last executing test programs:

1m45.917996927s ago: executing program 0 (id=247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1m45.856311405s ago: executing program 0 (id=248):
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
close(0x4)

1m45.526425721s ago: executing program 0 (id=252):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000062012d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

1m45.526055571s ago: executing program 0 (id=253):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x401c, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdf4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb"], 0xfdef)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3fc185150304bb8e}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14}}, 0x90}}, 0x0)

1m45.430222127s ago: executing program 0 (id=258):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

1m45.312616606s ago: executing program 0 (id=261):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file\x00', 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c00028008000740000000"], 0x150}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x28000000}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

1m29.340419299s ago: executing program 32 (id=261):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file\x00', 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c00028008000740000000"], 0x150}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x28000000}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

1.707160934s ago: executing program 2 (id=1717):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000200)=@hci={0x1f, 0x1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x10, 0x1, 0x1}], 0x10}, 0x0)

1.706073869s ago: executing program 1 (id=1719):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffbffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x5000)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r5, 0x0, &(0x7f0000000b40)=""/31}, 0x20)
setsockopt$sock_attach_bpf(r3, 0x6, 0x5, &(0x7f0000000040)=r4, 0x4)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-net_prk'], 0x13)
sendmsg$kcm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f851030000005e040602000000000e0003000f00000002800000121f", 0x2e}], 0x1}, 0x4000000)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000064c1000000030006000000000002"], 0x50}}, 0x20008004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002400070dfeffffff00000000017c000004008e000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000)
sendmsg$kcm(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="99f2fbad0772033d81c1cedb38172e6322979b4ba0b2673e06d690bb1f99a7e8f6f4475fd894fe121436c0f6963fb5eeb315638af7f8ef51bc6a51e38538cccd58a90b5f5e4cf0e57ba65fb15dd9305d36c2a66d8d0646ffc40660d19172ce7a18f9f8e00273e286f1fa99b681d41a4767817aff160f52e438d318ae1aacded302c14e8cca9185108af0b95f0873e27e2d6dd0985ba3ebd8d583471a0833f1c52016d020fd07944c2e9c9af09d0162", 0xaf}, {&(0x7f0000000240)="2781b96415e05bbed62816e63befd5a69aec90dd15ebaa1db94648ddd13d65160647a9186ebeda6735ef8e4d447870d0f26f7c0c8819e68fecc99d5c772ee29d863f90493328d43657d8b2c516f7a893194c91590d56e7b510b2c843541776493073a9cd160cdff39940b5b53f2d36dd13ef2e97afe321b6798102a940ec4b39bed0d3fdb1d801d38c994a6b4330236788c7a158a78b736e64d72f5d320859d9cdb280bf8d671625427aaa522e5e2f0f5fa010df1523e490cc23baee071f6acd6c2889e218dde0c0ecb8f478fa175c7c309c09049ab263d6aa25dfd68da3bf4d0368c8cdb099046590", 0xe9}, {&(0x7f0000000340)="4618145473c5e3eb4b79073865c881f0f0c0579414c488acb854d4a1f8a4429d17ef0b8530d1da338aee9c70d4e32c657a94c28b2490ed6f93efb207c0b47c22cfa20e10f75f3be522a1536c5e1f6fccf32539af6e7dbfcda578cfdc7544d6e93b6e3c2aadfc83b2e54f47a183d06e136712f8b1b10d4054e9086eac0286dc8050d768c090599378e7745fe9e92eecd130b273682270d805e8c2cfe9ff3c08539da6654fd2de6a71", 0xa8}, {&(0x7f0000000100)="6f971ac03a14424e76ad7b482e6260dc74525beec40ccbfa5587d42584fd0e29e4007b92d9b651f6cb5bff52781d1cfa754cecbc62d6fe14", 0x38}, {&(0x7f0000000400)="bc87f52c14a1b782f8aa66ad2cbf062895f956571cb4b92f5eaca4e54dcbad61b4b9b32b3f6417ed6f9a067cdabac200cb2aeb0f806709f73a506a09b94f7417386a33a9", 0x44}, {&(0x7f0000000480)="7a795de47f70858446e02c18c2c2b51fee8f0a397d561117ee2273801edf6b67c9275ea0fc10dea8530226bef8249a8667526091133b0acf6b85531ad4156acc1345393f075864ab66619992410d1dc999b7a9033db8929e", 0x58}, {&(0x7f0000000500)="3f942628f24b64aebdb6ee6f0839710236c1dc95d9787b3149a08365d79f7c611fce51bbb29d997f827f44eb8f62279d9a941090474adfd631bdd568c33fd456854a15ed271a9f43dc82152bc830a23c90dc01c224b5", 0x56}, {&(0x7f0000000140)="ed2e09bb8a96", 0x6}, {&(0x7f00000001c0)="d274f64e95fd4e2237d28200426e60f600a13a02ee3bdb8a15b587a8803d84c9c5818ce88c90b4febf1a7e2d214220c95082dec13f9ef9368b395ad3dfe1", 0x3e}], 0x9, &(0x7f0000000640)=[{0x110, 0x116, 0x3, "5048136a3b264df3737441fba1228e4a7bde7b996cdafec51caef8cb597ae0bcd20c85837001d1726e77b45183a48c3f4da0c6308a6208584321e9a750cf58183da8ee750e0f0eb05d284b8c8835859aec882fb1e100f6fe323ec6c8dc238cb27e45f29be7dd6f6d3351cbc6e6ce431f94a3892d3bb449446f568350f1e3976c21d9efaac7008986d4edbeaaf2e813150dece1359460b55e46e82a6f87750394be5ef3f61873049bef1b4443a5845ca98ab0f0c6ebf11187618479555079938f7ec42a28d2b1fea233a3b4710ab0ed710148996698bbfa3c027e2900c330cfd6e39d603e17dd7bad995baf5346efa3b11e5049ad51fd709af6"}], 0x110}, 0x20040000)

1.705884333s ago: executing program 2 (id=1720):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xecc}]}, &(0x7f0000000300)='syzkaller\x00', 0xf, 0x1000, &(0x7f00000012c0)=""/4096, 0x40f00, 0x26, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e51c, r0, 0x0, &(0x7f0000000ec0), 0x0, 0x10, 0x1ff}, 0x94)

1.622671902s ago: executing program 2 (id=1721):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003800000000000001000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x485, 0x0, 0x0)

1.466638605s ago: executing program 2 (id=1722):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40503c2b, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)

1.047482177s ago: executing program 1 (id=1724):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

815.983795ms ago: executing program 1 (id=1726):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a01090010001280423bf88008001e0000000000140005"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0)

665.726527ms ago: executing program 1 (id=1727):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfe33)

665.314945ms ago: executing program 3 (id=1728):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3dac, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)

615.968571ms ago: executing program 1 (id=1729):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x8, 0x0, 0x0}}, 0x10)

615.449588ms ago: executing program 1 (id=1730):
socket$kcm(0xa, 0x3, 0x87)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x207}, @alu={0x4, 0x1, 0x2, 0x4, 0x4, 0xffffffffffffffe1, 0x4}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0xb9, &(0x7f0000000780)=""/185, 0x40f00, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0xe, 0x7, 0xcd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x5, 0x2, 0x2, 0x5}]}, 0x94)
socketpair(0x28, 0x1, 0x28, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x15, 0x0, 0x10b8}, 0x404ff04)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0xd, &(0x7f00000000c0), 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040)=r7, 0x4)
sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
r9 = openat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup(r9, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0)
recvmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/15, 0xf}, 0x2042)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_clone(0x14004000, &(0x7f00000001c0)="f1f045b9e87b096071bfdaca4fa4773916f879071aa3055f920262ed084e4cf2c6fcd408cd114638565d5018b1ea2ef23c3021b497207b0b4aa732dbf1cf462b2876b5f98d7ee24d8beedfc9fbb4577d2c5bd21bbbd1c6aa8ba48c349ae0863cc6031039c2bb7a7ad2cf058544c428ddf698d91c9dd3189cc3f038984a83107ab18034f7bdb5bc1165bc2a179dcecdf341f622b79cd744d969f201070c8fdb4b3edef834c1601ce17f0e0f31", 0xac, &(0x7f00000002c0), &(0x7f0000000300), 0x0)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x4, 0x5, 0x26, 0xfa, 0x0, 0x0, 0x20100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x16, 0x394e05bdf81de01, @perf_bp={&(0x7f0000000380), 0x3}, 0x62, 0x22, 0x7, 0x7, 0x1, 0x7, 0x5, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b4000000000090001", @ANYBLOB="01488c"], 0xc4}}, 0x4004)

525.53678ms ago: executing program 2 (id=1731):
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8917, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x28, 0x1, 0x0, 0x0)
r2 = syz_clone(0x582e6080, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8)
perf_event_open$cgroup(&(0x7f0000000480)={0x3, 0x80, 0x5, 0x79, 0x9, 0xe, 0x0, 0x7ff, 0x20, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x62073b0e0dd08c1c, 0x0, 0x10, 0x7, 0x100000000, 0x7, 0x200, 0x0, 0x1000, 0x0, 0xffffffffffffffff}, r3, 0x0, r0, 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r4, 0x0, 0x5}, 0x18)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$kcm(0x10, 0x1, 0x0)
recvmsg$kcm(r6, 0x0, 0x40002002)

525.274225ms ago: executing program 3 (id=1732):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6gretap0\x00', @random="e32579d14a8f"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

214.847781ms ago: executing program 2 (id=1733):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200a68d00"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000d70b00004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r4 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0)

214.341741ms ago: executing program 3 (id=1734):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x0, 0x0, 0x2}], 0x10, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r2, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

124.263109ms ago: executing program 3 (id=1735):
r0 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001012b8bd3bb6bec5afd77002e000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x404c957}, 0x48050)
setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000180), 0x4)

500.183µs ago: executing program 3 (id=1736):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x34, 0x8}, 0x20)

0s ago: executing program 3 (id=1737):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=@allocspi={0x128, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @lifetime_val={0x24, 0x9, {0x4, 0x4, 0x9, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55213' (ED25519) to the list of known hosts.
syzkaller login: [   56.086635][ T5832] cgroup: Unknown subsys name 'net'
[   56.216422][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.222211][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.190207][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.103576][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.107049][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.110458][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.114644][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.118208][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.133099][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.136552][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.139751][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.143669][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.147958][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.217001][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.228006][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.231553][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.235726][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.240345][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.410802][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   63.435951][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   63.590129][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.594399][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.598629][ T5846] bridge_slave_0: entered allmulticast mode
[   63.603660][ T5846] bridge_slave_0: entered promiscuous mode
[   63.612197][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.615110][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.618848][ T5850] bridge_slave_0: entered allmulticast mode
[   63.623045][ T5850] bridge_slave_0: entered promiscuous mode
[   63.627118][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.629741][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.632786][ T5850] bridge_slave_1: entered allmulticast mode
[   63.636383][ T5850] bridge_slave_1: entered promiscuous mode
[   63.639801][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.643206][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.646371][ T5846] bridge_slave_1: entered allmulticast mode
[   63.650302][ T5846] bridge_slave_1: entered promiscuous mode
[   63.731092][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.737004][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.744919][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.750372][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.799892][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   63.806039][ T5850] team0: Port device team_slave_0 added
[   63.809959][ T5846] team0: Port device team_slave_0 added
[   63.817330][ T5850] team0: Port device team_slave_1 added
[   63.821166][ T5846] team0: Port device team_slave_1 added
[   63.879896][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.882498][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.891241][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.898437][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.901242][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.912060][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.925118][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.927962][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.938200][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.944741][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.947803][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.956216][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.043835][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.046754][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.049750][ T5854] bridge_slave_0: entered allmulticast mode
[   64.053651][ T5854] bridge_slave_0: entered promiscuous mode
[   64.057655][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.060953][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.065590][ T5854] bridge_slave_1: entered allmulticast mode
[   64.068910][ T5854] bridge_slave_1: entered promiscuous mode
[   64.076101][ T5846] hsr_slave_0: entered promiscuous mode
[   64.079032][ T5846] hsr_slave_1: entered promiscuous mode
[   64.084716][ T5850] hsr_slave_0: entered promiscuous mode
[   64.087181][ T5850] hsr_slave_1: entered promiscuous mode
[   64.089645][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   64.091820][ T5850] Cannot create hsr debugfs directory
[   64.145610][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.165958][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.222351][ T5854] team0: Port device team_slave_0 added
[   64.232578][ T5854] team0: Port device team_slave_1 added
[   64.285916][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.288393][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.297915][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.317757][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.320757][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.332926][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.418042][ T5854] hsr_slave_0: entered promiscuous mode
[   64.421525][ T5854] hsr_slave_1: entered promiscuous mode
[   64.425262][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   64.427820][ T5854] Cannot create hsr debugfs directory
[   64.473174][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.481151][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.506545][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.511767][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.617791][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.632951][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.653395][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.666395][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.737449][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.746021][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.756330][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.767585][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.824085][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.860247][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   64.876895][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.879816][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.897027][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.899871][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.933912][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.986087][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   65.000497][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.016341][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.027824][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.030727][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.035526][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.038790][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.049618][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.052279][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.083325][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.085869][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.133491][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.206470][ T5237] Bluetooth: hci1: command tx timeout
[   65.209109][ T5237] Bluetooth: hci0: command tx timeout
[   65.240749][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.282249][   T54] Bluetooth: hci2: command tx timeout
[   65.297536][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.336940][ T5850] veth0_vlan: entered promiscuous mode
[   65.348179][ T5846] veth0_vlan: entered promiscuous mode
[   65.357705][ T5850] veth1_vlan: entered promiscuous mode
[   65.375622][ T5846] veth1_vlan: entered promiscuous mode
[   65.384427][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.406083][ T5850] veth0_macvtap: entered promiscuous mode
[   65.419109][ T5850] veth1_macvtap: entered promiscuous mode
[   65.423932][ T5846] veth0_macvtap: entered promiscuous mode
[   65.444007][ T5846] veth1_macvtap: entered promiscuous mode
[   65.454035][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.469220][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.489827][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.495738][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.499204][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.505617][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.514469][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.517849][ T5854] veth0_vlan: entered promiscuous mode
[   65.528302][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.551063][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.556940][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.560623][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.569541][ T5854] veth1_vlan: entered promiscuous mode
[   65.586105][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.648318][  T718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.660796][  T718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.676432][ T5854] veth0_macvtap: entered promiscuous mode
[   65.693926][ T5854] veth1_macvtap: entered promiscuous mode
[   65.717340][ T4676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.732326][ T4676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.743288][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.745934][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.766332][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.800972][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.820516][  T718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.820646][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.826164][  T718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.833286][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.844972][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.852630][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.888502][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.981780][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.986173][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.019035][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.021776][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.374435][ T5942] netlink: 'syz.1.14': attribute type 3 has an invalid length.
[   66.377347][ T5942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14'.
[   66.381928][    C1] hrtimer: interrupt took 34706 ns
[   66.444540][ T5938] Zero length message leads to an empty skb
[   66.571137][ T5927] IPv6: Can't replace route, no match found
[   66.718472][ T5949] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.282214][   T54] Bluetooth: hci0: command tx timeout
[   67.284933][ T5237] Bluetooth: hci1: command tx timeout
[   67.362531][   T54] Bluetooth: hci2: command tx timeout
[   67.836283][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   67.839829][ T5980] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   68.142984][   T54] Bluetooth: hci0: unexpected event 0x01 length: 151 > 1
[   68.711470][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39'.
[   69.362278][   T54] Bluetooth: hci0: command tx timeout
[   69.364781][ T5237] Bluetooth: hci1: command tx timeout
[   69.442073][   T54] Bluetooth: hci2: command tx timeout
[   71.117880][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'.
[   71.125244][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.127879][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.335914][ T6023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.47'.
[   71.344301][ T6023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.47'.
[   71.348867][ T6023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.47'.
[   71.442634][   T54] Bluetooth: hci0: command tx timeout
[   71.444589][   T54] Bluetooth: hci1: command tx timeout
[   71.448644][ T6015] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   71.451652][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'.
[   71.460378][ T6015] netlink: 'syz.2.44': attribute type 16 has an invalid length.
[   71.464125][ T6015] netlink: 'syz.2.44': attribute type 17 has an invalid length.
[   71.523843][ T5237] Bluetooth: hci2: command tx timeout
[   71.608340][ T6015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.233488][ T6056] xt_l2tp: v2 sid > 0xffff: 1114112
[   72.368096][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   72.398877][ T6068] lo: entered allmulticast mode
[   72.507197][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.716498][ T6088] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.78'.
[   72.720623][ T6088] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.78'.
[   72.726100][ T6088] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.78'.
[   73.687869][ T6101] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[   73.716183][ T6104] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   73.719724][ T6104] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   73.881020][ T5237] Bluetooth: hci0: Malformed LE Event: 0x1d
[   73.925547][ T6117] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   73.930132][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'.
[   74.030125][ T6119] Illegal XDP return value 4294967274 on prog  (id 33) dev N/A, expect packet loss!
[   74.346386][ T6142] netlink: 'syz.2.102': attribute type 39 has an invalid length.
[   74.726353][ T6155] =======================================================
[   74.726353][ T6155] WARNING: The mand mount option has been deprecated and
[   74.726353][ T6155]          and is ignored by this kernel. Remove the mand
[   74.726353][ T6155]          option from the mount to silence this warning.
[   74.726353][ T6155] =======================================================
[   74.887902][ T6162] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.110'.
[   74.967960][ T6168] netlink: 'syz.2.113': attribute type 2 has an invalid length.
[   74.974391][ T6168] netlink: 164 bytes leftover after parsing attributes in process `syz.2.113'.
[   76.485513][ T6214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.134'.
[   76.490327][ T6214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.134'.
[   76.498000][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.134'.
[   76.606609][ T6219] netlink: 182 bytes leftover after parsing attributes in process `syz.0.136'.
[   76.665723][ T6219] netlink: 'syz.0.136': attribute type 10 has an invalid length.
[   76.683192][ T6219] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.787047][ T6225] netlink: 211 bytes leftover after parsing attributes in process `syz.1.139'.
[   77.145315][ T6241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.143'.
[   77.149303][ T6241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.143'.
[   78.018385][ T6251] syzkaller0: entered promiscuous mode
[   78.020306][ T6251] syzkaller0: entered allmulticast mode
[   78.871453][ T6273] netlink: 'syz.0.158': attribute type 29 has an invalid length.
[   78.878197][ T6274] netlink: 'syz.0.158': attribute type 29 has an invalid length.
[   78.884533][ T6275] netlink: 'syz.0.158': attribute type 29 has an invalid length.
[   79.065729][ T6285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.162'.
[   79.183032][ T6295] netlink: 'syz.1.167': attribute type 21 has an invalid length.
[   79.191881][ T6295] netlink: 212256 bytes leftover after parsing attributes in process `syz.1.167'.
[   79.208059][ T6295] netlink: zone id is out of range
[   79.210228][ T6295] netlink: zone id is out of range
[   79.225900][ T6295] netlink: zone id is out of range
[   79.228137][ T6295] netlink: zone id is out of range
[   79.230283][ T6295] netlink: zone id is out of range
[   79.272436][ T6295] netlink: zone id is out of range
[   79.274731][ T6295] netlink: zone id is out of range
[   79.278381][ T6295] netlink: zone id is out of range
[   79.280603][ T6295] netlink: zone id is out of range
[   79.305842][ T6295] netlink: zone id is out of range
[   79.401748][ T6302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.170'.
[   81.375670][   T24] cfg80211: failed to load regulatory.db
[   82.151161][ T5237] Bluetooth: hci0: unexpected event 0x30 length: 82 > 3
[   82.685441][ T6432] __nla_validate_parse: 3 callbacks suppressed
[   82.685458][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'.
[   82.696200][ T6432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.222'.
[   82.808286][ T6437] netlink: 'syz.2.220': attribute type 10 has an invalid length.
[   82.816031][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.819682][ T6437] team0: Port device bond0 added
[   83.565383][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'.
[   83.569078][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'.
[   83.726802][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'.
[   83.730915][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'.
[   84.056341][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'.
[   84.210456][ T6474] netlink: 'syz.0.237': attribute type 16 has an invalid length.
[   84.215080][ T6474] netlink: 156 bytes leftover after parsing attributes in process `syz.0.237'.
[   85.073103][ T6496] netlink: 'syz.0.246': attribute type 13 has an invalid length.
[   85.549944][ T6512] nftables ruleset with unbound chain
[   85.670590][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'.
[   85.995435][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'.
[   87.093329][ T6581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.096573][ T6581] IPv6: NLM_F_CREATE should be set when creating new route
[   87.099861][ T6581] IPv6: NLM_F_CREATE should be set when creating new route
[   87.679517][ T6592] infiniband syz1: set active
[   87.683388][ T6592] infiniband syz1: added bond0
[   87.709399][ T6592] RDS/IB: syz1: added
[   87.712441][ T6592] smc: adding ib device syz1 with port count 1
[   87.718925][ T6592] smc:    ib device syz1 port 1 has pnetid 
[   88.465946][ T6601] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   88.481201][ T6601] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   88.488946][ T6601] syz.1.293 uses obsolete (PF_INET,SOCK_PACKET)
[   88.527783][ T6605] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.294'.
[   88.572424][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.576370][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.582992][ T6609] bridge0: entered allmulticast mode
[   88.699729][ T6609] bridge_slave_1: left allmulticast mode
[   88.709362][ T6609] bridge_slave_1: left promiscuous mode
[   88.724340][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.060508][ T6609] bridge_slave_0: left allmulticast mode
[   89.063957][ T6609] bridge_slave_0: left promiscuous mode
[   89.073518][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.611732][ T6619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.299'.
[   89.624450][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'.
[   89.730379][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.745265][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.773033][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.776288][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.054325][ T6629] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.303'.
[   90.116954][ T6631] netlink: 14 bytes leftover after parsing attributes in process `syz.1.304'.
[   90.561830][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[   90.709893][ T6651] netlink: 56 bytes leftover after parsing attributes in process `syz.1.312'.
[   90.763915][ T6653] netlink: 52 bytes leftover after parsing attributes in process `syz.1.313'.
[   91.145886][ T6670] net_ratelimit: 3 callbacks suppressed
[   91.145902][ T6670] Dead loop on virtual device ip6_vti0, fix it urgently!
[   91.697914][ T6691] netlink: 'syz.1.326': attribute type 3 has an invalid length.
[   91.713926][ T6691] netlink: 'syz.1.326': attribute type 10 has an invalid length.
[   91.813375][ T6696] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.328'.
[   93.540003][ T6734] syzkaller0: entered promiscuous mode
[   93.544578][ T6734] syzkaller0: entered allmulticast mode
[   94.074378][ T6753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.352'.
[   94.086499][ T6753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.352'.
[   94.102688][ T6753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.352'.
[   94.148970][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'.
[   94.460060][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'.
[   95.367850][ T6787] netlink: 'syz.1.366': attribute type 2 has an invalid length.
[   95.370844][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.366'.
[   95.545520][ T6796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.668296][ T6804] netlink: 'syz.1.375': attribute type 10 has an invalid length.
[   95.671610][ T6804] netlink: 'syz.1.375': attribute type 19 has an invalid length.
[   95.678284][ T6804] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.375'.
[   96.906260][ T6824] netlink: 14 bytes leftover after parsing attributes in process `syz.1.382'.
[   97.007378][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.018920][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.026692][ T6824] bond0 (unregistering): Released all slaves
[   98.373360][ T6855] delete_channel: no stack
[   98.573055][ T6866] netlink: 'syz.1.394': attribute type 11 has an invalid length.
[  102.007442][ T6885] netlink: 'syz.2.402': attribute type 7 has an invalid length.
[  102.067262][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.071115][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.075042][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.081767][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.090284][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.106566][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.406'.
[  102.113281][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.406'.
[  102.187567][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.254687][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.297844][ T6908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.412'.
[  102.301419][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'.
[  102.306450][ T6908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.412'.
[  102.345951][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.680849][ T6892] chnl_net:caif_netlink_parms(): no params data found
[  102.811073][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.868720][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.871494][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.875528][ T6892] bridge_slave_0: entered allmulticast mode
[  102.879540][ T6892] bridge_slave_0: entered promiscuous mode
[  102.890637][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.899192][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.904409][ T6892] bridge_slave_1: entered allmulticast mode
[  102.909727][ T6892] bridge_slave_1: entered promiscuous mode
[  102.948026][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.956868][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.048742][ T6934] netlink: 'syz.1.418': attribute type 6 has an invalid length.
[  103.059503][ T6892] team0: Port device team_slave_0 added
[  103.070958][ T6892] team0: Port device team_slave_1 added
[  103.170905][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.222087][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.231256][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.237587][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.239983][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.248690][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.327855][   T13] bridge_slave_1: left allmulticast mode
[  103.333984][   T13] bridge_slave_1: left promiscuous mode
[  103.338375][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.354588][   T13] bridge_slave_0: left allmulticast mode
[  103.357041][   T13] bridge_slave_0: left promiscuous mode
[  103.369537][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.166103][ T5237] Bluetooth: hci2: command tx timeout
[  105.194258][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.216265][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.227962][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  105.238387][   T13] bond0 (unregistering): Released all slaves
[  105.256792][ T6892] hsr_slave_0: entered promiscuous mode
[  105.260053][ T6892] hsr_slave_1: entered promiscuous mode
[  105.263893][ T6892] debugfs: 'hsr0' already exists in 'hsr'
[  105.266366][ T6892] Cannot create hsr debugfs directory
[  105.340266][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'.
[  105.793739][ T6892] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.801576][ T6892] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.830156][ T6892] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.854811][ T6892] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.914917][ T6980] netlink: 76 bytes leftover after parsing attributes in process `syz.1.430'.
[  105.939246][   T13] hsr_slave_0: left promiscuous mode
[  105.941581][   T13] hsr_slave_1: left promiscuous mode
[  105.944053][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.946612][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.950255][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.958469][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.969971][   T13] veth1_macvtap: left promiscuous mode
[  105.972817][   T13] veth0_macvtap: left promiscuous mode
[  105.974844][   T13] veth1_vlan: left promiscuous mode
[  105.976885][   T13] veth0_vlan: left promiscuous mode
[  106.243502][ T5237] Bluetooth: hci2: command tx timeout
[  106.409892][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'.
[  106.414348][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'.
[  107.139752][   T13] team0 (unregistering): Port device team_slave_1 removed
[  107.158733][   T13] team0 (unregistering): Port device team_slave_0 removed
[  107.398619][ T6988] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.432'.
[  107.486952][ T6998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.496908][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.524396][ T6892] 8021q: adding VLAN 0 to HW filter on device team0
[  107.542897][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.545387][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.558239][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.560844][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.811384][ T7014] syzkaller0: entered promiscuous mode
[  107.813647][ T7014] syzkaller0: entered allmulticast mode
[  107.825692][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.322355][ T5237] Bluetooth: hci2: command tx timeout
[  108.815113][ T6892] veth0_vlan: entered promiscuous mode
[  108.828729][ T6892] veth1_vlan: entered promiscuous mode
[  108.855482][ T6892] veth0_macvtap: entered promiscuous mode
[  108.866002][ T6892] veth1_macvtap: entered promiscuous mode
[  108.902665][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.907775][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.924841][ T5857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.927825][ T5857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.930739][ T5857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.948064][ T5857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.037032][ T7036] netlink: 'syz.2.445': attribute type 15 has an invalid length.
[  109.039842][ T7036] netlink: 'syz.2.445': attribute type 7 has an invalid length.
[  109.043094][ T7036] netlink: 52 bytes leftover after parsing attributes in process `syz.2.445'.
[  109.131000][ T4676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.138331][ T4676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.156322][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.160010][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.220643][ T7049] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.447'.
[  109.226989][ T7040] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.447'.
[  109.231366][ T7049] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.447'.
[  109.424845][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.454'.
[  110.402156][ T5237] Bluetooth: hci2: command tx timeout
[  111.341691][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'.
[  112.398222][ T7164] netlink: 'syz.3.496': attribute type 10 has an invalid length.
[  112.401618][ T7164] netlink: 3531 bytes leftover after parsing attributes in process `syz.3.496'.
[  112.890321][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.505'.
[  112.894693][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.505'.
[  112.904486][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.505'.
[  113.124170][ T7196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'.
[  113.129205][ T7196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'.
[  113.192544][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[  113.326096][ T7215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.521'.
[  113.963973][ T7248] openvswitch: netlink: Missing valid actions attribute.
[  113.966901][ T7248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.015209][ T7250] netlink: 'syz.3.534': attribute type 21 has an invalid length.
[  114.018598][ T7250] netlink: 156 bytes leftover after parsing attributes in process `syz.3.534'.
[  114.149908][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'.
[  114.321499][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'.
[  115.083364][ T7304] netlink: 'syz.3.556': attribute type 1 has an invalid length.
[  115.275987][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  115.820428][ T7320] netlink: 'syz.1.561': attribute type 1 has an invalid length.
[  115.828109][ T7320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.836206][ T7330] netlink: zone id is out of range
[  116.838127][ T7330] netlink: zone id is out of range
[  118.331104][ T7369] netlink: 'syz.3.581': attribute type 10 has an invalid length.
[  118.335425][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.346841][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.367881][ T7369] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  118.563232][ T7380] __nla_validate_parse: 4 callbacks suppressed
[  118.563244][ T7380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.585'.
[  118.568986][ T7380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.585'.
[  118.573543][ T7380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.585'.
[  118.650265][ T7369] netlink: 'syz.3.581': attribute type 3 has an invalid length.
[  118.878822][ T7369] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.581'.
[  119.177537][ T7405] netlink: 48 bytes leftover after parsing attributes in process `syz.3.593'.
[  119.309903][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'.
[  120.137257][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.599'.
[  120.188152][ T7423] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  120.509106][ T7438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.094591][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[  121.512680][ T7459] veth0_vlan: entered allmulticast mode
[  122.446552][ T7503] netlink: 'syz.1.632': attribute type 27 has an invalid length.
[  122.449439][ T7503] netlink: 164 bytes leftover after parsing attributes in process `syz.1.632'.
[  122.850514][ T7506] netlink: 'syz.2.637': attribute type 2 has an invalid length.
[  122.854830][ T7506] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.637'.
[  122.859125][ T7506] nbd: must specify an index to disconnect
[  123.809080][ T7527] openvswitch: netlink: IP tunnel TTL not specified.
[  123.888897][ T7535] netlink: 'syz.1.651': attribute type 2 has an invalid length.
[  124.067283][ T5237] Bluetooth: hci0: adv larger than maximum supported
[  124.536414][ T7575] openvswitch: netlink: Message has 1 unknown bytes.
[  124.541707][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.849438][ T7551] delete_channel: no stack
[  125.230585][ T7584] netlink: 822 bytes leftover after parsing attributes in process `syz.2.673'.
[  125.538419][ T7607] netlink: 'syz.3.682': attribute type 21 has an invalid length.
[  125.586314][ T7609] netlink: 6 bytes leftover after parsing attributes in process `syz.1.684'.
[  126.864535][ T7652] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  126.919007][ T7654] netlink: 'syz.1.702': attribute type 21 has an invalid length.
[  126.922555][ T7654] netlink: 168 bytes leftover after parsing attributes in process `syz.1.702'.
[  127.013921][ T7660] netlink: 'syz.3.705': attribute type 2 has an invalid length.
[  127.016970][ T7660] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.705'.
[  127.080389][ T7664] netlink: 'syz.3.707': attribute type 11 has an invalid length.
[  127.084410][ T7664] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.707'.
[  127.414186][ T7663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.461464][ T7668] netlink: 'syz.1.709': attribute type 210 has an invalid length.
[  127.584784][ T7678] netlink: 'syz.3.710': attribute type 10 has an invalid length.
[  128.441603][ T7678] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  128.517197][ T7691] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.716'.
[  128.531752][ T7691] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.716'.
[  128.604534][ T7698] netlink: 'syz.3.720': attribute type 21 has an invalid length.
[  128.607778][ T7698] netlink: 'syz.3.720': attribute type 1 has an invalid length.
[  128.698934][ T7709] netlink: 'syz.2.725': attribute type 3 has an invalid length.
[  128.703385][ T7709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.725'.
[  128.845799][ T7724] netlink: 'syz.2.732': attribute type 1 has an invalid length.
[  128.854280][ T7724] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.732'.
[  128.957747][ T7728] netlink: 'syz.3.734': attribute type 16 has an invalid length.
[  128.960747][ T7728] netlink: 168 bytes leftover after parsing attributes in process `syz.3.734'.
[  129.533741][ T7756] netlink: 'syz.1.746': attribute type 29 has an invalid length.
[  129.537997][ T7756] netlink: 'syz.1.746': attribute type 29 has an invalid length.
[  129.541100][ T7756] netlink: 'syz.1.746': attribute type 29 has an invalid length.
[  129.758665][ T5237] Bluetooth: hci0: Malformed Event: 0x13
[  130.443088][ T7757] syz.2.745 (7757) used greatest stack depth: 19880 bytes left
[  130.913019][ T7808] __nla_validate_parse: 3 callbacks suppressed
[  130.913034][ T7808] netlink: 100 bytes leftover after parsing attributes in process `syz.2.767'.
[  130.987819][ T7810] netlink: 22 bytes leftover after parsing attributes in process `syz.1.768'.
[  131.143859][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'.
[  131.200619][ T7828] : entered promiscuous mode
[  131.515989][ T7850] netlink: 96 bytes leftover after parsing attributes in process `syz.2.787'.
[  131.829591][ T7858] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  131.915063][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'.
[  131.944615][ T7871] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.798'.
[  132.564532][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.566857][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.431717][ T7918] pimreg: tun_chr_ioctl cmd 1074025678
[  133.435280][ T7918] pimreg: tun_chr_ioctl cmd 1074025677
[  133.437943][ T7918] pimreg: linktype set to 778
[  134.305855][ T7968] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.840'.
[  134.308915][ T7968] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.840'.
[  134.499943][ T7974] syzkaller0: entered promiscuous mode
[  134.503287][ T7974] syzkaller0: entered allmulticast mode
[  135.214779][ T7979] IPv6: NLM_F_CREATE should be specified when creating new route
[  136.164275][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'.
[  136.503663][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'.
[  136.507890][ T7992] netlink: 52 bytes leftover after parsing attributes in process `syz.2.848'.
[  136.610980][ T8024] netlink: 220 bytes leftover after parsing attributes in process `syz.2.863'.
[  136.650577][ T8025] delete_channel: no stack
[  136.862894][ T8041] xt_l2tp: wrong L2TP version: 0
[  136.915380][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'.
[  137.131076][ T8057] netlink: 148 bytes leftover after parsing attributes in process `syz.2.879'.
[  137.250467][ T8067] syzkaller0: tun_chr_ioctl cmd 2147767506
[  137.553812][ T8085] validate_nla: 12 callbacks suppressed
[  137.553832][ T8085] netlink: 'syz.2.889': attribute type 4 has an invalid length.
[  137.744294][ T8091] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[  137.747212][ T8091] netlink: 'syz.1.895': attribute type 4 has an invalid length.
[  137.926362][ T8099] netlink: 'syz.1.899': attribute type 29 has an invalid length.
[  138.170004][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'.
[  138.179519][ T8111] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  138.509815][ T8128] netlink: 'syz.3.910': attribute type 28 has an invalid length.
[  138.798194][ T8141] netlink: 'syz.3.916': attribute type 29 has an invalid length.
[  138.810545][ T8141] netlink: 'syz.3.916': attribute type 29 has an invalid length.
[  138.814767][ T8141] netlink: 'syz.3.916': attribute type 29 has an invalid length.
[  138.817797][ T8141] netlink: 'syz.3.916': attribute type 29 has an invalid length.
[  139.114344][ T8153] netlink: 'syz.3.922': attribute type 21 has an invalid length.
[  139.117385][ T8153] IPv6: NLM_F_CREATE should be specified when creating new route
[  139.120559][ T8153] IPv6: Can't replace route, no match found
[  139.357144][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'.
[  139.377407][ T8168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.628468][ T8177] netlink: 168 bytes leftover after parsing attributes in process `syz.1.932'.
[  139.787923][ T8186] netlink: 80 bytes leftover after parsing attributes in process `syz.3.935'.
[  141.516553][ T8296] __nla_validate_parse: 6 callbacks suppressed
[  141.516568][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'.
[  141.526399][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'.
[  141.530124][ T8296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.988'.
[  141.859238][ T8320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.999'.
[  142.174428][ T8333] : entered promiscuous mode
[  142.789136][ T8357] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1014'.
[  142.837843][ T8361] tc_dump_action: action bad kind
[  142.981250][ T8362] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1016'.
[  143.003627][ T8362] bond_slave_0: entered promiscuous mode
[  143.006711][ T8362] bond_slave_1: entered promiscuous mode
[  143.059908][ T8362] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1016'.
[  143.937138][ T8381] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1025'.
[  144.627534][ T8397] validate_nla: 9 callbacks suppressed
[  144.627550][ T8397] netlink: 'syz.2.1032': attribute type 28 has an invalid length.
[  145.539627][ T8414] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1039'.
[  145.644531][ T8420] raw_sendmsg: syz.1.1042 forgot to set AF_INET. Fix it!
[  145.697714][ T8424] netlink: 'syz.3.1044': attribute type 10 has an invalid length.
[  145.807759][ T8436] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1050'.
[  146.604570][ T8493] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1077'.
[  146.757309][ T8507] netlink: 'syz.1.1084': attribute type 10 has an invalid length.
[  146.760772][ T8507] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1084'.
[  146.847547][ T8510] netlink: 'syz.3.1085': attribute type 2 has an invalid length.
[  146.851768][ T8510] netlink: 'syz.3.1085': attribute type 1 has an invalid length.
[  146.858547][ T8510] netlink: 'syz.3.1085': attribute type 1 has an invalid length.
[  147.469673][ T5237] Bluetooth: hci1: Malformed Event: 0x02
[  147.611445][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'.
[  147.865898][ T8564] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1109'.
[  147.923829][ T8564] syz.1.1109 (8564) used obsolete PPPIOCDETACH ioctl
[  148.096255][ T8582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1116'.
[  148.100109][ T8582] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  148.350577][ T8593] netlink: 'syz.3.1121': attribute type 10 has an invalid length.
[  148.368324][ T8593] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1121'.
[  148.534112][ T8598] netlink: 'syz.2.1123': attribute type 46 has an invalid length.
[  148.706775][ T8608] netlink: 'syz.2.1128': attribute type 10 has an invalid length.
[  148.709499][ T8608] netlink: 'syz.2.1128': attribute type 11 has an invalid length.
[  148.712759][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'.
[  148.925512][ T8616] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1132'.
[  149.867105][ T5237] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11
[  149.993014][ T8656] validate_nla: 2 callbacks suppressed
[  149.993322][ T8656] netlink: 'syz.3.1149': attribute type 10 has an invalid length.
[  152.791692][ T8668] netlink: 'syz.1.1154': attribute type 11 has an invalid length.
[  152.874647][ T8668] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1154'.
[  152.891464][ T8670] netlink: 'syz.1.1154': attribute type 11 has an invalid length.
[  152.901589][ T8670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1154'.
[  152.922047][ T8667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.283536][ T8682] netlink: 'syz.1.1160': attribute type 19 has an invalid length.
[  153.347856][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'.
[  153.461346][ T8705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1171'.
[  153.480563][ T8707] netlink: 'syz.2.1172': attribute type 10 has an invalid length.
[  153.486630][ T8707] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1172'.
[  153.874420][ T8729] syz.3.1180 (8729) used greatest stack depth: 19800 bytes left
[  153.974626][ T8741] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1186'.
[  153.978165][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'.
[  154.007166][ T8743] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.1188'.
[  154.024933][ T8741] : renamed from hsr0 (while UP)
[  154.045828][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[  154.088792][ T8747] netlink: 'syz.1.1190': attribute type 3 has an invalid length.
[  154.091824][ T8747] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1190'.
[  154.297811][ T8765] netlink: 'syz.2.1199': attribute type 1 has an invalid length.
[  154.715717][ T8788] lo speed is unknown, defaulting to 1000
[  154.736789][ T8788] lo speed is unknown, defaulting to 1000
[  154.749711][ T8788] lo speed is unknown, defaulting to 1000
[  155.507795][ T8788] infiniband syz2: set down
[  155.509825][ T5314] lo speed is unknown, defaulting to 1000
[  155.512161][ T8788] infiniband syz2: added lo
[  155.514414][ T8788] syz2: rxe_create_cq: returned err = -12
[  155.518534][ T8788] infiniband syz2: Couldn't create ib_mad CQ
[  155.520609][ T8788] infiniband syz2: Couldn't open port 1
[  155.531731][ T8788] RDS/IB: syz2: added
[  155.535702][ T8788] smc: adding ib device syz2 with port count 1
[  155.537954][ T8788] smc:    ib device syz2 port 1 has pnetid 
[  155.542738][ T8788] lo speed is unknown, defaulting to 1000
[  155.550749][ T5314] lo speed is unknown, defaulting to 1000
[  155.749236][ T8788] lo speed is unknown, defaulting to 1000
[  155.856734][ T8788] lo speed is unknown, defaulting to 1000
[  155.925766][ T8824] bond0: (slave ): Enslaving as an active interface with an up link
[  156.050955][ T8833] netlink: 'syz.2.1228': attribute type 2 has an invalid length.
[  156.058944][ T8833] netlink: 'syz.2.1228': attribute type 2 has an invalid length.
[  156.304833][ T8831] syzkaller0: entered promiscuous mode
[  156.306869][ T8831] syzkaller0: entered allmulticast mode
[  156.806437][ T8824] syz.3.1225 (8824) used greatest stack depth: 19384 bytes left
[  158.598388][ T8896] __nla_validate_parse: 8 callbacks suppressed
[  158.598445][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'.
[  160.135250][ T8947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1276'.
[  160.236373][ T8943] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1274'.
[  160.366386][ T8965] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1284'.
[  160.440382][ T8969] netlink: 'syz.1.1286': attribute type 10 has an invalid length.
[  160.450144][ T8969] geneve0: entered promiscuous mode
[  160.965596][ T8974] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1288'.
[  161.110402][ T8978] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1290'.
[  161.297441][ T8987] netlink: 'syz.2.1294': attribute type 10 has an invalid length.
[  161.300190][ T8987] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1294'.
[  161.340131][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  162.269686][ T9004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1302'.
[  162.357343][ T9013] netlink: 'syz.3.1306': attribute type 21 has an invalid length.
[  162.360362][ T9013] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1306'.
[  162.364475][ T9013] netlink: 'syz.3.1306': attribute type 4 has an invalid length.
[  163.303769][ T9023] netlink: 'syz.2.1311': attribute type 11 has an invalid length.
[  163.348515][ T9027] netlink: 'syz.3.1313': attribute type 2 has an invalid length.
[  164.604064][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1041893514 wd_nsec: 1041893534
[  165.249546][ T9069] netlink: 'syz.2.1331': attribute type 2 has an invalid length.
[  165.252947][ T9069] __nla_validate_parse: 6 callbacks suppressed
[  165.252959][ T9069] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1331'.
[  166.577763][ T9089] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1337'.
[  166.601404][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.633486][ T9096] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1341'.
[  166.759958][ T9110] netlink: 'syz.3.1347': attribute type 29 has an invalid length.
[  166.764601][ T9110] netlink: 'syz.3.1347': attribute type 29 has an invalid length.
[  166.768631][ T9110] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1347'.
[  166.771733][ T9110] unsupported nla_type 58
[  166.850364][ T9116] netlink: 'syz.1.1346': attribute type 1 has an invalid length.
[  166.853855][ T9116] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1346'.
[  167.005948][ T9120] openvswitch: netlink: Flow actions attr not present in new flow.
[  168.207389][ T9137] veth0_vlan: left promiscuous mode
[  168.212976][ T9137] veth0_vlan: entered promiscuous mode
[  168.366879][ T9153] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1366'.
[  168.371321][ T9154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1365'.
[  168.526045][ T9164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1369'.
[  168.588726][ T9169] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1372'.
[  169.055846][ T9212] netlink: 'syz.2.1390': attribute type 1 has an invalid length.
[  169.969892][ T9271] netlink: 'syz.1.1408': attribute type 7 has an invalid length.
[  169.972914][ T9271] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1408'.
[  170.268862][ T9278] netlink: 'syz.1.1411': attribute type 10 has an invalid length.
[  170.278659][ T9278] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1411'.
[  170.338804][ T9280] pim6reg0: tun_chr_ioctl cmd 1074025681
[  170.965111][   T54] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  174.427995][ T9351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1445'.
[  174.438645][ T9351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1445'.
[  174.534270][ T9363] netlink: 'syz.3.1450': attribute type 1 has an invalid length.
[  174.537011][ T9363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.781262][ T9383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.784656][ T9383] IPv6: NLM_F_CREATE should be set when creating new route
[  174.788258][ T9383] IPv6: NLM_F_CREATE should be set when creating new route
[  175.181666][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1472'.
[  176.605785][ T9419] netlink: 'syz.3.1476': attribute type 29 has an invalid length.
[  176.622771][ T9419] netlink: 'syz.3.1476': attribute type 29 has an invalid length.
[  176.766931][ T9422] netlink: 'syz.3.1476': attribute type 29 has an invalid length.
[  176.771470][ T9424] netlink: 'syz.3.1476': attribute type 29 has an invalid length.
[  176.837363][ T9428] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1479'.
[  176.939558][ T9429] siw: device registration error -23
[  176.944400][ T9429] smc: removing ib device syz1
[  177.170089][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'.
[  177.739819][ T9451] pim6reg: tun_chr_ioctl cmd 1074025677
[  177.749605][ T9451] pim6reg: linktype set to 805
[  177.866870][ T9456] netlink: 'syz.3.1490': attribute type 2 has an invalid length.
[  178.479999][ T5237] Bluetooth: hci1: unexpected event 0x18 length: 151 > 23
[  178.772944][ T9492] siw: device registration error -23
[  178.907113][ T9501] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1511'.
[  179.017139][ T9503] netlink: 'syz.2.1512': attribute type 7 has an invalid length.
[  179.387993][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'.
[  179.506873][ T9531] netlink: 'syz.2.1525': attribute type 29 has an invalid length.
[  180.081733][ T5237] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  180.747587][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'.
[  181.228033][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  181.488570][ T9653] netlink: 'syz.2.1582': attribute type 21 has an invalid length.
[  181.494142][ T9653] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1582'.
[  181.634362][ T9659] netlink: 'syz.2.1585': attribute type 11 has an invalid length.
[  181.637079][ T9659] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1585'.
[  181.860623][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'.
[  181.887488][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'.
[  182.076706][ T9664] netlink: 'syz.1.1587': attribute type 10 has an invalid length.
[  182.101056][ T9671] netlink: 'syz.2.1590': attribute type 10 has an invalid length.
[  182.104705][ T9671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1590'.
[  182.108876][ T9671] batadv0: entered promiscuous mode
[  182.111214][ T9671] batadv0: entered allmulticast mode
[  182.129936][ T9671] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  182.143316][ T9673] netlink: 'syz.3.1591': attribute type 11 has an invalid length.
[  182.172100][ T5237] Bluetooth: hci1: command tx timeout
[  182.257706][ T9683] netlink: 'syz.3.1595': attribute type 5 has an invalid length.
[  182.288865][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1596'.
[  182.297571][ T9686] netlink: 'syz.3.1597': attribute type 3 has an invalid length.
[  182.369392][ T9693] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1600'.
[  182.837820][ T9727] netlink: 'syz.2.1616': attribute type 1 has an invalid length.
[  182.841156][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1616'.
[  182.846085][ T9727] netlink: 'syz.2.1616': attribute type 1 has an invalid length.
[  183.066827][ T9735] netlink: 'syz.3.1619': attribute type 10 has an invalid length.
[  183.131548][ T9735] 8021q: adding VLAN 0 to HW filter on device team0
[  183.180954][ T9735] bond0: (slave team0): Enslaving as an active interface with an up link
[  183.601272][ T9757] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1629'.
[  183.737003][ T9767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1634'.
[  184.006269][ T9786] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1637'.
[  184.140416][ T9790] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.1643'.
[  184.155775][ T9790] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ecN^{is|ؖS
[  184.286333][ T9800] syzkaller0: entered promiscuous mode
[  184.288241][ T9800] syzkaller0: entered allmulticast mode
[  184.416791][ T9811] netlink: 'syz.3.1653': attribute type 4 has an invalid length.
[  184.709691][ T9822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.845807][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  185.848122][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  186.669966][ T9857] netlink: 'syz.1.1671': attribute type 9 has an invalid length.
[  186.884868][ T9875] __nla_validate_parse: 2 callbacks suppressed
[  186.884880][ T9875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1680'.
[  188.471124][ T9904] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  188.774659][ T9916] syzkaller0: entered promiscuous mode
[  188.777015][ T9916] syzkaller0: entered allmulticast mode
[  188.968222][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'.
[  188.973716][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'.
[  189.187589][ T9948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1710'.
[  189.363219][ T9966] : renamed from gre0 (while UP)
[  189.413845][ T9972] netlink: 'syz.1.1719': attribute type 1 has an invalid length.
[  189.417302][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'.
[  189.981396][ T9981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1723'.
[  190.364357][ T9989] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1727'.
[  190.616478][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1730'.
[  190.918557][T10004] cgroup: fork rejected by pids controller in /syz2
[  191.064879][T10013] ==================================================================
[  191.068225][T10013] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  191.071331][T10013] Read of size 4 at addr ffff88810dc0edc4 by task syz.3.1737/10013
[  191.075515][T10013] 
[  191.076607][T10013] CPU: 0 UID: 0 PID: 10013 Comm: syz.3.1737 Not tainted syzkaller #0 PREEMPT(full) 
[  191.076623][T10013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.076632][T10013] Call Trace:
[  191.076639][T10013]  <TASK>
[  191.076647][T10013]  dump_stack_lvl+0x189/0x250
[  191.076666][T10013]  ? __kasan_check_byte+0x12/0x40
[  191.076687][T10013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.076702][T10013]  ? lock_release+0x4b/0x3e0
[  191.076723][T10013]  ? __virt_addr_valid+0x4a5/0x5c0
[  191.076740][T10013]  print_report+0xca/0x240
[  191.076752][T10013]  ? xfrm_alloc_spi+0x570/0xf30
[  191.076769][T10013]  kasan_report+0x118/0x150
[  191.076786][T10013]  ? xfrm_alloc_spi+0x570/0xf30
[  191.076805][T10013]  xfrm_alloc_spi+0x570/0xf30
[  191.076819][T10013]  ? xfrm_alloc_spi+0x2a0/0xf30
[  191.076838][T10013]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  191.076853][T10013]  ? xfrm_find_acq+0x87/0xa0
[  191.076870][T10013]  xfrm_alloc_userspi+0x70b/0xc90
[  191.076892][T10013]  ? apparmor_capable+0x137/0x1b0
[  191.076907][T10013]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  191.076924][T10013]  ? __nla_parse+0x40/0x60
[  191.076938][T10013]  xfrm_user_rcv_msg+0x7a3/0xab0
[  191.076957][T10013]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  191.076982][T10013]  ? __pfx___mutex_trylock_common+0x10/0x10
[  191.076997][T10013]  ? rcu_is_watching+0x15/0xb0
[  191.077010][T10013]  ? trace_contention_end+0x39/0x120
[  191.077023][T10013]  ? __mutex_lock+0x335/0x1350
[  191.077041][T10013]  netlink_rcv_skb+0x208/0x470
[  191.077054][T10013]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  191.077072][T10013]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.077088][T10013]  ? netlink_deliver_tap+0x2e/0x1b0
[  191.077101][T10013]  ? netlink_deliver_tap+0x2e/0x1b0
[  191.077113][T10013]  xfrm_netlink_rcv+0x79/0x90
[  191.077130][T10013]  netlink_unicast+0x82f/0x9e0
[  191.077149][T10013]  ? __pfx_netlink_unicast+0x10/0x10
[  191.077167][T10013]  ? netlink_sendmsg+0x642/0xb30
[  191.077179][T10013]  ? skb_put+0x11b/0x210
[  191.077195][T10013]  netlink_sendmsg+0x805/0xb30
[  191.077210][T10013]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.077223][T10013]  ? aa_sock_msg_perm+0xf1/0x1d0
[  191.077236][T10013]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.077249][T10013]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.077263][T10013]  __sock_sendmsg+0x21c/0x270
[  191.077281][T10013]  ____sys_sendmsg+0x505/0x830
[  191.077298][T10013]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.077314][T10013]  ? import_iovec+0x74/0xa0
[  191.077331][T10013]  ___sys_sendmsg+0x21f/0x2a0
[  191.077347][T10013]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.077372][T10013]  ? __fget_files+0x2a/0x420
[  191.077383][T10013]  ? __fget_files+0x3a0/0x420
[  191.077395][T10013]  __x64_sys_sendmsg+0x19b/0x260
[  191.077409][T10013]  ? perf_trace_run_bpf_submit+0x100/0x170
[  191.077422][T10013]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.077439][T10013]  ? rcu_is_watching+0x15/0xb0
[  191.077453][T10013]  ? do_syscall_64+0xbe/0x3b0
[  191.077468][T10013]  do_syscall_64+0xfa/0x3b0
[  191.077481][T10013]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.077502][T10013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.077517][T10013]  ? exc_page_fault+0x9f/0xf0
[  191.077530][T10013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.077542][T10013] RIP: 0033:0x7f6d95f8ec29
[  191.077556][T10013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.077567][T10013] RSP: 002b:00007f6d96dd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.077610][T10013] RAX: ffffffffffffffda RBX: 00007f6d961d5fa0 RCX: 00007f6d95f8ec29
[  191.077619][T10013] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  191.077629][T10013] RBP: 00007f6d96011e41 R08: 0000000000000000 R09: 0000000000000000
[  191.077636][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.077644][T10013] R13: 00007f6d961d6038 R14: 00007f6d961d5fa0 R15: 00007ffd9dc74d88
[  191.077659][T10013]  </TASK>
[  191.077664][T10013] 
[  191.239418][T10013] Allocated by task 9911:
[  191.241388][T10013]  kasan_save_track+0x3e/0x80
[  191.243437][T10013]  __kasan_slab_alloc+0x6c/0x80
[  191.245562][T10013]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  191.247857][T10013]  xfrm_state_alloc+0x24/0x2f0
[  191.249896][T10013]  __find_acq_core+0x8a7/0x1c00
[  191.251984][T10013]  xfrm_find_acq+0x78/0xa0
[  191.253881][T10013]  xfrm_alloc_userspi+0x6b3/0xc90
[  191.256066][T10013]  xfrm_user_rcv_msg+0x7a3/0xab0
[  191.258193][T10013]  netlink_rcv_skb+0x208/0x470
[  191.260251][T10013]  xfrm_netlink_rcv+0x79/0x90
[  191.262217][T10013]  netlink_unicast+0x82f/0x9e0
[  191.264250][T10013]  netlink_sendmsg+0x805/0xb30
[  191.266304][T10013]  __sock_sendmsg+0x21c/0x270
[  191.268268][T10013]  ____sys_sendmsg+0x505/0x830
[  191.270313][T10013]  ___sys_sendmsg+0x21f/0x2a0
[  191.272159][T10013]  __x64_sys_sendmsg+0x19b/0x260
[  191.274265][T10013]  do_syscall_64+0xfa/0x3b0
[  191.276227][T10013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.278751][T10013] 
[  191.279797][T10013] Freed by task 5314:
[  191.281510][T10013]  kasan_save_track+0x3e/0x80
[  191.283541][T10013]  kasan_save_free_info+0x46/0x50
[  191.285726][T10013]  __kasan_slab_free+0x5b/0x80
[  191.287780][T10013]  kmem_cache_free+0x18f/0x400
[  191.289823][T10013]  xfrm_state_gc_task+0x52d/0x6b0
[  191.291930][T10013]  process_scheduled_works+0xae1/0x17b0
[  191.294176][T10013]  worker_thread+0x8a0/0xda0
[  191.296054][T10013]  kthread+0x711/0x8a0
[  191.297752][T10013]  ret_from_fork+0x439/0x7d0
[  191.299635][T10013]  ret_from_fork_asm+0x1a/0x30
[  191.301657][T10013] 
[  191.302667][T10013] The buggy address belongs to the object at ffff88810dc0ed00
[  191.302667][T10013]  which belongs to the cache xfrm_state of size 928
[  191.308449][T10013] The buggy address is located 196 bytes inside of
[  191.308449][T10013]  freed 928-byte region [ffff88810dc0ed00, ffff88810dc0f0a0)
[  191.314106][T10013] 
[  191.315149][T10013] The buggy address belongs to the physical page:
[  191.317832][T10013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810dc0d680 pfn:0x10dc0c
[  191.321950][T10013] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  191.325462][T10013] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  191.328686][T10013] page_type: f5(slab)
[  191.330387][T10013] raw: 057ff00000000040 ffff888104f97780 dead000000000122 0000000000000000
[  191.334024][T10013] raw: ffff88810dc0d680 00000000800e0008 00000000f5000000 0000000000000000
[  191.337554][T10013] head: 057ff00000000040 ffff888104f97780 dead000000000122 0000000000000000
[  191.341212][T10013] head: ffff88810dc0d680 00000000800e0008 00000000f5000000 0000000000000000
[  191.344834][T10013] head: 057ff00000000002 ffffea0004370301 00000000ffffffff 00000000ffffffff
[  191.348436][T10013] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  191.352061][T10013] page dumped because: kasan: bad access detected
[  191.354726][T10013] page_owner tracks the page as allocated
[  191.357146][T10013] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6414, tgid 6413 (syz.2.214), ts 81819414506, free_ts 67432237852
[  191.364904][T10013]  post_alloc_hook+0x240/0x2a0
[  191.366832][T10013]  get_page_from_freelist+0x21e4/0x22c0
[  191.369061][T10013]  __alloc_frozen_pages_noprof+0x181/0x370
[  191.371539][T10013]  alloc_pages_mpol+0x232/0x4a0
[  191.373658][T10013]  allocate_slab+0x8a/0x370
[  191.375490][T10013]  ___slab_alloc+0xbeb/0x1420
[  191.377518][T10013]  kmem_cache_alloc_noprof+0x283/0x3c0
[  191.379850][T10013]  xfrm_state_alloc+0x24/0x2f0
[  191.381846][T10013]  __find_acq_core+0x8a7/0x1c00
[  191.383767][T10013]  xfrm_find_acq+0x78/0xa0
[  191.385676][T10013]  pfkey_getspi+0x65d/0xee0
[  191.387760][T10013]  pfkey_sendmsg+0xbfe/0x1090
[  191.389852][T10013]  __sock_sendmsg+0x21c/0x270
[  191.392120][T10013]  ____sys_sendmsg+0x505/0x830
[  191.394409][T10013]  ___sys_sendmsg+0x21f/0x2a0
[  191.396470][T10013]  __x64_sys_sendmsg+0x19b/0x260
[  191.398641][T10013] page last free pid 5314 tgid 5314 stack trace:
[  191.401327][T10013]  __free_frozen_pages+0xbc4/0xd30
[  191.403569][T10013]  __slab_free+0x303/0x3c0
[  191.405511][T10013]  qlist_free_all+0x97/0x140
[  191.407536][T10013]  kasan_quarantine_reduce+0x148/0x160
[  191.409864][T10013]  __kasan_slab_alloc+0x22/0x80
[  191.412084][T10013]  __kmalloc_cache_noprof+0x1be/0x3d0
[  191.414417][T10013]  nsim_fib_event_work+0x1174/0x3180
[  191.416720][T10013]  process_scheduled_works+0xae1/0x17b0
[  191.419105][T10013]  worker_thread+0x8a0/0xda0
[  191.421102][T10013]  kthread+0x711/0x8a0
[  191.422759][T10013]  ret_from_fork+0x439/0x7d0
[  191.424754][T10013]  ret_from_fork_asm+0x1a/0x30
[  191.426828][T10013] 
[  191.427879][T10013] Memory state around the buggy address:
[  191.430277][T10013]  ffff88810dc0ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  191.433719][T10013]  ffff88810dc0ed00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.437135][T10013] >ffff88810dc0ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.440533][T10013]                                            ^
[  191.443180][T10013]  ffff88810dc0ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.446614][T10013]  ffff88810dc0ee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.450017][T10013] ==================================================================
[  191.453666][T10013] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  191.456676][T10013] CPU: 0 UID: 0 PID: 10013 Comm: syz.3.1737 Not tainted syzkaller #0 PREEMPT(full) 
[  191.460613][T10013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.464885][T10013] Call Trace:
[  191.466295][T10013]  <TASK>
[  191.467600][T10013]  dump_stack_lvl+0x99/0x250
[  191.469616][T10013]  ? __asan_memcpy+0x40/0x70
[  191.471637][T10013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.473900][T10013]  ? __pfx__printk+0x10/0x10
[  191.476078][T10013]  vpanic+0x281/0x750
[  191.477869][T10013]  ? __pfx_vpanic+0x10/0x10
[  191.479869][T10013]  ? irqentry_exit+0x74/0x90
[  191.481890][T10013]  panic+0xb9/0xc0
[  191.483527][T10013]  ? __pfx_panic+0x10/0x10
[  191.485406][T10013]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  191.487982][T10013]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  191.490529][T10013]  ? xfrm_alloc_spi+0x570/0xf30
[  191.492635][T10013]  check_panic_on_warn+0x89/0xb0
[  191.494808][T10013]  ? xfrm_alloc_spi+0x570/0xf30
[  191.496919][T10013]  end_report+0x78/0x160
[  191.498768][T10013]  kasan_report+0x129/0x150
[  191.500738][T10013]  ? xfrm_alloc_spi+0x570/0xf30
[  191.502861][T10013]  xfrm_alloc_spi+0x570/0xf30
[  191.504845][T10013]  ? xfrm_alloc_spi+0x2a0/0xf30
[  191.506469][T10013]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  191.508223][T10013]  ? xfrm_find_acq+0x87/0xa0
[  191.510059][T10013]  xfrm_alloc_userspi+0x70b/0xc90
[  191.511862][T10013]  ? apparmor_capable+0x137/0x1b0
[  191.513756][T10013]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  191.515616][T10013]  ? __nla_parse+0x40/0x60
[  191.517142][T10013]  xfrm_user_rcv_msg+0x7a3/0xab0
[  191.519013][T10013]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  191.521174][T10013]  ? __pfx___mutex_trylock_common+0x10/0x10
[  191.523403][T10013]  ? rcu_is_watching+0x15/0xb0
[  191.525449][T10013]  ? trace_contention_end+0x39/0x120
[  191.527607][T10013]  ? __mutex_lock+0x335/0x1350
[  191.529233][T10013]  netlink_rcv_skb+0x208/0x470
[  191.530840][T10013]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  191.532639][T10013]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.534813][T10013]  ? netlink_deliver_tap+0x2e/0x1b0
[  191.536708][T10013]  ? netlink_deliver_tap+0x2e/0x1b0
[  191.538663][T10013]  xfrm_netlink_rcv+0x79/0x90
[  191.540365][T10013]  netlink_unicast+0x82f/0x9e0
[  191.541978][T10013]  ? __pfx_netlink_unicast+0x10/0x10
[  191.543774][T10013]  ? netlink_sendmsg+0x642/0xb30
[  191.545443][T10013]  ? skb_put+0x11b/0x210
[  191.546874][T10013]  netlink_sendmsg+0x805/0xb30
[  191.548609][T10013]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.550862][T10013]  ? aa_sock_msg_perm+0xf1/0x1d0
[  191.552601][T10013]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.554324][T10013]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.555983][T10013]  __sock_sendmsg+0x21c/0x270
[  191.557476][T10013]  ____sys_sendmsg+0x505/0x830
[  191.559192][T10013]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.560949][T10013]  ? import_iovec+0x74/0xa0
[  191.562484][T10013]  ___sys_sendmsg+0x21f/0x2a0
[  191.564393][T10013]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.566165][T10013]  ? __fget_files+0x2a/0x420
[  191.567726][T10013]  ? __fget_files+0x3a0/0x420
[  191.569301][T10013]  __x64_sys_sendmsg+0x19b/0x260
[  191.570984][T10013]  ? perf_trace_run_bpf_submit+0x100/0x170
[  191.572981][T10013]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.575249][T10013]  ? rcu_is_watching+0x15/0xb0
[  191.577235][T10013]  ? do_syscall_64+0xbe/0x3b0
[  191.579144][T10013]  do_syscall_64+0xfa/0x3b0
[  191.580609][T10013]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.582370][T10013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.584485][T10013]  ? exc_page_fault+0x9f/0xf0
[  191.586312][T10013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.588483][T10013] RIP: 0033:0x7f6d95f8ec29
[  191.589969][T10013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.596647][T10013] RSP: 002b:00007f6d96dd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.599785][T10013] RAX: ffffffffffffffda RBX: 00007f6d961d5fa0 RCX: 00007f6d95f8ec29
[  191.602971][T10013] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  191.605868][T10013] RBP: 00007f6d96011e41 R08: 0000000000000000 R09: 0000000000000000
[  191.609069][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.612323][T10013] R13: 00007f6d961d6038 R14: 00007f6d961d5fa0 R15: 00007ffd9dc74d88
[  191.615603][T10013]  </TASK>
[  191.617645][T10013] Kernel Offset: disabled
[  191.619524][T10013] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:11:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001361 RDI=0000000000001362 RBP=00000000000003f8 RSP=ffffc90006ef69f0
R8 =ffff888107610237 R9 =1ffff11020ec2046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008ee R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6d96dd36c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000500 CR3=000000003bd8c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6d961a7498 00007f6d961a7470 XMM03=00007f6d961a74a8 00007f6d961a74a0
XMM04=00007f6d96d0d100 00007f6d961a7460 XMM05=00007f6d961a7478 00007f6d961a74c0
XMM06=00007f6d961a74b8 00007f6d961a74b0 XMM07=00007f6d961a74a8 00007f6d961a74a0
XMM08=0000000000000000 00007f6d96012f0f XMM09=0000000000000000 00007f6d96012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11022a7f68d RBX=ffff888136639f80 RCX=e61aa3ed761cca00 RDX=0000000000000001
RSI=ffff8880228e0000 RDI=ffff888136639f80 RBP=ffff8881152fd4a0 RSP=ffffc900036bf4c0
R8 =ffffffff8fa3a637 R9 =1ffffffff1f474c6 R10=dffffc0000000000 R11=fffffbfff1f474c7
R12=ffff8881153fb4a0 R13=ffff88813663a040 R14=ffff8880228e0000 R15=ffff8881153fb400
RIP=ffffffff8193a478 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555909f1500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffeb6747b78 CR3=000000010ef4a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9b40012e7b
XMM06=0000000000000000 00007f9b40012e75 XMM07=0000000000000000 00007f9b40012e89
XMM08=0000000000000000 00007f9b40012f0f XMM09=0000000000000000 00007f9b40012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
