last executing test programs:

2m39.529758204s ago: executing program 2 (id=759):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
close(0x3)

2m39.446295972s ago: executing program 2 (id=761):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040)

2m39.358924607s ago: executing program 2 (id=763):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048"], 0x122}}, 0x4008090)

2m39.347462634s ago: executing program 2 (id=766):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x33}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x5, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0)

2m39.26989434s ago: executing program 2 (id=768):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m36.805262042s ago: executing program 2 (id=784):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8b}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x40)

2m29.696964538s ago: executing program 1 (id=841):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10)

2m29.602535632s ago: executing program 1 (id=844):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0)

2m29.545524224s ago: executing program 1 (id=846):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053210000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2m29.465078808s ago: executing program 1 (id=848):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x119, 0x8, &(0x7f0000000000), 0x4)

2m29.336097652s ago: executing program 1 (id=850):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0)

2m29.286776855s ago: executing program 1 (id=852):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000007910830000000000070000000000000095000000000000000637f79d23"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x40103fe, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8932, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

2m21.735086045s ago: executing program 32 (id=784):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8b}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x40)

2m14.11268043s ago: executing program 33 (id=852):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000007910830000000000070000000000000095000000000000000637f79d23"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x40103fe, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8932, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

29.242329856s ago: executing program 3 (id=2208):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28.311750271s ago: executing program 3 (id=2210):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x122)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x80000000, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x700}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

28.310918565s ago: executing program 3 (id=2212):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'})

28.215830984s ago: executing program 3 (id=2214):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000200000002000000000000000000000000000081"], 0x0, 0x5a}, 0x20)

28.214988056s ago: executing program 3 (id=2216):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

28.130749645s ago: executing program 3 (id=2218):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0)

13.060775725s ago: executing program 34 (id=2218):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0)

1.000356696s ago: executing program 0 (id=2508):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2)
perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r2, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10)

877.328819ms ago: executing program 0 (id=2512):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x106, 0xffffffff, 0x8001, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001300)="c01803002d000b12d25a80648c2594f90124fc60100c02000000053582c137153e370248078000f01700d1bdd524121a515533a8f4c4ad6209e6900a728b54add410fb00dcf63b67a461f41aede04b4966f2e303b936e052ab4ffedf14f473287f6bcdd6ab363fcc6a05044581c39927b935f583402270e84ff396ee178a2ff8e2679e1d3e2247bc809454e44d869b44c4731f2789df807a9f7abb7627c71c57d1e49b2469d6eef2204cd3119fa72223fa01fe6ceb03a34ea31d6b564f13212973a485b208ac108d16a04dae35d12b42e9c39a6c16d40d1d300b7e0cd43a436a237607a51e333675145649f7d228cfb32830fc9c6fc371b3b12e085aae266362a0069877b81fea89af89f456edd2d90aea061d64a355d59aedd2308d9caa2db40fa4da58fd449dde", 0x128}], 0x1}, 0x20000014)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)

638.028726ms ago: executing program 5 (id=2520):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48)

637.823928ms ago: executing program 5 (id=2521):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0)

604.204868ms ago: executing program 0 (id=2522):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})

532.899757ms ago: executing program 0 (id=2523):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0xdb, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x2, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x32, 0xfffffbff, 0x7, 0xffffffffffffffff, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="3e5ff551768967bed57927a87852d953f45d8b284eb0cabf4123c4341e1364d2e13e39b04d9db1ed09280d65ad5d4cc5d6a479cf0c2474a3d0b8b750084b717657e66e5dab19b09c12f73194a6adb76ec9d50e83c511266f362959d2743278afc24ed3d16c0ef72efda2272b290787a6f1131dbf5078844091bbb26da8c8a8b632cfa3f09e0ccbd58c963a1a1db6579f227faba41e186d0adf6b48942da4159f8c2a563c1f9571cfa58f2e01427375421c0d349bf9e0514d67094b0059a5c7d3b4e9134056195ddc9288dc", 0xcb}, {&(0x7f0000000240)="4039ff31af96941d4fb72a73365b57dabaca057140f51e1459dfdcd7edc4b72d31a3fb916c20c97d87b7422d8071e0690a29d58d4036f34d5b74aa2fdf8a30e7a98779ac7769beef6b0320514178212d230a82e6de9cf29036441589c151f615a5f42c0763a96c15ddcaed2e8b13d6daac787fd573b8dfee20e3c2df4b3f1615b977354326333a6fc4f576e5bf68b1853c54a7e0a080c2", 0x97}, {&(0x7f0000000540)="b81a5dddff2560e649542f46383dff2d6cd0c2d7f034a96cca4418c523a21cffdcd03f6efdb2a7211b87fda752325731c6dc40c6058b0e420f3aff1c7e760f290b0078a0399e34b0171ba6630faf0b722141fb70858906bee545877e38a54341d0b2660e4ed22e3b430f4cb3530e2be07884b43d", 0x74}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f00000006c0)="d6adcccabd4aaed674a95a25604b7b1b2599015cea8bc7b60dd9c64f83a2da379d4a985e312e1de6796ee97c89105f0f9248c472ccb557fbbefe4ebc43d9f1ca34c14ecb1f437f1a94b842cc1ee15acef62ab9023ebf30ef6f51d546ab753bf08d13b3a12b8367f8d52f7e5ca639e4cb0d357f35974e20301864843ab45706d850ee", 0x82}], 0x5, &(0x7f0000000800)=[{0x100, 0x0, 0x9, "dd723d4ec692f7d68db84a8058bfdbc033640dc1d5bdf8bb009e4d5a33aa82cdf64df316895fb6ef95b1fb09c86abfee7e7dea3fb6a2f6b21da7accaaf4bfd5bfa7daf83c2be184c67256eebaaee4ef7baacb4fd007528bc881ae309129c1221fd39273bde9bff9aabdce283c36865b9dfa01119e921e1351042e37e488cbcffa81eb564b207065bc0f72e030453a46eb9d373359a2c7a0b8939828682b44d3bdd9ed0fb18886575d63d56079acd6bc3237d50b9b478c01f1b7fba50f7dc8735a2cd850ea2c29ca4f4f46272f1f0959c7c3ac749551baaa7f48e8c66b75fe724fe5be1d76ced474039ec54cf8a12"}], 0x100}, 0x40000)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d3, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x4d5, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044)
r4 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300))
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x40000000)
setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200)=r7, 0x4)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="37db657420"], 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0", 0x5e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0)

532.564284ms ago: executing program 5 (id=2524):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)

480.489206ms ago: executing program 5 (id=2525):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)

413.349029ms ago: executing program 5 (id=2527):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

412.537774ms ago: executing program 0 (id=2528):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20)
close(0x3)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa5e6c85000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
ioctl$SIOCSIFHWADDR(r2, 0x8943, 0x0)
close(0x3)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)

331.937144ms ago: executing program 4 (id=2531):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x1c00, 0x1}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

239.805787ms ago: executing program 4 (id=2532):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180100180000000000000010000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000100000000000000ff010000000000000000000000000001ff020000000000000000000000000001030006000000000002000000ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000a004e2300000004fc02"], 0xc0}}, 0x20000000)

239.416741ms ago: executing program 5 (id=2533):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x7}, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000051fb07c7cb0000000000000000008500000063000000950000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000180059"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, 0x0, &(0x7f0000000040)=""/73}, 0x20)
socket$nl_rdma(0x10, 0x3, 0x14)

84.447059ms ago: executing program 4 (id=2534):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

84.147236ms ago: executing program 4 (id=2535):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x14, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x20}, 0x0)

3.249108ms ago: executing program 0 (id=2536):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0)

2.67014ms ago: executing program 4 (id=2537):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x5000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x10}, 0xa1f816911dc00219, 0x0, 0x0, 0x0, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

0s ago: executing program 4 (id=2538):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x2, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a320000000014000580080001"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23552' (ED25519) to the list of known hosts.
syzkaller login: [   56.142826][ T5811] cgroup: Unknown subsys name 'net'
[   56.252992][ T5811] cgroup: Unknown subsys name 'cpuset'
[   56.259008][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.439227][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.024772][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.026558][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.032420][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.035329][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.038356][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.040768][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.041708][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.044219][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.046925][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.048431][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.104194][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.109609][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.112930][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.119664][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.124283][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.413769][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.454401][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.576490][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   64.679436][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.682276][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.685299][ T5848] bridge_slave_0: entered allmulticast mode
[   64.689981][ T5848] bridge_slave_0: entered promiscuous mode
[   64.709084][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.712167][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.715098][ T5851] bridge_slave_0: entered allmulticast mode
[   64.720871][ T5851] bridge_slave_0: entered promiscuous mode
[   64.725565][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.729058][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.732068][ T5848] bridge_slave_1: entered allmulticast mode
[   64.735782][ T5848] bridge_slave_1: entered promiscuous mode
[   64.757724][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.761021][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.763699][ T5851] bridge_slave_1: entered allmulticast mode
[   64.766773][ T5851] bridge_slave_1: entered promiscuous mode
[   64.836201][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.840434][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.843143][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.846252][ T5859] bridge_slave_0: entered allmulticast mode
[   64.850719][ T5859] bridge_slave_0: entered promiscuous mode
[   64.857343][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.866086][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.872736][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.890323][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.893426][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.896288][ T5859] bridge_slave_1: entered allmulticast mode
[   64.900345][ T5859] bridge_slave_1: entered promiscuous mode
[   64.940536][ T5851] team0: Port device team_slave_0 added
[   64.945379][ T5851] team0: Port device team_slave_1 added
[   64.963214][ T5848] team0: Port device team_slave_0 added
[   65.006320][ T5848] team0: Port device team_slave_1 added
[   65.011396][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.030400][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.033196][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.043677][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.052082][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.056311][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.059302][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.069558][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.105122][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.108698][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.119032][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.140115][ T5859] team0: Port device team_slave_0 added
[   65.144835][ T5859] team0: Port device team_slave_1 added
[   65.160912][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.163619][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.174212][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.218487][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.221260][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.230744][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.236132][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.238544][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.247484][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.255922][ T5851] hsr_slave_0: entered promiscuous mode
[   65.259649][ T5851] hsr_slave_1: entered promiscuous mode
[   65.332820][ T5859] hsr_slave_0: entered promiscuous mode
[   65.336021][ T5859] hsr_slave_1: entered promiscuous mode
[   65.339120][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   65.341490][ T5859] Cannot create hsr debugfs directory
[   65.383283][ T5848] hsr_slave_0: entered promiscuous mode
[   65.386137][ T5848] hsr_slave_1: entered promiscuous mode
[   65.389092][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   65.390916][ T5848] Cannot create hsr debugfs directory
[   65.728513][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.737415][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.743793][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.750645][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.825850][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.841622][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.849246][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.868762][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.920353][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.931194][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.939497][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.947792][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.053132][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.077373][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.098153][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.117600][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   66.120771][ T5856] Bluetooth: hci1: command tx timeout
[   66.123151][ T5856] Bluetooth: hci0: command tx timeout
[   66.131461][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.134072][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.139177][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.141426][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.156355][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.159441][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.166227][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.168618][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.199096][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.199239][ T5856] Bluetooth: hci2: command tx timeout
[   66.269233][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.293938][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.296901][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.311948][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.314938][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.492233][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.496295][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.524969][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.561274][ T5848] veth0_vlan: entered promiscuous mode
[   66.585243][ T5851] veth0_vlan: entered promiscuous mode
[   66.594281][ T5848] veth1_vlan: entered promiscuous mode
[   66.613296][ T5851] veth1_vlan: entered promiscuous mode
[   66.653381][ T5859] veth0_vlan: entered promiscuous mode
[   66.674974][ T5859] veth1_vlan: entered promiscuous mode
[   66.689393][ T5848] veth0_macvtap: entered promiscuous mode
[   66.696629][ T5848] veth1_macvtap: entered promiscuous mode
[   66.710152][ T5851] veth0_macvtap: entered promiscuous mode
[   66.716333][ T5851] veth1_macvtap: entered promiscuous mode
[   66.743535][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.751398][ T5859] veth0_macvtap: entered promiscuous mode
[   66.756642][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.764317][ T5859] veth1_macvtap: entered promiscuous mode
[   66.770206][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.775541][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.785675][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.800932][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.815560][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.823713][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.827442][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.836824][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.851900][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.855414][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.864385][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.873908][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.900248][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.907263][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.931718][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.935214][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.991670][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.002131][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.059844][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.065169][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.077745][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.083690][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.124562][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.140208][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.147855][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.167853][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.178423][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.226995][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.235731][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.374133][ T5923] Zero length message leads to an empty skb
[   67.378706][ T5923] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.694080][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.697869][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.711000][ T5937] bridge0: entered allmulticast mode
[   67.736037][ T5937] bridge_slave_1: left allmulticast mode
[   67.739315][ T5937] bridge_slave_1: left promiscuous mode
[   67.742422][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.780867][ T5937] bridge_slave_0: left allmulticast mode
[   67.783175][ T5937] bridge_slave_0: left promiscuous mode
[   67.787391][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.198750][   T55] Bluetooth: hci1: command tx timeout
[   68.204063][ T5856] Bluetooth: hci0: command tx timeout
[   68.257998][    C1] hrtimer: interrupt took 49014 ns
[   68.303894][ T5856] Bluetooth: hci2: command tx timeout
[   68.355144][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[   68.809040][ T5975] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.27'.
[   68.919191][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.31'.
[   68.930800][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.31'.
[   68.943198][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.31'.
[   69.104479][ T5856] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[   69.141996][ T6001] netlink: 'syz.2.39': attribute type 13 has an invalid length.
[   69.162293][ T6003] netlink: 'syz.0.38': attribute type 41 has an invalid length.
[   69.165982][ T6003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.38'.
[   69.234340][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'.
[   69.541251][ T6024] netlink: 'syz.2.47': attribute type 10 has an invalid length.
[   69.544466][ T6024] netlink: 'syz.2.47': attribute type 19 has an invalid length.
[   69.547536][ T6024] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.47'.
[   69.947012][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.154251][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[   70.280287][   T55] Bluetooth: hci1: command tx timeout
[   70.283432][ T5856] Bluetooth: hci0: command tx timeout
[   70.358861][ T5856] Bluetooth: hci2: command tx timeout
[   70.404790][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'.
[   71.411996][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.414045][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   72.358609][ T5856] Bluetooth: hci0: command tx timeout
[   72.360931][ T5856] Bluetooth: hci1: command tx timeout
[   72.438425][   T55] Bluetooth: hci2: command tx timeout
[   73.022353][ T6100] netlink: 'syz.1.87': attribute type 1 has an invalid length.
[   73.033764][ T6100] netlink: 'syz.1.87': attribute type 2 has an invalid length.
[   73.036278][ T6100] netlink: 'syz.1.87': attribute type 8 has an invalid length.
[   73.305821][ T6117] netlink: 'syz.2.94': attribute type 1 has an invalid length.
[   73.399453][ T6121] netlink: 'syz.2.96': attribute type 2 has an invalid length.
[   73.403868][ T6121] netlink: 'syz.2.96': attribute type 8 has an invalid length.
[   73.406879][ T6121] __nla_validate_parse: 4 callbacks suppressed
[   73.406892][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.96'.
[   74.743120][   T55] Bluetooth: hci1: Malformed LE Event: 0x0d
[   75.223124][ T6167] netlink: 'syz.0.108': attribute type 7 has an invalid length.
[   75.234697][ T6168] bridge0: port 3(ip6gretap0) entered blocking state
[   75.237095][ T6168] bridge0: port 3(ip6gretap0) entered disabled state
[   75.245378][ T6164] netlink: 'syz.2.107': attribute type 27 has an invalid length.
[   75.247798][ T6168] ip6gretap0: entered allmulticast mode
[   75.252375][ T6168] ip6gretap0: entered promiscuous mode
[   75.254755][ T6168] bridge0: port 3(ip6gretap0) entered blocking state
[   75.257414][ T6168] bridge0: port 3(ip6gretap0) entered forwarding state
[   75.282230][ T6167] =======================================================
[   75.282230][ T6167] WARNING: The mand mount option has been deprecated and
[   75.282230][ T6167]          and is ignored by this kernel. Remove the mand
[   75.282230][ T6167]          option from the mount to silence this warning.
[   75.282230][ T6167] =======================================================
[   75.390636][ T6174] sit0: entered allmulticast mode
[   75.405851][ T6174] sit0: entered promiscuous mode
[   76.398339][ T6213] openvswitch: netlink: IP tunnel dst address not specified
[   76.421924][ T6214] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.124'.
[   76.439808][ T6210] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.124'.
[   76.452357][ T6210] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.124'.
[   76.560397][ T6229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'.
[   76.780365][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   77.226547][ T6247] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   77.607323][ T6247] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   77.944641][ T6276] netlink: 'syz.2.149': attribute type 3 has an invalid length.
[   77.947600][ T6276] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.149'.
[   78.011337][ T6280] netlink: 'syz.2.152': attribute type 29 has an invalid length.
[   78.015933][ T6280] netlink: 'syz.2.152': attribute type 29 has an invalid length.
[   78.035135][ T6279] netlink: 188 bytes leftover after parsing attributes in process `syz.0.150'.
[   78.077857][ T6286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.254087][ T6296] netlink: 'syz.1.159': attribute type 210 has an invalid length.
[   78.466181][ T6299] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.160'.
[   78.553263][ T6304] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.161'.
[   78.744088][ T6306] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.163'.
[   78.760367][ T6306] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.163'.
[   78.784241][ T6311] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   78.870329][ T6321] netlink: 'syz.2.170': attribute type 32 has an invalid length.
[   79.871003][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   79.887770][ T6343] netlink: 'syz.0.175': attribute type 27 has an invalid length.
[   80.005378][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   80.627075][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'.
[   80.630998][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'.
[   80.846875][ T6371] netlink: 'syz.2.189': attribute type 1 has an invalid length.
[   80.852598][ T6371] netlink: 'syz.2.189': attribute type 2 has an invalid length.
[   81.442609][   T55] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   82.212737][ T6391] netlink: 10 bytes leftover after parsing attributes in process `syz.0.198'.
[   82.410875][ T6386] delete_channel: no stack
[   82.539304][ T6405] netlink: 'syz.1.204': attribute type 6 has an invalid length.
[   82.544817][ T6405] netlink: 168 bytes leftover after parsing attributes in process `syz.1.204'.
[   82.783750][ T6415] netlink: 'syz.1.207': attribute type 49 has an invalid length.
[   82.942809][ T6421] netlink: 'syz.1.210': attribute type 10 has an invalid length.
[   83.754003][ T6448] netlink: 'syz.0.216': attribute type 21 has an invalid length.
[   83.794702][ T6450] __nla_validate_parse: 1 callbacks suppressed
[   83.794720][ T6450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.217'.
[   83.855690][ T6455] Driver unsupported XDP return value 0 on prog  (id 73) dev N/A, expect packet loss!
[   83.985206][ T6465] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.224'.
[   83.990279][ T6465] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.224'.
[   83.993492][ T6465] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.224'.
[   84.869503][ T6472] macvtap0: refused to change device tx_queue_len
[   85.343519][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.241'.
[   85.346919][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.241'.
[   85.352594][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.241'.
[   85.366717][ T6503] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[   85.370826][ T6503] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   85.511004][ T6505] netlink: 'syz.1.239': attribute type 29 has an invalid length.
[   85.519343][ T6518] sctp: [Deprecated]: syz.2.246 (pid 6518) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.519343][ T6518] Use struct sctp_sack_info instead
[   85.520214][ T6505] netlink: 'syz.1.239': attribute type 29 has an invalid length.
[   85.543729][ T6505] netlink: 'syz.1.239': attribute type 29 has an invalid length.
[   85.554976][ T6505] netlink: 'syz.1.239': attribute type 29 has an invalid length.
[   85.643591][ T6519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.239'.
[   86.170529][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.175146][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.181234][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.186789][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.190900][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.380658][ T6521] chnl_net:caif_netlink_parms(): no params data found
[   86.501764][ T6535] validate_nla: 2 callbacks suppressed
[   86.501795][ T6535] netlink: 'syz.2.254': attribute type 160 has an invalid length.
[   86.616813][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.631308][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.633660][ T6521] bridge_slave_0: entered allmulticast mode
[   86.640413][ T6521] bridge_slave_0: entered promiscuous mode
[   86.646436][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.649644][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.652385][ T6521] bridge_slave_1: entered allmulticast mode
[   86.655312][ T6521] bridge_slave_1: entered promiscuous mode
[   86.702652][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.707586][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.750418][ T6521] team0: Port device team_slave_0 added
[   86.755943][ T6521] team0: Port device team_slave_1 added
[   86.760449][   T47] cfg80211: failed to load regulatory.db
[   86.784153][ T6544] netlink: 'syz.2.257': attribute type 29 has an invalid length.
[   86.830777][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.833677][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.848173][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.853204][ T6545] netlink: 'syz.2.257': attribute type 29 has an invalid length.
[   86.857746][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.860290][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.869617][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.880460][ T6544] netlink: 'syz.2.257': attribute type 29 has an invalid length.
[   86.912750][ T6545] netlink: 'syz.2.257': attribute type 29 has an invalid length.
[   86.957241][ T6521] hsr_slave_0: entered promiscuous mode
[   86.959803][ T6521] hsr_slave_1: entered promiscuous mode
[   86.962148][ T6521] debugfs: 'hsr0' already exists in 'hsr'
[   86.964086][ T6521] Cannot create hsr debugfs directory
[   86.987166][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.046798][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.126514][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.187322][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.277250][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.259'.
[   87.375336][   T12] bridge_slave_1: left allmulticast mode
[   87.388334][   T12] bridge_slave_1: left promiscuous mode
[   87.391877][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.403081][   T12] bridge_slave_0: left allmulticast mode
[   87.405454][   T12] bridge_slave_0: left promiscuous mode
[   87.417776][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.435039][ T6558] netlink: 'syz.2.261': attribute type 2 has an invalid length.
[   87.444061][ T6558] netlink: 119 bytes leftover after parsing attributes in process `syz.2.261'.
[   88.046335][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.059236][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.064136][   T12] bond0 (unregistering): Released all slaves
[   88.280204][   T55] Bluetooth: hci2: command tx timeout
[   89.317837][   T12] hsr_slave_0: left promiscuous mode
[   89.331237][   T12] hsr_slave_1: left promiscuous mode
[   89.333352][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.335664][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.349726][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.359282][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.414675][   T12] veth1_macvtap: left promiscuous mode
[   89.417010][   T12] veth0_macvtap: left promiscuous mode
[   89.441635][   T12] veth1_vlan: left promiscuous mode
[   89.447732][   T12] veth0_vlan: left promiscuous mode
[   89.937523][   T12] team0 (unregistering): Port device team_slave_1 removed
[   89.977935][   T12] team0 (unregistering): Port device team_slave_0 removed
[   90.117086][ T6619] syz.2.283 uses obsolete (PF_INET,SOCK_PACKET)
[   90.368471][   T55] Bluetooth: hci2: command tx timeout
[   90.405446][ T6521] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.412895][ T6521] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.421091][ T6521] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.428609][ T6521] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.546647][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.561176][ T6521] 8021q: adding VLAN 0 to HW filter on device team0
[   90.570155][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.572941][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.584346][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.588281][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.729779][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.766223][ T6521] veth0_vlan: entered promiscuous mode
[   90.774930][ T6521] veth1_vlan: entered promiscuous mode
[   90.800247][ T6521] veth0_macvtap: entered promiscuous mode
[   90.806731][ T6521] veth1_macvtap: entered promiscuous mode
[   90.823259][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.833183][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.845168][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.850418][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.857839][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.884950][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.132784][ T6643] netlink: 277 bytes leftover after parsing attributes in process `syz.2.287'.
[   91.231067][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.236128][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.316098][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.319762][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.484937][ T6651] netlink: 196 bytes leftover after parsing attributes in process `syz.0.290'.
[   92.448216][   T55] Bluetooth: hci2: command tx timeout
[   92.627521][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[   92.995697][ T6698] netlink: 17 bytes leftover after parsing attributes in process `syz.1.311'.
[   93.003076][ T6700] openvswitch: netlink: Geneve option length err (len 612, max 255).
[   93.207388][ T6716] netlink: 'syz.2.320': attribute type 9 has an invalid length.
[   93.210814][ T6716] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.320'.
[   93.227910][ T6714] tap0: tun_chr_ioctl cmd 1074025677
[   93.230789][ T6714] tap0: linktype set to 804
[   93.545557][ T6748] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.336'.
[   93.711399][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[   93.714855][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'.
[   93.717870][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'.
[   93.728473][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[   94.528419][   T55] Bluetooth: hci2: command tx timeout
[   95.106889][ T6815] netlink: 'syz.0.363': attribute type 22 has an invalid length.
[   96.048505][ T6832] netlink: 'syz.2.372': attribute type 20 has an invalid length.
[   96.051793][ T6832] IPv6: NLM_F_CREATE should be specified when creating new route
[   96.165685][ T6843] netlink: 'syz.1.376': attribute type 39 has an invalid length.
[   96.175610][ T6843] veth0_macvtap: left promiscuous mode
[   96.347480][ T6854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.412281][ T6855] syz.1.380: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   96.440235][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.1.380 Not tainted syzkaller #0 PREEMPT(full) 
[   96.440248][ T6855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.440254][ T6855] Call Trace:
[   96.440259][ T6855]  <TASK>
[   96.440263][ T6855]  dump_stack_lvl+0x189/0x250
[   96.440277][ T6855]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   96.440290][ T6855]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.440301][ T6855]  ? __pfx__printk+0x10/0x10
[   96.440312][ T6855]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   96.440321][ T6855]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   96.440335][ T6855]  warn_alloc+0x214/0x310
[   96.440345][ T6855]  ? stack_depot_save_flags+0x41b/0x860
[   96.440355][ T6855]  ? __pfx_warn_alloc+0x10/0x10
[   96.440364][ T6855]  ? kasan_save_track+0x4f/0x80
[   96.440376][ T6855]  ? xskq_create+0x56/0x170
[   96.440386][ T6855]  ? xsk_init_queue+0xb0/0x110
[   96.440398][ T6855]  ? xsk_setsockopt+0x57b/0x8d0
[   96.440408][ T6855]  ? do_sock_setsockopt+0x17c/0x1b0
[   96.440424][ T6855]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   96.440439][ T6855]  ? do_syscall_64+0xfa/0x3b0
[   96.440453][ T6855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.440470][ T6855]  __vmalloc_node_range_noprof+0x125/0x12f0
[   96.440504][ T6855]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   96.440522][ T6855]  ? memset_orig+0x84/0xb0
[   96.440541][ T6855]  ? __kasan_kmalloc+0x93/0xb0
[   96.440556][ T6855]  vmalloc_user_noprof+0xad/0xf0
[   96.440570][ T6855]  ? xskq_create+0xbf/0x170
[   96.440593][ T6855]  xskq_create+0xbf/0x170
[   96.440603][ T6855]  xsk_init_queue+0xb0/0x110
[   96.440613][ T6855]  xsk_setsockopt+0x57b/0x8d0
[   96.440623][ T6855]  ? __pfx_xsk_setsockopt+0x10/0x10
[   96.440631][ T6855]  ? __pfx_aa_sk_perm+0x10/0x10
[   96.440642][ T6855]  ? __fget_files+0x2a/0x420
[   96.440650][ T6855]  ? aa_sock_opt_perm+0xff/0x1b0
[   96.440661][ T6855]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   96.440671][ T6855]  ? __pfx_xsk_setsockopt+0x10/0x10
[   96.440679][ T6855]  do_sock_setsockopt+0x17c/0x1b0
[   96.440692][ T6855]  __x64_sys_setsockopt+0x13f/0x1b0
[   96.440704][ T6855]  do_syscall_64+0xfa/0x3b0
[   96.440714][ T6855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.440722][ T6855]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   96.440731][ T6855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.440739][ T6855] RIP: 0033:0x7f4773d8ec29
[   96.440747][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.440754][ T6855] RSP: 002b:00007f4774ce2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   96.440763][ T6855] RAX: ffffffffffffffda RBX: 00007f4773fd6090 RCX: 00007f4773d8ec29
[   96.440768][ T6855] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   96.440773][ T6855] RBP: 00007f4773e11e41 R08: 0000000000000004 R09: 0000000000000000
[   96.440777][ T6855] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   96.440782][ T6855] R13: 00007f4773fd6128 R14: 00007f4773fd6090 R15: 00007ffe3670faf8
[   96.440799][ T6855]  </TASK>
[   96.440927][ T6855] Mem-Info:
[   96.562524][ T6855] active_anon:5724 inactive_anon:0 isolated_anon:0
[   96.562524][ T6855]  active_file:1300 inactive_file:38251 isolated_file:0
[   96.562524][ T6855]  unevictable:1768 dirty:199 writeback:0
[   96.562524][ T6855]  slab_reclaimable:9689 slab_unreclaimable:52127
[   96.562524][ T6855]  mapped:18090 shmem:2435 pagetables:1002
[   96.562524][ T6855]  sec_pagetables:0 bounce:0
[   96.562524][ T6855]  kernel_misc_reclaimable:0
[   96.562524][ T6855]  free:303408 free_pcp:17211 free_cma:0
[   96.584305][ T6855] Node 0 active_anon:10264kB inactive_anon:0kB active_file:4168kB inactive_file:145744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27512kB dirty:668kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6084kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   96.603643][ T6855] Node 1 active_anon:12496kB inactive_anon:0kB active_file:1032kB inactive_file:7260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44848kB dirty:128kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5372kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   96.637253][ T6855] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   96.652234][ T6855] lowmem_reserve[]: 0 811 811 811 811
[   96.654633][ T6855] Node 0 DMA32 free:295268kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10264kB inactive_anon:0kB active_file:4168kB inactive_file:145744kB unevictable:3536kB writepending:668kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:38796kB local_pcp:19264kB free_cma:0kB
[   96.672753][ T6855] lowmem_reserve[]: 0 0 0 0 0
[   96.675324][ T6855] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   96.707265][ T6855] lowmem_reserve[]: 0 0 854 854 854
[   96.711040][ T6855] Node 1 Normal free:444116kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12496kB inactive_anon:0kB active_file:1032kB inactive_file:7260kB unevictable:3536kB writepending:128kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30684kB local_pcp:8096kB free_cma:0kB
[   96.723206][ T6855] lowmem_reserve[]: 0 0 0 0 0
[   96.726725][ T6855] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   96.736322][ T6855] Node 0 DMA32: 451*4kB (UME) 211*8kB (UME) 272*16kB (UME) 308*32kB (UME) 101*64kB (UME) 42*128kB (UM) 26*256kB (UM) 18*512kB (UME) 12*1024kB (UME) 2*2048kB (ME) 57*4096kB (M) = 295268kB
[   96.747518][ T6855] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   96.757171][ T6855] Node 1 Normal: 52*4kB (UME) 21*8kB (U) 29*16kB (UM) 15*32kB (UM) 50*64kB (UME) 8*128kB (UE) 5*256kB (UM) 2*512kB (UE) 4*1024kB (M) 3*2048kB (UM) 104*4096kB (UM) = 444072kB
[   96.767615][ T6855] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.773074][ T6855] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.776628][ T6855] 41986 total pagecache pages
[   96.778844][ T6855] 0 pages in swap cache
[   96.780662][ T6855] Free swap  = 124996kB
[   96.782440][ T6855] Total swap = 124996kB
[   96.784177][ T6855] 786301 pages RAM
[   96.785562][ T6855] 0 pages HighMem/MovableOnly
[   96.787457][ T6855] 241359 pages reserved
[   96.790469][ T6855] 0 pages cma reserved
[   96.956221][ T6889] __nla_validate_parse: 8 callbacks suppressed
[   96.956247][ T6889] netlink: 132 bytes leftover after parsing attributes in process `syz.2.398'.
[   96.989541][ T6892] tap0: tun_chr_ioctl cmd 1074025678
[   96.991247][ T6892] tap0: group set to 0
[   97.330233][ T6917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.412'.
[   97.507142][ T6928] netlink: 'syz.0.414': attribute type 39 has an invalid length.
[   97.739793][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'.
[   97.874969][ T6935] netlink: 'syz.2.417': attribute type 4 has an invalid length.
[   97.885429][ T6935] netlink: 'syz.2.417': attribute type 4 has an invalid length.
[   97.900711][ T6935] netlink: 199756 bytes leftover after parsing attributes in process `syz.2.417'.
[   97.950877][ T6945] netlink: 'syz.2.421': attribute type 2 has an invalid length.
[   97.954373][ T6945] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.421'.
[  101.313915][ T6971] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.430'.
[  101.483025][ T6987] netlink: 80 bytes leftover after parsing attributes in process `syz.0.437'.
[  101.636578][ T7002] syzkaller0: refused to change device tx_queue_len
[  101.819161][ T7008] netlink: 228 bytes leftover after parsing attributes in process `syz.2.447'.
[  101.889954][ T6991] syz.1.438 (6991) used greatest stack depth: 18384 bytes left
[  101.966937][ T7018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.451'.
[  102.113820][ T7033] netlink: 22 bytes leftover after parsing attributes in process `syz.1.459'.
[  102.801618][ T7067] netlink: 'syz.0.475': attribute type 10 has an invalid length.
[  102.982762][ T7067] team0: Cannot enslave team device to itself
[  103.025924][ T7077] netlink: 156 bytes leftover after parsing attributes in process `syz.1.479'.
[  103.684266][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'.
[  104.870462][ T7124] netlink: 'syz.2.496': attribute type 3 has an invalid length.
[  104.877127][ T7124] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.496'.
[  104.892870][ T7124] netlink: 'syz.2.496': attribute type 3 has an invalid length.
[  104.904091][ T7124] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.496'.
[  105.045471][ T7130] netlink: 48 bytes leftover after parsing attributes in process `syz.1.497'.
[  105.463671][ T7158] netlink: 'syz.1.509': attribute type 2 has an invalid length.
[  105.470776][ T7160] openvswitch: netlink: Invalid VLAN frame
[  105.556596][ T7168] netlink: 'syz.1.514': attribute type 3 has an invalid length.
[  105.564254][ T7168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.514'.
[  105.719719][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'.
[  106.216732][ T7209] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[  106.236804][ T7207] netlink: 'syz.1.532': attribute type 7 has an invalid length.
[  106.626464][ T7232] ip6gretap0: left allmulticast mode
[  106.628845][ T7232] ip6gretap0: left promiscuous mode
[  106.631165][ T7232] bridge0: port 3(ip6gretap0) entered disabled state
[  106.643473][ T7233] netlink: 'syz.0.543': attribute type 1 has an invalid length.
[  106.646753][ T7233] netlink: 'syz.0.543': attribute type 3 has an invalid length.
[  106.651338][ T7233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.543'.
[  107.406042][ T7232] bridge_slave_1: left allmulticast mode
[  107.409871][ T7232] bridge_slave_1: left promiscuous mode
[  107.412631][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.420940][ T7232] bridge_slave_0: left allmulticast mode
[  107.424677][ T7232] bridge_slave_0: left promiscuous mode
[  107.428420][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.501972][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'.
[  107.505715][ T7234] netlink: 52 bytes leftover after parsing attributes in process `syz.1.542'.
[  107.597165][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'.
[  107.810884][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.553'.
[  107.814616][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.553'.
[  107.826631][ T7259] netlink: 'syz.0.554': attribute type 3 has an invalid length.
[  107.833072][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.554'.
[  107.859611][ T7261] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.555'.
[  108.203177][   T55] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  108.352358][ T7287] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  108.426266][ T7292] netlink: 'syz.0.570': attribute type 3 has an invalid length.
[  108.429274][ T7292] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.570'.
[  108.809985][ T7305] netlink: 'syz.2.575': attribute type 4 has an invalid length.
[  108.813278][ T7305] netlink: 152 bytes leftover after parsing attributes in process `syz.2.575'.
[  108.837027][ T7305] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  109.304867][ T7319] netlink: 'syz.1.582': attribute type 21 has an invalid length.
[  109.308161][ T7319] netlink: 'syz.1.582': attribute type 15 has an invalid length.
[  109.311225][ T7319] netlink: 156 bytes leftover after parsing attributes in process `syz.1.582'.
[  109.314715][ T7319] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.317902][ T7319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.321026][ T7319] IPv6: NLM_F_CREATE should be set when creating new route
[  109.323869][ T7319] IPv6: NLM_F_CREATE should be set when creating new route
[  109.326705][ T7319] IPv6: NLM_F_CREATE should be set when creating new route
[  110.278551][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  110.641380][   T55] Bluetooth: hci0: ISO packet too small
[  111.938163][ T7365] tmpfs: Bad value for 'gid'
[  111.940135][ T7365] tmpfs: Bad value for 'gid'
[  112.217368][ T7385] netlink: 'syz.1.613': attribute type 1 has an invalid length.
[  112.769728][ T7406] __nla_validate_parse: 2 callbacks suppressed
[  112.769744][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'.
[  112.776896][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'.
[  113.221182][ T7417] netlink: 'syz.0.627': attribute type 21 has an invalid length.
[  113.293460][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[  114.096290][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[  114.259929][ T7443] netlink: 'syz.1.632': attribute type 2 has an invalid length.
[  114.263662][ T7443] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.632'.
[  114.277945][ T7443] nbd: must specify an index to disconnect
[  114.439036][ T7455] netlink: 56 bytes leftover after parsing attributes in process `syz.2.636'.
[  114.925710][ T7472] bridge_slave_0: entered promiscuous mode
[  114.940064][ T7472] bridge_slave_0: entered allmulticast mode
[  115.227479][   T55] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  115.227556][   T55] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  115.255636][ T7476] netlink: set zone limit has 4 unknown bytes
[  115.532173][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'.
[  116.772386][ T7536] netlink: 'syz.2.669': attribute type 21 has an invalid length.
[  116.891915][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'.
[  116.914611][ T7539] netlink: 'syz.2.670': attribute type 7 has an invalid length.
[  116.917514][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'.
[  117.051440][ T7556] netlink: 'syz.0.677': attribute type 21 has an invalid length.
[  117.054173][ T7556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.677'.
[  117.851800][ T7581] __nla_validate_parse: 1 callbacks suppressed
[  117.851853][ T7581] netlink: 240 bytes leftover after parsing attributes in process `syz.2.690'.
[  118.304744][ T7589] netlink: 128 bytes leftover after parsing attributes in process `syz.0.694'.
[  118.311738][ T7589] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  118.767938][ T7614] netlink: 'syz.2.701': attribute type 41 has an invalid length.
[  119.598916][ T7636] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.707'.
[  119.940062][ T7546] Set syz1 is full, maxelem 65536 reached
[  120.063636][ T7643] netlink: 'syz.1.710': attribute type 3 has an invalid length.
[  120.066312][ T7643] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.710'.
[  120.278247][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'.
[  120.282113][ T7653] netlink: 33 bytes leftover after parsing attributes in process `syz.1.715'.
[  120.285249][ T7653] bridge_slave_0: entered allmulticast mode
[  120.287484][ T7653] netlink: 33 bytes leftover after parsing attributes in process `syz.1.715'.
[  120.404318][ T7662] netlink: 'syz.1.720': attribute type 3 has an invalid length.
[  120.942453][ T7687] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.732'.
[  121.063260][ T7698] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.736'.
[  122.053460][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  122.914142][ T7743] netlink: 'syz.2.756': attribute type 29 has an invalid length.
[  122.919772][ T7743] netlink: 'syz.2.756': attribute type 29 has an invalid length.
[  122.923478][ T7743] netlink: 'syz.2.756': attribute type 29 has an invalid length.
[  123.054957][ T7753] netlink: 'syz.2.761': attribute type 21 has an invalid length.
[  123.057364][ T7753] __nla_validate_parse: 1 callbacks suppressed
[  123.057373][ T7753] netlink: 128 bytes leftover after parsing attributes in process `syz.2.761'.
[  123.062669][ T7753] netlink: 'syz.2.761': attribute type 5 has an invalid length.
[  123.065361][ T7753] netlink: 'syz.2.761': attribute type 6 has an invalid length.
[  123.067879][ T7753] netlink: 3 bytes leftover after parsing attributes in process `syz.2.761'.
[  123.132163][ T7756] netlink: 68 bytes leftover after parsing attributes in process `syz.2.763'.
[  124.074483][ T7776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.771'.
[  124.259131][ T7780] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.773'.
[  126.513262][ T7834] netlink: 'syz.1.797': attribute type 12 has an invalid length.
[  126.516274][ T7834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.797'.
[  126.649049][ T7838] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  126.926080][ T7847] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.802'.
[  127.130543][ T7856] netlink: 'syz.0.806': attribute type 4 has an invalid length.
[  127.190543][   T55] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  127.459504][ T7861] bridge_slave_1: left allmulticast mode
[  127.464524][ T7861] bridge_slave_1: left promiscuous mode
[  127.466976][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.507134][ T7861] bridge_slave_0: left promiscuous mode
[  127.519944][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.884334][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'.
[  127.887942][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'.
[  127.889906][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  130.613168][ T7908] bridge_slave_0: entered promiscuous mode
[  132.853842][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.856348][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.012962][ T7948] _Z`Ԁ@S!: entered promiscuous mode
[  133.267507][ T7959] __nla_validate_parse: 1 callbacks suppressed
[  133.267559][ T7959] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.851'.
[  134.693968][ T7968] netlink: 1 bytes leftover after parsing attributes in process `syz.0.856'.
[  135.899668][ T7983] netlink: 172 bytes leftover after parsing attributes in process `syz.0.860'.
[  136.109067][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'.
[  136.261501][ T7993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.865'.
[  137.432979][ T8020] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.876'.
[  137.678141][ T8028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.707730][ T8030] netlink: 'syz.0.881': attribute type 2 has an invalid length.
[  139.531446][ T8045] netlink: 'syz.0.888': attribute type 6 has an invalid length.
[  139.534586][ T8045] netlink: 140 bytes leftover after parsing attributes in process `syz.0.888'.
[  140.340761][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[  140.524499][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.0.892'.
[  140.529330][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.0.892'.
[  141.107757][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  141.112409][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  141.116153][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  141.124601][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  141.127323][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  141.414223][ T8064] chnl_net:caif_netlink_parms(): no params data found
[  141.460127][ T5881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.545642][ T5881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.565367][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.570295][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.573085][ T8064] bridge_slave_0: entered allmulticast mode
[  141.577142][ T8064] bridge_slave_0: entered promiscuous mode
[  141.582557][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.585194][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.587920][ T8064] bridge_slave_1: entered allmulticast mode
[  141.593214][ T8064] bridge_slave_1: entered promiscuous mode
[  141.641239][ T5881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.655862][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.666094][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.699909][ T5881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.724356][ T8064] team0: Port device team_slave_0 added
[  141.729272][ T8064] team0: Port device team_slave_1 added
[  141.769793][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.773856][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.786321][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.812479][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.814993][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.824790][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.902131][ T8064] hsr_slave_0: entered promiscuous mode
[  141.904582][ T8064] hsr_slave_1: entered promiscuous mode
[  141.906741][ T8064] debugfs: 'hsr0' already exists in 'hsr'
[  141.909508][ T8064] Cannot create hsr debugfs directory
[  142.172514][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.180019][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.191280][ T5881] bond0 (unregistering): Released all slaves
[  142.223348][ T8083] netlink: 96 bytes leftover after parsing attributes in process `syz.0.901'.
[  142.276043][ T8085] netlink: 492 bytes leftover after parsing attributes in process `syz.0.902'.
[  142.373560][ T8087] netlink: 'syz.0.903': attribute type 7 has an invalid length.
[  142.516757][ T5881] hsr_slave_0: left promiscuous mode
[  142.522713][ T5881] hsr_slave_1: left promiscuous mode
[  142.525339][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.538652][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.545355][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.548407][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.564721][ T5881] veth1_macvtap: left promiscuous mode
[  142.567001][ T5881] veth0_macvtap: left promiscuous mode
[  142.569924][ T5881] veth1_vlan: left promiscuous mode
[  142.578534][ T5881] veth0_vlan: left promiscuous mode
[  143.158332][   T55] Bluetooth: hci3: command tx timeout
[  144.033094][ T5881] team0 (unregistering): Port device team_slave_1 removed
[  144.076237][ T5881] team0 (unregistering): Port device team_slave_0 removed
[  144.471723][    T9] syz0: Port: 1 Link DOWN
[  144.600970][ T8064] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  144.630927][ T8064] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  144.658652][ T8064] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  144.670437][ T8064] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  144.854136][ T8064] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.885987][ T8064] 8021q: adding VLAN 0 to HW filter on device team0
[  144.907031][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.910101][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.931717][ T8124] netlink: 'syz.0.913': attribute type 39 has an invalid length.
[  144.940195][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.943242][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.953570][ T8124] veth0_macvtap: left promiscuous mode
[  145.043873][ T8064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.238524][   T55] Bluetooth: hci3: command tx timeout
[  145.300419][ T8064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.372631][ T8064] veth0_vlan: entered promiscuous mode
[  145.391116][ T8064] veth1_vlan: entered promiscuous mode
[  145.424627][ T8064] veth0_macvtap: entered promiscuous mode
[  145.431384][ T8064] veth1_macvtap: entered promiscuous mode
[  145.443259][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.454801][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.463665][ T5880] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.472652][ T5880] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.480072][ T5880] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.499269][ T5880] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.591323][ T2273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.597791][ T2273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.657399][ T2273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.661204][ T2273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.561093][ T8197] netlink: 64 bytes leftover after parsing attributes in process `syz.3.932'.
[  146.586077][ T8199] netlink: 'syz.0.933': attribute type 1 has an invalid length.
[  146.630258][ T8201] netlink: 'syz.3.934': attribute type 27 has an invalid length.
[  146.632715][ T8201] netlink: 'syz.3.934': attribute type 4 has an invalid length.
[  146.635027][ T8201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.934'.
[  146.950485][ T8217] netlink: 'syz.0.940': attribute type 13 has an invalid length.
[  146.953156][ T8217] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.940'.
[  147.007943][ T8220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.318642][   T55] Bluetooth: hci3: command tx timeout
[  148.624756][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  148.632270][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  148.635860][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  148.642738][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  148.646059][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  148.941324][ T8229] chnl_net:caif_netlink_parms(): no params data found
[  149.408190][ T5856] Bluetooth: hci3: command tx timeout
[  149.730955][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.733221][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.735455][ T8229] bridge_slave_0: entered allmulticast mode
[  149.741658][ T8229] bridge_slave_0: entered promiscuous mode
[  149.774224][ T8246] netlink: 176 bytes leftover after parsing attributes in process `syz.0.950'.
[  149.801700][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.804644][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.812509][ T8229] bridge_slave_1: entered allmulticast mode
[  149.817255][ T8229] bridge_slave_1: entered promiscuous mode
[  149.850454][ T8252] netlink: 'syz.0.953': attribute type 10 has an invalid length.
[  149.864868][ T8252] veth1_vlan: entered allmulticast mode
[  149.876956][ T8252] team0: Device veth1_vlan failed to register rx_handler
[  149.897030][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.914844][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.956401][ T8256] netlink: 14 bytes leftover after parsing attributes in process `syz.3.955'.
[  150.066997][ T8256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.072203][ T8256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.076778][ T8256] bond0 (unregistering): Released all slaves
[  150.093369][ T8229] team0: Port device team_slave_0 added
[  150.099875][ T8229] team0: Port device team_slave_1 added
[  150.169634][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.172000][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.194846][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.202669][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.208276][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.216045][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.222130][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'.
[  150.262668][ T8229] hsr_slave_0: entered promiscuous mode
[  150.265757][ T8229] hsr_slave_1: entered promiscuous mode
[  150.456823][ T8229] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  150.464465][ T8229] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  150.470875][ T8229] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  150.477727][ T8229] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  150.530668][ T8287] netlink: 277 bytes leftover after parsing attributes in process `syz.0.965'.
[  150.553282][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.568718][ T8229] 8021q: adding VLAN 0 to HW filter on device team0
[  150.577425][ T2273] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.579877][ T2273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.590511][ T2273] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.593265][ T2273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.596433][ T8289] netlink: 196 bytes leftover after parsing attributes in process `syz.0.966'.
[  150.688309][ T5856] Bluetooth: hci1: command tx timeout
[  150.757847][ T8229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.963241][ T8229] veth0_vlan: entered promiscuous mode
[  150.973155][ T8229] veth1_vlan: entered promiscuous mode
[  151.006981][ T8229] veth0_macvtap: entered promiscuous mode
[  151.012973][ T8229] veth1_macvtap: entered promiscuous mode
[  151.029830][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.054084][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.080456][ T5880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.103376][ T5880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.107190][ T5880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.135012][ T5880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.224879][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.227325][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.281820][ T2273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.285001][ T2273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.116455][ T8329] netlink: 'syz.3.977': attribute type 8 has an invalid length.
[  152.121019][ T8329] netlink: 'syz.3.977': attribute type 6 has an invalid length.
[  152.125524][ T8329] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.977'.
[  152.325524][ T5856] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6
[  152.389440][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.985'.
[  152.402634][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.985'.
[  152.412788][ T8346] netlink: 'syz.3.987': attribute type 19 has an invalid length.
[  152.492569][ T8352] netlink: 'syz.4.990': attribute type 1 has an invalid length.
[  152.627861][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.991'.
[  152.758857][ T5856] Bluetooth: hci1: command tx timeout
[  152.916543][ T8382] netlink: 'syz.4.1001': attribute type 3 has an invalid length.
[  152.928767][ T8382] netlink: 'syz.4.1001': attribute type 1 has an invalid length.
[  152.931204][ T8382] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1001'.
[  153.097382][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1007'.
[  153.355591][ T8418] netlink: 'syz.3.1016': attribute type 3 has an invalid length.
[  153.361208][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1016'.
[  153.399581][ T5856] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  153.467305][ T8428] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1021'.
[  153.499122][ T8431] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1023'.
[  154.044776][ T8463] veth1_macvtap: left promiscuous mode
[  154.048740][ T8463] macsec0: entered promiscuous mode
[  154.840668][ T5856] Bluetooth: hci1: command tx timeout
[  156.918314][ T5856] Bluetooth: hci1: command tx timeout
[  157.214092][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'.
[  158.803856][ T8564] netlink: 'syz.3.1067': attribute type 21 has an invalid length.
[  158.807100][ T8564] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1067'.
[  158.907567][ T8573] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  159.253661][ T8595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.392121][ T8599] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1081'.
[  159.424793][ T8601] netlink: 'syz.4.1082': attribute type 3 has an invalid length.
[  159.474636][ T8603] netlink: 'syz.4.1083': attribute type 1 has an invalid length.
[  160.097714][ T8607] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  160.976154][ T8612] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1087'.
[  161.406324][ T8625] netlink: 'syz.3.1093': attribute type 10 has an invalid length.
[  161.409797][ T8625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1093'.
[  161.413481][ T8625] batadv0: entered promiscuous mode
[  161.415574][ T8625] batadv0: entered allmulticast mode
[  161.439299][ T8625] bridge0: port 3(batadv0) entered blocking state
[  161.715675][ T8625] bridge0: port 3(batadv0) entered disabled state
[  162.022576][ T8625] bridge0: port 3(batadv0) entered blocking state
[  162.025577][ T8625] bridge0: port 3(batadv0) entered forwarding state
[  162.374663][ T8653] tmpfs: Unknown parameter 'u'
[  162.422668][ T5880] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  162.425636][ T5880] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  162.597357][ T8669] netlink: 'syz.3.1113': attribute type 10 has an invalid length.
[  169.810137][ T8675] lo: entered allmulticast mode
[  169.816648][ T8675] lo: entered promiscuous mode
[  169.821197][ T8675] lo: left allmulticast mode
[  169.832453][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'.
[  169.835232][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1115'.
[  169.913008][ T8685] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1119'.
[  169.916967][ T8687] netlink: 64967 bytes leftover after parsing attributes in process `syz.3.1120'.
[  170.005431][ T8697] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1125'.
[  170.021781][ T8701] netlink: 'syz.4.1127': attribute type 1 has an invalid length.
[  170.163559][ T8711] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1132'.
[  171.186533][ T8735] netlink: 'syz.3.1142': attribute type 15 has an invalid length.
[  171.189413][ T8735] netlink: 'syz.3.1142': attribute type 7 has an invalid length.
[  171.191995][ T8735] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1142'.
[  171.195274][ T8736] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1143'.
[  171.442054][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'.
[  171.470983][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1154'.
[  171.499563][ T8761] syzkaller0: entered promiscuous mode
[  171.501376][ T8761] syzkaller0: entered allmulticast mode
[  171.527724][ T8754] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  172.481455][ T8808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.872016][ T8823] siw: device registration error -23
[  173.912875][ T8851] netlink: 'syz.4.1193': attribute type 4 has an invalid length.
[  173.915374][ T8851] netlink: 'syz.4.1193': attribute type 16 has an invalid length.
[  174.681102][ T8902] netlink: 'syz.0.1216': attribute type 2 has an invalid length.
[  174.866862][ T8913] __nla_validate_parse: 14 callbacks suppressed
[  174.866875][ T8913] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1221'.
[  174.951911][ T8915] netlink: 211 bytes leftover after parsing attributes in process `syz.0.1222'.
[  175.198688][ T8923] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1224'.
[  176.122257][ T8943] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1234'.
[  176.154002][ T8946] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1235'.
[  176.262611][ T8944] netlink: 'syz.0.1240': attribute type 2 has an invalid length.
[  176.269331][ T8944] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1240'.
[  176.273712][ T8944] nbd: must specify a device to reconfigure
[  176.396853][ T8946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.416826][ T8946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.431414][ T8946] bond0 (unregistering): Released all slaves
[  176.471913][ T8956] syzkaller0: entered promiscuous mode
[  176.473755][ T8956] syzkaller0: entered allmulticast mode
[  176.634142][ T8968] netlink: 'syz.4.1247': attribute type 1 has an invalid length.
[  176.736659][ T8974] netlink: 'syz.0.1253': attribute type 19 has an invalid length.
[  176.912219][ T5856] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  177.077742][ T8990] netlink: 'syz.0.1257': attribute type 1 has an invalid length.
[  177.159457][ T8996] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  177.257210][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'.
[  177.406686][ T9007] wg2: entered promiscuous mode
[  177.453977][ T9007] wg2: entered allmulticast mode
[  177.650631][ T9019] netlink: 'syz.3.1269': attribute type 39 has an invalid length.
[  178.523256][ T9029] netlink: 'syz.3.1274': attribute type 3 has an invalid length.
[  178.525764][ T9029] netlink: 'syz.3.1274': attribute type 1 has an invalid length.
[  178.528180][ T9029] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1274'.
[  179.211706][ T9059] netlink: 'syz.3.1286': attribute type 6 has an invalid length.
[  179.214248][ T9059] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1286'.
[  179.305929][ T9065] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1289'.
[  179.832699][ T9104] pim6reg0: tun_chr_ioctl cmd 1074025681
[  179.884170][ T9108] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1310'.
[  181.477663][ T9122] netlink: 'syz.4.1316': attribute type 21 has an invalid length.
[  181.485964][ T9122] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1316'.
[  181.489925][ T9122] netlink: 'syz.4.1316': attribute type 5 has an invalid length.
[  181.492653][ T9122] netlink: 'syz.4.1316': attribute type 6 has an invalid length.
[  181.495733][ T9122] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1316'.
[  181.711025][ T9138] xt_l2tp: v2 tid > 0xffff: 327812
[  182.176010][ T9153] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1328'.
[  182.351563][ T9163] ref_ctr_offset mismatch. inode: 0x62 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  182.715479][ T9183] netlink: 'syz.4.1340': attribute type 21 has an invalid length.
[  182.799584][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'.
[  182.803913][ T9181] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  182.806953][ T9181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.706455][ T9201] netlink: 'syz.3.1347': attribute type 2 has an invalid length.
[  183.720982][ T9203] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1348'.
[  183.926994][ T9214] netlink: 'syz.0.1351': attribute type 10 has an invalid length.
[  183.940126][ T9214] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1351'.
[  183.983319][ T9223] delete_channel: no stack
[  184.540222][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  184.859509][ T9237] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1363'.
[  184.983504][ T9250] netlink: 'syz.3.1369': attribute type 2 has an invalid length.
[  184.986453][ T9250] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1369'.
[  185.764312][ T9257] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1372'.
[  186.053082][ T9284] netlink: 'syz.4.1378': attribute type 9 has an invalid length.
[  189.477385][ T9322] bridge0: port 3(macvlan0) entered blocking state
[  189.481429][ T9322] bridge0: port 3(macvlan0) entered disabled state
[  189.484345][ T9322] macvlan0: entered allmulticast mode
[  189.486618][ T9322] veth1_vlan: entered allmulticast mode
[  189.493335][ T9322] macvlan0: entered promiscuous mode
[  189.496218][ T9322] bridge0: port 3(macvlan0) entered blocking state
[  189.498548][ T9322] bridge0: port 3(macvlan0) entered forwarding state
[  189.525998][ T9324] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1403'.
[  190.044794][ T9346] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1412'.
[  190.220051][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'.
[  191.317611][ T9386] netlink: 825 bytes leftover after parsing attributes in process `syz.3.1429'.
[  191.321797][ T9386] netlink: 130144 bytes leftover after parsing attributes in process `syz.3.1429'.
[  191.607039][ T9400] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1435'.
[  191.686005][ T9401] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1434'.
[  192.625234][ T9419] netlink: 'syz.4.1444': attribute type 1 has an invalid length.
[  193.414113][ T9440] sctp: [Deprecated]: syz.4.1451 (pid 9440) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.414113][ T9440] Use struct sctp_sack_info instead
[  193.427512][ T9442] tmpfs: Bad value for 'uid'
[  193.431024][ T9442] tmpfs: Bad value for 'uid'
[  194.047630][ T9476] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1468'.
[  194.280996][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.282963][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  195.368689][ T9536] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1493'.
[  195.504070][ T9537] veth1_macvtap: entered promiscuous mode
[  195.506837][ T9537] veth1_macvtap: entered allmulticast mode
[  196.067180][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1504'.
[  196.073741][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1504'.
[  196.077926][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1504'.
[  196.990406][ T9571] netlink: 'syz.4.1508': attribute type 10 has an invalid length.
[  196.993536][ T9571] veth1_vlan: left allmulticast mode
[  197.017595][ T9571] bridge0: port 3(macvlan0) entered disabled state
[  197.028538][ T9571] macvlan0: left allmulticast mode
[  197.030686][ T9571] bridge0: port 3(macvlan0) entered disabled state
[  198.199437][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'.
[  198.228491][ T9604] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1522'.
[  198.577584][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'.
[  198.981696][ T9652] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.1545'.
[  198.985015][ T9652] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.1545'.
[  198.990217][ T9652] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.1545'.
[  200.775095][ T9710] netlink: 'syz.4.1570': attribute type 11 has an invalid length.
[  200.777577][ T9710] netlink: 'syz.4.1570': attribute type 11 has an invalid length.
[  201.201003][ T9736] netlink: 'syz.0.1580': attribute type 4 has an invalid length.
[  201.246676][ T9742] netlink: 'syz.0.1585': attribute type 21 has an invalid length.
[  201.250141][ T9742] __nla_validate_parse: 1 callbacks suppressed
[  201.250157][ T9742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1585'.
[  201.980679][ T9765] netlink: 211576 bytes leftover after parsing attributes in process `syz.0.1594'.
[  202.322583][ T9769] netlink: 'syz.0.1596': attribute type 10 has an invalid length.
[  202.329916][ T9769] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  202.336368][ T9769] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  202.353828][ T9769] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  202.623714][ T9783] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  202.981382][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1608'.
[  202.985307][ T9799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1608'.
[  203.313914][ T9806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1611'.
[  203.729769][ T9822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'.
[  204.123418][ T9834] netlink: 'syz.3.1624': attribute type 1 has an invalid length.
[  204.322122][ T9839] netlink: 'syz.3.1625': attribute type 21 has an invalid length.
[  204.333300][ T9839] netlink: 212256 bytes leftover after parsing attributes in process `syz.3.1625'.
[  204.340460][ T9839] netlink: zone id is out of range
[  204.342448][ T9839] netlink: zone id is out of range
[  204.344256][ T9839] netlink: zone id is out of range
[  204.346053][ T9839] netlink: zone id is out of range
[  204.349671][ T9839] netlink: zone id is out of range
[  204.351464][ T9839] netlink: zone id is out of range
[  204.353205][ T9839] netlink: zone id is out of range
[  204.355054][ T9839] netlink: zone id is out of range
[  204.356839][ T9839] netlink: zone id is out of range
[  204.364454][ T9839] netlink: zone id is out of range
[  206.574991][ T9846] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1627'.
[  206.579271][ T9846] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1627'.
[  206.585089][ T9846] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1627'.
[  207.181599][ T9852] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  207.185849][ T9852] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  207.296748][ T9861] delete_channel: no stack
[  207.334039][ T9864] netlink: 'syz.4.1636': attribute type 10 has an invalid length.
[  207.372116][ T9864] team0: Device ipvlan1 failed to register rx_handler
[  207.417277][ T9865] netlink: 'syz.4.1636': attribute type 29 has an invalid length.
[  207.427760][ T9865] netlink: 'syz.4.1636': attribute type 3 has an invalid length.
[  207.431492][ T9865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1636'.
[  207.448772][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'.
[  207.886156][ T9901] netlink: 294 bytes leftover after parsing attributes in process `syz.4.1651'.
[  208.337287][ T9917] sit0: entered allmulticast mode
[  208.387361][ T9915] sit0: entered promiscuous mode
[  209.415873][ T9932] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1665'.
[  209.524869][   T33] audit: type=1107 audit(1758905326.428:2): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  209.535908][ T9941] : renamed from wg2 (while UP)
[  210.031908][ T9956] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1674'.
[  211.226242][ T9970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1680'.
[  211.593126][ T9966] netlink: 'syz.0.1679': attribute type 13 has an invalid length.
[  211.596400][ T9966] netlink: 'syz.0.1679': attribute type 17 has an invalid length.
[  211.681933][ T9966] sit0: left promiscuous mode
[  211.683852][ T9966] sit0: left allmulticast mode
[  211.713620][ T9966] 8021q: adding VLAN 0 to HW filter on device team0
[  211.719323][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  211.732273][ T9966] net_ratelimit: 3 callbacks suppressed
[  211.732300][ T9966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  212.120196][ T9992] netlink: 'syz.0.1688': attribute type 21 has an invalid length.
[  212.122887][ T9992] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1688'.
[  212.210721][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'.
[  212.269071][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1694'.
[  212.272274][T10004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1694'.
[  213.943677][T10036] : entered promiscuous mode
[  214.008299][T10042] netlink: 'syz.3.1711': attribute type 3 has an invalid length.
[  214.014974][T10042] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1711'.
[  214.315430][T10058] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  214.773035][T10077] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.835215][T10079] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  215.066350][T10091] netlink: 'syz.3.1734': attribute type 10 has an invalid length.
[  215.069704][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1734'.
[  215.073895][T10091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.253775][T10105] netlink: 'syz.0.1741': attribute type 10 has an invalid length.
[  215.422194][T10113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.489778][T10109] blkio.reset_stats is deprecated
[  215.715998][T10122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1748'.
[  215.751235][T10124] netlink: 'syz.4.1749': attribute type 1 has an invalid length.
[  215.754426][T10124] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1749'.
[  215.909515][T10132] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1753'.
[  219.593209][T10159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1765'.
[  219.647505][T10162] netlink: 'syz.4.1766': attribute type 3 has an invalid length.
[  219.922205][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'.
[  219.926211][T10183] siw: device registration error -23
[  219.968912][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'.
[  220.265655][T10199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1783'.
[  220.270476][T10199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1783'.
[  220.274893][T10199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1783'.
[  220.409308][T10202] netlink: 'syz.4.1784': attribute type 5 has an invalid length.
[  220.414861][T10202] netlink: 'syz.4.1784': attribute type 5 has an invalid length.
[  220.609364][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'.
[  221.061566][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'.
[  221.238804][ T5856] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  221.239022][ T5856] Bluetooth: hci3: connection err: -111
[  221.351977][T10243] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1801'.
[  221.358617][T10243] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1801'.
[  221.362628][T10245] netlink: 'syz.0.1802': attribute type 11 has an invalid length.
[  222.377080][T10285] : renamed from team_slave_1 (while UP)
[  222.587272][T10300] netlink: 'syz.3.1829': attribute type 23 has an invalid length.
[  222.591933][T10300] netlink: 'syz.3.1829': attribute type 21 has an invalid length.
[  222.594435][T10300] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.726463][T10312] netlink: 'syz.3.1834': attribute type 2 has an invalid length.
[  222.738046][T10312] netlink: 'syz.3.1834': attribute type 1 has an invalid length.
[  223.007083][T10327] netlink: 'syz.3.1841': attribute type 10 has an invalid length.
[  223.055326][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.306374][T10350] netlink: 'syz.3.1852': attribute type 1 has an invalid length.
[  223.561258][T10362] netlink: zone id is out of range
[  223.566946][T10362] netlink: zone id is out of range
[  223.573870][T10362] netlink: zone id is out of range
[  223.578783][T10362] netlink: zone id is out of range
[  223.581625][T10362] netlink: zone id is out of range
[  223.585733][T10362] netlink: zone id is out of range
[  223.590089][T10362] netlink: zone id is out of range
[  223.593369][T10362] netlink: zone id is out of range
[  223.595220][T10362] netlink: zone id is out of range
[  227.152954][T10439] __nla_validate_parse: 9 callbacks suppressed
[  227.153012][T10439] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1893'.
[  227.179155][T10441] netlink: 211 bytes leftover after parsing attributes in process `syz.0.1894'.
[  227.226875][T10443] validate_nla: 1 callbacks suppressed
[  227.226887][T10443] netlink: 'syz.0.1895': attribute type 29 has an invalid length.
[  227.532642][T10458] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1900'.
[  227.749727][ T5856] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  227.924278][T10480] netlink: 'syz.4.1908': attribute type 4 has an invalid length.
[  228.459656][T10511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1921'.
[  229.181078][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1930'.
[  229.215258][T10537] netlink: 'syz.4.1931': attribute type 10 has an invalid length.
[  229.351048][T10544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1935'.
[  232.614826][T10579] net_ratelimit: 16 callbacks suppressed
[  232.614842][T10579] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  232.664015][T10583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1948'.
[  232.925296][T10599] netlink: 'syz.3.1957': attribute type 10 has an invalid length.
[  232.928645][T10599] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1957'.
[  232.970516][T10603] netlink: 'syz.3.1959': attribute type 1 has an invalid length.
[  233.663724][T10646] : port 1(veth0_to_bridge) entered blocking state
[  233.666097][T10646] : port 1(veth0_to_bridge) entered disabled state
[  233.671050][T10646] veth0_to_bridge: entered allmulticast mode
[  233.676988][T10646] veth0_to_bridge: entered promiscuous mode
[  233.948751][T10614] delete_channel: no stack
[  234.230413][T10669] syzkaller0: tun_chr_ioctl cmd 1074025677
[  234.232272][T10669] syzkaller0: Linktype set failed because interface is up
[  236.262773][T10704] netlink: 'syz.3.1997': attribute type 39 has an invalid length.
[  236.834662][T10710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1999'.
[  236.906187][T10710] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.933386][T10710] bridge_slave_0 (unregistering): left allmulticast mode
[  236.936880][T10710] bridge_slave_0 (unregistering): left promiscuous mode
[  236.939690][T10710] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.018895][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'.
[  237.375032][T10721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.993941][T10780] bridge0: port 3(batadv0) entered disabled state
[  240.000911][T10780] bridge_slave_1: left allmulticast mode
[  240.003182][T10780] bridge_slave_1: left promiscuous mode
[  240.005547][T10780] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.021589][T10780] bridge_slave_0: left allmulticast mode
[  240.023801][T10780] bridge_slave_0: left promiscuous mode
[  240.026208][T10780] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.887547][T10804] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2036'.
[  241.086621][T10814] netlink: 'syz.0.2041': attribute type 1 has an invalid length.
[  241.139086][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'.
[  241.216709][T10820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.385139][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'.
[  241.389770][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'.
[  241.393436][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'.
[  241.466489][T10841] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  241.535810][T10847] netlink: 'syz.0.2056': attribute type 1 has an invalid length.
[  241.636839][T10853] openvswitch: netlink: Flow key attribute not present in set flow.
[  241.696596][T10849] netlink: 'syz.3.2057': attribute type 23 has an invalid length.
[  241.941964][T10871] netlink: 'syz.0.2067': attribute type 17 has an invalid length.
[  242.062701][T10878] netlink: 'syz.4.2070': attribute type 29 has an invalid length.
[  242.067027][T10878] netlink: 'syz.4.2070': attribute type 29 has an invalid length.
[  243.190704][T10892] netlink: 'syz.3.2076': attribute type 29 has an invalid length.
[  243.197464][T10892] netlink: 'syz.3.2076': attribute type 29 has an invalid length.
[  243.203224][T10892] netlink: 'syz.3.2076': attribute type 29 has an invalid length.
[  243.295334][T10903] xt_l2tp: missing protocol rule (udp|l2tpip)
[  243.316746][T10906] netlink: 'syz.4.2083': attribute type 2 has an invalid length.
[  243.322285][T10906] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2083'.
[  244.062976][T10942] raw_sendmsg: syz.0.2098 forgot to set AF_INET. Fix it!
[  244.399525][T10956] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2105'.
[  244.452231][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2107'.
[  244.464639][T10961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2108'.
[  244.478980][T10964] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2109'.
[  245.004912][T10991] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  245.022958][T10991] syzkaller0: entered promiscuous mode
[  245.025263][T10991] syzkaller0: entered allmulticast mode
[  245.353406][T10966] delete_channel: no stack
[  245.748933][T11010] delete_channel: no stack
[  246.701407][T11017] netlink: 'syz.3.2130': attribute type 11 has an invalid length.
[  246.704575][T11017] netlink: 'syz.3.2130': attribute type 11 has an invalid length.
[  246.707743][T11017] __nla_validate_parse: 1 callbacks suppressed
[  246.707765][T11017] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2130'.
[  247.491936][T11005] syzkaller0: entered promiscuous mode
[  247.494054][T11005] syzkaller0: entered allmulticast mode
[  249.223915][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'.
[  249.466236][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'.
[  249.532035][T11059] validate_nla: 3 callbacks suppressed
[  249.532051][T11059] netlink: 'syz.0.2148': attribute type 1 has an invalid length.
[  249.536664][T11059] netlink: 'syz.0.2148': attribute type 2 has an invalid length.
[  249.710717][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'.
[  249.825117][T11073] netlink: 'syz.0.2153': attribute type 1 has an invalid length.
[  249.996301][T11079] netlink: 'syz.4.2156': attribute type 29 has an invalid length.
[  250.526623][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'.
[  250.991825][T11123] rdma_rxe: rxe_newlink: failed to add lo
[  252.173795][T11145] delete_channel: no stack
[  252.595319][T11157] netlink: 'syz.3.2188': attribute type 2 has an invalid length.
[  252.601412][T11157] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2188'.
[  252.614954][T11157] netlink: 'syz.3.2188': attribute type 2 has an invalid length.
[  252.618205][T11157] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2188'.
[  252.689017][T11164] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2192'.
[  253.003301][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2200'.
[  253.188543][T11188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2204'.
[  254.189797][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'.
[  254.195507][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'.
[  254.218293][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'.
[  254.440709][T11215] netlink: 'syz.0.2215': attribute type 10 has an invalid length.
[  254.875420][T11230] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2223'.
[  254.952473][T11231] netlink: 'syz.4.2223': attribute type 10 has an invalid length.
[  255.018421][T11230] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2223'.
[  255.050874][T11231] veth0_vlan: left promiscuous mode
[  255.059260][T11231] veth0_vlan: entered promiscuous mode
[  255.068140][T11231] team0: Device veth0_vlan failed to register rx_handler
[  255.159863][T11236] netlink: 'syz.4.2224': attribute type 64 has an invalid length.
[  255.721153][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.723365][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  256.171584][T11275] netlink: 'syz.4.2241': attribute type 1 has an invalid length.
[  256.365232][T11283] netlink: 'syz.0.2246': attribute type 13 has an invalid length.
[  256.373820][T11283] netlink: 'syz.0.2246': attribute type 17 has an invalid length.
[  256.403782][T11283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  256.808517][T11299] netlink: 'syz.4.2252': attribute type 21 has an invalid length.
[  257.022250][T11305] netlink: 'syz.4.2254': attribute type 11 has an invalid length.
[  257.025358][T11305] netlink: 'syz.4.2254': attribute type 5 has an invalid length.
[  257.333597][T11317] netlink: 'syz.0.2259': attribute type 4 has an invalid length.
[  258.113515][T11327] : entered promiscuous mode
[  258.164662][T11329] netlink: 'syz.0.2265': attribute type 1 has an invalid length.
[  258.167262][T11329] __nla_validate_parse: 9 callbacks suppressed
[  258.167271][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'.
[  258.206211][T11331] netlink: 'syz.0.2266': attribute type 21 has an invalid length.
[  258.212809][T11331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2266'.
[  258.230341][T11331] siw: device registration error -23
[  258.450990][T11351] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2275'.
[  258.563523][T11361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2281'.
[  258.572542][T11361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2281'.
[  258.580011][T11361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2281'.
[  258.646066][T11364] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2283'.
[  259.697505][ T5856] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11
[  260.084204][T11424] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2310'.
[  260.091560][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2310'.
[  260.200239][T11426] validate_nla: 4 callbacks suppressed
[  260.200310][T11426] netlink: 'syz.4.2311': attribute type 29 has an invalid length.
[  260.210113][T11426] netlink: 'syz.4.2311': attribute type 29 has an invalid length.
[  260.240172][T11426] netlink: 572 bytes leftover after parsing attributes in process `syz.4.2311'.
[  263.257670][T11485] __nla_validate_parse: 1 callbacks suppressed
[  263.257741][T11485] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2337'.
[  263.394944][T11492] syz.4.2337 (11492) used obsolete PPPIOCDETACH ioctl
[  263.412487][T11489] netlink: 4800 bytes leftover after parsing attributes in process `syz.0.2339'.
[  263.415685][T11489] netlink: 4800 bytes leftover after parsing attributes in process `syz.0.2339'.
[  263.494039][T11494] netlink: 'syz.0.2340': attribute type 1 has an invalid length.
[  263.542546][T11496] netlink: 'syz.0.2341': attribute type 4 has an invalid length.
[  263.545663][T11496] netlink: 'syz.0.2341': attribute type 3 has an invalid length.
[  263.549320][T11496] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2341'.
[  264.191358][T11517] : port 1(vlan0) entered blocking state
[  264.193862][T11517] : port 1(vlan0) entered disabled state
[  264.196255][T11517] vlan0: entered allmulticast mode
[  264.215655][T11517] veth0_vlan: entered allmulticast mode
[  264.222223][T11517] vlan0: entered promiscuous mode
[  264.294406][ T5856] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  264.436405][T11522] netlink: 'syz.4.2353': attribute type 10 has an invalid length.
[  265.847847][T11559] openvswitch: netlink: VXLAN extension message has 10 unknown bytes.
[  266.159234][T11572] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2376'.
[  266.457151][T11582] syzkaller0: entered promiscuous mode
[  266.459519][T11582] syzkaller0: entered allmulticast mode
[  268.038737][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  268.229374][T11601] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  269.979401][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  269.984509][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  269.990345][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  269.994120][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  269.997632][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  270.334854][T11623] chnl_net:caif_netlink_parms(): no params data found
[  270.434053][T11623] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.436350][T11623] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.439041][T11623] bridge_slave_0: entered allmulticast mode
[  270.442101][T11623] bridge_slave_0: entered promiscuous mode
[  270.446164][T11623] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.448764][T11623] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.451867][T11623] bridge_slave_1: entered allmulticast mode
[  270.454952][T11623] bridge_slave_1: entered promiscuous mode
[  270.477533][T11623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.483359][T11623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.505336][T11623] team0: Port device team_slave_0 added
[  270.508976][T11623] team0: Port device team_slave_1 added
[  270.527408][T11623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.530653][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.539749][T11623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.544202][T11623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.546330][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.554252][T11623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.617210][T11623] hsr_slave_0: entered promiscuous mode
[  270.621852][T11623] hsr_slave_1: entered promiscuous mode
[  270.624800][T11623] debugfs: 'hsr0' already exists in 'hsr'
[  270.627191][T11623] Cannot create hsr debugfs directory
[  270.915720][T11623] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  270.936377][T11623] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  270.967263][T11623] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  270.992906][T11623] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  271.026755][T11653] netlink: 'syz.4.2403': attribute type 28 has an invalid length.
[  271.042230][T11623] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.044531][T11623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.047160][T11623] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.049704][T11623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.122823][T11623] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.134709][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.140073][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.152755][T11623] 8021q: adding VLAN 0 to HW filter on device team0
[  271.161389][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.163998][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.180087][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.182923][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.193612][T11663] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2407'.
[  271.197651][T11663] netlink: 'syz.0.2407': attribute type 1 has an invalid length.
[  271.203768][T11663] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.2407'.
[  271.383804][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.411217][T11680] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2413'.
[  271.542785][T11623] veth0_vlan: entered promiscuous mode
[  271.550754][T11623] veth1_vlan: entered promiscuous mode
[  271.613042][T11623] veth0_macvtap: entered promiscuous mode
[  271.623731][T11623] veth1_macvtap: entered promiscuous mode
[  271.647548][T11623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.667103][T11623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.677596][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.683639][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.692402][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.785846][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.836603][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.839650][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.840611][T11693] netlink: 'syz.0.2416': attribute type 1 has an invalid length.
[  271.845577][T11693] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2416'.
[  271.850863][T11693] netlink: 'syz.0.2416': attribute type 1 has an invalid length.
[  271.900453][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.903882][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.038269][   T55] Bluetooth: hci0: command tx timeout
[  272.146001][T11703] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2419'.
[  272.272980][T11711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.294059][T11709] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2422'.
[  272.326050][T11713] netlink: 'syz.0.2424': attribute type 27 has an invalid length.
[  272.529230][T11718] netlink: 'syz.0.2426': attribute type 2 has an invalid length.
[  272.534426][T11718] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2426'.
[  272.707072][T11725] openvswitch: netlink: IPv4 tunnel dst address is zero
[  273.099945][T11741] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2436'.
[  273.163138][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  274.119209][ T5856] Bluetooth: hci0: command tx timeout
[  276.211060][ T5856] Bluetooth: hci0: command tx timeout
[  276.244536][ T5856] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  276.547544][T11817] can: request_module (can-proto-5) failed.
[  276.593866][T11824] netlink: 'syz.5.2471': attribute type 10 has an invalid length.
[  276.611599][T11824] team0: Port device dummy0 added
[  276.625671][T11821] can: request_module (can-proto-3) failed.
[  277.076607][T11847] netlink: 798 bytes leftover after parsing attributes in process `syz.5.2480'.
[  278.278157][ T5856] Bluetooth: hci0: command tx timeout
[  281.236604][T11876] netlink: 'syz.5.2495': attribute type 10 has an invalid length.
[  281.240860][T11876] netlink: 'syz.5.2495': attribute type 1 has an invalid length.
[  281.243953][T11876] bridge0: port 1(bridge_slave_0) entered learning state
[  281.343944][T11885] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2500'.
[  281.362895][T11887] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2501'.
[  281.424776][T11891] delete_channel: no stack
[  281.426352][T11891] delete_channel: no stack
[  281.647384][T11907] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2512'.
[  281.667665][T11911] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2513'.
[  281.671650][T11911] netlink: zone id is out of range
[  281.673714][T11911] netlink: get zone limit has 8 unknown bytes
[  281.923761][ T5856] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12
[  282.026586][T11936] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.2525'.
[  282.033861][T11936] netlink: 62239 bytes leftover after parsing attributes in process `syz.5.2525'.
[  282.471183][T11960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2536'.
[  282.479480][T11960] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2536'.
[  282.482917][T11960] netlink: 'syz.0.2536': attribute type 5 has an invalid length.
[  282.492874][T11962] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2537'.
[  282.495516][T11960] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2536'.
[  282.553961][T11966] ==================================================================
[  282.557020][T11966] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  282.560242][T11966] Read of size 1 at addr ffff888039d819b0 by task syz.0.2539/11966
[  282.564215][T11966] 
[  282.565181][T11966] CPU: 1 UID: 0 PID: 11966 Comm: syz.0.2539 Not tainted syzkaller #0 PREEMPT(full) 
[  282.565200][T11966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.565210][T11966] Call Trace:
[  282.565218][T11966]  <TASK>
[  282.565226][T11966]  dump_stack_lvl+0x189/0x250
[  282.565248][T11966]  ? __virt_addr_valid+0x1c8/0x5c0
[  282.565288][T11966]  ? rcu_is_watching+0x15/0xb0
[  282.565303][T11966]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.565319][T11966]  ? rcu_is_watching+0x15/0xb0
[  282.565332][T11966]  ? lock_release+0x4b/0x3e0
[  282.565352][T11966]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  282.565368][T11966]  ? __virt_addr_valid+0x1c8/0x5c0
[  282.565385][T11966]  ? __virt_addr_valid+0x4a5/0x5c0
[  282.565402][T11966]  print_report+0xca/0x240
[  282.565415][T11966]  ? __xfrm_state_insert+0x8af/0x1450
[  282.565435][T11966]  kasan_report+0x118/0x150
[  282.565449][T11966]  ? __xfrm_state_insert+0x8af/0x1450
[  282.565471][T11966]  __xfrm_state_insert+0x8af/0x1450
[  282.565493][T11966]  ? xfrm_state_insert+0x44/0x60
[  282.565519][T11966]  xfrm_state_insert+0x54/0x60
[  282.565538][T11966]  ipcomp6_init_state+0x655/0x900
[  282.565561][T11966]  __xfrm_init_state+0xa76/0x13f0
[  282.565575][T11966]  ? __xfrm_init_state+0x7ef/0x13f0
[  282.565590][T11966]  xfrm_add_sa+0x2f5b/0x4070
[  282.565606][T11966]  ? __pfx_xfrm_add_sa+0x10/0x10
[  282.565618][T11966]  ? apparmor_capable+0x137/0x1b0
[  282.565639][T11966]  ? __nla_parse+0x40/0x60
[  282.565657][T11966]  xfrm_user_rcv_msg+0x7a3/0xab0
[  282.565672][T11966]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  282.565697][T11966]  ? __pfx___mutex_trylock_common+0x10/0x10
[  282.565713][T11966]  ? rcu_is_watching+0x15/0xb0
[  282.565725][T11966]  ? trace_contention_end+0x39/0x120
[  282.565740][T11966]  ? __mutex_lock+0x335/0x1350
[  282.565758][T11966]  netlink_rcv_skb+0x208/0x470
[  282.565776][T11966]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  282.565789][T11966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  282.565810][T11966]  ? netlink_deliver_tap+0x2e/0x1b0
[  282.565826][T11966]  ? netlink_deliver_tap+0x2e/0x1b0
[  282.565843][T11966]  xfrm_netlink_rcv+0x79/0x90
[  282.565856][T11966]  netlink_unicast+0x82f/0x9e0
[  282.565873][T11966]  ? __pfx_netlink_unicast+0x10/0x10
[  282.565888][T11966]  ? netlink_sendmsg+0x642/0xb30
[  282.565904][T11966]  ? skb_put+0x11b/0x210
[  282.565923][T11966]  netlink_sendmsg+0x805/0xb30
[  282.565943][T11966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.565961][T11966]  ? aa_sock_msg_perm+0xf1/0x1d0
[  282.565977][T11966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  282.565993][T11966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.566010][T11966]  __sock_sendmsg+0x21c/0x270
[  282.566026][T11966]  ____sys_sendmsg+0x505/0x830
[  282.566047][T11966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.566069][T11966]  ? import_iovec+0x74/0xa0
[  282.566090][T11966]  ___sys_sendmsg+0x21f/0x2a0
[  282.566109][T11966]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.566140][T11966]  ? __fget_files+0x2a/0x420
[  282.566153][T11966]  ? __fget_files+0x3a0/0x420
[  282.566171][T11966]  __x64_sys_sendmsg+0x19b/0x260
[  282.566190][T11966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  282.566216][T11966]  ? do_syscall_64+0xbe/0x3b0
[  282.566235][T11966]  do_syscall_64+0xfa/0x3b0
[  282.566251][T11966]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.566294][T11966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.566308][T11966]  ? exc_page_fault+0x9f/0xf0
[  282.566325][T11966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.566339][T11966] RIP: 0033:0x7f6bb3f8ec29
[  282.566353][T11966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.566365][T11966] RSP: 002b:00007f6bb4d41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.566381][T11966] RAX: ffffffffffffffda RBX: 00007f6bb41d5fa0 RCX: 00007f6bb3f8ec29
[  282.566392][T11966] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  282.566401][T11966] RBP: 00007f6bb4011e41 R08: 0000000000000000 R09: 0000000000000000
[  282.566410][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.566418][T11966] R13: 00007f6bb41d6038 R14: 00007f6bb41d5fa0 R15: 00007ffcc0090bf8
[  282.566434][T11966]  </TASK>
[  282.566439][T11966] 
[  282.723523][T11966] Allocated by task 9660:
[  282.725466][T11966]  kasan_save_track+0x3e/0x80
[  282.727575][T11966]  __kasan_slab_alloc+0x6c/0x80
[  282.729460][T11966]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  282.731714][T11966]  xfrm_state_alloc+0x24/0x2f0
[  282.733569][T11966]  __find_acq_core+0x8a7/0x1c00
[  282.735424][T11966]  xfrm_find_acq+0x78/0xa0
[  282.737152][T11966]  xfrm_alloc_userspi+0x6b3/0xc90
[  282.739120][T11966]  xfrm_user_rcv_msg+0x7a3/0xab0
[  282.741045][T11966]  netlink_rcv_skb+0x208/0x470
[  282.742936][T11966]  xfrm_netlink_rcv+0x79/0x90
[  282.744791][T11966]  netlink_unicast+0x82f/0x9e0
[  282.746622][T11966]  netlink_sendmsg+0x805/0xb30
[  282.748462][T11966]  __sock_sendmsg+0x21c/0x270
[  282.750370][T11966]  ____sys_sendmsg+0x505/0x830
[  282.752269][T11966]  ___sys_sendmsg+0x21f/0x2a0
[  282.754058][T11966]  __x64_sys_sendmsg+0x19b/0x260
[  282.756035][T11966]  do_syscall_64+0xfa/0x3b0
[  282.757858][T11966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.760073][T11966] 
[  282.761007][T11966] Freed by task 791:
[  282.762511][T11966]  kasan_save_track+0x3e/0x80
[  282.764321][T11966]  kasan_save_free_info+0x46/0x50
[  282.766450][T11966]  __kasan_slab_free+0x5b/0x80
[  282.768388][T11966]  kmem_cache_free+0x18f/0x400
[  282.770319][T11966]  xfrm_state_gc_task+0x52d/0x6b0
[  282.772372][T11966]  process_scheduled_works+0xae1/0x17b0
[  282.774494][T11966]  worker_thread+0x8a0/0xda0
[  282.776286][T11966]  kthread+0x711/0x8a0
[  282.777914][T11966]  ret_from_fork+0x439/0x7d0
[  282.779765][T11966]  ret_from_fork_asm+0x1a/0x30
[  282.781617][T11966] 
[  282.782567][T11966] The buggy address belongs to the object at ffff888039d81680
[  282.782567][T11966]  which belongs to the cache xfrm_state of size 928
[  282.787812][T11966] The buggy address is located 816 bytes inside of
[  282.787812][T11966]  freed 928-byte region [ffff888039d81680, ffff888039d81a20)
[  282.793136][T11966] 
[  282.794114][T11966] The buggy address belongs to the physical page:
[  282.796605][T11966] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888039d81680 pfn:0x39d80
[  282.800404][T11966] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  282.803665][T11966] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  282.806601][T11966] page_type: f5(slab)
[  282.808277][T11966] raw: 00fff00000000040 ffff88801d704140 dead000000000122 0000000000000000
[  282.811745][T11966] raw: ffff888039d81680 00000000800e0008 00000000f5000000 0000000000000000
[  282.815067][T11966] head: 00fff00000000040 ffff88801d704140 dead000000000122 0000000000000000
[  282.818466][T11966] head: ffff888039d81680 00000000800e0008 00000000f5000000 0000000000000000
[  282.821851][T11966] head: 00fff00000000002 ffffea0000e76001 00000000ffffffff 00000000ffffffff
[  282.825143][T11966] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  282.828555][T11966] page dumped because: kasan: bad access detected
[  282.831076][T11966] page_owner tracks the page as allocated
[  282.833273][T11966] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6248, tgid 6240 (syz.1.139), ts 77022203199, free_ts 67834870427
[  282.840365][T11966]  post_alloc_hook+0x240/0x2a0
[  282.842197][T11966]  get_page_from_freelist+0x21e4/0x22c0
[  282.844345][T11966]  __alloc_frozen_pages_noprof+0x181/0x370
[  282.846574][T11966]  alloc_pages_mpol+0x232/0x4a0
[  282.848425][T11966]  allocate_slab+0x8a/0x370
[  282.850133][T11966]  ___slab_alloc+0xbeb/0x1420
[  282.851944][T11966]  kmem_cache_alloc_noprof+0x283/0x3c0
[  282.854069][T11966]  xfrm_state_alloc+0x24/0x2f0
[  282.855986][T11966]  pfkey_add+0x6e4/0x2e00
[  282.857736][T11966]  pfkey_sendmsg+0xbfe/0x1090
[  282.859539][T11966]  __sock_sendmsg+0x21c/0x270
[  282.861379][T11966]  ____sys_sendmsg+0x505/0x830
[  282.863215][T11966]  ___sys_sendmsg+0x21f/0x2a0
[  282.865080][T11966]  __x64_sys_sendmsg+0x19b/0x260
[  282.867074][T11966]  do_syscall_64+0xfa/0x3b0
[  282.868900][T11966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.871216][T11966] page last free pid 5298 tgid 5298 stack trace:
[  282.873606][T11966]  __free_frozen_pages+0xbc4/0xd30
[  282.875673][T11966]  __put_partials+0x156/0x1a0
[  282.877525][T11966]  put_cpu_partial+0x17c/0x250
[  282.879438][T11966]  __slab_free+0x2d5/0x3c0
[  282.881171][T11966]  qlist_free_all+0x97/0x140
[  282.882981][T11966]  kasan_quarantine_reduce+0x148/0x160
[  282.885122][T11966]  __kasan_slab_alloc+0x22/0x80
[  282.887000][T11966]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  282.889108][T11966]  getname_flags+0xb8/0x540
[  282.890898][T11966]  do_readlinkat+0xbc/0x500
[  282.892687][T11966]  __x64_sys_readlink+0x7f/0x90
[  282.894563][T11966]  do_syscall_64+0xfa/0x3b0
[  282.896321][T11966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.898626][T11966] 
[  282.899553][T11966] Memory state around the buggy address:
[  282.901695][T11966]  ffff888039d81880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  282.904800][T11966]  ffff888039d81900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  282.908023][T11966] >ffff888039d81980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  282.911128][T11966]                                      ^
[  282.913292][T11966]  ffff888039d81a00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  282.916371][T11966]  ffff888039d81a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  282.919520][T11966] ==================================================================
[  282.922972][T11966] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  282.925745][T11966] CPU: 1 UID: 0 PID: 11966 Comm: syz.0.2539 Not tainted syzkaller #0 PREEMPT(full) 
[  282.929327][T11966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.933188][T11966] Call Trace:
[  282.934520][T11966]  <TASK>
[  282.935675][T11966]  dump_stack_lvl+0x99/0x250
[  282.937495][T11966]  ? __asan_memcpy+0x40/0x70
[  282.939325][T11966]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.941358][T11966]  ? __pfx__printk+0x10/0x10
[  282.943125][T11966]  vpanic+0x281/0x750
[  282.944725][T11966]  ? __pfx_vpanic+0x10/0x10
[  282.946488][T11966]  ? irqentry_exit+0x74/0x90
[  282.948305][T11966]  panic+0xb9/0xc0
[  282.949790][T11966]  ? __pfx_panic+0x10/0x10
[  282.951579][T11966]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  282.953923][T11966]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  282.956185][T11966]  ? is_module_address+0x17/0xf0
[  282.958085][T11966]  ? __xfrm_state_insert+0x8af/0x1450
[  282.960263][T11966]  check_panic_on_warn+0x89/0xb0
[  282.962246][T11966]  ? __xfrm_state_insert+0x8af/0x1450
[  282.964283][T11966]  end_report+0x78/0x160
[  282.965940][T11966]  kasan_report+0x129/0x150
[  282.967677][T11966]  ? __xfrm_state_insert+0x8af/0x1450
[  282.970079][T11966]  __xfrm_state_insert+0x8af/0x1450
[  282.972154][T11966]  ? xfrm_state_insert+0x44/0x60
[  282.974133][T11966]  xfrm_state_insert+0x54/0x60
[  282.976029][T11966]  ipcomp6_init_state+0x655/0x900
[  282.977982][T11966]  __xfrm_init_state+0xa76/0x13f0
[  282.979971][T11966]  ? __xfrm_init_state+0x7ef/0x13f0
[  282.982025][T11966]  xfrm_add_sa+0x2f5b/0x4070
[  282.983830][T11966]  ? __pfx_xfrm_add_sa+0x10/0x10
[  282.985767][T11966]  ? apparmor_capable+0x137/0x1b0
[  282.987789][T11966]  ? __nla_parse+0x40/0x60
[  282.989572][T11966]  xfrm_user_rcv_msg+0x7a3/0xab0
[  282.991546][T11966]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  282.993709][T11966]  ? __pfx___mutex_trylock_common+0x10/0x10
[  282.996047][T11966]  ? rcu_is_watching+0x15/0xb0
[  282.997923][T11966]  ? trace_contention_end+0x39/0x120
[  282.999991][T11966]  ? __mutex_lock+0x335/0x1350
[  283.001889][T11966]  netlink_rcv_skb+0x208/0x470
[  283.003773][T11966]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  283.005883][T11966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.007955][T11966]  ? netlink_deliver_tap+0x2e/0x1b0
[  283.010033][T11966]  ? netlink_deliver_tap+0x2e/0x1b0
[  283.012142][T11966]  xfrm_netlink_rcv+0x79/0x90
[  283.014037][T11966]  netlink_unicast+0x82f/0x9e0
[  283.015971][T11966]  ? __pfx_netlink_unicast+0x10/0x10
[  283.018063][T11966]  ? netlink_sendmsg+0x642/0xb30
[  283.020049][T11966]  ? skb_put+0x11b/0x210
[  283.021747][T11966]  netlink_sendmsg+0x805/0xb30
[  283.023649][T11966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.025723][T11966]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.027682][T11966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.029775][T11966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.031875][T11966]  __sock_sendmsg+0x21c/0x270
[  283.033767][T11966]  ____sys_sendmsg+0x505/0x830
[  283.035685][T11966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.037878][T11966]  ? import_iovec+0x74/0xa0
[  283.039848][T11966]  ___sys_sendmsg+0x21f/0x2a0
[  283.041747][T11966]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.043811][T11966]  ? __fget_files+0x2a/0x420
[  283.045723][T11966]  ? __fget_files+0x3a0/0x420
[  283.047587][T11966]  __x64_sys_sendmsg+0x19b/0x260
[  283.049713][T11966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.051919][T11966]  ? do_syscall_64+0xbe/0x3b0
[  283.053806][T11966]  do_syscall_64+0xfa/0x3b0
[  283.055645][T11966]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.057709][T11966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.060098][T11966]  ? exc_page_fault+0x9f/0xf0
[  283.061870][T11966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.064567][T11966] RIP: 0033:0x7f6bb3f8ec29
[  283.066603][T11966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.074868][T11966] RSP: 002b:00007f6bb4d41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.078180][T11966] RAX: ffffffffffffffda RBX: 00007f6bb41d5fa0 RCX: 00007f6bb3f8ec29
[  283.081408][T11966] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  283.084077][T11966] RBP: 00007f6bb4011e41 R08: 0000000000000000 R09: 0000000000000000
[  283.086589][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.089474][T11966] R13: 00007f6bb41d6038 R14: 00007f6bb41d5fa0 R15: 00007ffcc0090bf8
[  283.092639][T11966]  </TASK>
[  283.094603][T11966] Kernel Offset: disabled
[  283.096298][T11966] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:49:59  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4665b RBX=1ffff11026cc80e1 RCX=ffff8880233a5640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90006fc77e0 RSP=ffffc90006fc7658
R8 =ffffffff8fa3b537 R9 =1ffffffff1f476a6 R10=dffffc0000000000 R11=fffffbfff1f476a7
R12=ffff888136640708 R13=dffffc0000000000 R14=ffff88804b03bdc0 R15=0000000000000001
RIP=ffffffff81bfc5a8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f6bb4d0d100 00007f6bb41a7460 XMM05=00007f6bb41a7478 00007f6bb41a74c0
XMM06=00007f6bb41a74b8 00007f6bb41a74b0 XMM07=00007f6bb41a74a8 00007f6bb41a74a0
XMM08=0000000000000000 00007f6bb4012f0f XMM09=0000000000000000 00007f6bb4012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015e6 RDI=00000000000015e7 RBP=00000000000003f8 RSP=ffffc900069969f0
R8 =ffff888106c78237 R9 =1ffff11020d8f046 R10=dffffc0000000000 R11=ffffffff85504740
R12=dffffc0000000000 R13=ffffffff99b04915 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff855047bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6bb4d416c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6bb4d40fc8 CR3=000000011af22000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6bb41a7498 00007f6bb41a7470 XMM03=00007f6bb41a74a8 00007f6bb41a74a0
XMM04=00007f6bb4d0d100 00007f6bb41a7460 XMM05=00007f6bb41a7478 00007f6bb41a74c0
XMM06=00007f6bb41a74b8 00007f6bb41a74b0 XMM07=00007f6bb41a74a8 00007f6bb41a74a0
XMM08=0000000000000000 00007f6bb4012f0f XMM09=0000000000000000 00007f6bb4012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
