last executing test programs:

1m4.117960494s ago: executing program 1 (id=695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0x2, r0}, 0x38)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x20)

1m4.117589502s ago: executing program 0 (id=696):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xfffe, @mcast1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120)

1m3.9823789s ago: executing program 0 (id=697):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)

1m3.900183699s ago: executing program 1 (id=698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m3.899920502s ago: executing program 0 (id=699):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000680)=""/29, 0x1d}, 0x40000010)

1m3.797627404s ago: executing program 0 (id=700):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

1m3.797436339s ago: executing program 1 (id=701):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

1m3.687689591s ago: executing program 1 (id=702):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102)

1m3.401769079s ago: executing program 0 (id=704):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)

1m3.349435914s ago: executing program 1 (id=705):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0)

1m3.239495103s ago: executing program 0 (id=706):
socket$kcm(0xa, 0x3, 0x0)

1m3.144394269s ago: executing program 32 (id=706):
socket$kcm(0xa, 0x3, 0x0)

1m3.113215705s ago: executing program 1 (id=708):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

1m2.982998661s ago: executing program 33 (id=708):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

1.083902882s ago: executing program 4 (id=1655):
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
write$cgroup_int(r0, &(0x7f0000000140)=0x5866b8, 0x12)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60049711000a7401", 0x1b}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r4}, 0x10)
r5 = socket$kcm(0x2, 0x1, 0x84)
close(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000a00}, 0x52cc)

538.3094ms ago: executing program 3 (id=1669):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003340)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x6, 0x1, '#\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x840)

455.706396ms ago: executing program 3 (id=1670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=@alg={0xe0, 0x10, 0x129, 0x70bd28, 0x25dfdbfe, {{'drbg_nopr_ctr_aes256\x00'}, '\x00', '\x00', 0x400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x48804}, 0x240440c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0xb1}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000005800)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4884)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x801, 0x0, 0x0, {0xdbfa284ca5356c, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0xb00, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x45, 0x6, "131cf2d981766f8cee7ef304737dba9b0ec64effc8a1fdaa89a1426f22e48a41cace53ff864580bdeac7d150ac42c69751a4887262977225aeb854a733cf93f26e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "0272004c2140f01847951fb1aba708e826322660288f879120f8efc8d86e98e4348913b1fa85896d8055049a0644e8845cdde8810e7c6dc309573acb5c2e2fc71f9bd374399d3784134d"}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFT_MSG_DELRULE={0x168, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x39}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xe5, 0x7, 0x1, 0x0, "c2ddf5b47f7a289d8dc739e0c8efae86297ee1cb0e9ebfb925854010ff352d353a289e49e5852f31b1541b0f997b791706c01fb0bfff2f38aeee59997144ece273aad5b85b7688d5758bd72828381c1be152ab67be43b1867e50c3d292179457643deacd9933cb60f7d64a1e5120cda69ecebc4d0854c774d3a4debf65d5c4704f166c1fd6e46349139825cbbb18c796491b75de28f69afd8ec5cc3c14e28fccaed39edd9cb06aad4ea8ec077992cbe77638dab9e72e30aa5f3705ae3f4c0fd945958628600c97451d99393eb46b57b9efaeb7d63c3c3f14af58911a15e56991cd"}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x27, 0x6, "8a386468e744ab866f20bb4cd11eb00ff05eab0677a8032d5c4d74bd7d07cd00c07935"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x268, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x1cc, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9f}]}}}, {0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2b0}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x56}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x49}]}}}, {0x74, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x620}}, 0x8000)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000a00050015002200000005000500020000000500010006"], 0x64}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000740)=r1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000008f000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008306f909000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500ca7ce5e0b19fc088ec84f6000085000000b7000000009d84ced49d2bf2543b5dbb5cf2d8b37520cca8bf1d544c41356ff2ddefc14cfb835b0e8a87e9e795ef266f298546a3abddb91c4e34139dde13b63fccff29142420dff6d4d6c16302a9e24b43879d8dabcd39891e40326e7bc1c37581ed5239cf0c7ffc2a0beeada5692533a67f9bf4dd27b30b235f02ec605068324a1b25b3a1a7"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)

329.745151ms ago: executing program 3 (id=1672):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x880)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000840)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xc, 0xc, 0xf, 0x5, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @tail_call], &(0x7f0000000480)='GPL\x00', 0xffffffff, 0x8f, &(0x7f0000000780)=""/143, 0x40f00, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x4, 0x0, 0x6, 0xf97}, 0x10, 0x6a1c, 0xffffffffffffffff, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x3, 0x5, 0xf, 0x9}, {0x2, 0x4, 0x4, 0x8}], 0x10, 0x8}, 0x94)

329.381132ms ago: executing program 2 (id=1673):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
close(r0)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10)

237.010209ms ago: executing program 2 (id=1674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040092}, 0x100440d0)

230.378328ms ago: executing program 4 (id=1675):
r0 = socket$kcm(0x25, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

220.075962ms ago: executing program 2 (id=1676):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080211000000040000a118000200e002000100000e1208000f0100810401a80016ea1f000440032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

138.40324ms ago: executing program 3 (id=1677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

138.230293ms ago: executing program 2 (id=1678):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

138.01094ms ago: executing program 4 (id=1679):
r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x200, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

89.688599ms ago: executing program 4 (id=1680):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

89.459415ms ago: executing program 2 (id=1681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4015}, 0x8800)

89.278562ms ago: executing program 2 (id=1682):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xa}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0xa9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100))
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfe33)

83.847538ms ago: executing program 4 (id=1683):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$kcm(0x2, 0x1, 0x84)
close(r2)

328.087µs ago: executing program 4 (id=1684):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x224, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

161.938µs ago: executing program 3 (id=1685):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x2, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r2, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

0s ago: executing program 3 (id=1686):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
close(0xffffffffffffffff)
r2 = socket$kcm(0x23, 0x2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x8}, 0xc)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000ac0))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3864' (ED25519) to the list of known hosts.
syzkaller login: [   48.043466][ T5771] cgroup: Unknown subsys name 'net'
[   48.133290][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.139643][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.554676][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.457452][ T5850] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.683890][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.806103][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   58.020710][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.023632][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.026708][ T5865] bridge_slave_0: entered allmulticast mode
[   58.032317][ T5865] bridge_slave_0: entered promiscuous mode
[   58.036483][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.039819][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.042499][ T5865] bridge_slave_1: entered allmulticast mode
[   58.045486][ T5865] bridge_slave_1: entered promiscuous mode
[   58.080486][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.090428][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.112827][ T5865] team0: Port device team_slave_0 added
[   58.127536][ T5865] team0: Port device team_slave_1 added
[   58.150320][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.152626][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.162248][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.168964][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.171355][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.180124][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.217308][ T5865] hsr_slave_0: entered promiscuous mode
[   58.220013][ T5865] hsr_slave_1: entered promiscuous mode
[   58.325926][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.331449][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.335788][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.340324][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.360506][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.362978][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.365650][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.367977][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.394390][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.405233][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.408080][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.415581][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   58.422253][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.424604][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.431537][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.433917][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.519044][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.540820][ T5865] veth0_vlan: entered promiscuous mode
[   58.545667][ T5865] veth1_vlan: entered promiscuous mode
[   58.565056][ T5865] veth0_macvtap: entered promiscuous mode
[   58.568684][ T5865] veth1_macvtap: entered promiscuous mode
[   58.579097][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.585717][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.593661][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.596913][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.600337][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.603377][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.247043][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.250630][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.254090][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.257504][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.261049][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.264504][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.267798][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.271761][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.274930][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.277691][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.285026][ T5918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.308108][ T5916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.314308][ T5916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.318206][ T5916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.321620][ T5916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.357868][ T5886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.419714][ T5886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.504390][ T5886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.628448][ T5913] chnl_net:caif_netlink_parms(): no params data found
[   59.658615][ T5912] chnl_net:caif_netlink_parms(): no params data found
[   59.670541][ T5908] chnl_net:caif_netlink_parms(): no params data found
[   59.724241][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.726771][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.729827][ T5913] bridge_slave_0: entered allmulticast mode
[   59.732905][ T5913] bridge_slave_0: entered promiscuous mode
[   59.736329][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.738789][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.741726][ T5913] bridge_slave_1: entered allmulticast mode
[   59.744607][ T5913] bridge_slave_1: entered promiscuous mode
[   59.797590][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.827683][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.857293][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.861969][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.864392][ T5912] bridge_slave_0: entered allmulticast mode
[   59.867125][ T5912] bridge_slave_0: entered promiscuous mode
[   59.884567][ T5913] team0: Port device team_slave_0 added
[   59.888770][ T5913] team0: Port device team_slave_1 added
[   59.902506][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.904877][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.907536][ T5908] bridge_slave_0: entered allmulticast mode
[   59.910760][ T5908] bridge_slave_0: entered promiscuous mode
[   59.914191][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.916777][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.919916][ T5908] bridge_slave_1: entered allmulticast mode
[   59.923287][ T5908] bridge_slave_1: entered promiscuous mode
[   59.926464][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.933656][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.936552][ T5912] bridge_slave_1: entered allmulticast mode
[   59.940614][ T5912] bridge_slave_1: entered promiscuous mode
[   59.966354][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.968613][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.976793][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.998252][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.001636][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.011067][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.024798][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.030814][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.042026][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.047576][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.103435][ T5908] team0: Port device team_slave_0 added
[   60.119831][ T5913] hsr_slave_0: entered promiscuous mode
[   60.122292][ T5913] hsr_slave_1: entered promiscuous mode
[   60.124453][ T5913] debugfs: 'hsr0' already exists in 'hsr'
[   60.126581][ T5913] Cannot create hsr debugfs directory
[   60.130766][ T5912] team0: Port device team_slave_0 added
[   60.134286][ T5908] team0: Port device team_slave_1 added
[   60.138183][ T5912] team0: Port device team_slave_1 added
[   60.188798][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.193818][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.204574][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.221593][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.224246][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.234828][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.240649][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.243395][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.254822][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.278879][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.283656][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.291949][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.352588][ T5908] hsr_slave_0: entered promiscuous mode
[   60.354795][ T5908] hsr_slave_1: entered promiscuous mode
[   60.357327][ T5908] debugfs: 'hsr0' already exists in 'hsr'
[   60.360108][ T5908] Cannot create hsr debugfs directory
[   60.405819][ T5912] hsr_slave_0: entered promiscuous mode
[   60.408118][ T5912] hsr_slave_1: entered promiscuous mode
[   60.411781][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[   60.413902][ T5912] Cannot create hsr debugfs directory
[   60.599686][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.609846][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.623042][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.631653][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.654687][ T5908] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.662144][ T5908] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.666800][ T5908] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.674194][ T5908] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.700497][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.702953][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.705325][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.707657][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.772420][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.788821][ T5886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.803706][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.811756][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.815723][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.831905][ T5913] 8021q: adding VLAN 0 to HW filter on device team0
[   60.841765][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.844450][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.855788][ T5908] 8021q: adding VLAN 0 to HW filter on device team0
[   60.860635][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.863221][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.875154][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.877704][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.887250][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.889694][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.923510][ T5913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.041029][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.071654][ T5913] veth0_vlan: entered promiscuous mode
[   61.077223][ T5913] veth1_vlan: entered promiscuous mode
[   61.109646][ T5913] veth0_macvtap: entered promiscuous mode
[   61.115675][ T5913] veth1_macvtap: entered promiscuous mode
[   61.123300][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.135111][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.142615][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.156350][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.160146][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.163789][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.167188][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.228486][ T5908] veth0_vlan: entered promiscuous mode
[   61.237281][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.238829][ T5908] veth1_vlan: entered promiscuous mode
[   61.248484][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.281814][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.284895][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.294641][ T5908] veth0_macvtap: entered promiscuous mode
[   61.300130][ T5908] veth1_macvtap: entered promiscuous mode
[   61.313082][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.327745][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.341736][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.345328][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.361017][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.365663][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.370418][ T5916] Bluetooth: hci0: command tx timeout
[   61.372956][ T5916] Bluetooth: hci1: command tx timeout
[   61.375030][ T5916] Bluetooth: hci2: command tx timeout
[   61.506499][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.514387][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.544704][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.547838][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.595709][ T5965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18'.
[   61.759286][    C1] hrtimer: interrupt took 53627 ns
[   62.144851][ T5990] netlink: 'syz.2.28': attribute type 22 has an invalid length.
[   62.147929][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   62.419434][ T5997] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   62.423627][ T5997] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   62.596296][ T5886] bridge_slave_1: left allmulticast mode
[   62.598665][ T5886] bridge_slave_1: left promiscuous mode
[   62.604272][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.615899][ T5886] bridge_slave_0: left allmulticast mode
[   62.618229][ T5886] bridge_slave_0: left promiscuous mode
[   62.621054][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.895011][ T6015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.017744][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.025477][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.030997][ T5886] bond0 (unregistering): Released all slaves
[   63.213918][ T5886] hsr_slave_0: left promiscuous mode
[   63.218179][ T5886] hsr_slave_1: left promiscuous mode
[   63.221902][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.224818][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.228654][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.233242][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.247036][ T5886] veth1_macvtap: left promiscuous mode
[   63.250189][ T5886] veth0_macvtap: left promiscuous mode
[   63.252777][ T5886] veth1_vlan: left promiscuous mode
[   63.255127][ T5886] veth0_vlan: left promiscuous mode
[   63.459736][ T5918] Bluetooth: hci2: command tx timeout
[   63.462293][ T5918] Bluetooth: hci1: command tx timeout
[   63.464532][ T5918] Bluetooth: hci0: command tx timeout
[   63.547513][ T5886] team0 (unregistering): Port device team_slave_1 removed
[   63.568201][ T5886] team0 (unregistering): Port device team_slave_0 removed
[   63.839151][ T6031] warning: `syz.2.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.857874][ T6031] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   64.260808][ T5912] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.267852][ T5912] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.302805][ T5912] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.324210][ T5912] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.467498][ T6067] Zero length message leads to an empty skb
[   64.962641][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.994814][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[   65.006312][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.009543][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.020794][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.023894][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.540030][ T5918] Bluetooth: hci1: command tx timeout
[   65.543035][ T5914] Bluetooth: hci2: command tx timeout
[   65.545321][ T5916] Bluetooth: hci0: command tx timeout
[   65.584404][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.622681][ T5912] veth0_vlan: entered promiscuous mode
[   65.645848][ T5912] veth1_vlan: entered promiscuous mode
[   65.662504][ T6097] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.62'.
[   65.691279][ T5912] veth0_macvtap: entered promiscuous mode
[   65.702064][ T5912] veth1_macvtap: entered promiscuous mode
[   65.718603][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.726735][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.735725][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.742078][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.746069][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.756096][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.835704][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.838710][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.862211][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.865068][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.920845][ T6105] netlink: 'syz.2.65': attribute type 5 has an invalid length.
[   65.925353][ T6105] netlink: 176 bytes leftover after parsing attributes in process `syz.2.65'.
[   65.953233][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'.
[   66.033914][ T5916] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[   66.208433][ T6116] : renamed from wg2 (while UP)
[   66.623267][ T6140] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[   66.740820][   T52] wlan1: Trigger new scan to find an IBSS to join
[   66.782199][ T6142] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.83'.
[   66.786756][ T6142] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.83'.
[   67.122823][ T6152] netlink: 'syz.1.86': attribute type 21 has an invalid length.
[   67.165640][ T6152] netlink: 'syz.1.86': attribute type 6 has an invalid length.
[   67.168933][ T6152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.86'.
[   67.305113][ T6158] netlink: 'syz.1.88': attribute type 3 has an invalid length.
[   67.308153][ T6158] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.88'.
[   67.346010][ T6156] delete_channel: no stack
[   67.466837][ T6156] delete_channel: no stack
[   67.557104][ T6169] tap0: tun_chr_ioctl cmd 2148553947
[   67.614533][ T5916] Bluetooth: hci0: command tx timeout
[   67.616839][ T5916] Bluetooth: hci1: command tx timeout
[   67.618553][ T5918] Bluetooth: hci2: command tx timeout
[   67.654538][ T6156] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.89'.
[   68.188105][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.102'.
[   68.203112][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.102'.
[   68.640354][ T6204] wg0 speed is unknown, defaulting to 1000
[   68.642808][ T6204] wg0 speed is unknown, defaulting to 1000
[   68.645712][ T6204] wg0 speed is unknown, defaulting to 1000
[   68.652220][ T6204] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.672412][ T6204] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   68.691205][ T6204] wg0 speed is unknown, defaulting to 1000
[   68.694236][ T6204] wg0 speed is unknown, defaulting to 1000
[   68.697658][ T6204] wg0 speed is unknown, defaulting to 1000
[   68.711226][ T6206] netlink: 180 bytes leftover after parsing attributes in process `syz.0.110'.
[   68.824208][ T6212] syz.1.112 uses obsolete (PF_INET,SOCK_PACKET)
[   69.143152][ T6225] netlink: 182 bytes leftover after parsing attributes in process `syz.0.117'.
[   69.486103][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.699852][ T5918] Bluetooth: hci1: command tx timeout
[   69.717676][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.120'.
[   69.724494][ T6233] netlink: 'syz.0.120': attribute type 10 has an invalid length.
[   69.728012][ T6233] bond0: entered promiscuous mode
[   69.730709][ T6233] bond_slave_0: entered promiscuous mode
[   69.733539][ T6233] bond_slave_1: entered promiscuous mode
[   69.736442][ T6233] bridge0: port 3(bond0) entered blocking state
[   69.741659][ T6233] bridge0: port 3(bond0) entered disabled state
[   69.744907][ T6233] bond0: entered allmulticast mode
[   69.747176][ T6233] bond_slave_0: entered allmulticast mode
[   69.750139][ T6233] bond_slave_1: entered allmulticast mode
[   69.755596][ T6233] bridge0: port 3(bond0) entered blocking state
[   69.758423][ T6233] bridge0: port 3(bond0) entered forwarding state
[   69.777399][ T6233] netlink: 'syz.0.120': attribute type 4 has an invalid length.
[   69.865972][   T68] wlan1: Trigger new scan to find an IBSS to join
[   70.160643][ T6253] netlink: 'syz.2.130': attribute type 3 has an invalid length.
[   70.163670][ T6253] netlink: 'syz.2.130': attribute type 3 has an invalid length.
[   71.212102][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.214459][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.246892][ T6290] netlink: 'syz.0.148': attribute type 27 has an invalid length.
[   71.251958][ T6290] netlink: 'syz.0.148': attribute type 3 has an invalid length.
[   72.650941][   T68] wlan1: Trigger new scan to find an IBSS to join
[   72.730581][   T68] wlan1: Creating new IBSS network, BSSID 1e:61:1e:15:59:7f
[   73.273536][ T6346] __nla_validate_parse: 7 callbacks suppressed
[   73.273550][ T6346] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.170'.
[   73.381561][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   73.470407][ T6354] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.174'.
[   73.509409][ T6354] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.174'.
[   73.771222][ T6369] netlink: 84 bytes leftover after parsing attributes in process `syz.2.181'.
[   74.395211][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'.
[   74.592831][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'.
[   74.596442][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'.
[   74.614275][ T6397] Driver unsupported XDP return value 0 on prog  (id 66) dev N/A, expect packet loss!
[   75.364168][ T6438] netlink: 48 bytes leftover after parsing attributes in process `syz.1.214'.
[   75.650136][ T6449] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.217'.
[   76.563690][ T6470] netlink: 'syz.0.227': attribute type 13 has an invalid length.
[   76.573304][ T6470] netlink: 'syz.0.227': attribute type 17 has an invalid length.
[   78.052855][ T6470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.063752][ T6477] batadv_slave_1: entered promiscuous mode
[   78.096387][ T6470] syz.0.227 (6470) used greatest stack depth: 19704 bytes left
[   78.418096][ T6492] __nla_validate_parse: 3 callbacks suppressed
[   78.418139][ T6492] netlink: 68 bytes leftover after parsing attributes in process `syz.1.232'.
[   78.437477][ T6492] netlink: 68 bytes leftover after parsing attributes in process `syz.1.232'.
[   78.726647][ T6502] netlink: 'syz.0.239': attribute type 58 has an invalid length.
[   78.729993][ T6502] netlink: 144 bytes leftover after parsing attributes in process `syz.0.239'.
[   78.767788][ T6506] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.241'.
[   78.772405][ T6506] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   78.844661][ T6508] netlink: 184 bytes leftover after parsing attributes in process `syz.0.242'.
[   78.933062][ T6514] netlink: 'syz.0.244': attribute type 33 has an invalid length.
[   78.945954][ T6514] netlink: 164 bytes leftover after parsing attributes in process `syz.0.244'.
[   80.225297][ T6563] netlink: 'syz.0.266': attribute type 1 has an invalid length.
[   81.635288][ T6587] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.275'.
[   81.710472][    T9] cfg80211: failed to load regulatory.db
[   81.980504][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.280'.
[   82.163377][ T6601] netlink: 'syz.0.282': attribute type 4 has an invalid length.
[   82.275011][ T6607] netlink: 196 bytes leftover after parsing attributes in process `syz.1.284'.
[   82.913483][ T6621] netlink: 'syz.1.290': attribute type 9 has an invalid length.
[   82.917066][ T6621] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.290'.
[   84.531777][ T6647] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.302'.
[   84.592245][ T6655] netlink: 'syz.2.306': attribute type 1 has an invalid length.
[   85.238931][ T6669] netlink: 'syz.1.310': attribute type 3 has an invalid length.
[   85.242305][ T6669] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.310'.
[   85.702640][ T6677] netlink: 144 bytes leftover after parsing attributes in process `syz.2.314'.
[   85.745279][ T6679] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[   85.846966][ T6687] netlink: 92 bytes leftover after parsing attributes in process `syz.1.319'.
[   85.854230][ T6687] netlink: 92 bytes leftover after parsing attributes in process `syz.1.319'.
[   85.958826][ T6697] netlink: 'syz.2.324': attribute type 9 has an invalid length.
[   85.967866][ T6697] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.324'.
[   86.082904][ T6701] openvswitch: netlink: Missing valid actions attribute.
[   86.085908][ T6701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.673000][ T6723] sit0: entered promiscuous mode
[   87.232758][ T6742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.346'.
[   87.606936][ T6725] syz.1.338 (6725) used greatest stack depth: 19664 bytes left
[   87.643566][ T6764] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.355'.
[   87.668479][ T6766] netlink: 'syz.1.357': attribute type 21 has an invalid length.
[   87.890213][ T6781] netlink: 'syz.0.364': attribute type 13 has an invalid length.
[   87.953904][ T6785] netlink: 'syz.2.366': attribute type 1 has an invalid length.
[   87.961037][ T6781] bridge0: port 3(bond0) entered disabled state
[   87.963796][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.967489][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.051052][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.058767][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.227703][ T5886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.231659][ T5886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.240834][ T5886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.244458][ T5886] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.278538][ T6799] delete_channel: no stack
[   88.281159][ T6799] delete_channel: no stack
[   89.596291][ T6848] netlink: 51563 bytes leftover after parsing attributes in process `syz.1.394'.
[   89.933547][ T6886] netlink: 'syz.2.409': attribute type 21 has an invalid length.
[   89.938543][ T6886] netlink: 156 bytes leftover after parsing attributes in process `syz.2.409'.
[   89.947074][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'.
[   91.525371][ T6955] netlink: 'syz.2.437': attribute type 21 has an invalid length.
[   91.971767][ T6970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.443'.
[   92.653421][ T6992] netlink: 830 bytes leftover after parsing attributes in process `syz.1.450'.
[   93.275672][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'.
[   93.281568][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'.
[   93.537665][ T7036] netlink: 'syz.0.469': attribute type 21 has an invalid length.
[   93.888089][ T7047] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[   93.891361][ T7047] netlink: 'syz.0.474': attribute type 4 has an invalid length.
[   93.895601][ T7047] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.474'.
[   94.447850][ T7059] netlink: 830 bytes leftover after parsing attributes in process `syz.2.479'.
[   94.846485][ T7061] netlink: 15478 bytes leftover after parsing attributes in process `syz.1.480'.
[   95.098693][ T7074] netlink: 'syz.2.486': attribute type 2 has an invalid length.
[   95.102801][ T7074] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.486'.
[   95.363421][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[   95.366371][ T7098] netlink: 33 bytes leftover after parsing attributes in process `syz.1.498'.
[   95.373501][ T7098] netlink: 33 bytes leftover after parsing attributes in process `syz.1.498'.
[   96.604439][ T7142] netlink: 10 bytes leftover after parsing attributes in process `syz.2.517'.
[   96.871873][ T7159] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.525'.
[   96.962407][ T7163] netlink: 'syz.2.528': attribute type 1 has an invalid length.
[   96.965713][ T7163] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.528'.
[   96.983407][ T7165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.527'.
[   96.987705][ T7165] netlink: 43 bytes leftover after parsing attributes in process `syz.1.527'.
[   96.991419][ T7165] netlink: 'syz.1.527': attribute type 5 has an invalid length.
[   97.085963][ T7172] bpf: Bad value for 'mode'
[   98.037378][ T7212] syz.0.548: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   98.049933][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.0.548 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   98.049952][ T7212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.049960][ T7212] Call Trace:
[   98.049968][ T7212]  <TASK>
[   98.049976][ T7212]  dump_stack_lvl+0x189/0x250
[   98.050001][ T7212]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   98.050026][ T7212]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.050047][ T7212]  ? __pfx__printk+0x10/0x10
[   98.050072][ T7212]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   98.050089][ T7212]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   98.050130][ T7212]  warn_alloc+0x214/0x310
[   98.050158][ T7212]  ? stack_depot_save_flags+0x41b/0x860
[   98.050185][ T7212]  ? __pfx_warn_alloc+0x10/0x10
[   98.050231][ T7212]  ? kasan_save_track+0x4f/0x80
[   98.050253][ T7212]  ? xskq_create+0x56/0x170
[   98.050267][ T7212]  ? xsk_init_queue+0xb0/0x110
[   98.050279][ T7212]  ? xsk_setsockopt+0x57b/0x8d0
[   98.050292][ T7212]  ? do_sock_setsockopt+0x17c/0x1b0
[   98.050308][ T7212]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   98.050318][ T7212]  ? do_syscall_64+0xfa/0x3b0
[   98.050367][ T7212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.050409][ T7212]  __vmalloc_node_range_noprof+0x125/0x12f0
[   98.050539][ T7212]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   98.050583][ T7212]  ? __kasan_kmalloc+0x93/0xb0
[   98.050628][ T7212]  vmalloc_user_noprof+0xad/0xf0
[   98.050650][ T7212]  ? xskq_create+0xbf/0x170
[   98.050676][ T7212]  xskq_create+0xbf/0x170
[   98.050708][ T7212]  xsk_init_queue+0xb0/0x110
[   98.050739][ T7212]  xsk_setsockopt+0x57b/0x8d0
[   98.050794][ T7212]  ? __pfx_xsk_setsockopt+0x10/0x10
[   98.050815][ T7212]  ? __pfx_aa_sk_perm+0x10/0x10
[   98.050849][ T7212]  ? __fget_files+0x2a/0x420
[   98.050859][ T7212]  ? aa_sock_opt_perm+0xff/0x1b0
[   98.050886][ T7212]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   98.050900][ T7212]  ? __pfx_xsk_setsockopt+0x10/0x10
[   98.050925][ T7212]  do_sock_setsockopt+0x17c/0x1b0
[   98.050965][ T7212]  __x64_sys_setsockopt+0x13f/0x1b0
[   98.050999][ T7212]  do_syscall_64+0xfa/0x3b0
[   98.051015][ T7212]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.051033][ T7212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.051047][ T7212]  ? exc_page_fault+0x9f/0xf0
[   98.051075][ T7212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.051086][ T7212] RIP: 0033:0x7fc7d1f8ebe9
[   98.051102][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.051113][ T7212] RSP: 002b:00007fc7d2df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   98.051126][ T7212] RAX: ffffffffffffffda RBX: 00007fc7d21b5fa0 RCX: 00007fc7d1f8ebe9
[   98.051135][ T7212] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   98.051143][ T7212] RBP: 00007fc7d2011e19 R08: 0000000000000004 R09: 0000000000000000
[   98.051150][ T7212] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   98.051158][ T7212] R13: 00007fc7d21b6038 R14: 00007fc7d21b5fa0 R15: 00007fff5f69a058
[   98.051224][ T7212]  </TASK>
[   98.051421][ T7212] Mem-Info:
[   98.210870][ T7212] active_anon:5487 inactive_anon:0 isolated_anon:0
[   98.210870][ T7212]  active_file:11394 inactive_file:38236 isolated_file:0
[   98.210870][ T7212]  unevictable:1768 dirty:308 writeback:0
[   98.210870][ T7212]  slab_reclaimable:9454 slab_unreclaimable:80543
[   98.210870][ T7212]  mapped:18088 shmem:2437 pagetables:1015
[   98.210870][ T7212]  sec_pagetables:0 bounce:0
[   98.210870][ T7212]  kernel_misc_reclaimable:0
[   98.210870][ T7212]  free:249094 free_pcp:28792 free_cma:0
[   98.231899][ T7212] Node 0 active_anon:13024kB inactive_anon:0kB active_file:21116kB inactive_file:17616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44576kB dirty:396kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5928kB pagetables:2544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   98.243842][ T7212] Node 1 active_anon:8924kB inactive_anon:0kB active_file:24460kB inactive_file:135328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27776kB dirty:836kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5676kB pagetables:1516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   98.256914][ T7212] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   98.266895][ T7212] lowmem_reserve[]: 0 811 811 811 811
[   98.268830][ T7212] Node 0 DMA32 free:223148kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13024kB inactive_anon:0kB active_file:21116kB inactive_file:17616kB unevictable:3536kB writepending:396kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:59828kB local_pcp:21552kB free_cma:0kB
[   98.279628][ T7212] lowmem_reserve[]: 0 0 0 0 0
[   98.281306][ T7212] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   98.291276][ T7212] lowmem_reserve[]: 0 0 854 854 854
[   98.293499][ T7212] Node 1 Normal free:299376kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8924kB inactive_anon:0kB active_file:24460kB inactive_file:135328kB unevictable:3536kB writepending:836kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:54968kB local_pcp:34856kB free_cma:0kB
[   98.305112][ T7212] lowmem_reserve[]: 0 0 0 0 0
[   98.306900][ T7212] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   98.311528][ T7212] Node 0 DMA32: 241*4kB (UM) 376*8kB (UME) 92*16kB (UME) 83*32kB (UM) 106*64kB (UME) 49*128kB (UME) 11*256kB (UME) 15*512kB (UME) 9*1024kB (UME) 11*2048kB (UME) 39*4096kB (UM) = 223140kB
[   98.317655][ T7212] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   98.323782][ T7212] Node 1 Normal: 1106*4kB (UME) 787*8kB (UME) 557*16kB (UME) 242*32kB (UME) 105*64kB (UME) 42*128kB (UM) 37*256kB (UME) 23*512kB (UME) 19*1024kB (UE) 1*2048kB (M) 53*4096kB (M) = 299312kB
[   98.331222][ T7212] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   98.334417][ T7212] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   98.337552][ T7212] 52067 total pagecache pages
[   98.339185][ T7212] 0 pages in swap cache
[   98.341514][ T7212] Free swap  = 124996kB
[   98.342970][ T7212] Total swap = 124996kB
[   98.344619][ T7212] 786301 pages RAM
[   98.346125][ T7212] 0 pages HighMem/MovableOnly
[   98.347902][ T7212] 241329 pages reserved
[   98.350078][ T7212] 0 pages cma reserved
[   99.992116][ T7276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.844319][ T5918] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  101.123504][ T7309] netlink: 'syz.2.588': attribute type 1 has an invalid length.
[  101.375036][ T7327] netlink: 'syz.0.594': attribute type 29 has an invalid length.
[  101.475942][ T7337] netlink: 'syz.0.594': attribute type 29 has an invalid length.
[  101.489550][ T7337] netlink: 'syz.0.594': attribute type 29 has an invalid length.
[  101.708056][ T7344] netlink: 'syz.0.601': attribute type 40 has an invalid length.
[  101.863842][ T7349] __nla_validate_parse: 3 callbacks suppressed
[  101.863852][ T7349] netlink: 684 bytes leftover after parsing attributes in process `syz.1.603'.
[  101.994978][ T7353] Dead loop on virtual device ip6_vti0, fix it urgently!
[  102.784654][ T7395] netlink: 'syz.0.621': attribute type 10 has an invalid length.
[  102.804829][ T7396] netlink: 'syz.1.623': attribute type 13 has an invalid length.
[  102.808219][ T7396] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.623'.
[  102.858204][ T7395] team0 (unregistering): Port device team_slave_0 removed
[  102.863188][ T7395] team0 (unregistering): Port device team_slave_1 removed
[  102.938144][ T5918] Bluetooth: hci0: ISO packet too small
[  103.755117][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.648'.
[  103.765615][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.786479][ T7451] bridge_slave_0 (unregistering): left promiscuous mode
[  103.792949][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.815187][ T7449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.649'.
[  103.943001][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'.
[  104.044338][ T7462] netlink: 'syz.2.653': attribute type 10 has an invalid length.
[  104.067749][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.653'.
[  104.070981][ T7462] dummy0: entered promiscuous mode
[  104.073280][ T7462] dummy0: entered allmulticast mode
[  104.076929][ T7462] bridge0: port 3(dummy0) entered blocking state
[  104.092851][ T7462] bridge0: port 3(dummy0) entered disabled state
[  104.104500][ T7462] bridge0: port 3(dummy0) entered blocking state
[  104.106598][ T7462] bridge0: port 3(dummy0) entered forwarding state
[  104.347568][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.658'.
[  104.909944][ T7508] netlink: 148 bytes leftover after parsing attributes in process `syz.2.674'.
[  104.914470][ T7508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.674'.
[  105.150941][ T7518] netlink: 'syz.0.679': attribute type 2 has an invalid length.
[  105.154313][ T7518] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  105.157637][ T7518] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.679'.
[  105.173173][ T7518] nbd: couldn't find device at index 16
[  105.235013][ T7522] bridge0: port 3(dummy0) entered disabled state
[  105.331899][ T7534] C: renamed from team_slave_0 (while UP)
[  105.335926][ T7534] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  105.395647][ T7538] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  106.803309][ T5886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.861845][ T5886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.911401][ T5886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.953062][ T5909] wg0 speed is unknown, defaulting to 1000
[  106.955985][ T5909] syz0: Port: 1 Link DOWN
[  106.974982][ T5886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.056481][ T5886] bridge_slave_1: left allmulticast mode
[  107.058371][ T5886] bridge_slave_1: left promiscuous mode
[  107.062578][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.307340][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.313541][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.318158][ T5886] bond0 (unregistering): Released all slaves
[  107.570960][ T5886] hsr_slave_0: left promiscuous mode
[  107.573291][ T5886] hsr_slave_1: left promiscuous mode
[  107.575621][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.578473][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.590228][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.593077][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.609271][ T5886] veth1_macvtap: left promiscuous mode
[  107.611201][ T5886] veth0_macvtap: left promiscuous mode
[  107.613070][ T5886] veth1_vlan: left promiscuous mode
[  107.614996][ T5886] veth0_vlan: left promiscuous mode
[  107.883759][ T5886] team0 (unregistering): Port device team_slave_1 removed
[  107.906730][ T5886] team0 (unregistering): Port device team_slave_0 removed
[  108.104954][ T5914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  108.107937][ T5914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  108.111443][ T5914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  108.115129][ T5914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  108.118501][ T5914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.314674][ T7603] chnl_net:caif_netlink_parms(): no params data found
[  108.403680][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.406923][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.412022][ T7603] bridge_slave_0: entered allmulticast mode
[  108.415923][ T7603] bridge_slave_0: entered promiscuous mode
[  108.420869][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.423936][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.427058][ T7603] bridge_slave_1: entered allmulticast mode
[  108.432246][ T7603] bridge_slave_1: entered promiscuous mode
[  108.470128][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.478027][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.547384][ T7603] team0: Port device team_slave_0 added
[  108.562503][ T7603] team0: Port device team_slave_1 added
[  108.605710][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.608693][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.639485][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.664325][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.672498][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.701480][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.745629][ T7633] __nla_validate_parse: 1 callbacks suppressed
[  108.745643][ T7633] netlink: 64 bytes leftover after parsing attributes in process `syz.2.713'.
[  108.786003][ T7603] hsr_slave_0: entered promiscuous mode
[  108.791471][ T7603] hsr_slave_1: entered promiscuous mode
[  108.826198][ T5918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  108.831792][ T5918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  108.837727][ T5918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  108.842569][ T5918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  108.845442][ T5918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  108.982564][ T7642] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.716'.
[  109.141499][ T7634] chnl_net:caif_netlink_parms(): no params data found
[  109.237935][ T7603] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.269956][ T7603] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.277822][ T7603] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.299777][ T7603] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  109.346647][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.352288][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.355399][ T7634] bridge_slave_0: entered allmulticast mode
[  109.360218][ T7634] bridge_slave_0: entered promiscuous mode
[  109.364781][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.367836][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.374808][ T7634] bridge_slave_1: entered allmulticast mode
[  109.378737][ T7634] bridge_slave_1: entered promiscuous mode
[  109.445652][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.460254][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.512089][ T7634] team0: Port device team_slave_0 added
[  109.525793][ T7634] team0: Port device team_slave_1 added
[  109.563782][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.566805][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.586419][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.594988][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.597979][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.611048][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.677855][ T7681] validate_nla: 2 callbacks suppressed
[  109.677911][ T7681] netlink: 'syz.2.725': attribute type 10 has an invalid length.
[  109.685428][ T7634] hsr_slave_0: entered promiscuous mode
[  109.688461][ T7634] hsr_slave_1: entered promiscuous mode
[  109.693634][ T7634] debugfs: 'hsr0' already exists in 'hsr'
[  109.695543][ T7634] Cannot create hsr debugfs directory
[  109.717169][ T7681] team0: Device ipvlan1 failed to register rx_handler
[  109.784346][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.896762][ T7603] 8021q: adding VLAN 0 to HW filter on device team0
[  109.922876][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.925280][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.957782][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.960615][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.076948][ T7634] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.081782][ T7634] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.088089][ T7634] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.096680][ T7634] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  110.170752][ T5918] Bluetooth: hci1: command tx timeout
[  110.217531][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.229200][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.271808][ T7634] 8021q: adding VLAN 0 to HW filter on device team0
[  110.290774][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.293769][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.311615][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.314643][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.323648][ T7603] veth0_vlan: entered promiscuous mode
[  110.346025][ T7603] veth1_vlan: entered promiscuous mode
[  110.417563][ T7603] veth0_macvtap: entered promiscuous mode
[  110.434474][ T7603] veth1_macvtap: entered promiscuous mode
[  110.463916][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.486651][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.509009][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.518932][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.522816][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.526275][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.679540][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.682963][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.692713][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.712971][ T4576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.715553][ T4576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.846752][ T7734] netlink: 'syz.2.730': attribute type 4 has an invalid length.
[  110.853820][ T7734] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.730'.
[  110.892664][ T5918] Bluetooth: hci2: command tx timeout
[  111.033797][ T7634] veth0_vlan: entered promiscuous mode
[  111.042222][ T7634] veth1_vlan: entered promiscuous mode
[  111.063481][ T7634] veth0_macvtap: entered promiscuous mode
[  111.067760][ T7634] veth1_macvtap: entered promiscuous mode
[  111.078029][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.092203][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.105947][ T5886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.109010][ T5886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.123006][ T5886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.137295][ T5886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.232876][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.236223][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.309045][ T4576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.312481][ T4576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.711276][ T7787] bpf: Bad value for 'gid'
[  112.001499][ T7808] netlink: 'syz.2.756': attribute type 2 has an invalid length.
[  112.007960][ T7808] netlink: 'syz.2.756': attribute type 8 has an invalid length.
[  112.016144][ T7808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.756'.
[  112.204620][ T7815] netlink: 'syz.4.761': attribute type 10 has an invalid length.
[  112.236887][ T7815] batman_adv: batadv0: Adding interface: netdevsim0
[  112.240237][ T7815] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.251849][ T5918] Bluetooth: hci1: command tx timeout
[  112.256436][ T7815] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  112.418358][ T7818] lo speed is unknown, defaulting to 1000
[  112.438182][ T7818] lo speed is unknown, defaulting to 1000
[  112.497979][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'.
[  112.510504][ T7818] lo speed is unknown, defaulting to 1000
[  112.636991][ T7818] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  112.783670][ T7825] netlink: 14 bytes leftover after parsing attributes in process `syz.3.765'.
[  112.878872][ T7818] lo speed is unknown, defaulting to 1000
[  112.907587][ T7818] lo speed is unknown, defaulting to 1000
[  112.915132][ T7818] lo speed is unknown, defaulting to 1000
[  112.945316][ T7818] lo speed is unknown, defaulting to 1000
[  112.981196][ T5918] Bluetooth: hci2: command tx timeout
[  113.012828][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'.
[  113.147715][ T7839] netlink: 'syz.4.772': attribute type 2 has an invalid length.
[  113.161534][ T7839] netlink: 'syz.4.772': attribute type 8 has an invalid length.
[  113.165736][ T7839] netlink: 132 bytes leftover after parsing attributes in process `syz.4.772'.
[  113.396772][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'.
[  114.048843][ T7839] lo speed is unknown, defaulting to 1000
[  114.140781][ T7854] netlink: 'syz.2.777': attribute type 3 has an invalid length.
[  114.144141][ T7854] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.777'.
[  114.331841][ T5918] Bluetooth: hci1: command tx timeout
[  114.348241][ T5918] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  114.537637][ T7875] netlink: 'syz.2.787': attribute type 29 has an invalid length.
[  114.544794][ T7875] netlink: 'syz.2.787': attribute type 29 has an invalid length.
[  114.778188][ T7884] : port 1(vlan0) entered blocking state
[  114.781417][ T7884] : port 1(vlan0) entered disabled state
[  114.783863][ T7884] vlan0: entered allmulticast mode
[  114.785964][ T7884] veth0_vlan: entered allmulticast mode
[  114.789064][ T7884] vlan0: entered promiscuous mode
[  114.813095][ T7882] : port 1(vlan0) entered blocking state
[  114.820050][ T7882] : port 1(vlan0) entered forwarding state
[  114.978634][ T7891] netlink: 'syz.2.793': attribute type 11 has an invalid length.
[  115.051994][ T5918] Bluetooth: hci2: command tx timeout
[  115.171538][ T7899] validate_nla: 1 callbacks suppressed
[  115.171552][ T7899] netlink: 'syz.2.797': attribute type 6 has an invalid length.
[  115.176988][ T7899] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.797'.
[  115.246359][ T7905] netlink: 104 bytes leftover after parsing attributes in process `syz.4.800'.
[  115.380564][ T7921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.807'.
[  115.391082][ T7918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.086440][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.826'.
[  116.091669][ T7981] D`: renamed from hsr_slave_1 (while UP)
[  116.427166][ T5918] Bluetooth: hci1: command tx timeout
[  116.478609][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.835'.
[  116.484348][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.835'.
[  117.133696][ T5918] Bluetooth: hci2: command tx timeout
[  117.670427][ T8027] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  117.748047][ T8031] netlink: 'syz.3.846': attribute type 3 has an invalid length.
[  117.762598][ T8031] netlink: 'syz.3.846': attribute type 2 has an invalid length.
[  117.766126][ T8031] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.846'.
[  117.897075][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'.
[  117.921242][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'.
[  119.024085][ T5918] Bluetooth: hci2: SCO packet too small
[  119.232610][ T8072] __nla_validate_parse: 4 callbacks suppressed
[  119.232624][ T8072] netlink: 164 bytes leftover after parsing attributes in process `syz.4.867'.
[  119.523152][ T8097] netlink: 'syz.2.879': attribute type 3 has an invalid length.
[  120.323823][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'.
[  120.370499][ T8110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.885'.
[  122.629510][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'.
[  122.632881][ T8112] netlink: 44 bytes leftover after parsing attributes in process `syz.3.886'.
[  122.728791][ T8120] netlink: 'syz.3.890': attribute type 29 has an invalid length.
[  122.734795][ T8120] netlink: 'syz.3.890': attribute type 29 has an invalid length.
[  122.738419][ T8120] netlink: 500 bytes leftover after parsing attributes in process `syz.3.890'.
[  122.743682][ T8120] unsupported nla_type 58
[  122.870311][ T8126] syzkaller0: entered promiscuous mode
[  122.872703][ T8126] syzkaller0: entered allmulticast mode
[  123.294299][ T8142] tun0: tun_chr_ioctl cmd 1074025675
[  123.296676][ T8142] tun0: persist enabled
[  123.298558][ T8143] tun0: tun_chr_ioctl cmd 1074025675
[  123.305163][ T8143] tun0: persist disabled
[  125.051964][ T8172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  125.497306][ T8192] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.921'.
[  125.506620][ T8192] netlink: zone id is out of range
[  125.508775][ T8192] netlink: zone id is out of range
[  125.516736][ T8192] netlink: zone id is out of range
[  125.518996][ T8192] netlink: get zone limit has 8 unknown bytes
[  126.020935][ T8225] netlink: 'syz.3.937': attribute type 19 has an invalid length.
[  126.038072][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.938'.
[  126.039950][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.937'.
[  126.228474][ T8240] netlink: 'syz.3.944': attribute type 28 has an invalid length.
[  126.367096][ T8248] netlink: 'syz.3.947': attribute type 10 has an invalid length.
[  126.509526][ T8253] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  126.518482][ T8253] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  127.247620][ T8283] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.964'.
[  127.592857][ T8303] netlink: 'syz.4.973': attribute type 29 has an invalid length.
[  127.597451][ T8303] netlink: 'syz.4.973': attribute type 29 has an invalid length.
[  127.602295][ T8303] netlink: 'syz.4.973': attribute type 29 has an invalid length.
[  127.606368][ T8303] netlink: 'syz.4.973': attribute type 29 has an invalid length.
[  128.148685][ T8320] veth1_macvtap: left promiscuous mode
[  128.319706][ T8326] netlink: 'syz.3.982': attribute type 1 has an invalid length.
[  128.323246][ T8326] netlink: 17 bytes leftover after parsing attributes in process `syz.3.982'.
[  128.729577][   T52] wlan1: Trigger new scan to find an IBSS to join
[  128.827624][ T8350] netlink: 'syz.4.993': attribute type 11 has an invalid length.
[  128.830565][ T8350] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.993'.
[  128.835735][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.442488][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'.
[  129.598884][ T8384] siw: device registration error -23
[  130.093569][ T8385] !: renamed from bond_slave_0 (while UP)
[  130.212940][ T8390] netlink: 'syz.3.1010': attribute type 29 has an invalid length.
[  130.217993][ T8390] netlink: 'syz.3.1010': attribute type 29 has an invalid length.
[  130.222877][ T8390] netlink: 'syz.3.1010': attribute type 29 has an invalid length.
[  130.227019][ T8390] netlink: 'syz.3.1010': attribute type 29 has an invalid length.
[  130.234170][ T8392] netlink: 'syz.2.1011': attribute type 2 has an invalid length.
[  130.257552][ T8396] netlink: 824 bytes leftover after parsing attributes in process `syz.2.1013'.
[  130.302311][ T8400] netlink: 'syz.3.1014': attribute type 3 has an invalid length.
[  130.304931][ T8400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1014'.
[  130.326189][ T8399] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1015'.
[  130.334696][ T8399] netlink: zone id is out of range
[  130.338252][ T8399] netlink: zone id is out of range
[  130.348186][ T8399] netlink: get zone limit has 8 unknown bytes
[  130.695499][ T8437] __nla_validate_parse: 1 callbacks suppressed
[  130.695513][ T8437] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1032'.
[  130.714880][ T8437] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1032'.
[  130.725108][ T8428] netlink: 'syz.2.1028': attribute type 3 has an invalid length.
[  130.728440][ T8428] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1028'.
[  130.733638][ T8428] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  132.237216][ T8503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1062'.
[  132.397395][ T8520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1070'.
[  132.421337][ T8520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1070'.
[  132.654816][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.693042][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.775551][ T8531] : port 1(vlan0) entered blocking state
[  132.778283][ T8531] : port 1(vlan0) entered disabled state
[  132.783941][ T8531] vlan0: entered allmulticast mode
[  132.787039][ T8531] veth0_vlan: entered allmulticast mode
[  132.843804][ T8531] vlan0: entered promiscuous mode
[  132.957989][ T8535] : port 1(vlan0) entered blocking state
[  132.960698][ T8535] : port 1(vlan0) entered forwarding state
[  132.973149][ T8533] netlink: 'syz.3.1076': attribute type 21 has an invalid length.
[  133.350631][ T8563] macsec0: entered allmulticast mode
[  133.353076][ T8563] veth1_macvtap: entered promiscuous mode
[  133.354964][ T8563] veth1_macvtap: entered allmulticast mode
[  133.357323][ T8563] macsec0: entered promiscuous mode
[  133.699712][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  134.699050][ T8617] netlink: 'syz.4.1113': attribute type 33 has an invalid length.
[  134.702449][ T8617] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1113'.
[  134.885320][ T8635] : port 1(vlan0) entered disabled state
[  134.911334][ T8627] netlink: 809 bytes leftover after parsing attributes in process `syz.4.1118'.
[  134.915108][ T8627] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.1118'.
[  134.920178][ T8627] netlink: 809 bytes leftover after parsing attributes in process `syz.4.1118'.
[  134.956314][ T8635] : renamed from vlan0
[  135.012945][ T8639] netlink: 'syz.4.1122': attribute type 16 has an invalid length.
[  135.019815][   T52] wlan1: Creating new IBSS network, BSSID 06:d1:57:50:43:a7
[  135.706619][ T8660] lo speed is unknown, defaulting to 1000
[  136.213148][ T8700] __nla_validate_parse: 3 callbacks suppressed
[  136.213161][ T8700] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1150'.
[  136.370552][ T8706] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1153'.
[  137.256891][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'.
[  138.014816][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'.
[  138.060202][ T8731] netlink: 'syz.3.1164': attribute type 29 has an invalid length.
[  138.064265][ T8731] netlink: 'syz.3.1164': attribute type 29 has an invalid length.
[  138.068033][ T8731] netlink: 'syz.3.1164': attribute type 29 has an invalid length.
[  138.417430][ T8746] netlink: 'syz.2.1172': attribute type 10 has an invalid length.
[  138.422826][ T8746] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1172'.
[  138.452550][ T8746]  (unregistering): left allmulticast mode
[  138.455536][ T8746]  (unregistering): left promiscuous mode
[  138.458562][ T8746] : port 1() entered disabled state
[  138.543979][ T8756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.567923][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'.
[  139.968449][ T5918] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  140.034508][ T8785] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1188'.
[  140.266549][ T8810] lo speed is unknown, defaulting to 1000
[  140.611501][ T8829] netlink: 'syz.3.1209': attribute type 25 has an invalid length.
[  140.614982][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'.
[  141.277454][ T8856] netlink: 'syz.2.1221': attribute type 29 has an invalid length.
[  141.282153][ T8856] netlink: 'syz.2.1221': attribute type 29 has an invalid length.
[  141.350892][ T8858] netlink: 'syz.2.1222': attribute type 3 has an invalid length.
[  141.361049][ T8858] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1222'.
[  141.829678][ T8881] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1233'.
[  141.833875][ T8879] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1233'.
[  141.838075][ T8883] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1234'.
[  141.850490][ T8881] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1233'.
[  141.893420][ T8886] netlink: 'syz.4.1236': attribute type 1 has an invalid length.
[  141.928923][   T33] audit: type=1107 audit(1755512263.527:2): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  142.207863][ T8901] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1242'.
[  142.211280][ T8901] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  142.337765][ T8908] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1245'.
[  142.573489][ T8918] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1250'.
[  142.654372][ T8926] netlink: 'syz.2.1254': attribute type 46 has an invalid length.
[  142.746726][ T8935] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.751315][ T8935] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.787872][ T8939] netlink: 'syz.3.1258': attribute type 21 has an invalid length.
[  142.796185][ T8939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1258'.
[  142.859613][ T8939] netlink: 'syz.3.1258': attribute type 5 has an invalid length.
[  143.236859][ T8949] netlink: 'syz.4.1262': attribute type 39 has an invalid length.
[  143.505892][ T8955] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1265'.
[  144.233428][ T8966] netlink: 'syz.3.1269': attribute type 16 has an invalid length.
[  145.066703][ T9020] : port 1(vlan0) entered disabled state
[  145.746853][ T1090] : port 1(vlan0) entered blocking state
[  145.749533][ T1090] : port 1(vlan0) entered forwarding state
[  146.992214][ T9060] __nla_validate_parse: 2 callbacks suppressed
[  146.992227][ T9060] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1306'.
[  147.360336][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'.
[  147.583356][ T9087] sctp: [Deprecated]: syz.2.1317 (pid 9087) Use of int in max_burst socket option deprecated.
[  147.583356][ T9087] Use struct sctp_assoc_value instead
[  147.648551][ T9091] validate_nla: 2 callbacks suppressed
[  147.648973][ T9091] netlink: 'syz.3.1318': attribute type 21 has an invalid length.
[  148.030615][ T9100] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  148.913367][ T9147] netlink: 'syz.2.1343': attribute type 3 has an invalid length.
[  149.116579][ T9165] netlink: 'syz.4.1349': attribute type 2 has an invalid length.
[  149.120117][ T9165] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1349'.
[  149.374843][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'.
[  149.711460][ T9173] netlink: 'syz.4.1355': attribute type 1 has an invalid length.
[  149.832275][ T9177] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1355'.
[  149.914671][ T9182] netlink: 'syz.2.1357': attribute type 3 has an invalid length.
[  149.917806][ T9182] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  149.930978][ T9182] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1357'.
[  149.935250][ T9182] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  150.038139][ T9186] netdevsim0: mtu greater than device maximum
[  150.486297][ T9211] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1371'.
[  150.947653][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1378'.
[  150.953190][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1378'.
[  151.264342][ T9233] netlink: 'syz.2.1379': attribute type 1 has an invalid length.
[  151.455520][ T9251] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1386'.
[  152.147894][ T9263] netlink: 'syz.4.1390': attribute type 10 has an invalid length.
[  152.184987][ T9267] netlink: set zone limit has 4 unknown bytes
[  152.236193][ T9272] netlink: 'syz.2.1394': attribute type 21 has an invalid length.
[  152.290129][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.321254][ T9263] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  152.346265][ T9270] bond0: entered promiscuous mode
[  152.348312][ T9270] !: entered promiscuous mode
[  152.350204][ T9270] bond_slave_1: entered promiscuous mode
[  152.352215][ T9270] batadv0: entered promiscuous mode
[  152.507971][ T9291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'.
[  152.540537][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1404'.
[  152.583833][ T9290] syzkaller0: entered promiscuous mode
[  152.585814][ T9290] syzkaller0: entered allmulticast mode
[  152.631483][ T9300] netlink: 'syz.2.1408': attribute type 22 has an invalid length.
[  152.634706][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'.
[  152.846434][ T9307] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  152.849508][ T9307] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  152.946544][ T9311] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1413'.
[  154.035777][ T9340] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1425'.
[  154.233423][ T9346] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1427'.
[  154.531098][ T9367] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1437'.
[  155.006925][ T9381] syzkaller0: entered promiscuous mode
[  155.009077][ T9381] syzkaller0: entered allmulticast mode
[  155.150447][ T9394] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.872487][ T9439] netlink: 'syz.3.1463': attribute type 2 has an invalid length.
[  156.875670][ T9439] netlink: 85376 bytes leftover after parsing attributes in process `syz.3.1463'.
[  156.945762][ T9443] netlink: 'syz.4.1465': attribute type 3 has an invalid length.
[  156.949130][ T9443] netlink: 'syz.4.1465': attribute type 1 has an invalid length.
[  156.953370][ T9443] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1465'.
[  157.028489][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1467'.
[  157.362626][ T9461] netlink: 'syz.3.1469': attribute type 10 has an invalid length.
[  157.378040][ T9461] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  158.728093][ T9480] netlink: 'syz.3.1480': attribute type 4 has an invalid length.
[  158.958595][ T9492] lo speed is unknown, defaulting to 1000
[  159.108301][ T9502] __nla_validate_parse: 2 callbacks suppressed
[  159.108344][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'.
[  159.116092][ T9508] netlink: 'syz.4.1490': attribute type 3 has an invalid length.
[  159.116103][ T9508] netlink: 'syz.4.1490': attribute type 4 has an invalid length.
[  159.116108][ T9508] netlink: 'syz.4.1490': attribute type 5 has an invalid length.
[  159.116112][ T9508] netlink: 'syz.4.1490': attribute type 6 has an invalid length.
[  159.116117][ T9508] netlink: 'syz.4.1490': attribute type 7 has an invalid length.
[  159.116122][ T9508] netlink: 13014 bytes leftover after parsing attributes in process `syz.4.1490'.
[  159.171091][ T9513] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1492'.
[  159.221656][ T9510] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1491'.
[  159.231147][ T9511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'.
[  159.249501][ T9514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'.
[  159.420201][ T9534] batman_adv: batadv0: Removing interface: netdevsim0
[  159.611525][ T9534] bridge0: port 3(netdevsim0) entered blocking state
[  159.614600][ T9534] bridge0: port 3(netdevsim0) entered disabled state
[  159.618850][ T9534] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  159.639027][ T9534] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  160.758666][ T9581] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1521'.
[  160.765695][ T9579] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1520'.
[  161.020031][ T9603] : renamed from bond0 (while UP)
[  161.753158][ T9614] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1536'.
[  161.756844][ T9614] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  161.829077][ T9614] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  162.087142][ T9641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.090402][ T9641] IPv6: NLM_F_CREATE should be set when creating new route
[  162.093000][ T9641] IPv6: NLM_F_CREATE should be set when creating new route
[  162.095494][ T9641] IPv6: NLM_F_CREATE should be set when creating new route
[  162.218278][ T5918] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  162.734856][ T9672] validate_nla: 4 callbacks suppressed
[  162.734867][ T9672] netlink: 'syz.3.1564': attribute type 1 has an invalid length.
[  162.747421][ T9672] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1564'.
[  163.073050][ T9670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.094006][    T9] lo speed is unknown, defaulting to 1000
[  163.143747][ T9670] syz.4.1563 (9670) used greatest stack depth: 19576 bytes left
[  163.478568][ T9715] netlink: 'syz.4.1580': attribute type 10 has an invalid length.
[  163.489291][ T9715] : port 1(vlan0) entered disabled state
[  163.494014][ T9715] : port 1(vlan0) entered blocking state
[  163.496051][ T9715] : port 1(vlan0) entered forwarding state
[  163.499565][ T9715] team0: Device veth0_vlan failed to register rx_handler
[  163.506108][ T9715] : port 1(vlan0) entered disabled state
[  164.426268][ T9729] __nla_validate_parse: 4 callbacks suppressed
[  164.426286][ T9729] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1587'.
[  164.450435][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'.
[  164.983584][ T9765] syzkaller0: create flow: hash 32560578 index 1
[  165.225802][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'.
[  165.306673][   T12] syzkaller0: tun_net_xmit 76
[  165.308859][   T12] syzkaller0: tun_net_xmit 48
[  165.329456][ T5909] syzkaller0: tun_net_xmit 76
[  165.349569][ T5909] syzkaller0: tun_net_xmit 76
[  165.364057][ T9753] syzkaller0: delete flow: hash 32560578 index 1
[  166.435794][ T9802] syz.4.1616 (9802) used greatest stack depth: 19560 bytes left
[  166.498023][ T9812] netlink: 'syz.3.1619': attribute type 15 has an invalid length.
[  166.501805][ T9812] netlink: 'syz.3.1619': attribute type 7 has an invalid length.
[  166.505289][ T9812] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1619'.
[  166.615931][ T9819] netlink: 'syz.3.1622': attribute type 16 has an invalid length.
[  166.631311][ T9819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1622'.
[  167.715213][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1633'.
[  167.734598][ T9849] netlink: 'syz.3.1631': attribute type 10 has an invalid length.
[  167.744762][ T9849] team0: Port device hsr0 added
[  167.850009][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  167.939337][ T9858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.062315][ T9856] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1635'.
[  168.375919][ T9866] netlink: 'syz.4.1638': attribute type 16 has an invalid length.
[  168.379474][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1638'.
[  168.384035][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.301611][ T9929] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1667'.
[  169.575511][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1672'.
[  169.696256][ T9949] netlink: 'syz.2.1676': attribute type 2 has an invalid length.
[  169.705113][ T9949] netlink: 'syz.2.1676': attribute type 4 has an invalid length.
[  169.708509][ T9949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1676'.
[  169.995369][ T9971] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  170.000582][ T9971] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  170.005230][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  170.010448][ T9971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.014661][ T9971] RIP: 0010:__pcpu_freelist_pop+0x6b7/0x8c0
[  170.017262][ T9971] Code: 10 48 3b 8c 24 80 00 00 00 0f 85 b4 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c1 3d 9a 09 cc 48 89 f8 48 c1 e8 03 <80> 3c 18 00 48 89 7c 24 20 74 0a e8 c9 3f 41 00 48 8b 7c 24 20 48
[  170.025516][ T9971] RSP: 0018:ffffc90007847620 EFLAGS: 00010046
[  170.028137][ T9971] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffe8ffffc24330
[  170.031610][ T9971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  170.035014][ T9971] RBP: ffffc900078476f0 R08: 0000000000000003 R09: 0000000000000004
[  170.038446][ T9971] R10: dffffc0000000000 R11: fffff52000f08ed0 R12: 1ffffd1ffff84865
[  170.041881][ T9971] R13: ffffe8ffffc24328 R14: 0000000000000001 R15: 0000000000000000
[  170.045299][ T9971] FS:  000055557c094500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  170.049131][ T9971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.051970][ T9971] CR2: 00007f4c5024f522 CR3: 0000000129668000 CR4: 00000000000006f0
[  170.055438][ T9971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  170.058855][ T9971] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  170.062301][ T9971] Call Trace:
[  170.063774][ T9971]  <TASK>
[  170.065075][ T9971]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  170.067951][ T9971]  ? __pfx___pcpu_freelist_pop+0x10/0x10
[  170.070414][ T9971]  ? rcu_is_watching+0x15/0xb0
[  170.072527][ T9971]  pcpu_freelist_pop+0xca/0x170
[  170.074642][ T9971]  ? __pfx_pcpu_freelist_pop+0x10/0x10
[  170.077030][ T9971]  ? get_perf_callchain+0x42f/0x6b0
[  170.079325][ T9971]  ? __pfx_get_perf_callchain+0x10/0x10
[  170.081733][ T9971]  __bpf_get_stackid+0x574/0xcf0
[  170.083903][ T9971]  ? bpf_get_stackid+0x11c/0x1d0
[  170.086108][ T9971]  ? bpf_prog_b724608cae728045+0x27/0x2f
[  170.088590][ T9971]  bpf_get_stackid_raw_tp+0x196/0x210
[  170.090929][ T9971]  bpf_prog_b724608cae728045+0x27/0x2f
[  170.093291][ T9971]  bpf_trace_run2+0x284/0x4b0
[  170.095348][ T9971]  ? bpf_trace_run2+0x186/0x4b0
[  170.097475][ T9971]  ? __pfx_bpf_trace_run2+0x10/0x10
[  170.099741][ T9971]  ? perf_trace_lock+0xec/0x3b0
[  170.101818][ T9971]  ? tomoyo_realpath_from_path+0xd6/0x5d0
[  170.104230][ T9971]  ? __lock_acquire+0xab9/0xd20
[  170.106291][ T9971]  ? tomoyo_realpath_from_path+0xd6/0x5d0
[  170.108856][ T9971]  kfree+0x3a0/0x440
[  170.110596][ T9971]  tomoyo_realpath_from_path+0xd6/0x5d0
[  170.113014][ T9971]  ? tomoyo_domain+0xd9/0x130
[  170.115113][ T9971]  tomoyo_path_perm+0x213/0x4b0
[  170.117289][ T9971]  ? tomoyo_path_perm+0x1e3/0x4b0
[  170.119499][ T9971]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  170.121821][ T9971]  ? __pfx_current_check_access_path+0x10/0x10
[  170.124534][ T9971]  ? lookup_one_qstr_excl+0x1d8/0x360
[  170.126862][ T9971]  tomoyo_path_symlink+0xa3/0xe0
[  170.129026][ T9971]  ? __pfx_tomoyo_path_symlink+0x10/0x10
[  170.131473][ T9971]  ? __pfx_filename_create+0x10/0x10
[  170.133783][ T9971]  security_path_symlink+0x177/0x380
[  170.136122][ T9971]  do_symlinkat+0x107/0x3f0
[  170.138195][ T9971]  ? __pfx_do_symlinkat+0x10/0x10
[  170.140467][ T9971]  ? getname_flags+0x1e5/0x540
[  170.142561][ T9971]  __x64_sys_symlinkat+0x95/0xb0
[  170.144723][ T9971]  do_syscall_64+0xfa/0x3b0
[  170.146728][ T9971]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.149011][ T9971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.151653][ T9971]  ? exc_page_fault+0x9f/0xf0
[  170.153708][ T9971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.156292][ T9971] RIP: 0033:0x7f4c5018e167
[  170.158249][ T9971] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.166503][ T9971] RSP: 002b:00007ffce9caa028 EFLAGS: 00000206 ORIG_RAX: 000000000000010a
[  170.170113][ T9971] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c5018e167
[  170.173513][ T9971] RDX: 00007f4c502136c4 RSI: 00000000ffffff9c RDI: 00007ffce9caa0c0
[  170.176910][ T9971] RBP: 00007ffce9caa06c R08: 0000000000000017 R09: 00007ffce9ca9d77
[  170.180326][ T9971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000234
[  170.183742][ T9971] R13: 00000000000927c0 R14: 0000000000029713 R15: 00007ffce9caa0c0
[  170.187174][ T9971]  </TASK>
[  170.188540][ T9971] Modules linked in:
[  170.190295][ T9971] ---[ end trace 0000000000000000 ]---
[  170.192665][ T9971] RIP: 0010:__pcpu_freelist_pop+0x6b7/0x8c0
[  170.195253][ T9971] Code: 10 48 3b 8c 24 80 00 00 00 0f 85 b4 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c1 3d 9a 09 cc 48 89 f8 48 c1 e8 03 <80> 3c 18 00 48 89 7c 24 20 74 0a e8 c9 3f 41 00 48 8b 7c 24 20 48
[  170.203519][ T9971] RSP: 0018:ffffc90007847620 EFLAGS: 00010046
[  170.206160][ T9971] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffe8ffffc24330
[  170.209596][ T9971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  170.213013][ T9971] RBP: ffffc900078476f0 R08: 0000000000000003 R09: 0000000000000004
[  170.216462][ T9971] R10: dffffc0000000000 R11: fffff52000f08ed0 R12: 1ffffd1ffff84865
[  170.219886][ T9971] R13: ffffe8ffffc24328 R14: 0000000000000001 R15: 0000000000000000
[  170.223304][ T9971] FS:  000055557c094500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  170.227119][ T9971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.230058][ T9971] CR2: 00007f4c5024f522 CR3: 0000000129668000 CR4: 00000000000006f0
[  170.233503][ T9971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  170.236932][ T9971] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  170.240365][ T9971] Kernel panic - not syncing: Fatal exception
[  171.009554][ T9971] Kernel Offset: disabled
[  171.011491][ T9971] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:18:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc900077a6d78 RCX=a12cf8b9f6877700 RDX=0000000000000000
RSI=ffffffff8b87b180 RDI=ffffffff8be33300 RBP=0000000000000000 RSP=ffffc90000007ff0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8184f3d4 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1608a376c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000100000000 CR3=0000000027e52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff6f0412e53
XMM06=0000000000000000 00007ff6f0412e4d XMM07=0000000000000000 00007ff6f0412e61
XMM08=0000000000000000 00007ff6f0412ee7 XMM09=0000000000000000 00007ff6f0412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007846e50
R8 =ffff888020bd0237 R9 =1ffff1100417a046 R10=dffffc0000000000 R11=ffffffff854ef730
R12=dffffc0000000000 R13=ffffffff99af9907 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef7ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557c094500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4c5024f522 CR3=0000000129668000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ffff00000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 00000000000000ff XMM05=0000000000000000 00007f4c50212e53
XMM06=0000000000000000 00007f4c50212e4d XMM07=0000000000000000 00007f4c50212e61
XMM08=0000000000000000 00007f4c50212ee7 XMM09=0000000000000000 00007f4c50212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
