last executing test programs:

1.990971265s ago: executing program 1 (id=2305):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x20006891)

1.930027403s ago: executing program 1 (id=2307):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0a", 0x22}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x3f, 0x70bd2d, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x4, 0x1, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x68}}, 0x10)

1.799506935s ago: executing program 1 (id=2310):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000480)=""/209, 0x8f, 0xd1, 0x0, 0x6, 0x10000}, 0x28)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r0 = syz_clone(0x2010080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)="a1173622088774d938e4a199e0b1f798c27083bf7c08260baea1af0ae361a54525f0e3bfc12c490c4ef2d5660ee34cd9744fc4f12942b9780d55")
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x0, 0x2, 0xfffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x40, 0x10, 0x80, 0x8, 0x0, 0x8, 0x20002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xa, 0x1}, 0x109002, 0x140000000000000, 0x8, 0x2, 0x9, 0x0, 0x8, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x73)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000012c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r2 = socket$kcm(0x15, 0x5, 0x0)
close(r2)

1.740077594s ago: executing program 0 (id=2311):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800)

1.739705796s ago: executing program 1 (id=2312):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="970000ffffff6fbeffffff00ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff0000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef3}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x801, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19)
r10 = socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r9, 0x3, 0x2, 0x4}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12)
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x84, 0x23, &(0x7f0000000000)=r13, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000006c0)=r5}, 0x20)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x38, r9, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})

1.680541718s ago: executing program 0 (id=2313):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_lifetime={0x4, 0x4, 0xcc81, 0x8, 0x1, 0x6}]}, 0x98}, 0x1, 0x7}, 0x0)

1.61060023s ago: executing program 0 (id=2314):
socket$kcm(0x29, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c00", 0x6}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003300010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800ffff0016afe7363badca07000000d600002200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000080))

1.300464362s ago: executing program 2 (id=2316):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

1.230686678s ago: executing program 2 (id=2317):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb41000e"], &(0x7f0000000980)=""/4096, 0x28, 0x1000, 0x1, 0x1}, 0x28)

1.230204191s ago: executing program 2 (id=2318):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="85000000ae00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

1.159722234s ago: executing program 2 (id=2319):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x2b, 0x1, 0x0)
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040000000c2000000", @ANYRES32], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x40000000005, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)

1.116014426s ago: executing program 2 (id=2320):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
syz_clone(0x25200000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb)

129.487485ms ago: executing program 1 (id=2321):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0xa}}, &(0x7f00000006c0)='GPL\x00', 0x9, 0x32, &(0x7f0000000700)=""/50}, 0x90)

129.221379ms ago: executing program 1 (id=2322):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)="bb47b477b93acd189a07a68abfa480953ab8f36fb5891fe5028435ad2c009b770005aee1a759a9c3f418cad8", 0x2c}, {0x0}], 0x2}, 0x14000080)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

128.913066ms ago: executing program 2 (id=2323):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="6a03e63a4905f8e8dc01cf21f8f7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200040c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00'}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

30.730199ms ago: executing program 0 (id=2324):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100003", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

30.239721ms ago: executing program 0 (id=2325):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c880)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

0s ago: executing program 0 (id=2326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x19)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37997' (ED25519) to the list of known hosts.
syzkaller login: [   56.769135][ T5839] cgroup: Unknown subsys name 'net'
[   56.899082][ T5839] cgroup: Unknown subsys name 'cpuset'
[   56.904806][ T5839] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.679127][ T5839] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.822598][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.825815][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.829267][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.833137][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.833440][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.836072][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.840964][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.841186][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.847293][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.850238][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.887432][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.890823][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.893635][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.897014][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.899641][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.213046][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.273966][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.316337][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   64.421744][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.427310][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.430386][ T5854] bridge_slave_0: entered allmulticast mode
[   64.434761][ T5854] bridge_slave_0: entered promiscuous mode
[   64.458470][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.461468][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.466658][ T5854] bridge_slave_1: entered allmulticast mode
[   64.470481][ T5854] bridge_slave_1: entered promiscuous mode
[   64.544065][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.546941][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.549756][ T5855] bridge_slave_0: entered allmulticast mode
[   64.554957][ T5855] bridge_slave_0: entered promiscuous mode
[   64.575401][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.579104][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.582012][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.585543][ T5855] bridge_slave_1: entered allmulticast mode
[   64.589342][ T5855] bridge_slave_1: entered promiscuous mode
[   64.605756][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.608784][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.611889][ T5864] bridge_slave_0: entered allmulticast mode
[   64.616627][ T5864] bridge_slave_0: entered promiscuous mode
[   64.621341][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.625176][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.628291][ T5864] bridge_slave_1: entered allmulticast mode
[   64.632713][ T5864] bridge_slave_1: entered promiscuous mode
[   64.638671][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.688209][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.724361][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.730246][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.737676][ T5854] team0: Port device team_slave_0 added
[   64.770294][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.788745][ T5854] team0: Port device team_slave_1 added
[   64.793094][ T5855] team0: Port device team_slave_0 added
[   64.822701][ T5855] team0: Port device team_slave_1 added
[   64.840174][ T5864] team0: Port device team_slave_0 added
[   64.851450][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.854444][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.865147][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.871397][ T5864] team0: Port device team_slave_1 added
[   64.890096][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.893069][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.904958][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.922956][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.925419][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.934768][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.946866][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.949580][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.959949][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.965562][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.968071][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.978119][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.984398][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.987149][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.997220][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.043565][ T5854] hsr_slave_0: entered promiscuous mode
[   65.046591][ T5854] hsr_slave_1: entered promiscuous mode
[   65.109287][ T5855] hsr_slave_0: entered promiscuous mode
[   65.112769][ T5855] hsr_slave_1: entered promiscuous mode
[   65.115357][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.117425][ T5855] Cannot create hsr debugfs directory
[   65.157682][ T5864] hsr_slave_0: entered promiscuous mode
[   65.160135][ T5864] hsr_slave_1: entered promiscuous mode
[   65.164035][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[   65.166395][ T5864] Cannot create hsr debugfs directory
[   65.465031][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.474480][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.479979][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.501282][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.537579][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.556795][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.575459][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.595950][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.629485][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.636861][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.648519][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.661996][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.788970][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.814580][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.831979][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.844012][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.851522][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.854013][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.863532][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   65.875441][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.878445][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.884305][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.887208][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.902687][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.905403][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.914296][ T5862] Bluetooth: hci2: command tx timeout
[   65.916586][ T5862] Bluetooth: hci1: command tx timeout
[   65.918789][ T5862] Bluetooth: hci0: command tx timeout
[   65.929348][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.955557][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.958496][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.989099][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.991658][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.156775][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.195935][ T5854] veth0_vlan: entered promiscuous mode
[   66.205093][ T5854] veth1_vlan: entered promiscuous mode
[   66.268261][ T5854] veth0_macvtap: entered promiscuous mode
[   66.286863][ T5854] veth1_macvtap: entered promiscuous mode
[   66.297460][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.315897][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.327402][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.348213][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.359755][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.366188][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.369774][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.403762][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.440159][ T5855] veth0_vlan: entered promiscuous mode
[   66.462656][ T5855] veth1_vlan: entered promiscuous mode
[   66.496675][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.499641][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.513445][ T5864] veth0_vlan: entered promiscuous mode
[   66.549556][ T5855] veth0_macvtap: entered promiscuous mode
[   66.553334][ T5864] veth1_vlan: entered promiscuous mode
[   66.556133][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.559070][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.565604][ T5855] veth1_macvtap: entered promiscuous mode
[   66.598001][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.603388][ T5864] veth0_macvtap: entered promiscuous mode
[   66.609333][ T5864] veth1_macvtap: entered promiscuous mode
[   66.616910][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.629457][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.639471][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.648210][ T5885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.655296][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.657961][ T5885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.661442][ T5885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.673848][ T5885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.682472][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.697464][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.700225][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.715427][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.810944][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.814982][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.835268][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.837903][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.882412][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.884321][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.885469][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.893576][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.245825][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.293719][    C0] hrtimer: interrupt took 82235 ns
[   67.788969][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'.
[   67.826109][ T5947] netlink: 'syz.2.11': attribute type 10 has an invalid length.
[   67.831283][ T5947] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11'.
[   67.863694][ T5954] netlink: 'syz.0.12': attribute type 10 has an invalid length.
[   67.880523][ T5954] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   67.888137][ T5956] netlink: 'syz.2.11': attribute type 4 has an invalid length.
[   67.896065][ T5947] bond0: entered promiscuous mode
[   67.898198][ T5947] bond_slave_0: entered promiscuous mode
[   67.900456][ T5947] bond_slave_1: entered promiscuous mode
[   67.904907][ T5956] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11'.
[   67.906537][ T5947] bridge0: port 3(bond0) entered blocking state
[   67.910780][ T5947] bridge0: port 3(bond0) entered disabled state
[   67.923081][ T5947] bond0: entered allmulticast mode
[   67.924744][ T5947] bond_slave_0: entered allmulticast mode
[   67.933092][ T5947] bond_slave_1: entered allmulticast mode
[   67.937947][ T5947] bridge0: port 3(bond0) entered blocking state
[   67.940713][ T5947] bridge0: port 3(bond0) entered forwarding state
[   67.993525][   T55] Bluetooth: hci0: command tx timeout
[   67.995631][   T55] Bluetooth: hci1: command tx timeout
[   67.997641][   T55] Bluetooth: hci2: command tx timeout
[   68.221011][ T5965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.727831][ T5984] netlink: 124 bytes leftover after parsing attributes in process `syz.1.29'.
[   68.730658][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29'.
[   69.104893][ T6009] netlink: 'syz.2.41': attribute type 21 has an invalid length.
[   69.108214][ T6009] netlink: 'syz.2.41': attribute type 1 has an invalid length.
[   69.140216][ T6010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.232973][ T6014] netlink: 'syz.1.43': attribute type 21 has an invalid length.
[   69.236239][ T6014] netlink: 168 bytes leftover after parsing attributes in process `syz.1.43'.
[   69.295757][ T5855] cgroup: fork rejected by pids controller in /syz2
[   69.386511][ T6019] =======================================================
[   69.386511][ T6019] WARNING: The mand mount option has been deprecated and
[   69.386511][ T6019]          and is ignored by this kernel. Remove the mand
[   69.386511][ T6019]          option from the mount to silence this warning.
[   69.386511][ T6019] =======================================================
[   69.389622][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.45'.
[   69.410392][ T6020] openvswitch: netlink: EtherType 0 is less than min 600
[   69.507427][ T6021] Zero length message leads to an empty skb
[   70.083040][ T5862] Bluetooth: hci2: command tx timeout
[   70.083264][   T55] Bluetooth: hci0: command tx timeout
[   70.356665][ T6033] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.52'.
[   70.470867][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.530081][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.560221][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.665834][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.770454][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.897658][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.900925][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.906392][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.917914][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.922215][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.069922][   T13] bond0: left allmulticast mode
[   71.072689][   T13] bond_slave_0: left allmulticast mode
[   71.074695][   T13] bond_slave_1: left allmulticast mode
[   71.077975][   T13] bridge0: port 3(bond0) entered disabled state
[   71.091579][   T13] bridge_slave_1: left allmulticast mode
[   71.098164][   T13] bridge_slave_1: left promiscuous mode
[   71.100205][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.106578][   T13] bridge_slave_0: left allmulticast mode
[   71.109037][   T13] bridge_slave_0: left promiscuous mode
[   71.111036][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.366578][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.369958][   T13] bond_slave_0: left promiscuous mode
[   71.376022][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.379482][   T13] bond_slave_1: left promiscuous mode
[   71.382497][   T13] bond0 (unregistering): Released all slaves
[   71.447543][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.455407][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.678358][ T6046] chnl_net:caif_netlink_parms(): no params data found
[   71.788685][   T13] hsr_slave_0: left promiscuous mode
[   71.793963][   T13] hsr_slave_1: left promiscuous mode
[   71.796842][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.799760][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.807214][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.810240][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.854446][   T13] veth1_macvtap: left promiscuous mode
[   71.858898][   T13] veth0_macvtap: left promiscuous mode
[   71.861395][   T13] veth1_vlan: left promiscuous mode
[   71.866476][   T13] veth0_vlan: left promiscuous mode
[   72.153639][   T55] Bluetooth: hci2: command tx timeout
[   72.163215][   T55] Bluetooth: hci0: command tx timeout
[   72.258769][   T13] team0 (unregistering): Port device team_slave_1 removed
[   72.291651][   T13] team0 (unregistering): Port device team_slave_0 removed
[   72.623870][ T6097] openvswitch: netlink: Flow key attr not present in new flow.
[   72.891699][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.902740][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.905834][ T6046] bridge_slave_0: entered allmulticast mode
[   72.909620][ T6046] bridge_slave_0: entered promiscuous mode
[   72.927448][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.934691][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.962459][ T6046] bridge_slave_1: entered allmulticast mode
[   72.963924][   T55] Bluetooth: hci1: command tx timeout
[   72.966122][ T6046] bridge_slave_1: entered promiscuous mode
[   73.115552][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.130731][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.280259][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'.
[   73.309875][ T6046] team0: Port device team_slave_0 added
[   73.327064][ T6046] team0: Port device team_slave_1 added
[   73.441869][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.447314][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.487757][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.513500][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.516614][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.530388][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.605697][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'.
[   73.648751][ T6046] hsr_slave_0: entered promiscuous mode
[   73.654102][ T6046] hsr_slave_1: entered promiscuous mode
[   73.657071][ T6046] debugfs: 'hsr0' already exists in 'hsr'
[   73.659370][ T6046] Cannot create hsr debugfs directory
[   73.741568][ T6135] netlink: 'syz.1.80': attribute type 21 has an invalid length.
[   74.863161][ T6174] netlink: 'syz.1.89': attribute type 29 has an invalid length.
[   74.943872][ T6046] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.981346][ T6046] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.993166][ T6046] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.998184][ T6046] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.032336][   T55] Bluetooth: hci1: command tx timeout
[   75.123313][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.155739][ T6046] 8021q: adding VLAN 0 to HW filter on device team0
[   75.169364][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.171678][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.189254][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.191570][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.434175][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.102'.
[   75.442739][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.102'.
[   75.489653][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.546475][ T6046] veth0_vlan: entered promiscuous mode
[   75.566449][ T6046] veth1_vlan: entered promiscuous mode
[   75.589579][ T6046] veth0_macvtap: entered promiscuous mode
[   75.597064][ T6046] veth1_macvtap: entered promiscuous mode
[   75.609178][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.617496][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.625160][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.636180][ T6079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.639275][ T6079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.642441][ T6079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.724093][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.726627][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.741662][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'.
[   75.755506][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.757974][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.014830][ T6261] warning: `syz.1.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.199750][ T6275] netlink: 260 bytes leftover after parsing attributes in process `syz.1.123'.
[   76.221803][ T6275] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   76.238620][ T6279] netlink: 52 bytes leftover after parsing attributes in process `syz.0.125'.
[   76.622639][ T6306] netlink: 825 bytes leftover after parsing attributes in process `syz.1.137'.
[   76.626238][ T6306] netlink: 130144 bytes leftover after parsing attributes in process `syz.1.137'.
[   76.671215][ T6301] netlink: 'syz.2.135': attribute type 9 has an invalid length.
[   76.684091][ T6301] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.135'.
[   76.956663][ T6325] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   76.960221][ T6325] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   76.996193][ T6329] netlink: 'syz.1.143': attribute type 2 has an invalid length.
[   76.998760][ T6329] netlink: 'syz.1.143': attribute type 8 has an invalid length.
[   77.112491][   T55] Bluetooth: hci1: command tx timeout
[   79.192976][   T55] Bluetooth: hci1: command tx timeout
[   79.495478][ T6406] __nla_validate_parse: 1 callbacks suppressed
[   79.495536][ T6406] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.588556][ T6405] netlink: 'syz.2.177': attribute type 33 has an invalid length.
[   79.590956][ T6405] netlink: 152 bytes leftover after parsing attributes in process `syz.2.177'.
[   79.886029][ T6405] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP)
[   79.897701][ T6405] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   80.294911][ T6434] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.188'.
[   80.310571][ T6436] netlink: 'syz.2.189': attribute type 21 has an invalid length.
[   80.314188][ T6436] netlink: 'syz.2.189': attribute type 4 has an invalid length.
[   80.444451][ T6443] netlink: 'syz.0.185': attribute type 10 has an invalid length.
[   80.590836][ T6453] netlink: 'syz.2.197': attribute type 21 has an invalid length.
[   80.737326][ T6459] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.200'.
[   80.921555][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'.
[   81.679245][   T24] cfg80211: failed to load regulatory.db
[   81.812727][ T6484] netlink: 'syz.0.211': attribute type 39 has an invalid length.
[   81.975088][ T6500] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.216'.
[   81.980272][ T6497] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.216'.
[   81.986175][ T6500] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.216'.
[   82.826383][   T55] Bluetooth: hci0: Unable to find connection for big 0x00
[   83.169920][ T6571] netlink: 'syz.1.253': attribute type 21 has an invalid length.
[   83.178509][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[   84.328941][ T6593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.490512][ T6607] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.269'.
[   84.546178][ T6612] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.272'.
[   84.755622][ T6625] Driver unsupported XDP return value 0 on prog  (id 98) dev N/A, expect packet loss!
[   84.804851][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   84.809334][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   84.889704][ T6627] openvswitch: netlink: IP tunnel dst address not specified
[   85.907758][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'.
[   85.931552][   T55] Bluetooth: hci1: Malformed LE Event: 0x0d
[   86.912486][ T6724] netlink: 196 bytes leftover after parsing attributes in process `syz.0.316'.
[   87.040722][ T6737] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   88.121386][ T6772] netlink: 'syz.1.335': attribute type 29 has an invalid length.
[   88.134160][ T6776] nftables ruleset with unbound set
[   88.965011][ T6825] netlink: 'syz.1.359': attribute type 29 has an invalid length.
[   88.968247][ T6825] netlink: 'syz.1.359': attribute type 29 has an invalid length.
[   89.005735][ T6829] netlink: 72 bytes leftover after parsing attributes in process `syz.2.360'.
[   89.021365][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'.
[   89.035199][ T6829] netlink: 'syz.2.360': attribute type 2 has an invalid length.
[   89.040883][ T6829] netlink: 'syz.2.360': attribute type 1 has an invalid length.
[   89.046399][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'.
[   89.076458][ T6833] syzkaller0: entered promiscuous mode
[   89.078693][ T6833] syzkaller0: entered allmulticast mode
[   89.114795][ T6837] syz.2.365 uses obsolete (PF_INET,SOCK_PACKET)
[   89.978815][ T6852] netlink: 'syz.0.371': attribute type 40 has an invalid length.
[   90.108498][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.311216][ T6874] netlink: 'syz.1.381': attribute type 2 has an invalid length.
[   90.314272][ T6874] netlink: 164 bytes leftover after parsing attributes in process `syz.1.381'.
[   90.335169][ T6874] netlink: 'syz.1.381': attribute type 2 has an invalid length.
[   90.338366][ T6874] netlink: 164 bytes leftover after parsing attributes in process `syz.1.381'.
[   90.834282][ T6895] netlink: 'syz.1.389': attribute type 12 has an invalid length.
[   90.837232][ T6895] netlink: 132 bytes leftover after parsing attributes in process `syz.1.389'.
[   91.093490][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'.
[   91.764927][ T6930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.405'.
[   92.792370][ T6938] bridge0: port 3(macsec0) entered blocking state
[   92.794473][ T6938] bridge0: port 3(macsec0) entered disabled state
[   92.796531][ T6938] macsec0: entered allmulticast mode
[   92.798182][ T6938] veth1_macvtap: entered allmulticast mode
[   92.801480][ T6938] macsec0: entered promiscuous mode
[   92.806524][ T6938] bridge0: port 3(macsec0) entered blocking state
[   92.809215][ T6938] bridge0: port 3(macsec0) entered forwarding state
[   92.940128][ T6961] validate_nla: 3 callbacks suppressed
[   92.940162][ T6961] netlink: 'syz.2.420': attribute type 29 has an invalid length.
[   92.950174][ T6961] netlink: 'syz.2.420': attribute type 29 has an invalid length.
[   93.008329][   T55] Bluetooth: hci1: Malformed LE Event: 0x0d
[   93.591083][ T6966] netlink: 'syz.0.422': attribute type 10 has an invalid length.
[   93.800217][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.877958][ T6966] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   93.924470][ T6982] delete_channel: no stack
[   93.926763][ T6982] delete_channel: no stack
[   94.061861][ T6990] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.433'.
[   97.515187][ T7027] netlink: 'syz.0.450': attribute type 2 has an invalid length.
[   97.518144][ T7027] netlink: 116 bytes leftover after parsing attributes in process `syz.0.450'.
[   97.621024][ T7039] netlink: 830 bytes leftover after parsing attributes in process `syz.2.456'.
[   97.679918][ T7043] netlink: 'syz.0.458': attribute type 1 has an invalid length.
[   97.688125][ T7043] netlink: 'syz.0.458': attribute type 4 has an invalid length.
[   97.691485][ T7043] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.458'.
[   97.696293][ T7043] netlink: 'syz.0.458': attribute type 1 has an invalid length.
[   97.701614][ T7043] netlink: 'syz.0.458': attribute type 4 has an invalid length.
[   97.704185][ T7043] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.458'.
[   97.951140][ T7061] netlink: 72 bytes leftover after parsing attributes in process `syz.0.467'.
[   98.282454][ T7064] delete_channel: no stack
[   98.430909][ T7082] netlink: 'syz.0.473': attribute type 16 has an invalid length.
[   98.443054][ T7082] netlink: 156 bytes leftover after parsing attributes in process `syz.0.473'.
[   98.494154][ T7083] netlink: 809 bytes leftover after parsing attributes in process `syz.0.473'.
[   98.496893][ T7083] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.473'.
[   98.500397][ T7083] netlink: 809 bytes leftover after parsing attributes in process `syz.0.473'.
[   99.131424][ T7081] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.474'.
[   99.201206][ T7086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.581664][ T7130] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.210302][ T7167] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  101.274077][ T7174] netlink: 'syz.1.510': attribute type 3 has an invalid length.
[  101.276624][ T7174] netlink: 'syz.1.510': attribute type 3 has an invalid length.
[  104.437750][ T7200] __nla_validate_parse: 1 callbacks suppressed
[  104.437761][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  104.442791][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  104.505962][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'.
[  104.997715][ T7225] netlink: 'syz.0.532': attribute type 1 has an invalid length.
[  105.116643][   T55] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  105.305010][ T7251] netlink: 'syz.0.541': attribute type 10 has an invalid length.
[  105.308248][ T7251] netlink: 55 bytes leftover after parsing attributes in process `syz.0.541'.
[  106.218700][ T7262] netlink: 'syz.1.548': attribute type 9 has an invalid length.
[  106.465866][ T7280] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.556'.
[  106.469285][ T7280] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  106.472404][ T7280] openvswitch: netlink: Message has 6324 unknown bytes.
[  106.490415][ T7282] netlink: 'syz.0.557': attribute type 29 has an invalid length.
[  106.497045][ T7282] netlink: 'syz.0.557': attribute type 29 has an invalid length.
[  106.503486][ T7282] netlink: 'syz.0.557': attribute type 29 has an invalid length.
[  106.546990][ T7282] netlink: 'syz.0.557': attribute type 29 has an invalid length.
[  106.668355][ T7296] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[  106.684659][ T7296] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.564'.
[  106.784533][ T7307] netlink: 7 bytes leftover after parsing attributes in process `syz.1.569'.
[  106.788384][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.569'.
[  106.956069][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'.
[  106.959645][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'.
[  107.329888][ T7346] @: renamed from bond_slave_0 (while UP)
[  107.428447][ T7347] netlink: 'syz.0.586': attribute type 21 has an invalid length.
[  107.459900][ T7347] netlink: 'syz.0.586': attribute type 4 has an invalid length.
[  108.097301][ T7358] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  108.101268][ T7358] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  108.108234][ T7358] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  108.163474][ T7360] syzkaller0: entered promiscuous mode
[  108.165336][ T7360] syzkaller0: entered allmulticast mode
[  110.651290][ T7433] __nla_validate_parse: 3 callbacks suppressed
[  110.651302][ T7433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'.
[  111.248496][ T7463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.259687][ T7463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  112.783420][ T7463] syz.0.640 (7463) used greatest stack depth: 19320 bytes left
[  113.043485][ T7495] validate_nla: 2 callbacks suppressed
[  113.043502][ T7495] netlink: 'syz.2.650': attribute type 7 has an invalid length.
[  113.189623][ T7507] netlink: 22 bytes leftover after parsing attributes in process `syz.2.657'.
[  113.288476][ T7520] syz.0.663: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  113.295839][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.0.663 Not tainted syzkaller #0 PREEMPT(full) 
[  113.295858][ T7520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.295867][ T7520] Call Trace:
[  113.295873][ T7520]  <TASK>
[  113.295892][ T7520]  dump_stack_lvl+0x189/0x250
[  113.295916][ T7520]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.295938][ T7520]  ? __pfx__printk+0x10/0x10
[  113.295957][ T7520]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.295973][ T7520]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.295989][ T7520]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  113.296006][ T7520]  warn_alloc+0x214/0x310
[  113.296027][ T7520]  ? stack_depot_save_flags+0x41b/0x860
[  113.296045][ T7520]  ? __pfx_warn_alloc+0x10/0x10
[  113.296065][ T7520]  ? kasan_save_track+0x4f/0x80
[  113.296081][ T7520]  ? xskq_create+0x56/0x170
[  113.296096][ T7520]  ? xsk_init_queue+0xb0/0x110
[  113.296110][ T7520]  ? xsk_setsockopt+0x57b/0x8d0
[  113.296122][ T7520]  ? do_sock_setsockopt+0x17c/0x1b0
[  113.296140][ T7520]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  113.296151][ T7520]  ? do_syscall_64+0xfa/0x3b0
[  113.296167][ T7520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.296186][ T7520]  __vmalloc_node_range_noprof+0x125/0x12f0
[  113.296226][ T7520]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  113.296245][ T7520]  ? xskq_create+0x56/0x170
[  113.296262][ T7520]  ? __kasan_kmalloc+0x93/0xb0
[  113.296281][ T7520]  vmalloc_user_noprof+0xad/0xf0
[  113.296340][ T7520]  ? xskq_create+0xbf/0x170
[  113.296358][ T7520]  xskq_create+0xbf/0x170
[  113.296377][ T7520]  xsk_init_queue+0xb0/0x110
[  113.296395][ T7520]  xsk_setsockopt+0x57b/0x8d0
[  113.296412][ T7520]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.296429][ T7520]  ? __pfx_aa_sk_perm+0x10/0x10
[  113.296449][ T7520]  ? __fget_files+0x2a/0x420
[  113.296459][ T7520]  ? aa_sock_opt_perm+0xff/0x1b0
[  113.296473][ T7520]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  113.296486][ T7520]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.296502][ T7520]  do_sock_setsockopt+0x17c/0x1b0
[  113.296525][ T7520]  __x64_sys_setsockopt+0x13f/0x1b0
[  113.296542][ T7520]  do_syscall_64+0xfa/0x3b0
[  113.296558][ T7520]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.296574][ T7520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.296586][ T7520]  ? exc_page_fault+0x9f/0xf0
[  113.296604][ T7520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.296616][ T7520] RIP: 0033:0x7f307078ebe9
[  113.296628][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.296638][ T7520] RSP: 002b:00007f3071656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  113.296652][ T7520] RAX: ffffffffffffffda RBX: 00007f30709b5fa0 RCX: 00007f307078ebe9
[  113.296661][ T7520] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  113.296669][ T7520] RBP: 00007f3070811e19 R08: 0000000000000004 R09: 0000000000000000
[  113.296677][ T7520] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  113.296685][ T7520] R13: 00007f30709b6038 R14: 00007f30709b5fa0 R15: 00007ffe8f14cdb8
[  113.296706][ T7520]  </TASK>
[  113.296712][ T7520] Mem-Info:
[  113.416861][ T7516] delete_channel: no stack
[  113.483098][ T7516] delete_channel: no stack
[  113.490000][ T7520] active_anon:11243 inactive_anon:0 isolated_anon:0
[  113.490000][ T7520]  active_file:1283 inactive_file:38229 isolated_file:0
[  113.490000][ T7520]  unevictable:1768 dirty:215 writeback:0
[  113.490000][ T7520]  slab_reclaimable:9471 slab_unreclaimable:52146
[  113.490000][ T7520]  mapped:18005 shmem:2438 pagetables:1000
[  113.490000][ T7520]  sec_pagetables:0 bounce:0
[  113.490000][ T7520]  kernel_misc_reclaimable:0
[  113.490000][ T7520]  free:297270 free_pcp:17637 free_cma:0
[  113.505807][ T7520] Node 0 active_anon:14788kB inactive_anon:0kB active_file:3844kB inactive_file:17172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31668kB dirty:736kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4724kB pagetables:1824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.519027][ T7520] Node 1 active_anon:30184kB inactive_anon:0kB active_file:1288kB inactive_file:135744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40352kB dirty:124kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6568kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.530351][ T7520] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  113.540203][ T7520] lowmem_reserve[]: 0 811 811 811 811
[  113.542068][ T7520] Node 0 DMA32 free:429040kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14788kB inactive_anon:0kB active_file:3844kB inactive_file:17172kB unevictable:3536kB writepending:736kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:20112kB local_pcp:18596kB free_cma:0kB
[  113.553173][ T7520] lowmem_reserve[]: 0 0 0 0 0
[  113.554874][ T7520] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  113.564625][ T7520] lowmem_reserve[]: 0 0 854 854 854
[  113.566298][ T7520] Node 1 Normal free:286064kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30184kB inactive_anon:0kB active_file:1288kB inactive_file:135744kB unevictable:3536kB writepending:124kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50596kB local_pcp:29696kB free_cma:0kB
[  113.576692][ T7520] lowmem_reserve[]: 0 0 0 0 0
[  113.578299][ T7520] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  113.582303][ T7520] Node 0 DMA32: 2*4kB (UE) 24*8kB (UME) 88*16kB (UME) 167*32kB (UME) 107*64kB (UME) 26*128kB (UME) 15*256kB (UME) 7*512kB (UME) 5*1024kB (UM) 3*2048kB (UM) 96*4096kB (M) = 429032kB
[  113.587954][ T7520] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  113.599605][ T7520] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 26*16kB (UE) 234*32kB (UME) 185*64kB (UME) 95*128kB (U) 35*256kB (UM) 11*512kB (UME) 4*1024kB (UM) 1*2048kB (U) 57*4096kB (M) = 286128kB
[  113.615792][ T7520] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.619127][ T7520] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.623732][ T7520] 41950 total pagecache pages
[  113.625328][ T7520] 0 pages in swap cache
[  113.626958][ T7520] Free swap  = 124996kB
[  113.628591][ T7520] Total swap = 124996kB
[  113.630223][ T7520] 786301 pages RAM
[  113.631726][ T7520] 0 pages HighMem/MovableOnly
[  113.634995][ T7520] 241329 pages reserved
[  113.636476][ T7520] 0 pages cma reserved
[  113.777000][ T7535] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.671'.
[  113.781717][ T7537] netlink: 'syz.2.670': attribute type 11 has an invalid length.
[  113.785076][ T7537] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.670'.
[  113.789525][ T7536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.985182][ T7543] syz.1.675 (7543) used greatest stack depth: 18704 bytes left
[  114.160317][ T7569] netlink: 100 bytes leftover after parsing attributes in process `syz.1.686'.
[  114.195733][ T7579] netlink: 'syz.0.691': attribute type 29 has an invalid length.
[  114.199180][ T7579] netlink: 'syz.0.691': attribute type 29 has an invalid length.
[  114.202370][ T7579] netlink: 'syz.0.691': attribute type 29 has an invalid length.
[  114.576441][ T7608] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.704'.
[  114.741050][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  114.813260][ T7630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.714'.
[  114.830516][ T7630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.714'.
[  114.872272][ T5862] Bluetooth: hci1: Opcode 0x206a failed: -110
[  114.874615][ T5862] Bluetooth: hci1: command 0x206a tx timeout
[  116.087565][ T7671] netlink: 'syz.2.732': attribute type 21 has an invalid length.
[  116.090427][ T7671] IPv6: NLM_F_CREATE should be specified when creating new route
[  116.098036][ T7671] IPv6: Can't replace route, no match found
[  116.228182][ T7683] netlink: 76 bytes leftover after parsing attributes in process `syz.0.738'.
[  116.265336][ T7687] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.737'.
[  116.268748][ T7681] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.737'.
[  116.274285][ T7687] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.737'.
[  116.340788][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'.
[  116.360806][ T7691] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.741'.
[  117.800101][ T7777] netlink: 'syz.0.783': attribute type 21 has an invalid length.
[  117.803190][ T7777] netlink: 128 bytes leftover after parsing attributes in process `syz.0.783'.
[  117.806271][ T7777] netlink: 'syz.0.783': attribute type 4 has an invalid length.
[  117.809494][ T7777] netlink: 'syz.0.783': attribute type 3 has an invalid length.
[  117.811952][ T7777] netlink: 3 bytes leftover after parsing attributes in process `syz.0.783'.
[  118.065881][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  118.559797][ T7804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.792'.
[  119.166556][ T7811] netlink: 'syz.1.795': attribute type 21 has an invalid length.
[  119.169142][ T7811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.795'.
[  120.759011][ T7863] netlink: 'syz.1.816': attribute type 10 has an invalid length.
[  120.821728][ T7860] netlink: 'syz.1.816': attribute type 10 has an invalid length.
[  120.905303][ T7860] team0: Device hsr_slave_0 failed to register rx_handler
[  121.026020][ T7878] netlink: 'syz.1.824': attribute type 10 has an invalid length.
[  121.042445][ T7878] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  124.670268][ T7922] lo speed is unknown, defaulting to 1000
[  124.673393][ T7922] lo speed is unknown, defaulting to 1000
[  124.735894][ T7922] lo speed is unknown, defaulting to 1000
[  124.988492][ T7922] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  125.191378][ T7922] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  125.437065][ T7922] lo speed is unknown, defaulting to 1000
[  125.450264][ T7922] lo speed is unknown, defaulting to 1000
[  125.463081][ T7922] lo speed is unknown, defaulting to 1000
[  125.466099][ T7922] lo speed is unknown, defaulting to 1000
[  125.954092][ T7956] __nla_validate_parse: 1 callbacks suppressed
[  125.954105][ T7956] netlink: 763 bytes leftover after parsing attributes in process `syz.1.851'.
[  126.098345][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'.
[  126.101583][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'.
[  126.238556][ T7980] netlink: 316 bytes leftover after parsing attributes in process `syz.0.862'.
[  127.319744][ T8008] netlink: 7 bytes leftover after parsing attributes in process `syz.2.875'.
[  127.327228][ T8008] netlink: 68 bytes leftover after parsing attributes in process `syz.2.875'.
[  127.330045][ T8008] netlink: 68 bytes leftover after parsing attributes in process `syz.2.875'.
[  127.448517][ T8016] netlink: 'syz.2.879': attribute type 2 has an invalid length.
[  127.454576][ T8016] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.879'.
[  127.757154][ T8035] netlink: 144 bytes leftover after parsing attributes in process `syz.2.888'.
[  127.797016][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.800804][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.806750][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.809737][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.687100][ T8069] netlink: 'syz.2.904': attribute type 11 has an invalid length.
[  128.690646][ T8069] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.904'.
[  128.761729][ T8069] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  128.820501][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.110271][ T8100] netlink: 'syz.1.919': attribute type 21 has an invalid length.
[  130.970867][ T8181] syzkaller0: entered promiscuous mode
[  130.973233][ T8181] syzkaller0: entered allmulticast mode
[  131.960511][ T8206] netdevsim0: mtu less than device minimum
[  132.223758][ T8234] __nla_validate_parse: 4 callbacks suppressed
[  132.223772][ T8234] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.980'.
[  132.229095][ T8234] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.980'.
[  132.282837][ T8238] netlink: 96 bytes leftover after parsing attributes in process `syz.2.982'.
[  132.291096][   T33] audit: type=1107 audit(1756273408.853:2): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  132.386897][ T8248] netlink: 10 bytes leftover after parsing attributes in process `syz.2.988'.
[  132.863231][ T8277] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1002'.
[  132.886148][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.888620][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.072910][ T8298] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1010'.
[  133.077031][ T8298] openvswitch: netlink: Message has 4 unknown bytes.
[  133.375587][ T8317] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1020'.
[  133.593753][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'.
[  133.596948][ T8328] netlink: 'syz.0.1023': attribute type 46 has an invalid length.
[  133.995233][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  134.598307][ T8351] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1033'.
[  134.885715][ T8365] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  134.888895][ T8365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.306117][   T55] Bluetooth: hci0: SCO packet too small
[  135.607898][ T8396] netlink: 'syz.1.1055': attribute type 10 has an invalid length.
[  135.611845][ T8396] veth1_vlan: entered allmulticast mode
[  135.630263][ T8396] team0: Device veth1_vlan failed to register rx_handler
[  136.783317][ T8440] netlink: 'syz.2.1075': attribute type 21 has an invalid length.
[  137.068015][ T8450] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  137.070694][ T8450] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  137.904622][ T8489] __nla_validate_parse: 5 callbacks suppressed
[  137.904634][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'.
[  138.517648][ T8527] netlink: 'syz.1.1116': attribute type 22 has an invalid length.
[  138.520957][ T8527] netlink: 'syz.1.1116': attribute type 1 has an invalid length.
[  138.523426][ T8527] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1116'.
[  140.909971][ T8594] netlink: 'syz.0.1146': attribute type 10 has an invalid length.
[  140.926200][ T8594] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  141.351731][ T8624] netlink: 'syz.2.1157': attribute type 10 has an invalid length.
[  141.477527][ T8624] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  142.248936][ T8665] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1169'.
[  142.992372][ T8735] netlink: 'syz.1.1181': attribute type 17 has an invalid length.
[  143.005495][ T8735] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1181'.
[  143.018753][ T8737] netlink: 'syz.0.1182': attribute type 2 has an invalid length.
[  143.021344][ T8737] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1182'.
[  143.039021][ T8739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1183'.
[  143.265837][ T8750] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1188'.
[  143.277807][ T8750] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ecN^{is|ؖS
[  143.489854][ T8757] syzkaller0: entered promiscuous mode
[  143.493085][ T8757] syzkaller0: entered allmulticast mode
[  144.714576][ T8758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1190'.
[  144.729282][ T8761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.991875][ T8786] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  145.330086][ T8794] syzkaller0: entered promiscuous mode
[  145.332631][ T8794] syzkaller0: entered allmulticast mode
[  146.029198][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'.
[  146.665068][ T8854] netlink: 'syz.2.1230': attribute type 29 has an invalid length.
[  146.668939][ T8854] netlink: 'syz.2.1230': attribute type 29 has an invalid length.
[  146.678465][ T8854] netlink: 'syz.2.1230': attribute type 29 has an invalid length.
[  147.140282][ T8865] delete_channel: no stack
[  147.427199][ T8878] syzkaller0: entered promiscuous mode
[  147.429906][ T8878] syzkaller0: entered allmulticast mode
[  148.636627][ T8890] veth1_macvtap: left promiscuous mode
[  148.647365][ T8890] macsec0: entered allmulticast mode
[  148.671557][ T8872] lo speed is unknown, defaulting to 1000
[  149.025981][ T8913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.083130][ T8916] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  149.196731][ T8924] netlink: 'syz.2.1260': attribute type 11 has an invalid length.
[  149.586477][ T8949] netlink: 'syz.2.1268': attribute type 3 has an invalid length.
[  149.592163][ T8949] netlink: 'syz.2.1268': attribute type 1 has an invalid length.
[  149.594717][ T8949] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1268'.
[  149.821377][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'.
[  149.830591][ T8969] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1276'.
[  150.899139][ T8983] netlink: 'syz.0.1281': attribute type 10 has an invalid length.
[  150.917150][ T8983] team0: Port device geneve1 added
[  150.935723][ T8987] netlink: 2451 bytes leftover after parsing attributes in process `syz.1.1283'.
[  150.988781][ T8993] C: renamed from team_slave_0 (while UP)
[  150.994098][ T8993] netlink: 'syz.2.1286': attribute type 2 has an invalid length.
[  151.002546][ T8993] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1286'.
[  151.007388][ T8993] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  151.301813][ T9017] netlink: 'syz.0.1298': attribute type 1 has an invalid length.
[  151.324266][ T9015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.333749][ T5892] lo speed is unknown, defaulting to 1000
[  151.894540][ T9061] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1319'.
[  154.387162][ T9075] netlink: 'syz.1.1326': attribute type 13 has an invalid length.
[  154.411779][ T9078] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1325'.
[  154.709616][ T9097] : renamed from dummy0 (while UP)
[  155.097485][ T9105] lo speed is unknown, defaulting to 1000
[  155.680281][ T9123] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.686817][ T9123] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.684758][ T9169] syzkaller0: entered promiscuous mode
[  156.686718][ T9169] syzkaller0: entered allmulticast mode
[  158.086962][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'.
[  158.183885][ T9204] netlink: 'syz.2.1382': attribute type 29 has an invalid length.
[  158.426929][ T9213] netlink: 'syz.0.1387': attribute type 9 has an invalid length.
[  158.429449][ T9213] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1387'.
[  158.478075][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'.
[  158.844548][ T9236] netlink: 'syz.0.1396': attribute type 10 has an invalid length.
[  158.962544][ T9243] netlink: 'syz.1.1399': attribute type 25 has an invalid length.
[  158.965824][ T9243] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1399'.
[  159.172313][   T55] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  161.020072][ T9317] IPv6: Can't replace route, no match found
[  161.193507][ T5862] Bluetooth: hci1: command 0x206a tx timeout
[  161.325026][ T9339] netlink: 'syz.1.1441': attribute type 11 has an invalid length.
[  161.725036][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1449'.
[  161.962975][ T9378] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  162.730775][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'.
[  162.737243][ T9405] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1470'.
[  162.746281][ T9405] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1470'.
[  163.195995][ T9429] netlink: 'syz.1.1479': attribute type 6 has an invalid length.
[  163.199107][ T9429] netlink: 'syz.1.1479': attribute type 3 has an invalid length.
[  163.209313][ T9429] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1479'.
[  163.709033][ T9457] net veth1_virt_wifi : renamed from virt_wifi0
[  163.745220][ T9457] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  163.885733][ T9458] netlink: 'syz.0.1492': attribute type 2 has an invalid length.
[  165.151861][ T9498] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1511'.
[  165.353367][ T9516] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  165.407823][ T5862] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  165.644711][ T9533] netlink: 'syz.2.1527': attribute type 41 has an invalid length.
[  165.649943][ T9533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1527'.
[  166.865402][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'.
[  166.912054][ T9562] netlink: 'syz.1.1539': attribute type 6 has an invalid length.
[  167.094508][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'.
[  167.110341][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  167.117768][ T9578] : entered promiscuous mode
[  167.163339][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'.
[  167.215929][ T9590] netlink: 'syz.2.1553': attribute type 2 has an invalid length.
[  167.218504][ T9590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1553'.
[  167.231706][ T9590] netlink: 'syz.2.1553': attribute type 2 has an invalid length.
[  167.235121][ T9590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1553'.
[  167.261158][ T9593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1554'.
[  167.519293][ T9617] netlink: 'syz.1.1566': attribute type 3 has an invalid length.
[  167.521816][ T9617] netlink: 'syz.1.1566': attribute type 2 has an invalid length.
[  167.998017][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.228288][ T9651] __nla_validate_parse: 1 callbacks suppressed
[  168.228358][ T9651] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1583'.
[  168.234851][ T9651] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1583'.
[  168.238643][ T9651] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1583'.
[  168.385689][ T9663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1589'.
[  168.757645][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1594'.
[  169.378740][ T9701] unsupported nla_type 256
[  169.437995][ T9706] netlink: 'syz.1.1610': attribute type 2 has an invalid length.
[  169.440407][ T9706] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1610'.
[  169.445331][ T9706] netlink: 'syz.1.1610': attribute type 2 has an invalid length.
[  169.447744][ T9706] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1610'.
[  169.843516][ T9726] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1619'.
[  169.973962][ T9733] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1622'.
[  170.479352][ T9741] netlink: 'syz.0.1625': attribute type 1 has an invalid length.
[  170.700026][ T9750] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1629'.
[  170.819328][ T9754] netlink: 'syz.1.1632': attribute type 16 has an invalid length.
[  171.004777][ T9769] netlink: 'syz.2.1636': attribute type 1 has an invalid length.
[  171.260656][ T9782] tun0: tun_chr_ioctl cmd 1074812117
[  172.163259][ T5862] Bluetooth: hci2: Malformed LE Event: 0x0d
[  172.528287][ T9870] netlink: 'syz.2.1683': attribute type 2 has an invalid length.
[  172.531481][ T9870] netlink: 'syz.2.1683': attribute type 3 has an invalid length.
[  172.854736][ T5862] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  172.933057][ T9892] netlink: 'syz.2.1693': attribute type 14 has an invalid length.
[  173.169345][ T9911] netlink: 'syz.2.1702': attribute type 1 has an invalid length.
[  173.640794][ T9936] __nla_validate_parse: 9 callbacks suppressed
[  173.640811][ T9936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1713'.
[  173.746806][ T9946] netlink: 'syz.1.1718': attribute type 1 has an invalid length.
[  173.854202][ T9955] team0: Device ipvlan1 failed to register rx_handler
[  174.187171][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.189838][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.304413][ T9960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.316953][ T9960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.433268][ T5906] lo speed is unknown, defaulting to 1000
[  174.435765][ T5906] syz2: Port: 1 Link DOWN
[  174.487524][ T9973] validate_nla: 2 callbacks suppressed
[  174.487535][ T9973] netlink: 'syz.1.1730': attribute type 3 has an invalid length.
[  174.513562][ T9973] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1730'.
[  174.538159][ T9964] : entered promiscuous mode
[  174.544939][ T6079] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.548187][ T6079] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.551555][ T6079] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.557893][ T6079] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.715885][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1737'.
[  174.721922][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1737'.
[  174.730133][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1737'.
[  174.808044][ T9994] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1740'.
[  174.944478][T10003] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1745'.
[  175.027603][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'.
[  175.032557][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'.
[  175.204889][T10015] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  175.207179][T10015] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  176.870048][T10042] syzkaller0: entered promiscuous mode
[  176.874535][T10042] syzkaller0: entered allmulticast mode
[  176.934781][T10056] netlink: 'syz.1.1764': attribute type 21 has an invalid length.
[  176.939666][T10056] netlink: 'syz.1.1764': attribute type 1 has an invalid length.
[  176.944582][T10056] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1764'.
[  177.636820][T10088] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  177.641071][T10088] netlink: 'syz.1.1779': attribute type 2 has an invalid length.
[  178.268069][   T33] audit: type=1107 audit(1756273454.833:3): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  179.937937][T10144] __nla_validate_parse: 5 callbacks suppressed
[  179.937949][T10144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1801'.
[  179.979725][T10146] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1802'.
[  180.490725][T10160] netlink: 'syz.2.1809': attribute type 39 has an invalid length.
[  181.007988][T10202] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1828'.
[  181.083919][T10206] netlink: 'syz.0.1830': attribute type 2 has an invalid length.
[  181.087227][T10206] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1830'.
[  181.194025][ T5862] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  181.196941][ T5862] Bluetooth: hci0: Injecting HCI hardware error event
[  181.199945][   T55] Bluetooth: hci0: hardware error 0x00
[  181.920425][T10223] delete_channel: no stack
[  182.043480][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'.
[  182.047761][T10235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1843'.
[  182.552597][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1856'.
[  182.634997][T10270] netlink: 'syz.2.1859': attribute type 27 has an invalid length.
[  182.638245][T10270] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1859'.
[  182.756172][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'.
[  182.875525][T10281] vcan0 speed is unknown, defaulting to 1000
[  182.879667][T10281] vcan0 speed is unknown, defaulting to 1000
[  182.889317][T10281] vcan0 speed is unknown, defaulting to 1000
[  182.962026][T10284] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1866'.
[  183.274998][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  183.541101][T10303] netlink: 'syz.1.1874': attribute type 10 has an invalid length.
[  183.582751][T10303] 8021q: adding VLAN 0 to HW filter on device team0
[  183.623110][T10303] bond0: (slave team0): Enslaving as an active interface with an up link
[  183.671497][T10303] netdevsim netdevsim1 : renamed from netdevsim0
[  183.720433][T10303] can: request_module (can-proto-0) failed.
[  183.879224][ T5312] vcan0 speed is unknown, defaulting to 1000
[  183.881833][T10281] infiniband syz1: set active
[  183.885281][T10281] infiniband syz1: added vcan0
[  183.924847][T10281] RDS/IB: syz1: added
[  183.927618][T10281] smc: adding ib device syz1 with port count 1
[  183.929639][T10281] smc:    ib device syz1 port 1 has pnetid 
[  183.933418][ T5312] vcan0 speed is unknown, defaulting to 1000
[  183.936478][T10281] vcan0 speed is unknown, defaulting to 1000
[  183.991942][T10311] netlink: 'syz.1.1876': attribute type 30 has an invalid length.
[  184.115474][T10281] vcan0 speed is unknown, defaulting to 1000
[  184.428941][T10319] netlink: 'syz.1.1879': attribute type 10 has an invalid length.
[  184.475946][T10281] vcan0 speed is unknown, defaulting to 1000
[  185.409828][T10352] __nla_validate_parse: 1 callbacks suppressed
[  185.409840][T10352] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1893'.
[  185.479018][T10357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1895'.
[  185.560268][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'.
[  185.563816][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'.
[  185.673703][T10367] netlink: 294 bytes leftover after parsing attributes in process `syz.1.1899'.
[  185.742322][T10375] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1902'.
[  186.104073][T10395] netlink: 'syz.0.1911': attribute type 1 has an invalid length.
[  186.153182][ T5862] Bluetooth: hci2: command 0x0406 tx timeout
[  186.187247][T10397] netlink: 'syz.2.1912': attribute type 12 has an invalid length.
[  186.189778][T10397] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1912'.
[  186.251560][T10401] netlink: 'syz.0.1914': attribute type 16 has an invalid length.
[  186.268547][T10401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1914'.
[  186.275950][T10401] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.146468][T10440] syzkaller0: entered promiscuous mode
[  187.151713][T10440] syzkaller0: entered allmulticast mode
[  187.512340][T10464] netlink: 824 bytes leftover after parsing attributes in process `syz.0.1944'.
[  188.333811][T10462] netlink: 'syz.2.1943': attribute type 3 has an invalid length.
[  188.336989][T10462] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1943'.
[  188.372898][T10481] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  189.887766][T10540] netlink: 'syz.1.1976': attribute type 39 has an invalid length.
[  190.205628][T10564] netlink: 'syz.2.1987': attribute type 2 has an invalid length.
[  190.706347][T10579] __nla_validate_parse: 3 callbacks suppressed
[  190.706362][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'.
[  190.712862][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'.
[  190.774923][T10584] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.1998'.
[  190.814572][T10586] netlink: 'syz.0.1999': attribute type 39 has an invalid length.
[  191.340534][T10614] netlink: 'syz.1.2010': attribute type 10 has an invalid length.
[  191.344111][T10614] macvlan0: entered promiscuous mode
[  191.349409][T10614] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  191.999521][T10643] netlink: 'syz.2.2022': attribute type 126 has an invalid length.
[  192.024632][T10645] netlink: 'syz.0.2023': attribute type 2 has an invalid length.
[  192.095332][T10654] netlink: 'syz.0.2027': attribute type 21 has an invalid length.
[  192.102640][T10654] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2027'.
[  192.200033][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'.
[  193.656028][T10699] netlink: 'syz.2.2047': attribute type 2 has an invalid length.
[  193.855797][T10709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2052'.
[  193.956584][T10715] netlink: 'syz.2.2055': attribute type 10 has an invalid length.
[  193.959701][T10715] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2055'.
[  194.003300][T10721] netlink: 'syz.0.2057': attribute type 11 has an invalid length.
[  194.346368][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.348929][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.987989][T10746] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2070'.
[  194.991566][T10746] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2070'.
[  195.397887][T10766] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  196.001368][T10781] netlink: 'syz.1.2084': attribute type 3 has an invalid length.
[  196.008695][T10781] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2084'.
[  196.270271][T10800] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2092'.
[  196.402235][   T55] Bluetooth: hci1: command 0x206a tx timeout
[  196.651417][   T33] audit: type=1107 audit(1756273473.213:4): pid=10815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  196.890674][T10835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2108'.
[  196.941508][T10840] netlink: 'syz.2.2110': attribute type 2 has an invalid length.
[  196.944871][T10840] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2110'.
[  197.694560][T10863] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  197.697759][T10863] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2121'.
[  197.795646][T10847] lo speed is unknown, defaulting to 1000
[  197.815414][T10847] vcan0 speed is unknown, defaulting to 1000
[  198.304410][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2135'.
[  199.656100][T10947] netlink: 'syz.0.2157': attribute type 10 has an invalid length.
[  199.659507][T10947] bridge0: port 3(macsec0) entered disabled state
[  199.676330][T10947] bridge0: port 3(macsec0) entered blocking state
[  199.678871][T10947] bridge0: port 3(macsec0) entered forwarding state
[  199.688027][T10947] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  199.700440][T10952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.791288][T10959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2162'.
[  199.803631][T10959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2162'.
[  199.813564][T10959] netlink: 'syz.1.2162': attribute type 4 has an invalid length.
[  199.896687][T10966] netlink: 'syz.0.2166': attribute type 23 has an invalid length.
[  200.000339][T10974] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2170'.
[  200.004100][T10974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2170'.
[  203.355175][T11024] netlink: 'syz.1.2192': attribute type 13 has an invalid length.
[  203.357595][T11024] netlink: 'syz.1.2192': attribute type 17 has an invalid length.
[  203.398265][T11024] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.410794][T11024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.416359][ T5312] lo speed is unknown, defaulting to 1000
[  203.418154][ T5312] syz2: Port: 1 Link ACTIVE
[  203.693570][T11053] netlink: 'syz.2.2208': attribute type 9 has an invalid length.
[  203.695933][T11053] netlink: 146452 bytes leftover after parsing attributes in process `syz.2.2208'.
[  203.735378][T11058] netlink: 'syz.2.2210': attribute type 10 has an invalid length.
[  205.223235][T11094] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2222'.
[  205.357292][T11100] lo speed is unknown, defaulting to 1000
[  205.360192][T11100] vcan0 speed is unknown, defaulting to 1000
[  205.369802][T11103] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2226'.
[  205.467104][T11114] netlink: 'syz.1.2230': attribute type 46 has an invalid length.
[  205.723298][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'.
[  205.894138][T11137] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2240'.
[  207.086976][T11169] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2253'.
[  207.163130][T11173] netlink: 'syz.2.2257': attribute type 10 has an invalid length.
[  207.606144][   T55] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[  207.689140][T11196] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2268'.
[  207.716081][T11196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2268'.
[  207.788670][T11203] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2271'.
[  208.264281][T11237] netlink: 'syz.0.2287': attribute type 29 has an invalid length.
[  208.267437][T11237] netlink: 'syz.0.2287': attribute type 3 has an invalid length.
[  208.270636][T11237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2287'.
[  208.326558][T11243] bridge: RTM_NEWNEIGH with invalid state 0x1
[  208.485572][T11251] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  209.268570][T11291] netlink: zone id is out of range
[  209.272035][T11298] netlink: 'syz.0.2314': attribute type 4 has an invalid length.
[  209.276722][T11291] netlink: zone id is out of range
[  209.280852][T11291] netlink: zone id is out of range
[  209.313273][T11297] netlink: del zone limit has 4 unknown bytes
[  209.357101][T11291] netlink: set zone limit has 4 unknown bytes
[  209.535386][T11302] __nla_validate_parse: 2 callbacks suppressed
[  209.535404][T11302] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2316'.
[  209.667899][   T55] Bluetooth: hci1: Malformed LE Event: 0x1b
[  209.791436][T11311] netlink: 'syz.2.2320': attribute type 39 has an invalid length.
[  210.774492][T11318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2322'.
[  210.810642][T11323] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2325'.
[  211.011983][    C0] ==================================================================
[  211.014510][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  211.016978][    C0] Write of size 8 at addr ffff88810f7c0030 by task syz.2.2323/11316
[  211.020241][    C0] 
[  211.021402][    C0] CPU: 0 UID: 0 PID: 11316 Comm: syz.2.2323 Not tainted syzkaller #0 PREEMPT(full) 
[  211.021414][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.021420][    C0] Call Trace:
[  211.021424][    C0]  <IRQ>
[  211.021429][    C0]  dump_stack_lvl+0x189/0x250
[  211.021441][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  211.021452][    C0]  ? rcu_is_watching+0x15/0xb0
[  211.021460][    C0]  ? __kasan_check_byte+0x12/0x40
[  211.021470][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.021478][    C0]  ? rcu_is_watching+0x15/0xb0
[  211.021485][    C0]  ? lock_release+0x4b/0x3e0
[  211.021497][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  211.021506][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  211.021515][    C0]  print_report+0xca/0x240
[  211.021523][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  211.021534][    C0]  kasan_report+0x118/0x150
[  211.021544][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  211.021556][    C0]  __xfrm_state_delete+0x696/0xca0
[  211.021569][    C0]  xfrm_timer_handler+0x18f/0xa00
[  211.021581][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  211.021592][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  211.021603][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  211.021611][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.021621][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  211.021631][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  211.021641][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  211.021653][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  211.021660][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  211.021669][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  211.021678][    C0]  handle_softirqs+0x286/0x870
[  211.021686][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  211.021694][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  211.021702][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  211.021712][    C0]  __irq_exit_rcu+0xca/0x1f0
[  211.021719][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  211.021728][    C0]  irq_exit_rcu+0x9/0x30
[  211.021734][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  211.021744][    C0]  </IRQ>
[  211.021747][    C0]  <TASK>
[  211.021750][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  211.021760][    C0] RIP: 0010:x2apic_send_IPI+0x73/0xe0
[  211.021771][    C0] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7
[  211.021778][    C0] RSP: 0018:ffffc9000283f570 EFLAGS: 00000206
[  211.021786][    C0] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830
[  211.021792][    C0] RDX: 0000000000000001 RSI: 00000000000000fb RDI: 0000000000000001
[  211.021797][    C0] RBP: ffffc9000283f720 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  211.021803][    C0] R10: dffffc0000000000 R11: ffffffff81705100 R12: dffffc0000000000
[  211.021808][    C0] R13: dffffc0000000000 R14: ffff8881366201b0 R15: ffffffff8dbded18
[  211.021815][    C0]  ? __pfx_native_send_call_func_single_ipi+0x10/0x10
[  211.021829][    C0]  smp_call_function_many_cond+0xabb/0x12d0
[  211.021838][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  211.021856][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  211.021864][    C0]  ? perf_event_text_poke+0x13d/0x190
[  211.021871][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.021881][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  211.021890][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  211.021900][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  211.021908][    C0]  smp_text_poke_batch_finish+0xb44/0x1130
[  211.021921][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  211.021932][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.021942][    C0]  __static_call_transform+0x4eb/0x750
[  211.021950][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.021959][    C0]  ? __pfx___static_call_transform+0x10/0x10
[  211.021968][    C0]  ? __static_call_validate+0x8e/0x240
[  211.021975][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.021983][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.021991][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.021999][    C0]  arch_static_call_transform+0x98/0xc0
[  211.022008][    C0]  __static_call_update+0x3c3/0x5d0
[  211.022017][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.022024][    C0]  ? __SCT__tp_func_contention_begin+0x8/0x8
[  211.022037][    C0]  ? __pfx___static_call_update+0x10/0x10
[  211.022046][    C0]  ? rcu_is_watching+0x15/0xb0
[  211.022053][    C0]  ? trace_kmalloc+0x1f/0xd0
[  211.022063][    C0]  ? tracepoint_add_func+0x515/0xa10
[  211.022073][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.022081][    C0]  tracepoint_add_func+0x91e/0xa10
[  211.022093][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.022101][    C0]  tracepoint_probe_register_prio_may_exist+0x5f/0xa0
[  211.022111][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.022119][    C0]  bpf_raw_tp_link_attach+0x4f0/0x6c0
[  211.022128][    C0]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  211.022140][    C0]  bpf_raw_tracepoint_open+0x1b2/0x220
[  211.022152][    C0]  __sys_bpf+0x75a/0x870
[  211.022161][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  211.022170][    C0]  ? sched_clock_cpu+0x74/0x430
[  211.022187][    C0]  __x64_sys_bpf+0x7c/0x90
[  211.022195][    C0]  do_syscall_64+0xfa/0x3b0
[  211.022206][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.022233][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  211.022242][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.022250][    C0] RIP: 0033:0x7f1ddf78ebe9
[  211.022258][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.022264][    C0] RSP: 002b:00007f1de0666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  211.022272][    C0] RAX: ffffffffffffffda RBX: 00007f1ddf9b5fa0 RCX: 00007f1ddf78ebe9
[  211.022278][    C0] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000011
[  211.022283][    C0] RBP: 00007f1ddf811e19 R08: 0000000000000000 R09: 0000000000000000
[  211.022288][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.022293][    C0] R13: 00007f1ddf9b6038 R14: 00007f1ddf9b5fa0 R15: 00007ffffe9fd298
[  211.022301][    C0]  </TASK>
[  211.022304][    C0] 
[  211.215615][    C0] Allocated by task 9078:
[  211.216952][    C0]  kasan_save_track+0x3e/0x80
[  211.218419][    C0]  __kasan_slab_alloc+0x6c/0x80
[  211.219921][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  211.221619][    C0]  xfrm_state_alloc+0x24/0x2f0
[  211.223108][    C0]  __find_acq_core+0x8a7/0x1c00
[  211.224800][    C0]  xfrm_find_acq+0x78/0xa0
[  211.226173][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  211.227728][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  211.229271][    C0]  netlink_rcv_skb+0x208/0x470
[  211.230750][    C0]  xfrm_netlink_rcv+0x79/0x90
[  211.232221][    C0]  netlink_unicast+0x82f/0x9e0
[  211.233703][    C0]  netlink_sendmsg+0x805/0xb30
[  211.235193][    C0]  __sock_sendmsg+0x21c/0x270
[  211.236686][    C0]  ____sys_sendmsg+0x505/0x830
[  211.238171][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  211.239653][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  211.241184][    C0]  do_syscall_64+0xfa/0x3b0
[  211.242609][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.244440][    C0] 
[  211.245189][    C0] Freed by task 5312:
[  211.246450][    C0]  kasan_save_track+0x3e/0x80
[  211.247914][    C0]  kasan_save_free_info+0x46/0x50
[  211.249489][    C0]  __kasan_slab_free+0x5b/0x80
[  211.250982][    C0]  kmem_cache_free+0x18f/0x400
[  211.252495][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  211.254067][    C0]  process_scheduled_works+0xae1/0x17b0
[  211.255788][    C0]  worker_thread+0x8a0/0xda0
[  211.257218][    C0]  kthread+0x711/0x8a0
[  211.258541][    C0]  ret_from_fork+0x3fc/0x770
[  211.260027][    C0]  ret_from_fork_asm+0x1a/0x30
[  211.261506][    C0] 
[  211.262425][    C0] The buggy address belongs to the object at ffff88810f7c0000
[  211.262425][    C0]  which belongs to the cache xfrm_state of size 928
[  211.267115][    C0] The buggy address is located 48 bytes inside of
[  211.267115][    C0]  freed 928-byte region [ffff88810f7c0000, ffff88810f7c03a0)
[  211.272050][    C0] 
[  211.272909][    C0] The buggy address belongs to the physical page:
[  211.275211][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f7c1680 pfn:0x10f7c0
[  211.279303][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  211.282184][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  211.284716][    C0] page_type: f5(slab)
[  211.286034][    C0] raw: 057ff00000000040 ffff888104e23280 dead000000000122 0000000000000000
[  211.289395][    C0] raw: ffff88810f7c1680 00000000800e000a 00000000f5000000 0000000000000000
[  211.292188][    C0] head: 057ff00000000040 ffff888104e23280 dead000000000122 0000000000000000
[  211.295385][    C0] head: ffff88810f7c1680 00000000800e000a 00000000f5000000 0000000000000000
[  211.298559][    C0] head: 057ff00000000002 ffffea00043df001 00000000ffffffff 00000000ffffffff
[  211.301867][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  211.305176][    C0] page dumped because: kasan: bad access detected
[  211.307656][    C0] page_owner tracks the page as allocated
[  211.309842][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6384, tgid 6383 (syz.2.168), ts 79030069419, free_ts 66711566361
[  211.317120][    C0]  post_alloc_hook+0x240/0x2a0
[  211.319051][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  211.321165][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  211.323429][    C0]  alloc_pages_mpol+0x232/0x4a0
[  211.325361][    C0]  allocate_slab+0x8a/0x370
[  211.327167][    C0]  ___slab_alloc+0xbeb/0x1410
[  211.329049][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  211.331222][    C0]  xfrm_state_alloc+0x24/0x2f0
[  211.333133][    C0]  xfrm_add_sa+0x17d1/0x4070
[  211.334990][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  211.336957][    C0]  netlink_rcv_skb+0x208/0x470
[  211.338835][    C0]  xfrm_netlink_rcv+0x79/0x90
[  211.340671][    C0]  netlink_unicast+0x82f/0x9e0
[  211.342554][    C0]  netlink_sendmsg+0x805/0xb30
[  211.344436][    C0]  __sock_sendmsg+0x21c/0x270
[  211.346296][    C0]  ____sys_sendmsg+0x505/0x830
[  211.348156][    C0] page last free pid 5868 tgid 5868 stack trace:
[  211.350591][    C0]  __free_frozen_pages+0xbc4/0xd30
[  211.352524][    C0]  __slab_free+0x303/0x3c0
[  211.354208][    C0]  qlist_free_all+0x97/0x140
[  211.356007][    C0]  kasan_quarantine_reduce+0x148/0x160
[  211.358166][    C0]  __kasan_slab_alloc+0x22/0x80
[  211.360114][    C0]  __kmalloc_cache_noprof+0x1be/0x3d0
[  211.362177][    C0]  __ipv6_dev_mc_inc+0x44f/0xa50
[  211.364037][    C0]  addrconf_dad_work+0x3d0/0x14b0
[  211.365921][    C0]  process_scheduled_works+0xae1/0x17b0
[  211.368062][    C0]  worker_thread+0x8a0/0xda0
[  211.369859][    C0]  kthread+0x711/0x8a0
[  211.371466][    C0]  ret_from_fork+0x3fc/0x770
[  211.373277][    C0]  ret_from_fork_asm+0x1a/0x30
[  211.375102][    C0] 
[  211.376035][    C0] Memory state around the buggy address:
[  211.378260][    C0]  ffff88810f7bff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  211.381361][    C0]  ffff88810f7bff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  211.384515][    C0] >ffff88810f7c0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  211.387215][    C0]                                      ^
[  211.388935][    C0]  ffff88810f7c0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  211.391490][    C0]  ffff88810f7c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  211.393874][    C0] ==================================================================
[  211.396567][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  211.399107][    C0] CPU: 0 UID: 0 PID: 11316 Comm: syz.2.2323 Not tainted syzkaller #0 PREEMPT(full) 
[  211.401973][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.404984][    C0] Call Trace:
[  211.406049][    C0]  <IRQ>
[  211.407162][    C0]  dump_stack_lvl+0x99/0x250
[  211.408594][    C0]  ? __asan_memcpy+0x40/0x70
[  211.410067][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.411676][    C0]  ? __pfx__printk+0x10/0x10
[  211.413097][    C0]  vpanic+0x281/0x750
[  211.414335][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  211.415967][    C0]  ? __pfx_vpanic+0x10/0x10
[  211.417746][    C0]  ? irqentry_exit+0x74/0x90
[  211.419360][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.421013][    C0]  panic+0xb9/0xc0
[  211.422155][    C0]  ? __pfx_panic+0x10/0x10
[  211.423548][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  211.425349][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.427340][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  211.429021][    C0]  check_panic_on_warn+0x89/0xb0
[  211.430723][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  211.432336][    C0]  end_report+0x78/0x160
[  211.433724][    C0]  kasan_report+0x129/0x150
[  211.435225][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  211.437128][    C0]  __xfrm_state_delete+0x696/0xca0
[  211.439160][    C0]  xfrm_timer_handler+0x18f/0xa00
[  211.441157][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  211.443280][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  211.445596][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  211.447917][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.450416][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  211.452627][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  211.454804][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  211.456866][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  211.459115][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  211.461356][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  211.463403][    C0]  handle_softirqs+0x286/0x870
[  211.465343][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  211.467253][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  211.469345][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  211.471441][    C0]  __irq_exit_rcu+0xca/0x1f0
[  211.473257][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  211.475315][    C0]  irq_exit_rcu+0x9/0x30
[  211.476997][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  211.479255][    C0]  </IRQ>
[  211.480443][    C0]  <TASK>
[  211.481654][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  211.484014][    C0] RIP: 0010:x2apic_send_IPI+0x73/0xe0
[  211.486151][    C0] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7
[  211.493717][    C0] RSP: 0018:ffffc9000283f570 EFLAGS: 00000206
[  211.496121][    C0] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830
[  211.499233][    C0] RDX: 0000000000000001 RSI: 00000000000000fb RDI: 0000000000000001
[  211.502364][    C0] RBP: ffffc9000283f720 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  211.505452][    C0] R10: dffffc0000000000 R11: ffffffff81705100 R12: dffffc0000000000
[  211.508589][    C0] R13: dffffc0000000000 R14: ffff8881366201b0 R15: ffffffff8dbded18
[  211.511758][    C0]  ? __pfx_native_send_call_func_single_ipi+0x10/0x10
[  211.514404][    C0]  smp_call_function_many_cond+0xabb/0x12d0
[  211.516667][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  211.518678][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  211.521156][    C0]  ? perf_event_text_poke+0x13d/0x190
[  211.523309][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.525430][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  211.527710][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  211.529710][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  211.531768][    C0]  smp_text_poke_batch_finish+0xb44/0x1130
[  211.534078][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  211.536467][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.538549][    C0]  __static_call_transform+0x4eb/0x750
[  211.540694][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.542795][    C0]  ? __pfx___static_call_transform+0x10/0x10
[  211.545194][    C0]  ? __static_call_validate+0x8e/0x240
[  211.547359][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.549836][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.551952][    C0]  ? six_lock_slowpath+0x13c4/0x14a0
[  211.554054][    C0]  arch_static_call_transform+0x98/0xc0
[  211.556271][    C0]  __static_call_update+0x3c3/0x5d0
[  211.558358][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.560819][    C0]  ? __SCT__tp_func_contention_begin+0x8/0x8
[  211.563210][    C0]  ? __pfx___static_call_update+0x10/0x10
[  211.565405][    C0]  ? rcu_is_watching+0x15/0xb0
[  211.567339][    C0]  ? trace_kmalloc+0x1f/0xd0
[  211.569198][    C0]  ? tracepoint_add_func+0x515/0xa10
[  211.571311][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.573798][    C0]  tracepoint_add_func+0x91e/0xa10
[  211.575859][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.578247][    C0]  tracepoint_probe_register_prio_may_exist+0x5f/0xa0
[  211.580862][    C0]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  211.583271][    C0]  bpf_raw_tp_link_attach+0x4f0/0x6c0
[  211.585353][    C0]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  211.587711][    C0]  bpf_raw_tracepoint_open+0x1b2/0x220
[  211.589891][    C0]  __sys_bpf+0x75a/0x870
[  211.591627][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  211.593549][    C0]  ? sched_clock_cpu+0x74/0x430
[  211.595531][    C0]  __x64_sys_bpf+0x7c/0x90
[  211.597314][    C0]  do_syscall_64+0xfa/0x3b0
[  211.599061][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.601441][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  211.603893][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.606244][    C0] RIP: 0033:0x7f1ddf78ebe9
[  211.607940][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.615391][    C0] RSP: 002b:00007f1de0666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  211.618723][    C0] RAX: ffffffffffffffda RBX: 00007f1ddf9b5fa0 RCX: 00007f1ddf78ebe9
[  211.621892][    C0] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000011
[  211.624997][    C0] RBP: 00007f1ddf811e19 R08: 0000000000000000 R09: 0000000000000000
[  211.628004][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.631044][    C0] R13: 00007f1ddf9b6038 R14: 00007f1ddf9b5fa0 R15: 00007ffffe9fd298
[  211.634065][    C0]  </TASK>
[  211.636031][    C0] Kernel Offset: disabled
[  211.637717][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:44:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888107d28237 R9 =1ffff11020fa5046 R10=dffffc0000000000 R11=ffffffff854efa70
R12=dffffc0000000000 R13=ffffffff99af9906 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1de06666c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32b23ffc CR3=0000000121ee4000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1ddf812e53
XMM06=0000000000000000 00007f1ddf812e4d XMM07=0000000000000000 00007f1ddf812e61
XMM08=0000000000000000 00007f1ddf812ee7 XMM09=0000000000000000 00007f1ddf812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a1094091db089600 RBX=ffffffff819683a8 RCX=a1094091db089600 RDX=0000000000000001
RSI=ffffffff8d9b6a0a RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c30a358 CR3=0000000121ee2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3070987498 00007f3070987470 XMM03=00007f30709874a8 00007f30709874a0
XMM04=00007f30714ed100 00007f3070987460 XMM05=00007f3070987478 00007f30709874c0
XMM06=00007f30709874b8 00007f30709874b0 XMM07=00007f30709874a8 00007f30709874a0
XMM08=0000000000000000 00007f3070812ee7 XMM09=0000000000000000 00007f3070812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
