last executing test programs:

1m31.575029468s ago: executing program 0 (id=1426):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='fib6_table_lookup\x00', r1, 0x0, 0x6}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe92}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x8, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500, 0x6d}, 0x1075, 0x4, 0x0, 0x0, 0xffffffffffffbbfe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

1m31.478280957s ago: executing program 0 (id=1431):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000dcb22441d143e9a68506bd3a9c7a4a1f754d8cfcb7e2e606533305f3f5a29a01bb05f17f127696be68ca1e7be08c815155ed56f9325234f8fae6b09d6ff18dc7b24c129aa9d357decd0985eb48643734f15a05b3f7120ac90250bee8c8032fa9bb06630a80617dfea7d5b98dfe46363f2eb841767ef49313db2aca317ca94f35946c523dc8b9171a1827fb5f36db74135bb6750e6dcffc0c671ac7c02ccef7f3833156dd10e836f066b406587ea816bc3f47565d3d1ea0a8a5c388b0609af3b2ea9fc26daa4484"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x8000000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x2, r4, 0x0)
socket$kcm(0xa, 0x3, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000079117000000000008510000002000000850000000500000095000000000000009500a505000000009b0a78d8ca0143c291"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x51)

1m31.317253415s ago: executing program 2 (id=1435):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x6}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f00000005c0)="2fceebaf80", 0x0}, 0x20)

1m31.24738836s ago: executing program 2 (id=1437):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x100}, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x800, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f3c00db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa0afbc9"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

1m31.242284009s ago: executing program 2 (id=1439):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1m31.155536156s ago: executing program 2 (id=1440):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1m31.140826064s ago: executing program 0 (id=1441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0)

1m31.113874614s ago: executing program 0 (id=1442):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff08, 0x0)

1m31.01812051s ago: executing program 0 (id=1443):
r0 = socket$kcm(0x28, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, 0x0}, 0x40000)

1m31.017507409s ago: executing program 2 (id=1444):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000001400038008000140000000000800024000000000080007400000000348000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000001c00038018000380140001007663616e30"], 0xd8}}, 0x0)

1m30.937063347s ago: executing program 0 (id=1445):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x11, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socket$kcm(0x10, 0x400000002, 0x0)

1m30.936717398s ago: executing program 2 (id=1446):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66)

1m14.114534419s ago: executing program 32 (id=1445):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x11, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socket$kcm(0x10, 0x400000002, 0x0)

1m14.114482104s ago: executing program 33 (id=1446):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66)

1.873208122s ago: executing program 3 (id=2245):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000001540), 0x20)

1.744215427s ago: executing program 3 (id=2248):
socketpair(0x2a, 0x2, 0x0, &(0x7f0000000380))

1.743803565s ago: executing program 3 (id=2249):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd20865", 0x1c}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000001000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0)

1.729370872s ago: executing program 4 (id=2250):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x5, 0xfffff034}, {0x6, 0x0, 0x0, 0x361}]})

1.659493162s ago: executing program 3 (id=2251):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x12120, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2734], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.593552777s ago: executing program 4 (id=2253):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080720007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)

1.58320983s ago: executing program 4 (id=2255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0xfffffffffffffffe, 0x0}, 0x20)

1.501446453s ago: executing program 4 (id=2256):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2})

1.452096342s ago: executing program 4 (id=2259):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, &(0x7f0000000b40)=ANY=[], 0x20}, 0x91)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fb, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2400feff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x2)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f3, 0x10, 0x70bd2a, 0x25dfdbfe, {0x1, 0x2, 0x3b, [0x4e, 0x2, 0x2, 0x81, 0xa, 0x1, 0x1, 0x5, 0x3, 0x80, 0x7ff000, 0xce, 0x270675d1, 0x4, 0x8, 0x6, 0x6, 0x9, 0x800, 0xe, 0x1, 0x9, 0x100, 0xffffffff, 0x70e, 0x0, 0x200, 0x6, 0xed, 0x49, 0x2, 0x9, 0x9, 0x0, 0x1, 0x10008, 0x0, 0x0, 0xcd, 0x80, 0x5, 0x7f, 0x64, 0x4, 0x67, 0x600, 0x2, 0x6, 0xfffffffe, 0x3, 0x80000000, 0x10, 0x4, 0x9, 0x1, 0x4, 0x0, 0x8, 0x80000000, 0x76, 0x1, 0x3, 0x5, 0x2], [0xfffffff9, 0x7, 0x5, 0x8, 0x1, 0x2, 0x5, 0x5, 0x2, 0x6e929333, 0x9466, 0x7ff, 0x7804, 0xc2c2, 0x81, 0x40, 0x1000, 0x8d4, 0x6, 0x200, 0x2, 0x30, 0xffffffff, 0x200, 0x9, 0x5, 0x6, 0x5, 0x4, 0x49b, 0x2, 0x8, 0x903c, 0x2, 0x8, 0x10000, 0x1, 0x96, 0x415b, 0x5389, 0x7fff, 0xc90b, 0x9, 0x9, 0xf, 0x2, 0x2, 0xfffffeff, 0x9bc, 0x5, 0x2, 0x9, 0x9, 0x1fe10be1, 0x9, 0x2, 0x3, 0xf0000000, 0x401, 0x10, 0xfffffd1a, 0x3, 0xffffffb0, 0x3], [0x46bb, 0x1, 0x80, 0x40, 0xc0, 0x9, 0x9, 0x0, 0x9, 0x8, 0x5, 0xd, 0x1, 0x7, 0x4, 0xd0, 0x800, 0x2, 0x1000, 0x40, 0x69, 0x7, 0x864, 0x84ef, 0x0, 0xfffffff7, 0xfffffffc, 0x3, 0x9, 0x0, 0x4, 0x6, 0x5, 0x5, 0xfffffffc, 0x0, 0x7fff, 0x5, 0x7fff, 0x6d, 0x3, 0x0, 0x7, 0x8, 0x0, 0x8, 0x4, 0x9, 0x0, 0x200, 0x6, 0x2, 0x1, 0x1, 0x200, 0x1, 0x5f, 0xa, 0x3, 0x101, 0x7ff, 0xffff91b1], [0x200, 0x80000000, 0x2, 0xfffffff7, 0x6, 0x6, 0x3, 0xd85, 0x1000, 0x2, 0xb8, 0x8d, 0x9, 0x2, 0x3, 0x5, 0x6, 0xffffffff, 0x0, 0x2, 0x400, 0x17b, 0x12000000, 0x1ff, 0x0, 0x40, 0x8, 0x4, 0x8, 0x0, 0x3, 0x3, 0x6, 0xf, 0x4, 0x1, 0x376, 0x9, 0x8, 0x10001, 0xfffffff7, 0x7, 0x4, 0x8001, 0x4, 0x6, 0x7, 0x2, 0xfffffffc, 0xd58c, 0x3, 0x5, 0xc, 0x8, 0x7, 0x9, 0x3, 0x7, 0xa2c, 0x0, 0x800, 0x8, 0x9, 0x2020000]}}, 0x420}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x7, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0xc0)

1.213021296s ago: executing program 4 (id=2260):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x45, 0xc, 0x0, 0x2, 0x0, 0x0, 0x8a00, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x1, 0xd7}, 0x10000, 0xffffffffffffffdf, 0x4, 0x0, 0xffff, 0x2, 0xf, 0x0, 0x7, 0x0, 0x5})
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000f1ff000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000050600030076657468315f6d6163767461700000000900010073797a31000000004c000000050a010200"], 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x12, 0x4}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES64], 0x12)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r8, r2, 0x18, 0x12, r0, @void, @value=r4}, 0x20)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540))

767.450489ms ago: executing program 3 (id=2261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x20000800)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x240480d0}, 0x8009)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x70}}, 0x0)
r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500})
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000000)}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

549.562313ms ago: executing program 3 (id=2262):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x200, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x26, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="d4020000200000001800000000000000000000000000000095"], 0x0, 0x7, 0xaa, &(0x7f0000000280)=""/170}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB], 0xc)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x420c0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2102050, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)

213.505935ms ago: executing program 1 (id=2268):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x2f89, 0x31}, 0x80, 0x0}, 0x0)

213.217324ms ago: executing program 1 (id=2269):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x200400c4)

111.320183ms ago: executing program 1 (id=2270):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedbf790700117df37538e486dd6317ce22800000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef)

110.798636ms ago: executing program 1 (id=2271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

72.776278ms ago: executing program 1 (id=2272):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ad0800000000000073113f00000010009500001280000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x24)

0s ago: executing program 1 (id=2273):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d)
r2 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000840))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x18, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001180)=""/4096, 0x41100, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000900)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002180)={0x2, 0x9, 0x5, 0xfffffff8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000021c0)=[r0, r0, r8, r0, r0], &(0x7f0000002200)=[{0x2, 0x4, 0x3, 0x1}, {0x0, 0x4, 0x6, 0x8}, {0x3, 0x2, 0x8, 0xc}, {0x5, 0x3, 0x3, 0x5}], 0x10, 0x7}, 0x94)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x9, 0x7, 0x4, 0x800c, 0xffffffffffffffff, 0x1, '\x00', r10, r9, 0x0, 0x2, 0x3, 0x0, @value=r9}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000002300)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
close(r11)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xd}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10210' (ED25519) to the list of known hosts.
syzkaller login: [   56.476129][ T5789] cgroup: Unknown subsys name 'net'
[   56.606625][ T5789] cgroup: Unknown subsys name 'cpuset'
[   56.612567][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.429692][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.974958][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.539533][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.546404][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.551190][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.554497][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.557623][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.561781][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.569595][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.573203][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.609175][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.613398][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.617688][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.622295][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.622349][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.636484][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.650313][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.002471][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   71.026271][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   71.127081][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   71.268965][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.271779][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.274537][ T5875] bridge_slave_0: entered allmulticast mode
[   71.279864][ T5875] bridge_slave_0: entered promiscuous mode
[   71.286730][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.291094][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.294520][ T5875] bridge_slave_1: entered allmulticast mode
[   71.299207][ T5875] bridge_slave_1: entered promiscuous mode
[   71.304345][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.307289][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.310716][ T5874] bridge_slave_0: entered allmulticast mode
[   71.313998][ T5874] bridge_slave_0: entered promiscuous mode
[   71.355374][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.358472][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.362146][ T5874] bridge_slave_1: entered allmulticast mode
[   71.366250][ T5874] bridge_slave_1: entered promiscuous mode
[   71.385715][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.389321][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.392297][ T5871] bridge_slave_0: entered allmulticast mode
[   71.396439][ T5871] bridge_slave_0: entered promiscuous mode
[   71.436748][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.440088][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.442986][ T5871] bridge_slave_1: entered allmulticast mode
[   71.446060][ T5871] bridge_slave_1: entered promiscuous mode
[   71.466941][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.472934][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.480344][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.499529][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.531678][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.536981][ T5875] team0: Port device team_slave_0 added
[   71.554946][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.561705][ T5875] team0: Port device team_slave_1 added
[   71.618413][ T5874] team0: Port device team_slave_0 added
[   71.622149][ T5871] team0: Port device team_slave_0 added
[   71.625863][ T5874] team0: Port device team_slave_1 added
[   71.642873][ T5871] team0: Port device team_slave_1 added
[   71.648539][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.652259][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.663106][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.695071][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.697825][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.708884][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.746349][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.749263][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.760972][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.773858][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.776684][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.787939][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.795188][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.797942][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.808551][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.815249][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.818108][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.829277][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.869788][ T5875] hsr_slave_0: entered promiscuous mode
[   71.872267][ T5875] hsr_slave_1: entered promiscuous mode
[   71.946555][ T5871] hsr_slave_0: entered promiscuous mode
[   71.955472][ T5871] hsr_slave_1: entered promiscuous mode
[   71.959152][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   71.961646][ T5871] Cannot create hsr debugfs directory
[   71.999287][ T5874] hsr_slave_0: entered promiscuous mode
[   72.001958][ T5874] hsr_slave_1: entered promiscuous mode
[   72.004519][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   72.006622][ T5874] Cannot create hsr debugfs directory
[   72.327226][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.340489][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.347734][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.368224][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.420884][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.454793][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.465659][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.485237][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.560172][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.571026][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.576856][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.585445][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.661122][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.671000][ T5873] Bluetooth: hci1: command tx timeout
[   72.697441][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   72.720625][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.723668][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.739904][ T5873] Bluetooth: hci2: command tx timeout
[   72.742164][ T5873] Bluetooth: hci0: command tx timeout
[   72.753916][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.756355][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.776783][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.823964][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   72.846726][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.849756][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.874207][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.877286][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.890421][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.934464][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   72.959554][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.961737][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.977694][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.980344][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.114998][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.182518][ T5875] veth0_vlan: entered promiscuous mode
[   73.205155][ T5875] veth1_vlan: entered promiscuous mode
[   73.272829][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.281380][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.320846][ T5875] veth0_macvtap: entered promiscuous mode
[   73.335249][ T5875] veth1_macvtap: entered promiscuous mode
[   73.384609][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.387994][ T5874] veth0_vlan: entered promiscuous mode
[   73.410553][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.422157][ T5874] veth1_vlan: entered promiscuous mode
[   73.442988][ T5871] veth0_vlan: entered promiscuous mode
[   73.445774][ T5705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.452036][ T5705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.455564][ T5705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.467721][ T5705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.495504][ T5871] veth1_vlan: entered promiscuous mode
[   73.565704][ T5874] veth0_macvtap: entered promiscuous mode
[   73.577141][ T5874] veth1_macvtap: entered promiscuous mode
[   73.612065][ T5871] veth0_macvtap: entered promiscuous mode
[   73.628465][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.632449][ T5871] veth1_macvtap: entered promiscuous mode
[   73.646559][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.656637][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.665814][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.697820][ T5903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.708433][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.723398][ T5903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.727186][ T5903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.734625][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.748034][ T5903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.770350][ T4973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.773447][ T4973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.789105][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.792747][ T5886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.812702][ T5886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.832063][ T5886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.921400][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.924486][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.967827][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.974382][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.044625][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.049324][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.068509][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.072750][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.251338][ T5947] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15'.
[   74.313603][ T5947] hsr_slave_0: left promiscuous mode
[   74.337659][ T5947] hsr_slave_1: left promiscuous mode
[   74.750748][ T5878] Bluetooth: hci1: command tx timeout
[   74.828510][ T5878] Bluetooth: hci0: command tx timeout
[   74.832680][ T5878] Bluetooth: hci2: command tx timeout
[   74.944688][ T5958] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20'.
[   75.246948][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'.
[   75.887151][ T5999] netlink: 1 bytes leftover after parsing attributes in process `syz.1.36'.
[   75.913662][ T6006] netlink: 'syz.0.41': attribute type 10 has an invalid length.
[   75.913685][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41'.
[   76.129828][ T6015] warning: `syz.0.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.196748][ T6019] netlink: 'syz.2.47': attribute type 33 has an invalid length.
[   76.202701][ T6019] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   76.205856][ T6019] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.47'.
[   76.268601][    C1] hrtimer: interrupt took 35970 ns
[   76.425499][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.428510][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   77.018310][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1289655946 wd_nsec: 1289655971
[   77.027197][ T5873] Bluetooth: hci1: command tx timeout
[   77.029458][ T5873] Bluetooth: hci2: command tx timeout
[   77.031169][ T5873] Bluetooth: hci0: command tx timeout
[   77.406141][ T6041] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   77.484540][ T6045] netlink: 'syz.0.58': attribute type 10 has an invalid length.
[   77.533756][ T6045] team0: Port device dummy0 added
[   77.536921][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.763444][ T6062] netlink: 'syz.1.65': attribute type 39 has an invalid length.
[   77.777936][ T6061] netlink: 'syz.0.62': attribute type 10 has an invalid length.
[   77.900723][ T6061] macvlan0: entered promiscuous mode
[   77.902882][ T6061] macvlan0: entered allmulticast mode
[   77.909586][ T6061] veth1_vlan: entered allmulticast mode
[   77.914598][ T6061] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   78.312466][ T6090] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   79.060427][ T5878] Bluetooth: hci0: command tx timeout
[   79.062669][ T5878] Bluetooth: hci2: command tx timeout
[   79.064848][ T5878] Bluetooth: hci1: command tx timeout
[   79.079959][ T6117] bridge_slave_1: left allmulticast mode
[   79.083077][ T6117] bridge_slave_1: left promiscuous mode
[   79.092836][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.153175][ T6117] bridge_slave_0: left allmulticast mode
[   79.156092][ T6117] bridge_slave_0: left promiscuous mode
[   79.163621][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.640213][ T6130] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.95'.
[   80.198303][ T5873] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[   80.654346][ T6168] netlink: 188 bytes leftover after parsing attributes in process `syz.2.112'.
[   80.807612][ T6174] netlink: 188 bytes leftover after parsing attributes in process `syz.0.115'.
[   80.967375][ T6178] netlink: 'syz.2.116': attribute type 11 has an invalid length.
[   80.978970][ T6178] netlink: 'syz.2.116': attribute type 11 has an invalid length.
[   80.982500][ T6178] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.116'.
[   81.398293][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'.
[   81.881084][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.125'.
[   82.211252][ T6209] netlink: 'syz.1.132': attribute type 21 has an invalid length.
[   82.214150][ T6209] netlink: 128 bytes leftover after parsing attributes in process `syz.1.132'.
[   82.217718][ T6209] netlink: 3 bytes leftover after parsing attributes in process `syz.1.132'.
[   82.473443][ T6221] Zero length message leads to an empty skb
[   82.656057][ T6236] netlink: 'syz.1.144': attribute type 1 has an invalid length.
[   83.282424][ T6263] pim6reg1: entered allmulticast mode
[   83.678426][ T6281] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   85.060706][ T6318] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.179'.
[   85.987631][ T6331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.182'.
[   85.991563][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'.
[   85.996113][ T6331] netlink: 31 bytes leftover after parsing attributes in process `syz.2.182'.
[   86.003293][ T6331] netlink: 'syz.2.182': attribute type 2 has an invalid length.
[   86.007435][ T6331] netlink: 31 bytes leftover after parsing attributes in process `syz.2.182'.
[   86.701388][  T794] cfg80211: failed to load regulatory.db
[   86.995276][ T6345] syz.2.187: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   87.010285][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) 
[   87.010302][ T6345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.010309][ T6345] Call Trace:
[   87.010315][ T6345]  <TASK>
[   87.010335][ T6345]  dump_stack_lvl+0x189/0x250
[   87.010380][ T6345]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.010396][ T6345]  ? __pfx__printk+0x10/0x10
[   87.010415][ T6345]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.010431][ T6345]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.010445][ T6345]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   87.010457][ T6345]  warn_alloc+0x214/0x310
[   87.010473][ T6345]  ? stack_depot_save_flags+0x41b/0x860
[   87.010486][ T6345]  ? __pfx_warn_alloc+0x10/0x10
[   87.010502][ T6345]  ? kasan_save_track+0x4f/0x80
[   87.010518][ T6345]  ? xskq_create+0x56/0x170
[   87.010534][ T6345]  ? xsk_init_queue+0xb0/0x110
[   87.010544][ T6345]  ? xsk_setsockopt+0x57b/0x8d0
[   87.010564][ T6345]  ? do_sock_setsockopt+0x17c/0x1b0
[   87.010577][ T6345]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   87.010584][ T6345]  ? do_syscall_64+0xfa/0x3b0
[   87.010596][ T6345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.010610][ T6345]  __vmalloc_node_range_noprof+0x125/0x12f0
[   87.010637][ T6345]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   87.010651][ T6345]  ? __kasan_kmalloc+0x93/0xb0
[   87.010663][ T6345]  vmalloc_user_noprof+0xad/0xf0
[   87.010675][ T6345]  ? xskq_create+0xbf/0x170
[   87.010686][ T6345]  xskq_create+0xbf/0x170
[   87.010698][ T6345]  xsk_init_queue+0xb0/0x110
[   87.010709][ T6345]  xsk_setsockopt+0x57b/0x8d0
[   87.010720][ T6345]  ? __pfx_xsk_setsockopt+0x10/0x10
[   87.010730][ T6345]  ? __pfx_aa_sk_perm+0x10/0x10
[   87.010743][ T6345]  ? __fget_files+0x2a/0x420
[   87.010750][ T6345]  ? aa_sock_opt_perm+0xff/0x1b0
[   87.010759][ T6345]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   87.010768][ T6345]  ? __pfx_xsk_setsockopt+0x10/0x10
[   87.010778][ T6345]  do_sock_setsockopt+0x17c/0x1b0
[   87.010788][ T6345]  __x64_sys_setsockopt+0x13f/0x1b0
[   87.010798][ T6345]  do_syscall_64+0xfa/0x3b0
[   87.010811][ T6345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.010818][ T6345]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   87.010829][ T6345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.010836][ T6345] RIP: 0033:0x7f040478ebe9
[   87.010847][ T6345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.010854][ T6345] RSP: 002b:00007f040568e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   87.010865][ T6345] RAX: ffffffffffffffda RBX: 00007f04049c5fa0 RCX: 00007f040478ebe9
[   87.010871][ T6345] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[   87.010876][ T6345] RBP: 00007f0404811e19 R08: 0000000000000004 R09: 0000000000000000
[   87.010881][ T6345] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   87.010886][ T6345] R13: 00007f04049c6038 R14: 00007f04049c5fa0 R15: 00007ffe043c8c58
[   87.010900][ T6345]  </TASK>
[   87.010949][ T6345] Mem-Info:
[   87.158899][ T6345] active_anon:5431 inactive_anon:0 isolated_anon:0
[   87.158899][ T6345]  active_file:10050 inactive_file:38240 isolated_file:0
[   87.158899][ T6345]  unevictable:1768 dirty:284 writeback:0
[   87.158899][ T6345]  slab_reclaimable:9293 slab_unreclaimable:51730
[   87.158899][ T6345]  mapped:18063 shmem:2430 pagetables:1058
[   87.158899][ T6345]  sec_pagetables:0 bounce:0
[   87.158899][ T6345]  kernel_misc_reclaimable:0
[   87.158899][ T6345]  free:292505 free_pcp:19785 free_cma:0
[   87.178732][ T6345] Node 0 active_anon:14460kB inactive_anon:0kB active_file:32132kB inactive_file:58820kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37052kB dirty:360kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5928kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.208677][ T6345] Node 1 active_anon:7264kB inactive_anon:0kB active_file:8068kB inactive_file:94140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35268kB dirty:776kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5584kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.228715][ T6345] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.259845][ T6345] lowmem_reserve[]: 0 811 811 811 811
[   87.261763][ T6345] Node 0 DMA32 free:357720kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14460kB inactive_anon:0kB active_file:32132kB inactive_file:58820kB unevictable:3536kB writepending:360kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:43088kB local_pcp:23076kB free_cma:0kB
[   87.293268][ T6345] lowmem_reserve[]: 0 0 0 0 0
[   87.299725][ T6345] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.340624][ T6345] lowmem_reserve[]: 0 0 854 854 854
[   87.342790][ T6345] Node 1 Normal free:337072kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7196kB inactive_anon:0kB active_file:8068kB inactive_file:94140kB unevictable:3536kB writepending:776kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38212kB local_pcp:21272kB free_cma:0kB
[   87.353921][ T6345] lowmem_reserve[]: 0 0 0 0 0
[   87.356051][ T6345] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   87.365000][ T6345] Node 0 DMA32: 507*4kB (UME) 150*8kB (M) 68*16kB (ME) 67*32kB (UME) 81*64kB (UME) 56*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UM) 80*4096kB (M) = 355708kB
[   87.376481][ T6345] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   87.384897][ T6345] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 226*16kB (UME) 38*32kB (UME) 74*64kB (UM) 47*128kB (UME) 12*256kB (UM) 4*512kB (M) 5*1024kB (ME) 0*2048kB 76*4096kB (M) = 337136kB
[   87.398500][ T6345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.404424][ T6345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.412096][ T6345] 50720 total pagecache pages
[   87.414261][ T6345] 0 pages in swap cache
[   87.416161][ T6345] Free swap  = 124996kB
[   87.418219][ T6345] Total swap = 124996kB
[   87.421234][ T6345] 786301 pages RAM
[   87.423121][ T6345] 0 pages HighMem/MovableOnly
[   87.425214][ T6345] 241329 pages reserved
[   87.427063][ T6345] 0 pages cma reserved
[   87.527105][ T6356] syz.1.190 uses obsolete (PF_INET,SOCK_PACKET)
[   94.447128][   T24] sched: DL replenish lagged too much
[   94.621435][ T6362] netlink: 'syz.0.192': attribute type 3 has an invalid length.
[   94.624893][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'.
[   99.697667][ T6367] netlink: 'syz.1.194': attribute type 3 has an invalid length.
[   99.701183][ T6367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.194'.
[   99.920998][ T6380] delete_channel: no stack
[   99.931238][ T6380] delete_channel: no stack
[  100.031396][ T6380] netlink: 'syz.1.200': attribute type 6 has an invalid length.
[  100.038872][ T6380] netlink: 164 bytes leftover after parsing attributes in process `syz.1.200'.
[  100.259810][ T6398] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[  100.554051][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'.
[  100.562243][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'.
[  100.675510][ T6430] delete_channel: no stack
[  100.677950][ T6430] delete_channel: no stack
[  100.737055][ T6434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.225'.
[  101.141978][ T6452] netlink: 152 bytes leftover after parsing attributes in process `syz.1.233'.
[  101.147109][ T6452] netlink: 6 bytes leftover after parsing attributes in process `syz.1.233'.
[  101.150626][ T6451] netlink: del zone limit has 4 unknown bytes
[  101.198290][ T6455] netlink: 'syz.0.235': attribute type 21 has an invalid length.
[  101.204462][ T6455] netlink: 156 bytes leftover after parsing attributes in process `syz.0.235'.
[  101.340978][ T6463] netlink: 'syz.0.239': attribute type 29 has an invalid length.
[  101.512748][ T6468] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  102.346046][ T6498] netlink: 56 bytes leftover after parsing attributes in process `syz.1.253'.
[  102.927825][ T6523] netlink: 'syz.1.263': attribute type 2 has an invalid length.
[  102.944913][ T6523] netlink: 'syz.1.263': attribute type 1 has an invalid length.
[  103.450811][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'.
[  103.709726][ T6544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.785759][   T40] wlan1: Trigger new scan to find an IBSS to join
[  105.596398][ T6585] lo speed is unknown, defaulting to 1000
[  105.605021][ T6585] lo speed is unknown, defaulting to 1000
[  105.621415][ T6585] lo speed is unknown, defaulting to 1000
[  105.803989][ T6591] __nla_validate_parse: 1 callbacks suppressed
[  105.804123][ T6591] netlink: 64 bytes leftover after parsing attributes in process `syz.1.290'.
[  105.843633][ T6585] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  106.063103][ T6585] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  106.105731][ T6600] =======================================================
[  106.105731][ T6600] WARNING: The mand mount option has been deprecated and
[  106.105731][ T6600]          and is ignored by this kernel. Remove the mand
[  106.105731][ T6600]          option from the mount to silence this warning.
[  106.105731][ T6600] =======================================================
[  106.221452][ T6585] lo speed is unknown, defaulting to 1000
[  106.225405][ T6585] lo speed is unknown, defaulting to 1000
[  106.228203][ T6585] lo speed is unknown, defaulting to 1000
[  106.424736][ T6585] syz.0.287 (6585) used greatest stack depth: 17976 bytes left
[  106.558966][ T6623] netlink: 'syz.1.305': attribute type 2 has an invalid length.
[  107.780978][   T36] wlan1: Trigger new scan to find an IBSS to join
[  109.810007][   T36] wlan1: Creating new IBSS network, BSSID 62:f4:2b:dc:6c:c0
[  109.950851][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.309'.
[  110.042601][ T6647] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.313'.
[  110.078125][ T6649] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[  110.083567][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'.
[  110.273341][ T6660] netlink: 'syz.0.319': attribute type 20 has an invalid length.
[  110.276606][ T6660] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.426492][ T6688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'.
[  111.440022][ T6687] openvswitch: netlink: Message has 4 unknown bytes.
[  111.440944][ T6688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'.
[  111.457795][ T6688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'.
[  115.671776][ T5873] Bluetooth: hci0: Unable to find connection for big 0x00
[  117.233202][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.2.356'.
[  117.237176][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.2.356'.
[  117.241498][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.2.356'.
[  117.606217][ T6770] netlink: 'syz.0.366': attribute type 10 has an invalid length.
[  117.835329][ T6770] team0: Port device dummy0 removed
[  117.909972][ T6770] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  118.561831][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[  119.587106][ T6839] netlink: 'syz.1.396': attribute type 21 has an invalid length.
[  119.591983][ T6839] IPv6: NLM_F_CREATE should be specified when creating new route
[  119.596054][ T6839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.599448][ T6839] IPv6: NLM_F_CREATE should be set when creating new route
[  119.602619][ T6839] IPv6: NLM_F_CREATE should be set when creating new route
[  119.605559][ T6839] IPv6: NLM_F_CREATE should be set when creating new route
[  120.912705][ T6877] netlink: 'syz.0.413': attribute type 21 has an invalid length.
[  121.085138][ T6883] netlink: 'syz.1.416': attribute type 15 has an invalid length.
[  121.093976][ T6883] netlink: 'syz.1.416': attribute type 7 has an invalid length.
[  121.097464][ T6883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.416'.
[  121.157366][ T6872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.172817][ T6877] netlink: 156 bytes leftover after parsing attributes in process `syz.0.413'.
[  121.224491][ T6885] netlink: 52 bytes leftover after parsing attributes in process `syz.2.417'.
[  121.902679][ T5873] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  122.006334][ T6926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.437'.
[  122.016646][ T6926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.437'.
[  122.074666][ T6928] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.438'.
[  122.259538][ T6937] netlink: 'syz.0.442': attribute type 2 has an invalid length.
[  122.262820][ T6937] netlink: 'syz.0.442': attribute type 7 has an invalid length.
[  122.265921][ T6937] netlink: 85 bytes leftover after parsing attributes in process `syz.0.442'.
[  122.285077][ T6937] netlink: 130140 bytes leftover after parsing attributes in process `syz.0.442'.
[  122.289822][ T6937] netlink: 'syz.0.442': attribute type 2 has an invalid length.
[  122.292916][ T6937] netlink: 'syz.0.442': attribute type 7 has an invalid length.
[  122.295895][ T6937] netlink: 85 bytes leftover after parsing attributes in process `syz.0.442'.
[  123.217663][ T6948] netlink: 17 bytes leftover after parsing attributes in process `syz.0.447'.
[  123.224253][ T6948] netlink: zone id is out of range
[  123.226231][ T6948] netlink: zone id is out of range
[  123.232798][ T6948] netlink: zone id is out of range
[  123.234787][ T6948] netlink: zone id is out of range
[  123.236853][ T6948] netlink: zone id is out of range
[  123.243375][ T6948] netlink: zone id is out of range
[  123.245498][ T6948] netlink: zone id is out of range
[  123.247555][ T6948] netlink: zone id is out of range
[  123.252551][ T6948] netlink: zone id is out of range
[  123.391351][ T6962] netlink: 277 bytes leftover after parsing attributes in process `syz.1.453'.
[  124.951340][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.468'.
[  125.367627][ T7018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.477'.
[  126.750631][ T7040] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.487'.
[  127.182473][ T7053] netlink: 'syz.1.493': attribute type 21 has an invalid length.
[  127.812259][ T7053] netlink: 'syz.1.493': attribute type 6 has an invalid length.
[  127.814947][ T7053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.493'.
[  128.157128][ T7069] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.500'.
[  129.087797][ T7079] netlink: 'syz.2.505': attribute type 11 has an invalid length.
[  129.097071][ T7079] netlink: 168 bytes leftover after parsing attributes in process `syz.2.505'.
[  129.188218][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'.
[  129.203547][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'.
[  129.207660][ T7083] netlink: 'syz.1.506': attribute type 3 has an invalid length.
[  129.218457][ T7079] mac80211_hwsim hwsim6 .3c: renamed from wlan1 (while UP)
[  129.648511][ T7097] netlink: 'syz.1.513': attribute type 21 has an invalid length.
[  130.653289][ T7090] netlink: 'syz.0.510': attribute type 2 has an invalid length.
[  130.656832][ T7090] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.510'.
[  130.672100][ T7109] veth0_vlan: entered allmulticast mode
[  131.398380][ T7109] veth0_vlan: left promiscuous mode
[  131.519429][ T7109] veth0_vlan: entered promiscuous mode
[  131.558357][ T7121] option changes via remount are deprecated (pid=7120 comm=syz.0.524)
[  131.633181][ T7129] netlink: 'syz.1.528': attribute type 1 has an invalid length.
[  132.096972][ T7158] netlink: 'syz.0.541': attribute type 29 has an invalid length.
[  132.111551][ T7158] netlink: 'syz.0.541': attribute type 29 has an invalid length.
[  132.118482][ T7158] netlink: 'syz.0.541': attribute type 29 has an invalid length.
[  132.183037][ T7162] netlink: 104 bytes leftover after parsing attributes in process `syz.0.543'.
[  132.588351][ T7186] validate_nla: 1 callbacks suppressed
[  132.588384][ T7186] netlink: 'syz.0.554': attribute type 3 has an invalid length.
[  132.594846][ T7186] netlink: 'syz.0.554': attribute type 6 has an invalid length.
[  132.598507][ T7186] netlink: 'syz.0.554': attribute type 8 has an invalid length.
[  132.603166][ T7186] netlink: 'syz.0.554': attribute type 10 has an invalid length.
[  132.606319][ T7186] netlink: 'syz.0.554': attribute type 11 has an invalid length.
[  132.614588][ T7186] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.554'.
[  135.011315][ T7235] netlink: 'syz.2.576': attribute type 27 has an invalid length.
[  135.014716][ T7235] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.576'.
[  135.780634][ T7254] lo speed is unknown, defaulting to 1000
[  135.959953][ T7265] netlink: 'syz.0.586': attribute type 26 has an invalid length.
[  136.234267][ T7274] netlink: 'syz.1.589': attribute type 1 has an invalid length.
[  137.222029][ T7293] netlink: 177 bytes leftover after parsing attributes in process `syz.1.598'.
[  137.627604][ T7307] delete_channel: no stack
[  137.683767][ T7311] nbd: must specify an index to disconnect
[  137.874843][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  137.878520][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.319324][ T7342] netlink: 'syz.0.615': attribute type 39 has an invalid length.
[  138.441225][ T7348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'.
[  138.832344][ T7356] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  139.278212][ T7384] netlink: 176 bytes leftover after parsing attributes in process `syz.2.636'.
[  139.644577][ T7396] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.640'.
[  148.085155][ T7400] netlink: 'syz.0.642': attribute type 39 has an invalid length.
[  148.316966][ T7416] netlink: 88 bytes leftover after parsing attributes in process `syz.2.647'.
[  148.499467][ T7418] xt_l2tp: unknown flags: 51
[  148.517448][ T7421] netlink: 'syz.1.649': attribute type 29 has an invalid length.
[  148.521385][ T7421] netlink: 'syz.1.649': attribute type 29 has an invalid length.
[  148.524735][ T7421] netlink: 'syz.1.649': attribute type 29 has an invalid length.
[  148.874799][ T7432] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.652'.
[  148.888519][ T7428] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.652'.
[  149.273288][ T5878] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  149.390120][ T7452] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[  149.393269][ T7452] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.663'.
[  149.621506][ T7473] netlink: 830 bytes leftover after parsing attributes in process `syz.1.673'.
[  149.778088][ T7482] netlink: 'syz.1.677': attribute type 10 has an invalid length.
[  149.788739][ T7482] team0: Device veth1_macvtap failed to register rx_handler
[  149.824694][ T7484] netlink: 'syz.2.678': attribute type 10 has an invalid length.
[  149.862452][ T7484] bond0: (slave .3c): Enslaving as an active interface with an up link
[  150.658372][ T7517] team0: Port device team_slave_0 removed
[  150.667628][ T7517] net_ratelimit: 14 callbacks suppressed
[  150.667651][ T7517] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  151.111951][ T7533] netlink: 'syz.1.699': attribute type 4 has an invalid length.
[  151.114720][ T7529] netlink: 'syz.0.698': attribute type 10 has an invalid length.
[  151.126098][ T7533] netlink: 112 bytes leftover after parsing attributes in process `syz.1.699'.
[  151.316612][ T7529] bond0: (slave bond_slave_0): Releasing backup interface
[  151.985421][ T7556] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.707'.
[  151.992526][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  152.239799][ T7569] veth1_macvtap: left promiscuous mode
[  152.242127][ T7569] macsec0: entered promiscuous mode
[  152.501199][ T5878] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  152.821676][ T7585] netlink: 'syz.1.721': attribute type 16 has an invalid length.
[  152.829435][ T7585] netlink: 168 bytes leftover after parsing attributes in process `syz.1.721'.
[  156.583726][ T7625] netlink: 'syz.2.739': attribute type 3 has an invalid length.
[  157.284618][ T7641] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  157.288085][ T7641] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.625610][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.760'.
[  160.629894][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'.
[  160.634566][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.760'.
[  160.639803][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'.
[  160.643723][ T7676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.759'.
[  160.770029][ T7685] netlink: 'syz.2.763': attribute type 2 has an invalid length.
[  160.777098][ T7685] netlink: 'syz.2.763': attribute type 1 has an invalid length.
[  160.783054][ T7685] netlink: 152 bytes leftover after parsing attributes in process `syz.2.763'.
[  160.975982][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'.
[  161.008279][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  162.011770][ T7716] bridge_slave_1: left allmulticast mode
[  162.015587][ T7716] bridge_slave_1: left promiscuous mode
[  162.041393][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.121351][ T7716] bridge_slave_0: left allmulticast mode
[  162.130189][ T7716] bridge_slave_0: left promiscuous mode
[  162.133803][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.416017][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.419884][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.427289][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.435855][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.680704][ T7742] lo speed is unknown, defaulting to 1000
[  162.719669][ T7747] netlink: 26 bytes leftover after parsing attributes in process `syz.2.789'.
[  164.171195][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  164.176508][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  164.183761][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  164.190966][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  164.194943][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  164.286590][ T7785] lo speed is unknown, defaulting to 1000
[  164.534204][ T7785] chnl_net:caif_netlink_parms(): no params data found
[  164.542873][ T7801] netlink: 182 bytes leftover after parsing attributes in process `syz.1.812'.
[  164.631062][ T7801] netlink: 'syz.1.812': attribute type 10 has an invalid length.
[  164.799805][ T7801] veth0_vlan: left promiscuous mode
[  164.813081][ T7801] veth0_vlan: entered promiscuous mode
[  164.876584][ T7801] team0: Device veth0_vlan failed to register rx_handler
[  165.004736][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.008549][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.011982][ T7785] bridge_slave_0: entered allmulticast mode
[  165.016432][ T7785] bridge_slave_0: entered promiscuous mode
[  165.019488][ T7801] syz.1.812 (7801) used greatest stack depth: 17720 bytes left
[  165.031854][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.038941][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.042035][ T7785] bridge_slave_1: entered allmulticast mode
[  165.046160][ T7785] bridge_slave_1: entered promiscuous mode
[  165.123029][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.132328][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.183392][ T7785] team0: Port device team_slave_0 added
[  165.190148][ T7785] team0: Port device team_slave_1 added
[  165.261373][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.264051][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.317858][ T7785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.337191][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.344511][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.357789][ T7785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.423695][ T7785] hsr_slave_0: entered promiscuous mode
[  165.426907][ T7785] hsr_slave_1: entered promiscuous mode
[  165.739412][ T7785] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.793848][ T7785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.863753][ T7785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.914515][ T7785] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.197630][ T7785] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  166.206551][ T7785] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  166.223975][ T7785] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  166.233623][ T7785] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  166.260489][ T5878] Bluetooth: hci2: command tx timeout
[  166.475003][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.550755][ T7785] 8021q: adding VLAN 0 to HW filter on device team0
[  166.577458][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.581069][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.591640][ T7866] __nla_validate_parse: 4 callbacks suppressed
[  166.591655][ T7866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'.
[  166.608700][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.612067][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.621466][ T7866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'.
[  166.630220][ T7866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'.
[  166.876354][ T7868] lo speed is unknown, defaulting to 1000
[  167.043097][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.084004][ T5878] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  167.151740][ T7785] veth0_vlan: entered promiscuous mode
[  167.175877][ T7785] veth1_vlan: entered promiscuous mode
[  167.247808][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'.
[  167.283433][ T7785] veth0_macvtap: entered promiscuous mode
[  167.290237][ T7785] veth1_macvtap: entered promiscuous mode
[  167.346654][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.356735][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.409367][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.439715][ T5903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.443384][ T5903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.447064][ T5903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.529371][ T5878] Bluetooth: hci2: command tx timeout
[  168.694605][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.703353][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.731903][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.734638][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.063151][ T7919] netlink: 'syz.2.852': attribute type 28 has an invalid length.
[  169.445577][ T7938] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  170.581815][ T5878] Bluetooth: hci2: command tx timeout
[  170.681685][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.867'.
[  170.704481][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.867'.
[  170.813063][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.867'.
[  170.817124][ T7962] netlink: 'syz.2.869': attribute type 6 has an invalid length.
[  171.267723][ T5878] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  171.272325][ T5878] Bluetooth: hci1: Injecting HCI hardware error event
[  171.276145][ T5878] Bluetooth: hci1: hardware error 0x00
[  171.596268][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'.
[  171.610464][ T7981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.876'.
[  171.745154][ T7999] netlink: 'syz.0.885': attribute type 29 has an invalid length.
[  171.756307][ T7999] netlink: 'syz.0.885': attribute type 29 has an invalid length.
[  171.761758][ T7999] netlink: 'syz.0.885': attribute type 29 has an invalid length.
[  171.766052][ T7999] netlink: 'syz.0.885': attribute type 29 has an invalid length.
[  171.832037][ T8005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.887'.
[  171.840079][ T8005] D`: renamed from hsr_slave_1 (while UP)
[  171.865000][ T8007] netlink: 'syz.1.890': attribute type 21 has an invalid length.
[  171.868280][ T8007] netlink: 176 bytes leftover after parsing attributes in process `syz.1.890'.
[  171.927511][ T8014] netlink: 'syz.1.892': attribute type 46 has an invalid length.
[  171.996836][ T8018] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.894'.
[  172.668919][ T5873] Bluetooth: hci2: command tx timeout
[  173.459278][ T5878] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  174.357070][ T8097] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  174.532460][ T8104] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.928'.
[  174.975050][ T8124] netlink: 104 bytes leftover after parsing attributes in process `syz.2.935'.
[  174.997835][ T8123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'.
[  175.007718][ T8126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'.
[  175.028268][ T8123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'.
[  175.742380][ T8160] netlink: 26 bytes leftover after parsing attributes in process `syz.1.952'.
[  176.936488][ T8216] netlink: 'syz.0.976': attribute type 21 has an invalid length.
[  176.944910][ T8216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.976'.
[  176.948269][ T8216] netlink: 'syz.0.976': attribute type 1 has an invalid length.
[  177.402475][ T8238] netlink: 'syz.2.985': attribute type 1 has an invalid length.
[  177.888713][ T8250] netlink: 10 bytes leftover after parsing attributes in process `syz.2.991'.
[  178.041026][ T5878] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  178.212935][ T8258] netlink: 'syz.0.984': attribute type 1 has an invalid length.
[  178.221793][ T8258] netlink: 17 bytes leftover after parsing attributes in process `syz.0.984'.
[  178.341515][ T8267] netlink: 128 bytes leftover after parsing attributes in process `syz.2.998'.
[  178.350116][ T8267] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  178.887669][ T8294] TCP: TCP_TX_DELAY enabled
[  179.252452][ T8306] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1014'.
[  179.730664][ T8325] netlink: 'syz.2.1021': attribute type 4 has an invalid length.
[  180.567427][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'.
[  180.585336][ T8346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.587842][ T8346] IPv6: NLM_F_CREATE should be set when creating new route
[  180.590365][ T8346] IPv6: NLM_F_CREATE should be set when creating new route
[  180.592787][ T8346] IPv6: NLM_F_CREATE should be set when creating new route
[  180.678332][ T8349] netlink: 'syz.0.1034': attribute type 21 has an invalid length.
[  182.920203][ T8385] netlink: 'syz.2.1049': attribute type 10 has an invalid length.
[  183.704081][ T8416] C: renamed from team_slave_0
[  183.899744][ T8416] netlink: 'syz.1.1063': attribute type 3 has an invalid length.
[  183.903676][ T8416] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  183.944999][ T8422] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  183.955429][ T8422] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.093149][ T8476] C: renamed from team_slave_0 (while UP)
[  185.098173][ T8476] netlink: 'syz.2.1086': attribute type 3 has an invalid length.
[  185.108319][ T8476] netlink: 'syz.2.1086': attribute type 1 has an invalid length.
[  185.114592][ T8476] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1086'.
[  187.834138][ T8553] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1121'.
[  187.884491][ T8557] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1122'.
[  188.052097][ T8571] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1130'.
[  188.056794][ T8571] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1130'.
[  189.727606][ T8605] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1144'.
[  189.734120][ T8605] netlink: zone id is out of range
[  189.746759][ T8605] netlink: zone id is out of range
[  189.754151][ T8605] netlink: zone id is out of range
[  189.756719][ T8605] netlink: get zone limit has 8 unknown bytes
[  190.194217][ T8619] netlink: 'syz.1.1152': attribute type 1 has an invalid length.
[  190.207309][ T8615] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1150'.
[  190.255446][ T8621] netlink: 'syz.1.1153': attribute type 1 has an invalid length.
[  190.259427][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'.
[  190.264796][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'.
[  190.324304][ T8624] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  190.544883][ T8641] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1163'.
[  191.341455][ T8678] netlink: 'syz.0.1179': attribute type 10 has an invalid length.
[  191.345167][ T8678] veth1_vlan: left allmulticast mode
[  192.044116][ T8706] netlink: 'syz.0.1192': attribute type 3 has an invalid length.
[  192.126399][ T5878] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  192.346077][ T8722] veth0_vlan: entered allmulticast mode
[  192.375204][ T8725] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  192.486154][ T5878] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  192.486186][ T5878] Bluetooth: unknown link type 110
[  192.491618][ T5878] Bluetooth: hci2: connection err: -111
[  192.973693][ T8743] netlink: 'syz.1.1208': attribute type 2 has an invalid length.
[  192.976974][ T8743] netlink: 'syz.1.1208': attribute type 1 has an invalid length.
[  193.184348][ T8753] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1214'.
[  193.265613][ T8759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1217'.
[  194.711837][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1230'.
[  195.761818][ T8810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.764652][ T8810] IPv6: NLM_F_CREATE should be set when creating new route
[  195.767278][ T8810] IPv6: NLM_F_CREATE should be set when creating new route
[  196.258906][ T5878] Bluetooth: hci0: command 0x0406 tx timeout
[  197.550796][ T8826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1245'.
[  197.805480][ T8832] netlink: 'syz.2.1248': attribute type 39 has an invalid length.
[  198.857650][ T8866] netlink: 'syz.2.1263': attribute type 40 has an invalid length.
[  198.865394][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.937150][ T8869] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1264'.
[  199.244721][ T8889] netlink: 42496 bytes leftover after parsing attributes in process `syz.2.1273'.
[  199.317609][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  199.322955][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  199.514015][ T8897] netlink: 'syz.2.1276': attribute type 21 has an invalid length.
[  199.517179][ T8897] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1276'.
[  200.760841][ T8920] netlink: 'syz.2.1284': attribute type 39 has an invalid length.
[  202.560382][ T8935] netlink: 'syz.2.1290': attribute type 29 has an invalid length.
[  202.565045][ T8935] netlink: 'syz.2.1290': attribute type 29 has an invalid length.
[  202.572221][ T8935] netlink: 'syz.2.1290': attribute type 29 has an invalid length.
[  202.576423][ T8935] netlink: 'syz.2.1290': attribute type 29 has an invalid length.
[  203.308064][ T8994] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1314'.
[  203.401604][ T9000] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1310'.
[  203.567475][ T9005] netlink: 'syz.2.1317': attribute type 1 has an invalid length.
[  203.573283][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'.
[  203.754706][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'.
[  203.760902][ T9008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1319'.
[  204.661583][ T9021] netlink: 'syz.2.1324': attribute type 12 has an invalid length.
[  204.664586][ T9021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1324'.
[  204.696905][ T9026] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1327'.
[  204.700618][ T9026] netlink: zone id is out of range
[  204.703019][ T9026] netlink: zone id is out of range
[  204.704948][ T9026] netlink: zone id is out of range
[  204.706730][ T9026] netlink: zone id is out of range
[  204.708540][ T9026] netlink: zone id is out of range
[  204.715389][ T9026] netlink: zone id is out of range
[  204.717578][ T9026] netlink: zone id is out of range
[  204.719774][ T9026] netlink: zone id is out of range
[  204.721329][ T9026] netlink: zone id is out of range
[  204.722933][ T9026] netlink: zone id is out of range
[  204.767988][ T9025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1326'.
[  205.018233][ T9042] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1334'.
[  205.022210][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'.
[  205.154017][ T5937] lo speed is unknown, defaulting to 1000
[  205.157055][ T5937] syz2: Port: 1 Link DOWN
[  208.748195][ T9069] __nla_validate_parse: 3 callbacks suppressed
[  208.748216][ T9069] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1346'.
[  208.931953][ T9088] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  209.145485][ T9103] netlink: 'syz.0.1360': attribute type 12 has an invalid length.
[  209.148099][ T9103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1360'.
[  209.159548][ T9101] netlink: 'syz.2.1359': attribute type 10 has an invalid length.
[  209.258434][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'.
[  209.265469][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'.
[  209.834468][ T9139] netlink: 'syz.2.1377': attribute type 10 has an invalid length.
[  209.841432][ T5873] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[  209.937414][ T9140] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1377'.
[  210.024310][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'.
[  210.171815][ T9139] team0 (unregistering): Port device C removed
[  210.180981][ T9139] team0 (unregistering): Port device team_slave_1 removed
[  210.289924][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'.
[  210.571870][ T9178] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1391'.
[  211.447671][ T9209] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1409'.
[  211.535638][ T9212] netlink: 'syz.0.1409': attribute type 11 has an invalid length.
[  211.554352][ T9212] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1409'.
[  211.592197][ T9212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.026420][ T9220] tc_dump_action: action bad kind
[  212.066521][ T9222] @: renamed from bond_slave_0
[  212.333257][ T9226] syzkaller1: tun_chr_ioctl cmd 1074025677
[  212.337806][ T9226] syzkaller1: linktype set to 823
[  212.497919][ T9236] netlink: 'syz.2.1420': attribute type 7 has an invalid length.
[  212.646281][ T9245] netlink: 'syz.0.1424': attribute type 1 has an invalid length.
[  213.999546][ T9284] netlink: 'syz.2.1440': attribute type 21 has an invalid length.
[  228.595858][ T9318] __nla_validate_parse: 5 callbacks suppressed
[  228.595877][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'.
[  228.603470][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'.
[  230.681798][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.686170][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.690597][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.695873][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.699845][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.727880][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.732410][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.736286][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.741324][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  230.752244][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  232.738961][ T5873] Bluetooth: hci3: command tx timeout
[  232.890529][ T5873] Bluetooth: hci4: command tx timeout
[  234.822611][ T5873] Bluetooth: hci3: command tx timeout
[  234.920568][ T5873] Bluetooth: hci4: command tx timeout
[  236.898949][ T5873] Bluetooth: hci3: command tx timeout
[  236.978992][ T5873] Bluetooth: hci4: command tx timeout
[  237.738549][   T13] bridge_slave_1: left allmulticast mode
[  237.741388][   T13] bridge_slave_1: left promiscuous mode
[  237.744427][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.751785][   T13] bridge_slave_0: left allmulticast mode
[  237.753666][   T13] bridge_slave_0: left promiscuous mode
[  237.755642][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.069593][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.077456][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.083589][   T13] bond0 (unregistering): (slave .3c): Releasing backup interface
[  238.093497][   T13] bond0 (unregistering): Released all slaves
[  238.182688][ T9325] lo speed is unknown, defaulting to 1000
[  238.250715][ T9322] lo speed is unknown, defaulting to 1000
[  238.462041][ T9325] chnl_net:caif_netlink_parms(): no params data found
[  238.547682][   T13] hsr_slave_0: left promiscuous mode
[  238.551612][   T13] hsr_slave_1: left promiscuous mode
[  238.582603][   T13] veth1_macvtap: left promiscuous mode
[  238.585194][   T13] veth0_macvtap: left promiscuous mode
[  238.587685][   T13] veth1_vlan: left promiscuous mode
[  238.590730][   T13] veth0_vlan: left promiscuous mode
[  238.939899][   T13] team0 (unregistering): Port device team_slave_1 removed
[  238.963542][   T13] team0 (unregistering): Port device team_slave_0 removed
[  238.988836][ T5873] Bluetooth: hci3: command tx timeout
[  239.069028][ T5873] Bluetooth: hci4: command tx timeout
[  239.291279][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.295369][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.298492][ T9325] bridge_slave_0: entered allmulticast mode
[  239.314411][ T9325] bridge_slave_0: entered promiscuous mode
[  239.376639][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.380950][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.383999][ T9325] bridge_slave_1: entered allmulticast mode
[  239.388011][ T9325] bridge_slave_1: entered promiscuous mode
[  239.525620][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.529968][ T9322] chnl_net:caif_netlink_parms(): no params data found
[  239.538037][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.601492][ T9325] team0: Port device team_slave_0 added
[  239.605880][ T9325] team0: Port device team_slave_1 added
[  239.666817][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.670913][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.679884][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.704703][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.715020][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.717506][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.720491][ T9322] bridge_slave_0: entered allmulticast mode
[  239.723462][ T9322] bridge_slave_0: entered promiscuous mode
[  239.727177][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.729808][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.737759][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.746308][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.749650][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.752759][ T9322] bridge_slave_1: entered allmulticast mode
[  239.756976][ T9322] bridge_slave_1: entered promiscuous mode
[  239.822870][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.855185][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.868361][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.885190][ T9325] hsr_slave_0: entered promiscuous mode
[  239.891798][ T9325] hsr_slave_1: entered promiscuous mode
[  239.894739][ T9325] debugfs: 'hsr0' already exists in 'hsr'
[  239.897199][ T9325] Cannot create hsr debugfs directory
[  239.903267][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.945443][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.974409][ T9322] team0: Port device team_slave_0 added
[  240.002382][ T9322] team0: Port device team_slave_1 added
[  240.042884][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.045283][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.054676][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.085266][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.087434][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.095740][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.172866][ T9322] hsr_slave_0: entered promiscuous mode
[  240.175463][ T9322] hsr_slave_1: entered promiscuous mode
[  240.177807][ T9322] debugfs: 'hsr0' already exists in 'hsr'
[  240.181618][ T9322] Cannot create hsr debugfs directory
[  240.290917][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.405406][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.529485][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.556184][ T9325] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  240.613077][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.627861][ T9325] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  240.647698][ T9325] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  240.662512][ T9325] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  240.815900][ T9322] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  240.852700][ T9322] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  240.863221][   T13] bridge_slave_1: left allmulticast mode
[  240.865324][   T13] bridge_slave_1: left promiscuous mode
[  240.867140][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.873635][   T13] bridge_slave_0: left allmulticast mode
[  240.875407][   T13] bridge_slave_0: left promiscuous mode
[  240.877385][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.078740][ T9396] net_ratelimit: 163 callbacks suppressed
[  241.078760][ T9396] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  241.083463][ T9396] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  241.257850][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.263247][   T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  241.267190][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  241.273462][   T13] bond0 (unregistering): Released all slaves
[  241.602758][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.607727][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.617618][   T13] bond0 (unregistering): Released all slaves
[  241.629264][ T9322] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  241.645746][ T9322] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  241.954775][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.077313][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.163794][ T9325] 8021q: adding VLAN 0 to HW filter on device team0
[  242.186313][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.189255][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.208132][ T9322] 8021q: adding VLAN 0 to HW filter on device team0
[  242.234636][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.237608][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.252233][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.255113][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.303293][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.306411][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.715028][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.717424][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.724205][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.726885][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.734762][   T13] hsr_slave_0: left promiscuous mode
[  242.737498][   T13] hsr_slave_1: left promiscuous mode
[  242.744278][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.747048][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.751905][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.754408][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.778074][   T13] veth0_macvtap: left promiscuous mode
[  242.781676][   T13] veth1_vlan: left promiscuous mode
[  242.783625][   T13] veth0_vlan: left promiscuous mode
[  242.786793][   T13] veth1_macvtap: left promiscuous mode
[  242.789634][   T13] veth0_macvtap: left promiscuous mode
[  242.792025][   T13] veth1_vlan: left promiscuous mode
[  242.794216][   T13] veth0_vlan: left promiscuous mode
[  243.281411][   T13] team0 (unregistering): Port device team_slave_1 removed
[  243.318830][   T13] team0 (unregistering): Port device team_slave_0 removed
[  244.292352][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.397613][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.474132][ T9322] veth0_vlan: entered promiscuous mode
[  244.499160][ T9322] veth1_vlan: entered promiscuous mode
[  244.557581][ T9322] veth0_macvtap: entered promiscuous mode
[  244.617045][ T9322] veth1_macvtap: entered promiscuous mode
[  244.671315][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.701120][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.746930][ T5886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.768797][ T5886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.773252][ T5886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.777223][ T5886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.478483][ T9325] veth0_vlan: entered promiscuous mode
[  245.511278][ T9325] veth1_vlan: entered promiscuous mode
[  245.553451][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.556267][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.603555][ T9325] veth0_macvtap: entered promiscuous mode
[  245.619180][ T9325] veth1_macvtap: entered promiscuous mode
[  245.630761][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.634075][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.666385][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.707863][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.730555][ T5903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.740600][ T5903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.747029][ T5903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.812785][ T5903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.930096][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.933475][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.056578][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.069564][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.775044][ T9498] proc: Bad value for 'gid'
[  246.795652][ T9497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1485'.
[  247.009811][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'.
[  247.109946][ T9515] netlink: 'syz.3.1492': attribute type 29 has an invalid length.
[  247.113360][ T9518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.240887][ T9557] netlink: 'syz.1.1499': attribute type 2 has an invalid length.
[  248.429234][ T9566] netlink: 'syz.4.1503': attribute type 3 has an invalid length.
[  248.431814][ T9566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1503'.
[  248.959249][ T9590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  248.962778][ T9590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.102553][ T9602] netlink: 'syz.3.1514': attribute type 10 has an invalid length.
[  249.907479][ T9630] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  250.302885][ T9660] proc: Unknown parameter 'u'
[  252.546794][ T9710] netlink: 'syz.4.1541': attribute type 2 has an invalid length.
[  252.564892][ T9710] netlink: 'syz.4.1541': attribute type 1 has an invalid length.
[  252.696335][ T9713] net veth1_virt_wifi : renamed from virt_wifi0
[  252.865204][ T9713] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  253.579962][ T9719] netlink: 'syz.4.1545': attribute type 29 has an invalid length.
[  253.589496][ T9720] netlink: 'syz.4.1545': attribute type 29 has an invalid length.
[  253.617848][ T9724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1547'.
[  253.626707][ T9718] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1545'.
[  253.632255][ T9718] unsupported nla_type 58
[  253.650835][ T9726] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1548'.
[  253.906745][ T9741] syzkaller1: tun_chr_ioctl cmd 1074025677
[  253.909258][ T9741] syzkaller1: linktype set to 780
[  254.472874][ T9761] netlink: 'syz.4.1563': attribute type 2 has an invalid length.
[  254.475882][ T9761] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1563'.
[  254.512546][ T9763] netlink: 'syz.4.1564': attribute type 2 has an invalid length.
[  254.515669][ T9763] netlink: 130532 bytes leftover after parsing attributes in process `syz.4.1564'.
[  254.787792][ T9774] netlink: 731 bytes leftover after parsing attributes in process `syz.1.1569'.
[  254.819653][ T9776] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  254.840269][ T9778] netlink: 'syz.1.1571': attribute type 3 has an invalid length.
[  255.054147][ T9789] netlink: 'syz.3.1577': attribute type 33 has an invalid length.
[  255.057471][ T9789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1577'.
[  255.076732][ T9789] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  255.331185][ T9800] netlink: 116572 bytes leftover after parsing attributes in process `syz.4.1578'.
[  255.392230][ T9809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1584'.
[  255.396604][ T9809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1584'.
[  255.628173][ T9817] sock: sock_timestamping_bind_phc: sock not bind to device
[  255.824344][ T9829] netlink: 'syz.1.1593': attribute type 8 has an invalid length.
[  256.439430][ T5873] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4
[  257.426751][ T9909] netlink: 'syz.3.1625': attribute type 10 has an invalid length.
[  257.437758][ T9909] bond0: (slave ): Enslaving as an active interface with an up link
[  257.773896][ T9912] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  257.969614][ T9928] netlink: 'syz.1.1634': attribute type 16 has an invalid length.
[  259.376148][ T9938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.384231][ T9938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.399634][ T9938] bond0 (unregistering): (slave ): Releasing backup interface
[  259.406555][ T9938] bond0 (unregistering): Released all slaves
[  260.606371][ T9975] __nla_validate_parse: 6 callbacks suppressed
[  260.606383][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'.
[  260.759998][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  260.762104][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  260.859080][ T9979] delete_channel: no stack
[  260.875793][ T9983] netlink: 'syz.3.1651': attribute type 4 has an invalid length.
[  260.880106][ T9983] netlink: 'syz.3.1651': attribute type 1 has an invalid length.
[  260.882915][ T9983] netlink: 'syz.3.1651': attribute type 2 has an invalid length.
[  260.885778][ T9983] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.1651'.
[  260.955060][ T9987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1652'.
[  260.958161][ T9987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1652'.
[  261.194176][ T9999] netlink: 'syz.3.1659': attribute type 25 has an invalid length.
[  261.196606][ T9999] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1659'.
[  261.970774][ T5873] Bluetooth: hci3: Malformed LE Event: 0x1d
[  262.077836][T10017] netlink: 'syz.3.1667': attribute type 39 has an invalid length.
[  262.093010][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'.
[  262.266648][T10033] netlink: 'syz.1.1673': attribute type 21 has an invalid length.
[  262.269413][T10033] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1673'.
[  263.377875][T10076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.430773][T10080] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  263.641074][T10101] openvswitch: netlink: IP tunnel TTL not specified.
[  263.732314][T10111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1701'.
[  263.739470][T10111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1701'.
[  263.742624][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1701'.
[  263.768816][T10116] netlink: 'syz.4.1703': attribute type 11 has an invalid length.
[  266.091017][T10243] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  266.422680][T10269] openvswitch: netlink: IP tunnel dst address not specified
[  266.447512][T10265] netlink: 'syz.4.1741': attribute type 29 has an invalid length.
[  266.545507][T10265] netlink: 'syz.4.1741': attribute type 29 has an invalid length.
[  266.561548][T10265] netlink: 'syz.4.1741': attribute type 29 has an invalid length.
[  266.577837][T10265] netlink: 'syz.4.1741': attribute type 29 has an invalid length.
[  266.954453][T10300] netlink: 'syz.4.1753': attribute type 12 has an invalid length.
[  266.957653][T10300] __nla_validate_parse: 2 callbacks suppressed
[  266.957666][T10300] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1753'.
[  267.146237][T10304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1758'.
[  267.396236][T10315] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1763'.
[  267.451516][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'.
[  268.036893][T10335] netlink: 'syz.4.1770': attribute type 4 has an invalid length.
[  269.941451][T10355] netlink: 'syz.1.1778': attribute type 10 has an invalid length.
[  269.967323][T10360] syzkaller0: entered promiscuous mode
[  269.974401][T10360] syzkaller0: entered allmulticast mode
[  270.004932][T10355] team0: Port device geneve1 added
[  273.693555][T10402] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  273.755313][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'.
[  273.761642][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'.
[  274.077130][T10429] : entered promiscuous mode
[  274.621512][T10444] netlink: 'syz.1.1814': attribute type 13 has an invalid length.
[  274.624660][T10444] netlink: 'syz.1.1814': attribute type 17 has an invalid length.
[  274.687315][T10444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.910761][T10465] netlink: 'syz.3.1820': attribute type 10 has an invalid length.
[  274.934162][T10466] netlink: 'syz.4.1822': attribute type 2 has an invalid length.
[  274.937528][T10466] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1822'.
[  275.091602][T10465] geneve0: entered promiscuous mode
[  275.811247][T10486] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1831'.
[  275.854537][T10488] veth1_macvtap: left promiscuous mode
[  275.856813][T10488] macsec0: entered allmulticast mode
[  275.866340][T10488] veth1_macvtap: entered promiscuous mode
[  275.869178][T10488] veth1_macvtap: entered allmulticast mode
[  275.873047][T10488] macsec0: entered promiscuous mode
[  275.966874][T10494] netlink: 'syz.4.1835': attribute type 10 has an invalid length.
[  275.970658][T10494] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1835'.
[  276.042030][T10498] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1837'.
[  276.203556][T10510] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1843'.
[  276.206705][T10510] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1843'.
[  276.627703][T10550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1862'.
[  276.866266][T10566] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1869'.
[  277.762688][T10583] netlink: 'syz.3.1877': attribute type 10 has an invalid length.
[  277.856381][T10583] team0: Device ipvlan1 failed to register rx_handler
[  277.984904][T10591] netlink: 'syz.4.1876': attribute type 13 has an invalid length.
[  277.987553][T10591] netlink: 'syz.4.1876': attribute type 17 has an invalid length.
[  278.065956][T10591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.754341][T10634] netlink: 'syz.4.1898': attribute type 29 has an invalid length.
[  279.028526][T10656] __nla_validate_parse: 5 callbacks suppressed
[  279.028540][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1909'.
[  279.090618][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'.
[  279.100233][T10658] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1910'.
[  279.104316][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'.
[  279.163726][T10663] netlink: 'syz.3.1911': attribute type 13 has an invalid length.
[  279.968380][T10663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.197408][T10690] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  280.725814][T10700] validate_nla: 1 callbacks suppressed
[  280.725837][T10700] netlink: 'syz.3.1926': attribute type 2 has an invalid length.
[  280.736005][T10700] netlink: 'syz.3.1926': attribute type 8 has an invalid length.
[  280.740409][T10700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1926'.
[  280.823913][T10702] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1927'.
[  282.101071][T10713] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1932'.
[  282.118468][T10711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1930'.
[  282.236502][T10720] netlink: zone id is out of range
[  282.247694][T10720] netlink: zone id is out of range
[  282.250935][T10720] netlink: zone id is out of range
[  282.253445][T10720] netlink: zone id is out of range
[  282.258260][T10720] netlink: del zone limit has 4 unknown bytes
[  282.283375][T10720] netlink: 16094 bytes leftover after parsing attributes in process `syz.4.1935'.
[  282.498919][T10729] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1939'.
[  283.540643][T10790] netlink: 'syz.3.1966': attribute type 10 has an invalid length.
[  284.425947][T10815] netlink: 'syz.1.1975': attribute type 2 has an invalid length.
[  284.439439][T10815] __nla_validate_parse: 3 callbacks suppressed
[  284.439662][T10815] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1975'.
[  284.673552][T10832] netlink: 'syz.3.1981': attribute type 1 has an invalid length.
[  284.741718][T10835] netlink: 'syz.3.1982': attribute type 29 has an invalid length.
[  284.747963][T10835] netlink: 'syz.3.1982': attribute type 10 has an invalid length.
[  285.052520][T10847] netlink: 'syz.3.1985': attribute type 4 has an invalid length.
[  285.077601][T10847] netlink: 'syz.3.1985': attribute type 10 has an invalid length.
[  285.091754][T10847] vlan0: entered allmulticast mode
[  285.095899][T10847] veth0_vlan: entered allmulticast mode
[  285.122661][T10847] team0: Port device vlan0 added
[  285.207524][T10851] netlink: 'syz.1.1988': attribute type 39 has an invalid length.
[  285.629798][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1990'.
[  285.912476][T10868] netlink: 'syz.3.1995': attribute type 10 has an invalid length.
[  285.934975][T10868] team0: Port device hsr0 added
[  286.098487][T10882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.195231][T10880] syzkaller0: entered promiscuous mode
[  286.197618][T10880] syzkaller0: entered allmulticast mode
[  288.273129][ T5873] Bluetooth: hci0: unexpected event 0x01 length: 151 > 1
[  288.531994][T10923] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2016'.
[  288.554115][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'.
[  288.557143][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'.
[  288.618906][T10930] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2021'.
[  288.623152][T10930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2021'.
[  288.893059][T10932] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2022'.
[  288.925091][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2022'.
[  289.276827][T10942] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2025'.
[  289.655002][T10962] netlink: 'syz.4.2034': attribute type 3 has an invalid length.
[  289.658382][T10962] netlink: 'syz.4.2034': attribute type 1 has an invalid length.
[  289.662145][T10962] __nla_validate_parse: 1 callbacks suppressed
[  289.662161][T10962] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2034'.
[  291.261241][T10995] netlink: 'syz.3.2049': attribute type 40 has an invalid length.
[  291.351342][T10995] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.387482][ T5873] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  291.529779][T11015] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2058'.
[  291.565252][T11017] netlink: 'syz.3.2059': attribute type 29 has an invalid length.
[  291.828151][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'.
[  291.889726][T11032] netlink: 'syz.1.2060': attribute type 1 has an invalid length.
[  293.254538][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'.
[  293.259987][T11058] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2075'.
[  293.391550][T11073] netlink: 'syz.4.2082': attribute type 10 has an invalid length.
[  293.394120][T11073] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2082'.
[  293.765025][ T5873] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[  293.819175][T11090] netlink: 'syz.3.2089': attribute type 3 has an invalid length.
[  293.825702][T11090] netlink: 'syz.3.2089': attribute type 2 has an invalid length.
[  293.829241][T11090] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.2089'.
[  293.881308][T11093] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2090'.
[  294.462850][T11109] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2098'.
[  294.493279][T11109] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2098'.
[  295.725053][T11128] netlink: 'syz.1.2106': attribute type 5 has an invalid length.
[  296.059403][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'.
[  296.062914][T11146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2115'.
[  296.066108][T11146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2115'.
[  297.256645][T11182] netlink: 'syz.3.2131': attribute type 15 has an invalid length.
[  297.356816][T11179] delete_channel: no stack
[  297.464207][T11196] netlink: 'syz.3.2138': attribute type 1 has an invalid length.
[  297.466690][T11196] netlink: 'syz.3.2138': attribute type 4 has an invalid length.
[  297.471502][T11196] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2138'.
[  297.477242][T11196] netlink: 'syz.3.2138': attribute type 1 has an invalid length.
[  297.480208][T11196] netlink: 'syz.3.2138': attribute type 4 has an invalid length.
[  297.482565][T11196] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2138'.
[  297.545043][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'.
[  297.665638][T11204] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2141'.
[  297.666440][T11205] batadv_slave_1: entered promiscuous mode
[  297.673089][T11205] batadv_slave_1: entered allmulticast mode
[  298.241834][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2156'.
[  298.245917][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2156'.
[  298.363567][T11244] netlink: 'syz.1.2159': attribute type 21 has an invalid length.
[  298.367599][T11244] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'.
[  298.372354][T11244] netlink: 'syz.1.2159': attribute type 5 has an invalid length.
[  298.762244][T11264] netlink: 'syz.1.2167': attribute type 10 has an invalid length.
[  302.405652][T11367] netlink: 'syz.3.2214': attribute type 40 has an invalid length.
[  302.443423][T11370] __nla_validate_parse: 2 callbacks suppressed
[  302.443434][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2215'.
[  302.454399][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2215'.
[  302.490894][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'.
[  302.501189][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2217'.
[  303.397389][T11435] netlink: 'syz.1.2247': attribute type 3 has an invalid length.
[  303.406841][T11435] netlink: 'syz.1.2247': attribute type 1 has an invalid length.
[  303.411289][T11435] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.2247'.
[  304.156547][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'.
[  304.171903][T11466] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2260'.
[  304.636299][T11471] netlink: 'syz.3.2262': attribute type 10 has an invalid length.
[  304.640401][T11471] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2262'.
[  305.975644][T11494] ------------[ cut here ]------------
[  305.977987][T11494] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  305.989135][T11494] WARNING: CPU: 1 PID: 11494 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20
[  305.993360][T11494] Modules linked in:
SYZFAIL: failed to recv rpc
[  305.995977][T11494] CPU: 1 UID: 0 PID: 11494 Comm: syz.1.2273 Not tainted syzkaller #0 PREEMPT(full) 
[  306.001152][T11494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  306.005095][T11494] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  306.008533][T11494] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  306.016344][T11494] RSP: 0018:ffffc9000374ef08 EFLAGS: 00010282
[  306.018946][T11494] RAX: 5e1a5b35e2e97300 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  306.022119][T11494] RDX: ffffc90022f5e000 RSI: 000000000004fba0 RDI: 000000000004fba1
[  306.025760][T11494] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
[  306.029468][T11494] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888120f3e258
[  306.032702][T11494] R13: ffff888120f3e278 R14: ffff888120f3e290 R15: 00000000ffffdfcc
[  306.035898][T11494] FS:  00007ff5497e36c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  306.039705][T11494] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  306.042343][T11494] CR2: 0000001b33919ff8 CR3: 0000000110f50000 CR4: 00000000000006f0
[  306.045617][T11494] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  306.048944][T11494] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  306.052145][T11494] Call Trace:
[  306.053516][T11494]  <TASK>
[  306.054789][T11494]  reg_set_min_max+0x214/0x300
[  306.056766][T11494]  check_cond_jmp_op+0x1625/0x2910
[  306.058984][T11494]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  306.061252][T11494]  ? do_check+0x4531/0xe520
[  306.063115][T11494]  ? kfree+0x18e/0x440
[  306.064743][T11494]  do_check+0x6751/0xe520
[  306.066596][T11494]  ? __pfx_do_check+0x10/0x10
[  306.068533][T11494]  ? do_check_common+0x1933/0x24f0
[  306.070793][T11494]  do_check_common+0x1949/0x24f0
[  306.072866][T11494]  bpf_check+0x1746a/0x1d2e0
[  306.074827][T11494]  ? trace_call_bpf+0xb7/0x850
[  306.076788][T11494]  ? trace_call_bpf+0x5ba/0x850
[  306.078993][T11494]  ? rcu_is_watching+0x15/0xb0
[  306.081018][T11494]  ? __schedule+0x17ae/0x4cc0
[  306.082960][T11494]  ? irqentry_enter+0x3d/0x60
[  306.084914][T11494]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  306.087245][T11494]  ? perf_trace_preemptirq_template+0x280/0x340
[  306.089876][T11494]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  306.092527][T11494]  ? __pfx_bpf_check+0x10/0x10
[  306.094510][T11494]  ? trace_irq_disable+0x37/0x110
[  306.096581][T11494]  ? preempt_schedule_irq+0xde/0x150
[  306.098866][T11494]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  306.101229][T11494]  ? irqentry_exit+0x74/0x90
[  306.103099][T11494]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.105187][T11494]  ? security_bpf_prog_load+0xb3/0x310
[  306.107432][T11494]  ? security_bpf_prog_load+0x2a8/0x310
[  306.109930][T11494]  ? security_bpf_prog_load+0x7f/0x310
[  306.112187][T11494]  bpf_prog_load+0x1318/0x1930
[  306.114179][T11494]  ? __pfx_bpf_prog_load+0x10/0x10
[  306.116283][T11494]  ? bpf_lsm_bpf+0x9/0x20
[  306.118076][T11494]  ? security_bpf+0x7e/0x300
[  306.120131][T11494]  __sys_bpf+0x528/0x870
[  306.121934][T11494]  ? __pfx___sys_bpf+0x10/0x10
[  306.123923][T11494]  __x64_sys_bpf+0x7c/0x90
[  306.125780][T11494]  do_syscall_64+0xfa/0x3b0
[  306.128184][T11494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.131138][T11494]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  306.133681][T11494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.136102][T11494] RIP: 0033:0x7ff54898ebe9
[  306.137960][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.145890][T11494] RSP: 002b:00007ff5497e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  306.149385][T11494] RAX: ffffffffffffffda RBX: 00007ff548bc6090 RCX: 00007ff54898ebe9
[  306.152621][T11494] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  306.155836][T11494] RBP: 00007ff548a11e19 R08: 0000000000000000 R09: 0000000000000000
[  306.159260][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.162471][T11494] R13: 00007ff548bc6128 R14: 00007ff548bc6090 R15: 00007ffdf0cfe5f8
[  306.165667][T11494]  </TASK>
[  306.166917][T11494] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  306.169814][T11494] CPU: 1 UID: 0 PID: 11494 Comm: syz.1.2273 Not tainted syzkaller #0 PREEMPT(full) 
[  306.173548][T11494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.177481][T11494] Call Trace:
[  306.178815][T11494]  <TASK>
[  306.179963][T11494]  dump_stack_lvl+0x99/0x250
[  306.181834][T11494]  ? __asan_memcpy+0x40/0x70
[  306.183664][T11494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.185727][T11494]  ? __pfx__printk+0x10/0x10
[  306.187596][T11494]  vpanic+0x281/0x750
[  306.189178][T11494]  ? __pfx__printk+0x10/0x10
[  306.191030][T11494]  ? __pfx_vpanic+0x10/0x10
[  306.192902][T11494]  ? is_bpf_text_address+0x26/0x2b0
[  306.194965][T11494]  panic+0xb9/0xc0
[  306.196429][T11494]  ? __pfx_panic+0x10/0x10
[  306.198218][T11494]  __warn+0x31b/0x4b0
[  306.199857][T11494]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  306.202159][T11494]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  306.204438][T11494]  report_bug+0x2be/0x4f0
[  306.206230][T11494]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  306.208518][T11494]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  306.210851][T11494]  ? reg_bounds_sanity_check+0x6e8/0xc20
[  306.213130][T11494]  handle_bug+0x84/0x160
[  306.214850][T11494]  exc_invalid_op+0x1a/0x50
[  306.216717][T11494]  asm_exc_invalid_op+0x1a/0x20
[  306.218615][T11494] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  306.221105][T11494] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  306.228813][T11494] RSP: 0018:ffffc9000374ef08 EFLAGS: 00010282
[  306.231256][T11494] RAX: 5e1a5b35e2e97300 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  306.234380][T11494] RDX: ffffc90022f5e000 RSI: 000000000004fba0 RDI: 000000000004fba1
[  306.237581][T11494] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
[  306.240775][T11494] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888120f3e258
[  306.243885][T11494] R13: ffff888120f3e278 R14: ffff888120f3e290 R15: 00000000ffffdfcc
[  306.247113][T11494]  reg_set_min_max+0x214/0x300
[  306.249070][T11494]  check_cond_jmp_op+0x1625/0x2910
[  306.251205][T11494]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  306.253441][T11494]  ? do_check+0x4531/0xe520
[  306.255309][T11494]  ? kfree+0x18e/0x440
[  306.256984][T11494]  do_check+0x6751/0xe520
[  306.258898][T11494]  ? __pfx_do_check+0x10/0x10
[  306.260837][T11494]  ? do_check_common+0x1933/0x24f0
[  306.262941][T11494]  do_check_common+0x1949/0x24f0
[  306.264989][T11494]  bpf_check+0x1746a/0x1d2e0
[  306.266901][T11494]  ? trace_call_bpf+0xb7/0x850
[  306.268867][T11494]  ? trace_call_bpf+0x5ba/0x850
[  306.270863][T11494]  ? rcu_is_watching+0x15/0xb0
[  306.272819][T11494]  ? __schedule+0x17ae/0x4cc0
[  306.274740][T11494]  ? irqentry_enter+0x3d/0x60
[  306.276630][T11494]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  306.278914][T11494]  ? perf_trace_preemptirq_template+0x280/0x340
[  306.281481][T11494]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  306.284172][T11494]  ? __pfx_bpf_check+0x10/0x10
[  306.286108][T11494]  ? trace_irq_disable+0x37/0x110
[  306.288193][T11494]  ? preempt_schedule_irq+0xde/0x150
[  306.290375][T11494]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  306.292705][T11494]  ? irqentry_exit+0x74/0x90
[  306.294570][T11494]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.296695][T11494]  ? security_bpf_prog_load+0xb3/0x310
[  306.298917][T11494]  ? security_bpf_prog_load+0x2a8/0x310
[  306.301153][T11494]  ? security_bpf_prog_load+0x7f/0x310
[  306.303355][T11494]  bpf_prog_load+0x1318/0x1930
[  306.305349][T11494]  ? __pfx_bpf_prog_load+0x10/0x10
[  306.307458][T11494]  ? bpf_lsm_bpf+0x9/0x20
[  306.309256][T11494]  ? security_bpf+0x7e/0x300
[  306.311130][T11494]  __sys_bpf+0x528/0x870
[  306.312815][T11494]  ? __pfx___sys_bpf+0x10/0x10
[  306.314810][T11494]  __x64_sys_bpf+0x7c/0x90
[  306.316635][T11494]  do_syscall_64+0xfa/0x3b0
[  306.318480][T11494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.320985][T11494]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  306.323502][T11494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.325924][T11494] RIP: 0033:0x7ff54898ebe9
[  306.327748][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.335466][T11494] RSP: 002b:00007ff5497e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  306.338732][T11494] RAX: ffffffffffffffda RBX: 00007ff548bc6090 RCX: 00007ff54898ebe9
[  306.341884][T11494] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  306.344962][T11494] RBP: 00007ff548a11e19 R08: 0000000000000000 R09: 0000000000000000
[  306.348036][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.351311][T11494] R13: 00007ff548bc6128 R14: 00007ff548bc6090 R15: 00007ffdf0cfe5f8
[  306.354436][T11494]  </TASK>
[  306.356462][T11494] Kernel Offset: disabled
[  306.358177][T11494] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:55:06  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81cb0414 RBX=0000000000000000 RCX=ffff88810623d640 RDX=0000000000000000
RSI=ffffffff8be332e0 RDI=ffffffff8be332a0 RBP=ffffc900034ef778 RSP=ffffc900034ef680
R8 =0000000000000000 R9 =ffffffff81cb03c7 R10=ffffe8ff1465ba9c R11=fffff91fe28cb755
R12=0000000000000001 R13=1ffff9200069dedc R14=ffffffff81cb03c7 R15=ffffffff8e19a9e0
RIP=ffffffff81cb0414 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ffd22cdde8 CR3=0000000027e54000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fcabf012e53
XMM06=0000000000000000 00007fcabf012e4d XMM07=0000000000000000 00007fcabf012e61
XMM08=0000000000000000 00007fcabf012ee7 XMM09=0000000000000000 00007fcabf012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000052c64 RDI=0000000000052c65 RBP=00000000000003f8 RSP=ffffc9000374e6b0
R8 =ffff88801f0e8237 R9 =1ffff11003e1d046 R10=dffffc0000000000 R11=ffffffff854ef9f0
R12=dffffc0000000000 R13=ffffffff99af98ef R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efa6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff5497e36c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33919ff8 CR3=0000000110f50000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ffffffffff00ff00 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
