last executing test programs:

4m7.226424736s ago: executing program 2 (id=102):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x4, 0x8001}, 0x0, 0x3, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x0, 0x0})
r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r3, &(0x7f0000000140), 0x12)
write$cgroup_subtree(r0, &(0x7f00000033c0)=ANY=[], 0xfe33)

4m6.834797677s ago: executing program 2 (id=104):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e", 0x9}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
recvmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000340)=@vsock, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, &(0x7f0000000140)=""/12, 0xc}, 0x40000040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x4000000}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='tlb_flush\x00', r5, 0x0, 0x3e}, 0x18)
close(r4)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540)=r6, 0x12)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

4m5.507984887s ago: executing program 1 (id=120):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000200)}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)

4m4.659960226s ago: executing program 2 (id=123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4m4.583433306s ago: executing program 1 (id=124):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000)

4m4.583039262s ago: executing program 2 (id=125):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90)

4m4.383978069s ago: executing program 2 (id=127):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000440)=0xc00, 0x12)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x2}, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000002e51c244107c6d64000085b8566497d38be9e7f793c9e41a603f3307b2c4b9812ecefef6261186d7a293d9f2154914886012c3dff0f91d6d364ab5176a5c0a62b04c16ff21f93c53f6f55da65f5a02ff17698dbde3a6445f3cebabf74a46c51109eb794587035734536172e806869a0963addb0525fcf10f6a1ec1c403fd91000000"], 0x78}, 0xc800)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
sendmsg$inet(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10801, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x30, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000680)={r0})
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1804000005000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c9000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, &(0x7f0000000300)="5d6f00957eae432c1c778438bab09d03ce5e9ee56a789cb79fab7109d4760ef14ccf322901a1b512251866611dd119df34a44f2cf5a95864f64641cbafd310a7bd650d801a729446a1575406c416d83be8e1ecbcfaec0cca3fa37522b457f7b8e548a016176ca3b50b60cb3639f9da08653937228a7b936b3496b1", &(0x7f0000001980)=""/4096}, 0x20)

4m4.287878687s ago: executing program 1 (id=129):
r0 = socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611220000000000061138f0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f"], 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0)

4m4.258065645s ago: executing program 1 (id=130):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd706806dbdf25080043"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040)

4m4.16565115s ago: executing program 1 (id=131):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xcf, &(0x7f0000000000)=""/207, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

4m4.065394813s ago: executing program 1 (id=132):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x2, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

4m2.04276467s ago: executing program 2 (id=139):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x2d)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x33fe0}, {0x0}], 0x2}, 0x400c010)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000380)=0xfffffffffffffffd)
socketpair(0x23, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x90}, 0x1, 0x7}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000010)

3m46.171528486s ago: executing program 32 (id=138):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14301, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, 0x0, 0x20000002)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xd, 0x7, 0x6, 0x0, 0x0, 0x3, 0x43a16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x2}, 0x5020, 0x1500, 0x3, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x13)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, 0x0, 0x5000)
setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000), 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000200)="a5fdcb601cc4acec9fb03ffa3d7f1b30b9d8cbec0de6e5c890d736873343c1757902ee1aa9ab684eded3fb6f43a4050ccfb57b5e2c4ef5450073926de55164b1142b538c7283c864fea38a0a5af97af2cf6fa1478ae67bc7aeabd30582fb0a48cff9", &(0x7f0000000280)=""/2, &(0x7f0000000400)="2c251a630d2a4efd5f011ca207313a641d9a87f3a84b44f1830cbb07471ed6987a68c11c13c6ac1c47b7d6129f8ac68df78c86d0a1262910a08e01dfd6aace7ca4f19d568da154e4f493d7a9f3791a6594bc1da6c97ac86f1b8f9de3ebfb125e1df638381f2d7e7780c5ec7a1f5339aa6534f2b320111a20898cd057fa70bba3010dc4c78132cb9c143db0bc2510d9f747227f37cf69f1b3fce9af0fe724d289b570e9422a30705a5175762ecbbc98823ab07cab8676eedabf2e30833c619295cd1c4f26", &(0x7f00000002c0)="75cb5039de4e69e5d9168fe83c705dc32f6148a64e70ddb68c8528d63b70", 0x4, r5, 0x4}, 0x38)
setsockopt$sock_attach_bpf(r6, 0x84, 0x84, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5411, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)

3m41.566805226s ago: executing program 33 (id=132):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x2, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

3m39.802493189s ago: executing program 34 (id=139):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x2d)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x33fe0}, {0x0}], 0x2}, 0x400c010)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000380)=0xfffffffffffffffd)
socketpair(0x23, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x90}, 0x1, 0x7}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000010)

3m19.341570897s ago: executing program 3 (id=228):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031600590214000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

3m19.223185237s ago: executing program 3 (id=229):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffad, &(0x7f0000000000)='/proc/sys\x00\x00\x01\x00\x00\x00\x00\x00\xff\xbe\xcc\x9a\x18e\xf44.\xd4j\a\x1e\x01\xab%nN\xd4\xa2'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fstat(r2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80108906, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8906, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000000c0)=0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x1000}, 0x28)

3m19.010754544s ago: executing program 3 (id=230):
r0 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

3m19.009999306s ago: executing program 4 (id=231):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fd, &(0x7f0000000900)={'bond0\x00', @random})

3m18.962738594s ago: executing program 4 (id=232):
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xffeb)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

3m18.962440221s ago: executing program 4 (id=234):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0, 0xffffffffffffffe8}]}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)

3m18.887707193s ago: executing program 3 (id=235):
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054)
recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/251, 0xfb}, 0x1)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x33)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3m18.887194728s ago: executing program 4 (id=236):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)="b8c21042", 0x4}], 0x1}, 0xc080)
r2 = socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x8011, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
setsockopt$sock_attach_bpf(r4, 0x84, 0x17, &(0x7f0000000000), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x63}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
perf_event_open(0x0, 0x0, 0x7, r3, 0x9)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b10"], 0xfe33)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0xf3ff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100002, 0x0, 0x8, 0x8}, 0x256}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5b4b5061, '\x00', r9, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)

3m18.741385689s ago: executing program 3 (id=237):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2bf4}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x110, 0x18, 0xa, 0xd02, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x20, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3fd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cb}]}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0xd8, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x6c, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xab3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2d8}, 0x1, 0x0, 0x0, 0xc000}, 0x20008000)

3m18.638888888s ago: executing program 4 (id=238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x23, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

3m18.461067565s ago: executing program 3 (id=239):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x0)

3m18.260519099s ago: executing program 35 (id=239):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x0)

3m18.20805065s ago: executing program 4 (id=241):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

3m18.207846901s ago: executing program 36 (id=241):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2m34.907593364s ago: executing program 7 (id=775):
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)

2m34.630023986s ago: executing program 7 (id=782):
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x0)

2m34.549138829s ago: executing program 7 (id=785):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m34.549008403s ago: executing program 7 (id=786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x44, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x30, 0xe, 0x0, 0x1, [@nested={0x2c, 0x151, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @generic="1a68a05c264ea8272f8444b4f5333a24baa53ca02def59ea2d799f9d6db9aa35"]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m34.451791568s ago: executing program 7 (id=788):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

2m34.288845474s ago: executing program 7 (id=791):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f0000000140)="44f37bfa622864ee6dcc2697668cfe0cdd3607f9", 0x14}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

2m19.280827507s ago: executing program 37 (id=791):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f0000000140)="44f37bfa622864ee6dcc2697668cfe0cdd3607f9", 0x14}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

2m1.455959231s ago: executing program 6 (id=1222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0xffffffff, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x4, 0xde3, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000804}, 0x44)

2m1.453502034s ago: executing program 6 (id=1223):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x7, 0x0, 0x1f, 0x0, 0x7, 0x805, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4, @perf_config_ext={0x40000898c, 0x42}, 0x0, 0xfffffffffffffffc, 0x200400, 0x5, 0x3, 0x7fffff, 0x0, 0x0, 0x0, 0x0, 0x444}, 0x0, 0x8, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xfc, 0xfffff000}, {0x6, 0x22, 0x0, 0xd}]})
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000340))
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001500)=[{&(0x7f00000002c0)="28ff63", 0x3}, {0x0}], 0x2}, 0x11)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0xe, 0x0, &(0x7f0000000b80)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r6 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/167, 0xa7}, 0x50)
sendmsg$kcm(r6, 0x0, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
close(r4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xf, 0x3, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x10)

2m1.184310294s ago: executing program 5 (id=1225):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8921, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

2m1.183862731s ago: executing program 5 (id=1226):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206425000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2m1.034821266s ago: executing program 5 (id=1227):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))

2m0.505242201s ago: executing program 6 (id=1228):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xef, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad20409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x24002040)

2m0.410965482s ago: executing program 6 (id=1229):
r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r3}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$xdp(r3, &(0x7f0000001800)={&(0x7f0000000340)={0x2c, 0x8, 0x0, 0x26}, 0x10, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x4000081}, 0x20000051)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12)

2m0.390004537s ago: executing program 5 (id=1231):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000003, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m0.315455415s ago: executing program 5 (id=1233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40000)

2m0.314904859s ago: executing program 6 (id=1234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}, {&(0x7f00000018c0)="2c1775af1d8c", 0x6}], 0x2}, 0x0)

2m0.237177875s ago: executing program 5 (id=1235):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xa, 0xc4, 0x10, 0x88, 0x2, 0x0, 0x3}}, {0x4}}]}]}, 0x68}}, 0x0)

2m0.133305389s ago: executing program 38 (id=1235):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xa, 0xc4, 0x10, 0x88, 0x2, 0x0, 0x3}}, {0x4}}]}]}, 0x68}}, 0x0)

1m59.835599124s ago: executing program 6 (id=1237):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1m59.832647797s ago: executing program 39 (id=1237):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

2.339816269s ago: executing program 8 (id=2737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)

2.33515471s ago: executing program 8 (id=2739):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), 0x0}, 0x20)

2.245691626s ago: executing program 9 (id=2741):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2.245102095s ago: executing program 8 (id=2743):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0xa8}, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0xff, 0x0, 0x0, 0xe4b8, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x7}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10100, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
recvmsg$unix(r2, 0x0, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff3f2df)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001280)}, {0x0}], 0x2}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4)
sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

2.046566873s ago: executing program 9 (id=2744):
bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x10, 0xe, 0x400, 0x1, 0x100, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)

2.045955221s ago: executing program 9 (id=2745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e6576653000000000000000000014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080)

1.929159169s ago: executing program 9 (id=2746):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='syzkaller\x00', 0x8}, 0x94)

1.877489655s ago: executing program 9 (id=2748):
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3f9, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800)

1.876746479s ago: executing program 9 (id=2750):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000070000000080000001f1000000000000e10952404a49d8706e295a8655b2d70715a1643db7f0bbec76a859c1f06213cb6e438a8eca6264aac1365b759a5bd42e112e1295574b3e08557b008beb049495bfdb6c145e66fe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12)
r6 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="350400004500054cc6a119e30c8000030080000000000002000200002037153e370c040180060410004500ec002a560000e7ff00400000ac377653c6de2a7c3af4a918505e7a19ff68c6a3cb9708b9469405009c8e000000000000516c006c154938456646efee34b951a07893256843ff8ad5086d9792a86372c10fa470195646e9c65b1b1f1ba34e3dcc81810e794a418a654a710b7310ed39d8c8371e1733b467dc40b9e49f449cec4fc6a86e7c5e52b687744e35614dbfdfab3293bf0b1f17250c12d9c9a4d71c76117efd8af10c1d1fd48a3cfc0185a7ac3b710faa177b4df5539264affd61959cc0e108ea2672fe8383ec2fbefc76f790513ecb4fa7637a05051ac8a4bcf5742bd46e519fb97cca483002d6436dc599519375a36e42f46dac40dac9560c469650232d9356f41968beef61886dc123c13495a2238985309ae24199582c58c70d6cf084ccede2ee9967df99c3f2884855d265a3ada8bfff0b40f6feedb21ddd15d810ece805bc7938c6a0dc41331139f83c432a381f8e4add930403ea94640a", 0x188}, {0x0}], 0x2}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
write$cgroup_subtree(r6, 0x0, 0x101d0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x24, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x7, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e0000001080002"], 0x38}}, 0x4048000)

1.819863071s ago: executing program 0 (id=2752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)

1.759460458s ago: executing program 0 (id=2753):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x51}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90)

1.75915637s ago: executing program 0 (id=2754):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000b80)="afd1c9ef", 0x4}], 0x1}, 0x40810)

1.680084989s ago: executing program 0 (id=2755):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xc53a}, 0x0, 0x0, 0x7f, 0x2, 0x0, 0xf, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.620057054s ago: executing program 0 (id=2756):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209001000800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0)

1.572993927s ago: executing program 0 (id=2757):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1.350064377s ago: executing program 8 (id=2758):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c"], 0x92fc}}, 0x0)

232.053µs ago: executing program 8 (id=2759):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 8 (id=2760):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508"], 0x140}}, 0x0)

kernel console output (not intermixed with test programs):

1][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.554038][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.556338][ T6243] bridge_slave_0: entered allmulticast mode
[   99.559579][ T6243] bridge_slave_0: entered promiscuous mode
[   99.676364][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.683309][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.686092][ T6243] bridge_slave_1: entered allmulticast mode
[   99.703420][ T6243] bridge_slave_1: entered promiscuous mode
[   99.811499][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.817213][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.870055][ T5745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.892500][ T6243] team0: Port device team_slave_0 added
[   99.895515][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.897865][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.900803][ T6246] bridge_slave_0: entered allmulticast mode
[   99.904061][ T6246] bridge_slave_0: entered promiscuous mode
[   99.907412][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.910160][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.913105][ T6246] bridge_slave_1: entered allmulticast mode
[   99.916972][ T6246] bridge_slave_1: entered promiscuous mode
[   99.920378][ T6243] team0: Port device team_slave_1 added
[   99.959979][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.962669][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.974115][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.981480][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.987564][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.996162][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.009062][ T5745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.020358][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.049909][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.105519][ T5745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.126096][ T6246] team0: Port device team_slave_0 added
[  100.130449][ T6246] team0: Port device team_slave_1 added
[  100.142950][ T6243] hsr_slave_0: entered promiscuous mode
[  100.147001][ T6243] hsr_slave_1: entered promiscuous mode
[  100.149630][ T6243] debugfs: 'hsr0' already exists in 'hsr'
[  100.151881][ T6243] Cannot create hsr debugfs directory
[  100.198122][ T5745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.212537][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.215323][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.226107][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.232793][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.236045][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.246417][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.287774][ T6258] chnl_net:caif_netlink_parms(): no params data found
[  100.332709][ T6246] hsr_slave_0: entered promiscuous mode
[  100.335853][ T6246] hsr_slave_1: entered promiscuous mode
[  100.338249][ T6246] debugfs: 'hsr0' already exists in 'hsr'
[  100.340004][ T6246] Cannot create hsr debugfs directory
[  100.545185][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.548119][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.551055][ T6258] bridge_slave_0: entered allmulticast mode
[  100.556564][ T6258] bridge_slave_0: entered promiscuous mode
[  100.560589][ T5745] bridge_slave_1: left allmulticast mode
[  100.562722][ T5745] bridge_slave_1: left promiscuous mode
[  100.569452][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.579321][ T5745] bridge_slave_0: left allmulticast mode
[  100.581698][ T5745] bridge_slave_0: left promiscuous mode
[  100.585970][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.842571][ T5745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.847888][ T5745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.852235][ T5745] bond0 (unregistering): Released all slaves
[  100.893824][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.896571][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.899484][ T6258] bridge_slave_1: entered allmulticast mode
[  100.913740][ T6258] bridge_slave_1: entered promiscuous mode
[  101.060306][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.068575][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.195753][ T5745] hsr_slave_0: left promiscuous mode
[  101.198725][ T5745] hsr_slave_1: left promiscuous mode
[  101.201503][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.205001][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.208937][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.211931][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.229155][ T5745] veth1_macvtap: left promiscuous mode
[  101.231648][ T5745] veth0_macvtap: left promiscuous mode
[  101.234523][ T5745] veth1_vlan: left promiscuous mode
[  101.236886][ T5745] veth0_vlan: left promiscuous mode
[  101.653084][ T5745] team0 (unregistering): Port device team_slave_1 removed
[  101.684163][ T5745] team0 (unregistering): Port device team_slave_0 removed
[  101.952191][ T6258] team0: Port device team_slave_0 added
[  101.956836][ T6258] team0: Port device team_slave_1 added
[  102.032209][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.039357][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.054587][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.071354][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.079844][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.090078][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.170191][ T6243] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  102.179456][ T6243] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  102.209342][ T6258] hsr_slave_0: entered promiscuous mode
[  102.212380][ T6258] hsr_slave_1: entered promiscuous mode
[  102.215627][ T6258] debugfs: 'hsr0' already exists in 'hsr'
[  102.217862][ T6258] Cannot create hsr debugfs directory
[  102.241942][ T6243] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  102.254972][ T6243] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  102.337380][ T6246] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.369365][ T6246] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.393381][ T6246] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.399756][ T6246] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.529847][ T5745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.588639][ T5745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.658413][ T5745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.690149][ T6258] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  102.708582][ T6258] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  102.723122][ T5745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.736972][ T6258] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  102.746846][ T6258] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  102.772845][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.842423][ T6243] 8021q: adding VLAN 0 to HW filter on device team0
[  102.889942][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.895322][  T988] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.898261][  T988] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.905742][  T988] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.908554][  T988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.986699][ T6246] 8021q: adding VLAN 0 to HW filter on device team0
[  103.015216][  T988] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.017477][  T988] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.045089][ T5745] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.061885][  T988] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.064287][  T988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.120478][ T5745] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.129806][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.164172][ T5745] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.187921][ T6258] 8021q: adding VLAN 0 to HW filter on device team0
[  103.214440][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.217326][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.221399][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.224132][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.257413][ T5745] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.321790][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.399435][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.525923][ T6243] veth0_vlan: entered promiscuous mode
[  103.531316][ T6243] veth1_vlan: entered promiscuous mode
[  103.562680][ T5745] bridge_slave_1: left allmulticast mode
[  103.568353][ T5745] bridge_slave_1: left promiscuous mode
[  103.572311][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.582962][ T5745] bridge_slave_0: left allmulticast mode
[  103.586708][ T5745] bridge_slave_0: left promiscuous mode
[  103.588986][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.594513][ T5745] bridge_slave_1: left allmulticast mode
[  103.596537][ T5745] bridge_slave_1: left promiscuous mode
[  103.598628][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.606130][ T5745] bridge_slave_0: left allmulticast mode
[  103.608209][ T5745] bridge_slave_0: left promiscuous mode
[  103.610287][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.888421][ T5745] team0: Port device bond0 removed
[  103.891955][ T5745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.897344][ T5745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.901476][ T5745] bond0 (unregistering): Released all slaves
[  104.159364][ T5745] bond0 (unregistering): (slave 30): Releasing backup interface
[  104.166214][ T5745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.171123][ T5745] bond0 (unregistering): Released all slaves
[  104.228025][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.271390][ T6243] veth0_macvtap: entered promiscuous mode
[  104.307009][ T6243] veth1_macvtap: entered promiscuous mode
[  104.347174][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.375686][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.448375][ T6292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.451547][ T6292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.469078][ T6246] veth0_vlan: entered promiscuous mode
[  104.487036][ T6292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.490135][ T6292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.540257][ T6246] veth1_vlan: entered promiscuous mode
[  104.742807][  T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.747862][  T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.772487][ T6246] veth0_macvtap: entered promiscuous mode
[  104.826060][ T6258] veth0_vlan: entered promiscuous mode
[  104.857639][ T6246] veth1_macvtap: entered promiscuous mode
[  104.861752][  T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.862136][ T6258] veth1_vlan: entered promiscuous mode
[  104.865648][  T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.904873][ T5745] hsr_slave_0: left promiscuous mode
[  104.907700][ T5745] hsr_slave_1: left promiscuous mode
[  104.910412][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.916902][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.920483][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.927530][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.935532][ T5745] hsr_slave_0: left promiscuous mode
[  104.938228][ T5745] hsr_slave_1: left promiscuous mode
[  104.940934][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.944074][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.947354][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.950088][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.974815][ T5745] veth1_macvtap: left promiscuous mode
[  104.977085][ T5745] veth0_macvtap: left promiscuous mode
[  104.979404][ T5745] veth1_vlan: left promiscuous mode
[  104.981576][ T5745] veth0_vlan: left promiscuous mode
[  104.986911][ T5745] veth1_macvtap: left promiscuous mode
[  104.989196][ T5745] veth0_macvtap: left promiscuous mode
[  104.991548][ T5745] veth1_vlan: left promiscuous mode
[  104.994632][ T5745] veth0_vlan: left promiscuous mode
[  105.400117][ T5745] team0 (unregistering): Port device team_slave_1 removed
[  105.429117][ T5745] team0 (unregistering): Port device team_slave_0 removed
[  106.031924][ T5745] team0 (unregistering): Port device team_slave_1 removed
[  106.062157][ T5745] team0 (unregistering): Port device C removed
[  106.462477][ T6258] veth0_macvtap: entered promiscuous mode
[  106.482606][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.501411][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.523779][ T6258] veth1_macvtap: entered promiscuous mode
[  106.571324][ T6292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.588857][ T6292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.623229][ T6292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.635727][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.641664][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.665895][ T6292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.690221][ T6292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.696177][ T6292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.699609][ T6292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.702941][ T6292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.856869][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.864641][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.896563][  T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.899797][  T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.962714][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.966483][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.012160][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.028910][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.091667][ T6379] validate_nla: 5 callbacks suppressed
[  107.091689][ T6379] netlink: 'syz.3.145': attribute type 2 has an invalid length.
[  107.101908][ T6379] netlink: 'syz.3.145': attribute type 8 has an invalid length.
[  107.121693][ T6379] __nla_validate_parse: 2 callbacks suppressed
[  107.121703][ T6379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.145'.
[  108.117653][ T6426] netlink: 68 bytes leftover after parsing attributes in process `syz.4.157'.
[  108.167560][ T6428] netlink: 104 bytes leftover after parsing attributes in process `syz.5.159'.
[  108.255981][ T6431] netlink: 'syz.5.160': attribute type 10 has an invalid length.
[  108.258611][ T6431] netlink: 3531 bytes leftover after parsing attributes in process `syz.5.160'.
[  108.612444][ T6442] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.162'.
[  108.637027][ T6442] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  108.640231][ T6442] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  108.772882][ T6393] syz.3.148: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  108.779983][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(full) 
[  108.779995][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.780001][ T6393] Call Trace:
[  108.780004][ T6393]  <TASK>
[  108.780009][ T6393]  dump_stack_lvl+0x189/0x250
[  108.780026][ T6393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.780036][ T6393]  ? __pfx__printk+0x10/0x10
[  108.780048][ T6393]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  108.780059][ T6393]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  108.780069][ T6393]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  108.780080][ T6393]  warn_alloc+0x214/0x310
[  108.780096][ T6393]  ? __pfx_warn_alloc+0x10/0x10
[  108.780142][ T6393]  ? __get_vm_area_node+0x28f/0x300
[  108.780155][ T6393]  ? hash_netport4_resize+0x235/0x1b60
[  108.780169][ T6393]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  108.780197][ T6393]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  108.780212][ T6393]  ? rcu_is_watching+0x15/0xb0
[  108.780222][ T6393]  ? hash_netport4_resize+0x235/0x1b60
[  108.780231][ T6393]  ? hash_netport4_resize+0x235/0x1b60
[  108.780239][ T6393]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  108.780252][ T6393]  ? hash_netport4_resize+0x235/0x1b60
[  108.780266][ T6393]  hash_netport4_resize+0x235/0x1b60
[  108.780276][ T6393]  ? hash_netport4_uadt+0xc97/0xf30
[  108.780288][ T6393]  ? __pfx_hash_netport4_add+0x10/0x10
[  108.780298][ T6393]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  108.780313][ T6393]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  108.780328][ T6393]  call_ad+0x44e/0xb00
[  108.780345][ T6393]  ? __pfx_call_ad+0x10/0x10
[  108.780366][ T6393]  ? __nla_parse+0x40/0x60
[  108.780376][ T6393]  ip_set_ad+0x791/0x930
[  108.780394][ T6393]  ? __pfx_ip_set_ad+0x10/0x10
[  108.780427][ T6393]  nfnetlink_rcv_msg+0xb4d/0x1130
[  108.780441][ T6393]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  108.780464][ T6393]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  108.780474][ T6393]  ? kasan_save_free_info+0x46/0x50
[  108.780511][ T6393]  netlink_rcv_skb+0x208/0x470
[  108.780521][ T6393]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  108.780534][ T6393]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  108.780549][ T6393]  ? bpf_lsm_capable+0x9/0x20
[  108.780560][ T6393]  ? security_capable+0x7e/0x2e0
[  108.780578][ T6393]  nfnetlink_rcv+0x26a/0x2520
[  108.780597][ T6393]  ? __dev_queue_xmit+0x1d79/0x3b50
[  108.780620][ T6393]  ? __dev_queue_xmit+0x27b/0x3b50
[  108.780642][ T6393]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  108.780657][ T6393]  ? __pfx___dev_queue_xmit+0x10/0x10
[  108.780679][ T6393]  ? ref_tracker_free+0x63a/0x7d0
[  108.780698][ T6393]  ? __asan_memcpy+0x40/0x70
[  108.780710][ T6393]  ? __pfx_ref_tracker_free+0x10/0x10
[  108.780724][ T6393]  ? __skb_clone+0x63/0x7a0
[  108.780742][ T6393]  ? __skb_clone+0x483/0x7a0
[  108.780763][ T6393]  ? skb_clone+0x246/0x3a0
[  108.780784][ T6393]  ? __netlink_deliver_tap+0x807/0x850
[  108.780798][ T6393]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.780818][ T6393]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.780847][ T6393]  netlink_unicast+0x82f/0x9e0
[  108.780875][ T6393]  ? __pfx_netlink_unicast+0x10/0x10
[  108.780895][ T6393]  ? netlink_sendmsg+0x642/0xb30
[  108.780907][ T6393]  ? skb_put+0x11b/0x210
[  108.780926][ T6393]  netlink_sendmsg+0x805/0xb30
[  108.780949][ T6393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.780968][ T6393]  ? aa_sock_msg_perm+0xf1/0x1d0
[  108.780982][ T6393]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  108.780995][ T6393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.781005][ T6393]  __sock_sendmsg+0x21c/0x270
[  108.781025][ T6393]  ____sys_sendmsg+0x505/0x830
[  108.781044][ T6393]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.781066][ T6393]  ? import_iovec+0x74/0xa0
[  108.781083][ T6393]  ___sys_sendmsg+0x21f/0x2a0
[  108.781100][ T6393]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.781173][ T6393]  ? __fget_files+0x2a/0x420
[  108.781183][ T6393]  ? __fget_files+0x3a0/0x420
[  108.781203][ T6393]  __x64_sys_sendmsg+0x19b/0x260
[  108.781221][ T6393]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  108.781247][ T6393]  ? rcu_is_watching+0x15/0xb0
[  108.781268][ T6393]  ? do_syscall_64+0xbe/0x3b0
[  108.781287][ T6393]  do_syscall_64+0xfa/0x3b0
[  108.781299][ T6393]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.781313][ T6393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.781327][ T6393]  ? exc_page_fault+0x9f/0xf0
[  108.781345][ T6393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.781359][ T6393] RIP: 0033:0x7f53bf78eba9
[  108.781374][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.781385][ T6393] RSP: 002b:00007f53c056e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.781400][ T6393] RAX: ffffffffffffffda RBX: 00007f53bf9d5fa0 RCX: 00007f53bf78eba9
[  108.781409][ T6393] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005
[  108.781417][ T6393] RBP: 00007f53bf811e19 R08: 0000000000000000 R09: 0000000000000000
[  108.781425][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.781448][ T6393] R13: 00007f53bf9d6038 R14: 00007f53bf9d5fa0 R15: 00007fff1ef48b08
[  108.781472][ T6393]  </TASK>
[  108.781479][ T6393] Mem-Info:
[  108.993318][ T6393] active_anon:6109 inactive_anon:0 isolated_anon:0
[  108.993318][ T6393]  active_file:11361 inactive_file:38259 isolated_file:0
[  108.993318][ T6393]  unevictable:1768 dirty:206 writeback:0
[  108.993318][ T6393]  slab_reclaimable:10014 slab_unreclaimable:54789
[  108.993318][ T6393]  mapped:18139 shmem:2452 pagetables:990
[  108.993318][ T6393]  sec_pagetables:0 bounce:0
[  108.993318][ T6393]  kernel_misc_reclaimable:0
[  108.993318][ T6393]  free:286738 free_pcp:17958 free_cma:0
[  109.044913][ T6393] Node 0 active_anon:15784kB inactive_anon:0kB active_file:13992kB inactive_file:41300kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:67880kB dirty:616kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4432kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  109.075388][ T6393] Node 1 active_anon:8516kB inactive_anon:0kB active_file:31452kB inactive_file:111736kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4472kB dirty:208kB writeback:0kB shmem:5100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7124kB pagetables:1644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  109.091386][ T6393] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  109.123650][ T6393] lowmem_reserve[]: 0 811 811 811 811
[  109.125922][ T6393] Node 0 DMA32 free:326900kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15716kB inactive_anon:0kB active_file:13992kB inactive_file:41300kB unevictable:3536kB writepending:616kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:30888kB local_pcp:14148kB free_cma:0kB
[  109.148603][ T6393] lowmem_reserve[]: 0 0 0 0 0
[  109.150560][ T6393] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  109.165164][ T6393] lowmem_reserve[]: 0 0 854 854 854
[  109.167804][ T6393] Node 1 Normal free:352648kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8584kB inactive_anon:0kB active_file:31452kB inactive_file:111736kB unevictable:3536kB writepending:208kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35128kB local_pcp:15096kB free_cma:0kB
[  109.191005][ T6450] netlink: 'syz.5.165': attribute type 1 has an invalid length.
[  109.197302][ T6393] lowmem_reserve[]: 0 0 0 0 0
[  109.198067][ T6453] netlink: 'syz.4.166': attribute type 10 has an invalid length.
[  109.200075][ T6450] netlink: 'syz.5.165': attribute type 2 has an invalid length.
[  109.206055][ T6453] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.166'.
[  109.212884][ T6393] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  109.213009][ T6393] Node 0 DMA32: 1491*4kB (UM) 565*8kB (UME) 294*16kB (UME) 539*32kB (UME) 323*64kB (UME) 139*128kB (UM) 44*256kB (UME) 24*512kB (UM) 9*1024kB (U) 3*2048kB (U) 53*4096kB (M) = 326900kB
[  109.213249][ T6393] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  109.213380][ T6393] Node 1 Normal: 1265*4kB (UE) 985*8kB (UME) 786*16kB (UME) 341*32kB (UM) 139*64kB (UM) 142*128kB (UM) 40*256kB (UME) 20*512kB (UME) 16*1024kB (UM) 1*2048kB (E) 61*4096kB (UM) = 352268kB
[  109.213498][ T6393] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  109.213508][ T6393] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  109.213518][ T6393] 52072 total pagecache pages
[  109.213525][ T6393] 0 pages in swap cache
[  109.213530][ T6393] Free swap  = 124996kB
[  109.213535][ T6393] Total swap = 124996kB
[  109.213541][ T6393] 786301 pages RAM
[  109.213546][ T6393] 0 pages HighMem/MovableOnly
[  109.213551][ T6393] 241350 pages reserved
[  109.213556][ T6393] 0 pages cma reserved
[  110.308168][ T6495] netlink: 140 bytes leftover after parsing attributes in process `syz.4.174'.
[  110.311231][ T6495] netlink: 6 bytes leftover after parsing attributes in process `syz.4.174'.
[  111.234241][ T6516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.179'.
[  111.242729][ T6516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.179'.
[  111.442483][ T6528] netlink: 'syz.3.186': attribute type 12 has an invalid length.
[  112.089743][ T6555] raw_sendmsg: syz.3.197 forgot to set AF_INET. Fix it!
[  112.203486][   T54] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  114.612796][ T6588] __nla_validate_parse: 2 callbacks suppressed
[  114.612813][ T6588] netlink: 56 bytes leftover after parsing attributes in process `syz.5.212'.
[  114.619364][ T6589] netlink: 'syz.4.213': attribute type 3 has an invalid length.
[  114.622858][ T6589] netlink: 'syz.4.213': attribute type 1 has an invalid length.
[  114.632898][ T6589] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.213'.
[  114.687309][   T54] Bluetooth: hci4: ISO packet too small
[  115.127408][ T6616] netlink: 56 bytes leftover after parsing attributes in process `syz.4.225'.
[  116.373837][ T6659] netlink: 'syz.3.237': attribute type 7 has an invalid length.
[  116.376997][ T6659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.237'.
[  116.486879][ T6662] netlink: 'syz.4.238': attribute type 5 has an invalid length.
[  116.490456][ T6662] netlink: 'syz.4.238': attribute type 5 has an invalid length.
[  116.712705][ T6292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.812617][ T6292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.898255][ T6292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.947739][ T6292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.068509][ T6292] bridge_slave_1: left allmulticast mode
[  117.070973][ T6292] bridge_slave_1: left promiscuous mode
[  117.076446][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.082866][ T6292] bridge_slave_0: left allmulticast mode
[  117.085783][ T6292] bridge_slave_0: left promiscuous mode
[  117.089191][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.451336][ T6292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.457222][ T6292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.462040][ T6292] bond0 (unregistering): Released all slaves
[  117.667936][ T6292] hsr_slave_0: left promiscuous mode
[  117.670266][ T6292] hsr_slave_1: left promiscuous mode
[  117.672716][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.676073][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.679459][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.682437][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.691984][ T6292] veth1_macvtap: left promiscuous mode
[  117.694266][ T6292] veth0_macvtap: left promiscuous mode
[  117.696507][ T6292] veth1_vlan: left promiscuous mode
[  117.698674][ T6292] veth0_vlan: left promiscuous mode
[  117.988430][ T6292] team0 (unregistering): Port device team_slave_1 removed
[  118.017436][ T6292] team0 (unregistering): Port device team_slave_0 removed
[  118.117770][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.123454][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.129818][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.142736][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.150875][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.525922][ T6683] chnl_net:caif_netlink_parms(): no params data found
[  118.607439][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.610443][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.613898][ T6683] bridge_slave_0: entered allmulticast mode
[  118.617774][ T6683] bridge_slave_0: entered promiscuous mode
[  118.625750][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.629210][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.632239][ T6683] bridge_slave_1: entered allmulticast mode
[  118.638011][ T6683] bridge_slave_1: entered promiscuous mode
[  118.674150][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.681853][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.755175][ T6683] team0: Port device team_slave_0 added
[  118.758605][ T6693] netlink: 'syz.5.243': attribute type 39 has an invalid length.
[  118.758915][ T6683] team0: Port device team_slave_1 added
[  118.846389][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.849538][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.870399][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.890211][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.893765][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.913290][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.955009][ T6292] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.979621][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.983770][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.987887][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.990896][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.993901][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.096046][ T6292] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.114499][ T6683] hsr_slave_0: entered promiscuous mode
[  119.117901][ T6683] hsr_slave_1: entered promiscuous mode
[  119.162390][ T6292] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.252354][ T6292] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.511953][ T6694] chnl_net:caif_netlink_parms(): no params data found
[  119.551223][ T6683] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  119.572658][ T6683] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  119.584524][ T6292] bridge_slave_1: left allmulticast mode
[  119.586335][ T6292] bridge_slave_1: left promiscuous mode
[  119.588077][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.592728][ T6292] bridge_slave_0: left allmulticast mode
[  119.598012][ T6292] bridge_slave_0: left promiscuous mode
[  119.600475][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.939168][ T6292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.945315][ T6292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.949395][ T6292] bond0 (unregistering): Released all slaves
[  119.976425][ T6711] netlink: 'syz.5.249': attribute type 13 has an invalid length.
[  119.980008][ T6683] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  119.991684][ T6683] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  120.102504][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.107380][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.109713][ T6694] bridge_slave_0: entered allmulticast mode
[  120.112860][ T6694] bridge_slave_0: entered promiscuous mode
[  120.118759][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.121098][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.124038][ T6694] bridge_slave_1: entered allmulticast mode
[  120.126863][ T6694] bridge_slave_1: entered promiscuous mode
[  120.205414][   T54] Bluetooth: hci0: command tx timeout
[  120.212129][ T6694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.222867][ T6694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.259950][ T6292] hsr_slave_0: left promiscuous mode
[  120.263521][ T6292] hsr_slave_1: left promiscuous mode
[  120.266665][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.269476][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.272894][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.277532][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.295845][ T6292] veth1_macvtap: left promiscuous mode
[  120.298056][ T6292] veth0_macvtap: left promiscuous mode
[  120.300267][ T6292] veth1_vlan: left promiscuous mode
[  120.302386][ T6292] veth0_vlan: left promiscuous mode
[  120.691189][ T6292] team0 (unregistering): Port device team_slave_1 removed
[  120.723032][ T6292] team0 (unregistering): Port device team_slave_0 removed
[  121.004690][   T54] Bluetooth: hci1: command tx timeout
[  121.096261][ T6694] team0: Port device team_slave_0 added
[  121.100183][ T6694] team0: Port device team_slave_1 added
[  121.127729][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.130009][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.152281][ T6694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.158052][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.160791][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.171012][ T6694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.279843][ T6694] hsr_slave_0: entered promiscuous mode
[  121.289783][ T6694] hsr_slave_1: entered promiscuous mode
[  121.292859][ T6694] debugfs: 'hsr0' already exists in 'hsr'
[  121.295531][ T6694] Cannot create hsr debugfs directory
[  121.376030][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.459015][ T6683] 8021q: adding VLAN 0 to HW filter on device team0
[  121.462053][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.254'.
[  121.471063][ T6731] netlink: 'syz.5.254': attribute type 3 has an invalid length.
[  121.483998][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.486309][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.527884][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.530804][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.571874][ T6694] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  121.585223][ T6694] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  121.604765][ T6694] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  121.619217][ T6694] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  121.651099][ T6735] netlink: 104 bytes leftover after parsing attributes in process `syz.5.256'.
[  121.776122][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.791613][ T6694] 8021q: adding VLAN 0 to HW filter on device team0
[  121.808469][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.811228][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.825675][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.828477][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.902272][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.145820][ T6683] veth0_vlan: entered promiscuous mode
[  122.165189][ T6683] veth1_vlan: entered promiscuous mode
[  122.197499][ T6683] veth0_macvtap: entered promiscuous mode
[  122.205248][ T6683] veth1_macvtap: entered promiscuous mode
[  122.230290][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.259277][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.279270][ T5865] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.286314][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.289018][   T54] Bluetooth: hci0: command tx timeout
[  122.292113][ T5865] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.302010][ T5865] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.308329][ T5865] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.398564][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.401511][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.454923][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.458023][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.472064][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.604715][ T6772] netlink: 2 bytes leftover after parsing attributes in process `syz.7.242'.
[  122.635585][ T6694] veth0_vlan: entered promiscuous mode
[  122.645914][ T6694] veth1_vlan: entered promiscuous mode
[  122.674755][ T6694] veth0_macvtap: entered promiscuous mode
[  122.681451][ T6694] veth1_macvtap: entered promiscuous mode
[  122.707130][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.745775][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.772579][ T6292] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.797779][ T6292] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.805690][ T6292] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.817048][ T6292] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.875519][  T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.881387][  T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.907051][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.909503][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.986663][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.265'.
[  122.989600][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.265'.
[  123.062908][ T6784] net veth1_virt_wifi : renamed from virt_wifi0
[  123.083602][   T54] Bluetooth: hci1: command tx timeout
[  123.485651][ T6791] netdevsim netdevsim7 : renamed from netdevsim0 (while UP)
[  123.882169][ T6804] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.274'.
[  124.132599][ T6816] netlink: 180 bytes leftover after parsing attributes in process `syz.6.278'.
[  124.375704][   T54] Bluetooth: hci0: command tx timeout
[  125.163519][   T54] Bluetooth: hci1: command tx timeout
[  125.328514][ T6866] netlink: 'syz.5.293': attribute type 10 has an invalid length.
[  125.380356][ T6866] batman_adv: batadv0: Adding interface: netdevsim0
[  125.391556][ T6866] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.416422][ T6866] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  125.961556][ T6880] netlink: 'syz.5.299': attribute type 21 has an invalid length.
[  126.115046][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.301'.
[  126.447197][   T54] Bluetooth: hci0: command tx timeout
[  126.556768][ T6908] netlink: 'syz.5.311': attribute type 16 has an invalid length.
[  126.560126][ T6908] netlink: 156 bytes leftover after parsing attributes in process `syz.5.311'.
[  127.254786][   T54] Bluetooth: hci1: command tx timeout
[  127.953943][ T6928] syzkaller0: entered promiscuous mode
[  127.956313][ T6928] syzkaller0: entered allmulticast mode
[  128.042269][ T6937] netlink: 'syz.7.319': attribute type 19 has an invalid length.
[  128.057997][ T6939] nftables ruleset with unbound set
[  128.261160][ T6945] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.322'.
[  128.270894][ T6941] netlink: 'syz.7.321': attribute type 12 has an invalid length.
[  128.278056][ T6941] netlink: 132 bytes leftover after parsing attributes in process `syz.7.321'.
[  129.162141][ T6960] : entered promiscuous mode
[  129.292060][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.331'.
[  129.351648][ T6969] netlink: 92 bytes leftover after parsing attributes in process `syz.6.333'.
[  129.380450][ T6970] netlink: 'syz.5.332': attribute type 10 has an invalid length.
[  129.467471][ T6970] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  129.509932][ T6970] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  129.516307][ T6970] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  129.601679][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'.
[  129.828644][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.5.345'.
[  130.350008][ T7004] netlink: 56 bytes leftover after parsing attributes in process `syz.7.348'.
[  130.985709][ T7039] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.364'.
[  131.285771][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.372'.
[  131.521659][   T54] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  131.634095][ T7062] syzkaller0: tun_chr_ioctl cmd 1074025677
[  131.638145][ T7062] syzkaller0: Linktype set failed because interface is up
[  131.692749][ T7077] netlink: 'syz.7.380': attribute type 4 has an invalid length.
[  131.752098][ T7082] netlink: 208 bytes leftover after parsing attributes in process `syz.7.382'.
[  131.921437][ T7087] netlink: 'syz.7.383': attribute type 6 has an invalid length.
[  131.931278][ T7087] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.383'.
[  132.081610][ T7094] netlink: 'syz.7.386': attribute type 1 has an invalid length.
[  132.528423][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.531031][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.729379][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.399'.
[  132.737435][ T7118] openvswitch: netlink: nsh attr 165 is out of range max 3
[  132.739849][ T7118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.792995][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.408'.
[  133.888175][ T7144] netlink: 208344 bytes leftover after parsing attributes in process `syz.6.410'.
[  135.083122][ T7167] netlink: 'syz.6.420': attribute type 1 has an invalid length.
[  135.107062][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.420'.
[  135.602298][ T7180] veth0_vlan: entered allmulticast mode
[  136.389549][ T7203] ksmbd: Unknown IPC event: 1, ignore.
[  136.400262][ T7201] netlink: 14 bytes leftover after parsing attributes in process `syz.5.432'.
[  136.777393][ T7243] netlink: 'syz.7.451': attribute type 2 has an invalid length.
[  137.249109][ T7252] netlink: 60 bytes leftover after parsing attributes in process `syz.7.453'.
[  137.255185][ T7248] netlink: 60 bytes leftover after parsing attributes in process `syz.7.453'.
[  137.358639][ T7257] veth0_vlan: entered allmulticast mode
[  137.478916][ T7257] veth0_vlan: left promiscuous mode
[  137.488812][ T7257] veth0_vlan: entered promiscuous mode
[  137.514904][ T7257] netlink: 36 bytes leftover after parsing attributes in process `syz.7.457'.
[  137.539074][ T7261] netlink: 64 bytes leftover after parsing attributes in process `syz.6.459'.
[  137.572127][ T7264] netlink: 'syz.5.460': attribute type 2 has an invalid length.
[  137.578053][ T7264] netlink: 'syz.5.460': attribute type 1 has an invalid length.
[  137.581521][ T7264] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.460'.
[  137.586693][ T7264] nbd: must specify at least one socket
[  137.682365][ T7269] pim6reg1: entered allmulticast mode
[  137.730008][   T54] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18
[  138.461034][ T7283] netlink: 'syz.6.468': attribute type 10 has an invalid length.
[  138.465508][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.6.468'.
[  138.513903][   T33] audit: type=1107 audit(1757503289.452:2): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  138.627842][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.7.469'.
[  138.633985][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.7.469'.
[  138.636963][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.469'.
[  138.731178][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.7.473'.
[  138.786591][ T7298] openvswitch: netlink: Flow key attr not present in new flow.
[  139.346265][ T7314] =======================================================
[  139.346265][ T7314] WARNING: The mand mount option has been deprecated and
[  139.346265][ T7314]          and is ignored by this kernel. Remove the mand
[  139.346265][ T7314]          option from the mount to silence this warning.
[  139.346265][ T7314] =======================================================
[  139.408308][ T7316] openvswitch: netlink: Key type 29 is not supported
[  139.663205][ T7329] netlink: 'syz.6.490': attribute type 1 has an invalid length.
[  139.680482][ T7331] netlink: 'syz.5.489': attribute type 29 has an invalid length.
[  139.996927][   T54] Bluetooth: hci5: unexpected event 0x3c length: 15 > 7
[  140.628416][ T7352] lo: entered allmulticast mode
[  140.641859][ T7352] lo: entered promiscuous mode
[  140.645304][ T7352] lo: left allmulticast mode
[  140.905664][   T54] Bluetooth: hci5: SCO packet too small
[  141.044139][ T7362] openvswitch: netlink: Message has 6 unknown bytes.
[  141.744076][ T7383] netlink: 'syz.5.513': attribute type 21 has an invalid length.
[  141.752206][ T7383] netlink: 'syz.5.513': attribute type 6 has an invalid length.
[  142.180846][ T7407] netlink: 'syz.6.524': attribute type 2 has an invalid length.
[  143.150007][   T54] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  143.336112][ T7429] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  143.458143][ T7437] __nla_validate_parse: 12 callbacks suppressed
[  143.458159][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.534'.
[  143.551024][ T7444] netlink: 'syz.5.539': attribute type 9 has an invalid length.
[  143.559286][ T7444] netlink: 211988 bytes leftover after parsing attributes in process `syz.5.539'.
[  143.594847][ T7437] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  143.638469][ T7446] netlink: 'syz.6.540': attribute type 12 has an invalid length.
[  143.641335][ T7446] netlink: 132 bytes leftover after parsing attributes in process `syz.6.540'.
[  143.651431][ T7446] C: renamed from team_slave_0 (while UP)
[  143.656159][ T7446] netlink: 'syz.6.540': attribute type 1 has an invalid length.
[  143.663447][ T7446] netlink: 152 bytes leftover after parsing attributes in process `syz.6.540'.
[  143.666949][ T7446] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.860173][ T7467] netlink: 'syz.5.550': attribute type 1 has an invalid length.
[  143.862698][ T7467] netlink: 17 bytes leftover after parsing attributes in process `syz.5.550'.
[  144.376806][ T7508] netlink: 'syz.7.570': attribute type 29 has an invalid length.
[  144.380281][ T7508] netlink: 'syz.7.570': attribute type 29 has an invalid length.
[  144.462315][ T7512] netlink: 'syz.6.572': attribute type 2 has an invalid length.
[  144.469056][ T7512] netlink: 'syz.6.572': attribute type 1 has an invalid length.
[  144.471597][ T7512] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.572'.
[  144.481598][ T7512] block nbd5: not configured, cannot reconfigure
[  145.665725][ T7536] @0: renamed from bond_slave_1 (while UP)
[  145.913093][ T7540] netlink: 'syz.7.584': attribute type 10 has an invalid length.
[  145.915569][ T7540] netlink: 55 bytes leftover after parsing attributes in process `syz.7.584'.
[  145.920496][ T7546] openvswitch: netlink: Message has 4 unknown bytes.
[  145.957115][ T7548] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.587'.
[  146.090038][ T7554] netlink: 132 bytes leftover after parsing attributes in process `syz.6.590'.
[  146.284820][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.400871][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.600'.
[  146.405369][ T7575] openvswitch: netlink: Unknown nsh attribute 0
[  146.408164][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.882174][ T7615] validate_nla: 2 callbacks suppressed
[  147.882245][ T7615] netlink: 'syz.6.618': attribute type 39 has an invalid length.
[  147.904802][ T7619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.464326][ T7637] __nla_validate_parse: 1 callbacks suppressed
[  148.464341][ T7637] netlink: 260 bytes leftover after parsing attributes in process `syz.7.625'.
[  148.469866][ T7637] netlink: 'syz.7.625': attribute type 1 has an invalid length.
[  149.017363][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.021083][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.027234][ T7654] bridge0: entered allmulticast mode
[  149.405685][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  149.459951][ T7678] netlink: 60 bytes leftover after parsing attributes in process `syz.7.644'.
[  149.466945][ T7678] netlink: 60 bytes leftover after parsing attributes in process `syz.7.644'.
[  149.477032][ T7678] netlink: 60 bytes leftover after parsing attributes in process `syz.7.644'.
[  149.771330][ T7691] cgroup: Unknown subsys name '0x00000000000000000x0000000000000000'
[  150.056290][ T7704] netlink: 'syz.6.656': attribute type 21 has an invalid length.
[  150.062158][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.656'.
[  150.677994][ T7735] netlink: 'syz.5.670': attribute type 1 has an invalid length.
[  150.686516][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.670'.
[  150.686836][ T7734] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.671'.
[  150.696123][ T7734] netlink: 6320 bytes leftover after parsing attributes in process `syz.7.671'.
[  150.868342][ T7747] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  150.961083][ T7755] netlink: 56 bytes leftover after parsing attributes in process `syz.7.681'.
[  150.964858][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.681'.
[  151.535506][ T7800] netlink: 'syz.5.702': attribute type 10 has an invalid length.
[  151.996932][ T7820] netlink: 'syz.7.708': attribute type 10 has an invalid length.
[  152.001076][ T7820] team0: entered promiscuous mode
[  152.003485][ T7820] team_slave_0: entered promiscuous mode
[  152.008007][ T7820] team_slave_1: entered promiscuous mode
[  152.029305][ T7820] team0: entered allmulticast mode
[  152.041681][ T7820] team_slave_0: entered allmulticast mode
[  152.049607][ T7820] team_slave_1: entered allmulticast mode
[  152.052011][ T7820] bridge0: port 3(team0) entered blocking state
[  152.061655][ T7820] bridge0: port 3(team0) entered disabled state
[  155.228611][ T7877] __nla_validate_parse: 5 callbacks suppressed
[  155.228667][ T7877] netlink: 188 bytes leftover after parsing attributes in process `syz.7.733'.
[  155.456955][ T7885] netlink: 96 bytes leftover after parsing attributes in process `syz.5.738'.
[  155.619628][ T7889] netlink: 'syz.5.740': attribute type 1 has an invalid length.
[  159.620668][ T7958] netlink: 'syz.6.762': attribute type 10 has an invalid length.
[  159.623102][ T7958] netlink: 55 bytes leftover after parsing attributes in process `syz.6.762'.
[  159.677943][ T7962] netlink: 'syz.7.765': attribute type 21 has an invalid length.
[  159.895865][ T7967] netlink: 132 bytes leftover after parsing attributes in process `syz.7.767'.
[  159.899940][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.904561][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.913002][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.918903][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.932235][ T7971] batman_adv: batadv0: Removing interface: netdevsim0
[  160.294421][ T7991] netlink: 'syz.6.778': attribute type 21 has an invalid length.
[  160.412767][ T7997] tap0: tun_chr_ioctl cmd 2148553947
[  160.679452][ T8012] sysfs: Unknown parameter 'subj_type'
[  160.712503][ T8014] netlink: 2 bytes leftover after parsing attributes in process `syz.5.789'.
[  160.741252][ T8014] batadv_slave_1: entered promiscuous mode
[  161.292835][ T8017] netlink: 10 bytes leftover after parsing attributes in process `syz.6.790'.
[  162.471692][ T8060] netlink: set zone limit has 4 unknown bytes
[  162.506633][ T8064] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.807'.
[  162.631939][ T8070] delete_channel: no stack
[  162.634433][ T8070] delete_channel: no stack
[  162.782809][ T8076] netlink: 'syz.5.813': attribute type 10 has an invalid length.
[  162.788980][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.813'.
[  163.553536][ T8076] ipvlan1: entered promiscuous mode
[  163.556660][ T8076] ipvlan1: entered allmulticast mode
[  163.593335][ T8076] bridge0: port 3(ipvlan1) entered blocking state
[  163.617717][ T8076] bridge0: port 3(ipvlan1) entered disabled state
[  163.630888][ T8076] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  164.044488][ T8110] netlink: 80 bytes leftover after parsing attributes in process `syz.5.828'.
[  164.051511][ T8110] netlink: 80 bytes leftover after parsing attributes in process `syz.5.828'.
[  164.504264][ T8118] netlink: 'syz.5.831': attribute type 12 has an invalid length.
[  164.507334][ T8118] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.831'.
[  165.358142][ T8131] netlink: 'syz.5.838': attribute type 1 has an invalid length.
[  167.704738][ T8195] netlink: 132 bytes leftover after parsing attributes in process `syz.5.865'.
[  168.279300][ T8206] netlink: 'syz.5.870': attribute type 29 has an invalid length.
[  168.283130][ T8206] netlink: 'syz.5.870': attribute type 29 has an invalid length.
[  169.507118][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'.
[  169.688541][ T8260] netlink: 64 bytes leftover after parsing attributes in process `syz.5.894'.
[  169.704193][ T8262] netlink: 'syz.6.895': attribute type 2 has an invalid length.
[  169.707248][ T8262] netlink: 'syz.6.895': attribute type 1 has an invalid length.
[  169.714942][ T8262] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.895'.
[  169.718537][ T8262] nbd: illegal input index -404748436
[  170.198344][ T8277] netlink: 132 bytes leftover after parsing attributes in process `syz.5.902'.
[  170.716436][ T8297] netlink: 'syz.6.911': attribute type 29 has an invalid length.
[  170.720710][ T8297] netlink: 'syz.6.911': attribute type 29 has an invalid length.
[  171.141924][ T8322] syzkaller0: entered promiscuous mode
[  171.146072][ T8322] syzkaller0: entered allmulticast mode
[  171.295726][ T8329] netlink: 44 bytes leftover after parsing attributes in process `syz.6.927'.
[  171.298981][ T8329] netlink: 43 bytes leftover after parsing attributes in process `syz.6.927'.
[  171.301920][ T8329] netlink: 'syz.6.927': attribute type 5 has an invalid length.
[  171.308206][ T8329] netlink: 43 bytes leftover after parsing attributes in process `syz.6.927'.
[  171.400247][ T8331] syzkaller0: entered promiscuous mode
[  171.402226][ T8331] syzkaller0: entered allmulticast mode
[  172.555402][ T8339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.159696][ T8389] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.956'.
[  174.338962][ T8396] netlink: 'syz.5.959': attribute type 3 has an invalid length.
[  174.341768][ T8396] netlink: 'syz.5.959': attribute type 1 has an invalid length.
[  174.346422][ T8396] netlink: 191264 bytes leftover after parsing attributes in process `syz.5.959'.
[  175.287888][ T8417] netlink: 60 bytes leftover after parsing attributes in process `syz.6.969'.
[  175.302571][ T8417] netlink: 60 bytes leftover after parsing attributes in process `syz.6.969'.
[  175.317050][ T8417] netlink: 60 bytes leftover after parsing attributes in process `syz.6.969'.
[  176.235674][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.239413][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.244096][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.248416][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.249064][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.980'.
[  176.254384][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.535449][ T5745] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.588925][ T8437] chnl_net:caif_netlink_parms(): no params data found
[  176.633870][ T5745] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.698503][ T5745] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.765124][ T5745] netdevsim netdevsim7  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.790821][ T8470] netlink: 'syz.6.991': attribute type 46 has an invalid length.
[  176.838470][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.844459][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.855183][ T8437] bridge_slave_0: entered allmulticast mode
[  176.861444][ T8437] bridge_slave_0: entered promiscuous mode
[  176.920924][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.925400][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.927860][ T8437] bridge_slave_1: entered allmulticast mode
[  176.931892][ T8437] bridge_slave_1: entered promiscuous mode
[  176.982130][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.998083][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.069377][ T8437] team0: Port device team_slave_0 added
[  177.073968][ T5745] bridge0: port 3(team0) entered disabled state
[  177.082106][ T5745] bridge_slave_1: left allmulticast mode
[  177.089527][ T5745] bridge_slave_1: left promiscuous mode
[  177.091977][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.102943][ T5745] bridge_slave_0: left allmulticast mode
[  177.120034][ T5745] bridge_slave_0: left promiscuous mode
[  177.125116][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.521547][ T5745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.527912][ T5745] bond0 (unregistering): (slave 4@0): Releasing backup interface
[  177.532688][ T5745] bond0 (unregistering): Released all slaves
[  177.559872][ T8437] team0: Port device team_slave_1 added
[  177.609440][ T8488] netlink: 56 bytes leftover after parsing attributes in process `syz.5.999'.
[  177.648650][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.650973][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.660412][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.666053][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.668501][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.678143][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.800846][ T8437] hsr_slave_0: entered promiscuous mode
[  177.806060][ T8437] hsr_slave_1: entered promiscuous mode
[  177.809842][ T8437] debugfs: 'hsr0' already exists in 'hsr'
[  177.812318][ T8437] Cannot create hsr debugfs directory
[  177.849399][ T5745] hsr_slave_0: left promiscuous mode
[  177.851867][ T5745] hsr_slave_1: left promiscuous mode
[  177.854423][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.856779][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.860212][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.862616][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.878836][ T5745] veth1_macvtap: left promiscuous mode
[  177.880649][ T5745] veth0_macvtap: left promiscuous mode
[  177.882635][ T5745] veth1_vlan: left promiscuous mode
[  177.886746][ T5745] veth0_vlan: left promiscuous mode
[  177.928064][ T8499] netlink: 'syz.5.1004': attribute type 2 has an invalid length.
[  178.249459][ T5745] team_slave_1 (unregistering): left promiscuous mode
[  178.252359][ T5745] team_slave_1 (unregistering): left allmulticast mode
[  178.256186][ T5745] team0 (unregistering): Port device team_slave_1 removed
[  178.280108][ T5745] team_slave_0 (unregistering): left promiscuous mode
[  178.282366][ T5745] team_slave_0 (unregistering): left allmulticast mode
[  178.288887][ T5745] team0 (unregistering): Port device team_slave_0 removed
[  178.293633][   T54] Bluetooth: hci2: command tx timeout
[  178.803406][ T8507] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  178.849584][ T8437] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  178.874202][ T8437] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  178.892098][ T8437] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  178.923671][ T8437] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  179.081800][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.090205][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1015'.
[  179.101647][ T8437] 8021q: adding VLAN 0 to HW filter on device team0
[  179.119347][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.121758][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.127389][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.129686][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.151386][ T8437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.155716][ T8437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.269371][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.367382][ T8539] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1017'.
[  179.438160][ T8437] veth0_vlan: entered promiscuous mode
[  179.445083][ T8437] veth1_vlan: entered promiscuous mode
[  179.474575][ T8437] veth0_macvtap: entered promiscuous mode
[  179.480949][ T8437] veth1_macvtap: entered promiscuous mode
[  179.514633][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.533108][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.559259][ T6292] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.562879][ T6292] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.574746][ T6292] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.578103][ T6292] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.637796][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.640624][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.674231][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.680254][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.912703][ T8569] netlink: 'syz.8.1029': attribute type 3 has an invalid length.
[  179.923396][ T8569] netlink: 13435 bytes leftover after parsing attributes in process `syz.8.1029'.
[  179.953871][ T8573] netlink: 'syz.6.1031': attribute type 15 has an invalid length.
[  179.956495][ T8573] netlink: 11318 bytes leftover after parsing attributes in process `syz.6.1031'.
[  180.167393][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1038'.
[  180.363526][   T54] Bluetooth: hci2: command tx timeout
[  180.774177][ T8602] !: renamed from bond_slave_0 (while UP)
[  181.088392][ T8616] netlink: 'syz.5.1050': attribute type 13 has an invalid length.
[  181.090998][ T8616] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.1050'.
[  181.841451][ T8622] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1053'.
[  182.036129][ T8630] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1056'.
[  182.042099][ T8630] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1056'.
[  182.445878][   T54] Bluetooth: hci2: command tx timeout
[  184.075688][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1063'.
[  184.079592][ T8650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1063'.
[  184.145825][   T54] Bluetooth: hci5: Unable to find connection for big 0x00
[  184.196682][ T8659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.441981][ T8674] __nla_validate_parse: 1 callbacks suppressed
[  184.442035][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1074'.
[  184.523521][   T54] Bluetooth: hci2: command tx timeout
[  184.726721][ T8681] netlink: 'syz.5.1077': attribute type 10 has an invalid length.
[  186.017113][ T8704] netlink: 'syz.8.1085': attribute type 21 has an invalid length.
[  186.019690][ T8704] netlink: 'syz.8.1085': attribute type 5 has an invalid length.
[  186.901893][ T8725] netlink: 'syz.5.1095': attribute type 29 has an invalid length.
[  186.910602][ T8725] netlink: 'syz.5.1095': attribute type 29 has an invalid length.
[  186.913450][ T8725] netlink: 508 bytes leftover after parsing attributes in process `syz.5.1095'.
[  188.388677][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1122'.
[  188.566828][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'.
[  188.841335][ T8803] netlink: 'syz.5.1131': attribute type 10 has an invalid length.
[  188.908061][ T8810] netlink: 'syz.5.1134': attribute type 41 has an invalid length.
[  188.935342][ T8812] netlink: 4400 bytes leftover after parsing attributes in process `syz.8.1135'.
[  189.010517][   T54] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[  189.062501][ T8822] netlink: 'syz.8.1140': attribute type 10 has an invalid length.
[  189.112912][ T8826] IPv6: NLM_F_CREATE should be specified when creating new route
[  189.151912][ T8828] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1143'.
[  189.285894][ T8844] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  189.451903][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1157'.
[  189.617455][ T8862] netlink: 'syz.6.1159': attribute type 1 has an invalid length.
[  190.745172][ T8882] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1168'.
[  190.755558][ T8882] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1168'.
[  190.765897][ T8882] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1168'.
[  190.861097][ T8889] netlink: 'syz.5.1171': attribute type 21 has an invalid length.
[  190.867841][ T8889] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1171'.
[  191.172058][ T8895] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1173'.
[  191.180467][ T8895] netlink: 46 bytes leftover after parsing attributes in process `syz.8.1173'.
[  191.190549][ T8895] netlink: 46 bytes leftover after parsing attributes in process `syz.8.1173'.
[  191.258733][ T8905] netlink: 26 bytes leftover after parsing attributes in process `syz.6.1176'.
[  191.285819][ T8907] netlink: 'syz.5.1179': attribute type 39 has an invalid length.
[  191.350585][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1184'.
[  191.409297][ T8913] netlink: 'syz.5.1183': attribute type 12 has an invalid length.
[  191.867332][ T8929] netlink: 'syz.8.1189': attribute type 3 has an invalid length.
[  191.870761][ T8929] netlink: 'syz.8.1189': attribute type 1 has an invalid length.
[  192.038057][ T8942] netlink: 'syz.5.1195': attribute type 1 has an invalid length.
[  192.319965][ T8958] netlink: zone id is out of range
[  192.322224][ T8958] netlink: zone id is out of range
[  192.333448][ T8958] netlink: zone id is out of range
[  192.335465][ T8958] netlink: zone id is out of range
[  192.341317][ T8958] netlink: zone id is out of range
[  192.357107][ T8958] netlink: zone id is out of range
[  192.371422][ T8958] netlink: zone id is out of range
[  192.374813][ T8958] netlink: zone id is out of range
[  192.376925][ T8958] netlink: zone id is out of range
[  192.381833][ T8958] netlink: zone id is out of range
[  192.466120][ T8966] netlink: 'syz.5.1206': attribute type 2 has an invalid length.
[  192.469436][ T8966] netlink: 'syz.5.1206': attribute type 1 has an invalid length.
[  192.619274][ T8974] IPv6: Can't replace route, no match found
[  193.545717][ T8985] netlink: 'syz.5.1215': attribute type 39 has an invalid length.
[  193.967560][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.969792][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.542838][ T9009] __nla_validate_parse: 4 callbacks suppressed
[  194.542853][ T9009] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1221'.
[  194.559962][ T9013] veth1_to_bond: entered allmulticast mode
[  194.711312][   T54] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  194.922018][ T5865] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.025450][ T5865] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.105449][ T5865] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.160102][ T5865] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.308004][ T5865] bridge_slave_1: left allmulticast mode
[  195.309824][ T5865] bridge_slave_1: left promiscuous mode
[  195.314947][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.319497][ T5865] bridge_slave_0: left allmulticast mode
[  195.322514][ T5865] bridge_slave_0: left promiscuous mode
[  195.326305][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.629798][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.634556][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.638946][ T5865] bond0 (unregistering): Released all slaves
[  195.714510][ T5865] : left promiscuous mode
[  195.961419][ T5865] hsr_slave_0: left promiscuous mode
[  195.964707][ T5865] hsr_slave_1: left promiscuous mode
[  195.975993][ T5865] veth1_macvtap: left promiscuous mode
[  195.978003][ T5865] veth0_macvtap: left promiscuous mode
[  195.980259][ T5865] veth1_vlan: left promiscuous mode
[  196.414110][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  196.457987][ T5865] team0 (unregistering): Port device team_slave_0 removed
[  196.520647][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.525530][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.538957][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.542747][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.547416][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.000008][ T9054] chnl_net:caif_netlink_parms(): no params data found
[  197.057518][ T5865] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.103850][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.106727][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.109507][ T9054] bridge_slave_0: entered allmulticast mode
[  197.113541][ T9054] bridge_slave_0: entered promiscuous mode
[  197.118655][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.121450][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.124927][ T9054] bridge_slave_1: entered allmulticast mode
[  197.128052][ T9054] bridge_slave_1: entered promiscuous mode
[  197.147995][ T5865] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.178395][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.185482][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.207521][ T9054] team0: Port device team_slave_0 added
[  197.222508][ T5865] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.230158][ T9054] team0: Port device team_slave_1 added
[  197.251005][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.253460][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.261330][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.270026][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.272152][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.280477][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.295726][ T5865] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.330336][ T9054] hsr_slave_0: entered promiscuous mode
[  197.332767][ T9054] hsr_slave_1: entered promiscuous mode
[  197.459003][ T5865] bridge_slave_1: left allmulticast mode
[  197.461189][ T5865] bridge_slave_1: left promiscuous mode
[  197.463869][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.467973][ T5865] bridge_slave_0: left allmulticast mode
[  197.469776][ T5865] bridge_slave_0: left promiscuous mode
[  197.472602][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.769068][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.779884][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.784578][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.787889][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.793313][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.863648][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.869273][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.873548][ T5865] bond0 (unregistering): Released all slaves
[  198.605947][ T5854] Bluetooth: hci0: command tx timeout
[  199.443888][ T5865] hsr_slave_0: left promiscuous mode
[  199.447742][ T5865] hsr_slave_1: left promiscuous mode
[  199.454640][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.457023][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.474123][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.476962][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.496738][ T5865] veth1_macvtap: left promiscuous mode
[  199.498608][ T5865] veth0_macvtap: left promiscuous mode
[  199.805143][ T5854] Bluetooth: hci1: command tx timeout
[  199.848686][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  199.889843][ T5865] team0 (unregistering): Port device C removed
[  200.440372][ T9111] netlink: 'syz.8.1258': attribute type 11 has an invalid length.
[  200.461179][ T9070] chnl_net:caif_netlink_parms(): no params data found
[  200.620923][ T9054] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  200.683474][ T5854] Bluetooth: hci0: command tx timeout
[  200.745656][ T9054] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  200.760156][ T9054] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  200.768529][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.771199][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.775736][ T9070] bridge_slave_0: entered allmulticast mode
[  200.780211][ T9070] bridge_slave_0: entered promiscuous mode
[  200.786543][ T9054] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  200.798281][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.801020][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.805878][ T9070] bridge_slave_1: entered allmulticast mode
[  200.810817][ T9070] bridge_slave_1: entered promiscuous mode
[  200.899881][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.918174][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.989191][ T9070] team0: Port device team_slave_0 added
[  200.997573][ T9070] team0: Port device team_slave_1 added
[  201.071387][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.074038][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.082839][ T9070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.096882][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.099501][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.116877][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.269381][ T9070] hsr_slave_0: entered promiscuous mode
[  201.274412][ T9070] hsr_slave_1: entered promiscuous mode
[  201.277495][ T9070] debugfs: 'hsr0' already exists in 'hsr'
[  201.279430][ T9070] Cannot create hsr debugfs directory
[  201.466753][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.521008][ T9070] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  201.536379][ T9070] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  201.544139][ T9070] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  201.551023][ T9070] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  201.569985][ T9054] 8021q: adding VLAN 0 to HW filter on device team0
[  201.582592][ T9129] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  201.588692][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.591811][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.616608][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.618913][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.721261][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.736801][ T9070] 8021q: adding VLAN 0 to HW filter on device team0
[  201.746050][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.748293][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.776160][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.778956][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.802201][ T9070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.870194][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.887499][ T5854] Bluetooth: hci1: command tx timeout
[  201.927320][ T9054] veth0_vlan: entered promiscuous mode
[  201.937000][ T9054] veth1_vlan: entered promiscuous mode
[  201.952422][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.980202][ T9054] veth0_macvtap: entered promiscuous mode
[  201.989744][ T9054] veth1_macvtap: entered promiscuous mode
[  202.010830][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.022741][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.037056][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.040394][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.052941][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.056355][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.151825][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.159416][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.198758][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.202345][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.208562][ T9070] veth0_vlan: entered promiscuous mode
[  202.223096][ T9070] veth1_vlan: entered promiscuous mode
[  202.270991][ T9070] veth0_macvtap: entered promiscuous mode
[  202.280518][ T9070] veth1_macvtap: entered promiscuous mode
[  202.306469][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.320786][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.332993][ T6292] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.345601][ T6292] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.358481][ T6292] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.362637][ T6292] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.470604][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.475744][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.501341][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.506794][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.770492][ T5854] Bluetooth: hci0: command tx timeout
[  202.784723][ T9172] netlink: 'syz.8.1271': attribute type 29 has an invalid length.
[  202.795777][ T9174] net_ratelimit: 163 callbacks suppressed
[  202.795807][ T9174] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  202.808057][ T9172] netlink: 'syz.8.1271': attribute type 29 has an invalid length.
[  203.002316][ T9182] macvtap0: refused to change device tx_queue_len
[  203.167171][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1280'.
[  203.284130][ T9203] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1284'.
[  203.966661][ T5854] Bluetooth: hci1: command tx timeout
[  204.335679][ T9258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.451152][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1312'.
[  204.467651][ T9261] netlink: 'syz.8.1312': attribute type 10 has an invalid length.
[  204.470584][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1312'.
[  204.846918][ T5854] Bluetooth: hci0: command tx timeout
[  205.351063][ T9261] dummy0: entered promiscuous mode
[  205.355595][ T9261] bridge0: port 3(dummy0) entered blocking state
[  205.358077][ T9261] bridge0: port 3(dummy0) entered disabled state
[  205.360625][ T9261] dummy0: entered allmulticast mode
[  205.365874][ T9261] bridge0: port 3(dummy0) entered blocking state
[  205.368255][ T9261] bridge0: port 3(dummy0) entered forwarding state
[  205.625887][ T9280] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  206.043489][ T5854] Bluetooth: hci1: command tx timeout
[  206.112913][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1334'.
[  206.330558][ T9329] netlink: 'syz.0.1344': attribute type 3 has an invalid length.
[  206.332989][ T9329] netlink: 'syz.0.1344': attribute type 1 has an invalid length.
[  206.338542][ T9329] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1344'.
[  206.834412][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1359'.
[  206.838002][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1359'.
[  206.972870][ T9357] lo speed is unknown, defaulting to 1000
[  206.998657][ T9357] lo speed is unknown, defaulting to 1000
[  208.386760][ T9357] lo speed is unknown, defaulting to 1000
[  208.407804][ T9357] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  208.429813][ T9357] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  208.430363][ T9376] option changes via remount are deprecated (pid=9375 comm=syz.0.1364)
[  208.508108][ T9357] lo speed is unknown, defaulting to 1000
[  208.512152][ T9357] lo speed is unknown, defaulting to 1000
[  208.532178][ T9357] lo speed is unknown, defaulting to 1000
[  208.595925][ T9384] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.1368'.
[  208.636516][ T9390] netlink: 15999 bytes leftover after parsing attributes in process `syz.8.1372'.
[  208.651213][ T9390] netlink: 'syz.8.1372': attribute type 4 has an invalid length.
[  208.782041][ T9390] netlink: 'syz.8.1372': attribute type 10 has an invalid length.
[  208.857310][ T9390] bridge0: port 3(dummy0) entered disabled state
[  208.864687][ T9390] dummy0: left allmulticast mode
[  208.866663][ T9390] dummy0: left promiscuous mode
[  208.869013][ T9390] bridge0: port 3(dummy0) entered disabled state
[  208.896979][ T9404] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1377'.
[  208.923944][ T9390] team0: Port device dummy0 added
[  209.066239][ T9414] C: renamed from team_slave_0 (while UP)
[  209.069387][ T9414] netlink: 'syz.9.1382': attribute type 1 has an invalid length.
[  209.071829][ T9414] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1382'.
[  209.121967][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1384'.
[  209.224413][ T9424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.415741][ T9434] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1392'.
[  209.427896][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'.
[  209.443577][ T9437] : renamed from hsr0 (while UP)
[  209.468603][ T9439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.471559][ T9439] IPv6: NLM_F_CREATE should be set when creating new route
[  209.474706][ T9439] IPv6: NLM_F_CREATE should be set when creating new route
[  209.477723][ T9439] IPv6: NLM_F_CREATE should be set when creating new route
[  209.620471][ T9449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.713286][ T9457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.972902][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1415'.
[  210.226311][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1424'.
[  210.341636][ T9506] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1427'.
[  210.502071][ T9517] netlink: 'syz.9.1432': attribute type 3 has an invalid length.
[  210.505805][ T9517] netlink: 'syz.9.1432': attribute type 1 has an invalid length.
[  210.509525][ T9517] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  210.980865][ T9526] netlink: 'syz.8.1436': attribute type 2 has an invalid length.
[  211.576554][ T9554] netlink: 'syz.8.1446': attribute type 20 has an invalid length.
[  211.583434][ T9554] IPv6: NLM_F_CREATE should be specified when creating new route
[  212.677770][ T9600] netlink: 'syz.8.1465': attribute type 6 has an invalid length.
[  213.639180][ T9621] netlink: 'syz.8.1475': attribute type 21 has an invalid length.
[  213.641959][ T9621] netlink: 'syz.8.1475': attribute type 1 has an invalid length.
[  213.747641][ T5854] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  213.748371][ T9628] @: renamed from bond_slave_0 (while UP)
[  214.161691][ T9657] __nla_validate_parse: 8 callbacks suppressed
[  214.161709][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1492'.
[  214.185918][ T9661] netlink: 'syz.0.1494': attribute type 6 has an invalid length.
[  214.188429][ T9661] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1494'.
[  215.100367][ T5854] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  215.104394][ T9690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.216838][ T9701] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1514'.
[  216.787624][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1516'.
[  216.806086][ T9707] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  216.809102][ T9707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.994304][ T9729] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1524'.
[  217.000149][ T9726] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1524'.
[  217.012622][ T9729] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1524'.
[  217.061222][ T9735] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1528'.
[  217.490093][ T9765] netlink: 'syz.9.1543': attribute type 10 has an invalid length.
[  217.545263][ T9769] netlink: 'syz.9.1545': attribute type 3 has an invalid length.
[  217.549848][ T9769] netlink: 201336 bytes leftover after parsing attributes in process `syz.9.1545'.
[  217.559167][ T9771] netlink: 'syz.8.1546': attribute type 1 has an invalid length.
[  217.827618][ T5854] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4
[  218.565975][ T9787] netlink: 'syz.9.1554': attribute type 1 has an invalid length.
[  220.376988][ T9803] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1560'.
[  221.193714][ T9824] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode
[  221.202367][ T9824] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  222.177295][ T9869] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1589'.
[  222.180755][ T9869] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1589'.
[  222.398441][ T9882] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  222.506703][ T9886] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.1595'.
[  222.510414][ T9886] netlink: 61827 bytes leftover after parsing attributes in process `syz.0.1595'.
[  222.651414][ T9893] tap0: tun_chr_ioctl cmd 21731
[  222.655994][ T9893] tap0: tun_chr_ioctl cmd 2147767521
[  223.067207][ T9915] lo speed is unknown, defaulting to 1000
[  223.079235][ T9918] netlink: 'syz.8.1610': attribute type 15 has an invalid length.
[  223.090980][ T9921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1611'.
[  223.196214][ T9926] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  224.849063][T10002] netlink: 'syz.0.1645': attribute type 21 has an invalid length.
[  224.852466][T10002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1645'.
[  225.219895][T10016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.225743][ T2326] lo speed is unknown, defaulting to 1000
[  225.347917][T10025] netlink: 'syz.8.1655': attribute type 39 has an invalid length.
[  225.575716][T10040] netlink: 'syz.0.1661': attribute type 1 has an invalid length.
[  225.578276][T10040] netlink: 'syz.0.1661': attribute type 4 has an invalid length.
[  225.580748][T10040] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1661'.
[  225.701022][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'.
[  225.887416][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'.
[  225.985015][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1677'.
[  225.989207][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1677'.
[  225.999019][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1677'.
[  226.291386][T10086] netlink: 'syz.0.1683': attribute type 4 has an invalid length.
[  226.295699][T10086] netlink: 'syz.0.1683': attribute type 11 has an invalid length.
[  226.298672][T10086] netlink: 'syz.0.1683': attribute type 1 has an invalid length.
[  226.301641][T10086] netlink: 'syz.0.1683': attribute type 6 has an invalid length.
[  226.305726][T10086] netlink: 197860 bytes leftover after parsing attributes in process `syz.0.1683'.
[  226.391604][T10088] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  226.575587][T10092] netlink: 'syz.9.1685': attribute type 10 has an invalid length.
[  226.664646][T10092] team0: Device ipvlan1 failed to register rx_handler
[  229.087410][T10118] netlink: 'syz.9.1694': attribute type 10 has an invalid length.
[  229.099329][T10118] veth1_vlan: entered allmulticast mode
[  229.108813][T10118] team0: Device veth1_vlan failed to register rx_handler
[  231.040947][   T33] audit: type=1107 audit(1757503381.982:3): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':8=5MHCIT2x'!{x5	E&'
[  236.354599][T10147] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1707'.
[  236.357992][T10147] netlink: 35 bytes leftover after parsing attributes in process `syz.8.1707'.
[  236.360899][T10147] netlink: 35 bytes leftover after parsing attributes in process `syz.8.1707'.
[  236.690927][T10177] netlink: 'syz.9.1722': attribute type 9 has an invalid length.
[  236.702864][T10177] netlink: 211924 bytes leftover after parsing attributes in process `syz.9.1722'.
[  236.792321][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1726'.
[  236.922685][T10185] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  236.939888][T10193] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1727'.
[  236.952725][T10191] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1727'.
[  236.958328][T10193] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1727'.
[  236.991092][T10197] netlink: 64967 bytes leftover after parsing attributes in process `syz.8.1731'.
[  237.064032][T10204] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1734'.
[  237.126396][T10210] netlink: 'syz.0.1737': attribute type 3 has an invalid length.
[  238.009887][T10226] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  238.013114][T10226] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.640070][T10290] netlink: 'syz.8.1769': attribute type 10 has an invalid length.
[  239.672811][T10290] team0: Device ipvlan1 failed to register rx_handler
[  240.116181][T10320] netlink: 'syz.0.1782': attribute type 10 has an invalid length.
[  240.127569][T10324] netlink: 'syz.8.1785': attribute type 39 has an invalid length.
[  240.168907][T10320] team0: Device ipvlan1 failed to register rx_handler
[  240.194867][T10331] netlink: 'syz.8.1787': attribute type 1 has an invalid length.
[  240.359234][T10343] netdevsim netdevsim9: Firmware load for '/../file0' refused, path contains '..' component
[  240.823415][T10363] syz.0.1801 (10363) used obsolete PPPIOCDETACH ioctl
[  240.978989][T10352] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  241.358686][T10369] siw: device registration error -23
[  241.643564][ T5854] Bluetooth: hci0: Opcode 0x206a failed: -110
[  241.644407][   T54] Bluetooth: hci0: command 0x206a tx timeout
[  241.675598][T10387] netlink: 'syz.9.1811': attribute type 1 has an invalid length.
[  241.710385][T10386] __nla_validate_parse: 8 callbacks suppressed
[  241.710402][T10386] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1812'.
[  241.856450][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1815'.
[  241.967708][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  242.012577][T10405] netlink: 1284 bytes leftover after parsing attributes in process `syz.9.1821'.
[  242.111991][T10409] netlink: 'syz.0.1823': attribute type 21 has an invalid length.
[  242.379136][T10421] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1829'.
[  242.552102][T10429] netlink: 'syz.0.1832': attribute type 21 has an invalid length.
[  242.604922][T10434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.891157][T10448] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1841'.
[  243.040027][   T54] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  243.265823][T10466] netlink: 'syz.9.1849': attribute type 10 has an invalid length.
[  243.849861][T10466] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  244.179117][T10489] syzkaller0: entered promiscuous mode
[  244.180964][T10489] syzkaller0: entered allmulticast mode
[  244.190294][T10491] netlink: 209588 bytes leftover after parsing attributes in process `syz.8.1861'.
[  244.287040][T10495] netlink: 'syz.9.1863': attribute type 1 has an invalid length.
[  246.132101][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1870'.
[  246.830758][T10513] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1871'.
[  246.834609][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1871'.
[  246.843853][T10515] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1871'.
[  246.889726][T10519] netlink: 'syz.9.1872': attribute type 3 has an invalid length.
[  246.893003][T10519] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.1872'.
[  246.951818][T10521] xt_HMARK: proto mask must be zero with L3 mode
[  247.034829][T10527] netlink: 'syz.9.1876': attribute type 1 has an invalid length.
[  247.172223][   T54] Bluetooth: hci0: unexpected event for opcode 0x0000
[  247.456950][T10553] netlink: 'syz.9.1888': attribute type 1 has an invalid length.
[  247.808954][T10586] openvswitch: netlink: Missing valid actions attribute.
[  247.811657][T10586] openvswitch: netlink: Actions may not be safe on all matching packets
[  248.064170][T10608] netlink: 348 bytes leftover after parsing attributes in process `syz.9.1914'.
[  248.107940][T10608] siw: device registration error -23
[  248.137667][T10611] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.144191][T10611] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.155670][T10611] bridge0: entered allmulticast mode
[  248.193268][T10614] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.195565][T10614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.197979][T10614] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.200200][T10614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.203726][T10614] bridge0: entered promiscuous mode
[  248.600833][T10630] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1922'.
[  248.706540][   T54] Bluetooth: hci1: Malformed HCI Event: 0x22
[  248.962846][T10640] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  250.252349][T10634] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  250.309614][T10644] netlink: 763 bytes leftover after parsing attributes in process `syz.9.1928'.
[  250.376031][T10646] netlink: 'syz.0.1929': attribute type 3 has an invalid length.
[  250.379528][T10646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1929'.
[  250.812518][T10683] siw: device registration error -23
[  251.215582][   T54] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  251.244100][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  251.247406][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  251.250404][   T54] Bluetooth: hci0: hardware error 0x00
[  251.342765][T10712] sctp: [Deprecated]: syz.0.1958 (pid 10712) Use of struct sctp_assoc_value in delayed_ack socket option.
[  251.342765][T10712] Use struct sctp_sack_info instead
[  251.478142][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1966'.
[  251.481626][T10730] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  251.484847][T10730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.739717][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1973'.
[  251.911215][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1988'.
[  251.915122][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1988'.
[  251.920816][T10774] netlink: 'syz.0.1988': attribute type 4 has an invalid length.
[  252.022184][T10785] netlink: 'syz.8.1994': attribute type 12 has an invalid length.
[  252.028234][T10785] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1994'.
[  252.137389][T10792] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1997'.
[  252.621363][T10826] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2013'.
[  252.627762][T10826] netlink: zone id is out of range
[  252.629617][T10826] netlink: zone id is out of range
[  252.631438][T10826] netlink: zone id is out of range
[  252.634332][T10828] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2014'.
[  252.634928][T10826] netlink: zone id is out of range
[  252.639892][T10826] netlink: zone id is out of range
[  252.641804][T10826] netlink: zone id is out of range
[  252.687264][T10831] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2015'.
[  253.333810][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  253.646441][T10857] netlink: 'syz.8.2028': attribute type 1 has an invalid length.
[  253.653369][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2028'.
[  253.798105][T10862] netlink: 'syz.9.2030': attribute type 39 has an invalid length.
[  255.421009][T10945] netlink: 'syz.9.2068': attribute type 22 has an invalid length.
[  255.423763][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2068'.
[  255.450197][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.451019][T10947] netlink: 'syz.9.2069': attribute type 22 has an invalid length.
[  255.454133][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.459537][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2069'.
[  255.964576][T10982] netlink: 'syz.9.2086': attribute type 10 has an invalid length.
[  256.150680][T10993] tc_dump_action: action bad kind
[  256.277526][T10997] net_ratelimit: 80 callbacks suppressed
[  256.277594][T10997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.358518][T11007] : entered promiscuous mode
[  258.372486][T11067] __nla_validate_parse: 8 callbacks suppressed
[  258.372503][T11067] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2123'.
[  258.642046][T11082] netlink: 'syz.8.2130': attribute type 7 has an invalid length.
[  258.881357][T11099] syzkaller0: entered promiscuous mode
[  258.884349][T11099] syzkaller0: entered allmulticast mode
[  258.890387][T11097] netlink: 'syz.9.2137': attribute type 29 has an invalid length.
[  258.978800][T11106] netlink: 'syz.9.2141': attribute type 10 has an invalid length.
[  259.084535][T11108] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2142'.
[  261.145321][T11161] option changes via remount are deprecated (pid=11160 comm=syz.9.2164)
[  261.617906][T11163] syzkaller0: entered promiscuous mode
[  261.620429][T11163] syzkaller0: entered allmulticast mode
[  263.146493][T11170] netlink: 'syz.0.2168': attribute type 1 has an invalid length.
[  263.246049][T11184] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2174'.
[  263.251702][T11184] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  263.529160][T11195] delete_channel: no stack
[  263.739626][T11211] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  263.824569][T11219] netlink: 'syz.8.2191': attribute type 2 has an invalid length.
[  264.409329][T11242] netlink: 'syz.0.2200': attribute type 11 has an invalid length.
[  264.507878][T11246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2202'.
[  264.512959][T11246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2202'.
[  264.519891][T11246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2202'.
[  264.710695][T11256] netlink: 'syz.9.2207': attribute type 3 has an invalid length.
[  264.714608][T11256] netlink: 'syz.9.2207': attribute type 1 has an invalid length.
[  264.718080][T11256] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.2207'.
[  264.723266][T11258] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2208'.
[  264.979295][T11273] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2215'.
[  268.069823][T11302] netlink: 13 bytes leftover after parsing attributes in process `syz.9.2228'.
[  268.555772][T11314] IPv6: Can't replace route, no match found
[  271.298983][T11319] netlink: 'syz.8.2233': attribute type 10 has an invalid length.
[  271.309983][T11319] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  271.784764][T11328] netlink: 'syz.8.2237': attribute type 1 has an invalid length.
[  273.086118][T11368] openvswitch: netlink: IP tunnel dst address not specified
[  273.467342][T11395] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2267'.
[  273.481093][T11388] netlink: 124 bytes leftover after parsing attributes in process `syz.9.2263'.
[  273.484430][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2263'.
[  273.597597][T11403] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2271'.
[  273.645847][T11404] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2269'.
[  274.866715][T11441] netlink: 'syz.8.2289': attribute type 25 has an invalid length.
[  274.877568][T11441] netlink: 'syz.8.2289': attribute type 16 has an invalid length.
[  274.881126][T11441] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2289'.
[  274.899327][T11441] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.017692][T11449] netlink: 'syz.0.2293': attribute type 2 has an invalid length.
[  275.288239][T11463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2300'.
[  275.417933][T11465] netlink: 'syz.0.2301': attribute type 1 has an invalid length.
[  275.421127][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'.
[  275.509592][T11469] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2303'.
[  275.693764][T11476] tmpfs: Bad value for 'mode'
[  275.811051][T11488] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  275.998556][T11503] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2319'.
[  276.557527][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  278.395488][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.399183][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.402655][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.406170][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.409711][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.413447][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.417020][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.420576][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.424265][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.427796][T11564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  278.906077][T11580] __nla_validate_parse: 3 callbacks suppressed
[  278.906088][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2355'.
[  278.974311][T11584] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2357'.
[  279.119276][T11594] netlink: 'syz.0.2362': attribute type 10 has an invalid length.
[  279.121725][T11594] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2362'.
[  282.312749][T11686] netlink: 56429 bytes leftover after parsing attributes in process `syz.8.2396'.
[  283.847516][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.853305][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.856875][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.860226][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.863610][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  284.195827][T11721] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2409'.
[  284.624865][T11709] chnl_net:caif_netlink_parms(): no params data found
[  284.810435][T11737] net_ratelimit: 3319 callbacks suppressed
[  284.810449][T11737] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  284.919279][T11709] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.935640][T11709] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.938463][T11709] bridge_slave_0: entered allmulticast mode
[  284.951543][T11709] bridge_slave_0: entered promiscuous mode
[  284.964406][T11709] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.968184][T11709] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.971262][T11709] bridge_slave_1: entered allmulticast mode
[  284.977127][T11709] bridge_slave_1: entered promiscuous mode
[  285.072072][T11709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.090971][T11709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.147805][T11709] team0: Port device team_slave_0 added
[  285.151411][T11709] team0: Port device team_slave_1 added
[  285.227807][T11709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.230561][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.256833][T11709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.267937][T11709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.270599][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.285934][T11709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.351193][T11709] hsr_slave_0: entered promiscuous mode
[  285.358674][T11709] hsr_slave_1: entered promiscuous mode
[  285.381240][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2420'.
[  285.488162][T11756] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2422'.
[  285.498417][T11756] netlink: 'syz.9.2422': attribute type 2 has an invalid length.
[  285.502032][T11756] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2422'.
[  285.535698][T11756] netlink: 'syz.9.2422': attribute type 2 has an invalid length.
[  285.539180][T11756] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2422'.
[  285.585631][T11709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.649862][T11709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.719623][T11709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.811295][T11709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.833066][T11776] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2433'.
[  285.901913][ T5854] Bluetooth: hci0: command tx timeout
[  285.994813][T11709] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  286.001241][T11709] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  286.009543][T11709] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  286.025242][T11709] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  286.031704][T11786] netlink: 'syz.9.2438': attribute type 21 has an invalid length.
[  286.059129][T11789] netlink: 'syz.9.2439': attribute type 32 has an invalid length.
[  286.101650][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2440'.
[  286.260313][T11709] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.275045][T11709] 8021q: adding VLAN 0 to HW filter on device team0
[  286.282895][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.286039][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.297243][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.300305][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.485579][T11709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.520516][T11709] veth0_vlan: entered promiscuous mode
[  286.531472][T11709] veth1_vlan: entered promiscuous mode
[  286.558664][T11709] veth0_macvtap: entered promiscuous mode
[  286.564654][T11709] veth1_macvtap: entered promiscuous mode
[  286.602705][T11709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.623048][T11709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.632569][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.638467][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.641474][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.656030][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.193869][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.197008][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.222458][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.226628][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.399336][T11827] netlink: 'syz.9.2450': attribute type 3 has an invalid length.
[  287.585615][T11843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.886263][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2467'.
[  287.965567][ T5854] Bluetooth: hci0: command tx timeout
[  287.972982][T11869] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2469'.
[  287.978684][T11869] netlink: zone id is out of range
[  287.980671][T11869] netlink: zone id is out of range
[  287.982707][T11869] netlink: get zone limit has 8 unknown bytes
[  288.051361][T11871] sit0: entered promiscuous mode
[  288.128658][T11877] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.2474'.
[  289.251509][T11916] __nla_validate_parse: 1 callbacks suppressed
[  289.251525][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2491'.
[  289.257931][T11916] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  289.272591][T11908] syzkaller0: entered promiscuous mode
[  289.275213][T11908] syzkaller0: entered allmulticast mode
[  289.657254][ T5854] Bluetooth: hci0: Malformed LE Event: 0x0d
[  290.043740][ T5854] Bluetooth: hci0: command tx timeout
[  290.190209][ T5854] Bluetooth: hci0: Dropping invalid advertising data
[  290.192942][ T5854] Bluetooth: hci0: Malformed LE Event: 0x02
[  290.230807][T11966] netlink: 'syz.8.2515': attribute type 1 has an invalid length.
[  291.999960][T12005] netlink: 'syz.9.2534': attribute type 33 has an invalid length.
[  292.003003][T12005] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2534'.
[  292.251492][T12024] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2542'.
[  292.256864][T12024] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2542'.
[  292.286083][ T5854] Bluetooth: hci0: command tx timeout
[  298.593248][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  300.158517][T12038] netlink: 15999 bytes leftover after parsing attributes in process `syz.8.2547'.
[  300.196451][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'.
[  300.267944][T12052] netlink: 'syz.0.2553': attribute type 22 has an invalid length.
[  300.271062][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2553'.
[  300.358437][T12050] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.2548'.
[  300.526419][T12060] netlink: 'syz.0.2556': attribute type 16 has an invalid length.
[  300.533797][T12060] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2556'.
[  300.607886][T12062] netlink: 809 bytes leftover after parsing attributes in process `syz.0.2556'.
[  300.611119][T12062] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2556'.
[  300.645769][T12062] netlink: 809 bytes leftover after parsing attributes in process `syz.0.2556'.
[  301.586166][ T5854] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[  301.660885][T12087] veth1_macvtap: left promiscuous mode
[  302.590779][T12104] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.603044][T12104] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  302.660789][T12105] netlink: 'syz.8.2572': attribute type 39 has an invalid length.
[  302.939728][T12109] netlink: 763 bytes leftover after parsing attributes in process `syz.9.2574'.
[  303.169087][T12115] netlink: 'syz.9.2577': attribute type 21 has an invalid length.
[  303.172703][T12115] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2577'.
[  305.198655][T12189] __nla_validate_parse: 6 callbacks suppressed
[  305.198712][T12189] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2611'.
[  305.303947][T12189] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.522351][T12189] bridge_slave_0 (unregistering): left allmulticast mode
[  305.525300][T12189] bridge_slave_0 (unregistering): left promiscuous mode
[  305.528268][T12189] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.668553][T12204] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2618'.
[  305.974339][T12226] netlink: 'syz.0.2627': attribute type 1 has an invalid length.
[  306.296342][T12242] syzkaller0: entered promiscuous mode
[  306.298211][T12242] syzkaller0: entered allmulticast mode
[  306.930247][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2638'.
[  308.978893][T12279] netlink: 'syz.0.2646': attribute type 12 has an invalid length.
[  308.981907][T12279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2646'.
[  309.045673][T12283] bpf: Bad value for 'gid'
[  309.125606][T12287] netlink: 'syz.8.2650': attribute type 29 has an invalid length.
[  309.711290][T12322] mac80211_hwsim hwsim20 .3c: renamed from wlan1 (while UP)
[  311.171296][T12396] netlink: 'syz.9.2698': attribute type 1 has an invalid length.
[  311.886913][T12434] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2714'.
[  311.892524][T12434] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2714'.
[  311.897793][T12434] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2714'.
[  312.081740][T12442] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2718'.
[  312.155421][T12446] netlink: 742 bytes leftover after parsing attributes in process `syz.9.2720'.
[  312.186164][T12447] delete_channel: no stack
[  312.374400][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2724'.
[  312.461819][T12463] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2728'.
[  312.489354][T12463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2728'.
[  312.565734][T12468] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2729'.
[  312.631602][T12471] netlink: 'syz.9.2731': attribute type 1 has an invalid length.
[  312.636517][T12471] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2731'.
[  313.485081][T12529] netlink: 'syz.0.2756': attribute type 16 has an invalid length.
[  313.757676][T12533] netlink: 'syz.8.2758': attribute type 2 has an invalid length.
[  316.410330][    C1] ==================================================================
[  316.412782][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  316.415322][    C1] Write of size 8 at addr ffff88811037ed30 by task syz.9.2750/12516
[  316.418842][    C1] 
[  316.419924][    C1] CPU: 1 UID: 0 PID: 12516 Comm: syz.9.2750 Not tainted syzkaller #0 PREEMPT(full) 
[  316.419936][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  316.419943][    C1] Call Trace:
[  316.419948][    C1]  <IRQ>
[  316.419953][    C1]  dump_stack_lvl+0x189/0x250
[  316.419966][    C1]  ? rcu_is_watching+0x15/0xb0
[  316.419974][    C1]  ? __kasan_check_byte+0x12/0x40
[  316.419986][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.419995][    C1]  ? rcu_is_watching+0x15/0xb0
[  316.420002][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  316.420012][    C1]  ? lock_release+0x4b/0x3e0
[  316.420026][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  316.420035][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  316.420045][    C1]  print_report+0xca/0x240
[  316.420053][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  316.420062][    C1]  kasan_report+0x118/0x150
[  316.420073][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  316.420084][    C1]  __xfrm_state_delete+0x696/0xca0
[  316.420097][    C1]  xfrm_timer_handler+0x18f/0xa00
[  316.420109][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  316.420118][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  316.420127][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  316.420135][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  316.420144][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  316.420153][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  316.420161][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  316.420176][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  316.420187][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  316.420197][    C1]  handle_softirqs+0x286/0x870
[  316.420207][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  316.420217][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  316.420226][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  316.420237][    C1]  __irq_exit_rcu+0xca/0x1f0
[  316.420245][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  316.420256][    C1]  irq_exit_rcu+0x9/0x30
[  316.420262][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  316.420291][    C1]  </IRQ>
[  316.420294][    C1]  <TASK>
[  316.420298][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  316.420308][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  316.420318][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 ab 38 14 f6 e8 d6 94 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  316.420325][    C1] RSP: 0000:ffffc9000275fc00 EFLAGS: 00000286
[  316.420333][    C1] RAX: eb05068ee94c6d00 RBX: 0000000000000000 RCX: eb05068ee94c6d00
[  316.420339][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b9aad RDI: 0000000000000001
[  316.420344][    C1] RBP: ffffc9000275fcb0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  316.420350][    C1] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000000
[  316.420355][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920004ebf80
[  316.420368][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  316.420375][    C1]  ? perf_trace_lock+0xec/0x3b0
[  316.420386][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  316.420395][    C1]  irqentry_exit+0x6f/0x90
[  316.420403][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  316.420411][    C1] RIP: 0010:__sw_hweight64+0x1/0x70
[  316.420421][    C1] Code: d0 25 0f 0f 0f 0f 69 c0 01 01 01 01 c1 e8 18 5a c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 57 <52> 48 89 fa 48 b8 55 55 55 55 55 55 55 55 48 d1 ea 48 21 d0 48 ba
[  316.420428][    C1] RSP: 0000:ffffc9000275fd70 EFLAGS: 00000246
[  316.420434][    C1] RAX: 1ffff11020d5429a RBX: ffff888106aa14d0 RCX: dffffc0000000000
[  316.420440][    C1] RDX: 0000000000000003 RSI: ffffffff8dba8ffd RDI: 0000000000000003
[  316.420444][    C1] RBP: ffffc9000275fe50 R08: 0000000000000000 R09: ffffffff8191c8ef
[  316.420449][    C1] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000002
[  316.420455][    C1] R13: ffff888106aa0b88 R14: ffff88802f51ebd4 R15: ffffe8ffffc23db0
[  316.420463][    C1]  ? task_mm_cid_work+0x30f/0x760
[  316.420475][    C1]  task_mm_cid_work+0x5c4/0x760
[  316.420486][    C1]  ? __pfx_task_mm_cid_work+0x10/0x10
[  316.420495][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  316.420502][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.420511][    C1]  task_work_run+0x1d4/0x260
[  316.420523][    C1]  ? __pfx_task_work_run+0x10/0x10
[  316.420537][    C1]  resume_user_mode_work+0x5e/0x80
[  316.420549][    C1]  irqentry_exit_to_user_mode+0x90/0x120
[  316.420558][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  316.420565][    C1] RIP: 0033:0x7f9a4fc54397
[  316.420574][    C1] Code: 83 c4 08 c3 0f 1f 80 00 00 00 00 48 83 ec 08 48 89 f2 48 63 ff 4c 89 d6 41 51 31 c0 4d 89 c1 49 89 c8 4c 89 d9 e8 f9 a7 13 00 <5a> 59 48 83 c4 08 c3 66 90 41 57 41 56 41 55 49 89 f5 41 54 49 29
[  316.420580][    C1] RSP: 002b:00007f9a50b52040 EFLAGS: 00000203
[  316.420586][    C1] RAX: 0000000000000005 RBX: 00007f9a4ffd5fa0 RCX: 00007f9a4fd8eba9
[  316.420591][    C1] RDX: affffff7ffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  316.420597][    C1] RBP: 00007f9a4fe11e19 R08: 0000000000000000 R09: 0000000000000000
[  316.420601][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  316.420606][    C1] R13: 00007f9a4ffd6038 R14: 00007f9a4ffd5fa0 R15: 00007ffcae0894c8
[  316.420618][    C1]  </TASK>
[  316.420621][    C1] 
[  316.586650][    C1] Allocated by task 11072:
[  316.588054][    C1]  kasan_save_track+0x3e/0x80
[  316.589562][    C1]  __kasan_slab_alloc+0x6c/0x80
[  316.591085][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  316.592760][    C1]  xfrm_state_alloc+0x24/0x2f0
[  316.594413][    C1]  __find_acq_core+0x8a7/0x1c00
[  316.596159][    C1]  xfrm_find_acq+0x78/0xa0
[  316.597947][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  316.599632][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  316.601177][    C1]  netlink_rcv_skb+0x208/0x470
[  316.602686][    C1]  xfrm_netlink_rcv+0x79/0x90
[  316.604156][    C1]  netlink_unicast+0x82f/0x9e0
[  316.605692][    C1]  netlink_sendmsg+0x805/0xb30
[  316.607167][    C1]  __sock_sendmsg+0x21c/0x270
[  316.608644][    C1]  ____sys_sendmsg+0x505/0x830
[  316.610146][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  316.611723][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  316.613729][    C1]  do_syscall_64+0xfa/0x3b0
[  316.615293][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.617661][    C1] 
[  316.618462][    C1] Freed by task 47:
[  316.619641][    C1]  kasan_save_track+0x3e/0x80
[  316.621128][    C1]  kasan_save_free_info+0x46/0x50
[  316.622903][    C1]  __kasan_slab_free+0x5b/0x80
[  316.624341][    C1]  kmem_cache_free+0x18f/0x400
[  316.626028][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  316.627638][    C1]  process_scheduled_works+0xae1/0x17b0
[  316.629367][    C1]  worker_thread+0x8a0/0xda0
[  316.631187][    C1]  kthread+0x711/0x8a0
[  316.632865][    C1]  ret_from_fork+0x3fc/0x770
[  316.634712][    C1]  ret_from_fork_asm+0x1a/0x30
[  316.636465][    C1] 
[  316.637195][    C1] The buggy address belongs to the object at ffff88811037ed00
[  316.637195][    C1]  which belongs to the cache xfrm_state of size 928
[  316.642026][    C1] The buggy address is located 48 bytes inside of
[  316.642026][    C1]  freed 928-byte region [ffff88811037ed00, ffff88811037f0a0)
[  316.646869][    C1] 
[  316.647883][    C1] The buggy address belongs to the physical page:
[  316.650269][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811037df80 pfn:0x11037c
[  316.653490][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  316.656446][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  316.659036][    C1] page_type: f5(slab)
[  316.660297][    C1] raw: 057ff00000000040 ffff88801af67640 dead000000000122 0000000000000000
[  316.663041][    C1] raw: ffff88811037df80 00000000800e000c 00000000f5000000 0000000000000000
[  316.665693][    C1] head: 057ff00000000040 ffff88801af67640 dead000000000122 0000000000000000
[  316.668655][    C1] head: ffff88811037df80 00000000800e000c 00000000f5000000 0000000000000000
[  316.671458][    C1] head: 057ff00000000002 ffffea000440df01 00000000ffffffff 00000000ffffffff
[  316.674327][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  316.676986][    C1] page dumped because: kasan: bad access detected
[  316.678996][    C1] page_owner tracks the page as allocated
[  316.680774][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6400, tgid 6399 (syz.5.151), ts 107424319460, free_ts 107421246591
[  316.686868][    C1]  post_alloc_hook+0x240/0x2a0
[  316.688842][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  316.691082][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  316.693467][    C1]  alloc_pages_mpol+0x232/0x4a0
[  316.695476][    C1]  allocate_slab+0x8a/0x370
[  316.697350][    C1]  ___slab_alloc+0xbeb/0x1420
[  316.699274][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  316.701486][    C1]  xfrm_state_alloc+0x24/0x2f0
[  316.703441][    C1]  pfkey_add+0x6e4/0x2e00
[  316.705186][    C1]  pfkey_sendmsg+0xbfe/0x1090
[  316.706844][    C1]  __sock_sendmsg+0x21c/0x270
[  316.708335][    C1]  ____sys_sendmsg+0x505/0x830
[  316.709825][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  316.711345][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  316.712904][    C1]  do_syscall_64+0xfa/0x3b0
[  316.714289][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.716319][    C1] page last free pid 6267 tgid 6267 stack trace:
[  316.718346][    C1]  __free_frozen_pages+0xbc4/0xd30
[  316.720375][    C1]  __slab_free+0x303/0x3c0
[  316.722147][    C1]  qlist_free_all+0x97/0x140
[  316.723665][    C1]  kasan_quarantine_reduce+0x148/0x160
[  316.725362][    C1]  __kasan_slab_alloc+0x22/0x80
[  316.726881][    C1]  __kmalloc_noprof+0x224/0x4f0
[  316.728415][    C1]  tomoyo_realpath_from_path+0xe3/0x5d0
[  316.730130][    C1]  tomoyo_path_perm+0x213/0x4b0
[  316.731688][    C1]  security_inode_getattr+0x12f/0x330
[  316.733322][    C1]  vfs_fstatat+0xb1/0x170
[  316.734698][    C1]  __x64_sys_newfstatat+0x116/0x190
[  316.736328][    C1]  do_syscall_64+0xfa/0x3b0
[  316.737762][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.739613][    C1] 
[  316.740378][    C1] Memory state around the buggy address:
[  316.742238][    C1]  ffff88811037ec00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  316.744776][    C1]  ffff88811037ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  316.747655][    C1] >ffff88811037ed00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  316.750418][    C1]                                      ^
[  316.752303][    C1]  ffff88811037ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  316.755411][    C1]  ffff88811037ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  316.758165][    C1] ==================================================================
[  316.760805][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  316.763029][    C1] CPU: 1 UID: 0 PID: 12516 Comm: syz.9.2750 Not tainted syzkaller #0 PREEMPT(full) 
[  316.766000][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  316.769122][    C1] Call Trace:
[  316.770175][    C1]  <IRQ>
[  316.771089][    C1]  dump_stack_lvl+0x99/0x250
[  316.772559][    C1]  ? __asan_memcpy+0x40/0x70
[  316.774027][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.775788][    C1]  ? __pfx__printk+0x10/0x10
[  316.777457][    C1]  vpanic+0x281/0x750
[  316.779077][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  316.780903][    C1]  ? __pfx_vpanic+0x10/0x10
[  316.782343][    C1]  ? irqentry_exit+0x74/0x90
[  316.783778][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.785401][    C1]  panic+0xb9/0xc0
[  316.786638][    C1]  ? __pfx_panic+0x10/0x10
[  316.788104][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  316.789981][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  316.791936][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  316.793550][    C1]  check_panic_on_warn+0x89/0xb0
[  316.795088][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  316.796784][    C1]  end_report+0x78/0x160
[  316.798188][    C1]  kasan_report+0x129/0x150
[  316.800027][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  316.801950][    C1]  __xfrm_state_delete+0x696/0xca0
[  316.803750][    C1]  xfrm_timer_handler+0x18f/0xa00
[  316.805789][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  316.807787][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  316.809724][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  316.811636][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  316.813719][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  316.815520][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  316.817353][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  316.819042][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  316.820933][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  316.822575][    C1]  handle_softirqs+0x286/0x870
[  316.824211][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  316.825750][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  316.827511][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  316.829159][    C1]  __irq_exit_rcu+0xca/0x1f0
[  316.830635][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  316.832266][    C1]  irq_exit_rcu+0x9/0x30
[  316.833704][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  316.835470][    C1]  </IRQ>
[  316.836433][    C1]  <TASK>
[  316.837421][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  316.839636][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  316.841448][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 ab 38 14 f6 e8 d6 94 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  316.847463][    C1] RSP: 0000:ffffc9000275fc00 EFLAGS: 00000286
[  316.849430][    C1] RAX: eb05068ee94c6d00 RBX: 0000000000000000 RCX: eb05068ee94c6d00
[  316.851922][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b9aad RDI: 0000000000000001
[  316.854383][    C1] RBP: ffffc9000275fcb0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  316.856907][    C1] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000000
[  316.859899][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920004ebf80
[  316.862596][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  316.864449][    C1]  ? perf_trace_lock+0xec/0x3b0
[  316.866126][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  316.867947][    C1]  irqentry_exit+0x6f/0x90
[  316.869475][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  316.871615][    C1] RIP: 0010:__sw_hweight64+0x1/0x70
[  316.873622][    C1] Code: d0 25 0f 0f 0f 0f 69 c0 01 01 01 01 c1 e8 18 5a c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 57 <52> 48 89 fa 48 b8 55 55 55 55 55 55 55 55 48 d1 ea 48 21 d0 48 ba
[  316.880544][    C1] RSP: 0000:ffffc9000275fd70 EFLAGS: 00000246
[  316.882526][    C1] RAX: 1ffff11020d5429a RBX: ffff888106aa14d0 RCX: dffffc0000000000
[  316.885097][    C1] RDX: 0000000000000003 RSI: ffffffff8dba8ffd RDI: 0000000000000003
[  316.887745][    C1] RBP: ffffc9000275fe50 R08: 0000000000000000 R09: ffffffff8191c8ef
[  316.890318][    C1] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000002
[  316.892860][    C1] R13: ffff888106aa0b88 R14: ffff88802f51ebd4 R15: ffffe8ffffc23db0
[  316.895940][    C1]  ? task_mm_cid_work+0x30f/0x760
[  316.897625][    C1]  task_mm_cid_work+0x5c4/0x760
[  316.899301][    C1]  ? __pfx_task_mm_cid_work+0x10/0x10
[  316.901374][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  316.903443][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.905467][    C1]  task_work_run+0x1d4/0x260
[  316.907217][    C1]  ? __pfx_task_work_run+0x10/0x10
[  316.909132][    C1]  resume_user_mode_work+0x5e/0x80
[  316.910809][    C1]  irqentry_exit_to_user_mode+0x90/0x120
[  316.912591][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  316.914532][    C1] RIP: 0033:0x7f9a4fc54397
[  316.915948][    C1] Code: 83 c4 08 c3 0f 1f 80 00 00 00 00 48 83 ec 08 48 89 f2 48 63 ff 4c 89 d6 41 51 31 c0 4d 89 c1 49 89 c8 4c 89 d9 e8 f9 a7 13 00 <5a> 59 48 83 c4 08 c3 66 90 41 57 41 56 41 55 49 89 f5 41 54 49 29
[  316.923079][    C1] RSP: 002b:00007f9a50b52040 EFLAGS: 00000203
[  316.925114][    C1] RAX: 0000000000000005 RBX: 00007f9a4ffd5fa0 RCX: 00007f9a4fd8eba9
[  316.928126][    C1] RDX: affffff7ffffffff RSI: 0000000000000000 RDI: 0000200000000180
[  316.931034][    C1] RBP: 00007f9a4fe11e19 R08: 0000000000000000 R09: 0000000000000000
[  316.933757][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  316.936413][    C1] R13: 00007f9a4ffd6038 R14: 00007f9a4ffd5fa0 R15: 00007ffcae0894c8
[  316.939128][    C1]  </TASK>
[  316.940678][    C1] Kernel Offset: disabled
[  316.942023][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:24:27  Registers:
info registers vcpu 0

CPU#0
RAX=e22f343e80c46b00 RBX=ffffffff819683f8 RCX=e22f343e80c46b00 RDX=0000000000000001
RSI=ffffffff8d9b9aad RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb5370a1ce5 CR3=00000001229a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9a4fe12e53
XMM06=0000000000000000 00007f9a4fe12e4d XMM07=0000000000000000 00007f9a4fe12e61
XMM08=0000000000000000 00007f9a4fe12ee7 XMM09=0000000000000000 00007f9a4fe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888020a50237 R9 =1ffff1100414a046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018c6 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9a50b526c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c391f7b CR3=0000000038adc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9a4fe12e53
XMM06=0000000000000000 00007f9a4fe12e4d XMM07=0000000000000000 00007f9a4fe12e61
XMM08=0000000000000000 00007f9a4fe12ee7 XMM09=0000000000000000 00007f9a4fe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
