last executing test programs:

1m11.034269676s ago: executing program 0 (id=334):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1m10.800284628s ago: executing program 0 (id=335):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000800)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2162)
recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062)

1m10.72987807s ago: executing program 0 (id=336):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20002880)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xf9d2, 0x10}, 0x42, 0xc8, 0x0, 0x5, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x1, 0x106)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a", 0xa}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1m10.615724974s ago: executing program 0 (id=342):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=""/158, 0x9e}, 0x2100)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdf7ffff0a0000094890a9a1ebcd2a00060000000000000e05000000010000e1096000302e615f5f61e40000"], 0x0, 0x4c}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000bc0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="700b5e47b7faf35f70eb12152e4caa893b1b40bbef44ef68d2b64772e4cba6b5461cf34d3f70fe8e6cb632ae6c1f615a9e8a3335a723914aa5cc26395b12b254f18de4d3c944633204e57640ad2830465f2750c2f4a52c1cad59e5e5398b84411689", 0x62}, {&(0x7f0000000800)="f998a86bdb2f9b7443530128895b732c9fff70fe0f3e66885802e108224df736f3c7fcae9c774c38e426f2f33f6cbd6f417e0c2177eeeef4ce5296c0e084a44f1512bc388e00a89e477d5d632b9e0184f1c08fbe601a7058c10cba018446c3b4933909433d80ddc6df766100881f18eec8ee6b951b4192201f0c3a6a065d59797a4a947d093d842d3c4feab8e2efbfc2289cb1c9060b68cc81f0d4a4ef48a5ddcff0d67f28fb9592a066df05f0899ed2b845411b4feeca53437ba143cde8ddb88d29f7d59bb5360688df9b213985b97cdebfd6e362b57e79ec96cb3d665d38050b13b4b643f55545ff2c97c7d5b908821ad1643698", 0xf5}], 0x2, &(0x7f0000000940)=[{0xd8, 0x84, 0xff, "74857486f5221d503de050eefec8cb327b9ee4cc2b73965b84cbd5c324948ffa09a677cab86a753281508c36c23746b2da525bedf3e954c99f70119b22bb87f19cdb78208d907498774de8e4ee5462fd94b65edd1294dd446604e79ea5f94d638d2029e290dd03042da85b3a6bacabdf4f8010ae68bace5e0bebea24bd94839c485bed273463e773d5d0b30d908609e4cfeb474f75f799011880fbb691a55f87f27790909298658845780948cdfa7897de7cb3a210468d2490a82b3174b5171d03bec451af8c6e"}, {0xc8, 0x111, 0x7, "c3bbdfacd332cba0e0c0230db769d3b3cbd242c48f45a062b5cbcdd267c5dfef8a0853b2629da3261d70027579415049adada6e58bc1d5fb93d624bb0b90680fe66a402dab6839438b20c0ed8c348164290b032d8612208fba73f9546e3a5c204302897c0c5b0217551ad099f53b2b291b00831d39487b196165b7c73f69e0d7811403a5cea7fd092843e27d97c03e2d302ba23114bd669fda31879e15f75ca2f3a981e571e6265125de4e02675b48569cb9"}, {0xb8, 0x0, 0x7, "c9b5fa8a364fbc7acb23c7f87920c8204dbf98e477898fccd35bc59f1905ed772164c0a162cf529c4c99eace082d9d82d63eb517bc43931871461643a996f420df4b325f96dfe45eeaf77512c95273dc0537312b37f1f72e968c15ba60a3e8bfbf806fde1b985333983334e907929bbda8e7edda841da9b991678e2cc5f02848b694913e1300f02286cf8ebdd84c634eb2e12b1d45edf220c8cda2bffc07fe80c470"}], 0x258}, 0xc054)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})

1m10.085425729s ago: executing program 2 (id=351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280c55c5fd68f398488636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)

1m10.003471847s ago: executing program 2 (id=352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, 0x0, 0x20000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="000003009165a101010000aaaaaaaa07aaaaaaaaaaaa"])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r4 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=""/167, 0xa7}, 0x50)
sendmsg$kcm(r4, 0x0, 0x40)
r5 = socket$kcm(0x28, 0x1, 0x0)
recvmsg(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)
close(r0)
sendmsg$sock(r4, 0x0, 0x4004840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x28, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000006000000000000000000b80e85200000010000004d6a0100fcffffff8510000002000000b7080000000000007b8af8ff00000000b7080000530a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="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"], 0x0, 0xef89, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x8, 0x7f, 0x80}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000b40)=[{0x1, 0x2, 0x7, 0x6}, {0x2, 0x3, 0xe, 0xc8cd675a08617988}, {0x3, 0x3, 0x7, 0x7}, {0x3, 0x5, 0x7, 0xa}, {0x5, 0x3, 0xd, 0x6}], 0x10, 0x7}, 0x94)

1m9.701697766s ago: executing program 2 (id=353):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='GPL\x00'}, 0x90)

1m9.700981654s ago: executing program 2 (id=354):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x6}, 0x14)
close(0xffffffffffffffff)
socketpair(0x2a, 0xa, 0xffffffff, &(0x7f0000000140))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x2e, 0x30, 0x2e]}}, 0x0, 0x59, 0x0, 0x1, 0x7}, 0x28)

1m9.576546949s ago: executing program 0 (id=356):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="bb00000033000b63435a806c8c6f94f90324fc60100003000a000200053582c13780050002000300000000000000", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0)

1m9.491738681s ago: executing program 2 (id=357):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m9.270666122s ago: executing program 2 (id=358):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m9.270337537s ago: executing program 0 (id=359):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711091000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)

1m9.225536612s ago: executing program 32 (id=358):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m9.181665452s ago: executing program 33 (id=359):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711091000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)

677.30796ms ago: executing program 4 (id=1760):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)

607.894369ms ago: executing program 4 (id=1761):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80308, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0x10, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe90}, 0x94)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12)
socket$kcm(0x10, 0x400000002, 0x0)

409.713463ms ago: executing program 4 (id=1764):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x94)

409.513425ms ago: executing program 3 (id=1765):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

409.242386ms ago: executing program 4 (id=1766):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x68}, 0x1, 0x0, 0x0, 0x84880}, 0x2a000000)

409.067163ms ago: executing program 3 (id=1767):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

350.936181ms ago: executing program 3 (id=1768):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x74a, 0xfffffffffffff9f5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

220.44462ms ago: executing program 4 (id=1769):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e0000000000000000020001000000000000000a007fffffff030005002b00000002000000ac1414aa0000000000000000170008007805"], 0x108}, 0x1, 0x7}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x28ae80, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)

186.796758ms ago: executing program 1 (id=1770):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89ff, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})

130.728374ms ago: executing program 1 (id=1771):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@loopback, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x1c00000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x9b}}, @mark={0xc, 0x15, {0x35075c, 0x7ff}}]}, 0xd0}}, 0x0)

130.578697ms ago: executing program 1 (id=1772):
r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0xc000000000, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0x2, 0x5, 0x0, 0x400, 0x0, 0x8000000000000001})

130.302849ms ago: executing program 3 (id=1773):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001815"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
socketpair(0x2, 0x3, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

130.19128ms ago: executing program 1 (id=1774):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)="d80000001c0081044e81f782db44b9040a1d080220000000000000a1180002000700000000000e1208001f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a000000000400000000000068d370deb61684352db41c0bd330ef45ba1ed3c31d2d4f5cf5c4c4c9df3eac1c42b5c72306ba8b9e1244344c5c5b5d32d76b275b71f5276e81bb783f477d445991dedeb0f8385585a33e8d01bb94e3488e", 0x129}], 0x1, 0x0, 0x0, 0x7400}, 0x40020)

60.151051ms ago: executing program 1 (id=1775):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x769e9770d677ea5d)

59.75694ms ago: executing program 1 (id=1776):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

59.559771ms ago: executing program 3 (id=1777):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000010203000000000000200000020000022400028014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x810)

392.157µs ago: executing program 4 (id=1778):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})

0s ago: executing program 3 (id=1779):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="5c00000011006bcc9e3be35c6e03aa31076b876c1d0000007ea60864160af3653c001e00140000001fffffff3000fbd24460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63815' (ED25519) to the list of known hosts.
syzkaller login: [   40.281932][ T5771] cgroup: Unknown subsys name 'net'
[   40.364706][ T5771] cgroup: Unknown subsys name 'cpuset'
[   40.367734][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.498048][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.561488][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.564486][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.575819][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.578376][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.592195][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.531779][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   49.535233][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   49.538387][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   49.542096][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   49.557657][ T5884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   49.560775][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   49.586041][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   49.589118][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   49.592519][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   49.596194][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   49.657419][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   49.660783][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   49.666362][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   49.670188][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   49.673709][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   49.776899][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   49.802858][ T5883] chnl_net:caif_netlink_parms(): no params data found
[   49.906452][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.909278][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.912154][ T5880] bridge_slave_0: entered allmulticast mode
[   49.916105][ T5880] bridge_slave_0: entered promiscuous mode
[   49.927598][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.930707][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.933970][ T5880] bridge_slave_1: entered allmulticast mode
[   49.937711][ T5880] bridge_slave_1: entered promiscuous mode
[   49.950754][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.954452][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.957198][ T5883] bridge_slave_0: entered allmulticast mode
[   49.959887][ T5883] bridge_slave_0: entered promiscuous mode
[   49.962468][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   49.977189][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.981033][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.984096][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.986796][ T5883] bridge_slave_1: entered allmulticast mode
[   49.989640][ T5883] bridge_slave_1: entered promiscuous mode
[   50.009037][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.035863][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.046041][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.050371][ T5880] team0: Port device team_slave_0 added
[   50.059945][ T5880] team0: Port device team_slave_1 added
[   50.092514][ T5883] team0: Port device team_slave_0 added
[   50.095750][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.098372][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.108028][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.112415][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.115749][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.118591][ T5889] bridge_slave_0: entered allmulticast mode
[   50.121642][ T5889] bridge_slave_0: entered promiscuous mode
[   50.126008][ T5883] team0: Port device team_slave_1 added
[   50.135385][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.138077][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.147364][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.156461][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.159336][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.162043][ T5889] bridge_slave_1: entered allmulticast mode
[   50.165289][ T5889] bridge_slave_1: entered promiscuous mode
[   50.179076][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.181601][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.190686][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.195821][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.198632][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.208696][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.218592][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.242094][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.268003][ T5883] hsr_slave_0: entered promiscuous mode
[   50.270962][ T5883] hsr_slave_1: entered promiscuous mode
[   50.280938][ T5880] hsr_slave_0: entered promiscuous mode
[   50.284177][ T5880] hsr_slave_1: entered promiscuous mode
[   50.286404][ T5880] debugfs: 'hsr0' already exists in 'hsr'
[   50.288209][ T5880] Cannot create hsr debugfs directory
[   50.297145][ T5889] team0: Port device team_slave_0 added
[   50.300842][ T5889] team0: Port device team_slave_1 added
[   50.342289][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.345994][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.356723][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.374523][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.377367][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.387067][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.430178][ T5889] hsr_slave_0: entered promiscuous mode
[   50.433195][ T5889] hsr_slave_1: entered promiscuous mode
[   50.435853][ T5889] debugfs: 'hsr0' already exists in 'hsr'
[   50.437876][ T5889] Cannot create hsr debugfs directory
[   50.494124][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.498224][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.512522][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.521893][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.544433][ T5880] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.555051][ T5880] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.559097][ T5880] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.566859][ T5880] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.571795][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.574719][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.577799][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.580619][ T5883] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.599389][ T5889] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.604151][ T5889] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.608579][ T5889] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.622565][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.625546][ T5880] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.628507][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.631411][ T5880] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.636876][ T5889] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.643884][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.647159][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.649923][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.652427][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.691481][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.715338][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.719389][ T5883] 8021q: adding VLAN 0 to HW filter on device team0
[   50.736425][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.738908][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.744148][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   50.754578][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.757487][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.761381][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.764259][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.774126][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.776774][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.785766][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.823443][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   50.844692][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.847835][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.852434][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.855726][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.901781][ T5889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.978243][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.998202][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.016976][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.034081][ T5883] veth0_vlan: entered promiscuous mode
[   51.055576][ T5880] veth0_vlan: entered promiscuous mode
[   51.060707][ T5883] veth1_vlan: entered promiscuous mode
[   51.065846][ T5880] veth1_vlan: entered promiscuous mode
[   51.088470][ T5880] veth0_macvtap: entered promiscuous mode
[   51.093571][ T5880] veth1_macvtap: entered promiscuous mode
[   51.096268][ T5889] veth0_vlan: entered promiscuous mode
[   51.111090][ T5889] veth1_vlan: entered promiscuous mode
[   51.117295][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.120453][ T5883] veth0_macvtap: entered promiscuous mode
[   51.129507][ T5883] veth1_macvtap: entered promiscuous mode
[   51.135219][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.146361][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.152336][ T5886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.157537][ T5886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.161352][ T5886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.169327][ T5889] veth0_macvtap: entered promiscuous mode
[   51.182599][ T5889] veth1_macvtap: entered promiscuous mode
[   51.188187][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.201361][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.209917][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.222438][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.227913][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.233973][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.239319][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.248358][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.257260][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.263465][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.267932][ T5908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.287911][ T5908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.294301][ T5908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.308693][ T5908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.316455][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.319914][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.347448][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.355581][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.386945][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.399978][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.412272][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.417830][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.421762][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.425427][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'.
[   51.425780][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.603557][   T55] Bluetooth: hci0: command tx timeout
[   51.621982][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.673451][   T55] Bluetooth: hci1: command tx timeout
[   51.720472][ T5967] netlink: 'syz.0.31': attribute type 2 has an invalid length.
[   51.726867][ T5967] netlink: 'syz.0.31': attribute type 1 has an invalid length.
[   51.730052][ T5967] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.31'.
[   51.740113][   T55] Bluetooth: hci0: unexpected event 0x01 length: 151 > 1
[   51.744373][ T5967] nbd: couldn't find device at index 16
[   51.756826][   T55] Bluetooth: hci2: command tx timeout
[   51.803284][ T5976] sctp: [Deprecated]: syz.1.34 (pid 5976) Use of int in max_burst socket option deprecated.
[   51.803284][ T5976] Use struct sctp_assoc_value instead
[   51.975359][ T5994] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.44'.
[   52.008200][ T5994] syz.2.44 (5994) used obsolete PPPIOCDETACH ioctl
[   52.159395][ T6004] netlink: 204 bytes leftover after parsing attributes in process `syz.0.47'.
[   52.377505][ T6024] netlink: 'syz.1.56': attribute type 4 has an invalid length.
[   52.937309][ T6069] netlink: 830 bytes leftover after parsing attributes in process `syz.1.79'.
[   52.974783][ T6072] netlink: 'syz.2.80': attribute type 1 has an invalid length.
[   53.081952][   T55] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[   53.122538][ T6082] netlink: 'syz.1.85': attribute type 12 has an invalid length.
[   53.148048][ T6082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.85'.
[   53.284352][ T6082] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET)
[   53.350143][ T6091] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.89'.
[   53.449059][ T6103] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   53.479900][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.95'.
[   53.576166][ T6111] sit0: entered allmulticast mode
[   53.581056][ T6111] sit0: entered promiscuous mode
[   53.605033][ T6107] warning: `syz.0.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.674188][   T55] Bluetooth: hci0: command tx timeout
[   53.683303][    C1] hrtimer: interrupt took 30462 ns
[   53.710709][ T6116] netlink: 'syz.1.100': attribute type 21 has an invalid length.
[   53.730078][ T6116] netlink: 'syz.1.100': attribute type 21 has an invalid length.
[   53.734284][ T6116] netlink: 156 bytes leftover after parsing attributes in process `syz.1.100'.
[   53.757861][   T55] Bluetooth: hci1: command tx timeout
[   53.977003][   T55] Bluetooth: hci2: command tx timeout
[   54.316234][ T6126] netlink: 'syz.1.104': attribute type 1 has an invalid length.
[   54.319474][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[   54.551672][ T6142] netlink: 'syz.1.112': attribute type 29 has an invalid length.
[   54.671045][ T6154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   55.768103][   T55] Bluetooth: hci0: command tx timeout
[   55.834982][   T55] Bluetooth: hci1: command tx timeout
[   55.878176][ T6168] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   55.884219][ T6168] Zero length message leads to an empty skb
[   55.994702][   T55] Bluetooth: hci2: command tx timeout
[   56.379906][ T6184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.407554][   T55] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6
[   56.461339][ T6193] raw_sendmsg: syz.2.132 forgot to set AF_INET. Fix it!
[   56.559848][ T6189] netlink: 'syz.1.131': attribute type 4 has an invalid length.
[   56.563341][ T6189] __nla_validate_parse: 4 callbacks suppressed
[   56.563353][ T6189] netlink: 211448 bytes leftover after parsing attributes in process `syz.1.131'.
[   57.699424][ T6277] netlink: 14 bytes leftover after parsing attributes in process `syz.0.168'.
[   57.833170][   T55] Bluetooth: hci0: command tx timeout
[   57.861746][ T6286] IPv6: Can't replace route, no match found
[   57.913712][   T55] Bluetooth: hci1: command tx timeout
[   57.990821][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.178'.
[   57.994849][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'.
[   58.103191][   T55] Bluetooth: hci2: command tx timeout
[   58.604286][ T6304] netlink: 76 bytes leftover after parsing attributes in process `syz.1.180'.
[   58.762274][ T6311] netlink: 104 bytes leftover after parsing attributes in process `syz.1.183'.
[   58.767736][ T6314] netlink: 'syz.2.184': attribute type 2 has an invalid length.
[   58.770924][ T6314] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.184'.
[   58.862023][ T6320] netlink: 'syz.2.187': attribute type 10 has an invalid length.
[   58.871775][ T6320] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.187'.
[   58.943540][ T6327] syzkaller0: entered promiscuous mode
[   58.946119][ T6327] syzkaller0: entered allmulticast mode
[   59.155340][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'.
[   59.466526][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.470797][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.698420][ T6354] netlink: 'syz.0.203': attribute type 1 has an invalid length.
[   61.263387][ T6402] netlink: 'syz.0.225': attribute type 10 has an invalid length.
[   61.266359][ T6402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.225'.
[   61.271644][ T6402] batman_adv: batadv0: Adding interface: hsr_slave_1
[   61.274598][ T6402] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.283942][ T6402] batman_adv: batadv0: Interface activated: hsr_slave_1
[   61.780997][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'.
[   61.931514][ T6433] netlink: 'syz.1.237': attribute type 3 has an invalid length.
[   61.938223][ T6433] netlink: 'syz.1.237': attribute type 10 has an invalid length.
[   61.949259][ T6435] netlink: 'syz.0.238': attribute type 3 has an invalid length.
[   61.952462][ T6435] netlink: 'syz.0.238': attribute type 2 has an invalid length.
[   61.956091][ T6435] netlink: 130500 bytes leftover after parsing attributes in process `syz.0.238'.
[   61.991877][ T6440] netlink: 180 bytes leftover after parsing attributes in process `syz.0.240'.
[   62.016536][ T6442] lo speed is unknown, defaulting to 1000
[   62.027979][ T6442] lo speed is unknown, defaulting to 1000
[   62.031647][ T6442] lo speed is unknown, defaulting to 1000
[   62.048480][ T6442] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.078153][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'.
[   62.098905][ T6442] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   62.253324][ T6442] lo speed is unknown, defaulting to 1000
[   62.262631][ T6442] lo speed is unknown, defaulting to 1000
[   62.268419][ T6442] lo speed is unknown, defaulting to 1000
[   62.744329][ T6487] netlink: 'syz.1.254': attribute type 41 has an invalid length.
[   62.747437][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'.
[   62.765719][ T6489] netlink: 'syz.1.255': attribute type 9 has an invalid length.
[   62.930487][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'.
[   62.934806][ T6503] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   62.980818][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'.
[   63.157304][ T6525] netlink: 56 bytes leftover after parsing attributes in process `syz.1.273'.
[   63.431713][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'.
[   63.613225][ T6568] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.293'.
[   67.957588][ T6649] IPv6: NLM_F_REPLACE set, but no existing node found!
[   67.962851][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.966226][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.777864][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.780562][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.783598][ T6649] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[   68.792192][ T6649] batman_adv: batadv0: Removing interface: hsr_slave_1
[   69.854613][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1221280286 wd_nsec: 1221280301
[   70.619689][ T6671] validate_nla: 2 callbacks suppressed
[   70.619704][ T6671] netlink: 'syz.2.338': attribute type 10 has an invalid length.
[   70.626157][ T6671] veth1_vlan: entered allmulticast mode
[   70.666649][ T6678] __nla_validate_parse: 3 callbacks suppressed
[   70.666659][ T6678] netlink: 52 bytes leftover after parsing attributes in process `syz.1.341'.
[   70.869925][ T6689] netlink: 'syz.0.342': attribute type 39 has an invalid length.
[   71.057417][ T6699] netlink: 'syz.2.350': attribute type 10 has an invalid length.
[   71.102589][ T6699] batman_adv: batadv0: Adding interface: netdevsim0
[   71.105767][ T6699] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.123597][ T6699] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   71.194606][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.197558][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.501600][ T6708] netlink: 'syz.2.354': attribute type 64 has an invalid length.
[   72.009086][ T5908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.074168][ T5908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.120917][ T5908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.140204][ T5908] batman_adv: batadv0: Removing interface: netdevsim0
[   72.145151][ T5908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.204828][ T5908] bridge_slave_1: left allmulticast mode
[   72.207131][ T5908] bridge_slave_1: left promiscuous mode
[   72.209723][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.214402][ T5908] bridge_slave_0: left allmulticast mode
[   72.219055][ T5908] bridge_slave_0: left promiscuous mode
[   72.226353][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.337891][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.343630][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.348412][ T5908] bond0 (unregistering): Released all slaves
[   72.519792][ T5908] hsr_slave_0: left promiscuous mode
[   72.522205][ T5908] hsr_slave_1: left promiscuous mode
[   72.524662][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.527097][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.530266][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.533621][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.538378][ T5908] veth1_macvtap: left promiscuous mode
[   72.540625][ T5908] veth0_macvtap: left promiscuous mode
[   72.542920][ T5908] veth0_vlan: left promiscuous mode
[   72.617795][ T5908] team0 (unregistering): Port device team_slave_1 removed
[   72.634179][ T5908] team0 (unregistering): Port device team_slave_0 removed
[   74.034297][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.037821][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.041270][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.046608][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.050676][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.067110][ T6761] lo speed is unknown, defaulting to 1000
[   74.127287][ T6761] chnl_net:caif_netlink_parms(): no params data found
[   74.179232][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.182262][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.185822][ T6761] bridge_slave_0: entered allmulticast mode
[   74.189075][ T6761] bridge_slave_0: entered promiscuous mode
[   74.193691][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.196758][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.199742][ T6761] bridge_slave_1: entered allmulticast mode
[   74.202926][ T6761] bridge_slave_1: entered promiscuous mode
[   74.221744][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.228125][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.246201][ T6761] team0: Port device team_slave_0 added
[   74.250754][ T6761] team0: Port device team_slave_1 added
[   74.266637][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.269691][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.281040][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.287254][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.290207][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.301046][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.326300][ T6761] hsr_slave_0: entered promiscuous mode
[   74.329140][ T6761] hsr_slave_1: entered promiscuous mode
[   74.331907][ T6761] debugfs: 'hsr0' already exists in 'hsr'
[   74.334641][ T6761] Cannot create hsr debugfs directory
[   74.384024][ T6761] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.387870][ T6761] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.391670][ T6761] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.397671][ T6761] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.412839][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.415343][ T6761] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.417902][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.420684][ T6761] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.448844][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.456733][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.459473][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.466991][ T6761] 8021q: adding VLAN 0 to HW filter on device team0
[   74.474144][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.477216][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.484159][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.486748][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.586095][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.689791][ T6761] veth0_vlan: entered promiscuous mode
[   74.694816][ T6761] veth1_vlan: entered promiscuous mode
[   74.706049][ T6761] veth0_macvtap: entered promiscuous mode
[   74.709681][ T6761] veth1_macvtap: entered promiscuous mode
[   74.718546][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.725624][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.730475][ T5908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.734685][ T5908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.739227][ T5908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.743379][ T5908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.767253][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.769976][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.782265][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.786025][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.538309][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.542818][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.547303][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.553077][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.558337][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.580858][ T6799] lo speed is unknown, defaulting to 1000
[   75.663833][ T6813] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   75.665131][ T6799] chnl_net:caif_netlink_parms(): no params data found
[   75.708089][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.710669][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.713688][ T6799] bridge_slave_0: entered allmulticast mode
[   75.716821][ T6799] bridge_slave_0: entered promiscuous mode
[   75.720359][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.723954][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.732734][ T6799] bridge_slave_1: entered allmulticast mode
[   75.736189][ T6799] bridge_slave_1: entered promiscuous mode
[   75.756874][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.761510][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.794605][ T6799] team0: Port device team_slave_0 added
[   75.797627][ T6799] team0: Port device team_slave_1 added
[   75.809534][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.812077][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.832159][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.838800][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.841816][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.857499][ T6823] netlink: 'syz.1.375': attribute type 4 has an invalid length.
[   75.860698][ T6823] netlink: 'syz.1.375': attribute type 2 has an invalid length.
[   75.864251][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.865801][ T6823] netlink: 199288 bytes leftover after parsing attributes in process `syz.1.375'.
[   75.897965][ T6799] hsr_slave_0: entered promiscuous mode
[   75.902093][ T6799] hsr_slave_1: entered promiscuous mode
[   75.908144][ T6799] debugfs: 'hsr0' already exists in 'hsr'
[   75.910559][ T6799] Cannot create hsr debugfs directory
[   75.994225][ T6799] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.000011][ T6799] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.010592][ T6799] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.027702][ T6799] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.055800][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.058367][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.061062][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.063815][ T6799] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.076729][ T5881] Bluetooth: hci1: command tx timeout
[   76.091730][ T6843] netlink: 'syz.1.382': attribute type 2 has an invalid length.
[   76.099079][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.124775][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.128407][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.145969][ T6799] 8021q: adding VLAN 0 to HW filter on device team0
[   76.160766][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.163528][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.174193][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.176858][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.334324][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.338380][ T6849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.385'.
[   76.369107][ T6849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.385'.
[   76.418582][ T6799] veth0_vlan: entered promiscuous mode
[   76.427226][ T6799] veth1_vlan: entered promiscuous mode
[   76.439827][ T6849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.385'.
[   76.448853][ T6799] veth0_macvtap: entered promiscuous mode
[   76.452525][ T6799] veth1_macvtap: entered promiscuous mode
[   76.460871][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.471849][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.481607][ T5886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.486501][ T5886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.489747][ T5886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.492827][ T5886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.531738][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.536167][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.548132][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.551126][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.668310][ T6876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.394'.
[   76.726593][ T6880] openvswitch: netlink: Missing valid actions attribute.
[   76.729760][ T6880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.028383][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'.
[   77.041439][ T5881] Bluetooth: hci1: SCO packet for unknown connection handle 434
[   77.259238][ T6925] netlink: 'syz.4.417': attribute type 1 has an invalid length.
[   77.266511][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'.
[   77.615910][ T5881] Bluetooth: hci2: command tx timeout
[   78.163313][ T5881] Bluetooth: hci1: command tx timeout
[   78.169232][ T6983] =======================================================
[   78.169232][ T6983] WARNING: The mand mount option has been deprecated and
[   78.169232][ T6983]          and is ignored by this kernel. Remove the mand
[   78.169232][ T6983]          option from the mount to silence this warning.
[   78.169232][ T6983] =======================================================
[   79.233689][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'.
[   79.280761][ T7010] netlink: 17 bytes leftover after parsing attributes in process `syz.3.452'.
[   79.286153][ T7010] netlink: zone id is out of range
[   79.288553][ T7010] netlink: zone id is out of range
[   79.290836][ T7010] netlink: zone id is out of range
[   79.303319][ T7010] netlink: zone id is out of range
[   79.305562][ T7010] netlink: zone id is out of range
[   79.307705][ T7010] netlink: zone id is out of range
[   79.309764][ T7010] netlink: zone id is out of range
[   79.312006][ T7010] netlink: zone id is out of range
[   79.422694][ T7015] delete_channel: no stack
[   79.474320][ T7020] netlink: 277 bytes leftover after parsing attributes in process `syz.3.457'.
[   79.673454][ T5881] Bluetooth: hci2: command tx timeout
[   80.233521][ T5881] Bluetooth: hci1: command tx timeout
[   80.246570][ T7052] netlink: 'syz.1.472': attribute type 4 has an invalid length.
[   80.493856][ T7075] netlink: 'syz.4.482': attribute type 3 has an invalid length.
[   80.566573][ T7081] netlink: 'syz.4.486': attribute type 10 has an invalid length.
[   80.576352][ T7081] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   81.058276][ T7099] __nla_validate_parse: 6 callbacks suppressed
[   81.058291][ T7099] netlink: 10 bytes leftover after parsing attributes in process `syz.3.493'.
[   81.270072][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'.
[   81.457549][   T24] cfg80211: failed to load regulatory.db
[   81.532394][ T7127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.504'.
[   81.753330][ T5881] Bluetooth: hci2: command tx timeout
[   81.980160][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'.
[   82.141606][   T34] audit: type=1107 audit(1756244539.173:2): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[   82.141606][   T34] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[   82.141606][   T34] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[   82.141606][   T34] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[   82.148698][ T7145] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[   82.313431][ T5881] Bluetooth: hci1: command tx timeout
[   82.488964][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'.
[   82.492277][ T7163] netlink: 6 bytes leftover after parsing attributes in process `syz.3.514'.
[   82.600794][ T7171] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[   82.603877][ T7171] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.524'.
[   82.828263][ T7184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.530'.
[   82.924748][ T5881] Bluetooth: hci1: Malformed LE Event: 0x0d
[   83.027047][ T7201] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[   83.199485][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[   83.204251][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'.
[   83.242129][ T7215] : entered promiscuous mode
[   83.776808][ T7240] netlink: 'syz.3.555': attribute type 6 has an invalid length.
[   83.833249][ T5881] Bluetooth: hci2: command tx timeout
[   87.204527][ T7278] syzkaller0: entered promiscuous mode
[   87.207653][ T7278] syzkaller0: entered allmulticast mode
[   87.357627][ T7292] __nla_validate_parse: 5 callbacks suppressed
[   87.357638][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'.
[   87.540197][ T7306] netlink: 144 bytes leftover after parsing attributes in process `syz.3.584'.
[   87.548701][ T7303] netlink: 160 bytes leftover after parsing attributes in process `syz.4.580'.
[   87.706346][ T7323] netlink: 56 bytes leftover after parsing attributes in process `syz.3.591'.
[   88.676901][ T7339] netlink: 172 bytes leftover after parsing attributes in process `syz.3.598'.
[   88.681498][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'.
[   88.696934][ T7340] netlink: 'syz.4.595': attribute type 10 has an invalid length.
[   88.706767][ T7340] geneve0: entered promiscuous mode
[   88.747915][ T7340] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   88.751462][ T7344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.600'.
[   88.951558][ T7368] net_ratelimit: 74 callbacks suppressed
[   88.951580][ T7368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.212496][ T7421] siw: device registration error -23
[   90.455140][ T7438] netlink: 948 bytes leftover after parsing attributes in process `syz.3.634'.
[   90.531225][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'.
[   90.535204][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'.
[   92.055224][ T7498] sit0: entered allmulticast mode
[   92.060413][ T7498] sit0: entered promiscuous mode
[   92.242719][ T7526] netlink: 'syz.3.671': attribute type 1 has an invalid length.
[   93.158066][ T5881] Bluetooth: hci1: Malformed LE Event: 0x02
[   93.367368][ T7552] netlink: 'syz.4.682': attribute type 26 has an invalid length.
[   93.393499][ T7554] netlink: 'syz.4.683': attribute type 21 has an invalid length.
[   93.397123][ T7554] netlink: 'syz.4.683': attribute type 1 has an invalid length.
[   93.744698][ T7569] __nla_validate_parse: 2 callbacks suppressed
[   93.744714][ T7569] netlink: 48 bytes leftover after parsing attributes in process `syz.1.690'.
[   94.023228][ T7585] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   94.104444][ T7588] netlink: 'syz.3.697': attribute type 40 has an invalid length.
[   94.108071][ T7588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.697'.
[   94.480957][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'.
[   94.602090][ T7617] netlink: 'syz.4.711': attribute type 21 has an invalid length.
[   94.635370][ T7619] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.712'.
[   94.673829][ T7624] netlink: 'syz.4.714': attribute type 3 has an invalid length.
[   94.676883][ T7624] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.714'.
[   94.854792][ T7633] netlink: 'syz.1.719': attribute type 3 has an invalid length.
[   94.858130][ T7633] netlink: 'syz.1.719': attribute type 1 has an invalid length.
[   94.861395][ T7633] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.719'.
[   95.032168][ T7651] netlink: 80 bytes leftover after parsing attributes in process `syz.3.727'.
[   95.111049][ T7658] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.730'.
[   95.175595][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.178189][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.182593][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.188381][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.262049][ T7673] syzkaller0: entered promiscuous mode
[   95.264479][ T7673] syzkaller0: entered allmulticast mode
[   96.309321][ T5881] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[   96.670419][ T7730] netlink: 124 bytes leftover after parsing attributes in process `syz.3.763'.
[   96.677315][ T7730] netlink: 124 bytes leftover after parsing attributes in process `syz.3.763'.
[   96.786052][ T7736] netlink: 'syz.3.766': attribute type 10 has an invalid length.
[   96.826451][ T7740] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[   96.864975][ T7744] tun0: tun_chr_ioctl cmd 1074025677
[   96.867537][ T7744] tun0: linktype set to 774
[   96.978855][ T7760] openvswitch: netlink: Message has 4 unknown bytes.
[   97.002613][ T7762] netlink: 'syz.4.778': attribute type 10 has an invalid length.
[   97.009709][ T7762] team0: Port device syz_tun added
[   97.029113][ T7762] syz.4.778 (7762) used greatest stack depth: 20112 bytes left
[   97.082445][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.097690][ T7772] netlink: 'syz.1.783': attribute type 21 has an invalid length.
[   97.366758][ T5881] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[   98.069995][ T7823] netlink: 'syz.1.806': attribute type 22 has an invalid length.
[   98.421544][ T7846] sit0: left promiscuous mode
[   98.424095][ T7846] sit0: left allmulticast mode
[   98.452314][ T7846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.635371][ T7857] syz.3.822: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   98.650932][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT(full) 
[   98.650955][ T7857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.650964][ T7857] Call Trace:
[   98.650970][ T7857]  <TASK>
[   98.650976][ T7857]  dump_stack_lvl+0x189/0x250
[   98.651000][ T7857]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.651017][ T7857]  ? __pfx__printk+0x10/0x10
[   98.651035][ T7857]  ? lock_release+0x4b/0x3e0
[   98.651056][ T7857]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   98.651083][ T7857]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   98.651098][ T7857]  warn_alloc+0x214/0x310
[   98.651119][ T7857]  ? stack_depot_save_flags+0x41b/0x860
[   98.651138][ T7857]  ? __pfx_warn_alloc+0x10/0x10
[   98.651159][ T7857]  ? kasan_save_track+0x4f/0x80
[   98.651175][ T7857]  ? xskq_create+0x56/0x170
[   98.651223][ T7857]  ? xsk_init_queue+0xb0/0x110
[   98.651240][ T7857]  ? xsk_setsockopt+0x57b/0x8d0
[   98.651255][ T7857]  ? do_sock_setsockopt+0x17c/0x1b0
[   98.651268][ T7857]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   98.651279][ T7857]  ? do_syscall_64+0xfa/0x3b0
[   98.651299][ T7857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.651316][ T7857]  __vmalloc_node_range_noprof+0x125/0x12f0
[   98.651344][ T7857]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   98.651372][ T7857]  ? __kasan_kmalloc+0x93/0xb0
[   98.651391][ T7857]  vmalloc_user_noprof+0xad/0xf0
[   98.651410][ T7857]  ? xskq_create+0xbf/0x170
[   98.651428][ T7857]  xskq_create+0xbf/0x170
[   98.651448][ T7857]  xsk_init_queue+0xb0/0x110
[   98.651476][ T7857]  xsk_setsockopt+0x57b/0x8d0
[   98.651494][ T7857]  ? __pfx_xsk_setsockopt+0x10/0x10
[   98.651511][ T7857]  ? __pfx_aa_sk_perm+0x10/0x10
[   98.651531][ T7857]  ? lock_release+0x4b/0x3e0
[   98.651550][ T7857]  ? perf_trace_preemptirq_template+0x280/0x340
[   98.651570][ T7857]  ? aa_sock_opt_perm+0xff/0x1b0
[   98.651583][ T7857]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   98.651597][ T7857]  ? __pfx_xsk_setsockopt+0x10/0x10
[   98.651614][ T7857]  do_sock_setsockopt+0x17c/0x1b0
[   98.651627][ T7857]  __x64_sys_setsockopt+0x13f/0x1b0
[   98.651642][ T7857]  do_syscall_64+0xfa/0x3b0
[   98.651659][ T7857]  ? rcu_is_watching+0x15/0xb0
[   98.651674][ T7857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.651685][ T7857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.651697][ T7857] RIP: 0033:0x7fd96df8ebe9
[   98.651709][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.651721][ T7857] RSP: 002b:00007fd96ee8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   98.651735][ T7857] RAX: ffffffffffffffda RBX: 00007fd96e1b5fa0 RCX: 00007fd96df8ebe9
[   98.651744][ T7857] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[   98.651751][ T7857] RBP: 00007fd96e011e19 R08: 0000000000000004 R09: 0000000000000000
[   98.651758][ T7857] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   98.651765][ T7857] R13: 00007fd96e1b6038 R14: 00007fd96e1b5fa0 R15: 00007ffeebc55a08
[   98.651778][ T7857]  </TASK>
[   98.652003][ T7857] Mem-Info:
[   98.849233][ T7857] active_anon:6742 inactive_anon:7 isolated_anon:0
[   98.849233][ T7857]  active_file:12290 inactive_file:38356 isolated_file:0
[   98.849233][ T7857]  unevictable:1768 dirty:365 writeback:0
[   98.849233][ T7857]  slab_reclaimable:9992 slab_unreclaimable:68127
[   98.849233][ T7857]  mapped:18037 shmem:2451 pagetables:935
[   98.849233][ T7857]  sec_pagetables:0 bounce:0
[   98.849233][ T7857]  kernel_misc_reclaimable:0
[   98.849233][ T7857]  free:271050 free_pcp:19596 free_cma:0
[   98.869595][ T7857] Node 0 active_anon:12612kB inactive_anon:28kB active_file:2012kB inactive_file:132944kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:68312kB dirty:996kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7440kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   98.883868][ T7857] Node 1 active_anon:14356kB inactive_anon:0kB active_file:47148kB inactive_file:20480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3836kB dirty:464kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4272kB pagetables:1348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   98.901155][ T7857] Node 0 DMA free:14852kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:384kB free_cma:0kB
[   98.916314][ T7857] lowmem_reserve[]: 0 811 811 811 811
[   98.918568][ T7857] Node 0 DMA32 free:215348kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12680kB inactive_anon:28kB active_file:2012kB inactive_file:132944kB unevictable:3536kB writepending:996kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:26596kB local_pcp:13952kB free_cma:0kB
[   98.932453][ T7857] lowmem_reserve[]: 0 0 0 0 0
[   98.934890][ T7857] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   98.950854][ T7857] lowmem_reserve[]: 0 0 854 854 854
[   98.954772][ T7857] Node 1 Normal free:395256kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14356kB inactive_anon:0kB active_file:47148kB inactive_file:20480kB unevictable:3536kB writepending:464kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:51744kB local_pcp:32488kB free_cma:0kB
[   98.970180][ T7857] lowmem_reserve[]: 0 0 0 0 0
[   98.974762][ T7857] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14852kB
[   98.981273][ T7857] Node 0 DMA32: 441*4kB (UME) 268*8kB (UME) 163*16kB (UME) 400*32kB (UM) 62*64kB (UME) 82*128kB (UME) 43*256kB (UME) 27*512kB (UM) 21*1024kB (UM) 8*2048kB (UM) 29*4096kB (U) = 215284kB
[   98.990269][ T7857] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   99.013527][ T7857] Node 1 Normal: 1663*4kB (UME) 717*8kB (UME) 968*16kB (UM) 804*32kB (UME) 235*64kB (UME) 64*128kB (UME) 24*256kB (UM) 18*512kB (UM) 20*1024kB (UME) 12*2048kB (UM) 63*4096kB (UM) = 395300kB
[   99.022006][ T7857] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   99.049947][ T7857] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   99.055232][ T7857] 53097 total pagecache pages
[   99.057728][ T7857] 0 pages in swap cache
[   99.059595][ T7857] Free swap  = 124996kB
[   99.061096][ T7857] Total swap = 124996kB
[   99.062844][ T7857] 786301 pages RAM
[   99.068235][ T7857] 0 pages HighMem/MovableOnly
[   99.070827][ T7857] 241335 pages reserved
[   99.073547][ T7857] 0 pages cma reserved
[   99.495287][ T7893] __nla_validate_parse: 6 callbacks suppressed
[   99.495298][ T7893] netlink: 176 bytes leftover after parsing attributes in process `syz.1.839'.
[   99.595944][ T7899] validate_nla: 3 callbacks suppressed
[   99.595954][ T7899] netlink: 'syz.4.842': attribute type 14 has an invalid length.
[   99.728920][ T7916] netlink: 'syz.4.848': attribute type 1 has an invalid length.
[   99.732470][ T7916] netlink: 'syz.4.848': attribute type 2 has an invalid length.
[   99.736365][ T7916] netlink: 'syz.4.848': attribute type 4 has an invalid length.
[   99.740237][ T7916] netlink: 'syz.4.848': attribute type 1 has an invalid length.
[   99.743942][ T7916] netlink: 'syz.4.848': attribute type 2 has an invalid length.
[   99.747255][ T7916] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.848'.
[   99.750999][ T7916] netlink: 'syz.4.848': attribute type 1 has an invalid length.
[   99.754965][ T7916] netlink: 'syz.4.848': attribute type 2 has an invalid length.
[  100.496740][ T7967] syzkaller1: tun_chr_ioctl cmd 2148553947
[  100.615262][ T7970] netlink: 'syz.4.868': attribute type 21 has an invalid length.
[  100.618642][ T7970] netlink: 128 bytes leftover after parsing attributes in process `syz.4.868'.
[  100.622631][ T7970] netlink: 'syz.4.868': attribute type 4 has an invalid length.
[  101.654723][ T7987] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.659013][ T7987] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.715797][ T8000] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.647277][ T7987] syz.1.874 (7987) used greatest stack depth: 19184 bytes left
[  102.759843][ T8013] netlink: 188 bytes leftover after parsing attributes in process `syz.1.886'.
[  102.973862][ T8035] netlink: 55 bytes leftover after parsing attributes in process `syz.3.893'.
[  103.129066][ T8041] team0: Port device geneve1 added
[  103.513192][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  104.180014][ T8091] netlink: 56 bytes leftover after parsing attributes in process `syz.4.918'.
[  104.881356][ T8113] netlink: 830 bytes leftover after parsing attributes in process `syz.4.928'.
[  104.991612][ T8126] validate_nla: 3 callbacks suppressed
[  104.991628][ T8126] netlink: 'syz.1.935': attribute type 2 has an invalid length.
[  104.999944][ T8128] netlink: 160 bytes leftover after parsing attributes in process `syz.3.936'.
[  106.167768][ T8187] netlink: 'syz.1.960': attribute type 3 has an invalid length.
[  106.170969][ T8187] netlink: 'syz.1.960': attribute type 1 has an invalid length.
[  106.194521][ T8187] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.960'.
[  106.494176][ T8211] netlink: 132 bytes leftover after parsing attributes in process `syz.4.971'.
[  106.540569][ T8216] netlink: 'syz.3.973': attribute type 1 has an invalid length.
[  106.590484][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.976'.
[  106.595007][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.976'.
[  106.616846][ T8226] netlink: 132 bytes leftover after parsing attributes in process `syz.4.977'.
[  106.867417][ T8244] netlink: 'syz.1.986': attribute type 19 has an invalid length.
[  106.870641][ T8244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.986'.
[  107.061557][ T5881] Bluetooth: hci2: adv larger than maximum supported
[  107.092264][ T8259] lo speed is unknown, defaulting to 1000
[  107.142945][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'.
[  107.144382][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.994'.
[  107.232701][ T5881] Bluetooth: hci1: Malformed HCI Event: 0x22
[  107.507614][ T8287] netlink: 'syz.1.1004': attribute type 21 has an invalid length.
[  107.829439][ T8308] netlink: 'syz.3.1014': attribute type 2 has an invalid length.
[  107.832968][ T8308] netlink: 'syz.3.1014': attribute type 1 has an invalid length.
[  107.886068][ T8315] netlink: 'syz.1.1017': attribute type 21 has an invalid length.
[  107.889459][ T8315] IPv6: NLM_F_CREATE should be specified when creating new route
[  107.892932][ T8315] IPv6: Can't replace route, no match found
[  108.126770][ T8337] netlink: 'syz.3.1028': attribute type 39 has an invalid length.
[  108.148159][ T8339] syzkaller1: tun_chr_ioctl cmd 1074025677
[  108.150880][ T8339] syzkaller1: linktype set to 780
[  108.243177][ T8275] delete_channel: no stack
[  108.259976][ T8341] nftables ruleset with unbound chain
[  108.642745][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.126799][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.923918][ T8439] sctp: [Deprecated]: syz.1.1077 (pid 8439) Use of int in max_burst socket option deprecated.
[  109.923918][ T8439] Use struct sctp_assoc_value instead
[  109.957740][ T8441] __nla_validate_parse: 10 callbacks suppressed
[  109.957749][ T8441] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1080'.
[  110.162675][ T8458] sctp: [Deprecated]: syz.1.1086 (pid 8458) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.162675][ T8458] Use struct sctp_sack_info instead
[  111.502021][ T8518] openvswitch: netlink: Flow actions attr not present in new flow.
[  112.052329][ T8536] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1121'.
[  112.249629][ T8542] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1124'.
[  112.421456][ T8555] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1130'.
[  112.433287][ T8555] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1130'.
[  112.465296][ T8559] validate_nla: 2 callbacks suppressed
[  112.465305][ T8559] netlink: 'syz.1.1132': attribute type 12 has an invalid length.
[  112.470553][ T8559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1132'.
[  112.518994][ T8563] netlink: 'syz.3.1134': attribute type 29 has an invalid length.
[  112.523905][ T8563] netlink: 'syz.3.1134': attribute type 29 has an invalid length.
[  112.578003][ T8569] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  112.581396][ T8569] netlink: 'syz.1.1137': attribute type 2 has an invalid length.
[  112.585462][ T8569] netlink: 'syz.1.1137': attribute type 7 has an invalid length.
[  112.588805][ T8569] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1137'.
[  112.592893][ T8569] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  112.597628][ T8569] netlink: 'syz.1.1137': attribute type 2 has an invalid length.
[  112.601242][ T8569] netlink: 130076 bytes leftover after parsing attributes in process `syz.1.1137'.
[  112.636094][ T8575] dvmrp1: tun_chr_ioctl cmd 35108
[  112.655130][ T8577] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  112.689779][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'.
[  112.780814][ T8587] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1146'.
[  112.788576][ T8587] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  113.174413][ T5881] Bluetooth: hci1: Malformed LE Event: 0x0b
[  113.423813][ T8633] macvtap0: refused to change device tx_queue_len
[  113.900840][ T8662] delete_channel: no stack
[  114.079713][ T8674] netlink: 'syz.3.1179': attribute type 1 has an invalid length.
[  114.298149][ T8686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.341776][ T8690] syzkaller0: entered promiscuous mode
[  114.345085][ T8690] syzkaller0: entered allmulticast mode
[  115.349883][ T8726] __nla_validate_parse: 7 callbacks suppressed
[  115.349898][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1206'.
[  115.394713][ T8730] netlink: 'syz.4.1208': attribute type 13 has an invalid length.
[  115.436198][ T8734] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1210'.
[  115.902682][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  116.420103][ T8766] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1226'.
[  116.467935][ T8773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1229'.
[  116.472788][ T8773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1229'.
[  116.812532][ T8803] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.1242'.
[  116.913479][ T8809] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1246'.
[  117.280493][ T8834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1256'.
[  117.303936][ T8834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1256'.
[  118.567954][ T8876] sctp: [Deprecated]: syz.1.1274 (pid 8876) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.567954][ T8876] Use struct sctp_sack_info instead
[  118.704204][ T8894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  119.159351][ T5881] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  119.537657][ T8935] validate_nla: 11 callbacks suppressed
[  119.537667][ T8935] netlink: 'syz.4.1298': attribute type 13 has an invalid length.
[  119.543674][ T8935] netlink: 'syz.4.1298': attribute type 17 has an invalid length.
[  120.552477][ T8969] __nla_validate_parse: 11 callbacks suppressed
[  120.552491][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1313'.
[  120.831519][ T8980] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1318'.
[  121.085110][ T8997] netlink: 'syz.1.1326': attribute type 21 has an invalid length.
[  121.087963][ T8997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1326'.
[  121.122688][ T9003] netlink: 'syz.4.1329': attribute type 15 has an invalid length.
[  121.125664][ T9003] netlink: 11318 bytes leftover after parsing attributes in process `syz.4.1329'.
[  121.409085][ T9033] netlink: 'syz.4.1342': attribute type 4 has an invalid length.
[  121.412295][ T9033] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1342'.
[  121.524745][ T9041] netlink: 'syz.4.1346': attribute type 12 has an invalid length.
[  121.527503][ T9041] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1346'.
[  121.635326][ T9056] netlink: 'syz.3.1353': attribute type 17 has an invalid length.
[  121.638147][ T9056] netlink: 'syz.3.1353': attribute type 16 has an invalid length.
[  121.641462][ T9056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1353'.
[  121.749852][ T9069] netlink: 703 bytes leftover after parsing attributes in process `syz.4.1359'.
[  121.769946][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'.
[  121.873794][ T9075] netlink: 'syz.3.1358': attribute type 1 has an invalid length.
[  121.913152][ T9075] netlink: 'syz.3.1358': attribute type 4 has an invalid length.
[  121.915835][ T9075] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1358'.
[  122.760818][ T9088] 8021q: adding VLAN 0 to HW filter on device team0
[  122.765871][ T9088] bond0: (slave team0): Enslaving as an active interface with an up link
[  122.799122][ T9088] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  122.835278][ T9088] can: request_module (can-proto-0) failed.
[  122.864769][ T9099] sit0: entered allmulticast mode
[  122.941317][ T9099] sit0: entered promiscuous mode
[  123.204559][ T5881] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  123.208424][ T5881] Bluetooth: hci0: Injecting HCI hardware error event
[  123.211492][ T5881] Bluetooth: hci0: hardware error 0x00
[  123.275595][ T9116] openvswitch: netlink: Message has 4 unknown bytes.
[  125.247088][ T9184] validate_nla: 4 callbacks suppressed
[  125.247256][ T9184] netlink: 'syz.3.1407': attribute type 29 has an invalid length.
[  125.255299][ T9184] netlink: 'syz.3.1407': attribute type 29 has an invalid length.
[  125.273887][ T5881] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  125.437303][ T9195] lo speed is unknown, defaulting to 1000
[  125.479420][ T9199] netlink: 'syz.4.1412': attribute type 29 has an invalid length.
[  125.486487][ T9199] netlink: 'syz.4.1412': attribute type 29 has an invalid length.
[  125.513580][ T9202] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.517546][ T9202] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.586000][ T9208] __nla_validate_parse: 9 callbacks suppressed
[  125.586016][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'.
[  125.710631][ T9211] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1414'.
[  125.730840][ T9211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  126.044555][ T9223] netlink: 'syz.3.1422': attribute type 46 has an invalid length.
[  126.047909][ T9223] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1422'.
[  126.173686][ T9230] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  126.689413][ T9260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1438'.
[  126.693574][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1438'.
[  126.697486][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'.
[  126.867592][ T9264] lo speed is unknown, defaulting to 1000
[  126.952983][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'.
[  127.027750][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'.
[  127.061655][ T9276] netlink: 'syz.1.1445': attribute type 4 has an invalid length.
[  127.065061][ T9276] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1445'.
[  127.128327][ T9276] .`: renamed from bond0 (while UP)
[  127.432114][ T9309] veth0_vlan: entered allmulticast mode
[  127.465034][   T34] audit: type=1107 audit(1756244584.503:3): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  127.471240][ T9309] : renamed from vlan0
[  127.714831][ T9339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1475'.
[  127.749245][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.751932][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.768151][ T9343] bridge0: entered allmulticast mode
[  127.777035][ T9343] bridge_slave_1: left allmulticast mode
[  127.779334][ T9343] bridge_slave_1: left promiscuous mode
[  127.781809][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.787056][ T9343] bridge_slave_0: left allmulticast mode
[  127.789721][ T9343] bridge_slave_0: left promiscuous mode
[  127.792390][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.244652][ T9375] netlink: ct family unspecified
[  128.246943][ T9375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.247947][ T9377] netlink: 'syz.1.1492': attribute type 5 has an invalid length.
[  128.254877][ T9377] netlink: 'syz.1.1492': attribute type 5 has an invalid length.
[  131.394127][ T9396] __nla_validate_parse: 4 callbacks suppressed
[  131.394187][ T9396] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1500'.
[  132.230130][ T9451] netlink: 'syz.3.1524': attribute type 1 has an invalid length.
[  132.233165][ T9451] netlink: 'syz.3.1524': attribute type 4 has an invalid length.
[  132.236127][ T9451] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1524'.
[  132.244833][ T9451] netlink: 'syz.3.1524': attribute type 1 has an invalid length.
[  132.251004][ T9451] netlink: 'syz.3.1524': attribute type 4 has an invalid length.
[  132.253852][ T9451] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1524'.
[  132.318256][ T9456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1525'.
[  132.324777][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1525'.
[  132.464553][ T9465] netlink: 'syz.3.1530': attribute type 2 has an invalid length.
[  132.467267][ T9465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1530'.
[  132.499157][ T9467] netlink: 'syz.3.1531': attribute type 22 has an invalid length.
[  132.502350][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'.
[  132.636617][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.638828][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.761701][ T9477] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1534'.
[  132.849142][ T9476] netlink: 'syz.4.1535': attribute type 10 has an invalid length.
[  132.854625][ T9476] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1535'.
[  133.091795][ T9484] netlink: 'syz.3.1538': attribute type 4 has an invalid length.
[  133.099670][ T9484] netlink: 'syz.3.1538': attribute type 11 has an invalid length.
[  133.105570][ T9484] netlink: 'syz.3.1538': attribute type 1 has an invalid length.
[  133.108789][ T9484] netlink: 197860 bytes leftover after parsing attributes in process `syz.3.1538'.
[  133.473290][ T9513] bpf: Bad value for 'uid'
[  134.097178][ T9569] openvswitch: netlink: Missing key (keys=40, expected=100)
[  134.124715][ T9575] tc_dump_action: action bad kind
[  134.403638][ T9605] team0: entered promiscuous mode
[  134.406033][ T9605] team_slave_0: entered promiscuous mode
[  134.408791][ T9605] team_slave_1: entered promiscuous mode
[  134.411481][ T9605] team0: entered allmulticast mode
[  134.416449][ T9605] team_slave_0: entered allmulticast mode
[  134.420066][ T9605] team_slave_1: entered allmulticast mode
[  134.423579][ T9605] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  135.373507][ T9659] syzkaller0: entered promiscuous mode
[  135.375937][ T9659] syzkaller0: entered allmulticast mode
[  135.785823][ T9700] bridge_slave_0: entered allmulticast mode
[  135.817537][ T9704] lo speed is unknown, defaulting to 1000
[  136.579355][ T9780] __nla_validate_parse: 26 callbacks suppressed
[  136.579370][ T9780] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1675'.
[  136.601930][ T9780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.612430][ T9780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.624102][ T9780] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  136.649577][ T9780] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  136.660950][ T9780] bond0 (unregistering): Released all slaves
[  136.834471][ T9796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1682'.
[  136.869613][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'.
[  137.954577][ T9832] tap0: tun_chr_ioctl cmd 2147767517
[  138.045869][ T9842] validate_nla: 11 callbacks suppressed
[  138.045884][ T9842] netlink: 'syz.3.1701': attribute type 1 has an invalid length.
[  138.257236][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'.
[  138.366779][ T9884] pim6reg1: entered allmulticast mode
[  138.394935][ T9890] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1723'.
[  139.507749][ T9923] C: renamed from team_slave_0 (while UP)
[  139.514156][ T9923] netlink: 'syz.1.1737': attribute type 3 has an invalid length.
[  139.516850][ T9923] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1737'.
[  139.520127][ T9923] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.694610][ T5881] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  140.905410][ T9992] netlink: 'syz.3.1767': attribute type 64 has an invalid length.
[  141.197399][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1774'.
[  141.271835][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'.
[  141.280493][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'.
[  141.348383][T10035] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
Connection to localhost closed by remote host.
[  141.717574][T10034] team0: Port device syz_tun removed
[  141.779235][ T5873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.827587][ T5873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.866865][ T5873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.896761][ T5873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.953611][ T5873] bridge_slave_1: left allmulticast mode
[  141.956130][ T5873] bridge_slave_1: left promiscuous mode
[  141.958625][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.962932][ T5873] bridge_slave_0: left allmulticast mode
[  141.966494][ T5873] bridge_slave_0: left promiscuous mode
[  141.969022][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.028160][ T5873] team0: Port device geneve1 removed
[  142.128545][ T5873] : left promiscuous mode
[  142.308202][ T5873] hsr_slave_0: left promiscuous mode
[  142.310320][ T5873] hsr_slave_1: left promiscuous mode
[  142.313679][ T5873] veth1_macvtap: left promiscuous mode
[  142.315819][ T5873] veth0_macvtap: left promiscuous mode
[  142.317808][ T5873] veth1_vlan: left promiscuous mode
[  142.319811][ T5873] veth0_vlan: left promiscuous mode
[  142.387832][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  142.394671][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  142.435045][   T10] infiniband syz0: ib_query_port failed (-19)
[  142.728501][ T5873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.787178][ T5873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.826680][ T5873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.878526][ T5873] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.952462][ T5873] bridge_slave_1: left allmulticast mode
[  142.954631][ T5873] bridge_slave_1: left promiscuous mode
[  142.956721][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.960015][ T5873] bridge_slave_0: left promiscuous mode
[  142.962003][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.037784][ T5873] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.041592][ T5873] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.045602][ T5873] .` (unregistering): (slave team0): Releasing backup interface
[  143.050386][ T5873] .` (unregistering): Released all slaves
[  143.437158][ T5873] hsr_slave_0: left promiscuous mode
[  143.439450][ T5873] hsr_slave_1: left promiscuous mode
[  143.441415][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.444171][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.446720][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.449218][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.453648][ T5873] veth1_vlan: left promiscuous mode
[  143.501973][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  143.517284][ T5873] team0 (unregistering): Port device C removed
[  143.789242][ T5873] ------------[ cut here ]------------
[  143.791199][ T5873] WARNING: CPU: 1 PID: 5873 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  143.794815][ T5873] Modules linked in:
[  143.796262][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  143.800584][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.804026][ T5873] Workqueue: netns cleanup_net
[  143.805715][ T5873] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  143.808012][ T5873] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb ef 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a9 b0 e1 f7 e8 84 86 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 76 86 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  143.815490][ T5873] RSP: 0018:ffffc900031cf898 EFLAGS: 00010293
[  143.817680][ T5873] RAX: ffffffff8a2224ac RBX: ffff888038418000 RCX: ffff88810828b980
[  143.820575][ T5873] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88810828b980
[  143.823357][ T5873] RBP: ffffc900031cf9b0 R08: ffffffff8fa38437 R09: 1ffffffff1f47086
[  143.826433][ T5873] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffffffff8f630fc0
[  143.829870][ T5873] R13: 1ffff92000639f40 R14: ffff888038419480 R15: dffffc0000000000
[  143.832734][ T5873] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  143.835993][ T5873] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.838203][ T5873] CR2: 00007ffe3c21ca78 CR3: 000000000df36000 CR4: 00000000000006f0
[  143.840877][ T5873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  143.843709][ T5873] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  143.846468][ T5873] Call Trace:
[  143.847678][ T5873]  <TASK>
[  143.848848][ T5873]  xfrm_net_exit+0x2d/0x70
[  143.850572][ T5873]  ops_undo_list+0x49a/0x990
[  143.852406][ T5873]  ? __pfx_ops_undo_list+0x10/0x10
[  143.854626][ T5873]  ? do_raw_spin_unlock+0x4d/0x240
[  143.856609][ T5873]  cleanup_net+0x4c5/0x800
[  143.858432][ T5873]  ? __pfx_cleanup_net+0x10/0x10
[  143.860393][ T5873]  ? rcu_is_watching+0x15/0xb0
[  143.862351][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  143.864732][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  143.866985][ T5873]  process_scheduled_works+0xae1/0x17b0
[  143.869217][ T5873]  ? __pfx_process_scheduled_works+0x10/0x10
[  143.871438][ T5873]  worker_thread+0x8a0/0xda0
[  143.873435][ T5873]  ? __kthread_parkme+0x7b/0x200
[  143.875220][ T5873]  kthread+0x711/0x8a0
[  143.876594][ T5873]  ? __pfx_worker_thread+0x10/0x10
[  143.878389][ T5873]  ? __pfx_kthread+0x10/0x10
[  143.880061][ T5873]  ? rcu_is_watching+0x15/0xb0
[  143.881732][ T5873]  ? __pfx_kthread+0x10/0x10
[  143.883391][ T5873]  ret_from_fork+0x3fc/0x770
[  143.885141][ T5873]  ? __pfx_ret_from_fork+0x10/0x10
[  143.887300][ T5873]  ? __switch_to_asm+0x39/0x70
[  143.889161][ T5873]  ? __switch_to_asm+0x33/0x70
[  143.891035][ T5873]  ? __pfx_kthread+0x10/0x10
[  143.892555][ T5873]  ret_from_fork_asm+0x1a/0x30
[  143.894330][ T5873]  </TASK>
[  143.895445][ T5873] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  143.897979][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  143.901137][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.904676][ T5873] Workqueue: netns cleanup_net
[  143.906726][ T5873] Call Trace:
[  143.908078][ T5873]  <TASK>
[  143.909180][ T5873]  dump_stack_lvl+0x99/0x250
[  143.910829][ T5873]  ? __asan_memcpy+0x40/0x70
[  143.912629][ T5873]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.914728][ T5873]  ? __pfx__printk+0x10/0x10
[  143.916645][ T5873]  vpanic+0x281/0x750
[  143.918318][ T5873]  ? __pfx__printk+0x10/0x10
[  143.920042][ T5873]  ? __pfx_vpanic+0x10/0x10
[  143.921727][ T5873]  ? is_bpf_text_address+0x292/0x2b0
[  143.923586][ T5873]  panic+0xb9/0xc0
[  143.925223][ T5873]  ? __pfx_panic+0x10/0x10
[  143.926854][ T5873]  __warn+0x31b/0x4b0
[  143.928217][ T5873]  ? xfrm_state_fini+0x26d/0x2f0
[  143.930049][ T5873]  ? xfrm_state_fini+0x26d/0x2f0
[  143.931799][ T5873]  report_bug+0x2be/0x4f0
[  143.933259][ T5873]  ? xfrm_state_fini+0x26d/0x2f0
[  143.934931][ T5873]  ? xfrm_state_fini+0x26d/0x2f0
[  143.936591][ T5873]  ? xfrm_state_fini+0x26f/0x2f0
[  143.938267][ T5873]  handle_bug+0x84/0x160
[  143.939869][ T5873]  exc_invalid_op+0x1a/0x50
[  143.941702][ T5873]  asm_exc_invalid_op+0x1a/0x20
[  143.943705][ T5873] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  143.945941][ T5873] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb ef 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a9 b0 e1 f7 e8 84 86 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 76 86 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  143.953039][ T5873] RSP: 0018:ffffc900031cf898 EFLAGS: 00010293
[  143.955158][ T5873] RAX: ffffffff8a2224ac RBX: ffff888038418000 RCX: ffff88810828b980
[  143.957841][ T5873] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88810828b980
[  143.960941][ T5873] RBP: ffffc900031cf9b0 R08: ffffffff8fa38437 R09: 1ffffffff1f47086
[  143.963578][ T5873] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffffffff8f630fc0
[  143.966668][ T5873] R13: 1ffff92000639f40 R14: ffff888038419480 R15: dffffc0000000000
[  143.970031][ T5873]  ? xfrm_state_fini+0x26c/0x2f0
[  143.972235][ T5873]  ? xfrm_state_fini+0x26c/0x2f0
[  143.974302][ T5873]  xfrm_net_exit+0x2d/0x70
[  143.976122][ T5873]  ops_undo_list+0x49a/0x990
[  143.978140][ T5873]  ? __pfx_ops_undo_list+0x10/0x10
[  143.980298][ T5873]  ? do_raw_spin_unlock+0x4d/0x240
[  143.982504][ T5873]  cleanup_net+0x4c5/0x800
[  143.984449][ T5873]  ? __pfx_cleanup_net+0x10/0x10
[  143.986584][ T5873]  ? rcu_is_watching+0x15/0xb0
[  143.988649][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  143.991045][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  143.993478][ T5873]  process_scheduled_works+0xae1/0x17b0
[  143.995878][ T5873]  ? __pfx_process_scheduled_works+0x10/0x10
[  143.998391][ T5873]  worker_thread+0x8a0/0xda0
[  144.000332][ T5873]  ? __kthread_parkme+0x7b/0x200
[  144.002449][ T5873]  kthread+0x711/0x8a0
[  144.004258][ T5873]  ? __pfx_worker_thread+0x10/0x10
[  144.006379][ T5873]  ? __pfx_kthread+0x10/0x10
[  144.008295][ T5873]  ? rcu_is_watching+0x15/0xb0
[  144.010350][ T5873]  ? __pfx_kthread+0x10/0x10
[  144.012359][ T5873]  ret_from_fork+0x3fc/0x770
[  144.014317][ T5873]  ? __pfx_ret_from_fork+0x10/0x10
[  144.016537][ T5873]  ? __switch_to_asm+0x39/0x70
[  144.018627][ T5873]  ? __switch_to_asm+0x33/0x70
[  144.020880][ T5873]  ? __pfx_kthread+0x10/0x10
[  144.022908][ T5873]  ret_from_fork_asm+0x1a/0x30
[  144.024941][ T5873]  </TASK>
[  144.026974][ T5873] Kernel Offset: disabled
[  144.028849][ T5873] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:43:20  Registers:
info registers vcpu 0

CPU#0
RAX=10d7f60f21ed7600 RBX=ffffffff819683b8 RCX=10d7f60f21ed7600 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7993f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa89d02b0d0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000077 RBX=0000000000000077 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900031cf030
R8 =ffff8881065c0237 R9 =1ffff11020cb8046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8f7 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe3c21ca78 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000001000000ffff
XMM02=0000000000000068 746f6f7465756c62 XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000279 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=696b66722f303279 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
