last executing test programs:

3m25.968132064s ago: executing program 2 (id=598):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x58, &(0x7f0000000340)=""/222}, 0x21)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)

3m25.56696833s ago: executing program 1 (id=601):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)

3m25.566652639s ago: executing program 1 (id=602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0)

3m25.468142245s ago: executing program 1 (id=603):
r0 = socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffd, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
r5 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x80, 0x0}, 0x8000)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc", 0x13}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x58, &(0x7f0000000300)}, 0x10)

3m24.811297425s ago: executing program 2 (id=607):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

3m24.713563076s ago: executing program 2 (id=608):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001014010025bd7000fcdbdf2508000100edffffff0700030003"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004090)

3m24.713347565s ago: executing program 2 (id=609):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48)

3m24.627949381s ago: executing program 2 (id=610):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f00000000c0)=r2, 0x4)

3m24.567429348s ago: executing program 2 (id=611):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10046, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0xc424, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xf03}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90a24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

3m24.566917041s ago: executing program 1 (id=612):
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48)

3m24.407806414s ago: executing program 0 (id=616):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1600000000000000080000000200000000000000", @ANYRES32], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)

3m24.347324008s ago: executing program 0 (id=617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

3m24.346885464s ago: executing program 1 (id=618):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8915, &(0x7f0000000140)={'lo\x00', @random="0200ff7fffff"})

3m22.948291422s ago: executing program 0 (id=619):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m22.948043599s ago: executing program 0 (id=620):
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0x0)

3m22.886426671s ago: executing program 0 (id=621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_fc_commit_stop\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11)

3m22.885964633s ago: executing program 0 (id=622):
r0 = socket$kcm(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x801c581f, &(0x7f0000000040)=0xff57000000000600)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)

3m22.227907858s ago: executing program 1 (id=623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0)

3m9.029096158s ago: executing program 32 (id=611):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10046, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0xc424, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xf03}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90a24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

3m7.028150003s ago: executing program 33 (id=622):
r0 = socket$kcm(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x801c581f, &(0x7f0000000040)=0xff57000000000600)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)

3m6.953270651s ago: executing program 34 (id=623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0)

2m31.049759489s ago: executing program 4 (id=953):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})

2m30.93902582s ago: executing program 4 (id=954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20020800}, 0x40800)

2m30.938830055s ago: executing program 4 (id=955):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a300000000009"], 0x150}}, 0x0)
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@l2tp={0xa, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x80, 0x0}, 0x4000040)

2m30.863476241s ago: executing program 4 (id=958):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800)=r0, 0x4)

2m30.682153614s ago: executing program 4 (id=963):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x30, 0x851, 0x70bd28, 0x25dfdbfb, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804)

2m30.614612049s ago: executing program 4 (id=966):
r0 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc9}, 0x40000100)
r3 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000500)=r4, 0x4)
r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r6)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000007ddaf344d203e738714540349aa17d39e783727c0f6f3dd355311b5731500a7de03c2de260b559f89c255e02bef8eef05a0089725ecebde05a257a6a60fa5d2c1623eee2f1b733da7ac043c95d3dd61e5620fd6d884e908ba67352d4f0ea695f7a3763d68fafb95bbea2b28b41f86eb8", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, 0x0, &(0x7f0000000080)=r6}, 0x20)
recvmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40007600)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$sock_attach_bpf(r9, 0x84, 0x64, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1c094}, 0x4040805)
r10 = socket$kcm(0x1e, 0x2, 0x0)
sendmsg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000040)

2m30.614293582s ago: executing program 5 (id=967):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x1, @perf_bp={0x0, 0x15}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x40, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)

2m30.371876687s ago: executing program 5 (id=973):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

2m30.272482912s ago: executing program 5 (id=975):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@generic={0x1d, "18fdf2aa6382cd05d0373334325b31b36bf15273784da2c7230496461d742ea2e1afcadc72dd5ba3c75171352a0ccb49d2c0ab74cb64844b734666c6866ba47b05c51560f5e5277adc39b91fb4ee48559370cb94e5b76595d3774ae174c1370465532ce1d45766b136ffaa067902e456e94327f95c2287aa879767b3041a"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="4c935c3f4471f2", 0x7}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

2m30.272197245s ago: executing program 5 (id=976):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x1, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x7, 0x3, 0x5, 0x2, 0x1}], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

2m30.200924345s ago: executing program 5 (id=978):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x5f3e02, 0x0)

2m30.133156632s ago: executing program 5 (id=979):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe6e}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x0)

2m14.984920435s ago: executing program 35 (id=966):
r0 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc9}, 0x40000100)
r3 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000500)=r4, 0x4)
r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r6)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000007ddaf344d203e738714540349aa17d39e783727c0f6f3dd355311b5731500a7de03c2de260b559f89c255e02bef8eef05a0089725ecebde05a257a6a60fa5d2c1623eee2f1b733da7ac043c95d3dd61e5620fd6d884e908ba67352d4f0ea695f7a3763d68fafb95bbea2b28b41f86eb8", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, 0x0, &(0x7f0000000080)=r6}, 0x20)
recvmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40007600)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$sock_attach_bpf(r9, 0x84, 0x64, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1c094}, 0x4040805)
r10 = socket$kcm(0x1e, 0x2, 0x0)
sendmsg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000040)

2m14.922444248s ago: executing program 36 (id=979):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe6e}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x0)

1m55.615804025s ago: executing program 6 (id=1136):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

1m51.834243006s ago: executing program 6 (id=1155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40080}, 0x14}, 0x1, 0x2b1e}, 0x14)

1m51.683381084s ago: executing program 6 (id=1158):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020234000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m51.641371041s ago: executing program 6 (id=1159):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0)

1m51.559028279s ago: executing program 6 (id=1161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @numgen={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @redir={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x0, 0x3, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT]}], {0x14}}, 0xc0}}, 0x800)

1m51.558383737s ago: executing program 6 (id=1162):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x50, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000640)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x3, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x9, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f0000000840)="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", 0x1c9}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11", 0xb4}], 0x3}, 0x8001)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005a00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0, 0x1c}, 0x80, &(0x7f0000000140)}, 0x220c60c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
recvmsg$unix(r6, &(0x7f00000002c0)={&(0x7f0000000200), 0x6e, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x102)

1m33.971987531s ago: executing program 37 (id=1162):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x50, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000640)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x3, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x9, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f0000000840)="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", 0x1c9}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11", 0xb4}], 0x3}, 0x8001)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005a00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0, 0x1c}, 0x80, &(0x7f0000000140)}, 0x220c60c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
recvmsg$unix(r6, &(0x7f00000002c0)={&(0x7f0000000200), 0x6e, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x102)

2.55376647s ago: executing program 8 (id=2288):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb984"], 0xfdef)

698.343078ms ago: executing program 3 (id=2296):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611158000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

689.142745ms ago: executing program 8 (id=2297):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, {0x0, 0xfffffffffffffffd, 0xff, 0x335b}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {0x0, 0x3, 0xffffffff}, 0x0, 0x0, 0xa, 0x2, 0x80}}, 0xf0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="180000006a007ffa9e", 0x9}, {&(0x7f0000000740)}], 0x2}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x1c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "e2599803"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x99e, 0x5, 0x1, 0x5, 0x2}, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

687.826484ms ago: executing program 3 (id=2298):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)

588.498378ms ago: executing program 3 (id=2300):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', &(0x7f0000011c40), 0x15, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x201020, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a03000000000200010000000000000002161600003f030006000000000002004e21000000800000000000000000010005"], 0x70}, 0x1, 0x7}, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000140)="c71bbc98f6d59dc92a8a3fa3cf3944f2394949c1bbd05b26a70a19d72f", &(0x7f0000000180)=""/245, &(0x7f0000000280)="2fba0e30fb6ef81aa0bfde0d4c07120cb9fb3c3d6f0ed234c6fbfef1ef1028fe511a130670e39c8cc90da19cf988945aa3f7f511b8acc1f7885402", &(0x7f00000002c0)="8e605f1ed4db0e5117a406edabc677bd549808", 0x8, 0x1}, 0x38)

470.061544ms ago: executing program 8 (id=2302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\'\x00'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

374.4993ms ago: executing program 8 (id=2304):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0xffffffffffffffb9, 0x3, 0xfffffffa}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)

372.905419ms ago: executing program 7 (id=2305):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021c080406037c09e8fe55a10a0015400200142603600e122f00160004000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ed50c3e7867a9d3026cd0a23394d78c24cbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000)

303.196037ms ago: executing program 7 (id=2306):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2aa40, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)

276.260469ms ago: executing program 3 (id=2307):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071101a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

269.169687ms ago: executing program 8 (id=2308):
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)

209.836333ms ago: executing program 7 (id=2309):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000)

209.413072ms ago: executing program 8 (id=2310):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8d}, 0x48)

150.585166ms ago: executing program 3 (id=2311):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000fc0)=""/288, 0x120}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000005340)=""/4039, 0xfc7}, {&(0x7f0000000d40)=""/209, 0xd1}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000000ec0)=""/198, 0xc6}, {&(0x7f0000000580)=""/117, 0x75}], 0xb}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

150.301321ms ago: executing program 7 (id=2312):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0)

88.499041ms ago: executing program 7 (id=2313):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x200, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffc}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0x0, 0x0, 0x4040090}, 0x84)

86.772658ms ago: executing program 3 (id=2314):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x2, 0xca, 0x3, 0x0, 0x2, 0x28400, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x2, @perf_config_ext={0x8, 0x2006}, 0x40, 0xc078, 0x7, 0x3, 0xbafb, 0xc65d, 0x8, 0x0, 0x9, 0x0, 0xe0c}, r0, 0x8, r1, 0x8)

0s ago: executing program 7 (id=2315):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47316' (ED25519) to the list of known hosts.
syzkaller login: [   56.630314][ T5832] cgroup: Unknown subsys name 'net'
[   56.784750][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.790711][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.149520][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.470414][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.474001][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.476751][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.482592][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.485374][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.517130][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.521452][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.525295][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.529503][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.534303][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.605645][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.608924][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.611914][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.615617][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.620652][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.796774][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   65.025645][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.029283][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.033253][ T5849] bridge_slave_0: entered allmulticast mode
[   65.037184][ T5849] bridge_slave_0: entered promiscuous mode
[   65.045067][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.058567][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   65.066191][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.069159][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.072524][ T5849] bridge_slave_1: entered allmulticast mode
[   65.076310][ T5849] bridge_slave_1: entered promiscuous mode
[   65.157733][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.178056][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.266707][ T5849] team0: Port device team_slave_0 added
[   65.269565][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.273165][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.276042][ T5853] bridge_slave_0: entered allmulticast mode
[   65.279668][ T5853] bridge_slave_0: entered promiscuous mode
[   65.285897][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.288701][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.291876][ T5856] bridge_slave_0: entered allmulticast mode
[   65.294582][ T5856] bridge_slave_0: entered promiscuous mode
[   65.299544][ T5849] team0: Port device team_slave_1 added
[   65.317077][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.320330][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.323220][ T5853] bridge_slave_1: entered allmulticast mode
[   65.326965][ T5853] bridge_slave_1: entered promiscuous mode
[   65.343512][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.346283][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.348945][ T5856] bridge_slave_1: entered allmulticast mode
[   65.352604][ T5856] bridge_slave_1: entered promiscuous mode
[   65.402671][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.407881][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.418903][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.426164][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.428848][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.439143][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.445888][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.454092][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.466145][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.472234][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.518129][ T5856] team0: Port device team_slave_0 added
[   65.521594][ T5853] team0: Port device team_slave_0 added
[   65.526009][ T5856] team0: Port device team_slave_1 added
[   65.545390][ T5853] team0: Port device team_slave_1 added
[   65.618219][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.621434][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.631996][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.643878][ T5849] hsr_slave_0: entered promiscuous mode
[   65.647009][ T5849] hsr_slave_1: entered promiscuous mode
[   65.651440][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.654240][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.664760][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.670669][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.673248][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.683722][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.696262][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.699068][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.709796][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.812774][ T5856] hsr_slave_0: entered promiscuous mode
[   65.815220][ T5856] hsr_slave_1: entered promiscuous mode
[   65.817581][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.819517][ T5856] Cannot create hsr debugfs directory
[   65.831604][ T5853] hsr_slave_0: entered promiscuous mode
[   65.834816][ T5853] hsr_slave_1: entered promiscuous mode
[   65.837540][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   65.839808][ T5853] Cannot create hsr debugfs directory
[   66.122947][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.132960][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.146140][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.157239][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.231099][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.242819][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.247907][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.254962][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.312368][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.323953][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.338682][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.361565][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.457580][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.483883][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.503786][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   66.525262][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.528380][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.540720][   T55] Bluetooth: hci0: command tx timeout
[   66.545617][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.552878][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.555724][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.571974][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.574853][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.593021][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.595860][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.615499][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.620348][   T55] Bluetooth: hci1: command tx timeout
[   66.663406][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.685249][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.688054][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.700840][   T55] Bluetooth: hci2: command tx timeout
[   66.715341][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.718117][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.947312][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.978816][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.005622][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.028693][ T5856] veth0_vlan: entered promiscuous mode
[   67.064021][ T5856] veth1_vlan: entered promiscuous mode
[   67.084084][ T5853] veth0_vlan: entered promiscuous mode
[   67.088331][ T5849] veth0_vlan: entered promiscuous mode
[   67.101975][ T5856] veth0_macvtap: entered promiscuous mode
[   67.106617][ T5856] veth1_macvtap: entered promiscuous mode
[   67.113361][ T5849] veth1_vlan: entered promiscuous mode
[   67.122127][ T5853] veth1_vlan: entered promiscuous mode
[   67.157552][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.162688][ T5849] veth0_macvtap: entered promiscuous mode
[   67.173147][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.188122][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.195222][ T5849] veth1_macvtap: entered promiscuous mode
[   67.209313][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.215113][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.229057][ T5853] veth0_macvtap: entered promiscuous mode
[   67.236964][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.254779][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.276450][ T5853] veth1_macvtap: entered promiscuous mode
[   67.283553][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.318856][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.338300][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.358422][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.372738][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.376250][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.406816][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.411210][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.423432][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.450653][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.453515][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.466293][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.469184][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.472281][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.477925][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.533413][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.535977][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.577573][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.600934][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.607280][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.662909][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.665372][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.708516][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.713246][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.788358][ T5921] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   67.894096][ T5923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.918187][ T5930] =======================================================
[   67.918187][ T5930] WARNING: The mand mount option has been deprecated and
[   67.918187][ T5930]          and is ignored by this kernel. Remove the mand
[   67.918187][ T5930]          option from the mount to silence this warning.
[   67.918187][ T5930] =======================================================
[   67.948948][ T5923] netlink: 'syz.0.1': attribute type 11 has an invalid length.
[   67.954724][ T5923] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.087305][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11'.
[   68.104271][ T5934] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.10'.
[   68.251584][    C1] hrtimer: interrupt took 46115 ns
[   68.265488][ T5596] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   68.619309][   T55] Bluetooth: hci0: command tx timeout
[   68.726658][   T55] Bluetooth: hci1: command tx timeout
[   68.777273][   T55] Bluetooth: hci2: command tx timeout
[   68.813303][ T5949] netlink: 'syz.0.16': attribute type 3 has an invalid length.
[   68.827962][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   68.859210][ T5949] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16'.
[   69.165136][ T5957] netlink: 208 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.260031][ T5959] Illegal XDP return value 4294967274 on prog  (id 12) dev N/A, expect packet loss!
[   69.493337][ T5975] netlink: 'syz.0.29': attribute type 10 has an invalid length.
[   69.566939][ T5990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.29'.
[   69.777647][ T5975] team0 (unregistering): Port device team_slave_0 removed
[   69.967483][ T5975] team0 (unregistering): Port device team_slave_1 removed
[   70.690672][   T55] Bluetooth: hci0: command tx timeout
[   70.714584][ T6013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.765207][ T6017] netlink: 164 bytes leftover after parsing attributes in process `syz.1.42'.
[   70.778424][   T55] Bluetooth: hci1: command tx timeout
[   70.850785][   T55] Bluetooth: hci2: command tx timeout
[   71.100435][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.103015][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.775193][ T6026] netlink: 188 bytes leftover after parsing attributes in process `syz.2.46'.
[   72.770726][   T55] Bluetooth: hci0: command tx timeout
[   72.851372][   T55] Bluetooth: hci1: command tx timeout
[   72.931903][   T55] Bluetooth: hci2: command tx timeout
[   73.032303][ T6059] netlink: 188 bytes leftover after parsing attributes in process `syz.1.60'.
[   73.115801][ T6070] netlink: 'syz.0.66': attribute type 3 has an invalid length.
[   73.142732][ T6071] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.65'.
[   73.262085][ T6079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   73.266314][ T6079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   73.272231][ T6079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   74.389405][ T6108] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET)
[   74.399609][ T6107] netlink: 'syz.1.83': attribute type 29 has an invalid length.
[   74.404133][ T6107] netlink: 'syz.1.83': attribute type 29 has an invalid length.
[   74.609705][ T6114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.639421][ T6132] netlink: 60 bytes leftover after parsing attributes in process `syz.0.92'.
[   75.777151][ T6142] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.97'.
[   75.951259][ T6146] warning: `syz.2.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.485106][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[   76.488690][ T6161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.104'.
[   76.489972][ T6162] netlink: 'syz.0.105': attribute type 28 has an invalid length.
[   76.583213][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'.
[   76.603715][ T6166] netlink: 'syz.0.107': attribute type 11 has an invalid length.
[   76.884005][ T6179] netlink: 'syz.2.113': attribute type 2 has an invalid length.
[   76.895095][ T6179] nbd: must specify at least one socket
[   77.331602][ T6165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.684480][ T6200] netlink: zone id is out of range
[   77.686796][ T6200] netlink: zone id is out of range
[   77.689102][ T6200] netlink: zone id is out of range
[   77.694119][ T6200] netlink: zone id is out of range
[   77.696363][ T6200] netlink: zone id is out of range
[   77.698622][ T6200] netlink: zone id is out of range
[   77.701400][ T6200] netlink: zone id is out of range
[   77.703642][ T6200] netlink: zone id is out of range
[   77.705851][ T6200] netlink: zone id is out of range
[   80.696678][ T6209] __nla_validate_parse: 3 callbacks suppressed
[   80.696694][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'.
[   81.109302][ T6240] netlink: 'syz.1.141': attribute type 21 has an invalid length.
[   81.204036][ T6244] Zero length message leads to an empty skb
[   81.963068][ T6287] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.158'.
[   82.029465][ T6289] syzkaller0: entered promiscuous mode
[   82.035854][ T6289] syzkaller0: entered allmulticast mode
[   82.423296][ T6295] delete_channel: no stack
[   82.432837][ T6295] delete_channel: no stack
[   85.382515][ T6346] netlink: 'syz.2.180': attribute type 11 has an invalid length.
[   85.643302][ T6365] net_ratelimit: 14 callbacks suppressed
[   85.643325][ T6365] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   85.648582][ T6365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.013935][ T6398] netlink: 'syz.2.205': attribute type 10 has an invalid length.
[   86.026675][ T6398] batman_adv: batadv0: Adding interface: team0
[   86.029327][ T6398] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.039465][ T6398] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   86.057289][ T6396] syzkaller0: entered promiscuous mode
[   86.063755][ T6396] syzkaller0: entered allmulticast mode
[   86.197086][ T6406] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   86.210407][ T6406] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   86.451453][ T3144] cfg80211: failed to load regulatory.db
[   86.864296][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'.
[   86.913698][ T6424] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   87.026389][ T6434] netlink: 'syz.0.222': attribute type 1 has an invalid length.
[   87.034248][ T6434] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.222'.
[   87.101126][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   87.134115][ T6437] netlink: 'syz.0.223': attribute type 2 has an invalid length.
[   87.137774][ T6437] netlink: 'syz.0.223': attribute type 8 has an invalid length.
[   87.143815][ T6437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.223'.
[   87.992256][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'.
[   88.404559][ T6467] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.235'.
[   88.409770][ T6467] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   88.570889][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'.
[   88.737652][ T6486] netlink: 2 bytes leftover after parsing attributes in process `syz.1.243'.
[   88.743086][ T6486] batadv_slave_1: entered promiscuous mode
[   89.018613][ T6502] netlink: 'syz.2.251': attribute type 10 has an invalid length.
[   89.028959][ T6502] netlink: 3531 bytes leftover after parsing attributes in process `syz.2.251'.
[   89.048608][ T6504] netlink: 'syz.1.252': attribute type 29 has an invalid length.
[   89.072292][ T6504] netlink: 'syz.1.252': attribute type 29 has an invalid length.
[   89.085948][ T6504] netlink: 500 bytes leftover after parsing attributes in process `syz.1.252'.
[   89.586737][ T6542] nbd: must specify a size in bytes for the device
[   90.013753][ T6559] netlink: 'syz.1.279': attribute type 29 has an invalid length.
[   90.018242][ T6559] netlink: 'syz.1.279': attribute type 29 has an invalid length.
[   90.030916][ T6559] netlink: 'syz.1.279': attribute type 29 has an invalid length.
[   90.221507][ T6573] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.455679][ T6581] xt_time: invalid argument - start or stop time greater than 23:59:59
[   91.997342][ T6615] validate_nla: 2 callbacks suppressed
[   91.997375][ T6615] netlink: 'syz.2.304': attribute type 16 has an invalid length.
[   92.012435][ T6615] __nla_validate_parse: 10 callbacks suppressed
[   92.012451][ T6615] netlink: 156 bytes leftover after parsing attributes in process `syz.2.304'.
[   92.628601][ T6617] netlink: 763 bytes leftover after parsing attributes in process `syz.0.305'.
[   92.983723][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.314'.
[   93.198796][ T6638] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[   93.203729][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'.
[   93.264422][ T6640] netlink: 300 bytes leftover after parsing attributes in process `syz.2.316'.
[   93.556302][ T6667] netlink: 188 bytes leftover after parsing attributes in process `syz.2.325'.
[   93.979547][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'.
[   94.616886][ T6704] netlink: 'syz.2.338': attribute type 4 has an invalid length.
[   95.031882][ T6708] tap0: tun_chr_ioctl cmd 1074025677
[   95.034173][ T6708] tap0: linktype set to 0
[   95.161272][ T6713] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[   96.013969][ T6733] delete_channel: no stack
[   96.225736][ T6741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.350'.
[   96.245465][ T6741] netlink: 76 bytes leftover after parsing attributes in process `syz.2.350'.
[   96.308495][ T6743] netlink: 'syz.2.351': attribute type 2 has an invalid length.
[  102.542628][ T6754] xt_l2tp: unknown flags: 51
[  105.448571][ T6782] netlink: 'syz.1.366': attribute type 21 has an invalid length.
[  105.683992][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[  105.940642][ T6797] netlink: 'syz.2.373': attribute type 2 has an invalid length.
[  105.943161][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'.
[  106.362189][ T6823] netlink: 64 bytes leftover after parsing attributes in process `syz.0.384'.
[  106.365744][ T6823] netlink: 'syz.0.384': attribute type 2 has an invalid length.
[  106.368619][ T6823] netlink: 'syz.0.384': attribute type 8 has an invalid length.
[  106.372312][ T6823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.384'.
[  106.625398][ T6833] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[  106.915040][ T6849] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[  106.918008][ T6849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.004243][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[  107.378514][ T6876] netlink: 184 bytes leftover after parsing attributes in process `syz.0.410'.
[  107.521788][ T6880] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.412'.
[  109.215103][ T6889] bpf: Bad value for 'gid'
[  109.235958][ T6889] netlink: 'syz.2.415': attribute type 10 has an invalid length.
[  109.326479][ T6889] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.346471][ T6889] syz.2.415 (6889) used greatest stack depth: 18512 bytes left
[  109.356491][ T6895] netlink: 'syz.0.417': attribute type 13 has an invalid length.
[  110.133886][ T6908] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  110.353800][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'.
[  110.372541][ T6917] delete_channel: no stack
[  110.962783][ T6917] delete_channel: no stack
[  111.394093][ T6942] netlink: 'syz.2.435': attribute type 33 has an invalid length.
[  111.396889][ T6942] netlink: 152 bytes leftover after parsing attributes in process `syz.2.435'.
[  111.604242][ T6956] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.443'.
[  111.750682][ T6969] netlink: 830 bytes leftover after parsing attributes in process `syz.2.450'.
[  111.818080][ T6970] netlink: 56 bytes leftover after parsing attributes in process `syz.0.451'.
[  111.823974][ T6970] netlink: 56 bytes leftover after parsing attributes in process `syz.0.451'.
[  111.837006][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'.
[  112.188979][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'.
[  113.647120][ T7017] netlink: 'syz.1.470': attribute type 210 has an invalid length.
[  114.952780][   T55] Bluetooth: hci2: adv larger than maximum supported
[  115.527756][ T7096] : entered promiscuous mode
[  115.865061][ T7108] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.512'.
[  115.986135][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[  117.204381][ T7154] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  117.334898][ T7160] tap0: tun_chr_ioctl cmd 35108
[  117.618377][ T7175] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.541'.
[  117.799445][ T7183] netlink: 22 bytes leftover after parsing attributes in process `syz.1.544'.
[  118.076398][ T7202] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[  118.806680][ T7221] netlink: 'syz.0.561': attribute type 4 has an invalid length.
[  119.023392][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.564'.
[  119.027811][ T7230] caif0: entered promiscuous mode
[  119.029696][ T7230] caif0: entered allmulticast mode
[  119.033842][ T7230] netlink: 10 bytes leftover after parsing attributes in process `syz.0.564'.
[  119.081295][ T7235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.566'.
[  119.084400][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'.
[  119.216766][ T7243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.570'.
[  119.507745][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[  119.534308][ T7267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.579'.
[  119.538018][ T7267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.579'.
[  119.987156][ T7288] netlink: 'syz.1.589': attribute type 10 has an invalid length.
[  120.116846][ T7288] bridge0: port 3(macsec0) entered blocking state
[  120.120881][ T7288] bridge0: port 3(macsec0) entered disabled state
[  120.128569][ T7288] macsec0: entered allmulticast mode
[  120.134664][ T7288] veth1_macvtap: entered allmulticast mode
[  120.182264][ T7288] macsec0: entered promiscuous mode
[  120.200008][ T7288] bridge0: port 3(macsec0) entered blocking state
[  120.207101][ T7288] bridge0: port 3(macsec0) entered forwarding state
[  120.453046][ T7301] openvswitch: netlink: IPv4 tun info is not correct
[  120.581044][ T7303] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.584264][ T7303] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  121.218964][ T7318] netlink: 'syz.0.604': attribute type 2 has an invalid length.
[  121.223545][ T7318] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[  121.227015][ T7318] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[  121.584942][ T7319] delete_channel: no stack
[  121.722431][ T7327] netlink: 'syz.2.608': attribute type 3 has an invalid length.
[  122.219731][ T7350] netlink: 'syz.2.611': attribute type 1 has an invalid length.
[  122.224145][ T7350] netlink: 'syz.2.611': attribute type 2 has an invalid length.
[  122.227349][ T7350] netlink: 'syz.2.611': attribute type 7 has an invalid length.
[  123.496305][ T7352] __nla_validate_parse: 6 callbacks suppressed
[  123.496318][ T7352] netlink: 48 bytes leftover after parsing attributes in process `syz.0.619'.
[  125.466668][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1435928262 wd_nsec: 1435928272
[  133.471470][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  133.474310][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  136.236835][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4146045523 wd_nsec: 4146031145
[  137.621022][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  137.624874][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  137.628077][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  137.631764][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  137.634406][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  137.771478][ T7364] chnl_net:caif_netlink_parms(): no params data found
[  139.652191][ T5239] Bluetooth: hci3: command tx timeout
[  140.006076][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.014624][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.018112][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.022804][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.027357][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  140.076594][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  140.083114][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  140.086701][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  140.090991][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  140.097264][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  141.730965][   T55] Bluetooth: hci3: command tx timeout
[  142.130060][ T5239] Bluetooth: hci4: command tx timeout
[  142.133417][   T55] Bluetooth: hci5: command tx timeout
[  143.514956][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.517878][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.540777][ T7364] bridge_slave_0: entered allmulticast mode
[  143.544605][ T7364] bridge_slave_0: entered promiscuous mode
[  143.630168][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.632608][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.635169][ T7364] bridge_slave_1: entered allmulticast mode
[  143.638215][ T7364] bridge_slave_1: entered promiscuous mode
[  143.777237][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.783404][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.810051][   T55] Bluetooth: hci3: command tx timeout
[  143.851631][ T7364] team0: Port device team_slave_0 added
[  143.881125][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.898268][ T7364] team0: Port device team_slave_1 added
[  143.949789][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.953271][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.966331][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.972593][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.975466][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.987790][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.005535][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.102417][ T7364] hsr_slave_0: entered promiscuous mode
[  144.105661][ T7364] hsr_slave_1: entered promiscuous mode
[  144.108572][ T7364] debugfs: 'hsr0' already exists in 'hsr'
[  144.112346][ T7364] Cannot create hsr debugfs directory
[  144.142985][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.210030][   T55] Bluetooth: hci5: command tx timeout
[  144.211048][ T5239] Bluetooth: hci4: command tx timeout
[  144.240811][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.261196][ T7373] chnl_net:caif_netlink_parms(): no params data found
[  144.333031][ T7375] chnl_net:caif_netlink_parms(): no params data found
[  144.485031][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.487947][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.491541][ T7373] bridge_slave_0: entered allmulticast mode
[  144.495312][ T7373] bridge_slave_0: entered promiscuous mode
[  144.537323][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.541609][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.544958][ T7373] bridge_slave_1: entered allmulticast mode
[  144.549288][ T7373] bridge_slave_1: entered promiscuous mode
[  144.625268][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.628333][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.631529][ T7375] bridge_slave_0: entered allmulticast mode
[  144.636045][ T7375] bridge_slave_0: entered promiscuous mode
[  144.643039][   T13] bridge_slave_1: left allmulticast mode
[  144.645114][   T13] bridge_slave_1: left promiscuous mode
[  144.647378][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.657709][   T13] bridge_slave_0: left allmulticast mode
[  144.661806][   T13] bridge_slave_0: left promiscuous mode
[  144.664371][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.933746][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.938892][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.943396][   T13] bond0 (unregistering): Released all slaves
[  144.971927][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.975197][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.977442][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.979611][ T7375] bridge_slave_1: entered allmulticast mode
[  144.983967][ T7375] bridge_slave_1: entered promiscuous mode
[  145.017190][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.029702][   T13] : left promiscuous mode
[  145.049295][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.073500][ T7373] team0: Port device team_slave_0 added
[  145.076816][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.081086][ T7373] team0: Port device team_slave_1 added
[  145.162947][ T7375] team0: Port device team_slave_0 added
[  145.166659][ T7364] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.176323][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.178551][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.203806][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.208513][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.212146][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.221141][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.226299][ T7375] team0: Port device team_slave_1 added
[  145.228542][ T7364] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.251164][ T7364] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.294129][ T7364] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.303439][   T13] hsr_slave_0: left promiscuous mode
[  145.305611][   T13] hsr_slave_1: left promiscuous mode
[  145.307787][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.310333][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.313655][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.316139][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.328467][   T13] veth1_macvtap: left promiscuous mode
[  145.330860][   T13] veth0_macvtap: left promiscuous mode
[  145.333312][   T13] veth1_vlan: left promiscuous mode
[  145.335064][   T13] veth0_vlan: left promiscuous mode
[  145.895896][   T55] Bluetooth: hci3: command tx timeout
[  145.913847][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.916573][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.929653][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.938832][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.942397][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.956952][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.979298][ T7373] hsr_slave_0: entered promiscuous mode
[  145.984608][ T7373] hsr_slave_1: entered promiscuous mode
[  145.986749][ T7373] debugfs: 'hsr0' already exists in 'hsr'
[  145.988876][ T7373] Cannot create hsr debugfs directory
[  146.106295][ T7375] hsr_slave_0: entered promiscuous mode
[  146.108870][ T7375] hsr_slave_1: entered promiscuous mode
[  146.116577][ T7375] debugfs: 'hsr0' already exists in 'hsr'
[  146.118455][ T7375] Cannot create hsr debugfs directory
[  146.291316][   T55] Bluetooth: hci5: command tx timeout
[  146.291340][ T5239] Bluetooth: hci4: command tx timeout
[  146.506193][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.514030][ T7373] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  146.556947][ T7373] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  146.575583][ T7373] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  146.597259][ T7373] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  146.607683][ T7364] 8021q: adding VLAN 0 to HW filter on device team0
[  146.656811][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.659044][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.703529][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.706097][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.723707][ T7375] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  146.728698][ T7375] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  146.737886][ T7375] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  146.746442][ T7375] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  146.905720][ T7373] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.974229][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.992039][ T7373] 8021q: adding VLAN 0 to HW filter on device team0
[  147.006049][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.008909][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.024373][ T7375] 8021q: adding VLAN 0 to HW filter on device team0
[  147.037078][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.039948][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.077349][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.080289][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.092582][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.095348][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.210852][ T7375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.219043][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.311041][ T7364] veth0_vlan: entered promiscuous mode
[  147.331937][ T7364] veth1_vlan: entered promiscuous mode
[  147.382405][ T7364] veth0_macvtap: entered promiscuous mode
[  147.388268][ T7364] veth1_macvtap: entered promiscuous mode
[  147.445397][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.459620][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.474497][ T7373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.501746][ T5877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.535387][ T5877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.546323][ T5877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.571063][ T5877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.631462][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.654827][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.657880][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.722388][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.728078][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.924126][ T7373] veth0_vlan: entered promiscuous mode
[  147.933439][ T7373] veth1_vlan: entered promiscuous mode
[  148.002766][ T7373] veth0_macvtap: entered promiscuous mode
[  148.016549][ T7373] veth1_macvtap: entered promiscuous mode
[  148.067447][ T7375] veth0_vlan: entered promiscuous mode
[  148.075325][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.100223][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.105552][ T7375] veth1_vlan: entered promiscuous mode
[  148.119662][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.137017][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.141046][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.144490][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.206093][ T7375] veth0_macvtap: entered promiscuous mode
[  148.241775][ T7375] veth1_macvtap: entered promiscuous mode
[  148.304219][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.630'.
[  148.311873][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.316405][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.630'.
[  148.330339][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.630'.
[  148.331480][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.340897][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.345211][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.370254][ T5239] Bluetooth: hci4: command tx timeout
[  148.375321][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.380422][ T5239] Bluetooth: hci5: command tx timeout
[  148.391411][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.394904][ T5859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.398426][ T5859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.481786][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.486285][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.794804][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.801933][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.857978][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.871271][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.097850][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.626'.
[  149.168134][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.626'.
[  149.182461][ T7493] validate_nla: 2 callbacks suppressed
[  149.182482][ T7493] netlink: 'syz.4.634': attribute type 21 has an invalid length.
[  149.201061][ T7493] IPv6: NLM_F_CREATE should be specified when creating new route
[  149.205941][ T7493] IPv6: Can't replace route, no match found
[  149.664237][ T7512] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.643'.
[  149.821469][ T7517] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.645'.
[  149.824392][ T7517] netlink: zone id is out of range
[  149.826005][ T7517] netlink: get zone limit has 8 unknown bytes
[  149.925272][ T7521] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  150.793633][ T7557] netlink: 68 bytes leftover after parsing attributes in process `syz.5.663'.
[  151.274351][ T7570] -1: renamed from syzkaller0
[  152.551900][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'.
[  153.224590][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.687'.
[  153.335748][ T7631] __nla_validate_parse: 1 callbacks suppressed
[  153.335764][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.691'.
[  153.414525][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'.
[  153.581459][ T7645] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.698'.
[  153.591904][ T7643] netlink: 'syz.3.697': attribute type 21 has an invalid length.
[  153.609509][ T7643] netlink: 'syz.3.697': attribute type 10 has an invalid length.
[  154.159135][ T7656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.217774][ T7661] netlink: 'syz.5.706': attribute type 21 has an invalid length.
[  154.435721][ T7677] netlink: 'syz.5.714': attribute type 21 has an invalid length.
[  155.627366][ T7716] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  155.952988][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'.
[  155.990966][ T7732] : entered promiscuous mode
[  156.125807][ T7723] delete_channel: no stack
[  157.832474][ T7808] netlink: 'syz.4.767': attribute type 4 has an invalid length.
[  157.834734][ T7808] netlink: 17 bytes leftover after parsing attributes in process `syz.4.767'.
[  157.857057][ T7809] netlink: 'syz.5.766': attribute type 21 has an invalid length.
[  157.866491][ T7809] netlink: 128 bytes leftover after parsing attributes in process `syz.5.766'.
[  157.877473][ T7809] netlink: 3 bytes leftover after parsing attributes in process `syz.5.766'.
[  158.403426][ T7832] xt_socket: unknown flags 0x20
[  158.464739][ T5239] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  160.015409][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'.
[  161.429275][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'.
[  161.448167][ T7883] netlink: 6 bytes leftover after parsing attributes in process `syz.4.794'.
[  162.140367][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'.
[  162.669489][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.802'.
[  163.430305][   T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  163.434031][   T55] Bluetooth: hci3: Injecting HCI hardware error event
[  163.437908][   T55] Bluetooth: hci3: hardware error 0x00
[  165.297907][ T7935] netlink: 'syz.4.814': attribute type 1 has an invalid length.
[  165.365887][ T7939] netlink: 'syz.4.816': attribute type 39 has an invalid length.
[  165.386214][ T7941] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.817'.
[  165.398444][ T7941] netlink: 104088 bytes leftover after parsing attributes in process `syz.5.817'.
[  165.405304][ T7941] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.817'.
[  165.442316][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'.
[  166.024738][ T7973] netlink: 2 bytes leftover after parsing attributes in process `syz.5.831'.
[  166.526277][ T7996] : renamed from gre0 (while UP)
[  166.581719][ T8000] netlink: 14 bytes leftover after parsing attributes in process `syz.3.841'.
[  166.836246][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  167.686622][ T8017] netlink: 'syz.5.849': attribute type 3 has an invalid length.
[  167.944908][ T8029] netlink: 'syz.5.854': attribute type 10 has an invalid length.
[  168.098815][ T8029] veth1_vlan: entered allmulticast mode
[  168.285598][ T8037] netlink: 'syz.5.858': attribute type 39 has an invalid length.
[  168.616336][ T8047] netlink: 'syz.5.862': attribute type 4 has an invalid length.
[  168.624438][ T8047] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.862'.
[  168.932904][ T8059] netlink: 56 bytes leftover after parsing attributes in process `syz.5.868'.
[  169.131960][ T8077] netlink: 'syz.4.877': attribute type 64 has an invalid length.
[  169.191490][ T8081] netlink: 'syz.3.879': attribute type 1 has an invalid length.
[  169.193969][ T8081] netlink: 'syz.3.879': attribute type 2 has an invalid length.
[  173.016847][ T8129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.901'.
[  173.111529][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'.
[  173.152262][ T8140] netlink: 'syz.3.905': attribute type 13 has an invalid length.
[  173.155349][ T8140] macvtap0: entered promiscuous mode
[  173.160552][ T8140] macvtap0: refused to change device tx_queue_len
[  173.428541][ T8157] netlink: 132 bytes leftover after parsing attributes in process `syz.4.912'.
[  173.490918][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'.
[  173.626483][ T8168] netlink: 17 bytes leftover after parsing attributes in process `syz.5.918'.
[  173.630436][ T8168] netlink: zone id is out of range
[  173.632657][ T8168] netlink: zone id is out of range
[  173.635092][ T8168] netlink: zone id is out of range
[  173.637460][ T8168] netlink: zone id is out of range
[  173.647269][ T8168] netlink: zone id is out of range
[  173.649428][ T8168] netlink: zone id is out of range
[  173.652610][ T8168] netlink: zone id is out of range
[  173.654602][ T8168] netlink: zone id is out of range
[  173.656585][ T8168] netlink: zone id is out of range
[  173.658585][ T8168] netlink: zone id is out of range
[  174.324096][   T55] Bluetooth: hci5: unexpected event 0x33 length: 15 > 10
[  174.903180][ T8192] netlink: 52 bytes leftover after parsing attributes in process `syz.4.930'.
[  175.389116][ T8241] tc_dump_action: action bad kind
[  175.858499][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'.
[  175.870647][ T8272] netlink: 6 bytes leftover after parsing attributes in process `syz.3.968'.
[  175.929209][ T8274] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.967'.
[  176.055431][ T8284] netlink: 'syz.3.972': attribute type 1 has an invalid length.
[  176.062850][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'.
[  192.078723][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.083505][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.086872][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.093163][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.112488][ T8323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  192.127798][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.132336][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.135577][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.139274][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.142975][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  192.538683][ T8317] chnl_net:caif_netlink_parms(): no params data found
[  192.597976][ T8320] chnl_net:caif_netlink_parms(): no params data found
[  193.350283][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.353076][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.356012][ T8317] bridge_slave_0: entered allmulticast mode
[  193.359757][ T8317] bridge_slave_0: entered promiscuous mode
[  193.418390][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.427259][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.430705][ T8317] bridge_slave_1: entered allmulticast mode
[  193.435749][ T8317] bridge_slave_1: entered promiscuous mode
[  193.609604][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.618112][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.623505][ T8320] bridge_slave_0: entered allmulticast mode
[  193.629259][ T8320] bridge_slave_0: entered promiscuous mode
[  193.729655][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.734369][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.737468][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.741947][ T8320] bridge_slave_1: entered allmulticast mode
[  193.748145][ T8320] bridge_slave_1: entered promiscuous mode
[  193.848413][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.875069][ T8320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.995125][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.997643][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.027741][ T5859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.061387][ T8320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.074621][ T8317] team0: Port device team_slave_0 added
[  194.108623][ T8317] team0: Port device team_slave_1 added
[  194.126116][ T5859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.131387][   T55] Bluetooth: hci0: command tx timeout
[  194.143775][ T8320] team0: Port device team_slave_0 added
[  194.198029][ T8320] team0: Port device team_slave_1 added
[  194.214407][   T55] Bluetooth: hci1: command tx timeout
[  194.225465][ T5859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.239807][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.242573][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.259996][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.277817][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.280434][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.290680][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.348022][ T5859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.377908][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.380766][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.394870][ T8320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.411119][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.418463][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.428730][ T8320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.545631][ T8317] hsr_slave_0: entered promiscuous mode
[  194.548528][ T8317] hsr_slave_1: entered promiscuous mode
[  194.555179][ T8317] debugfs: 'hsr0' already exists in 'hsr'
[  194.557691][ T8317] Cannot create hsr debugfs directory
[  194.651463][ T8320] hsr_slave_0: entered promiscuous mode
[  194.660859][ T8320] hsr_slave_1: entered promiscuous mode
[  194.663805][ T8320] debugfs: 'hsr0' already exists in 'hsr'
[  194.666091][ T8320] Cannot create hsr debugfs directory
[  194.991500][ T5859] bridge_slave_1: left allmulticast mode
[  194.993874][ T5859] bridge_slave_1: left promiscuous mode
[  194.997497][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.007440][ T5859] bridge_slave_0: left allmulticast mode
[  195.009760][ T5859] bridge_slave_0: left promiscuous mode
[  195.013255][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.033075][ T8364] netlink: 'syz.3.999': attribute type 3 has an invalid length.
[  195.036206][ T8364] netlink: 199752 bytes leftover after parsing attributes in process `syz.3.999'.
[  195.391398][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.397966][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.404018][ T5859] bond0 (unregistering): Released all slaves
[  195.506945][ T5859] : left promiscuous mode
[  195.898825][ T8317] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  195.916049][ T8317] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  196.005873][ T8317] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  196.016205][ T8317] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  196.125828][ T5859] hsr_slave_0: left promiscuous mode
[  196.151936][ T5859] hsr_slave_1: left promiscuous mode
[  196.154376][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.156910][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.168262][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.173792][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.191341][ T5859] veth1_macvtap: left promiscuous mode
[  196.193169][ T5859] veth0_macvtap: left promiscuous mode
[  196.195092][ T5859] veth1_vlan: left promiscuous mode
[  196.197858][ T5859] veth0_vlan: left promiscuous mode
[  196.210355][   T55] Bluetooth: hci0: command tx timeout
[  196.290170][   T55] Bluetooth: hci1: command tx timeout
[  196.635417][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  196.669555][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  196.998711][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.001889][ T8320] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  197.007297][ T8320] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  197.012133][ T8320] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  197.013002][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.026826][ T8320] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  197.038584][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.058089][ T8397] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  197.149198][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.171526][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.175146][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.203197][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.213882][ T8317] 8021q: adding VLAN 0 to HW filter on device team0
[  197.229462][ T8320] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.236293][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.256963][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.259278][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.266852][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.279065][ T8397] erspan0 speed is unknown, defaulting to 1000
[  197.284958][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.287535][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.307884][ T8320] 8021q: adding VLAN 0 to HW filter on device team0
[  197.386468][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.389254][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.404528][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.407377][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.495445][ T5859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.623553][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  197.628268][ T5859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.742175][ T5859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.807736][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.906514][ T5859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.963123][ T8320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.201057][ T5859] bridge_slave_1: left allmulticast mode
[  198.203077][ T5859] bridge_slave_1: left promiscuous mode
[  198.204816][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.209531][ T5859] bridge_slave_0: left allmulticast mode
[  198.215812][ T5859] bridge_slave_0: left promiscuous mode
[  198.217977][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.290325][   T55] Bluetooth: hci0: command tx timeout
[  198.380083][   T55] Bluetooth: hci1: command tx timeout
[  198.590295][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.595576][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.600815][ T5859] bond0 (unregistering): Released all slaves
[  198.659249][ T8317] veth0_vlan: entered promiscuous mode
[  198.685647][ T8317] veth1_vlan: entered promiscuous mode
[  198.838982][ T8320] veth0_vlan: entered promiscuous mode
[  198.855383][ T8317] veth0_macvtap: entered promiscuous mode
[  198.928574][ T8317] veth1_macvtap: entered promiscuous mode
[  198.936627][ T8320] veth1_vlan: entered promiscuous mode
[  198.968802][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.055444][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.069263][ T5859] hsr_slave_0: left promiscuous mode
[  199.075497][ T5859] hsr_slave_1: left promiscuous mode
[  199.078519][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.082312][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.086296][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.094764][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.145478][ T5859] veth1_macvtap: left promiscuous mode
[  199.147803][ T5859] veth0_macvtap: left promiscuous mode
[  199.151374][ T5859] veth0_vlan: left promiscuous mode
[  200.191109][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  200.227027][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  200.380728][   T55] Bluetooth: hci0: command tx timeout
[  200.454750][   T55] Bluetooth: hci1: command tx timeout
[  200.657736][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.670494][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.674635][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.678543][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.706325][ T8320] veth0_macvtap: entered promiscuous mode
[  200.728870][ T8463] erspan0 speed is unknown, defaulting to 1000
[  200.785563][ T8320] veth1_macvtap: entered promiscuous mode
[  200.906216][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.964420][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.985354][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.988619][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.991525][ T5878] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.992134][ T5878] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.044697][ T5878] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.076932][ T5878] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.126743][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.156335][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.228792][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.236370][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.301370][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.307746][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.520616][ T8485] netlink: 'syz.6.1016': attribute type 21 has an invalid length.
[  202.482347][ T8507] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1021'.
[  202.847061][ T8524] netlink: 'syz.7.1022': attribute type 22 has an invalid length.
[  202.921986][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1022'.
[  203.825929][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'.
[  205.058636][ T8567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1040'.
[  205.069101][ T8568] sctp: [Deprecated]: syz.7.1039 (pid 8568) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.069101][ T8568] Use struct sctp_sack_info instead
[  205.110043][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'.
[  205.113694][ T8571] net_ratelimit: 76 callbacks suppressed
[  205.113709][ T8571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.120875][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'.
[  205.134484][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'.
[  205.929269][ T8600] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1054'.
[  205.966279][ T8600] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1054'.
[  206.043890][ T8604] raw_sendmsg: syz.6.1054 forgot to set AF_INET. Fix it!
[  206.060338][ T8599] delete_channel: no stack
[  206.934179][ T8632] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1067'.
[  207.093508][ T8640] netlink: 'syz.3.1071': attribute type 5 has an invalid length.
[  207.503891][ T8648] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  207.534710][   T55] Bluetooth: hci1: ACL packet too small
[  208.001750][ T8679] netlink: 'syz.3.1090': attribute type 21 has an invalid length.
[  208.132211][ T8688] __nla_validate_parse: 3 callbacks suppressed
[  208.132221][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'.
[  209.233706][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1113'.
[  209.245510][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1113'.
[  209.438800][ T8746] netlink: 'syz.6.1117': attribute type 1 has an invalid length.
[  209.570003][ T8755] xt_time: unknown flags 0xf4
[  209.696450][ T8761] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.1121'.
[  210.076832][ T8767] netlink: 'syz.3.1123': attribute type 12 has an invalid length.
[  210.080881][ T8767] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1123'.
[  210.453515][ T8777] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1127'.
[  213.432897][ T8817] netlink: 'syz.7.1144': attribute type 1 has an invalid length.
[  213.456157][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1144'.
[  214.739579][ T8851] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1156'.
[  214.869681][ T8865] netlink: 'syz.6.1161': attribute type 2 has an invalid length.
[  221.397570][ T8885] netlink: 'syz.7.1166': attribute type 21 has an invalid length.
[  224.198856][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.614116][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.619113][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.623540][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.629761][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.634617][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.695623][ T8933] erspan0 speed is unknown, defaulting to 1000
[  230.904050][ T8933] chnl_net:caif_netlink_parms(): no params data found
[  232.691902][   T55] Bluetooth: hci2: command tx timeout
[  234.770133][   T55] Bluetooth: hci2: command tx timeout
[  235.342261][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.497455][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.509423][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.520833][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.523227][ T8933] bridge_slave_0: entered allmulticast mode
[  235.525966][ T8933] bridge_slave_0: entered promiscuous mode
[  235.532823][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.535242][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.537498][ T8933] bridge_slave_1: entered allmulticast mode
[  235.538763][ T8948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1174'.
[  235.540975][ T8933] bridge_slave_1: entered promiscuous mode
[  235.649386][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.685697][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.691123][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.864811][ T8933] team0: Port device team_slave_0 added
[  235.868554][ T8933] team0: Port device team_slave_1 added
[  235.909515][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.917702][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.926925][ T8933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.949712][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.955947][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.966506][ T8933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.088397][ T8933] hsr_slave_0: entered promiscuous mode
[  236.097386][ T8933] hsr_slave_1: entered promiscuous mode
[  236.100887][ T8933] debugfs: 'hsr0' already exists in 'hsr'
[  236.102918][ T8933] Cannot create hsr debugfs directory
[  236.331463][   T13] bridge_slave_1: left allmulticast mode
[  236.333424][   T13] bridge_slave_1: left promiscuous mode
[  236.335539][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.348181][   T13] bridge_slave_0: left allmulticast mode
[  236.352694][   T13] bridge_slave_0: left promiscuous mode
[  236.354857][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.355277][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1179'.
[  236.396960][ T8964] netlink: 'syz.7.1179': attribute type 40 has an invalid length.
[  236.655847][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.663320][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.668260][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  236.676715][   T13] bond0 (unregistering): Released all slaves
[  236.871863][   T55] Bluetooth: hci2: command tx timeout
[  237.087581][ T8964] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  237.125194][ T8933] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  237.138741][ T8933] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  237.162735][ T8933] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  237.224398][ T8933] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  237.598339][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.615791][ T8933] 8021q: adding VLAN 0 to HW filter on device team0
[  237.642362][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.644936][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.658035][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.660403][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.676359][   T13] hsr_slave_0: left promiscuous mode
[  237.678988][   T13] hsr_slave_1: left promiscuous mode
[  237.695018][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.697324][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.722331][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.724640][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.756056][   T13] batman_adv: batadv0: Removing interface: team0
[  237.801494][   T13] veth1_macvtap: left promiscuous mode
[  237.803257][   T13] veth0_macvtap: left promiscuous mode
[  237.805304][   T13] veth1_vlan: left promiscuous mode
[  237.806931][   T13] veth0_vlan: left promiscuous mode
[  238.734759][   T13] team0 (unregistering): Port device team_slave_1 removed
[  238.823083][   T13] team0 (unregistering): Port device team_slave_0 removed
[  238.941420][   T55] Bluetooth: hci2: command tx timeout
[  239.548664][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.766528][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.936896][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.136827][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.186577][ T8933] veth0_vlan: entered promiscuous mode
[  240.271217][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.297831][ T8933] veth1_vlan: entered promiscuous mode
[  240.329253][ T8933] veth0_macvtap: entered promiscuous mode
[  240.339605][ T8933] veth1_macvtap: entered promiscuous mode
[  240.453443][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.577492][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.639102][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.675989][ T5877] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.698235][ T5877] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.715079][ T5877] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.757152][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1210'.
[  240.799732][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.818693][ T5877] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.953346][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.784988][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.961960][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.964448][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.092497][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.096715][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.164746][   T13] bridge_slave_1: left allmulticast mode
[  242.193354][   T13] bridge_slave_1: left promiscuous mode
[  242.196569][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.642734][   T13] bridge_slave_0: left allmulticast mode
[  243.645018][   T13] bridge_slave_0: left promiscuous mode
[  243.647501][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.664811][   T13] macsec0: left allmulticast mode
[  243.666617][   T13] veth1_macvtap: left allmulticast mode
[  243.668595][   T13] macsec0: left promiscuous mode
[  243.705155][   T13] bridge0: port 3(macsec0) entered disabled state
[  243.709773][   T13] bridge_slave_1: left allmulticast mode
[  243.713063][   T13] bridge_slave_1: left promiscuous mode
[  243.715216][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.719582][   T13] bridge_slave_0: left allmulticast mode
[  243.723468][   T13] bridge_slave_0: left promiscuous mode
[  243.726007][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.064997][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.069615][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.073905][   T13] bond0 (unregistering): Released all slaves
[  244.318222][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.324577][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.329641][   T13] bond0 (unregistering): Released all slaves
[  244.407832][ T9139] netlink: 'syz.8.1172': attribute type 21 has an invalid length.
[  244.446296][ T9139] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1172'.
[  244.468462][ T9139] netlink: 'syz.8.1172': attribute type 6 has an invalid length.
[  244.550688][ T9139] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1172'.
[  246.142302][ T9181] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1235'.
[  246.151738][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'.
[  246.692687][   T13] hsr_slave_0: left promiscuous mode
[  246.825703][   T13] hsr_slave_1: left promiscuous mode
[  246.832826][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.835363][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.838186][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.849622][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.869632][   T13] hsr_slave_0: left promiscuous mode
[  246.875425][   T13] hsr_slave_1: left promiscuous mode
[  246.877960][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.884041][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.888768][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.907754][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.024949][ T9207] xt_HMARK: proto mask must be zero with L3 mode
[  247.035265][   T13] veth1_macvtap: left promiscuous mode
[  247.037113][   T13] veth0_macvtap: left promiscuous mode
[  247.039007][   T13] veth1_vlan: left promiscuous mode
[  247.041131][   T13] veth0_vlan: left promiscuous mode
[  247.064236][ T9210] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1246'.
[  247.067899][ T9210] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  247.073175][ T9210] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  247.794534][   T13] veth1_macvtap: left promiscuous mode
[  247.799318][   T13] veth0_macvtap: left promiscuous mode
[  247.806974][   T13] veth1_vlan: left promiscuous mode
[  247.810244][   T13] veth0_vlan: left promiscuous mode
[  248.560924][ T9239] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1261'.
[  248.621676][   T13] team0 (unregistering): Port device team_slave_1 removed
[  248.668717][   T13] team0 (unregistering): Port device team_slave_0 removed
[  248.703528][ T9245] netlink: 'syz.7.1264': attribute type 16 has an invalid length.
[  248.706654][ T9245] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1264'.
[  249.336693][   T13] team0 (unregistering): Port device team_slave_1 removed
[  249.376309][   T13] team0 (unregistering): Port device team_slave_0 removed
[  249.768059][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1247'.
[  249.927325][ T9255] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1266'.
[  249.947475][ T9255] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1266'.
[  250.929821][ T9300] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  251.433342][ T9326] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1286'.
[  251.582237][ T9328] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.1287'.
[  251.848724][ T9348] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  252.144174][ T9369] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1304'.
[  252.151252][ T9362] delete_channel: no stack
[  252.654794][ T9384] netlink: 'syz.3.1310': attribute type 1 has an invalid length.
[  253.363870][ T9379] erspan0 speed is unknown, defaulting to 1000
[  253.479482][ T9410] netlink: 'syz.8.1315': attribute type 29 has an invalid length.
[  253.486010][ T9410] netlink: 'syz.8.1315': attribute type 29 has an invalid length.
[  253.859981][ T9435] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1327'.
[  254.047864][ T9447] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1330'.
[  254.298863][ T9460] netlink: 'syz.3.1334': attribute type 5 has an invalid length.
[  254.863954][ T9471] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1337'.
[  255.216222][ T9477] sctp: [Deprecated]: syz.3.1339 (pid 9477) Use of int in max_burst socket option deprecated.
[  255.216222][ T9477] Use struct sctp_assoc_value instead
[  255.414493][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.416644][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  256.006741][ T9516] netlink: 'syz.7.1354': attribute type 1 has an invalid length.
[  256.044662][ T9520] netlink: 'syz.8.1353': attribute type 16 has an invalid length.
[  256.047951][ T9520] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1353'.
[  257.388294][ T9569] tmpfs: Bad value for 'gid'
[  257.394075][ T9569] tmpfs: Bad value for 'gid'
[  257.687318][ T9577] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1373'.
[  258.046121][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1386'.
[  258.241183][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1393'.
[  258.673732][ T9633] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1398'.
[  258.873168][ T9641] netlink: 'syz.8.1402': attribute type 29 has an invalid length.
[  258.878141][ T9641] netlink: 'syz.8.1402': attribute type 29 has an invalid length.
[  258.929394][ T9642] netlink: 'syz.3.1401': attribute type 39 has an invalid length.
[  259.644177][ T9656] netlink: 'syz.7.1407': attribute type 21 has an invalid length.
[  259.937415][ T9671] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.1410'.
[  260.306288][   T55] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  260.306319][   T55] Bluetooth: unknown link type 110
[  260.315900][   T55] Bluetooth: hci2: connection err: -111
[  260.939062][ T9692] netlink: 'syz.7.1417': attribute type 27 has an invalid length.
[  260.942047][ T9692] netlink: 'syz.7.1417': attribute type 4 has an invalid length.
[  260.944933][ T9692] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1417'.
[  261.109543][ T9701] netlink: 'syz.7.1425': attribute type 39 has an invalid length.
[  261.409531][ T9711] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1429'.
[  262.924715][ T9782] netlink: 'syz.7.1454': attribute type 1 has an invalid length.
[  263.123767][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'.
[  263.382820][ T9822] netlink: 67 bytes leftover after parsing attributes in process `syz.8.1468'.
[  263.514877][ T9830] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.1471'.
[  263.590536][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1472'.
[  263.721233][ T9833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.772622][ T9840] netlink: 'syz.7.1474': attribute type 3 has an invalid length.
[  263.775049][ T9840] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1474'.
[  264.277004][   T55] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  265.120036][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'.
[  265.157082][ T9914] : entered promiscuous mode
[  265.159741][ T9897] : port 1(vlan0) entered blocking state
[  265.161998][ T9897] : port 1(vlan0) entered disabled state
[  265.164337][ T9897] vlan0: entered allmulticast mode
[  265.166480][ T9897] veth0_vlan: entered allmulticast mode
[  265.181611][ T9897] vlan0: entered promiscuous mode
[  265.186764][ T9897] : port 1(vlan0) entered blocking state
[  265.189355][ T9897] : port 1(vlan0) entered forwarding state
[  266.263177][ T9945] netlink: 'syz.8.1516': attribute type 29 has an invalid length.
[  266.267553][ T9945] netlink: 'syz.8.1516': attribute type 29 has an invalid length.
[  266.276615][ T9945] netlink: 'syz.8.1516': attribute type 29 has an invalid length.
[  268.708941][ T9963] syzkaller1: tun_chr_ioctl cmd 1074812117
[  268.980647][ T9982] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1534'.
[  269.200577][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'.
[  269.210464][ T9996] syz.8.1539 (9996) used obsolete PPPIOCDETACH ioctl
[  269.329700][T10003] netlink: 'syz.3.1544': attribute type 10 has an invalid length.
[  269.334247][T10003] lo: entered promiscuous mode
[  269.337148][T10003] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  269.518537][T10017] sctp: [Deprecated]: syz.7.1551 (pid 10017) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.518537][T10017] Use struct sctp_sack_info instead
[  269.714181][T10029] netlink: 'syz.8.1557': attribute type 3 has an invalid length.
[  269.878143][T10036] netlink: 'syz.8.1560': attribute type 1 has an invalid length.
[  269.882268][T10036] netlink: 'syz.8.1560': attribute type 4 has an invalid length.
[  269.884873][T10036] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1560'.
[  270.488733][T10051] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.1567'.
[  270.497294][T10051] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1567'.
[  270.676082][T10058] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1570'.
[  271.177068][T10093] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1587'.
[  271.181322][T10093] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1587'.
[  271.332855][T10102] netlink: 'syz.8.1590': attribute type 49 has an invalid length.
[  271.503565][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1593'.
[  271.934324][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1602'.
[  272.789063][T10133] delete_channel: no stack
[  274.888943][T10153] netlink: 'syz.3.1614': attribute type 11 has an invalid length.
[  274.901306][T10153] __nla_validate_parse: 1 callbacks suppressed
[  274.901317][T10153] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1614'.
[  274.958018][T10156] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1615'.
[  274.997958][T10159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1617'.
[  275.341394][T10159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1617'.
[  275.670354][T10159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1617'.
[  275.915628][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1626'.
[  276.121516][T10187] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  276.437136][T10211] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1638'.
[  276.448514][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1639'.
[  276.765269][T10233] netlink: 'syz.3.1648': attribute type 1 has an invalid length.
[  276.995336][T10251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.011745][T10247] vcan0 speed is unknown, defaulting to 1000
[  277.018286][T10247] vcan0 speed is unknown, defaulting to 1000
[  277.034017][T10247] vcan0 speed is unknown, defaulting to 1000
[  277.847944][T10247] infiniband syz1: set active
[  277.851805][ T5912] vcan0 speed is unknown, defaulting to 1000
[  277.857968][T10247] infiniband syz1: added vcan0
[  278.042957][T10247] RDS/IB: syz1: added
[  278.052896][T10247] smc: adding ib device syz1 with port count 1
[  278.055679][T10247] smc:    ib device syz1 port 1 has pnetid 
[  278.454223][ T5912] vcan0 speed is unknown, defaulting to 1000
[  278.458494][T10247] vcan0 speed is unknown, defaulting to 1000
[  278.522175][T10279] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1666'.
[  278.744525][T10247] vcan0 speed is unknown, defaulting to 1000
[  278.955155][T10247] vcan0 speed is unknown, defaulting to 1000
[  279.394640][T10304] netlink: 'syz.3.1678': attribute type 21 has an invalid length.
[  279.397804][T10304] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1678'.
[  280.225995][T10330] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1689'.
[  280.230769][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1689'.
[  280.234671][T10330] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1689'.
[  280.494718][T10337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.906509][T10341] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1694'.
[  282.210487][T10387] netlink: 'syz.3.1712': attribute type 10 has an invalid length.
[  282.228143][T10392] netlink: 'syz.8.1714': attribute type 21 has an invalid length.
[  282.293239][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1715'.
[  282.441254][T10387] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  282.654367][T10404] netlink: 'syz.8.1719': attribute type 23 has an invalid length.
[  282.658661][T10398] netlink: del zone limit has 4 unknown bytes
[  283.070612][T10433] netlink: 'syz.3.1732': attribute type 11 has an invalid length.
[  283.073746][T10433] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1732'.
[  283.323708][T10443] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  283.442663][T10449] netlink: 'syz.8.1739': attribute type 1 has an invalid length.
[  283.720743][T10457] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1743'.
[  283.757708][T10459] netlink: 'syz.7.1744': attribute type 21 has an invalid length.
[  283.761550][T10459] netlink: 'syz.7.1744': attribute type 5 has an invalid length.
[  284.266874][T10471] netlink: 488 bytes leftover after parsing attributes in process `syz.7.1749'.
[  284.271270][T10471] netlink: 488 bytes leftover after parsing attributes in process `syz.7.1749'.
[  284.567695][T10479] netlink: 'syz.3.1753': attribute type 13 has an invalid length.
[  284.573575][T10479] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1753'.
[  284.903688][T10498] : renamed from wg2 (while UP)
[  285.624703][T10515] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1768'.
[  285.669428][T10517] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1769'.
[  287.105402][T10562] netlink: 'syz.7.1789': attribute type 21 has an invalid length.
[  287.288062][T10569] syz.8.1791: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  287.315018][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.8.1791 Not tainted syzkaller #0 PREEMPT(full) 
[  287.315045][T10569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.315062][T10569] Call Trace:
[  287.315073][T10569]  <TASK>
[  287.315084][T10569]  dump_stack_lvl+0x189/0x250
[  287.315131][T10569]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.315155][T10569]  ? __pfx__printk+0x10/0x10
[  287.315186][T10569]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  287.315210][T10569]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  287.315241][T10569]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  287.315271][T10569]  warn_alloc+0x214/0x310
[  287.315299][T10569]  ? stack_depot_save_flags+0x41b/0x860
[  287.315329][T10569]  ? __pfx_warn_alloc+0x10/0x10
[  287.315358][T10569]  ? kasan_save_track+0x4f/0x80
[  287.315383][T10569]  ? xskq_create+0x56/0x170
[  287.315398][T10569]  ? xsk_init_queue+0xb0/0x110
[  287.315412][T10569]  ? xsk_setsockopt+0x57b/0x8d0
[  287.315425][T10569]  ? do_sock_setsockopt+0x17c/0x1b0
[  287.315442][T10569]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  287.315455][T10569]  ? do_syscall_64+0xfa/0x3b0
[  287.315469][T10569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.315537][T10569]  __vmalloc_node_range_noprof+0x125/0x12f0
[  287.315658][T10569]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  287.315700][T10569]  ? __kasan_kmalloc+0x93/0xb0
[  287.315731][T10569]  vmalloc_user_noprof+0xad/0xf0
[  287.315749][T10569]  ? xskq_create+0xbf/0x170
[  287.315776][T10569]  xskq_create+0xbf/0x170
[  287.315807][T10569]  xsk_init_queue+0xb0/0x110
[  287.315837][T10569]  xsk_setsockopt+0x57b/0x8d0
[  287.315877][T10569]  ? __pfx_xsk_setsockopt+0x10/0x10
[  287.315902][T10569]  ? __pfx_aa_sk_perm+0x10/0x10
[  287.315937][T10569]  ? __fget_files+0x2a/0x420
[  287.315952][T10569]  ? aa_sock_opt_perm+0xff/0x1b0
[  287.315987][T10569]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  287.316005][T10569]  ? __pfx_xsk_setsockopt+0x10/0x10
[  287.316033][T10569]  do_sock_setsockopt+0x17c/0x1b0
[  287.316075][T10569]  __x64_sys_setsockopt+0x13f/0x1b0
[  287.316114][T10569]  do_syscall_64+0xfa/0x3b0
[  287.316132][T10569]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.316152][T10569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.316169][T10569]  ? exc_page_fault+0x9f/0xf0
[  287.316198][T10569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.316212][T10569] RIP: 0033:0x7fba9418ec29
[  287.316231][T10569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.316244][T10569] RSP: 002b:00007fba94fd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  287.316262][T10569] RAX: ffffffffffffffda RBX: 00007fba943d5fa0 RCX: 00007fba9418ec29
[  287.316272][T10569] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  287.316281][T10569] RBP: 00007fba94211e41 R08: 0000000000000004 R09: 0000000000000000
[  287.316289][T10569] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  287.316298][T10569] R13: 00007fba943d6038 R14: 00007fba943d5fa0 R15: 00007ffc580fae18
[  287.316364][T10569]  </TASK>
[  287.316370][T10569] Mem-Info:
[  287.448872][T10569] active_anon:8017 inactive_anon:0 isolated_anon:0
[  287.448872][T10569]  active_file:13729 inactive_file:38336 isolated_file:0
[  287.448872][T10569]  unevictable:1768 dirty:248 writeback:17
[  287.448872][T10569]  slab_reclaimable:10677 slab_unreclaimable:60330
[  287.448872][T10569]  mapped:18130 shmem:2440 pagetables:1703
[  287.448872][T10569]  sec_pagetables:0 bounce:0
[  287.448872][T10569]  kernel_misc_reclaimable:0
[  287.448872][T10569]  free:275824 free_pcp:19250 free_cma:0
[  287.478547][T10569] Node 0 active_anon:17472kB inactive_anon:0kB active_file:29348kB inactive_file:148520kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29856kB dirty:476kB writeback:68kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8436kB pagetables:3992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  287.506804][T10569] Node 1 active_anon:14596kB inactive_anon:0kB active_file:25568kB inactive_file:4824kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42664kB dirty:176kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4868kB pagetables:2888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  287.564158][T10569] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  287.590161][T10569] lowmem_reserve[]: 0 811 811 811 811
[  287.592107][T10569] Node 0 DMA32 free:228888kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17412kB inactive_anon:0kB active_file:29348kB inactive_file:148520kB unevictable:3536kB writepending:224kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:25676kB local_pcp:6644kB free_cma:0kB
[  287.640061][T10569] lowmem_reserve[]: 0 0 0 0 0
[  287.642163][T10569] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  287.677550][T10569] lowmem_reserve[]: 0 0 854 854 854
[  287.691252][T10569] Node 1 Normal free:399680kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14560kB inactive_anon:0kB active_file:25568kB inactive_file:4824kB unevictable:3536kB writepending:176kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:52056kB local_pcp:22776kB free_cma:0kB
[  287.728095][T10577] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1794'.
[  287.748448][T10569] lowmem_reserve[]: 0 0 0 0 0
[  287.753345][T10569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  287.776996][T10569] Node 0 DMA32: 358*4kB (U) 30*8kB (UME) 281*16kB (UME) 199*32kB (UME) 285*64kB (UM) 148*128kB (UM) 23*256kB (UM) 16*512kB (UME) 3*1024kB (UM) 5*2048kB (UME) 37*4096kB (M) = 228664kB
[  287.787164][T10569] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  287.805927][T10569] Node 1 Normal: 0*4kB 2*8kB (ME) 405*16kB (UE) 434*32kB (UME) 306*64kB (UME) 204*128kB (UME) 105*256kB (UM) 55*512kB (UM) 24*1024kB (UM) 8*2048kB (UME) 58*4096kB (UM) = 399648kB
[  287.850660][T10569] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  287.859155][T10569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  287.870534][T10569] 54507 total pagecache pages
[  287.886598][T10569] 0 pages in swap cache
[  287.897655][T10569] Free swap  = 124996kB
[  287.907897][T10569] Total swap = 124996kB
[  287.911886][T10569] 786301 pages RAM
[  287.918085][T10569] 0 pages HighMem/MovableOnly
[  287.928291][T10569] 241359 pages reserved
[  287.938546][T10569] 0 pages cma reserved
[  288.081985][T10585] netlink: 'syz.3.1796': attribute type 1 has an invalid length.
[  288.084466][T10585] netlink: 198176 bytes leftover after parsing attributes in process `syz.3.1796'.
[  288.087666][T10585] nbd: must specify a size in bytes for the device
[  288.436850][T10608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1807'.
[  288.441967][T10608] unsupported nlmsg_type 40
[  288.515567][T10613] netlink: 'syz.3.1810': attribute type 29 has an invalid length.
[  288.519373][T10613] netlink: 'syz.3.1810': attribute type 29 has an invalid length.
[  288.528738][T10613] netlink: 'syz.3.1810': attribute type 29 has an invalid length.
[  289.036493][T10632] netlink: 'syz.8.1814': attribute type 2 has an invalid length.
[  289.044851][T10632] netlink: 'syz.8.1814': attribute type 1 has an invalid length.
[  289.417252][T10647] netlink: 'syz.3.1817': attribute type 10 has an invalid length.
[  289.426510][T10647] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.430399][T10647] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.438714][T10647] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.441858][T10647] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.445620][T10647] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.448122][T10647] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.456849][T10647] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  289.573560][T10651] erspan0 speed is unknown, defaulting to 1000
[  289.585019][T10651] vcan0 speed is unknown, defaulting to 1000
[  290.808858][T10688] netlink: 'syz.8.1833': attribute type 39 has an invalid length.
[  291.795629][T10696] syzkaller0: entered promiscuous mode
[  291.798126][T10696] syzkaller0: entered allmulticast mode
[  291.840873][T10701] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1838'.
[  292.053772][T10711] netlink: 'syz.3.1842': attribute type 33 has an invalid length.
[  292.070207][T10711] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1842'.
[  292.073385][T10711] mac80211_hwsim hwsim12 : renamed from wlan1 (while UP)
[  292.096184][T10711] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  292.117286][T10712] netlink: 'syz.8.1841': attribute type 1 has an invalid length.
[  292.235033][T10718] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1845'.
[  292.429613][T10732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1852'.
[  292.530401][T10740] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1856'.
[  293.485543][T10778] validate_nla: 2 callbacks suppressed
[  293.485564][T10778] netlink: 'syz.8.1870': attribute type 1 has an invalid length.
[  293.493455][T10778] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.1870'.
[  294.497267][T10803] netlink: 'syz.8.1885': attribute type 10 has an invalid length.
[  294.937879][T10821] netlink: 'syz.7.1891': attribute type 46 has an invalid length.
[  295.005799][T10821] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1891'.
[  295.374155][T10832] netlink: 130984 bytes leftover after parsing attributes in process `syz.8.1896'.
[  296.351430][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1904'.
[  296.432869][T10865] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1909'.
[  296.849747][T10869] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  296.857300][T10875] C: renamed from team_slave_0 (while UP)
[  296.864870][T10875] netlink: 'syz.3.1913': attribute type 3 has an invalid length.
[  296.868443][T10875] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1913'.
[  296.883743][T10869] blkio.reset_stats is deprecated
[  297.124487][T10891] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1921'.
[  297.860736][T10904] netlink: 65055 bytes leftover after parsing attributes in process `syz.7.1924'.
[  297.876603][T10904] tc_dump_action: action bad kind
[  297.962788][T10909] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1927'.
[  298.107672][T10920] netlink: 'syz.3.1933': attribute type 21 has an invalid length.
[  298.112376][T10920] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1933'.
[  298.117759][T10920] netlink: 'syz.3.1933': attribute type 4 has an invalid length.
[  298.121739][T10920] netlink: 'syz.3.1933': attribute type 3 has an invalid length.
[  298.124115][T10920] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1933'.
[  298.292635][T10936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1937'.
[  298.369089][T10940] netlink: 'syz.8.1941': attribute type 1 has an invalid length.
[  298.372062][T10940] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.1941'.
[  298.555818][T10954] netlink: 'syz.8.1948': attribute type 21 has an invalid length.
[  298.559180][T10954] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1948'.
[  298.564458][T10954] netlink: 'syz.8.1948': attribute type 5 has an invalid length.
[  298.567802][T10954] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1948'.
[  298.713054][T10963] netlink: 'syz.3.1953': attribute type 1 has an invalid length.
[  298.792325][T10967] tmpfs: Unknown parameter 'u'
[  299.593045][T10984] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  299.603505][T10984] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  299.698937][T10992] netlink: 'syz.3.1965': attribute type 1 has an invalid length.
[  299.729788][T10994] : port 1(veth0_to_bridge) entered blocking state
[  299.733216][T10994] : port 1(veth0_to_bridge) entered disabled state
[  299.736047][T10994] veth0_to_bridge: entered allmulticast mode
[  299.744110][T10994] veth0_to_bridge: entered promiscuous mode
[  299.751565][T10994] : port 2(veth0_to_team) entered blocking state
[  299.754319][T10994] : port 2(veth0_to_team) entered disabled state
[  299.758047][T10994] veth0_to_team: entered allmulticast mode
[  299.766355][T10994] veth0_to_team: entered promiscuous mode
[  299.773920][T10998] netlink: 'syz.3.1968': attribute type 21 has an invalid length.
[  299.776656][T10998] IPv6: NLM_F_CREATE should be specified when creating new route
[  299.968497][T11011] netlink: 'syz.3.1974': attribute type 7 has an invalid length.
[  300.582046][T11045] xt_limit: Overflow, try lower: 324382443/4200216956
[  301.288167][T11089] netlink: 'syz.3.2011': attribute type 1 has an invalid length.
[  303.060467][T11129] __nla_validate_parse: 6 callbacks suppressed
[  303.060483][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2027'.
[  303.347150][T11139] siw: device registration error -23
[  303.526764][T11145] netlink: 'syz.3.2035': attribute type 39 has an invalid length.
[  304.731672][T11148] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2036'.
[  304.735676][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2036'.
[  304.822301][T11150] netlink: 'syz.8.2037': attribute type 21 has an invalid length.
[  304.825283][T11150] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2037'.
[  304.840694][T11150] netlink: 'syz.8.2037': attribute type 5 has an invalid length.
[  304.843940][T11150] netlink: 'syz.8.2037': attribute type 6 has an invalid length.
[  304.847073][T11150] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2037'.
[  304.895640][T11154] netlink: 'syz.3.2039': attribute type 3 has an invalid length.
[  304.898554][T11154] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2039'.
[  305.033221][T11163] netlink: 'syz.8.2042': attribute type 10 has an invalid length.
[  305.036324][T11163] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2042'.
[  305.042639][T11163] bridge0: port 3(batadv0) entered blocking state
[  305.047045][T11163] bridge0: port 3(batadv0) entered disabled state
[  305.050820][T11163] batadv0: entered allmulticast mode
[  305.054508][T11163] batadv0: entered promiscuous mode
[  305.057488][T11163] bridge0: port 3(batadv0) entered blocking state
[  305.060215][T11163] bridge0: port 3(batadv0) entered forwarding state
[  305.079565][T11167] netlink: 16054 bytes leftover after parsing attributes in process `syz.7.2045'.
[  305.250960][ T5878] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  305.255050][ T5878] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  305.301416][T11175] netlink: 'syz.7.2049': attribute type 26 has an invalid length.
[  305.495195][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2053'.
[  305.499111][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2053'.
[  306.730343][T11229] delete_channel: no stack
[  306.737317][T11229] delete_channel: no stack
[  308.231774][T11270] netlink: 'syz.8.2092': attribute type 10 has an invalid length.
[  308.234883][T11270] __nla_validate_parse: 3 callbacks suppressed
[  308.234894][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2092'.
[  308.263993][T11270] ipvlan1: entered promiscuous mode
[  308.280339][T11270] ipvlan1: entered allmulticast mode
[  308.285408][T11270] bridge0: port 4(ipvlan1) entered blocking state
[  308.300963][T11270] bridge0: port 4(ipvlan1) entered disabled state
[  308.306407][T11270] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  308.386819][T11273] netlink: 'syz.7.2093': attribute type 21 has an invalid length.
[  308.390270][T11273] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2093'.
[  308.394796][T11273] netlink: 'syz.7.2093': attribute type 5 has an invalid length.
[  308.401198][T11273] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2093'.
[  309.114453][T11301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2105'.
[  309.178902][T11306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2107'.
[  309.186190][T11306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2107'.
[  309.480987][T11315] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.485423][T11315] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.614382][T11325] netlink: 'syz.8.2114': attribute type 29 has an invalid length.
[  309.617052][T11325] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2114'.
[  309.655657][T11327] sit0: entered allmulticast mode
[  309.667533][T11327] sit0: entered promiscuous mode
[  310.552917][T11341] validate_nla: 1 callbacks suppressed
[  310.552935][T11341] netlink: 'syz.8.2120': attribute type 2 has an invalid length.
[  310.569162][T11341] netlink: 'syz.8.2120': attribute type 8 has an invalid length.
[  310.573871][T11341] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2120'.
[  310.617632][T11347] netlink: 'syz.3.2123': attribute type 7 has an invalid length.
[  310.617722][T11345] netlink: 516 bytes leftover after parsing attributes in process `syz.7.2122'.
[  311.726893][T11398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2143'.
[  311.929377][T11410] netlink: 'syz.8.2149': attribute type 29 has an invalid length.
[  311.941875][T11410] netlink: 'syz.8.2149': attribute type 29 has an invalid length.
[  311.951564][T11410] netlink: 'syz.8.2149': attribute type 29 has an invalid length.
[  311.957734][T11410] netlink: 'syz.8.2149': attribute type 29 has an invalid length.
[  311.997379][T11413] netlink: 'syz.3.2150': attribute type 4 has an invalid length.
[  312.010711][T11413] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  312.220485][T11428] netlink: 'syz.3.2158': attribute type 22 has an invalid length.
[  314.343733][T11468] __nla_validate_parse: 1 callbacks suppressed
[  314.343747][T11468] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2175'.
[  314.353080][T11465] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2175'.
[  314.358790][T11465] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2175'.
[  314.365759][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2175'.
[  314.369495][T11465] netlink: 128092 bytes leftover after parsing attributes in process `syz.8.2175'.
[  314.547588][T11482] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.2183'.
[  314.757351][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2193'.
[  314.771328][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'.
[  314.776627][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2193'.
[  316.235422][T11549] netlink: 'syz.3.2214': attribute type 2 has an invalid length.
[  316.238167][T11549] netlink: 'syz.3.2214': attribute type 3 has an invalid length.
[  316.251708][T11549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2214'.
[  316.855779][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.859708][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  316.973442][ T5852] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  317.074344][T11593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  318.940233][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  321.248337][T11649] netlink: 'syz.7.2258': attribute type 4 has an invalid length.
[  321.255884][T11649] __nla_validate_parse: 1 callbacks suppressed
[  321.255902][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2258'.
[  321.370795][T11652] tap0: tun_chr_ioctl cmd 1074025680
[  323.212701][T11700] siw: device registration error -23
[  323.379311][T11707] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2283'.
[  323.666066][T11713] netlink: 'syz.3.2285': attribute type 11 has an invalid length.
[  324.076282][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2291'.
[  326.068380][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2304'.
[  326.069763][T11759] netlink: 'syz.7.2305': attribute type 21 has an invalid length.
[  326.077285][T11759] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2305'.
[  326.083461][T11759] netlink: 'syz.7.2305': attribute type 4 has an invalid length.
[  326.286845][T11771] netlink: 'syz.3.2311': attribute type 29 has an invalid length.
[  326.321547][T11771] netlink: 'syz.3.2311': attribute type 29 has an invalid length.
[  326.329265][T11771] netlink: 'syz.3.2311': attribute type 29 has an invalid length.
[  326.339258][T11771] netlink: 'syz.3.2311': attribute type 29 has an invalid length.
[  326.357431][T11775] openvswitch: netlink: Multiple metadata blocks provided
[  327.060869][    C0] ==================================================================
[  327.063940][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  327.066448][    C0] Write of size 8 at addr ffff88802856f1b0 by task syz.8.2310/11769
[  327.069716][    C0] 
[  327.070840][    C0] CPU: 0 UID: 0 PID: 11769 Comm: syz.8.2310 Not tainted syzkaller #0 PREEMPT(full) 
[  327.070851][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.070857][    C0] Call Trace:
[  327.070864][    C0]  <IRQ>
[  327.070870][    C0]  dump_stack_lvl+0x189/0x250
[  327.070886][    C0]  ? rcu_is_watching+0x15/0xb0
[  327.070894][    C0]  ? __kasan_check_byte+0x12/0x40
[  327.070906][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.070914][    C0]  ? rcu_is_watching+0x15/0xb0
[  327.070921][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  327.070932][    C0]  ? lock_release+0x4b/0x3e0
[  327.070950][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  327.070961][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  327.070974][    C0]  print_report+0xca/0x240
[  327.070984][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  327.070993][    C0]  kasan_report+0x118/0x150
[  327.071006][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  327.071025][    C0]  __xfrm_state_delete+0x696/0xca0
[  327.071078][    C0]  xfrm_timer_handler+0x18f/0xa00
[  327.071091][    C0]  ? __hrtimer_run_queues+0x408/0xc60
[  327.071108][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  327.071116][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  327.071127][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.071141][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  327.071150][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  327.071166][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  327.071177][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  327.071187][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  327.071217][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  327.071237][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  327.071255][    C0]  handle_softirqs+0x286/0x870
[  327.071269][    C0]  ? do_softirq+0xec/0x180
[  327.071284][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  327.071299][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  327.071312][    C0]  do_softirq+0xec/0x180
[  327.071320][    C0]  </IRQ>
[  327.071323][    C0]  <TASK>
[  327.071327][    C0]  ? __pfx_do_softirq+0x10/0x10
[  327.071340][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  327.071354][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  327.071367][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  327.071377][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  327.071388][    C0]  ? rcu_is_watching+0x15/0xb0
[  327.071396][    C0]  ? netif_receive_skb_list+0xc0/0x450
[  327.071406][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  327.071417][    C0]  bpf_test_run_xdp_live+0x1868/0x1b10
[  327.071435][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  327.071449][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  327.071471][    C0]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  327.071484][    C0]  ? 0xffffffffa0003d80
[  327.071514][    C0]  ? 0xffffffffa0000894
[  327.071551][    C0]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  327.071573][    C0]  ? _copy_from_user+0x94/0xb0
[  327.071583][    C0]  ? bpf_test_init+0x113/0x150
[  327.071591][    C0]  ? xdp_convert_md_to_buff+0x5b/0x330
[  327.071604][    C0]  bpf_prog_test_run_xdp+0x75b/0x10e0
[  327.071632][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  327.071648][    C0]  ? __fget_files+0x2a/0x420
[  327.071665][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  327.071677][    C0]  bpf_prog_test_run+0x2c7/0x340
[  327.071693][    C0]  __sys_bpf+0x562/0x860
[  327.071706][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  327.071735][    C0]  ? ksys_write+0x11e/0x250
[  327.071747][    C0]  ? rcu_is_watching+0x15/0xb0
[  327.071763][    C0]  __x64_sys_bpf+0x7c/0x90
[  327.071775][    C0]  do_syscall_64+0xfa/0x3b0
[  327.071786][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.071796][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.071804][    C0]  ? exc_page_fault+0x9f/0xf0
[  327.071816][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.071824][    C0] RIP: 0033:0x7fba9418ec29
[  327.071833][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.071840][    C0] RSP: 002b:00007fba94fd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  327.071850][    C0] RAX: ffffffffffffffda RBX: 00007fba943d5fa0 RCX: 00007fba9418ec29
[  327.071855][    C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  327.071860][    C0] RBP: 00007fba94211e41 R08: 0000000000000000 R09: 0000000000000000
[  327.071865][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.071869][    C0] R13: 00007fba943d6038 R14: 00007fba943d5fa0 R15: 00007ffc580fae18
[  327.071892][    C0]  </TASK>
[  327.071895][    C0] 
[  327.232517][    C0] Allocated by task 9972:
[  327.234007][    C0]  kasan_save_track+0x3e/0x80
[  327.235600][    C0]  __kasan_slab_alloc+0x6c/0x80
[  327.237355][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  327.239362][    C0]  xfrm_state_alloc+0x24/0x2f0
[  327.241188][    C0]  __find_acq_core+0x8a7/0x1c00
[  327.242790][    C0]  xfrm_find_acq+0x78/0xa0
[  327.244328][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  327.245962][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  327.247734][    C0]  netlink_rcv_skb+0x208/0x470
[  327.249604][    C0]  xfrm_netlink_rcv+0x79/0x90
[  327.251500][    C0]  netlink_unicast+0x82f/0x9e0
[  327.253389][    C0]  netlink_sendmsg+0x805/0xb30
[  327.255336][    C0]  __sock_sendmsg+0x21c/0x270
[  327.257225][    C0]  ____sys_sendmsg+0x505/0x830
[  327.259135][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  327.260986][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  327.262951][    C0]  do_syscall_64+0xfa/0x3b0
[  327.264775][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.267161][    C0] 
[  327.268133][    C0] Freed by task 971:
[  327.269678][    C0]  kasan_save_track+0x3e/0x80
[  327.271524][    C0]  kasan_save_free_info+0x46/0x50
[  327.273415][    C0]  __kasan_slab_free+0x5b/0x80
[  327.275299][    C0]  kmem_cache_free+0x18f/0x400
[  327.277189][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  327.279217][    C0]  process_scheduled_works+0xae1/0x17b0
[  327.281342][    C0]  worker_thread+0x8a0/0xda0
[  327.283148][    C0]  kthread+0x711/0x8a0
[  327.284788][    C0]  ret_from_fork+0x439/0x7d0
[  327.286652][    C0]  ret_from_fork_asm+0x1a/0x30
[  327.288591][    C0] 
[  327.289594][    C0] The buggy address belongs to the object at ffff88802856f180
[  327.289594][    C0]  which belongs to the cache xfrm_state of size 928
[  327.294935][    C0] The buggy address is located 48 bytes inside of
[  327.294935][    C0]  freed 928-byte region [ffff88802856f180, ffff88802856f520)
[  327.300250][    C0] 
[  327.301342][    C0] The buggy address belongs to the physical page:
[  327.303888][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802856f600 pfn:0x2856c
[  327.307794][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  327.311002][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  327.313932][    C0] page_type: f5(slab)
[  327.315522][    C0] raw: 00fff00000000040 ffff88801d3bc280 dead000000000122 0000000000000000
[  327.318843][    C0] raw: ffff88802856f600 00000000800e000a 00000000f5000000 0000000000000000
[  327.322103][    C0] head: 00fff00000000040 ffff88801d3bc280 dead000000000122 0000000000000000
[  327.325453][    C0] head: ffff88802856f600 00000000800e000a 00000000f5000000 0000000000000000
[  327.328773][    C0] head: 00fff00000000002 ffffea0000a15b01 00000000ffffffff 00000000ffffffff
[  327.332198][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  327.335689][    C0] page dumped because: kasan: bad access detected
[  327.338273][    C0] page_owner tracks the page as allocated
[  327.340299][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6148, tgid 6147 (syz.1.99), ts 76000695203, free_ts 75581062004
[  327.346108][    C0]  post_alloc_hook+0x240/0x2a0
[  327.347617][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  327.349477][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  327.351507][    C0]  alloc_pages_mpol+0x232/0x4a0
[  327.353055][    C0]  allocate_slab+0x8a/0x370
[  327.354664][    C0]  ___slab_alloc+0xbeb/0x1420
[  327.356526][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  327.358626][    C0]  xfrm_state_alloc+0x24/0x2f0
[  327.360543][    C0]  __find_acq_core+0x8a7/0x1c00
[  327.362474][    C0]  xfrm_find_acq+0x78/0xa0
[  327.364241][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  327.366256][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  327.368203][    C0]  netlink_rcv_skb+0x208/0x470
[  327.370115][    C0]  xfrm_netlink_rcv+0x79/0x90
[  327.371956][    C0]  netlink_unicast+0x82f/0x9e0
[  327.373900][    C0]  netlink_sendmsg+0x805/0xb30
[  327.375797][    C0] page last free pid 6128 tgid 6126 stack trace:
[  327.378270][    C0]  __free_frozen_pages+0xbc4/0xd30
[  327.380347][    C0]  stack_depot_save_flags+0x436/0x860
[  327.382470][    C0]  kasan_save_track+0x4f/0x80
[  327.384347][    C0]  __kasan_kmalloc+0x93/0xb0
[  327.386133][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  327.388305][    C0]  ctrl_dumppolicy_start+0x487/0x9f0
[  327.390440][    C0]  genl_start+0x4c3/0x6c0
[  327.392143][    C0]  __netlink_dump_start+0x469/0x7e0
[  327.394236][    C0]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  327.396527][    C0]  genl_rcv_msg+0x5da/0x790
[  327.398372][    C0]  netlink_rcv_skb+0x208/0x470
[  327.400320][    C0]  genl_rcv+0x28/0x40
[  327.401932][    C0]  netlink_unicast+0x82f/0x9e0
[  327.403871][    C0]  netlink_sendmsg+0x805/0xb30
[  327.405824][    C0]  __sock_sendmsg+0x21c/0x270
[  327.407718][    C0]  ____sys_sendmsg+0x505/0x830
[  327.409660][    C0] 
[  327.410644][    C0] Memory state around the buggy address:
[  327.412893][    C0]  ffff88802856f080: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  327.416043][    C0]  ffff88802856f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  327.419211][    C0] >ffff88802856f180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.422299][    C0]                                      ^
[  327.424461][    C0]  ffff88802856f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.427579][    C0]  ffff88802856f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.430751][    C0] ==================================================================
[  327.434033][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  327.436846][    C0] CPU: 0 UID: 0 PID: 11769 Comm: syz.8.2310 Not tainted syzkaller #0 PREEMPT(full) 
[  327.440510][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.444535][    C0] Call Trace:
[  327.445874][    C0]  <IRQ>
[  327.447045][    C0]  dump_stack_lvl+0x99/0x250
[  327.448873][    C0]  ? __asan_memcpy+0x40/0x70
[  327.450801][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.452878][    C0]  ? __pfx__printk+0x10/0x10
[  327.454760][    C0]  vpanic+0x281/0x750
[  327.456386][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  327.458451][    C0]  ? __pfx_vpanic+0x10/0x10
[  327.460272][    C0]  ? irqentry_exit+0x74/0x90
[  327.462137][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.464221][    C0]  panic+0xb9/0xc0
[  327.465759][    C0]  ? __pfx_panic+0x10/0x10
[  327.467551][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  327.469909][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  327.472454][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  327.474561][    C0]  check_panic_on_warn+0x89/0xb0
[  327.476551][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  327.478628][    C0]  end_report+0x78/0x160
[  327.480310][    C0]  kasan_report+0x129/0x150
[  327.482117][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  327.484270][    C0]  __xfrm_state_delete+0x696/0xca0
[  327.486312][    C0]  xfrm_timer_handler+0x18f/0xa00
[  327.488347][    C0]  ? __hrtimer_run_queues+0x408/0xc60
[  327.490536][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  327.492714][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  327.495036][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.497118][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  327.499418][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  327.501904][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  327.504060][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  327.506267][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  327.508373][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  327.510660][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  327.512730][    C0]  handle_softirqs+0x286/0x870
[  327.514664][    C0]  ? do_softirq+0xec/0x180
[  327.516485][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  327.518602][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  327.520811][    C0]  do_softirq+0xec/0x180
[  327.522536][    C0]  </IRQ>
[  327.523743][    C0]  <TASK>
[  327.524949][    C0]  ? __pfx_do_softirq+0x10/0x10
[  327.526908][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  327.529614][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  327.531729][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  327.533554][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  327.535822][    C0]  ? rcu_is_watching+0x15/0xb0
[  327.537714][    C0]  ? netif_receive_skb_list+0xc0/0x450
[  327.539879][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  327.542111][    C0]  bpf_test_run_xdp_live+0x1868/0x1b10
[  327.544185][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  327.546391][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  327.548594][    C0]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  327.550889][    C0]  ? 0xffffffffa0003d80
[  327.552596][    C0]  ? 0xffffffffa0000894
[  327.554312][    C0]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  327.556668][    C0]  ? _copy_from_user+0x94/0xb0
[  327.558553][    C0]  ? bpf_test_init+0x113/0x150
[  327.560434][    C0]  ? xdp_convert_md_to_buff+0x5b/0x330
[  327.562624][    C0]  bpf_prog_test_run_xdp+0x75b/0x10e0
[  327.564763][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  327.567085][    C0]  ? __fget_files+0x2a/0x420
[  327.568942][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  327.571274][    C0]  bpf_prog_test_run+0x2c7/0x340
[  327.573264][    C0]  __sys_bpf+0x562/0x860
[  327.574917][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  327.576838][    C0]  ? ksys_write+0x11e/0x250
[  327.578691][    C0]  ? rcu_is_watching+0x15/0xb0
[  327.580602][    C0]  __x64_sys_bpf+0x7c/0x90
[  327.582211][    C0]  do_syscall_64+0xfa/0x3b0
[  327.584051][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.586091][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.588457][    C0]  ? exc_page_fault+0x9f/0xf0
[  327.590368][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.592687][    C0] RIP: 0033:0x7fba9418ec29
[  327.594494][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.601862][    C0] RSP: 002b:00007fba94fd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  327.605152][    C0] RAX: ffffffffffffffda RBX: 00007fba943d5fa0 RCX: 00007fba9418ec29
[  327.608243][    C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  327.611402][    C0] RBP: 00007fba94211e41 R08: 0000000000000000 R09: 0000000000000000
[  327.614522][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.617676][    C0] R13: 00007fba943d6038 R14: 00007fba943d5fa0 R15: 00007ffc580fae18
[  327.620867][    C0]  </TASK>
[  327.622859][    C0] Kernel Offset: disabled
[  327.624646][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:28:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007450
R8 =ffff8880215c8237 R9 =1ffff110042b9046 R10=dffffc0000000000 R11=ffffffff85504a00
R12=dffffc0000000000 R13=ffffffff99b0490d R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504a7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fba94fd06c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d3214dfc8 CR3=000000002111a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81cb1d44 ffffffff81688aff
XMM02=ffffffff8173d599 ffffffff81f011cb XMM03=ffffffff8173d60f ffffffff8173d599
XMM04=ffffffff8173d83a ffffffff8173d819 XMM05=ffffffff8173d819 ffffffff8173d728
XMM06=ffffffff8173d728 ffffffff8173d60f XMM07=ffffffff8173d60f ffffffff8173d599
XMM08=0000000000000000 00007f3d31412f0f XMM09=0000000000000000 00007f3d31412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000202 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8d9ceb11 RDI=ffffffff8be34480 RBP=fffffffffffffe38 RSP=ffffc9000355f978
R8 =ffffc9000355f7ef R9 =0000000000000000 R10=ffffc9000355f7e0 R11=ffffffffa0000918
R12=dffffc0000000000 R13=ffffffff8b489a62 R14=ffffffff8e13a160 R15=ffff8881064c8000
RIP=ffffffff8b7b31a9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc6d24769ae CR3=000000002111a000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff823d45be ffffffff8234736d
XMM02=ffffffff823d48d4 ffffffff823d4612 XMM03=ffffffff823d570e ffffffff823d495c
XMM04=ffffffff823d5981 ffffffff823d570e XMM05=ffffffff823d495c ffffffff823d48d4
XMM06=ffffffff823d4612 ffffffff823d45be XMM07=ffffffff8234736d ffffffff8234720e
XMM08=0000000000000000 00007fba94212f0f XMM09=0000000000000000 00007fba94212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
