last executing test programs:

3m57.253796582s ago: executing program 2 (id=2146):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x8b4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x3}]}, {0x0, [0x0, 0x2e, 0x61, 0x10]}}, 0x0, 0x2a, 0x0, 0x0, 0x200}, 0x28)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000d, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="6a0ac4ff0000000071104f000000000095000000001e0000af4fb8331220767ae2c45d36d35917cf1edafd3b0ff9bb4c7d77efcaca200afb7cc6edd4a37c27d7181c173e3c2e65070000000000000022ba8682e12314f1527751169abe7b1c4601d05ebe71bce08c9057667c9417f518377862243c2612fd344888487cf1ef2e55627b72d1a65c081d68fa3e0fc605f7c6a55cab97028ea18b70b700f5c0d9aa7561bf128c71"], &(0x7f0000000480)='GPL\x00'}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x0, 0x0}, 0x10)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000700000002"], 0x87)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50)

3m56.973970472s ago: executing program 2 (id=2151):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c0002800500010000002f001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

3m56.914969861s ago: executing program 2 (id=2152):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080))
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x20, 0x140f, 0xa821769c5c00448b, 0x70bd2b, 0x25d7db7c, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044)

3m56.847489844s ago: executing program 2 (id=2155):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socket$caif_stream(0x25, 0x1, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x9f, 0xffffffff, 0x200, 0x12180, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x3}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x1908, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000055f19907000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100008100009500000000000000930904010800000018000000ff0100000000000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000018c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x5, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r0, r1], &(0x7f0000000b80)=[{0x4, 0x1, 0x6}, {0x3, 0x4, 0x8, 0x7}], 0x10, 0xfea7}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)=""/254, 0xfe}], 0x1}, 0x40002102)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x24b5, 0x2}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1f, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}, {}, {0x85, 0x0, 0x0, 0x8a}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x81}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

3m55.887053303s ago: executing program 2 (id=2157):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x18, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socketpair(0x2b, 0x80000, 0x1, &(0x7f0000000000))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024dd02012bfd7000fbdbdf25030000000600030000000000fa20c65c57d592c30bda7faba659a265be6a94eaab3407c6b9d20000"], 0x1c}, 0x1, 0x0, 0x0, 0x4068000}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180008000000080000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
close(r4)
close(r3) (async)
close(r3)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
close(r6) (async)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x308)
socket$kcm(0x10, 0x3, 0x10) (async)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6143}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6143}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff010000007110430056926529bf"], 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10)

3m55.520465745s ago: executing program 2 (id=2158):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000240)=""/119, 0x77}], 0x3, &(0x7f00000002c0)=""/177, 0xb1}, 0x40010123) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x84) (async, rerun: 32)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x28, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) (async, rerun: 64)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64)

3m55.338103065s ago: executing program 32 (id=2158):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000240)=""/119, 0x77}], 0x3, &(0x7f00000002c0)=""/177, 0xb1}, 0x40010123) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x84) (async, rerun: 32)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x28, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) (async, rerun: 64)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64)

2m52.312689586s ago: executing program 1 (id=2642):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120e01000000009500000a0008000047361ce14cef359b3018489042bd160c5f98c60db82caa866ac91fdfc4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

2m52.237905497s ago: executing program 1 (id=2643):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xd, 0x5d, 0x4, 0x0, 0x0, 0x3, 0x43a16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x5020, 0x1, 0x3, 0x0, 0x0, 0x8000, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x5000)
setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f00000000c0)="f6e14ee68a941836288d4117d2c4dede7ce82dcaefadb9b31022ecee587653e1b395d9f70e641891bca2162112dc5520bf1b5f4a181007f83cb2d390ff15e3918b84aa93f58d78ba3fa39f1e48e33314a4f7656f02003066ea3c72ec3b836482fe9543e69869b1829d0caf4ed7441b19a6bde68847f1002e", 0x78}], 0x2}, 0x20008004)

2m52.237414165s ago: executing program 1 (id=2644):
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0xff, 0xfa, 0x7, 0x0, 0xea, 0x9800, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0xc601, 0x10040, 0xfd84, 0x4, 0x10001, 0x1, 0xa33, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040))
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008"], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0x1}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x40, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x7, 0x8, 0x2, 0x0, 0x7ff, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb84, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x8400, 0x0, 0x4, 0x1, 0x7, 0xb044, 0x4, 0x0, 0x5, 0x0, 0xc}, r0, 0xe, 0xffffffffffffffff, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0x50}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x61)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x4, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x70}}, 0x0)

2m51.233003701s ago: executing program 1 (id=2650):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62f5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777e403000000290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979981faac0930900000000000000420903fbc1", 0xde}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f", 0xb2}, {&(0x7f0000000740)="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", 0x2dc}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$pptp(0x18, 0x1, 0x2)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000040)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETGEN(r1, 0x0, 0x841)
sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, 0x0, 0x805)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$sock(r2, 0x0, 0x4040800)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x24000080)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x28, 0x140d, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xc4, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x10, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xc, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000000c0)='syzkaller\x00', 0x2ee, 0x64, &(0x7f0000000600)=""/100, 0x1f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x3, 0x0, 0x7}, {0xffffffff, 0x5, 0xa, 0x6}, {0x0, 0x1, 0x7, 0xb}, {0x0, 0x4, 0xb, 0x2}, {0x4, 0x5, 0x8, 0x4}], 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000680)=r6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m50.906363368s ago: executing program 1 (id=2655):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101e00000000009500000000000100"], &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = socket$kcm(0x29, 0x64075a6d9d059ae7, 0x0)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="435a37f059db763849d57755c049f3fccd874876dd441471f9e58e75495d6e7c0db01828b3b79de0ef62d02e55280ca36858c1c48c076d82", 0x38}, {&(0x7f00000002c0)="c48edd0582d2817ed8b1f00c40644e3fceaf593544611871f895ea2a58a0d5d2984a0f559b8379ab17ccd4279640af534d31226063afa7898b80329172ee5909ec731aefae3bbba8de95d1fd4b", 0x4d}], 0x2}, 0x10004801)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.swap.events\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x140c, 0x100, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c800}, 0x80)

2m50.68694725s ago: executing program 1 (id=2656):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="060000020000000069110a0000000000851000000200000085000000aa00000095000000000000009500a50500000000bafb7179847caf6743d4d500c3c3d38f25b499c748742a83cc7ea019c734b7425762411124"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2m50.519551476s ago: executing program 33 (id=2656):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="060000020000000069110a0000000000851000000200000085000000aa00000095000000000000009500a50500000000bafb7179847caf6743d4d500c3c3d38f25b499c748742a83cc7ea019c734b7425762411124"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.269491359s ago: executing program 3 (id=4218):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfe43)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r1}, 0x94)

1.866776782s ago: executing program 4 (id=4225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c080)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000037c0)={&(0x7f0000003680), 0xc, &(0x7f0000003780)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_clone(0x40000000, &(0x7f0000000c40)="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", 0x130, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x15c9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext, 0x0, 0x1, 0xfffffffe, 0x4, 0x2, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)

1.439564001s ago: executing program 0 (id=4230):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x13, 0x0, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000023df00000000000000c1f2f5a9604096fabad1fc03bdacf68c01255ae7", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="020000000100"/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r9, 0x58, &(0x7f00000005c0)}, 0x10)
bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
ioctl$SIOCSIFHWADDR(r10, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})
r11 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r11, &(0x7f0000000c00)={&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)="2f80", 0x2}], 0x1}, 0x40004)
sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r11, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000fe804100000000c85800"], 0x20}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000404000012000000c2d84ed847af6800000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r6], 0x48)

1.378741872s ago: executing program 3 (id=4231):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d974050100000000080002400000003a0800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1.373447816s ago: executing program 4 (id=4232):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1eadc, 0x0, 0x0, 0x1, 0x8, 0x0, 0xa25, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0xed24, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x0)
r3 = openat$cgroup_subtree(r1, &(0x7f00000005c0), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2], 0xfe33) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00ff00"], 0xfe43) (async, rerun: 32)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000006c0)="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", &(0x7f00000016c0)=""/209, &(0x7f0000000480)="8f8ede8695ed0daf476eb640726bb01ea664bc5aecc38d0380e2c0ab14c2b077638912eee46191c58c13a27c59a901e6ea248f0341bd92cfe5ff37acc7222bdccf4ddb", &(0x7f00000017c0)="0975527ebfe59b3a856c089f9db6206abae8248e0d5da215dfb1dcb80f73f1ff657a01c00eb3e24302ba26ea8e477df29eb7217e6f1d7126ca71a65db57876d4319844e9750e7ce948766f6a707f7a9b9dc18bd91551c2622649e1d54a37fc87b4ab2b7c5b736636ffa93d6f12ca7a5be5ba42bb1cdac1f6c2223add4fc2db268754ae5720cef443fab0e568cab8e1079fe54c8d387ad8b4fef043306b70e917bcc45219b4be4164836d4597b2bb55920e195b7fb19a83adc79c1075c848482c18b57a93e350517968eaf2356005caa510508bd20964f6fd48bb3b8042edc7da202d3a7ef37dd06245e3e2a8f8cde834e5e1e681e86457d040", 0xfffffff9, 0xffffffffffffffff, 0x4}, 0x38) (async, rerun: 32)
recvmsg$kcm(r2, 0x0, 0x102) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000080) (async)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x0, 0x61, 0x0, 0xa4d4)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xa, 0xff, 0x8, 0x1, 0x0, 0x5, 0x5013c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x81, 0x2}, 0x0, 0x0, 0x6, 0x7, 0x3, 0x582a010f, 0xff, 0x0, 0x6, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r5) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) (async)
write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0xcfeb) (async)
socketpair(0x2a, 0x5, 0x1, &(0x7f0000000200)) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
sendmsg(0xffffffffffffffff, 0x0, 0x20040900) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="100000000200008f4996d4135bfbe20095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (rerun: 32)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000e0b7aa059f166381b6a49bd6be1d24a64000ffba51ef517947337ba6186866a33e96e191b730ff4ebb9a9ef116fd0bd4d20f4a597b964f84508d50c132c28aba77588582bd04e413842008c1d40b3bd26c3d54f983e1d1c23d07cc21d0255393d4388e46a9702e555cb1e8d94619ff9ba23bbf43388d2b3a8196e30179aa470d5e2ee9679b974923e2af8d19684c367ce730de47b6f743b0e35e1179001692260a8c4ca460c48c249229f13a080016a5908ea85e11b4ef3d48", @ANYBLOB="9ea44f6da6477458da660055811a0256e18e8e4f5c03521c914b071f3a63c95bb46777d50013b69b8477e4a8b90e99408d83c0be21157523de262537ec8640b7f5d5d75d158ba230391fae54242f6a4994e2d7d00c3fb050623061dd4ed5458b46e0a0af94bebf9d1edb208bfa71c32f21f736be921ebdb896623ec678d81ca904f4aa291c1d6c979e546965c2d1f8a714498a5dafc9862d06c15cff0dacf18afd5df091c9d99c77a57d2218f69a3af9b38fe9a86fbb5f7e0a486171f2225e2068d261afd8fbbd3ab4562c5de96b760ce1ed8b8324d9956b1a1a386f3353", @ANYBLOB="0000000000000000b70800001cda00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0xc7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.286775952s ago: executing program 4 (id=4233):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18002, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@multicast]})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080))
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x4, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xf}, {0x8, 0x4}, {0xe, 0x1}, {0x9, 0x3}, {0x2, 0x3}, {0xc, 0x3}, {0x7, 0x5}, {0xa, 0x4}, {0xd, 0x1}]}, @datasec={0x3, 0x3, 0x0, 0xf, 0x1, [{0x4, 0x1, 0x6}, {0x2, 0xfffff800, 0xa21}, {0x5, 0x51917a23, 0x10}], '$'}, @func={0x3, 0x0, 0x0, 0xc, 0x3}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x4}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @fwd={0xe}]}, {0x0, [0x61, 0x5f]}}, &(0x7f00000001c0)=""/151, 0xe0, 0x97, 0x0, 0x59}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x18, 0x0, 0xfffffe00, 0x6, 0xc41, 0x1, 0xe63, '\x00', 0x0, r1, 0x2, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0xd, 0xfffffa27, 0x1, 0xffffffffffffffff, 0x8, '\x00', r3, r1, 0x5, 0x4, 0x3}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x1a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff00}}, @generic={0x9, 0xa, 0x6, 0xc00, 0x80000001}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6d00d74e, 0xfb, &(0x7f0000000800)=""/251, 0x41000, 0xc, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0xf, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940)=[r2, r4, r4, r2, r4, r4, r2, r2, r4, r4], &(0x7f0000000980)=[{0x0, 0x4, 0x0, 0x5}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x13, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, @ldst={0x3, 0x0, 0x1, 0x7, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000540)='GPL\x00', 0x7fff, 0xfe, &(0x7f0000000580)=""/254, 0x41100, 0x5, '\x00', r3, @fallback=0x20, r1, 0x8, &(0x7f0000000680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x6, &(0x7f0000000a80)=[r4, r2, r2, r2, r4, r4], &(0x7f0000000ac0)=[{0x1, 0x5, 0xb, 0x9}, {0x5, 0x5, 0x5, 0x9}, {0x1, 0x3, 0x1, 0x1}, {0x5, 0x3, 0x0, 0x9}, {0x4, 0x1, 0xc, 0x9}, {0x2, 0x4, 0xb, 0x1}], 0x10, 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r5, 0xe0, &(0x7f0000000dc0)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000cc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f00)={r6}, 0x4)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x440, 0x0)
ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000f80)=r3)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r10, &(0x7f0000001000)='syz0\x00', 0x200002, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x10000, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001080)={'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})
ioctl$TUNSETFILTEREBPF(r11, 0x800454e1, &(0x7f00000010c0)=r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000011c0)=[0x0], &(0x7f0000001200)=[0x0], <r13=>0x0, 0xf6, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000001300)}}, 0x10)
r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=r13, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0xd, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001540)='syzkaller\x00', 0x2, 0x72, &(0x7f0000001580)=""/114, 0x41000, 0x20, '\x00', r7, 0x25, r1, 0x8, &(0x7f0000001600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001640)={0x5, 0x4, 0x7fffffff, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001680)=[r2, r14, r4, r2], &(0x7f00000016c0)=[{0x4, 0x3, 0xd, 0xa}, {0x5, 0x3, 0xb, 0x1}], 0x10, 0x363}, 0x94)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x6, 0x800, 0x6, 0x84, 0x1000, r4, 0xc270, '\x00', r3, r14, 0x3, 0x5, 0x1}, 0x50)
sendmsg$inet(r12, &(0x7f0000001a40)={&(0x7f0000001840)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001880)="96b664b9b979ba026251a0457ec0f6eeea8c996c32cd9ad5e4579837feb08e351b15a6c8b0f56900a2e574c0c4f159435f8ff97b7c963bbb496209b0c3c836c8bf3f2cedcd672d4ca3ca27cec8c44f876305fd6ef95591b14c43282c25a83db1ee2060228bd74024a5ba8bc99b0a81bf3e614849404136e7580e18a342a101838bcb97ea205c7c9d2e2e9d21b4187ca97ef16dde894a18e69535c62809ccf383ac9f9d65", 0xa4}, {&(0x7f0000001940)="862ddcd5405566a60dee6df2fd0f949175ffc4e0d9e58ff1782104874fb5199e3351dc03a475472be77019825d19ace44a6ae4b92e5b199544e85a989079e9cec833cc314d739547000499d76cf79a356c08405f0ee8cb", 0x57}], 0x2, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}, 0x20000800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r2, <r16=>0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)=r8}, 0x20)
r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c80)=r13, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{r2, <r18=>0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)=r8}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x0, 0x1e, &(0x7f0000001b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @alu={0x4, 0x1, 0xb, 0x2, 0x6, 0xfffffffffffffff8, 0xede911576fb1cd6e}, @generic={0x9, 0x1, 0x0, 0x740, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c40)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x10, '\x00', r3, 0x0, r17, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x4, 0xf, 0x5, 0xd3c}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001e40)=[r4, r4, r18, r4, r2, r4, 0xffffffffffffffff, r15], &(0x7f0000001e80)=[{0x5, 0x1, 0x2, 0xa57cba8a54d0226b}], 0x10, 0x1}, 0x94)

1.285721061s ago: executing program 3 (id=4234):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x29000000}, 0xa0)

1.180819976s ago: executing program 3 (id=4235):
r0 = socket(0x3, 0x80001, 0x100)
recvmsg$qrtr(r0, &(0x7f00000001c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)=[{&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000780)=""/214, 0xd6}], 0x5, &(0x7f0000000900)=[{0x40, 0x0, 0x0, ""/45}, {0x38, 0x0, 0x0, ""/34}, {0x40, 0x0, 0x0, ""/44}, {0xb0, 0x0, 0x0, ""/158}, {0xe0, 0x0, 0x0, ""/201}, {0xb8, 0x0, 0x0, ""/163}, {0x70, 0x0, 0x0, ""/90}], 0x370, 0x40012103}, 0x38, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000008000000000000", @ANYRES32, @ANYBLOB="000000000200000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100), 0x0}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac14000000000d1208000f0100810401880016ea1f0006ea7f400303001803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffec", 0xc5}], 0x1, 0x0, 0x0, 0x7400}, 0x20044885)
r5 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff6c, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{r1, <r8=>0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)='%-010d \x00'}, 0x20)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000cc0), 0x4)
r9 = socket$kcm(0xf, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d2", 0xe}], 0x1}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x565}, {{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000200)="8fdbbf091ce6e6c04a32a6bf0d00c6bf35a2abaf1d526cccd2c8c5085975447a31f798f73a59839db7fc77cb6acd8c0d956d0e42122bc1f19ac24729d78c24c176c6", &(0x7f0000000440)=""/175, 0x4}, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="720ac4ff00000000711076000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94)
sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x2, 0xf0}, 0x2}, 0x18, &(0x7f0000000f40)={&(0x7f0000000080)="f842a088874857bb265f53ddec60ffdf4f29818d063c1ec62cb33da7c215cd70449685a3ec86e198f828c3fc2efcc8ef537f80aed77c5c2bf93ba2c86133c48af30f8930e9e27be2aeabdae0b118f3ece09337346cb94ec9214fa4d5d27f4f25752a", 0x62}}, 0x2000005)

1.098701297s ago: executing program 4 (id=4236):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0xb5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x68)

951.07588ms ago: executing program 3 (id=4237):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020605000000000000000000010000002ae5700b54ddac230900020073797a31000000000c0007800800064000000000050005000a000000050001000600000011000300686173683a6e65742c6e657400000000be04fcdafebab000c49af3fa3bbeea7db1921ef376ad"], 0x58}}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r8}, 0x18)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000008c0)='gpio_value\x00', r8}, 0x18)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
write$cgroup_int(r10, &(0x7f0000000040), 0x83000)
r11 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r12=>0xffffffffffffffff})
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0x12, &(0x7f00000008c0)=r14, 0x4)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0x1, <r16=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @generic={0x8, 0x9, 0xd, 0x4, 0x9}], &(0x7f0000000200)='GPL\x00', 0x1316, 0xc8, &(0x7f0000000240)=""/200, 0x41000, 0x4c, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001700)=[r6, r7, r10, r14, r15, 0x1, r16, 0xffffffffffffffff], &(0x7f0000001740)=[{0x4, 0x2, 0xb, 0x4}, {0x4, 0x1, 0x10}, {0x3, 0x1, 0xa, 0x4}, {0x5, 0x2, 0x0, 0x1}, {0x2, 0x5, 0xe}, {0x2, 0x2, 0x1, 0xa}], 0x10, 0xfffffffc}, 0x94)
socket$kcm(0x10, 0x3, 0x10)

511.409479ms ago: executing program 0 (id=4238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000001"], 0x40}, 0x20008024)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d00010026bdf000fcdbdf250400000008000c"], 0x1c}, 0x1, 0x30000, 0x0, 0x4000d}, 0x20000000)

420.443085ms ago: executing program 0 (id=4239):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e, 0xffffffffffffff76}, 0x28) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
close(r1) (async)
r2 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r6, 0x0, 0x7, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
close(r4) (async, rerun: 32)
socket$kcm(0x29, 0x2, 0x0) (rerun: 32)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x28) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000), 0x8) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async)
r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64=0x0], 0x10) (rerun: 64)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8610102c580aeeb1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3, 0x3, 0x64, 0x9}, {0x64, 0x1, 0x0, 0x9}, {0x6, 0x6, 0x0, 0x3}]})

359.592634ms ago: executing program 0 (id=4240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x17c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_TUPLE={0x104, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae4000000060a0b0400000000000000000200fffeb80004802800018007000100637400001c0002800800014000000002080002400000001005000300000000008c0001800c000100636f756e746572007c0002800c00014000000000000000020c00024000000000000000090c000140fffffffffffffbff0c00024000000000000000010c00024000000000000006920c00014000000000000000020c00024000000000000000010c00024000000000000000070c00014000000000000088770c00024000000000000000060900010073797a30000000000900020073797a32"], 0x10c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

300.982663ms ago: executing program 0 (id=4241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000922010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES8=r0], 0xc4}}, 0x20050890)

298.66663ms ago: executing program 0 (id=4242):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff97)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088a84ce0050000000100008877fbac141416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000002100010027bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c010000000000000a0002000c001c"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x4040)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={r5}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(r7, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r9, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x8000)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000300)=r8, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x40002, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

108.706406ms ago: executing program 4 (id=4243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="1400000029000b92d25a80648c2594070224fc60", 0x14}], 0x1}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$OSF_MSG_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0x7}, 0x1, 0xda, 0x4, 0x4, 0x21, 'syz0\x00', "770774ecf3eb62733971d2f9fab547a8a23a50bbb46fcea37b5e618806e8da7f", "e127e3ac06b7e3484c3b37dc4dcff2eb7fbdcd23b125833b30bacb0d0971c256", [{0x85d3, 0x3, {0x3, 0x40}}, {0x8000, 0x876, {0x0, 0xe}}, {0x1, 0x2f, {0x2, 0x2}}, {0x7, 0xc73e, {0x6, 0x1}}, {0x0, 0xc, {0x1, 0x2}}, {0x7, 0x3, {0x1, 0x3}}, {0x200}, {0x10, 0x3, {0x1, 0x3}}, {0x6, 0x48d, {0x0, 0x2}}, {0x1, 0x8, {0x3, 0x6}}, {0x40, 0x7, {0x2, 0x9}}, {0x798, 0x70a, {0x0, 0x3}}, {0x4, 0xc489, {0x3, 0x45d4}}, {0x4, 0x3, {0x3, 0x800}}, {0x6, 0x0, {0x3, 0x2}}, {0x4, 0x4, {0x0, 0x4}}, {0x0, 0x4, {0x2, 0x4}}, {0x5, 0x100, {0x3, 0x7}}, {0x0, 0x9e68, {0x0, 0x7fff}}, {0x8, 0xb, {0x3, 0x6b76}}, {0x8, 0x401, {0x3, 0x4}}, {0x8000, 0x12, {0x2, 0x100}}, {0x7, 0x3, {0x3, 0x1b}}, {0x3, 0x1, {0x2, 0x8000}}, {0x7fff, 0x3, {0x2, 0x2be}}, {0x7fff, 0xffff, {0x2, 0x22}}, {0x81, 0x800, {0x1}}, {0x75a, 0x2, {0x1, 0x101}}, {0x3, 0x1, {0x0, 0xcd}}, {0xfff7, 0x1, {0x2, 0xa}}, {0x9, 0x8, {0x3, 0xd1}}, {0x6, 0x49, {0x0, 0x4}}, {0x3, 0x9, {0x3, 0x7}}, {0x1, 0x5, {0x3, 0x5}}, {0x1, 0x1ff, {0x3, 0x7}}, {0x800, 0x7ff, {0x89d9e17085a7aa5f, 0xffff}}, {0x7, 0x0, {0x1, 0x80000000}}, {0x5, 0x81, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0xfe3}}, {0x7, 0xb, {0x2, 0x4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x24000880)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164001c000280080004400000005608000340000000b908000240000000040900010073797a30000000000900020073797a32000000001400000011000100000000000000000300000a00"], 0xb8}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x90, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x404}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x209}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}]}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}, 0x90}}, 0x10004080)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x114, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xcc, 0x6, "040363c7ebfa0fe2f5f9d09110e21e70e9de52230951d36f18ac5b3193363d7e243b00b1ff595b3ba1f3799339bb1e79ccaad5fd76ad756474bc1dcf530359612f76b18729ceb62ac3a81806cee4e9f1e0404740fd0594668d5da981389d65a7d8babe0ed89651ad240eba0de27b3cd7e2db52057b4a434034fa64b8c8091a37748c20ecb9824de281d72626ce0fab3c024e85adc63f67fdce770739685adc7954279730a006715110e9a47a00d3287033c7a4b0ddb0e2202323a1b84f709b50ed3351d95d99106d"}]}, 0x114}, 0x1, 0x0, 0x0, 0x40080}, 0x840)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', r2}, 0x18)

1.097185ms ago: executing program 3 (id=4244):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700"], 0x38}, 0x0)

0s ago: executing program 4 (id=4245):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000004800000000000000070000006b115d00000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="90000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xf, 0x3, 0x2)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)='%pi6   \x00'}, 0x20)
r3 = socket$kcm(0xf, 0x3, 0x2)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22)
recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)='%pI4   \x00'}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000200)='FROZEN\x00', 0x7)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88265, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2018, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000080))
openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
r9 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r9, 0x84, 0x17, &(0x7f0000000000), 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x40049409, 0x5)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r10}, 0x10)

kernel console output (not intermixed with test programs):

: left promiscuous mode
[  272.554867][T11540] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  272.557867][T11540] macvlan0: left promiscuous mode
[  272.566698][T11540] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.595265][T11540] team0: Port device bond0 added
[  273.184848][T11581] netlink: 'syz.2.1911': attribute type 10 has an invalid length.
[  273.398029][   T33] audit: type=1107 audit(1755231264.687:5): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='tP%6wgg*JAq
[  273.398029][   T33] {­Pu[&W2[HR${Ga^;=d.?B1MO]+ˁ'
[  273.400149][T11592] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1915'.
[  273.418033][T11592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.425945][T11592] netlink: 'syz.2.1915': attribute type 3 has an invalid length.
[  273.429375][T11592] netlink: 199752 bytes leftover after parsing attributes in process `syz.2.1915'.
[  273.852899][T11604] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1920'.
[  273.857138][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'.
[  273.940712][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'.
[  273.947531][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'.
[  274.186024][T11617] netlink: 'syz.1.1924': attribute type 2 has an invalid length.
[  274.304914][T11620] netlink: 'syz.1.1924': attribute type 21 has an invalid length.
[  274.349162][T11618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1919'.
[  274.997087][T11625] netlink: 'syz.2.1926': attribute type 1 has an invalid length.
[  275.003762][T11625] netlink: 'syz.2.1926': attribute type 2 has an invalid length.
[  275.179843][T11641] syzkaller0: entered promiscuous mode
[  275.184237][T11641] syzkaller0: entered allmulticast mode
[  275.496613][T11657] mac80211_hwsim hwsim7 .3#c: renamed from wlan1 (while UP)
[  276.249662][T11666] __nla_validate_parse: 4 callbacks suppressed
[  276.249733][T11666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1941'.
[  276.361733][T11673] netlink: 'syz.1.1944': attribute type 1 has an invalid length.
[  276.365968][T11673] netlink: 14690 bytes leftover after parsing attributes in process `syz.1.1944'.
[  276.371200][T11673] netlink: 'syz.1.1944': attribute type 1 has an invalid length.
[  276.379787][T11673] netlink: 14690 bytes leftover after parsing attributes in process `syz.1.1944'.
[  276.385188][T11666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.408632][T11669] delete_channel: no stack
[  276.431724][T11675] lo: entered allmulticast mode
[  276.493409][T11675] lo: entered promiscuous mode
[  276.496074][T11675] lo: left allmulticast mode
[  276.529177][T11677] netlink: 'syz.2.1946': attribute type 21 has an invalid length.
[  276.534679][T11677] IPv6: NLM_F_CREATE should be specified when creating new route
[  276.538506][T11677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  276.541614][T11677] IPv6: NLM_F_CREATE should be set when creating new route
[  276.544518][T11677] IPv6: NLM_F_CREATE should be set when creating new route
[  276.547412][T11677] IPv6: NLM_F_CREATE should be set when creating new route
[  276.557310][T11678] netlink: 'syz.2.1946': attribute type 27 has an invalid length.
[  276.560842][T11678] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1946'.
[  276.565582][T11679] netlink: 'syz.2.1946': attribute type 27 has an invalid length.
[  276.568926][T11679] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1946'.
[  276.671147][T11682] netlink: 'syz.2.1948': attribute type 21 has an invalid length.
[  276.680992][T11682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1948'.
[  276.772196][T11686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1948'.
[  277.426173][T11697] netlink: 'syz.1.1952': attribute type 29 has an invalid length.
[  277.434789][T11697] netlink: 'syz.1.1952': attribute type 29 has an invalid length.
[  277.452656][T11697] netlink: 'syz.1.1952': attribute type 29 has an invalid length.
[  277.622648][T11708] netlink: 'syz.2.1955': attribute type 21 has an invalid length.
[  277.626654][T11708] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1955'.
[  277.639906][T11706] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1954'.
[  277.930106][T11719] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1956'.
[  281.218573][T11741] openvswitch: netlink: Message has 6 unknown bytes.
[  281.340456][T11749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.343816][T11749] IPv6: NLM_F_CREATE should be set when creating new route
[  281.346768][T11749] IPv6: NLM_F_CREATE should be set when creating new route
[  281.644343][T11752] validate_nla: 2 callbacks suppressed
[  281.644360][T11752] netlink: 'syz.0.1969': attribute type 2 has an invalid length.
[  282.213647][T11771] netlink: 'syz.1.1977': attribute type 10 has an invalid length.
[  282.255239][T11769] __nla_validate_parse: 69 callbacks suppressed
[  282.255261][T11769] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1976'.
[  282.299718][T11779] netlink: 'syz.1.1980': attribute type 3 has an invalid length.
[  282.304755][T11779] netlink: 'syz.1.1980': attribute type 1 has an invalid length.
[  282.308512][T11779] netlink: 201352 bytes leftover after parsing attributes in process `syz.1.1980'.
[  282.322993][T11783] netlink: 'syz.1.1980': attribute type 3 has an invalid length.
[  282.327414][T11783] netlink: 'syz.1.1980': attribute type 1 has an invalid length.
[  282.335382][T11783] netlink: 'syz.1.1980': attribute type 2 has an invalid length.
[  282.338420][T11783] netlink: 'syz.1.1980': attribute type 1 has an invalid length.
[  282.342507][T11783] netlink: 'syz.1.1980': attribute type 2 has an invalid length.
[  282.345594][T11783] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.1980'.
[  282.389698][T11792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1982'.
[  282.398811][T11785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1982'.
[  282.406753][T11792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1982'.
[  282.552559][T11792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.568306][T11799] netlink: 'syz.1.1985': attribute type 10 has an invalid length.
[  282.744261][T11809] syzkaller1: tun_chr_ioctl cmd 1074025677
[  282.747924][T11809] syzkaller1: linktype set to 780
[  283.595392][T11838] bond0: entered promiscuous mode
[  283.597762][T11838] bond_slave_0: entered promiscuous mode
[  283.600575][T11838] bond_slave_1: entered promiscuous mode
[  283.605254][T11838] bridge0: entered promiscuous mode
[  283.607709][T11838] mac80211_hwsim hwsim7 .3#c: entered promiscuous mode
[  283.611144][T11838] macvlan0: entered promiscuous mode
[  283.701088][T11842] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1995'.
[  283.726351][T11845] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1997'.
[  283.747902][T11849] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  283.774175][T11849] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1998'.
[  283.921757][T11867] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2003'.
[  284.937920][T11904] : renamed from hsr0 (while UP)
[  286.639208][T11946] }: renamed from vlan0 (while UP)
[  286.781178][T11956] validate_nla: 15 callbacks suppressed
[  286.781204][T11956] netlink: 'syz.0.2029': attribute type 21 has an invalid length.
[  286.788977][T11956] netlink: 'syz.0.2029': attribute type 5 has an invalid length.
[  286.793265][T11956] netlink: 'syz.0.2029': attribute type 6 has an invalid length.
[  286.888499][T11960] netlink: 'syz.0.2031': attribute type 2 has an invalid length.
[  287.383221][T11981] netlink: 'syz.1.2037': attribute type 31 has an invalid length.
[  287.409070][T11982] __nla_validate_parse: 10 callbacks suppressed
[  287.409084][T11982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2036'.
[  287.417744][T11980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2036'.
[  287.898564][T11995] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2039'.
[  287.956051][T11995] netlink: 'syz.0.2039': attribute type 4 has an invalid length.
[  287.959905][T11995] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2039'.
[  288.169395][T12011] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2044'.
[  288.174604][T12010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2044'.
[  288.217922][T12013] netlink: 'syz.0.2045': attribute type 1 has an invalid length.
[  288.220920][T12013] netlink: 'syz.0.2045': attribute type 3 has an invalid length.
[  288.225524][T12013] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2045'.
[  288.257837][T12015] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2046'.
[  288.456154][T12023] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2047'.
[  288.604097][T12019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2047'.
[  288.680612][T12026] netlink: 'syz.0.2049': attribute type 21 has an invalid length.
[  290.086731][T12059] netlink: 'syz.0.2057': attribute type 4 has an invalid length.
[  292.046622][T12077] validate_nla: 3 callbacks suppressed
[  292.046647][T12077] netlink: 'syz.2.2063': attribute type 10 has an invalid length.
[  292.315831][T12083] syzkaller0: entered promiscuous mode
[  292.318593][T12083] syzkaller0: entered allmulticast mode
[  292.345062][T12085] netlink: 'syz.2.2066': attribute type 13 has an invalid length.
[  294.911200][T12104] netlink: 'syz.1.2071': attribute type 10 has an invalid length.
[  295.109140][T12106] __nla_validate_parse: 10 callbacks suppressed
[  295.109241][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'.
[  295.218044][T12106] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  295.372456][T12117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2077'.
[  295.637272][T12134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2083'.
[  296.401425][T12150] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2086'.
[  296.549196][T12155] netlink: 'syz.0.2088': attribute type 10 has an invalid length.
[  296.729161][T12160] netlink: 'syz.0.2089': attribute type 21 has an invalid length.
[  296.733418][T12160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2089'.
[  296.738081][T12160] netlink: 'syz.0.2089': attribute type 1 has an invalid length.
[  298.027812][T12199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2099'.
[  298.035480][T12196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2099'.
[  298.169662][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  298.329600][T12216] netlink: 'syz.0.2104': attribute type 10 has an invalid length.
[  298.492485][T12229] netlink: 'syz.0.2109': attribute type 11 has an invalid length.
[  298.496796][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'.
[  298.541395][T12222] netlink: ct family unspecified
[  298.545188][T12222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.611425][T12232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2110'.
[  298.699412][T12235] netlink: 'syz.2.2111': attribute type 12 has an invalid length.
[  298.855487][T12231] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  299.138766][T12271] netlink: 'syz.2.2121': attribute type 21 has an invalid length.
[  299.250688][T12277] netlink: 'syz.0.2120': attribute type 1 has an invalid length.
[  299.332772][T12279] netlink: 'syz.2.2124': attribute type 40 has an invalid length.
[  299.337234][T12280] netlink: 'syz.2.2124': attribute type 40 has an invalid length.
[  299.664573][T12294] netlink: 'syz.2.2128': attribute type 11 has an invalid length.
[  301.139605][T12337] __nla_validate_parse: 11 callbacks suppressed
[  301.139622][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2140'.
[  301.188083][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2141'.
[  301.347187][T12350] netlink: 'syz.0.2145': attribute type 10 has an invalid length.
[  301.452178][T12356] netlink: 'syz.0.2147': attribute type 1 has an invalid length.
[  301.455391][T12356] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2147'.
[  301.458896][T12356] netlink: 101636 bytes leftover after parsing attributes in process `syz.0.2147'.
[  301.466812][T12352] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.2146'.
[  301.472529][T12356] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2147'.
[  301.506920][T12352] openvswitch: netlink: Message has 6 unknown bytes.
[  301.604044][T12368] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2150'.
[  301.620050][T12368] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2150'.
[  301.775780][T12384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2155'.
[  301.800738][T12384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2155'.
[  303.076833][ T5882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.141322][ T5882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.219296][ T5882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.312984][ T5882] batman_adv: batadv0: Removing interface: netdevsim0
[  303.351420][ T5882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.692933][ T5882] veth0_to_bridge: left allmulticast mode
[  303.695987][ T5882] veth0_to_bridge: left promiscuous mode
[  303.706606][ T5882] : port 1(veth0_to_bridge) entered disabled state
[  304.022485][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.029164][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.045839][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.054400][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.059072][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.679525][T12438] validate_nla: 6 callbacks suppressed
[  304.679579][T12438] netlink: 'syz.1.2164': attribute type 6 has an invalid length.
[  305.767462][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.773183][ T5882] bond_slave_0: left promiscuous mode
[  305.783919][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.788969][ T5882] bond_slave_1: left promiscuous mode
[  305.796484][ T5882] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  305.801035][ T5882] batadv0: left promiscuous mode
[  305.804839][ T5882] bond0 (unregistering): Released all slaves
[  306.007947][T12449] netlink: 'syz.1.2166': attribute type 29 has an invalid length.
[  306.163125][   T54] Bluetooth: hci0: command tx timeout
[  306.210968][T12464] netlink: 'syz.0.2169': attribute type 1 has an invalid length.
[  306.359081][T12432] chnl_net:caif_netlink_parms(): no params data found
[  306.423985][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.435673][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.448532][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.457197][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.479904][ T5882] veth1_vlan: left promiscuous mode
[  306.483338][ T5882] veth0_vlan: left promiscuous mode
[  306.525554][T12477] netlink: 'syz.0.2172': attribute type 10 has an invalid length.
[  306.528985][T12477] __nla_validate_parse: 2 callbacks suppressed
[  306.529000][T12477] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2172'.
[  307.116055][T12479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2172'.
[  307.170555][T12474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2172'.
[  307.280929][T12483] syzkaller0: entered promiscuous mode
[  307.302560][T12483] syzkaller0: entered allmulticast mode
[  307.388889][T12432] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.394644][T12432] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.398380][T12432] bridge_slave_0: entered allmulticast mode
[  307.409517][T12432] bridge_slave_0: entered promiscuous mode
[  308.242720][   T54] Bluetooth: hci0: command tx timeout
[  309.059615][T12432] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.062582][T12432] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.065362][T12432] bridge_slave_1: entered allmulticast mode
[  309.068788][T12432] bridge_slave_1: entered promiscuous mode
[  309.208214][T12432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.218948][T12432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.294584][T12432] team0: Port device team_slave_0 added
[  309.303623][T12432] team0: Port device team_slave_1 added
[  309.402471][T12515] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2179'.
[  309.415157][T12519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2180'.
[  309.428751][T12519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2180'.
[  309.434265][T12432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.437284][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.447987][T12432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.456747][T12432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.459551][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.469451][T12432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.497489][T12519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2180'.
[  309.567937][T12432] hsr_slave_0: entered promiscuous mode
[  309.570833][T12432] hsr_slave_1: entered promiscuous mode
[  309.963775][T12432] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  310.007195][T12432] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  310.811423][   T54] Bluetooth: hci0: command tx timeout
[  311.309990][T12432] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  311.343411][T12432] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  311.446948][T12432] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.459417][T12432] 8021q: adding VLAN 0 to HW filter on device team0
[  311.475389][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.478141][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.484019][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.486724][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.577834][T12432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.613339][T12560] pim6reg1: entered allmulticast mode
[  311.644525][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'.
[  311.858714][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.960315][T12432] veth0_vlan: entered promiscuous mode
[  311.976384][T12432] veth1_vlan: entered promiscuous mode
[  312.032729][T12432] veth0_macvtap: entered promiscuous mode
[  312.045244][T12432] veth1_macvtap: entered promiscuous mode
[  312.080149][T12432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.101548][T12432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.116343][ T5918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.121516][ T5918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.131453][ T5918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.142287][ T5918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.369874][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.385867][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.433113][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.443100][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.885848][   T54] Bluetooth: hci0: command tx timeout
[  312.948265][T12599] netlink: 'syz.0.2194': attribute type 3 has an invalid length.
[  313.043512][T12599] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2194'.
[  313.414864][T12610] netlink: 'syz.0.2197': attribute type 10 has an invalid length.
[  314.406673][T12609] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2197'.
[  314.418953][T12610] macvlan1: entered allmulticast mode
[  314.422684][T12610] team0: Device macvlan1 is up. Set it down before adding it as a team port
[  315.118968][T12639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2202'.
[  315.158737][T12629] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2202'.
[  315.167981][T12637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2204'.
[  315.187331][T12637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2204'.
[  315.222086][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'.
[  315.340763][T12641] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  315.551368][T12652] IPv6: Can't replace route, no match found
[  315.559429][T12652] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2207'.
[  315.826105][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'.
[  315.933660][T12680] netlink: 'syz.0.2216': attribute type 10 has an invalid length.
[  316.029665][T12683] ksmbd: Unknown IPC event: 1, ignore.
[  317.050092][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.064952][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.148326][T12712] syzkaller0: entered promiscuous mode
[  317.153499][T12712] syzkaller0: entered allmulticast mode
[  318.181403][T12733] syzkaller0: entered promiscuous mode
[  318.184862][T12733] syzkaller0: entered allmulticast mode
[  318.207844][T12737] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2227'.
[  318.277909][T12742] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2229'.
[  318.347713][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'.
[  320.478748][T12786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2238'.
[  321.068498][T12799] netlink: 'syz.1.2239': attribute type 10 has an invalid length.
[  321.265219][T12810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2243'.
[  321.270203][T12811] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2243'.
[  321.276334][T12810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2243'.
[  321.418301][T12823] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2248'.
[  322.813552][T12867] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2258'.
[  322.832507][T12866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2259'.
[  322.857985][T12867] : port 1(vlan0) entered blocking state
[  322.860669][T12867] : port 1(vlan0) entered disabled state
[  322.867675][T12867] vlan0: entered allmulticast mode
[  322.869960][T12867] veth0_vlan: entered allmulticast mode
[  322.874301][T12867] vlan0: entered promiscuous mode
[  323.462853][T12898] __nla_validate_parse: 4 callbacks suppressed
[  323.462871][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'.
[  323.494367][T12896] netlink: 'syz.3.2271': attribute type 7 has an invalid length.
[  323.681591][T12913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2278'.
[  323.725170][T12916] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2280'.
[  323.811485][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2281'.
[  325.498690][T12945] netlink: 'syz.3.2289': attribute type 10 has an invalid length.
[  325.521527][T12945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.538853][T12945] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  325.740145][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2291'.
[  325.873805][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2293'.
[  325.878573][T12962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2293'.
[  325.934859][T12972] netlink: 'syz.1.2295': attribute type 29 has an invalid length.
[  325.968330][T12973] netlink: 'syz.1.2295': attribute type 29 has an invalid length.
[  326.136759][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'.
[  326.186274][T12997] netlink: 'syz.3.2301': attribute type 10 has an invalid length.
[  326.264062][T13004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2302'.
[  326.278485][T12996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2302'.
[  328.514035][T13031] netlink: 'syz.3.2310': attribute type 10 has an invalid length.
[  328.525832][T13030] pim6reg1: entered allmulticast mode
[  328.535660][T13030] __nla_validate_parse: 1 callbacks suppressed
[  328.535680][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'.
[  328.552691][T13030] openvswitch: netlink: Flow actions attr not present in new flow.
[  328.566847][T13034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2311'.
[  328.692887][T13038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2311'.
[  328.699614][T13034] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2311'.
[  328.717693][T13040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2312'.
[  328.727974][T13037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2312'.
[  328.891150][T13052] openvswitch: netlink: IP tunnel dst address not specified
[  328.896209][T13053] openvswitch: netlink: IP tunnel dst address not specified
[  329.290391][T13065] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2318'.
[  329.319203][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2319'.
[  329.359351][T13067] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2319'.
[  329.477225][T13065] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  329.781088][T13078] netlink: 703 bytes leftover after parsing attributes in process `syz.3.2321'.
[  330.035340][T13092] IPv6: Can't replace route, no match found
[  330.437798][T13114] netlink: 'syz.3.2331': attribute type 46 has an invalid length.
[  331.576809][T13140] netlink: 'syz.3.2342': attribute type 4 has an invalid length.
[  331.690403][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 3078
[  332.459092][T13180] netlink: 'syz.0.2356': attribute type 10 has an invalid length.
[  332.477538][T13180] 8021q: adding VLAN 0 to HW filter on device team0
[  332.770364][T13191] netlink: 'syz.0.2360': attribute type 16 has an invalid length.
[  332.778157][T13191] netlink: 'syz.0.2360': attribute type 3 has an invalid length.
[  333.285528][T13215] netlink: 'syz.1.2370': attribute type 10 has an invalid length.
[  333.917949][T13231] syzkaller0: entered promiscuous mode
[  333.920748][T13231] syzkaller0: entered allmulticast mode
[  333.932183][T13235] netlink: 'syz.3.2379': attribute type 29 has an invalid length.
[  333.964297][T13240] netlink: 'syz.1.2378': attribute type 39 has an invalid length.
[  333.969422][T13239] netlink: 'syz.1.2378': attribute type 39 has an invalid length.
[  335.010279][T13244] IPv6: NLM_F_CREATE should be specified when creating new route
[  335.123326][T13245] cgroup: fork rejected by pids controller in /syz3
[  335.758650][T13349] netlink: 'syz.0.2383': attribute type 39 has an invalid length.
[  336.217078][T13367] __nla_validate_parse: 16 callbacks suppressed
[  336.217104][T13367] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2391'.
[  336.243117][T13367] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2391'.
[  336.252321][T13367] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2391'.
[  336.302554][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2393'.
[  336.307449][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2393'.
[  336.313704][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2393'.
[  336.318214][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2393'.
[  336.345118][T13377] netlink: 'syz.1.2395': attribute type 10 has an invalid length.
[  336.352078][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2393'.
[  336.358939][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2393'.
[  336.382152][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2393'.
[  336.455508][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  336.460952][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  336.465664][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  336.469654][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  336.478109][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  336.608544][T13387] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  336.621983][T13387] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  336.693076][T13380] chnl_net:caif_netlink_parms(): no params data found
[  336.814187][T13380] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.822011][T13380] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.824850][T13380] bridge_slave_0: entered allmulticast mode
[  336.828625][T13380] bridge_slave_0: entered promiscuous mode
[  336.840766][T13380] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.845912][T13380] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.848760][T13380] bridge_slave_1: entered allmulticast mode
[  336.852973][T13380] bridge_slave_1: entered promiscuous mode
[  336.882390][T13380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.888344][T13380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.899881][T13402] netlink: 'syz.1.2401': attribute type 10 has an invalid length.
[  337.019504][T13402] team0 (unregistering): Port device C removed
[  337.025827][T13402] team0 (unregistering): Port device team_slave_1 removed
[  337.034631][T13402] team0 (unregistering): Port device dummy0 removed
[  337.046879][T13402] team0 (unregistering): Port device .` removed
[  337.073536][T13380] team0: Port device team_slave_0 added
[  337.077352][T13404] netlink: 'syz.0.2403': attribute type 29 has an invalid length.
[  337.089405][T13380] team0: Port device team_slave_1 added
[  337.094383][T13406] netlink: 'syz.0.2403': attribute type 29 has an invalid length.
[  337.119548][T13404] netlink: 'syz.0.2403': attribute type 29 has an invalid length.
[  337.146113][T13380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.149755][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.163776][T13380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.176046][T13380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.179351][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.191998][T13380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.255477][T13380] hsr_slave_0: entered promiscuous mode
[  337.258861][T13380] hsr_slave_1: entered promiscuous mode
[  337.265087][T13380] debugfs: 'hsr0' already exists in 'hsr'
[  337.267403][T13380] Cannot create hsr debugfs directory
[  337.441609][T13413] netlink: 'syz.0.2406': attribute type 10 has an invalid length.
[  337.512682][T13380] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.616394][T13380] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.680250][T13380] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.740411][T13421] netlink: 'syz.0.2409': attribute type 21 has an invalid length.
[  337.808843][T13380] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.980999][T13380] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  337.996933][T13380] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  338.013648][T13380] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  338.026942][T13380] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  338.125359][T13443] netlink: 'syz.1.2416': attribute type 10 has an invalid length.
[  338.159757][T13380] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.174063][T13380] 8021q: adding VLAN 0 to HW filter on device team0
[  338.181236][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.184025][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.197754][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.200651][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.446403][T13380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.536288][T13380] veth0_vlan: entered promiscuous mode
[  338.549272][T13380] veth1_vlan: entered promiscuous mode
[  338.566801][ T5858] Bluetooth: hci0: command tx timeout
[  338.590369][T13380] veth0_macvtap: entered promiscuous mode
[  338.596778][T13380] veth1_macvtap: entered promiscuous mode
[  338.628300][T13380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.645376][T13380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.660998][ T5882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.679293][ T5882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.699076][ T5882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.723909][ T5882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.859545][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.865168][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.046776][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.052611][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.685297][T13512] netlink: 'syz.3.2440': attribute type 10 has an invalid length.
[  339.879305][T13519] netlink: 'syz.3.2442': attribute type 29 has an invalid length.
[  340.320291][T13538] netlink: 'syz.1.2448': attribute type 10 has an invalid length.
[  340.518080][T13536] veth0_vlan: left promiscuous mode
[  340.549551][T13536] veth0_vlan: entered promiscuous mode
[  340.674315][ T5858] Bluetooth: hci0: command tx timeout
[  340.740531][T13536] team0: Device veth0_vlan failed to register rx_handler
[  341.097911][T13536] syz.3.2447 (13536) used greatest stack depth: 17272 bytes left
[  342.480578][    T9] page_pool_release_retry() stalled pool shutdown: id 85, 1 inflight 60 sec
[  342.723123][ T5858] Bluetooth: hci0: command tx timeout
[  342.941417][T13589] validate_nla: 1 callbacks suppressed
[  342.941433][T13589] netlink: 'syz.1.2464': attribute type 39 has an invalid length.
[  343.396164][T13599] lo speed is unknown, defaulting to 1000
[  343.400121][T13599] lo speed is unknown, defaulting to 1000
[  343.413511][T13599] lo speed is unknown, defaulting to 1000
[  343.474467][T13599] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  344.803370][ T5858] Bluetooth: hci0: command tx timeout
[  345.552231][T13599] lo speed is unknown, defaulting to 1000
[  345.569842][T13599] lo speed is unknown, defaulting to 1000
[  345.581035][T13599] lo speed is unknown, defaulting to 1000
[  345.588843][T13599] lo speed is unknown, defaulting to 1000
[  345.689941][T13607] __nla_validate_parse: 83 callbacks suppressed
[  345.689957][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2469'.
[  345.727235][T13607] syzkaller0: entered promiscuous mode
[  345.729380][T13607] syzkaller0: entered allmulticast mode
[  345.736010][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2469'.
[  345.739545][T13607] netlink: 46 bytes leftover after parsing attributes in process `syz.3.2469'.
[  345.745757][T13607] netlink: 46 bytes leftover after parsing attributes in process `syz.3.2469'.
[  347.753024][ T5917] page_pool_release_retry() stalled pool shutdown: id 86, 1 inflight 60 sec
[  348.544491][T13631] syzkaller0: entered promiscuous mode
[  348.547247][T13631] syzkaller0: entered allmulticast mode
[  350.365100][T13654] netlink: 'syz.1.2482': attribute type 10 has an invalid length.
[  351.052586][T13694] netlink: 'syz.0.2493': attribute type 10 has an invalid length.
[  352.856336][T13734] netlink: 'syz.0.2508': attribute type 21 has an invalid length.
[  352.861674][T13734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2508'.
[  352.866152][T13734] netlink: 'syz.0.2508': attribute type 1 has an invalid length.
[  353.600916][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  353.990507][T13749] netlink: 'syz.1.2514': attribute type 10 has an invalid length.
[  354.518082][T13759] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2516'.
[  354.535198][T13759] netlink: 'syz.1.2516': attribute type 10 has an invalid length.
[  354.538938][T13759] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2516'.
[  356.639498][T13796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2529'.
[  357.064255][T13788] : entered promiscuous mode
[  357.067911][T13793] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component
[  357.197960][T13800] netlink: 'syz.1.2531': attribute type 10 has an invalid length.
[  357.248492][T13802] netlink: 3768 bytes leftover after parsing attributes in process `syz.0.2532'.
[  357.473162][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2536'.
[  357.700116][T13821] lo speed is unknown, defaulting to 1000
[  357.866362][T13836] netlink: 'syz.1.2544': attribute type 13 has an invalid length.
[  357.869728][T13836] netlink: 'syz.1.2544': attribute type 17 has an invalid length.
[  357.873402][T13836] lo: left promiscuous mode
[  357.879434][T13836] gretap0: refused to change device tx_queue_len
[  357.885916][T13836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  358.031638][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'.
[  358.316523][T13846] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.2549'.
[  358.323358][T13846] openvswitch: netlink: Message has 6 unknown bytes.
[  358.392498][T13849] netlink: 'syz.1.2550': attribute type 2 has an invalid length.
[  358.395952][T13849] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2550'.
[  358.408366][T13849] netlink: 'syz.1.2550': attribute type 10 has an invalid length.
[  358.666980][T13856] netlink: 'syz.3.2555': attribute type 10 has an invalid length.
[  358.690955][T13856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.708170][T13856] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  358.752717][T13856] bond0: entered promiscuous mode
[  358.755265][T13856] bond_slave_0: entered promiscuous mode
[  358.759919][T13856] bond_slave_1: entered promiscuous mode
[  358.766429][T13856] batadv0: entered promiscuous mode
[  358.975423][T13865] netlink: 'syz.3.2556': attribute type 16 has an invalid length.
[  358.979000][T13865] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2556'.
[  359.224518][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2557'.
[  359.228495][T13870] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2557'.
[  359.254866][T13870] netlink: 25427 bytes leftover after parsing attributes in process `syz.0.2557'.
[  359.339561][T13880] netlink: 'syz.0.2562': attribute type 10 has an invalid length.
[  359.361147][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'.
[  359.400954][T13884] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  359.406363][T13884] netlink: 731 bytes leftover after parsing attributes in process `syz.1.2564'.
[  359.477548][T13892] netlink: 'syz.3.2563': attribute type 1 has an invalid length.
[  359.492372][T13892] netlink: 'syz.3.2563': attribute type 2 has an invalid length.
[  359.495284][T13892] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.2563'.
[  359.705230][T13891] can: request_module (can-proto-0) failed.
[  360.590014][T13933] sit0: entered allmulticast mode
[  360.617651][T13933] sit0: entered promiscuous mode
[  361.237926][T13959] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  361.244557][T13960] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  362.024704][T13969] : left promiscuous mode
[  362.313232][T13991] lo speed is unknown, defaulting to 1000
[  362.313912][T13990] validate_nla: 5 callbacks suppressed
[  362.313929][T13990] netlink: 'syz.0.2601': attribute type 3 has an invalid length.
[  362.340544][T13990] netlink: 'syz.0.2601': attribute type 10 has an invalid length.
[  363.672835][T14010] __nla_validate_parse: 12 callbacks suppressed
[  363.672853][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2606'.
[  363.738951][T14012] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2607'.
[  364.000944][T14022] syz.1.2611: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  364.007834][T14022] CPU: 1 UID: 0 PID: 14022 Comm: syz.1.2611 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  364.007851][T14022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.007859][T14022] Call Trace:
[  364.007864][T14022]  <TASK>
[  364.007870][T14022]  dump_stack_lvl+0x189/0x250
[  364.007890][T14022]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.007903][T14022]  ? __pfx__printk+0x10/0x10
[  364.007918][T14022]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  364.007932][T14022]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  364.007945][T14022]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  364.007958][T14022]  warn_alloc+0x214/0x310
[  364.007974][T14022]  ? stack_depot_save_flags+0x40/0x860
[  364.007988][T14022]  ? __pfx_warn_alloc+0x10/0x10
[  364.008004][T14022]  ? kasan_save_track+0x4f/0x80
[  364.008016][T14022]  ? xskq_create+0x56/0x170
[  364.008029][T14022]  ? xsk_init_queue+0xb0/0x110
[  364.008040][T14022]  ? xsk_setsockopt+0x57b/0x8d0
[  364.008050][T14022]  ? do_sock_setsockopt+0x17c/0x1b0
[  364.008059][T14022]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  364.008067][T14022]  ? do_syscall_64+0xfa/0x3b0
[  364.008081][T14022]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.008095][T14022]  __vmalloc_node_range_noprof+0x125/0x12f0
[  364.008126][T14022]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  364.008144][T14022]  ? __kasan_kmalloc+0x93/0xb0
[  364.008159][T14022]  vmalloc_user_noprof+0xad/0xf0
[  364.008173][T14022]  ? xskq_create+0xbf/0x170
[  364.008186][T14022]  xskq_create+0xbf/0x170
[  364.008200][T14022]  xsk_init_queue+0xb0/0x110
[  364.008213][T14022]  xsk_setsockopt+0x57b/0x8d0
[  364.008226][T14022]  ? __pfx_xsk_setsockopt+0x10/0x10
[  364.008238][T14022]  ? __pfx_aa_sk_perm+0x10/0x10
[  364.008253][T14022]  ? __fget_files+0x2a/0x420
[  364.008262][T14022]  ? aa_sock_opt_perm+0xff/0x1b0
[  364.008273][T14022]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  364.008284][T14022]  ? __pfx_xsk_setsockopt+0x10/0x10
[  364.008296][T14022]  do_sock_setsockopt+0x17c/0x1b0
[  364.008308][T14022]  __x64_sys_setsockopt+0x13f/0x1b0
[  364.008321][T14022]  do_syscall_64+0xfa/0x3b0
[  364.008334][T14022]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.008347][T14022]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.008356][T14022]  ? exc_page_fault+0x9f/0xf0
[  364.008370][T14022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.008380][T14022] RIP: 0033:0x7fd27d18ebe9
[  364.008390][T14022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.008400][T14022] RSP: 002b:00007fd27dfad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  364.008411][T14022] RAX: ffffffffffffffda RBX: 00007fd27d3b5fa0 RCX: 00007fd27d18ebe9
[  364.008418][T14022] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  364.008424][T14022] RBP: 00007fd27d211e19 R08: 0000000000000004 R09: 0000000000000000
[  364.008430][T14022] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  364.008437][T14022] R13: 00007fd27d3b6038 R14: 00007fd27d3b5fa0 R15: 00007ffe6d05ea08
[  364.008463][T14022]  </TASK>
[  364.008468][T14022] Mem-Info:
[  364.070050][T14022] active_anon:7622 inactive_anon:21 isolated_anon:0
[  364.070050][T14022]  active_file:7579 inactive_file:25394 isolated_file:0
[  364.070050][T14022]  unevictable:1768 dirty:50 writeback:0
[  364.070050][T14022]  slab_reclaimable:9645 slab_unreclaimable:58231
[  364.070050][T14022]  mapped:19026 shmem:2451 pagetables:1395
[  364.070050][T14022]  sec_pagetables:0 bounce:0
[  364.070050][T14022]  kernel_misc_reclaimable:0
[  364.070050][T14022]  free:292928 free_pcp:19286 free_cma:0
[  364.218620][T14028] openvswitch: netlink: Flow key attr not present in new flow.
[  364.225863][T14028] netlink: 'syz.3.2613': attribute type 4 has an invalid length.
[  364.229676][T14028] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2613'.
[  364.281979][T14022] Node 0 active_anon:17216kB inactive_anon:84kB active_file:3412kB inactive_file:85188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49028kB dirty:156kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5684kB pagetables:3352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  364.321697][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2614'.
[  364.333052][T14022] Node 1 active_anon:13000kB inactive_anon:0kB active_file:26904kB inactive_file:16388kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27076kB dirty:44kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6544kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  364.350845][T14022] Node 0 DMA free:14948kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:392kB local_pcp:0kB free_cma:0kB
[  364.369854][T14022] lowmem_reserve[]: 0 811 811 811 811
[  364.372932][T14022] Node 0 DMA32 free:295252kB boost:53248kB min:86908kB low:95320kB high:103732kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17284kB inactive_anon:84kB active_file:3412kB inactive_file:85188kB unevictable:3536kB writepending:156kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:36160kB local_pcp:15820kB free_cma:0kB
[  364.387706][T14022] lowmem_reserve[]: 0 0 0 0 0
[  364.389870][T14022] Node 1 DMA32 free:446624kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:11992kB local_pcp:11992kB free_cma:0kB
[  364.405783][T14022] lowmem_reserve[]: 0 0 854 854 854
[  364.408712][T14022] Node 1 Normal free:414648kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13000kB inactive_anon:0kB active_file:26904kB inactive_file:16388kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29380kB local_pcp:11912kB free_cma:0kB
[  364.427097][T14022] lowmem_reserve[]: 0 0 0 0 0
[  364.430139][T14022] Node 0 DMA: 5*4kB (U) 6*8kB (U) 6*16kB (U) 8*32kB (U) 7*64kB (U) 8*128kB (U) 7*256kB (U) 8*512kB (U) 5*1024kB (U) 1*2048kB (M) 0*4096kB = 14948kB
[  364.443095][T14022] Node 0 DMA32: 95*4kB (UE) 406*8kB (UME) 491*16kB (UME) 1192*32kB (UME) 538*64kB (UME) 338*128kB (UME) 45*256kB (UM) 43*512kB (UM) 75*1024kB (UM) 2*2048kB (M) 13*4096kB (UM) = 295004kB
[  364.451319][T14022] Node 1 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 0*2048kB 108*4096kB (UM) = 446624kB
[  364.458808][T14022] Node 1 Normal: 1734*4kB (UME) 638*8kB (UME) 707*16kB (UM) 382*32kB (UME) 271*64kB (UM) 272*128kB (UM) 183*256kB (UME) 133*512kB (UME) 111*1024kB (UME) 10*2048kB (UME) 19*4096kB (UM) = 414648kB
[  364.467746][T14022] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  364.472932][T14022] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  364.477602][T14022] 35424 total pagecache pages
[  364.479887][T14022] 0 pages in swap cache
[  364.482314][T14022] Free swap  = 124996kB
[  364.484690][T14022] Total swap = 124996kB
[  364.523062][T14039] netlink: 208344 bytes leftover after parsing attributes in process `syz.0.2617'.
[  364.527155][T14039] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  364.530420][T14039] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  364.536815][T14022] 786301 pages RAM
[  364.539083][T14022] 0 pages HighMem/MovableOnly
[  364.541738][T14022] 241330 pages reserved
[  364.552437][T14022] 0 pages cma reserved
[  364.837135][T14047] netlink: 'syz.1.2620': attribute type 10 has an invalid length.
[  365.039220][T14065] syzkaller0: entered promiscuous mode
[  365.049646][T14065] syzkaller0: entered allmulticast mode
[  365.318589][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'.
[  365.504185][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2630'.
[  365.510137][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2630'.
[  365.549115][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2630'.
[  365.574657][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2630'.
[  365.595462][T14088] netlink: 'syz.3.2631': attribute type 10 has an invalid length.
[  366.210865][T14107] netlink: 'syz.0.2638': attribute type 10 has an invalid length.
[  366.638804][T14136] netlink: 'syz.0.2647': attribute type 10 has an invalid length.
[  367.645911][T14152] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.654329][T14152] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.666896][T14152] bridge0: entered allmulticast mode
[  367.825024][T14155] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.828707][T14155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.832714][T14155] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.836339][T14155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.840778][T14155] bridge0: entered promiscuous mode
[  367.938516][ T5882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.014113][ T5882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.079666][ T5882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.127964][ T5882] batman_adv: batadv0: Removing interface: netdevsim0
[  368.131546][ T5882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.275067][ T5882] bridge_slave_1: left allmulticast mode
[  368.277696][ T5882] bridge_slave_1: left promiscuous mode
[  368.280203][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.286449][ T5882] bridge_slave_0: left allmulticast mode
[  368.288888][ T5882] bridge_slave_0: left promiscuous mode
[  368.293133][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.776230][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  368.782068][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  368.785349][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  368.788906][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  368.794205][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.420526][ T5882] .` (unregistering): (slave 30): Releasing backup interface
[  369.424478][ T5882] : left promiscuous mode
[  369.428675][ T5882] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.434762][ T5882] bond_slave_1: left promiscuous mode
[  369.438878][ T5882] .` (unregistering): (slave batadv0): Releasing backup interface
[  369.443771][ T5882] batadv0: left promiscuous mode
[  369.446486][ T5882] .` (unregistering): Released all slaves
[  369.508392][T14169] lo speed is unknown, defaulting to 1000
[  369.955851][T14180] __nla_validate_parse: 5 callbacks suppressed
[  369.955877][T14180] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2659'.
[  370.275793][T14169] chnl_net:caif_netlink_parms(): no params data found
[  370.285926][T14198] netlink: 'syz.3.2663': attribute type 21 has an invalid length.
[  370.299154][T14198] IPv6: NLM_F_CREATE should be specified when creating new route
[  370.308394][T14198] IPv6: Can't replace route, no match found
[  370.612399][T14169] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.617440][T14169] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.625633][T14169] bridge_slave_0: entered allmulticast mode
[  370.630534][T14169] bridge_slave_0: entered promiscuous mode
[  370.680682][T14169] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.686596][T14169] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.689502][T14169] bridge_slave_1: entered allmulticast mode
[  370.693421][T14169] bridge_slave_1: entered promiscuous mode
[  370.738279][T14210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2665'.
[  370.746345][T14169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.756004][T14209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2665'.
[  370.766262][T14210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2665'.
[  370.791561][T14169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.817087][ T5882] hsr_slave_0: left promiscuous mode
[  370.828935][ T5882] hsr_slave_1: left promiscuous mode
[  370.833313][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  370.836743][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.841022][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.845081][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.859712][ T5882] veth1_vlan: left allmulticast mode
[  370.862547][ T5882] veth1_vlan: left promiscuous mode
[  370.865131][ T5882] veth0_vlan: left promiscuous mode
[  370.882120][   T54] Bluetooth: hci1: command tx timeout
[  371.544556][   T54] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  371.833534][T14169] team0: Port device team_slave_0 added
[  371.848874][T14169] team0: Port device team_slave_1 added
[  371.860169][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'.
[  371.947706][T14169] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.950642][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.980141][T14169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.989126][T14169] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.993143][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.014868][T14169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.115435][T14169] hsr_slave_0: entered promiscuous mode
[  372.132796][T14169] hsr_slave_1: entered promiscuous mode
[  372.144267][T14169] debugfs: 'hsr0' already exists in 'hsr'
[  372.146499][T14169] Cannot create hsr debugfs directory
[  372.749807][T14169] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  372.911917][T14169] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  372.932261][T14169] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  372.941395][T14169] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  372.972114][   T54] Bluetooth: hci1: command tx timeout
[  372.972336][T14269] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2678'.
[  373.070358][T14169] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.098469][T14169] 8021q: adding VLAN 0 to HW filter on device team0
[  373.118198][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.121386][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.170205][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.173681][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.234835][T14283] netlink: 6536 bytes leftover after parsing attributes in process `syz.3.2682'.
[  373.239337][T14283] netlink: 'syz.3.2682': attribute type 28 has an invalid length.
[  373.449019][T14299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2686'.
[  373.465665][T14169] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.576759][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'.
[  373.599722][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'.
[  373.811692][T14169] veth0_vlan: entered promiscuous mode
[  373.835032][T14169] veth1_vlan: entered promiscuous mode
[  373.887247][T14169] veth0_macvtap: entered promiscuous mode
[  373.895366][T14169] veth1_macvtap: entered promiscuous mode
[  373.904761][T14331] netlink: 'syz.3.2694': attribute type 21 has an invalid length.
[  373.925327][T14331] netlink: 'syz.3.2694': attribute type 4 has an invalid length.
[  373.940152][T14169] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.959348][T14169] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.981901][ T5882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.986004][ T5882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.010978][ T5882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.017624][ T5882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.253745][ T3118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.257275][ T3118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.296930][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.300013][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.446777][T14341] syzkaller0: entered promiscuous mode
[  374.449203][T14341] syzkaller0: entered allmulticast mode
[  374.521716][T14352] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode
[  374.533659][T14352] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode
[  375.132235][   T54] Bluetooth: hci1: command tx timeout
[  375.443925][T14391] __nla_validate_parse: 7 callbacks suppressed
[  375.443940][T14391] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2705'.
[  375.527043][T14398] netlink: 'syz.0.2705': attribute type 4 has an invalid length.
[  375.530856][T14398] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.2705'.
[  375.665899][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'.
[  375.820164][T14409] netlink: 'syz.0.2710': attribute type 10 has an invalid length.
[  375.829071][T14409] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2710'.
[  375.964478][T14416] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  375.977292][T14415] delete_channel: no stack
[  376.493019][T14420] can: request_module (can-proto-0) failed.
[  376.542701][T14409] veth1_vlan (unregistering): left allmulticast mode
[  376.568338][T14409] bond0: (slave macvlan0): Releasing backup interface
[  376.571750][T14409] macvlan0 (unregistering): left promiscuous mode
[  376.700361][T14426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'.
[  376.763820][T14432] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2717'.
[  376.856045][T14437] netlink: 'syz.0.2718': attribute type 39 has an invalid length.
[  377.207600][   T54] Bluetooth: hci1: command tx timeout
[  377.459932][T14458] netlink: 'syz.3.2723': attribute type 10 has an invalid length.
[  377.520600][T14458] macvlan0: entered allmulticast mode
[  377.711138][T14458] veth1_vlan: entered allmulticast mode
[  377.911498][T14458] macvlan0: entered promiscuous mode
[  377.936366][T14467] netlink: 'syz.4.2726': attribute type 39 has an invalid length.
[  377.984655][T14458] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  378.487592][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.490646][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.537929][T14489] netlink: 'syz.3.2734': attribute type 10 has an invalid length.
[  378.829410][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2739'.
[  378.913289][T14504] syzkaller0: entered promiscuous mode
[  378.917159][T14504] syzkaller0: entered allmulticast mode
[  379.077156][T14515] netlink: 'syz.3.2741': attribute type 29 has an invalid length.
[  379.128352][T14517] netlink: 'syz.3.2744': attribute type 10 has an invalid length.
[  379.505000][T14524] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2747'.
[  379.746939][T14526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2748'.
[  379.766249][T14526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2748'.
[  382.356170][T14555] netlink: 'syz.3.2754': attribute type 2 has an invalid length.
[  382.359943][T14555] netlink: 'syz.3.2754': attribute type 8 has an invalid length.
[  382.365789][T14555] __nla_validate_parse: 1 callbacks suppressed
[  382.365803][T14555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2754'.
[  383.847051][T14547] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2752'.
[  384.574391][T14573] netlink: 'syz.0.2759': attribute type 10 has an invalid length.
[  384.577730][T14573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2759'.
[  385.134293][T14597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2769'.
[  385.138766][T14597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2769'.
[  385.500042][T14616] netlink: 'syz.4.2773': attribute type 6 has an invalid length.
[  385.512007][T14616] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2773'.
[  385.537235][T14616] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2773'.
[  386.566726][T14640] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2780'.
[  386.590746][T14640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2780'.
[  386.717898][T14646] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2782'.
[  386.791665][T14649] netlink: 'syz.0.2784': attribute type 10 has an invalid length.
[  387.197379][T14668] sit0: entered allmulticast mode
[  387.209276][T14668] sit0: entered promiscuous mode
[  387.527150][T14675] __nla_validate_parse: 5 callbacks suppressed
[  387.527164][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2795'.
[  387.583091][T14679] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  387.994820][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2802'.
[  388.448430][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'.
[  388.455655][T14697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.518047][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'.
[  389.028470][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'.
[  389.152796][T14723] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2813'.
[  389.159175][T14723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2813'.
[  389.809184][T14741] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2819'.
[  389.821016][T14741] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  389.838962][T14741] openvswitch: netlink: Duplicate key (type 0).
[  390.004596][T14744] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2820'.
[  390.011077][T14744] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2820'.
[  391.685969][ T5916] page_pool_release_retry() stalled pool shutdown: id 106, 1 inflight 62 sec
[  393.208274][T14760] __nla_validate_parse: 2 callbacks suppressed
[  393.208288][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2826'.
[  393.553172][T14770] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2829'.
[  393.577920][T14770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2829'.
[  393.649022][T14772] netlink: 'syz.3.2830': attribute type 23 has an invalid length.
[  393.936803][T14784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2828'.
[  394.195469][T14798] sit0: left allmulticast mode
[  394.292659][T14768] lo speed is unknown, defaulting to 1000
[  394.506428][T14819] netlink: 1788 bytes leftover after parsing attributes in process `syz.3.2842'.
[  394.538759][T14819] netlink: 'syz.3.2842': attribute type 1 has an invalid length.
[  394.755422][T14825] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2844'.
[  395.688731][T14846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2850'.
[  395.704968][T14846] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2850'.
[  395.725205][T14850] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2851'.
[  395.731475][T14850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2851'.
[  396.949170][T14892] netlink: 'syz.4.2865': attribute type 2 has an invalid length.
[  397.292968][T14911] netlink: 'syz.3.2870': attribute type 10 has an invalid length.
[  398.509204][T14938] netlink: 'syz.0.2879': attribute type 10 has an invalid length.
[  398.517784][T14940] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  398.774673][T14955] __nla_validate_parse: 9 callbacks suppressed
[  398.774740][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'.
[  398.868317][T14958] netlink: 'syz.4.2882': attribute type 21 has an invalid length.
[  398.871602][T14958] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2882'.
[  399.390811][T14965] netlink: 'syz.3.2889': attribute type 10 has an invalid length.
[  399.402521][T14967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2890'.
[  399.427065][T14967] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2890'.
[  399.438615][T14967] netlink: zone id is out of range
[  399.450544][T14967] netlink: zone id is out of range
[  399.457082][T14967] netlink: zone id is out of range
[  399.459604][T14967] netlink: zone id is out of range
[  399.464764][T14967] netlink: zone id is out of range
[  399.467644][T14967] netlink: zone id is out of range
[  399.470363][T14967] netlink: zone id is out of range
[  399.474973][T14967] netlink: zone id is out of range
[  399.491976][T14967] netlink: zone id is out of range
[  399.494450][T14967] netlink: zone id is out of range
[  399.620946][T14980] netlink: 'syz.0.2895': attribute type 10 has an invalid length.
[  399.639740][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  399.767820][T14980] bond0: (slave .3#c): Releasing backup interface
[  399.778409][T14980] mac80211_hwsim hwsim7 .3#c: left promiscuous mode
[  399.845092][T14980] team0: Port device .3#c added
[  400.163911][ T5896] page_pool_release_retry() stalled pool shutdown: id 112, 1 inflight 60 sec
[  400.499283][T14999] netlink: 'syz.3.2901': attribute type 10 has an invalid length.
[  400.602156][T15004] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2903'.
[  400.608267][T15004] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2903'.
[  400.616516][T15004] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2903'.
[  400.940332][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'.
[  400.949987][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'.
[  400.994163][T15016] netlink: 'syz.3.2908': attribute type 4 has an invalid length.
[  401.105285][T15023] netlink: 'syz.0.2907': attribute type 39 has an invalid length.
[  401.239330][T15028] netlink: 'syz.4.2910': attribute type 10 has an invalid length.
[  401.249190][T15028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.263669][T15028] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  401.280010][T15028] bond0: entered promiscuous mode
[  401.289261][T15028] bond_slave_0: entered promiscuous mode
[  401.293867][T15031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2909'.
[  401.297742][T15028] bond_slave_1: entered promiscuous mode
[  401.300572][T15028] batadv0: entered promiscuous mode
[  401.712087][ T5858] Bluetooth: hci1: command tx timeout
[  402.547892][T15091] can: request_module (can-proto-0) failed.
[  402.720140][T15098] -1: renamed from syzkaller0
[  403.230790][ T5858] Bluetooth: hci1: Malformed LE Event: 0x1b
[  403.233519][T15123] netlink: 'syz.3.2947': attribute type 2 has an invalid length.
[  403.239326][T15123] netlink: 'syz.3.2947': attribute type 8 has an invalid length.
[  403.377961][T15127] netlink: 'syz.4.2948': attribute type 12 has an invalid length.
[  403.438847][T15130] lo speed is unknown, defaulting to 1000
[  403.550982][T15137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.564210][T15137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.574531][T15137] batadv_slave_0: entered promiscuous mode
[  403.578515][T15137] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  404.730635][T15160] __nla_validate_parse: 13 callbacks suppressed
[  404.730652][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'.
[  404.897841][T15165] validate_nla: 3 callbacks suppressed
[  404.897856][T15165] netlink: 'syz.3.2962': attribute type 3 has an invalid length.
[  404.905890][T15165] netlink: 'syz.3.2962': attribute type 1 has an invalid length.
[  404.910701][T15165] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2962'.
[  405.031356][T15173] net_ratelimit: 163 callbacks suppressed
[  405.031376][T15173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.098690][T15179] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2966'.
[  405.105672][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2966'.
[  405.114610][T15177] netlink: 'syz.3.2965': attribute type 10 has an invalid length.
[  405.185619][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'.
[  405.471279][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2972'.
[  405.660233][T15206] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2975'.
[  405.668223][T15206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2975'.
[  405.772981][T15209] netlink: 'syz.0.2976': attribute type 10 has an invalid length.
[  405.808822][T15211] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2977'.
[  405.892952][T15211] netlink: 'syz.0.2977': attribute type 10 has an invalid length.
[  405.909326][T15211] team0: Port device syz_tun added
[  406.053899][T15218] netlink: 'syz.4.2980': attribute type 3 has an invalid length.
[  406.056886][T15218] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2980'.
[  406.092781][T15216] netlink: 'syz.0.2979': attribute type 12 has an invalid length.
[  407.762218][T15257] netlink: 'syz.0.2995': attribute type 10 has an invalid length.
[  407.785474][T15260] veth1_macvtap: left promiscuous mode
[  407.790063][T15260] macsec0: entered allmulticast mode
[  407.804019][T15260] veth1_macvtap: entered promiscuous mode
[  407.807250][T15260] veth1_macvtap: entered allmulticast mode
[  407.818726][T15260] macsec0: entered promiscuous mode
[  407.833701][T15264] veth1_macvtap: left allmulticast mode
[  407.836282][T15264] veth1_macvtap: left promiscuous mode
[  407.838490][T15264] macsec0: left promiscuous mode
[  407.849873][T15260] veth1_macvtap: entered promiscuous mode
[  407.854114][T15260] veth1_macvtap: entered allmulticast mode
[  407.857130][T15260] macsec0: entered promiscuous mode
[  408.130459][T15276] netlink: 'syz.4.3001': attribute type 23 has an invalid length.
[  410.382045][T15335] __nla_validate_parse: 14 callbacks suppressed
[  410.382062][T15335] netlink: 690 bytes leftover after parsing attributes in process `syz.0.3021'.
[  410.819863][T15349] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3025'.
[  410.860766][T15349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3025'.
[  411.108520][T15365] netlink: 'syz.3.3030': attribute type 16 has an invalid length.
[  411.112737][T15365] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3030'.
[  411.320982][T15379] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3034'.
[  411.331578][T15374] siw: device registration error -23
[  411.339208][T15379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3034'.
[  411.487855][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3038'.
[  411.734872][T15395] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3041'.
[  411.741160][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3041'.
[  411.837257][T15398] netlink: 'syz.0.3042': attribute type 10 has an invalid length.
[  411.841286][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'.
[  412.807951][T15429] netlink: 'syz.0.3050': attribute type 29 has an invalid length.
[  412.844711][T15429] netlink: 'syz.0.3050': attribute type 29 has an invalid length.
[  412.849199][T15429] netlink: 'syz.0.3050': attribute type 29 has an invalid length.
[  412.853560][T15429] netlink: 'syz.0.3050': attribute type 29 has an invalid length.
[  413.161734][T15455] netlink: 'syz.3.3059': attribute type 10 has an invalid length.
[  413.999259][   T33] audit: type=1107 audit(1755231405.287:6): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_PJr,3wpݢx2	pFUIoKjmFozI7ZNEJg[~PT4b3Q]%j{l*`D1NI
[  413.999259][   T33] w8IV _x%2`	h7F
[  413.999259][   T33] <9ne|cF[݊er,4'*ƀ'EA5G͚C'
[  414.200101][T15497] netlink: 'syz.3.3075': attribute type 21 has an invalid length.
[  414.204932][T15496] netlink: 'syz.3.3075': attribute type 10 has an invalid length.
[  414.429128][T15496] veth1_vlan (unregistering): left allmulticast mode
[  414.463596][T15496] bond0: (slave macvlan0): Releasing backup interface
[  414.466668][T15496] macvlan0 (unregistering): left promiscuous mode
[  415.355571][T15548] netlink: 'syz.3.3091': attribute type 10 has an invalid length.
[  415.657705][T15560] __nla_validate_parse: 7 callbacks suppressed
[  415.657728][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'.
[  416.253653][T15576] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3101'.
[  416.258365][T15576] netlink: 'syz.0.3101': attribute type 7 has an invalid length.
[  416.265947][T15576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3101'.
[  416.460785][T15590] netlink: 'syz.0.3106': attribute type 5 has an invalid length.
[  416.549972][T15594] netlink: 'syz.0.3108': attribute type 11 has an invalid length.
[  416.559569][T15594] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3108'.
[  416.730398][T15600] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3109'.
[  416.756243][T15600] hsr_slave_0: left promiscuous mode
[  416.763627][T15600] hsr_slave_1: left promiscuous mode
[  417.110968][T15618] netlink: 'syz.3.3115': attribute type 3 has an invalid length.
[  417.121760][T15618] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3115'.
[  417.126571][T15618] netlink: 'syz.3.3115': attribute type 3 has an invalid length.
[  417.130373][T15618] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3115'.
[  417.181072][T15623] netlink: 'syz.0.3117': attribute type 10 has an invalid length.
[  417.201058][T15623] geneve0: entered promiscuous mode
[  417.220861][T15623] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  417.391657][T15630] netlink: 'syz.4.3119': attribute type 12 has an invalid length.
[  417.412978][T15630] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.3119'.
[  417.579149][T15634] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3120'.
[  417.584549][T15634] netlink: 'syz.3.3120': attribute type 5 has an invalid length.
[  417.587752][T15634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3120'.
[  417.742538][T15642] netlink: 'syz.4.3124': attribute type 10 has an invalid length.
[  418.158184][T15658] netlink: 'syz.0.3131': attribute type 10 has an invalid length.
[  418.478140][T15680] vcan0 speed is unknown, defaulting to 1000
[  418.485698][T15680] vcan0 speed is unknown, defaulting to 1000
[  418.490478][T15680] vcan0 speed is unknown, defaulting to 1000
[  418.779219][T14811] vcan0 speed is unknown, defaulting to 1000
[  418.786971][T15680] infiniband syz1: set active
[  418.789486][T15680] infiniband syz1: added vcan0
[  418.860836][T15680] RDS/IB: syz1: added
[  418.870450][T15680] smc: adding ib device syz1 with port count 1
[  418.889119][T15680] smc:    ib device syz1 port 1 has pnetid 
[  418.906679][T15680] vcan0 speed is unknown, defaulting to 1000
[  418.911090][ T5896] vcan0 speed is unknown, defaulting to 1000
[  419.179911][T15705] : port 1(erspan0) entered blocking state
[  419.187080][T15705] : port 1(erspan0) entered disabled state
[  419.190891][T15705] erspan0: entered allmulticast mode
[  419.196569][T15705] erspan0: entered promiscuous mode
[  419.204981][T15680] vcan0 speed is unknown, defaulting to 1000
[  419.373067][T15680] vcan0 speed is unknown, defaulting to 1000
[  419.533661][T15680] vcan0 speed is unknown, defaulting to 1000
[  419.838082][T15734] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.843084][T15734] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.851568][T15734] bridge0: left promiscuous mode
[  419.854317][T15734] bridge0: left allmulticast mode
[  420.531495][T15778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.732306][T15792] syzkaller0: entered promiscuous mode
[  420.734439][T15792] syzkaller0: entered allmulticast mode
[  420.761172][T15794] __nla_validate_parse: 12 callbacks suppressed
[  420.761192][T15794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3177'.
[  420.772481][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'.
[  420.789021][T15797] openvswitch: netlink: Missing valid actions attribute.
[  420.792666][T15797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.319330][T15815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3184'.
[  422.472315][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'.
[  422.477125][T15814] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3184'.
[  422.622999][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'.
[  422.767630][T15831] validate_nla: 7 callbacks suppressed
[  422.767650][T15831] netlink: 'syz.0.3191': attribute type 10 has an invalid length.
[  423.167698][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'.
[  423.250324][T15850] netlink: 'syz.0.3198': attribute type 10 has an invalid length.
[  423.450239][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'.
[  423.643030][T15879] netlink: 'syz.3.3211': attribute type 10 has an invalid length.
[  423.652874][T15877] netlink: 'syz.4.3210': attribute type 1 has an invalid length.
[  423.655869][T15877] netlink: 'syz.4.3210': attribute type 4 has an invalid length.
[  423.658872][T15877] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3210'.
[  424.513927][T15879] team0: Port device wlan1 added
[  424.676895][T15895] netlink: 'syz.0.3217': attribute type 10 has an invalid length.
[  424.765592][T15903] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3219'.
[  424.951495][T15910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.961617][T15910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.039847][T15910] bond0: (slave batadv0): Releasing backup interface
[  425.060855][T15910] batadv0 (unregistering): left promiscuous mode
[  425.432907][T15917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.443468][T15917] bond_slave_0: left promiscuous mode
[  425.453103][T15917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.465637][T15917] bond_slave_1: left promiscuous mode
[  425.483640][T15917] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  425.494080][T15917] batadv0: left promiscuous mode
[  425.496689][T15917] bond0 (unregistering): Released all slaves
[  426.189355][T15945] __nla_validate_parse: 5 callbacks suppressed
[  426.189416][T15945] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3234'.
[  426.385766][T15952] netlink: 'syz.3.3232': attribute type 6 has an invalid length.
[  426.389399][T15952] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3232'.
[  426.711146][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'.
[  426.810594][T15961] netlink: 'syz.0.3239': attribute type 10 has an invalid length.
[  426.950638][T15966] netlink: 'syz.0.3241': attribute type 4 has an invalid length.
[  426.954879][T15966] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3241'.
[  426.960105][T15966] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  427.012172][T15965] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3241'.
[  427.026160][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'.
[  427.036213][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3241'.
[  427.784859][T15973] syzkaller0: entered promiscuous mode
[  427.787853][T15973] syzkaller0: entered allmulticast mode
[  427.849137][T15985] netlink: 'syz.0.3246': attribute type 1 has an invalid length.
[  427.903074][T15989] netlink: 'syz.3.3247': attribute type 10 has an invalid length.
[  427.915943][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'.
[  429.542121][T16000] sit0: left promiscuous mode
[  429.577955][T16002] sit0: entered promiscuous mode
[  429.775840][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'.
[  429.783521][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'.
[  430.031490][T16030] netlink: 'syz.0.3261': attribute type 10 has an invalid length.
[  430.530165][T16051] syzkaller0: entered promiscuous mode
[  430.534785][T16051] syzkaller0: entered allmulticast mode
[  430.678822][T16058] netlink: 'syz.4.3269': attribute type 10 has an invalid length.
[  431.230206][T16072] netlink: 'syz.4.3274': attribute type 10 has an invalid length.
[  431.234271][T16072] __nla_validate_parse: 1 callbacks suppressed
[  431.234359][T16072] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3274'.
[  431.277337][T16072] netlink: 'syz.4.3274': attribute type 4 has an invalid length.
[  431.280838][T16072] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3274'.
[  431.325583][T16079] netlink: 'syz.3.3277': attribute type 39 has an invalid length.
[  431.548300][T16084] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3278'.
[  431.617257][T16083] netlink: 'syz.0.3278': attribute type 1 has an invalid length.
[  431.725056][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'.
[  432.749592][T16114] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3288'.
[  433.927620][T16185] netlink: 'syz.3.3308': attribute type 10 has an invalid length.
[  434.523594][T16199] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3314'.
[  434.525680][T16201] netlink: 'syz.3.3315': attribute type 11 has an invalid length.
[  434.534285][T16201] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3315'.
[  435.257363][T16219] netlink: 8444 bytes leftover after parsing attributes in process `syz.0.3320'.
[  435.271695][T16221] bpf: Bad value for 'gid'
[  436.446040][T16252] netlink: 'syz.0.3331': attribute type 4 has an invalid length.
[  436.449021][T16252] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.3331'.
[  436.798794][T16261] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3335'.
[  436.939288][T16274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3341'.
[  436.949376][T16275] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3341'.
[  436.954404][T16276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3341'.
[  436.966192][T16276] netlink: 'syz.4.3341': attribute type 10 has an invalid length.
[  436.970071][T16276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.987922][T16276] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.994660][T16278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3340'.
[  437.002557][T16278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3340'.
[  437.022956][T16278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3340'.
[  437.036198][T16280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3342'.
[  437.210897][T16290] netlink: 'syz.0.3347': attribute type 12 has an invalid length.
[  437.215217][T16290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3347'.
[  437.352355][T16290] lo speed is unknown, defaulting to 1000
[  437.359647][T16290] vcan0 speed is unknown, defaulting to 1000
[  438.548391][T16325] netlink: zone id is out of range
[  438.550405][T16325] netlink: zone id is out of range
[  438.562441][T16325] netlink: zone id is out of range
[  438.564446][T16325] netlink: get zone limit has 8 unknown bytes
[  439.338822][T16340] netlink: 'syz.4.3365': attribute type 3 has an invalid length.
[  439.594316][T16359] netlink: 'syz.0.3372': attribute type 2 has an invalid length.
[  439.598045][T16359] netlink: 'syz.0.3372': attribute type 8 has an invalid length.
[  439.875570][T16382] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  439.879554][T16382] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  439.943584][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.946229][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  439.976469][ T5882] bridge_slave_1: left allmulticast mode
[  439.978891][ T5882] bridge_slave_1: left promiscuous mode
[  439.981471][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.997136][ T5882] bridge_slave_0: left allmulticast mode
[  439.999477][ T5882] bridge_slave_0: left promiscuous mode
[  440.004035][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.019626][ T5882] vlan0: left allmulticast mode
[  440.021647][ T5882] veth0_vlan: left allmulticast mode
[  440.027225][ T5882] vlan0: left promiscuous mode
[  440.029621][ T5882] : port 1(vlan0) entered disabled state
[  440.882944][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.900403][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.930568][ T5882] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  440.945660][ T5882] bond0 (unregistering): Released all slaves
[  441.550269][ T5858] Bluetooth: hci1: ISO packet for unknown connection handle 30
[  441.583584][T16411] __nla_validate_parse: 17 callbacks suppressed
[  441.583604][T16411] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3388'.
[  442.050211][T16424] netlink: 'syz.4.3390': attribute type 21 has an invalid length.
[  442.424933][T16423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3391'.
[  442.520902][T16424] netlink: 'syz.4.3390': attribute type 6 has an invalid length.
[  442.529818][T16424] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3390'.
[  442.890428][ T5882] hsr_slave_0: left promiscuous mode
[  442.897083][ T5882] hsr_slave_1: left promiscuous mode
[  442.903001][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.906122][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.922146][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.925755][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.982840][T16436] netlink: 'syz.4.3394': attribute type 29 has an invalid length.
[  442.983298][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'.
[  442.986091][T16436] netlink: 'syz.4.3394': attribute type 3 has an invalid length.
[  442.994313][ T5882] veth1_macvtap: left promiscuous mode
[  442.996758][ T5882] veth0_macvtap: left promiscuous mode
[  442.999081][ T5882] veth1_vlan: left promiscuous mode
[  442.999616][T16436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3394'.
[  443.003821][ T5882] veth0_vlan: left promiscuous mode
[  443.142236][T16442] netlink: 'syz.4.3396': attribute type 1 has an invalid length.
[  443.252509][T16448] netlink: 'syz.4.3398': attribute type 39 has an invalid length.
[  443.572352][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3400'.
[  443.788850][T16460] netlink: 'syz.3.3403': attribute type 11 has an invalid length.
[  443.792836][T16460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3403'.
[  443.967275][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  444.019111][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  444.770329][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'.
[  444.817761][T16481] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3411'.
[  444.898246][T16482] lo speed is unknown, defaulting to 1000
[  444.907690][T16482] vcan0 speed is unknown, defaulting to 1000
[  445.081169][T16492] netlink: 'syz.0.3414': attribute type 22 has an invalid length.
[  445.087835][T16492] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.3414'.
[  445.827283][T16523] syzkaller0: entered promiscuous mode
[  445.829630][T16523] syzkaller0: entered allmulticast mode
[  445.839504][T16523] siw: device registration error -23
[  446.296732][T16545] netlink: 'syz.0.3431': attribute type 13 has an invalid length.
[  446.300916][T16545] netlink: 'syz.0.3431': attribute type 58 has an invalid length.
[  447.830555][T16540] __nla_validate_parse: 1 callbacks suppressed
[  447.830578][T16540] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3429'.
[  447.884903][T16565] lo speed is unknown, defaulting to 1000
[  447.895808][T16565] vcan0 speed is unknown, defaulting to 1000
[  447.911214][T16569] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3440'.
[  447.926796][T16569] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3440'.
[  447.940438][T16569] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3440'.
[  448.006633][T16574] lo speed is unknown, defaulting to 1000
[  448.228167][T16574] vcan0 speed is unknown, defaulting to 1000
[  448.426866][T16590] netlink: 'syz.3.3446': attribute type 10 has an invalid length.
[  448.447687][T16590] lo: entered promiscuous mode
[  448.461756][T16590] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  448.588429][ T5896] lo speed is unknown, defaulting to 1000
[  448.591240][ T5896] syz2: Port: 1 Link DOWN
[  449.152980][T16607] netlink: 'syz.3.3451': attribute type 1 has an invalid length.
[  449.801623][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3456'.
[  449.860028][T16626] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  449.875903][T16626] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  449.993681][T16635] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3461'.
[  450.021259][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3464'.
[  450.034442][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3461'.
[  450.183565][T16648] netlink: 'syz.4.3467': attribute type 10 has an invalid length.
[  450.187380][T16648] netlink: 'syz.4.3467': attribute type 19 has an invalid length.
[  450.188044][T16644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3465'.
[  450.205133][T16648] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3467'.
[  450.222234][T16648] netlink: 'syz.4.3467': attribute type 21 has an invalid length.
[  450.629170][T16670] netlink: 'syz.0.3473': attribute type 10 has an invalid length.
[  451.743624][T16685] netlink: 'syz.3.3479': attribute type 29 has an invalid length.
[  451.762802][T16687] netlink: 'syz.3.3479': attribute type 29 has an invalid length.
[  452.049598][T16691] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  452.187008][T16693] netlink: 'syz.0.3481': attribute type 10 has an invalid length.
[  452.362919][T16699] lo speed is unknown, defaulting to 1000
[  452.367133][T16699] vcan0 speed is unknown, defaulting to 1000
[  453.530641][T16720] netlink: 'syz.0.3490': attribute type 10 has an invalid length.
[  453.560251][T16718] pim6reg0: tun_chr_ioctl cmd 1074025681
[  454.037977][T16725] siw: device registration error -23
[  454.281065][T16731] __nla_validate_parse: 3 callbacks suppressed
[  454.281091][T16731] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3494'.
[  454.296690][T16729] netlink: 'syz.4.3493': attribute type 2 has an invalid length.
[  454.300413][T16729] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3493'.
[  454.317109][T16729] nbd: must specify an index to disconnect
[  454.566328][T16729] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3493'.
[  454.571668][T16740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3495'.
[  454.587322][T16735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3495'.
[  454.596210][T16740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3495'.
[  454.679969][T16735] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  455.054868][T16748] netlink: 'syz.3.3498': attribute type 10 has an invalid length.
[  455.158655][T16753] siw: device registration error -23
[  455.787741][T16790] siw: device registration error -23
[  455.870975][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3512'.
[  455.922771][T16799] netlink: 'syz.3.3513': attribute type 29 has an invalid length.
[  456.311236][T16813] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.3517'.
[  456.315147][T16813] openvswitch: netlink: Message has 6 unknown bytes.
[  456.324550][T16814] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.3517'.
[  456.330070][T16814] openvswitch: netlink: Message has 6 unknown bytes.
[  456.615000][T16818] syzkaller0: tun_chr_ioctl cmd 1074025681
[  456.947707][T16827] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3521'.
[  457.364384][T16854] netlink: zone id is out of range
[  457.367136][T16854] netlink: zone id is out of range
[  457.369804][T16854] netlink: zone id is out of range
[  457.372486][T16854] netlink: zone id is out of range
[  457.377145][T16854] netlink: zone id is out of range
[  457.380057][T16854] netlink: zone id is out of range
[  457.384239][T16854] netlink: zone id is out of range
[  458.095034][T16847] delete_channel: no stack
[  458.357086][T16865] netlink: 'syz.0.3534': attribute type 21 has an invalid length.
[  458.567425][T16873] netlink: 'syz.4.3539': attribute type 10 has an invalid length.
[  458.625859][T16875] siw: device registration error -23
[  458.762755][T16887] delete_channel: no stack
[  459.841077][T16904] lo speed is unknown, defaulting to 1000
[  459.870016][T16904] vcan0 speed is unknown, defaulting to 1000
[  460.243476][T16922] __nla_validate_parse: 4 callbacks suppressed
[  460.243495][T16922] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3551'.
[  460.259784][T16922] net_ratelimit: 75 callbacks suppressed
[  460.259807][T16922] netlink: zone id is out of range
[  460.286061][T16922] netlink: zone id is out of range
[  460.288635][T16922] netlink: zone id is out of range
[  460.291281][T16922] netlink: zone id is out of range
[  460.312700][T16922] netlink: zone id is out of range
[  460.317065][T16922] netlink: zone id is out of range
[  460.331041][T16922] netlink: zone id is out of range
[  460.336924][T16922] netlink: zone id is out of range
[  460.340538][T16922] netlink: zone id is out of range
[  460.347760][T16922] netlink: zone id is out of range
[  460.453527][T16925] syzkaller0: entered promiscuous mode
[  460.455722][T16925] syzkaller0: entered allmulticast mode
[  460.697347][T16927] siw: device registration error -23
[  461.219469][T16940] netlink: 'syz.4.3557': attribute type 10 has an invalid length.
[  461.450943][T16940] team0 (unregistering): Port device team_slave_0 removed
[  461.461523][T16940] team0 (unregistering): Port device team_slave_1 removed
[  461.581416][T16944] siw: device registration error -23
[  461.785230][T16951] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3562'.
[  462.055257][T16963] netlink: 'syz.0.3566': attribute type 39 has an invalid length.
[  462.275832][T16979] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3570'.
[  462.414882][T16994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3577'.
[  462.485343][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  462.715602][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'.
[  462.788159][T17002] wg2: entered promiscuous mode
[  462.799077][T17002] wg2: entered allmulticast mode
[  463.439208][T17023] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3586'.
[  463.503832][T17028] syzkaller1: tun_chr_ioctl cmd 1074025677
[  463.506262][T17028] syzkaller1: linktype set to 780
[  463.969143][T17040] netlink: 'syz.4.3591': attribute type 1 has an invalid length.
[  464.374043][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3593'.
[  464.374193][T17044] lo speed is unknown, defaulting to 1000
[  464.383014][T17044] vcan0 speed is unknown, defaulting to 1000
[  464.799862][T17058] @: renamed from bond_slave_0 (while UP)
[  465.866323][T17076] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3603'.
[  466.128623][T17089] netlink: 'syz.4.3607': attribute type 1 has an invalid length.
[  466.135551][T17089] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3607'.
[  466.305978][T17100] netlink: 'syz.3.3606': attribute type 10 has an invalid length.
[  466.344934][T17100] team0: Device veth1_macvtap failed to register rx_handler
[  467.023450][T17111] netlink: 'syz.4.3612': attribute type 2 has an invalid length.
[  467.043711][T17111] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.3612'.
[  467.148763][T17117] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.3614'.
[  467.420313][T17126] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3618'.
[  467.610714][ T5858] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  468.036975][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'.
[  468.041234][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'.
[  468.203776][T17165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3633'.
[  468.215400][T17165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3633'.
[  468.256752][T17166] netlink: 'syz.0.3632': attribute type 10 has an invalid length.
[  468.311756][T17170] netlink: 4200 bytes leftover after parsing attributes in process `syz.3.3635'.
[  469.727741][T17221] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  469.733085][T17221] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  478.454411][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3410862784 wd_nsec: 3410846317
[  481.528928][T17256] netlink: 'syz.4.3658': attribute type 10 has an invalid length.
[  484.911332][T17304] netlink: 'syz.3.3676': attribute type 23 has an invalid length.
[  484.921227][T17305] netlink: 'syz.3.3676': attribute type 23 has an invalid length.
[  485.140785][T17318] IPv6: NLM_F_REPLACE set, but no existing node found!
[  485.165876][T17319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.184445][T17319] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.486316][T17334] netlink: 'syz.4.3684': attribute type 29 has an invalid length.
[  485.593614][T17337] syzkaller0: entered promiscuous mode
[  485.596041][T17337] syzkaller0: entered allmulticast mode
[  485.601232][T17334] netlink: 'syz.4.3684': attribute type 29 has an invalid length.
[  486.098557][T17344] __nla_validate_parse: 4 callbacks suppressed
[  486.098581][T17344] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3687'.
[  487.529413][T17353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3691'.
[  487.544271][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3693'.
[  487.555465][T17357] netlink: 'syz.3.3693': attribute type 10 has an invalid length.
[  487.558640][T17357] bond0: left promiscuous mode
[  487.572232][T17357] @: left promiscuous mode
[  487.574247][T17357] bond_slave_1: left promiscuous mode
[  487.576351][T17357] batadv_slave_0: left promiscuous mode
[  487.815782][T17362] netlink: 'syz.0.3694': attribute type 10 has an invalid length.
[  487.867692][T17365] netlink: 468 bytes leftover after parsing attributes in process `syz.0.3696'.
[  487.875884][T17365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3696'.
[  487.883681][T17365] netlink: 468 bytes leftover after parsing attributes in process `syz.0.3696'.
[  488.035525][T17375] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3699'.
[  488.040577][T17375] netlink: 'syz.0.3699': attribute type 5 has an invalid length.
[  488.041326][T17376] netlink: 'syz.0.3699': attribute type 5 has an invalid length.
[  488.105947][T17379] netlink: 'syz.4.3700': attribute type 16 has an invalid length.
[  488.109539][T17379] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3700'.
[  488.143849][T17382] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.3701'.
[  488.153421][T17382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3701'.
[  488.216838][T17379] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  488.223874][T17379] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  488.685202][T17413] net_ratelimit: 76 callbacks suppressed
[  488.685218][T17413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  489.096960][T17426] wg2: entered promiscuous mode
[  489.099604][T17426] wg2: entered allmulticast mode
[  489.803849][T17462] netlink: 'syz.3.3724': attribute type 46 has an invalid length.
[  490.009643][T17468] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  490.520517][T17490] lo speed is unknown, defaulting to 1000
[  490.524633][T17490] vcan0 speed is unknown, defaulting to 1000
[  490.869961][T17519] netlink: 'syz.0.3748': attribute type 5 has an invalid length.
[  490.898926][T17520] netlink: 'syz.4.3747': attribute type 23 has an invalid length.
[  491.396217][T17542] __nla_validate_parse: 7 callbacks suppressed
[  491.396231][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'.
[  491.777185][T17563] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3765'.
[  493.184869][T17599] netlink: 'syz.3.3775': attribute type 10 has an invalid length.
[  493.202132][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  493.213076][T17599] bond0: entered promiscuous mode
[  493.215595][T17599] @: entered promiscuous mode
[  493.218357][T17599] bond_slave_1: entered promiscuous mode
[  493.221593][T17599] batadv_slave_0: entered promiscuous mode
[  493.250852][T17601] netlink: 'syz.4.3776': attribute type 1 has an invalid length.
[  493.262073][T17601] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3776'.
[  493.414669][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3782'.
[  493.421869][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3782'.
[  493.609689][T17627] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  493.653232][T17627] netlink: 'syz.0.3785': attribute type 10 has an invalid length.
[  494.139100][T17627] team0: Port device .3#c removed
[  494.146013][T17627] mac80211_hwsim hwsim7 .3#c: entered promiscuous mode
[  494.150684][T17627] bond0: (slave .3#c): Enslaving as an active interface with an up link
[  494.467180][T17645] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3788'.
[  495.638690][T17656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3792'.
[  496.079836][T17662] pim6reg1: tun_chr_ioctl cmd 1074025680
[  496.221717][T17669] netlink: 'syz.3.3797': attribute type 10 has an invalid length.
[  496.300324][T17675] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.3799'.
[  496.674381][T17700] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.678473][T17700] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.693344][T17700] bridge0: entered allmulticast mode
[  496.818776][T17710] bridge_slave_1: left allmulticast mode
[  496.821233][T17710] bridge_slave_1: left promiscuous mode
[  496.824204][T17710] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.946706][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'.
[  497.500936][T17710] bridge_slave_0: left promiscuous mode
[  497.506756][T17710] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.575222][T17721] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3813'.
[  497.673974][T17727] netlink: 'syz.4.3815': attribute type 4 has an invalid length.
[  497.796018][T17735] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3817'.
[  497.930413][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'.
[  498.063429][T17754] netlink: 'syz.3.3825': attribute type 10 has an invalid length.
[  498.187172][T17759] netlink: 56429 bytes leftover after parsing attributes in process `syz.4.3827'.
[  498.297555][T17759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3827'.
[  498.302435][T17761] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3827'.
[  498.307637][T17759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3827'.
[  498.313140][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3827'.
[  498.375114][T17765] netlink: 809 bytes leftover after parsing attributes in process `syz.3.3829'.
[  498.448529][T17767] netlink: 'syz.0.3828': attribute type 10 has an invalid length.
[  498.570580][T17775] netlink: 'syz.3.3832': attribute type 10 has an invalid length.
[  498.641393][ T5858] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  498.645397][ T5858] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  498.750429][T17784] netlink: 'syz.3.3836': attribute type 10 has an invalid length.
[  498.795758][T17786] netlink: 'syz.4.3837': attribute type 10 has an invalid length.
[  498.933098][T17792] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  498.945893][T17792] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  500.025956][T17804] 3i: renamed from veth0_to_bond (while UP)
[  500.048199][T17801] netlink: 'syz.3.3842': attribute type 10 has an invalid length.
[  500.695010][T17827] netlink: 'syz.0.3849': attribute type 41 has an invalid length.
[  501.317163][T17849] netlink: 'syz.4.3859': attribute type 33 has an invalid length.
[  501.501747][T17848] netlink: 'syz.4.3859': attribute type 4 has an invalid length.
[  501.595452][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.597885][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  501.913439][T17854] netlink: 'syz.4.3861': attribute type 29 has an invalid length.
[  501.917360][T17854] netlink: 'syz.4.3861': attribute type 29 has an invalid length.
[  502.096969][T17859] __nla_validate_parse: 14 callbacks suppressed
[  502.096988][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'.
[  502.106061][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'.
[  502.284496][T17866] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3866'.
[  502.499873][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3867'.
[  503.061640][T17862] delete_channel: no stack
[  503.229421][T17897] IPv6: Can't replace route, no match found
[  503.365928][T17899] lo speed is unknown, defaulting to 1000
[  503.372789][T17899] vcan0 speed is unknown, defaulting to 1000
[  504.150793][T17932] siw: device registration error -23
[  504.469671][T17952] validate_nla: 2 callbacks suppressed
[  504.469689][T17952] netlink: 'syz.3.3891': attribute type 10 has an invalid length.
[  504.551034][T17959] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3893'.
[  504.558587][T17959] unsupported nla_type 65024
[  504.697910][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'.
[  504.990605][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'.
[  505.053404][T17975] netlink: 'syz.4.3897': attribute type 1 has an invalid length.
[  505.056607][T17975] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.3897'.
[  505.717334][T17989] netlink: 'syz.0.3901': attribute type 7 has an invalid length.
[  505.720738][T17989] netlink: 'syz.0.3901': attribute type 8 has an invalid length.
[  505.759208][T17989] lo speed is unknown, defaulting to 1000
[  505.763757][T17989] vcan0 speed is unknown, defaulting to 1000
[  505.869820][T17996] lo speed is unknown, defaulting to 1000
[  506.067907][T18020] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3906'.
[  506.071353][T18020] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3906'.
[  506.074893][T18020] netlink: 'syz.3.3906': attribute type 5 has an invalid length.
[  506.163150][T17996] vcan0 speed is unknown, defaulting to 1000
[  506.968376][T18030] netlink: 'syz.4.3910': attribute type 4 has an invalid length.
[  507.123292][T18037] __nla_validate_parse: 2 callbacks suppressed
[  507.123306][T18037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3912'.
[  507.129471][T18037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3912'.
[  507.133740][T18037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3912'.
[  507.170040][T18032] netlink: 'syz.3.3911': attribute type 27 has an invalid length.
[  507.185656][T18032] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3911'.
[  508.063569][T18041] netlink: 'syz.4.3913': attribute type 10 has an invalid length.
[  508.067484][T18041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3913'.
[  508.388603][T18041] vcan0: entered promiscuous mode
[  508.395912][T18041] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  508.424280][T18053] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3915'.
[  508.513107][ T5896] vcan0 speed is unknown, defaulting to 1000
[  508.526249][T18057] can: request_module (can-proto-0) failed.
[  508.538667][T18058] can: request_module (can-proto-0) failed.
[  508.684464][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3920'.
[  508.722343][T18074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3921'.
[  508.730255][T18074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3921'.
[  508.738129][T18074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3921'.
[  508.766752][T18077] lo speed is unknown, defaulting to 1000
[  508.769973][T18077] vcan0 speed is unknown, defaulting to 1000
[  509.617917][T18093] blkio.reset_stats is deprecated
[  510.165995][T18136] netlink: 'syz.0.3938': attribute type 10 has an invalid length.
[  510.498610][T18164] netlink: 'syz.3.3947': attribute type 10 has an invalid length.
[  510.989732][T18193] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  511.624824][T18220] netlink: 'syz.4.3965': attribute type 10 has an invalid length.
[  511.770185][T18227] netlink: 'syz.4.3968': attribute type 6 has an invalid length.
[  511.774044][T18227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.948219][T18236] netlink: 'syz.3.3972': attribute type 10 has an invalid length.
[  512.063232][T18238] lo speed is unknown, defaulting to 1000
[  512.067770][T18238] vcan0 speed is unknown, defaulting to 1000
[  512.157430][T18251] netlink: 'syz.3.3976': attribute type 21 has an invalid length.
[  512.234188][T18254] __nla_validate_parse: 48 callbacks suppressed
[  512.234229][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3977'.
[  512.579410][T18263] netlink: 'syz.4.3980': attribute type 10 has an invalid length.
[  512.582731][T18263] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3980'.
[  512.700489][T18262] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3980'.
[  512.845103][T18274] netlink: 'syz.4.3982': attribute type 21 has an invalid length.
[  512.850783][T18274] netlink: 'syz.4.3982': attribute type 6 has an invalid length.
[  512.858480][T18274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3982'.
[  513.053575][T18282] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.3985'.
[  513.136889][T18295] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3989'.
[  513.373793][T18304] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3990'.
[  513.532847][T18312] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3993'.
[  513.779663][T18327] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.4001'.
[  514.498738][T18351] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4008'.
[  515.464969][T18385] bridge0: entered allmulticast mode
[  516.436371][T18426] validate_nla: 7 callbacks suppressed
[  516.436385][T18426] netlink: 'syz.4.4032': attribute type 46 has an invalid length.
[  516.630228][T18440] lo speed is unknown, defaulting to 1000
[  516.634005][T18440] vcan0 speed is unknown, defaulting to 1000
[  516.903374][T18451] netlink: 'syz.3.4040': attribute type 7 has an invalid length.
[  517.699887][ T5858] Bluetooth: hci2: ISO packet for unknown connection handle 8
[  517.776387][T18485] __nla_validate_parse: 11 callbacks suppressed
[  517.776407][T18485] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4053'.
[  517.818997][T18487] netlink: 'syz.4.4054': attribute type 10 has an invalid length.
[  517.845256][T18489] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4055'.
[  517.955555][T18493] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4057'.
[  518.161465][T18497] netlink: 'syz.3.4058': attribute type 2 has an invalid length.
[  518.181995][T18497] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4058'.
[  518.228314][T18497] nbd: must specify at least one socket
[  518.240925][T18496] netlink: 'syz.3.4058': attribute type 2 has an invalid length.
[  518.254379][T18496] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4058'.
[  518.272144][T18496] nbd: must specify at least one socket
[  518.456814][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4061'.
[  519.077094][T18517] can: request_module (can-proto-0) failed.
[  519.366316][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4076'.
[  519.589045][T18557] lo speed is unknown, defaulting to 1000
[  519.624597][T18557] vcan0 speed is unknown, defaulting to 1000
[  520.604437][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4083'.
[  520.690687][T18582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4084'.
[  520.706517][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4084'.
[  521.007052][T18590] netlink: 'syz.3.4087': attribute type 28 has an invalid length.
[  521.011077][T18590] netlink: 'syz.3.4087': attribute type 3 has an invalid length.
[  521.814306][T18602] netlink: 'syz.3.4091': attribute type 41 has an invalid length.
[  522.900054][T18608] __nla_validate_parse: 4 callbacks suppressed
[  522.900074][T18608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4094'.
[  522.948699][T18608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4094'.
[  523.331456][T18635] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4104'.
[  523.393655][T18633] netlink: 'syz.3.4103': attribute type 3 has an invalid length.
[  523.397331][T18633] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4103'.
[  523.497174][T18641] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4106'.
[  523.510097][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4107'.
[  523.693102][T18651] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4110'.
[  523.841447][T18655] netlink: 'syz.0.4112': attribute type 10 has an invalid length.
[  524.046973][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4115'.
[  524.142887][T18668] syzkaller0: entered promiscuous mode
[  524.145468][T18668] syzkaller0: entered allmulticast mode
[  525.910863][T18681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4122'.
[  525.918238][T18680] netlink: 'syz.3.4122': attribute type 2 has an invalid length.
[  525.922977][T18681] netlink: 'syz.3.4122': attribute type 2 has an invalid length.
[  525.930483][T18680] netlink: 'syz.3.4122': attribute type 2 has an invalid length.
[  525.933927][T18681] netlink: 'syz.3.4122': attribute type 2 has an invalid length.
[  525.936956][T18680] netlink: 'syz.3.4122': attribute type 2 has an invalid length.
[  525.948425][T18681] netlink: 'syz.3.4122': attribute type 2 has an invalid length.
[  525.949119][T18680] netlink: 'syz.3.4122': attribute type 2 has an invalid length.
[  525.972147][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4124'.
[  526.083761][T18691] netlink: zone id is out of range
[  526.086596][T18691] netlink: zone id is out of range
[  526.088849][T18691] netlink: zone id is out of range
[  526.091142][T18691] netlink: zone id is out of range
[  526.123781][T18691] netlink: set zone limit has 4 unknown bytes
[  526.332534][T18699] can: request_module (can-proto-0) failed.
[  526.927705][T18736] lo speed is unknown, defaulting to 1000
[  526.955085][T18736] vcan0 speed is unknown, defaulting to 1000
[  527.120623][T18742] tap0: tun_chr_ioctl cmd 1074025678
[  527.123117][T18742] tap0: group set to 0
[  527.534438][T18769] validate_nla: 16 callbacks suppressed
[  527.534459][T18769] netlink: 'syz.0.4149': attribute type 13 has an invalid length.
[  527.544435][T18769] netlink: 'syz.0.4149': attribute type 17 has an invalid length.
[  527.584885][T18769] gretap0: refused to change device tx_queue_len
[  527.593299][T18769] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  527.989417][T18795] __nla_validate_parse: 9 callbacks suppressed
[  527.989435][T18795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4159'.
[  527.996502][T18795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4159'.
[  528.000531][T18795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4159'.
[  528.007752][T18795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4159'.
[  528.018989][T18796] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4158'.
[  528.909107][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4167'.
[  528.913610][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4167'.
[  531.436197][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4170'.
[  532.079867][T18858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4183'.
[  532.150819][T18858] netlink: 'syz.0.4183': attribute type 10 has an invalid length.
[  532.171727][T18858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4183'.
[  533.622307][T18894] __nla_validate_parse: 1 callbacks suppressed
[  533.622322][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'.
[  533.728576][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4195'.
[  533.835361][T18899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4196'.
[  534.130065][T18911] netlink: 'syz.4.4199': attribute type 1 has an invalid length.
[  534.134489][T18911] netlink: 'syz.4.4199': attribute type 3 has an invalid length.
[  534.138582][T18911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4199'.
[  535.791531][T18938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4207'.
[  535.944386][T18955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4210'.
[  535.954939][T18949] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4210'.
[  536.119014][T18969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4214'.
[  536.214229][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4216'.
[  536.218317][T18975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4216'.
[  536.415948][T18991] netlink: 'syz.4.4221': attribute type 10 has an invalid length.
[  536.421102][T18991] netlink: 'syz.4.4221': attribute type 3 has an invalid length.
[  536.667119][T19001] lo speed is unknown, defaulting to 1000
[  536.672307][T19001] vcan0 speed is unknown, defaulting to 1000
[  537.409066][T19033] netlink: 'syz.3.4235': attribute type 1 has an invalid length.
[  538.451699][T19056] nbd: must specify an index to disconnect
[  538.599119][T19064] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  538.604714][T19064] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  538.609605][T19064] CPU: 0 UID: 0 PID: 19064 Comm: syz.3.4246 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  538.615795][T19064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  538.620431][T19064] RIP: 0010:bpf_verify_pkcs7_signature+0x31/0x190
[  538.623470][T19064] Code: 41 56 41 55 41 54 53 48 89 d3 49 89 f6 49 89 ff 48 bd 00 00 00 00 00 fc ff df e8 aa b0 e0 ff 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 01 01 00 00 41 80 3c 24 00 74 3d 48 89 d8
[  538.632481][T19064] RSP: 0018:ffffc90002dbfa08 EFLAGS: 00010202
[  538.635339][T19064] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000
[  538.639087][T19064] RDX: ffffc9000f801000 RSI: 000000000000030c RDI: 000000000000030d
[  538.642854][T19064] RBP: dffffc0000000000 R08: 0000000000000018 R09: ffffffff820b8a70
[  538.646607][T19064] R10: ffffc90002dbfac0 R11: fffff520005b7f5a R12: 0000000000000008
[  538.650402][T19064] R13: 0000000000000010 R14: ffffc90002dbfaa0 R15: ffffc90002dbfac0
[  538.654116][T19064] FS:  00007f65aa9676c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  538.658341][T19064] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  538.661474][T19064] CR2: 0000001b30323ffc CR3: 0000000117318000 CR4: 00000000000006f0
[  538.665183][T19064] DR0: 0000000000000000 DR1: 0000000000000082 DR2: 0000000000000000
[  538.669013][T19064] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  538.672728][T19064] Call Trace:
[  538.674336][T19064]  <TASK>
[  538.675773][T19064]  bpf_prog_verify_signature+0x2da/0x3b0
[  538.678527][T19064]  ? __might_fault+0xb0/0x130
[  538.680743][T19064]  ? __pfx_bpf_prog_verify_signature+0x10/0x10
[  538.683654][T19064]  ? strncpy_from_user+0x150/0x290
[  538.685974][T19064]  bpf_prog_load+0xcc4/0x19e0
[  538.688269][T19064]  ? __pfx_bpf_prog_load+0x10/0x10
[  538.690573][T19064]  ? __pfx_perf_trace_lock+0x10/0x10
[  538.693097][T19064]  ? bpf_lsm_bpf+0x9/0x20
[  538.695163][T19064]  ? security_bpf+0x7e/0x300
[  538.697418][T19064]  __sys_bpf+0x507/0x860
[  538.699482][T19064]  ? __pfx___sys_bpf+0x10/0x10
[  538.701697][T19064]  ? exc_page_fault+0x76/0xf0
[  538.703961][T19064]  ? rcu_is_watching+0x15/0xb0
[  538.706242][T19064]  __x64_sys_bpf+0x7c/0x90
[  538.708386][T19064]  do_syscall_64+0xfa/0x3b0
[  538.710565][T19064]  ? lockdep_hardirqs_on+0x9c/0x150
[  538.713010][T19064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.715857][T19064]  ? exc_page_fault+0x9f/0xf0
[  538.718116][T19064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.720833][T19064] RIP: 0033:0x7f65a9b8ebe9
[  538.722877][T19064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.731746][T19064] RSP: 002b:00007f65aa967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  538.735661][T19064] RAX: ffffffffffffffda RBX: 00007f65a9db5fa0 RCX: 00007f65a9b8ebe9
[  538.739460][T19064] RDX: 00000000000000a8 RSI: 0000200000000140 RDI: 0000000000000005
[  538.743150][T19064] RBP: 00007f65a9c11e19 R08: 0000000000000000 R09: 0000000000000000
[  538.746834][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.750558][T19064] R13: 00007f65a9db6038 R14: 00007f65a9db5fa0 R15: 00007ffd03c71358
[  538.754284][T19064]  </TASK>
[  538.755761][T19064] Modules linked in:
[  538.758216][T19064] ---[ end trace 0000000000000000 ]---
[  538.767233][T19064] RIP: 0010:bpf_verify_pkcs7_signature+0x31/0x190
[  538.770854][T19064] Code: 41 56 41 55 41 54 53 48 89 d3 49 89 f6 49 89 ff 48 bd 00 00 00 00 00 fc ff df e8 aa b0 e0 ff 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 01 01 00 00 41 80 3c 24 00 74 3d 48 89 d8
[  538.780662][T19064] RSP: 0018:ffffc90002dbfa08 EFLAGS: 00010202
[  538.791919][T19064] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000
[  538.796741][T19064] RDX: ffffc9000f801000 RSI: 000000000000030c RDI: 000000000000030d
[  538.800727][T19064] RBP: dffffc0000000000 R08: 0000000000000018 R09: ffffffff820b8a70
[  538.805719][T19064] R10: ffffc90002dbfac0 R11: fffff520005b7f5a R12: 0000000000000008
[  538.809768][T19064] R13: 0000000000000010 R14: ffffc90002dbfaa0 R15: ffffc90002dbfac0
[  538.814208][T19064] FS:  00007f65aa9676c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  538.818498][T19064] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  538.821858][T19064] CR2: 0000200000010000 CR3: 0000000117318000 CR4: 00000000000006f0
[  538.825902][T19064] DR0: 0000000000000000 DR1: 0000000000000082 DR2: 0000000000000000
[  538.830444][T19064] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  538.837910][T19068] netlink: 'syz.0.4247': attribute type 16 has an invalid length.
[  538.841366][T19064] Kernel panic - not syncing: Fatal exception
[  538.842309][T19064] Kernel Offset: disabled

VM DIAGNOSIS:
04:18:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f26 RDI=0000000000000f27 RBP=00000000000003f8 RSP=ffffc90002dbf230
R8 =ffff888106320237 R9 =1ffff11020c64046 R10=dffffc0000000000 R11=ffffffff854f01b0
R12=dffffc0000000000 R13=ffffffff99af9915 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f022c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f65aa9676c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30323ffc CR3=0000000117318000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000082 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f65a9d87498 00007f65a9d87470 XMM03=00007f65a9d874a8 00007f65a9d874a0
XMM04=00007f65aa8ed100 00007f65a9d87460 XMM05=00007f65a9d87478 00007f65a9d874c0
XMM06=00007f65a9d874b8 00007f65a9d874b0 XMM07=00007f65a9d874a8 00007f65a9d874a0
XMM08=0000000000000000 00007f65a9c12ee7 XMM09=0000000000000000 00007f65a9c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff888107b69cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90003b1f6c0 RSP=ffffc90003b1f540
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d58 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556380f500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005650b995a7e8 CR3=00000001000b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
