd/0x220
[  233.110257][    C1]  ? free_task+0x50/0x160
[  233.112145][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.114413][    C1]  ? __pfx___put_task_struct_rcu_cb+0x10/0x10
[  233.116995][    C1]  ? rcu_core+0xc37/0x1770
[  233.118929][    C1]  ? free_task+0x50/0x160
[  233.120712][    C1]  kfree+0x3a0/0x440
[  233.122027][    C1]  ? __pfx___put_task_struct_rcu_cb+0x10/0x10
[  233.124074][    C1]  ? rcu_core+0xc37/0x1770
[  233.125699][    C1]  free_task+0x50/0x160
[  233.127302][    C1]  rcu_core+0xcab/0x1770
[  233.129031][    C1]  ? __pfx_rcu_core+0x10/0x10
[  233.130914][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  233.132998][    C1]  ? sched_clock_cpu+0x74/0x430
[  233.135024][    C1]  ? ktime_get+0x3e/0x1f0
[  233.136809][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  233.139023][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  233.140775][    C1]  ? __local_bh_disable_ip+0xf1/0x190
[  233.142781][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  233.144878][    C1]  handle_softirqs+0x286/0x870
[  233.146566][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  233.148401][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  233.150175][    C1]  __irq_exit_rcu+0xca/0x1f0
[  233.151719][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  233.153533][    C1]  irq_exit_rcu+0x9/0x30
[  233.155008][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  233.156941][    C1]  </IRQ>
[  233.157943][    C1]  <TASK>
[  233.158947][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.160934][    C1] RIP: 0010:__read_once_word_nocheck+0x0/0x10
[  233.162898][    C1] Code: e8 d5 2d b0 00 48 ba 00 00 00 00 00 fc ff df e9 88 fc ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 c3 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90
[  233.169538][    C1] RSP: 0018:ffffc9000630ee58 EFLAGS: 00000202
[  233.171585][    C1] RAX: ffffc9000630f301 RBX: ffffc90006308000 RCX: 0000000000000001
[  233.174224][    C1] RDX: ffffc9000630efc8 RSI: dffffc0000000000 RDI: ffffc9000630f328
[  233.176862][    C1] RBP: 1ffff92000c61df1 R08: ffffc9000630f328 R09: 0000000000000000
[  233.179718][    C1] R10: ffffc9000630efd8 R11: fffff52000c61dfd R12: 1ffff92000c61df2
[  233.182781][    C1] R13: 1ffff92000c61df3 R14: ffffc90006310000 R15: dffffc0000000000
[  233.185858][    C1]  deref_stack_reg+0x19f/0x230
[  233.187727][    C1]  unwind_next_frame+0x17c4/0x2390
[  233.189907][    C1]  ? unwind_next_frame+0xa5/0x2390
[  233.192038][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  233.194029][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  233.196514][    C1]  arch_stack_walk+0x11c/0x150
[  233.198138][    C1]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  233.200218][    C1]  stack_trace_save+0x9c/0xe0
[  233.201829][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  233.203813][    C1]  ? perf_swevent_event+0x33e/0x5e0
[  233.205839][    C1]  kasan_save_track+0x3e/0x80
[  233.207334][    C1]  ? kasan_save_track+0x3e/0x80
[  233.208905][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  233.210534][    C1]  __kasan_kmalloc+0x93/0xb0
[  233.212132][    C1]  __kmalloc_cache_node_noprof+0x234/0x3d0
[  233.214074][    C1]  ? __get_vm_area_node+0x13f/0x300
[  233.215691][    C1]  __get_vm_area_node+0x13f/0x300
[  233.217213][    C1]  __vmalloc_node_range_noprof+0x301/0x12f0
[  233.219592][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  233.221247][    C1]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  233.223188][    C1]  ? __phys_addr+0xd3/0x180
[  233.225072][    C1]  ? __kasan_kmalloc_large+0x85/0xa0
[  233.227247][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  233.229863][    C1]  ? rcu_is_watching+0x15/0xb0
[  233.231448][    C1]  ? bpf_check+0xf9/0x1d2e0
[  233.232969][    C1]  ? rcu_is_watching+0x15/0xb0
[  233.234554][    C1]  ? bpf_check+0xf9/0x1d2e0
[  233.236163][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  233.237799][    C1]  vzalloc_noprof+0xb2/0xf0
[  233.239325][    C1]  ? bpf_check+0x1a5/0x1d2e0
[  233.241154][    C1]  bpf_check+0x1a5/0x1d2e0
[  233.242990][    C1]  ? perf_tp_event+0x664/0x1380
[  233.244990][    C1]  ? __pfx_perf_tp_event+0x10/0x10
[  233.246805][    C1]  ? irqentry_enter+0x3d/0x60
[  233.248399][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  233.250129][    C1]  ? __lock_acquire+0xab9/0xd20
[  233.251728][    C1]  ? __pfx_bpf_check+0x10/0x10
[  233.253606][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  233.255232][    C1]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  233.257566][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.259676][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  233.261888][    C1]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  233.264328][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  233.266449][    C1]  ? __asan_memset+0x22/0x50
[  233.268082][    C1]  ? bpf_obj_name_cpy+0x194/0x1e0
[  233.269938][    C1]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  233.271813][    C1]  ? security_bpf_prog_load+0x7f/0x310
[  233.274058][    C1]  bpf_prog_load+0x1318/0x1930
[  233.276020][    C1]  ? __pfx_bpf_prog_load+0x10/0x10
[  233.278128][    C1]  ? bpf_lsm_bpf+0x9/0x20
[  233.279917][    C1]  ? security_bpf+0x7e/0x300
[  233.281838][    C1]  __sys_bpf+0x528/0x870
[  233.283497][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  233.285249][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  233.287691][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  233.290128][    C1]  __x64_sys_bpf+0x7c/0x90
[  233.291924][    C1]  do_syscall_64+0xfa/0x3b0
[  233.293726][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.296275][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.298960][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.301400][    C1] RIP: 0033:0x7f13ddd8ebe9
[  233.303244][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.311019][    C1] RSP: 002b:00007f13dec2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  233.314406][    C1] RAX: ffffffffffffffda RBX: 00007f13ddfb5fa0 RCX: 00007f13ddd8ebe9
[  233.317051][    C1] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  233.319673][    C1] RBP: 00007f13dde11e19 R08: 0000000000000000 R09: 0000000000000000
[  233.322304][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.325176][    C1] R13: 00007f13ddfb6038 R14: 00007f13ddfb5fa0 R15: 00007ffcf8f9cb08
[  233.328555][    C1]  </TASK>
[  233.330583][    C1] Kernel Offset: disabled
[  233.332330][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:55:53  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d6b RBX=1ffff11026cc7f61 RCX=ffff888115ba3980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000621f840 RSP=ffffc9000621f6c0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555586ac1500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33820ff8 CR3=0000000029ef0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8417e12e53
XMM06=0000000000000000 00007f8417e12e4d XMM07=0000000000000000 00007f8417e12e61
XMM08=0000000000000000 00007f8417e12ee7 XMM09=0000000000000000 00007f8417e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0250
R8 =ffff8881067b0237 R9 =1ffff11020cf6046 R10=dffffc0000000000 R11=ffffffff854ef730
R12=dffffc0000000000 R13=ffffffff99af98ff R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef7ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f13dec2c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000100000000 CR3=0000000108ce6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f13ddf87498 00007f13ddf87470 XMM03=00007f13ddf874a8 00007f13ddf874a0
XMM04=00007f13deaed100 00007f13ddf87460 XMM05=00007f13ddf87478 00007f13ddf874c0
XMM06=00007f13ddf874b8 00007f13ddf874b0 XMM07=00007f13ddf874a8 00007f13ddf874a0
XMM08=0000000000000000 00007f13dde12ee7 XMM09=0000000000000000 00007f13dde12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
