last executing test programs:

1.664756979s ago: executing program 0 (id=2772):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.419596077s ago: executing program 0 (id=2774):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f08847", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

941.029293ms ago: executing program 2 (id=2782):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000053000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f74"], 0xa8}}, 0x0)

940.667461ms ago: executing program 0 (id=2783):
r0 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4)
recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010002)

828.00677ms ago: executing program 2 (id=2785):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f0000f60500000004070000070000000100c500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010142)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
close(r1)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)

827.469919ms ago: executing program 1 (id=2786):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4)

688.257184ms ago: executing program 0 (id=2787):
r0 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x28, 0x2, 0x0, 0x0)

680.593306ms ago: executing program 2 (id=2788):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21)

561.046073ms ago: executing program 1 (id=2789):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xdb, 0x18}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x383}, {}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[r0, r1, r2, r3, r4], &(0x7f0000000b40)=[{0x5, 0x1, 0xf, 0x4}, {0x3, 0x4, 0x6, 0x3}, {0x5, 0x2, 0x0, 0xb}, {0x2, 0x1, 0xc, 0xc}], 0x10, 0x1000}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map, 0xffffffffffffffff, 0x2, 0x4008}, 0x20)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000040), 0x4)
r9 = socket$kcm(0xa, 0x3, 0x3a)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa", @ANYRES64=r8], 0xfdef)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f00000000c0)={r9})
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000fdff0000000000000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000000024000280080004400000080008000340000000ba080001400000001108000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4)

560.620251ms ago: executing program 2 (id=2790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x98, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

473.241044ms ago: executing program 0 (id=2791):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000010000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'})

472.302554ms ago: executing program 2 (id=2792):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080))
sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80)
sendmsg$kcm(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xa, 0xa, 0x6, 0x3, 0x0, 0x37, 0xb0809, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0xd6a5a1417b56fa5a, @perf_config_ext={0x4, 0xabdc}, 0x60, 0xa, 0x2, 0x5, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xd, r0, 0x1)
close(r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, <r5=>0x0}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x80ffffff}, {0x20}, {0x3}, {0x6, 0x0, 0x0, 0x4000}]})
setsockopt$sock_attach_bpf(r3, 0x0, 0x61, 0x0, 0xa4d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r9 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x11b, 0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b001d0000000000000b00000000040000000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\a\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r10, 0xffffffffffffffb5, &(0x7f0000000300)}, 0x10)

284.560439ms ago: executing program 1 (id=2793):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

162.955117ms ago: executing program 1 (id=2794):
r0 = socket$kcm(0x25, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="c3a844260bd7b679d8526cb49660d87dee9000fa6a2704372dbbb61765beda90d9a103538d7db5648c6b01ee2078193a83c146e61c2d33e99294bb547187d5c58fe01c2f1b3b1bf86638d67efa678384d43312d0156124bcc7088eace306440dc6f93f3c7c09c267cbc33e1c5173795cbedcfe43cba32fa82c5de6e36930114262299fb0f53cd2d08153baee87d693158af87be4917eaf7153dda8c7cb254640b5b35a193c0349fae98ceb37036e879993c83eedddebd85d974ac3aacc49e4e0714fb3caedda86cbf5ccc247623734f377b30433239b71b558ae99abb9", 0xdd}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000400)="b8d776b2a50540cc417e9bac1fd56bbe34e947252292d205f5b973f09bd1b6dc96e999ca3a930b71a3b76d8f51767a7e1668f380052e54a3a45d6388828e61574e746b1dca0011275a25b3a9ece241ae25f31d2fcb0e2c5c6cec95b66813c6cf024bdf25b8e22f37f3e0b5d6d2cdb1ab94aa7123", 0x74}, {&(0x7f0000000480)="6551c4f8d71d2bbf3f3c9c33fc2a859830fba64dff5b78f29b7d9536acce1dadfe63995a1b8dd779ba4087c04f2b9e393728c8753c3525131842007b19ada96195ee7b06f5576c7cbaa440273ba0174e51040cc4835152ed988b49202ec3ac9c192082fd1dbd0b94a38cc78b91016da2cf0af6dcce0adc8fcdadca827cf025fce6a9a13547bc5f5030735c96f05a88658e860248ae5f675bc170aa0fc481d12d6d942b37bd95339de301f48f9fc5db8d42ad6be22eaea99e4fa462a6847f26f10c563b846b535d96d03d", 0xca}, {&(0x7f0000000380)="ea544eb32ef433bd8c6d928e10e7b73cd0012f34147f5304900397", 0x1b}], 0x5, 0x0, 0x0, 0x41020}, 0x0)
sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20004050)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004808}, 0x4004040)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x10, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0x400b, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0xd, 0x6, 0x926808994ded34af, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313", 0x2c}], 0x1}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, <r7=>0x0, 0x0}}, 0x10)
write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[@ANYRES64=r5, @ANYRES16=r5, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRESOCT, @ANYRESHEX=r5, @ANYRES32=r6, @ANYBLOB="0765f706fe618d71b506e4d624d37b5d2f88cde38e34ce1e611304364e5466434851b61c9a513e0d91", @ANYRES64=r7], 0xfe33)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x10}}, 0x10004041)

69.058674ms ago: executing program 1 (id=2795):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x7a, &(0x7f0000000400)=""/122, 0x40f00}, 0x94)

11.36971ms ago: executing program 0 (id=2796):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000440)='syz1\x00', 0x1ff)
r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000004c0)={'a', ' *:* ', 'w\x00'}, 0x8)

216.237µs ago: executing program 2 (id=2797):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x3, 0x1000}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)

0s ago: executing program 1 (id=2798):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000300001004000000002e"], 0x0, 0x37}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42745' (ED25519) to the list of known hosts.
syzkaller login: [   63.816305][ T5776] cgroup: Unknown subsys name 'net'
[   63.958234][ T5776] cgroup: Unknown subsys name 'cpuset'
[   63.963697][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.090572][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.658739][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   76.661194][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   84.232303][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   86.237503][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.255316][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.260067][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.264923][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.269417][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.302123][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.310793][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.334737][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.339622][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.344698][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.363459][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.379711][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.383195][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.388065][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.392592][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.827929][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   87.010948][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   87.093939][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.098633][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.102111][ T5868] bridge_slave_0: entered allmulticast mode
[   87.107283][ T5868] bridge_slave_0: entered promiscuous mode
[   87.125017][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   87.153191][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.157738][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.161412][ T5868] bridge_slave_1: entered allmulticast mode
[   87.167008][ T5868] bridge_slave_1: entered promiscuous mode
[   87.240615][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.268077][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.316329][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.319779][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.323065][ T5865] bridge_slave_0: entered allmulticast mode
[   87.328062][ T5865] bridge_slave_0: entered promiscuous mode
[   87.358495][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.361403][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.364259][ T5869] bridge_slave_0: entered allmulticast mode
[   87.368650][ T5869] bridge_slave_0: entered promiscuous mode
[   87.372128][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.377060][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.380336][ T5865] bridge_slave_1: entered allmulticast mode
[   87.386376][ T5865] bridge_slave_1: entered promiscuous mode
[   87.391222][ T5868] team0: Port device team_slave_0 added
[   87.394034][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.397996][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.400678][ T5869] bridge_slave_1: entered allmulticast mode
[   87.403934][ T5869] bridge_slave_1: entered promiscuous mode
[   87.443250][ T5868] team0: Port device team_slave_1 added
[   87.501348][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.508598][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.518005][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.523035][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.526636][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.537115][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.546476][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.570091][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.572889][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.585057][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.655043][ T5869] team0: Port device team_slave_0 added
[   87.659950][ T5865] team0: Port device team_slave_0 added
[   87.665301][ T5865] team0: Port device team_slave_1 added
[   87.675151][ T5869] team0: Port device team_slave_1 added
[   87.742912][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.746178][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.756355][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.795225][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.798294][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.810034][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.831505][ T5868] hsr_slave_0: entered promiscuous mode
[   87.835276][ T5868] hsr_slave_1: entered promiscuous mode
[   87.839622][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.843018][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.855736][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.890689][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.894290][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.907271][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.961176][ T5865] hsr_slave_0: entered promiscuous mode
[   87.965248][ T5865] hsr_slave_1: entered promiscuous mode
[   87.968474][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[   87.971175][ T5865] Cannot create hsr debugfs directory
[   88.067188][ T5869] hsr_slave_0: entered promiscuous mode
[   88.070228][ T5869] hsr_slave_1: entered promiscuous mode
[   88.073323][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   88.075793][ T5869] Cannot create hsr debugfs directory
[   88.334922][ T5866] Bluetooth: hci0: command tx timeout
[   88.424839][ T5866] Bluetooth: hci1: command tx timeout
[   88.425888][ T5235] Bluetooth: hci2: command tx timeout
[   88.447091][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.459431][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.480943][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.517071][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.579538][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.599571][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.610273][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.635068][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.702873][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.724081][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.748216][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.760277][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.949407][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.962774][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.002190][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.029183][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   89.038166][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   89.056711][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.059921][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.071906][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.075635][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.105016][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   89.112073][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.116215][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.130478][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.134029][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.162871][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.165754][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.192515][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.196236][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.343135][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.576296][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.598577][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.673392][ T5868] veth0_vlan: entered promiscuous mode
[   89.680011][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.699577][ T5865] veth0_vlan: entered promiscuous mode
[   89.718981][ T5868] veth1_vlan: entered promiscuous mode
[   89.744705][ T5865] veth1_vlan: entered promiscuous mode
[   89.803081][ T5869] veth0_vlan: entered promiscuous mode
[   89.813062][ T5868] veth0_macvtap: entered promiscuous mode
[   89.824142][ T5868] veth1_macvtap: entered promiscuous mode
[   89.833520][ T5869] veth1_vlan: entered promiscuous mode
[   89.840511][ T5865] veth0_macvtap: entered promiscuous mode
[   89.854308][ T5865] veth1_macvtap: entered promiscuous mode
[   89.873733][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.891609][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.907801][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.923094][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.932162][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.942343][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.955998][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.970102][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.988138][ T5869] veth0_macvtap: entered promiscuous mode
[   89.997059][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.001296][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.025122][ T5869] veth1_macvtap: entered promiscuous mode
[   90.040122][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.046637][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.132445][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.177502][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.201530][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.206755][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.217417][ T5709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.230387][ T5709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.259968][ T5709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.277722][ T5709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.306593][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.310806][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.374074][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.379776][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.405663][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.415340][ T5235] Bluetooth: hci0: command tx timeout
[   90.422697][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.495339][ T5235] Bluetooth: hci1: command tx timeout
[   90.505122][ T5235] Bluetooth: hci2: command tx timeout
[   90.541039][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.565693][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.653770][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.680219][ T5932] netlink: 'syz.2.9': attribute type 21 has an invalid length.
[   90.714829][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.741642][ T5932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9'.
[   90.763767][ T5932] netlink: 'syz.2.9': attribute type 1 has an invalid length.
[   91.181689][ T5954] netlink: 'syz.2.17': attribute type 2 has an invalid length.
[   91.188194][ T5954] netlink: 'syz.2.17': attribute type 8 has an invalid length.
[   91.192768][ T5954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17'.
[   91.270336][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   91.277236][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'.
[   91.562832][ T5970] netlink: 340 bytes leftover after parsing attributes in process `syz.0.25'.
[   91.590069][ T5970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.25'.
[   91.887728][ T5980] netlink: 10 bytes leftover after parsing attributes in process `syz.1.31'.
[   92.035896][   T46] cfg80211: failed to load regulatory.db
[   92.067441][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'.
[   92.218371][ T5996] C: renamed from team_slave_0 (while UP)
[   92.223288][ T5996] netlink: 'syz.1.37': attribute type 3 has an invalid length.
[   92.228444][ T5996] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   92.231425][ T5996] netlink: 116 bytes leftover after parsing attributes in process `syz.1.37'.
[   92.499092][ T5235] Bluetooth: hci0: command tx timeout
[   92.577578][ T5235] Bluetooth: hci2: command tx timeout
[   92.577636][ T5866] Bluetooth: hci1: command tx timeout
[   92.696680][ T6005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41'.
[   93.110424][ T6031] syz.2.54 (6031) used obsolete PPPIOCDETACH ioctl
[   93.483697][    C1] hrtimer: interrupt took 27032 ns
[   93.527519][ T6047] syz.2.61 uses obsolete (PF_INET,SOCK_PACKET)
[   94.578964][ T5866] Bluetooth: hci0: command tx timeout
[   94.655816][ T5866] Bluetooth: hci2: command tx timeout
[   96.549858][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2575288063 wd_nsec: 2575288760
[   96.854162][ T5866] Bluetooth: hci1: command tx timeout
[  101.080999][ T5910] sched: DL replenish lagged too much
[  101.413985][ T6067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.937955][ T6076] netlink: 'syz.0.74': attribute type 13 has an invalid length.
[  101.941281][ T6076] netlink: 'syz.0.74': attribute type 17 has an invalid length.
[  101.992113][ T6081] netlink: 'syz.1.76': attribute type 5 has an invalid length.
[  102.478586][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.599345][ T6094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.672228][ T6096] __nla_validate_parse: 1 callbacks suppressed
[  102.672253][ T6096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.83'.
[  103.250823][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'.
[  103.413358][ T6116] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  103.445631][ T6116] Zero length message leads to an empty skb
[  103.577387][ T6130] Driver unsupported XDP return value 0 on prog  (id 32) dev N/A, expect packet loss!
[  103.879993][ T6142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.103'.
[  103.885356][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.409533][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'.
[  105.256487][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'.
[  106.482043][ T6195] bond0: (slave ): Error: Device type is different from other slaves
[  106.571996][ T6201] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.129'.
[  106.807701][ T6209] netlink: 'syz.0.134': attribute type 33 has an invalid length.
[  106.811452][ T6209] netlink: 152 bytes leftover after parsing attributes in process `syz.0.134'.
[  107.088071][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'.
[  107.093308][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[  107.167208][ T6227] netlink: 'syz.0.142': attribute type 10 has an invalid length.
[  107.170976][ T6227] netlink: 55 bytes leftover after parsing attributes in process `syz.0.142'.
[  107.735799][ T6251] netlink: 80 bytes leftover after parsing attributes in process `syz.0.154'.
[  107.740208][ T6251] netlink: 80 bytes leftover after parsing attributes in process `syz.0.154'.
[  107.932062][ T6261] warning: `syz.0.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  108.272044][ T6273] can: request_module (can-proto-0) failed.
[  108.786549][ T6280] netlink: 'syz.1.164': attribute type 11 has an invalid length.
[  108.790378][ T6280] netlink: 140 bytes leftover after parsing attributes in process `syz.1.164'.
[  108.878333][ T6284] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.166'.
[  108.978703][ T6288] netlink: 'syz.2.168': attribute type 11 has an invalid length.
[  108.982588][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.168'.
[  109.640937][ T6309] tc_dump_action: action bad kind
[  109.823367][ T6313] netlink: 56 bytes leftover after parsing attributes in process `syz.1.180'.
[  109.828271][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'.
[  109.927165][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'.
[  112.013572][ T6343] netlink: 'syz.2.192': attribute type 21 has an invalid length.
[  113.356057][ T6359] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.197'.
[  114.199271][ T6363] netlink: 144 bytes leftover after parsing attributes in process `syz.1.198'.
[  115.361931][ T6394] netlink: 'syz.1.209': attribute type 11 has an invalid length.
[  115.365828][ T6394] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.209'.
[  115.432108][ T6400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.800555][ T6415] netlink: 'syz.1.217': attribute type 39 has an invalid length.
[  115.913262][ T6415] veth0_macvtap: left promiscuous mode
[  115.918854][ T6410] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.216'.
[  117.299869][ T6436] netlink: 'syz.0.225': attribute type 2 has an invalid length.
[  117.303786][ T6436] netlink: 51 bytes leftover after parsing attributes in process `syz.0.225'.
[  117.544723][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[  117.604246][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[  118.007255][ T6457] netlink: 128 bytes leftover after parsing attributes in process `syz.1.235'.
[  118.436005][ T6465] syz.0.239 (6465) used greatest stack depth: 19984 bytes left
[  118.820906][ T6478] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  119.081435][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'.
[  119.408025][ T6499] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.249'.
[  119.457859][ T6499] openvswitch: netlink: Message has 6 unknown bytes.
[  119.577572][ T6491] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.249'.
[  119.724261][ T6499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.730185][ T6499] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.469930][ T5866] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[  120.637229][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'.
[  120.640611][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'.
[  120.748394][ T6525] netlink: 'syz.2.263': attribute type 10 has an invalid length.
[  120.751828][ T6525] lo: entered promiscuous mode
[  120.766767][ T6525] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  120.851014][ T6529] netlink: 'syz.1.265': attribute type 10 has an invalid length.
[  122.076070][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  122.692862][ T6535] mac80211_hwsim hwsim5 .3#c: renamed from wlan1 (while UP)
[  122.734193][ T6529] syz.1.265 (6529) used greatest stack depth: 19512 bytes left
[  123.628408][ T6579] netlink: 'syz.0.283': attribute type 16 has an invalid length.
[  123.632021][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'.
[  123.878558][ T6586] wg0 speed is unknown, defaulting to 1000
[  123.881825][ T6586] wg0 speed is unknown, defaulting to 1000
[  123.898710][ T6586] wg0 speed is unknown, defaulting to 1000
[  123.916130][ T6586] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  123.932649][ T6586] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  123.997117][ T6586] wg0 speed is unknown, defaulting to 1000
[  124.020460][ T6586] wg0 speed is unknown, defaulting to 1000
[  124.044939][ T6586] wg0 speed is unknown, defaulting to 1000
[  124.882864][ T6612] netlink: 'syz.2.295': attribute type 12 has an invalid length.
[  124.949771][ T6612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.295'.
[  125.130598][   T36] .3#c: Trigger new scan to find an IBSS to join
[  125.721966][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'.
[  125.750632][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'.
[  126.005194][ T6623] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[  126.008997][ T6623] netlink: 17 bytes leftover after parsing attributes in process `syz.2.302'.
[  126.518794][ T6635] netlink: 'syz.2.309': attribute type 33 has an invalid length.
[  126.521846][ T6635] netlink: 152 bytes leftover after parsing attributes in process `syz.2.309'.
[  127.138779][ T6674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.327'.
[  127.363165][ T6679] netlink: 17 bytes leftover after parsing attributes in process `syz.1.329'.
[  127.388699][ T6679] netlink: zone id is out of range
[  127.391648][ T6679] netlink: zone id is out of range
[  127.399862][ T6679] netlink: zone id is out of range
[  127.402646][ T6679] netlink: zone id is out of range
[  127.409190][ T6679] netlink: zone id is out of range
[  127.412846][ T6679] netlink: zone id is out of range
[  127.425649][ T6679] netlink: zone id is out of range
[  127.429059][ T6679] netlink: zone id is out of range
[  127.431808][ T6679] netlink: zone id is out of range
[  127.440269][ T6679] netlink: zone id is out of range
[  127.643924][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'.
[  127.651960][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[  127.961258][ T6694] netlink: 'syz.2.336': attribute type 10 has an invalid length.
[  128.014593][   T83] .3#c: Trigger new scan to find an IBSS to join
[  128.543213][   T83] .3#c: Creating new IBSS network, BSSID 36:ae:46:6d:bd:9e
[  129.149301][ T6704] netlink: 'syz.2.340': attribute type 4 has an invalid length.
[  130.298969][ T6768] IPv6: NLM_F_REPLACE set, but no existing node found!
[  133.109733][ T6797] netlink: 182 bytes leftover after parsing attributes in process `syz.2.382'.
[  133.932117][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'.
[  133.937236][ T6818] netlink: 152 bytes leftover after parsing attributes in process `syz.0.390'.
[  135.071213][ T6839] netlink: 'syz.1.397': attribute type 21 has an invalid length.
[  135.075365][ T6839] netlink: 156 bytes leftover after parsing attributes in process `syz.1.397'.
[  135.080116][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'.
[  135.288161][ T6848] netlink: 324 bytes leftover after parsing attributes in process `syz.1.401'.
[  136.128743][ T6880] netlink: 'syz.0.415': attribute type 10 has an invalid length.
[  136.158165][ T6880] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  136.205870][ T6890] netlink: 100 bytes leftover after parsing attributes in process `syz.1.419'.
[  136.482239][ T6906] netlink: 348 bytes leftover after parsing attributes in process `syz.2.426'.
[  136.518577][ T6910] netlink: 7 bytes leftover after parsing attributes in process `syz.0.428'.
[  136.522819][ T6910] netlink: 68 bytes leftover after parsing attributes in process `syz.0.428'.
[  136.685417][ T6919] netlink: 'syz.2.433': attribute type 29 has an invalid length.
[  136.699161][ T6919] netlink: 'syz.2.433': attribute type 29 has an invalid length.
[  136.720068][ T6919] netlink: 'syz.2.433': attribute type 29 has an invalid length.
[  136.758732][ T6919] netlink: 'syz.2.433': attribute type 29 has an invalid length.
[  137.131321][ T6927] netlink: 'syz.2.436': attribute type 16 has an invalid length.
[  138.159119][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  138.161576][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  139.090413][ T6979] __nla_validate_parse: 5 callbacks suppressed
[  139.093130][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'.
[  139.188695][ T6983] net_ratelimit: 74 callbacks suppressed
[  139.188715][ T6983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.347362][ T6989] netlink: 10 bytes leftover after parsing attributes in process `syz.1.464'.
[  141.699479][ T7048] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.489'.
[  141.703310][ T7048] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  141.723308][ T7051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.486'.
[  141.732367][ T7051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.486'.
[  141.735206][ T7048] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  141.740317][ T7051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.486'.
[  142.522538][ T7061] netlink: 26 bytes leftover after parsing attributes in process `syz.2.494'.
[  142.599210][ T7069] netlink: 'syz.0.497': attribute type 15 has an invalid length.
[  142.603038][ T7069] netlink: 11318 bytes leftover after parsing attributes in process `syz.0.497'.
[  142.810651][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'.
[  144.054236][ T7113] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.513'.
[  144.081120][ T7114] netlink: 'syz.0.510': attribute type 10 has an invalid length.
[  144.196894][ T7113] openvswitch: netlink: Message has 6 unknown bytes.
[  144.233558][ T7114] macvlan0: entered allmulticast mode
[  144.389688][ T7114] veth1_vlan: entered allmulticast mode
[  144.436346][ T7114] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  144.947138][ T7134] netlink: set zone limit has 4 unknown bytes
[  144.956511][ T7134] netlink: del zone limit has 4 unknown bytes
[  145.091225][ T7142] netlink: 'syz.2.525': attribute type 21 has an invalid length.
[  145.098133][ T7142] netlink: 156 bytes leftover after parsing attributes in process `syz.2.525'.
[  145.837894][ T7169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.537'.
[  145.842373][ T7169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.537'.
[  145.860791][ T7169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.537'.
[  145.906634][ T7175] Dead loop on virtual device ip6_vti0, fix it urgently!
[  146.351304][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'.
[  146.963345][ T7208] syzkaller0: entered promiscuous mode
[  146.968321][ T7208] syzkaller0: entered allmulticast mode
[  147.186892][ T7217] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  147.239091][ T7217] netlink: 'syz.0.558': attribute type 2 has an invalid length.
[  147.256212][ T7213] netlink: 'syz.2.557': attribute type 16 has an invalid length.
[  147.260534][ T7213] netlink: 'syz.2.557': attribute type 3 has an invalid length.
[  147.265993][ T7213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.557'.
[  149.256748][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'.
[  149.261526][ T7234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.452766][ T7229] veth1_macvtap: left promiscuous mode
[  149.457063][ T7229] macsec0: entered allmulticast mode
[  149.472526][ T7232] veth1_macvtap: entered promiscuous mode
[  149.475761][ T7232] veth1_macvtap: entered allmulticast mode
[  149.478722][ T7232] macsec0: entered promiscuous mode
[  149.540576][ T7239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  149.544664][ T7239] IPv6: NLM_F_CREATE should be set when creating new route
[  149.549138][ T7239] IPv6: NLM_F_CREATE should be set when creating new route
[  149.731047][ T5866] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  150.461899][ T7262] netlink: 104 bytes leftover after parsing attributes in process `syz.1.579'.
[  151.263177][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'.
[  151.989631][ T7301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.596'.
[  151.994231][ T7301] netlink: 43 bytes leftover after parsing attributes in process `syz.2.596'.
[  152.001800][ T7301] netlink: 'syz.2.596': attribute type 5 has an invalid length.
[  152.007464][ T7301] netlink: 43 bytes leftover after parsing attributes in process `syz.2.596'.
[  154.056290][ T7320] netlink: 60 bytes leftover after parsing attributes in process `syz.0.598'.
[  154.161542][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  154.578461][ T7360] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.615'.
[  154.582950][ T7360] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  154.589074][ T7360] openvswitch: netlink: Duplicate key (type 0).
[  154.954016][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'.
[  155.258290][ T5866] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  156.127339][ T7415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'.
[  156.260275][ T7418] netlink: 183676 bytes leftover after parsing attributes in process `syz.1.639'.
[  157.295699][ T5866] Bluetooth: hci1: command tx timeout
[  157.493205][ T7417] wg0 speed is unknown, defaulting to 1000
[  158.063423][ T7437] netlink: 'syz.1.646': attribute type 21 has an invalid length.
[  158.874665][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'.
[  159.354655][ T7490] netlink: 'syz.2.672': attribute type 4 has an invalid length.
[  159.358482][ T7490] netlink: 152 bytes leftover after parsing attributes in process `syz.2.672'.
[  159.388179][ T7490] .`: renamed from bond0 (while UP)
[  159.959023][ T7524] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.964062][ T7524] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.086276][ T7534] netlink: 'syz.0.690': attribute type 1 has an invalid length.
[  160.143253][ T7535] syzkaller0: entered promiscuous mode
[  160.148690][ T7535] syzkaller0: entered allmulticast mode
[  161.835575][ T7575] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.703'.
[  161.878833][ T7579] syzkaller0: entered promiscuous mode
[  161.881858][ T7579] syzkaller0: entered allmulticast mode
[  161.970992][ T7585] netlink: 'syz.0.705': attribute type 10 has an invalid length.
[  162.039327][ T7585] team0: Port device geneve1 added
[  162.076898][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'.
[  162.083808][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'.
[  162.162551][ T7595] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.708'.
[  162.648415][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'.
[  162.759023][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[  164.530447][ T7718] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.743'.
[  164.774220][ T7726] delete_channel: no stack
[  164.787290][ T7726] delete_channel: no stack
[  164.926868][ T7726] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.746'.
[  166.216884][ T7762] hsr0: entered promiscuous mode
[  166.545942][ T7772] netlink: 'syz.1.764': attribute type 10 has an invalid length.
[  166.652969][ T7772] batman_adv: batadv0: Adding interface: team0
[  166.660394][ T7772] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.673689][ T7772] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  166.761011][ T7789] netlink: 'syz.1.772': attribute type 13 has an invalid length.
[  166.787081][ T7793] netlink: 'syz.0.774': attribute type 16 has an invalid length.
[  166.795826][ T7793] netlink: 48 bytes leftover after parsing attributes in process `syz.0.774'.
[  168.502954][ T7840] netlink: 'syz.1.795': attribute type 21 has an invalid length.
[  168.670733][ T7840] netlink: 164 bytes leftover after parsing attributes in process `syz.1.795'.
[  169.128193][ T7870] netlink: 156 bytes leftover after parsing attributes in process `syz.1.810'.
[  169.394079][ T5866] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  169.416703][ T7889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.561805][ T7891] syzkaller0: entered promiscuous mode
[  169.576137][ T7891] syzkaller0: entered allmulticast mode
[  171.788056][ T7920] netlink: 'syz.2.832': attribute type 21 has an invalid length.
[  173.262395][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.846'.
[  173.414217][ T7961] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.851'.
[  173.565347][ T7971] netlink: 'syz.0.855': attribute type 3 has an invalid length.
[  173.647570][ T7979] netlink: 22 bytes leftover after parsing attributes in process `syz.0.859'.
[  173.736381][ T7983] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.862'.
[  173.959591][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'.
[  174.282526][ T5866] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[  175.091459][ T8007] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.872'.
[  175.095731][ T8007] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.872'.
[  175.198755][ T8013] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  175.331189][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'.
[  175.344821][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'.
[  176.290209][ T8042] C: renamed from team_slave_0 (while UP)
[  176.298757][ T8042] netlink: 'syz.0.888': attribute type 3 has an invalid length.
[  176.307158][ T8042] netlink: 'syz.0.888': attribute type 1 has an invalid length.
[  176.311542][ T8042] netlink: 116 bytes leftover after parsing attributes in process `syz.0.888'.
[  176.316896][ T8042] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  176.722212][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'.
[  176.773549][ T8064] netlink: 'syz.0.899': attribute type 10 has an invalid length.
[  176.784657][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.800075][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.059530][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.064943][ T8064] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.073876][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.079414][ T8064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.134420][ T8064] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  177.336193][ T5866] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  177.387178][ T8083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.908'.
[  177.555289][ T8090] netlink: 'syz.1.911': attribute type 2 has an invalid length.
[  177.558968][ T8090] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[  177.563194][ T8090] netlink: 152 bytes leftover after parsing attributes in process `syz.1.911'.
[  177.830537][ T8106] netlink: 'syz.1.920': attribute type 27 has an invalid length.
[  179.386722][ T5866] Bluetooth: hci0: command tx timeout
[  179.746104][ T8155] netlink: 'syz.0.942': attribute type 3 has an invalid length.
[  179.749645][ T8155] __nla_validate_parse: 4 callbacks suppressed
[  179.749655][ T8155] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.942'.
[  180.045078][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'.
[  180.052604][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'.
[  180.148704][ T8174] netlink: 'syz.2.950': attribute type 29 has an invalid length.
[  180.163386][ T8174] netlink: 'syz.2.950': attribute type 29 has an invalid length.
[  180.962466][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'.
[  181.074956][ T8208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.966'.
[  181.196934][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'.
[  181.294125][ T8212] netlink: 'syz.0.968': attribute type 10 has an invalid length.
[  181.298433][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.968'.
[  181.312171][ T8212] dummy0: entered promiscuous mode
[  181.331405][ T8212] bridge0: port 3(dummy0) entered blocking state
[  181.336846][ T8212] bridge0: port 3(dummy0) entered disabled state
[  181.343486][ T8212] dummy0: entered allmulticast mode
[  181.501505][ T8212] bridge0: port 3(dummy0) entered blocking state
[  181.506560][ T8212] bridge0: port 3(dummy0) entered forwarding state
[  181.597487][ T8221] sit0: entered allmulticast mode
[  181.607892][ T8221] sit0: entered promiscuous mode
[  181.665271][ T8218] netlink: 'syz.1.971': attribute type 2 has an invalid length.
[  181.668433][ T8218] netlink: 12374 bytes leftover after parsing attributes in process `syz.1.971'.
[  183.481508][ T8245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.984'.
[  183.939887][ T8270] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  183.961583][ T8272] netlink: 'syz.0.995': attribute type 10 has an invalid length.
[  183.965209][ T8272] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.995'.
[  183.997615][ T8274] netlink: 'syz.1.996': attribute type 21 has an invalid length.
[  184.126491][ T8286] netlink: 'syz.2.1001': attribute type 4 has an invalid length.
[  184.130404][ T8286] netlink: 'syz.2.1001': attribute type 11 has an invalid length.
[  184.749550][ T8321] netlink: 'syz.2.1018': attribute type 10 has an invalid length.
[  184.837145][ T8321] bridge0: port 3(netdevsim0) entered blocking state
[  184.842496][ T8321] bridge0: port 3(netdevsim0) entered disabled state
[  184.848901][ T8321] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  184.917879][ T8321] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  185.929955][ T8346] __nla_validate_parse: 2 callbacks suppressed
[  185.929979][ T8346] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1021'.
[  186.129089][ T8350] IPv6: Can't replace route, no match found
[  186.262065][ T8357] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1030'.
[  188.196236][ T8392] netlink: 'syz.2.1046': attribute type 10 has an invalid length.
[  188.373168][ T8400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'.
[  189.707306][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1060'.
[  189.821279][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1060'.
[  190.084068][ T8444] netlink: 'syz.2.1069': attribute type 3 has an invalid length.
[  190.088310][ T8444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1069'.
[  190.791674][ T8454] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1073'.
[  190.979373][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'.
[  191.020411][ T8462] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1076'.
[  191.480063][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.490834][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.623178][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'.
[  194.072007][ T8535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.181689][ T8543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1109'.
[  194.625483][ T8577] netlink: 'syz.2.1124': attribute type 10 has an invalid length.
[  194.629203][ T8577] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1124'.
[  196.504329][ T8629] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  196.507413][ T8629] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  197.279527][ T8656] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1159'.
[  198.013089][ T8666] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1163'.
[  199.538886][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  199.543346][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  199.632895][ T8718] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1185'.
[  199.759050][ T8724] netlink: 'syz.0.1189': attribute type 2 has an invalid length.
[  200.067256][ T8745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1199'.
[  200.101302][ T8752] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1202'.
[  200.253194][ T8755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  200.256631][ T8755] IPv6: NLM_F_CREATE should be set when creating new route
[  200.259793][ T8755] IPv6: NLM_F_CREATE should be set when creating new route
[  201.001532][ T8788] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1217'.
[  201.048241][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'.
[  201.052244][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'.
[  201.508163][ T8816] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1231'.
[  202.212771][ T8843] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1239'.
[  202.693937][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1252'.
[  202.705163][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1252'.
[  203.527307][ T8888] netlink: 'syz.1.1259': attribute type 51 has an invalid length.
[  205.368211][ T8914] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1267'.
[  205.371785][ T8914] bond_slave_0: entered promiscuous mode
[  205.374030][ T8914] bond_slave_1: entered promiscuous mode
[  205.376469][ T8914] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  205.380519][ T8914] bridge0: entered promiscuous mode
[  205.448157][ T8920] lo speed is unknown, defaulting to 1000
[  205.450618][ T8920] lo speed is unknown, defaulting to 1000
[  205.453371][ T8920] lo speed is unknown, defaulting to 1000
[  205.476216][ T8920] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  205.520532][ T8920] lo speed is unknown, defaulting to 1000
[  205.543650][ T8920] lo speed is unknown, defaulting to 1000
[  205.558927][ T8920] lo speed is unknown, defaulting to 1000
[  205.635814][ T8929] netlink: 'syz.0.1273': attribute type 22 has an invalid length.
[  205.642042][ T8929] netlink: 'syz.0.1273': attribute type 1 has an invalid length.
[  205.650261][ T8929] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1273'.
[  205.739224][ T8931] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1274'.
[  205.773101][ T8931] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1274'.
[  206.718992][ T5866] Bluetooth: hci1: unknown advertising packet type: 0x0c
[  208.039299][ T9011] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1307'.
[  208.720019][ T9053] lo speed is unknown, defaulting to 1000
[  208.837081][ T9068] netlink: 'syz.0.1331': attribute type 22 has an invalid length.
[  210.220003][ T9100] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1344'.
[  210.437588][ T9110] netlink: 'syz.0.1349': attribute type 11 has an invalid length.
[  210.503112][ T9112] netlink: 531 bytes leftover after parsing attributes in process `syz.0.1350'.
[  211.044280][ T9145] netlink: 'syz.2.1366': attribute type 1 has an invalid length.
[  211.113433][ T9150] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1368'.
[  211.122520][ T9152] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1370'.
[  211.130927][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'.
[  211.262255][ T9159] syzkaller1: tun_chr_ioctl cmd 1074812118
[  211.451972][ T9173] netlink: 'syz.2.1380': attribute type 1 has an invalid length.
[  211.493583][ T9173] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1380'.
[  211.538914][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'.
[  211.721089][ T9186] delete_channel: no stack
[  211.726712][ T9186] delete_channel: no stack
[  211.793731][ T9189] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1386'.
[  211.987098][ T5874] Bluetooth: hci0: command 0x0406 tx timeout
[  211.989638][ T5874] Bluetooth: hci1: command 0x0406 tx timeout
[  211.992009][ T5874] Bluetooth: hci2: command 0x0406 tx timeout
[  212.093698][ T9196] netlink: 'syz.0.1388': attribute type 5 has an invalid length.
[  212.097517][ T9196] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1388'.
[  212.644316][ T9213] netlink: 'syz.1.1395': attribute type 4 has an invalid length.
[  212.652680][ T9213] netlink: 'syz.1.1395': attribute type 3 has an invalid length.
[  213.367186][ T9253] __nla_validate_parse: 2 callbacks suppressed
[  213.367209][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'.
[  215.050590][ T9302] netlink: 'syz.0.1430': attribute type 10 has an invalid length.
[  215.057278][ T9302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1430'.
[  215.074117][ T9304] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  215.152886][ T9306] delete_channel: no stack
[  215.706228][ T9331] netlink: 56429 bytes leftover after parsing attributes in process `syz.2.1444'.
[  215.916571][ T9338] netlink: 'syz.1.1447': attribute type 10 has an invalid length.
[  215.943300][ T9338] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1447'.
[  219.016968][ T9413] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  219.022374][ T9413] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  219.435767][ T9437] netlink: 'syz.1.1493': attribute type 10 has an invalid length.
[  219.440136][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1493'.
[  219.448053][ T9437] batadv0: entered promiscuous mode
[  219.454984][ T9437] batadv0: entered allmulticast mode
[  219.506245][ T9437] bridge0: port 3(batadv0) entered blocking state
[  219.516610][ T9437] bridge0: port 3(batadv0) entered disabled state
[  219.591881][ T9437] bridge0: port 3(batadv0) entered blocking state
[  219.596826][ T9437] bridge0: port 3(batadv0) entered forwarding state
[  219.796599][ T5709] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  219.800124][ T9450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'.
[  219.801377][ T5709] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  219.814059][ T9450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'.
[  219.820679][ T9450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'.
[  219.944289][ T9454] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1500'.
[  220.082708][ T9459] netlink: 'syz.0.1504': attribute type 21 has an invalid length.
[  220.087328][ T9459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1504'.
[  220.239230][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'.
[  220.810437][ T9488] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1516'.
[  221.069728][ T9492] netlink: 'syz.1.1518': attribute type 15 has an invalid length.
[  221.951739][ T9515] delete_channel: no stack
[  222.089488][ T9539] netlink: 'syz.2.1535': attribute type 29 has an invalid length.
[  222.127693][ T9544] netlink: 'syz.2.1535': attribute type 29 has an invalid length.
[  222.181182][ T9539] netlink: 'syz.2.1535': attribute type 29 has an invalid length.
[  222.186025][ T9550] netlink: 'syz.1.1539': attribute type 2 has an invalid length.
[  222.404253][ T9544] netlink: 'syz.2.1535': attribute type 29 has an invalid length.
[  222.564006][ T9567] sctp: [Deprecated]: syz.1.1545 (pid 9567) Use of int in max_burst socket option deprecated.
[  222.564006][ T9567] Use struct sctp_assoc_value instead
[  222.976215][ T9588] netlink: 'syz.1.1554': attribute type 17 has an invalid length.
[  222.980400][ T9588] netlink: 'syz.1.1554': attribute type 16 has an invalid length.
[  222.986898][ T9588] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1554'.
[  223.311407][ T9607] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1564'.
[  224.666090][ T9688] __nla_validate_parse: 7 callbacks suppressed
[  224.666217][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'.
[  224.867351][ T9699] netlink: 'syz.0.1607': attribute type 21 has an invalid length.
[  225.029254][ T9706] netlink: 11318 bytes leftover after parsing attributes in process `syz.1.1611'.
[  225.703990][ T9742] netlink: 'syz.2.1628': attribute type 12 has an invalid length.
[  225.708868][ T9742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1628'.
[  225.736288][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1629'.
[  225.740328][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1629'.
[  225.744228][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1629'.
[  226.440605][ T5866] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  226.468266][ T9777] : entered promiscuous mode
[  226.472928][ T9779] netlink: 'syz.2.1645': attribute type 21 has an invalid length.
[  226.564228][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'.
[  226.786668][ T9794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1650'.
[  226.808611][ T9793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1650'.
[  226.825143][ T9794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1650'.
[  227.841801][ T5866] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  230.427868][ T9844] __nla_validate_parse: 3 callbacks suppressed
[  230.427891][ T9844] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1672'.
[  230.444760][ T9833] lo speed is unknown, defaulting to 1000
[  230.498330][ T5866] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  230.512634][ T9849] netlink: 'syz.0.1674': attribute type 29 has an invalid length.
[  230.531188][ T9849] netlink: 'syz.0.1674': attribute type 29 has an invalid length.
[  230.548892][ T9849] netlink: 'syz.0.1674': attribute type 29 has an invalid length.
[  230.728434][ T9855] netlink: 'syz.1.1676': attribute type 1 has an invalid length.
[  232.366933][ T9864] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1680'.
[  232.493263][ T9876] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.1685'.
[  233.853871][ T9896] netlink: 'syz.2.1690': attribute type 27 has an invalid length.
[  233.859661][ T9896] netlink: 'syz.2.1690': attribute type 3 has an invalid length.
[  233.863299][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1690'.
[  234.053222][ T9910] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1696'.
[  234.181035][ T9915] netlink: 'syz.1.1698': attribute type 21 has an invalid length.
[  234.186866][ T9915] netlink: 'syz.1.1698': attribute type 6 has an invalid length.
[  234.190580][ T9915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1698'.
[  234.355249][ T9920] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1700'.
[  234.404846][ T9923] netlink: 'syz.0.1701': attribute type 1 has an invalid length.
[  234.408400][ T9923] netlink: 'syz.0.1701': attribute type 2 has an invalid length.
[  234.412077][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  234.417241][ T9923] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.1701'.
[  234.421305][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  235.698258][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1706'.
[  235.947161][ T9964] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1715'.
[  236.259547][ T9973] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1718'.
[  236.320034][ T9975] validate_nla: 3 callbacks suppressed
[  236.320069][ T9975] netlink: 'syz.2.1719': attribute type 4 has an invalid length.
[  236.351545][ T9978] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1720'.
[  236.437279][ T9980] lo speed is unknown, defaulting to 1000
[  236.484574][ T9986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1721'.
[  236.528740][ T5866] Bluetooth: hci1: ISO packet for unknown connection handle 3327
[  236.532963][ T5866] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  236.634161][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'.
[  236.787872][T10004] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1730'.
[  236.869454][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1733'.
[  237.023245][T10020] openvswitch: netlink: Flow key attr not present in new flow.
[  237.069212][T10024] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1740'.
[  237.356626][T10031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1742'.
[  237.508481][T10034] =======================================================
[  237.508481][T10034] WARNING: The mand mount option has been deprecated and
[  237.508481][T10034]          and is ignored by this kernel. Remove the mand
[  237.508481][T10034]          option from the mount to silence this warning.
[  237.508481][T10034] =======================================================
[  237.574712][T10023] lo speed is unknown, defaulting to 1000
[  238.322450][T10058] netlink: 'syz.0.1753': attribute type 2 has an invalid length.
[  238.331683][T10058] netlink: 'syz.0.1753': attribute type 1 has an invalid length.
[  238.400846][T10067] netlink: 'syz.1.1758': attribute type 10 has an invalid length.
[  238.559308][T10086] netlink: 'syz.2.1762': attribute type 29 has an invalid length.
[  238.570040][T10086] netlink: 'syz.2.1762': attribute type 29 has an invalid length.
[  238.578351][T10086] netlink: 'syz.2.1762': attribute type 29 has an invalid length.
[  238.609022][T10096] netlink: 'syz.0.1763': attribute type 39 has an invalid length.
[  239.627426][T10176] blkio.reset_stats is deprecated
[  239.942468][T10183] delete_channel: no stack
[  240.169226][T10202] syzkaller0: tun_chr_ioctl cmd 1074025681
[  240.612903][ T5235] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10
[  240.813426][T10210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.833953][T10210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.848198][T10210] bond0 (unregistering): Released all slaves
[  240.966658][T10219] netlink: 'syz.1.1796': attribute type 1 has an invalid length.
[  241.009212][T10221] netlink: 'syz.1.1797': attribute type 16 has an invalid length.
[  241.012557][T10221] __nla_validate_parse: 5 callbacks suppressed
[  241.012567][T10221] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1797'.
[  244.121952][T10236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1803'.
[  244.176751][T10241] netlink: 'syz.1.1804': attribute type 21 has an invalid length.
[  244.181028][T10241] netlink: 'syz.1.1804': attribute type 10 has an invalid length.
[  244.185398][T10241] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1804'.
[  245.709163][T10265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.781966][T10267] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  246.011306][T10278] netlink: 'syz.1.1818': attribute type 10 has an invalid length.
[  246.101832][T10285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1821'.
[  246.430869][T10299] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1827'.
[  246.451663][T10299] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1827'.
[  246.713076][T10309] syzkaller0: entered promiscuous mode
[  246.717017][T10309] syzkaller0: entered allmulticast mode
[  249.711805][T10339] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1842'.
[  249.800631][T10343] netlink: 'syz.0.1844': attribute type 21 has an invalid length.
[  249.809275][T10343] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1844'.
[  250.193807][T10356] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1850'.
[  250.754181][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1859'.
[  250.766330][T10376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1859'.
[  251.302715][T10400] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.1871'.
[  251.448014][T10406] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1873'.
[  251.685765][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'.
[  252.284263][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1887'.
[  252.756164][T10454] netlink: 'syz.1.1896': attribute type 2 has an invalid length.
[  252.896624][T10463] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1900'.
[  253.980047][T10473] lo speed is unknown, defaulting to 1000
[  254.916295][T10528] lo speed is unknown, defaulting to 1000
[  258.740940][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'.
[  258.787522][T10580] netlink: 'syz.1.1950': attribute type 10 has an invalid length.
[  259.096875][T10601] netlink: 'syz.1.1960': attribute type 1 has an invalid length.
[  259.100696][T10601] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1960'.
[  260.401013][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1970'.
[  260.727256][T10637] netlink: 'syz.2.1976': attribute type 6 has an invalid length.
[  260.731106][T10637] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1976'.
[  260.980969][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  260.984097][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  261.245689][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'.
[  261.260952][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'.
[  261.331914][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'.
[  261.347097][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'.
[  261.518017][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'.
[  261.522795][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'.
[  261.610623][T10671] netlink: 'syz.1.1989': attribute type 25 has an invalid length.
[  261.652319][T10671] netlink: 'syz.1.1989': attribute type 21 has an invalid length.
[  262.607501][T10724] netlink: 'syz.0.2003': attribute type 39 has an invalid length.
[  262.982296][T10740] netlink: 'syz.0.2012': attribute type 6 has an invalid length.
[  263.839345][T10743] __nla_validate_parse: 3 callbacks suppressed
[  263.839367][T10743] netlink: 2451 bytes leftover after parsing attributes in process `syz.1.2015'.
[  264.454956][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'.
[  265.133017][T10790] netlink: 'syz.1.2034': attribute type 3 has an invalid length.
[  265.138217][T10790] netlink: 'syz.1.2034': attribute type 1 has an invalid length.
[  265.142503][T10790] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2034'.
[  265.197292][T10798] netlink: 'syz.0.2038': attribute type 8 has an invalid length.
[  265.207188][T10798] netlink: 'syz.0.2038': attribute type 6 has an invalid length.
[  265.211350][T10798] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2038'.
[  265.556355][T10812] netlink: 'syz.0.2044': attribute type 1 has an invalid length.
[  265.560298][T10812] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2044'.
[  265.582348][T10814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.622787][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'.
[  265.726697][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'.
[  265.977664][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.002812][ T5235] Bluetooth: hci1: adv larger than maximum supported
[  266.062086][T10846] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2061'.
[  266.069811][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'.
[  266.565966][T10870] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2070'.
[  266.853542][T10888] netlink: 'syz.1.2081': attribute type 1 has an invalid length.
[  267.992945][T10913] netlink: 'syz.0.2091': attribute type 12 has an invalid length.
[  269.158856][T10977] netlink: 'syz.2.2120': attribute type 1 has an invalid length.
[  269.217240][T10982] netlink: 'syz.0.2119': attribute type 6 has an invalid length.
[  269.225611][T10982] __nla_validate_parse: 5 callbacks suppressed
[  269.225629][T10982] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2119'.
[  269.712314][T10996] netlink: 'syz.1.2127': attribute type 23 has an invalid length.
[  270.923509][T11027] netlink: 'syz.1.2141': attribute type 2 has an invalid length.
[  270.934796][T11027] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2141'.
[  270.963220][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'.
[  271.095454][T11046] TCP: TCP_TX_DELAY enabled
[  271.100028][T11046] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.2150'.
[  271.111351][T11046] openvswitch: netlink: Message has 6 unknown bytes.
[  271.167466][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2151'.
[  271.449313][T11060] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2157'.
[  271.823648][T11080] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2166'.
[  272.140577][T11090] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2171'.
[  272.440392][T11107] netlink: 'syz.0.2178': attribute type 21 has an invalid length.
[  273.029710][T11128] netlink: 'syz.1.2187': attribute type 10 has an invalid length.
[  273.036548][T11128] geneve0: entered promiscuous mode
[  274.998248][T11190] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2213'.
[  275.010571][T11192] netlink: 'syz.0.2214': attribute type 21 has an invalid length.
[  275.015756][T11192] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2214'.
[  276.451370][T11229] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2229'.
[  276.596377][T11236] netlink: 'syz.1.2233': attribute type 29 has an invalid length.
[  276.602392][T11236] netlink: 'syz.1.2233': attribute type 29 has an invalid length.
[  276.633129][T11238] netlink: 'syz.2.2234': attribute type 21 has an invalid length.
[  276.637224][T11238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2234'.
[  276.938345][T11251] netlink: 'syz.1.2239': attribute type 1 has an invalid length.
[  276.942504][T11251] netlink: 'syz.1.2239': attribute type 4 has an invalid length.
[  276.947600][T11251] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2239'.
[  277.179288][T11257] netlink: 'syz.0.2242': attribute type 27 has an invalid length.
[  277.183375][T11257] netlink: 'syz.0.2242': attribute type 3 has an invalid length.
[  277.187776][T11257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2242'.
[  277.720375][T11271] syz.1.2248: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  277.729521][T11271] CPU: 0 UID: 0 PID: 11271 Comm: syz.1.2248 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  277.729539][T11271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.729547][T11271] Call Trace:
[  277.729568][T11271]  <TASK>
[  277.729575][T11271]  dump_stack_lvl+0x189/0x250
[  277.729602][T11271]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.729617][T11271]  ? __pfx__printk+0x10/0x10
[  277.729636][T11271]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  277.729652][T11271]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  277.729669][T11271]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  277.729686][T11271]  warn_alloc+0x214/0x310
[  277.729705][T11271]  ? stack_depot_save_flags+0x40/0x860
[  277.729723][T11271]  ? __pfx_warn_alloc+0x10/0x10
[  277.729742][T11271]  ? kasan_save_track+0x4f/0x80
[  277.729757][T11271]  ? xskq_create+0x56/0x170
[  277.729770][T11271]  ? xsk_init_queue+0xb0/0x110
[  277.729780][T11271]  ? xsk_setsockopt+0x57b/0x8d0
[  277.729790][T11271]  ? do_sock_setsockopt+0x17c/0x1b0
[  277.729800][T11271]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  277.729809][T11271]  ? do_syscall_64+0xfa/0x3b0
[  277.729823][T11271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.729844][T11271]  __vmalloc_node_range_noprof+0x125/0x12f0
[  277.729899][T11271]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  277.729915][T11271]  ? xskq_create+0x56/0x170
[  277.729933][T11271]  ? __kasan_kmalloc+0x93/0xb0
[  277.729952][T11271]  vmalloc_user_noprof+0xad/0xf0
[  277.729968][T11271]  ? xskq_create+0xbf/0x170
[  277.729983][T11271]  xskq_create+0xbf/0x170
[  277.730001][T11271]  xsk_init_queue+0xb0/0x110
[  277.730019][T11271]  xsk_setsockopt+0x57b/0x8d0
[  277.730036][T11271]  ? __pfx_xsk_setsockopt+0x10/0x10
[  277.730049][T11271]  ? __pfx_aa_sk_perm+0x10/0x10
[  277.730069][T11271]  ? __fget_files+0x2a/0x420
[  277.730078][T11271]  ? aa_sock_opt_perm+0xff/0x1b0
[  277.730101][T11271]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  277.730113][T11271]  ? __pfx_xsk_setsockopt+0x10/0x10
[  277.730129][T11271]  do_sock_setsockopt+0x17c/0x1b0
[  277.730148][T11271]  __x64_sys_setsockopt+0x13f/0x1b0
[  277.730168][T11271]  do_syscall_64+0xfa/0x3b0
[  277.730182][T11271]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.730197][T11271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.730208][T11271]  ? exc_page_fault+0x9f/0xf0
[  277.730226][T11271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.730236][T11271] RIP: 0033:0x7fc66018ebe9
[  277.730249][T11271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.730258][T11271] RSP: 002b:00007fc660fe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  277.730270][T11271] RAX: ffffffffffffffda RBX: 00007fc6603b5fa0 RCX: 00007fc66018ebe9
[  277.730277][T11271] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  277.730284][T11271] RBP: 00007fc660211e19 R08: 0000000000000004 R09: 0000000000000000
[  277.730290][T11271] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  277.730296][T11271] R13: 00007fc6603b6038 R14: 00007fc6603b5fa0 R15: 00007ffda89e85c8
[  277.730357][T11271]  </TASK>
[  277.730363][T11271] Mem-Info:
[  277.865544][T11271] active_anon:5254 inactive_anon:0 isolated_anon:0
[  277.865544][T11271]  active_file:13663 inactive_file:38293 isolated_file:0
[  277.865544][T11271]  unevictable:1768 dirty:191 writeback:0
[  277.865544][T11271]  slab_reclaimable:9646 slab_unreclaimable:63053
[  277.865544][T11271]  mapped:18006 shmem:2450 pagetables:902
[  277.865544][T11271]  sec_pagetables:0 bounce:0
[  277.865544][T11271]  kernel_misc_reclaimable:0
[  277.865544][T11271]  free:275967 free_pcp:18740 free_cma:0
[  277.883906][T11271] Node 0 active_anon:11872kB inactive_anon:0kB active_file:23788kB inactive_file:73248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29756kB dirty:112kB writeback:0kB shmem:5144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5280kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  277.897761][T11271] Node 1 active_anon:9144kB inactive_anon:0kB active_file:30864kB inactive_file:79924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42268kB dirty:652kB writeback:0kB shmem:4656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6432kB pagetables:1320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  277.910286][T11271] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  277.923055][T11271] lowmem_reserve[]: 0 811 811 811 811
[  277.925844][T11271] Node 0 DMA32 free:322796kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11872kB inactive_anon:0kB active_file:23788kB inactive_file:73248kB unevictable:3536kB writepending:112kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:35944kB local_pcp:21704kB free_cma:0kB
[  277.939591][T11271] lowmem_reserve[]: 0 0 0 0 0
[  277.941856][T11271] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  277.954488][T11271] lowmem_reserve[]: 0 0 854 854 854
[  277.957104][T11271] Node 1 Normal free:307220kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9144kB inactive_anon:0kB active_file:30864kB inactive_file:79924kB unevictable:3536kB writepending:652kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38684kB local_pcp:18436kB free_cma:0kB
[  277.971059][T11271] lowmem_reserve[]: 0 0 0 0 0
[  277.973523][T11271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  277.979096][T11271] Node 0 DMA32: 117*4kB (UME) 591*8kB (UME) 438*16kB (UME) 632*32kB (UME) 363*64kB (UME) 215*128kB (UME) 72*256kB (UME) 32*512kB (UM) 18*1024kB (UM) 7*2048kB (UME) 42*4096kB (UM) = 322796kB
[  277.987434][T11271] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  277.993901][T11271] Node 1 Normal: 303*4kB (UME) 405*8kB (UME) 167*16kB (UME) 170*32kB (UME) 136*64kB (UM) 192*128kB (UME) 51*256kB (UME) 23*512kB (U) 15*1024kB (U) 4*2048kB (UE) 52*4096kB (UM) = 307220kB
[  278.017787][T11271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  278.021397][T11271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  278.025020][T11271] 54358 total pagecache pages
[  278.027403][T11271] 0 pages in swap cache
[  278.029474][T11271] Free swap  = 124996kB
[  278.032567][T11271] Total swap = 124996kB
[  278.034646][T11271] 786301 pages RAM
[  278.036211][T11271] 0 pages HighMem/MovableOnly
[  278.038109][T11271] 241330 pages reserved
[  278.040208][T11271] 0 pages cma reserved
[  278.243644][T11288] bpf: Bad value for 'mode'
[  279.029954][T11313] syzkaller0: refused to change device tx_queue_len
[  279.392154][T11318] syzkaller0: entered promiscuous mode
[  279.395155][T11318] syzkaller0: entered allmulticast mode
[  279.447380][T11320] netlink: 'syz.1.2270': attribute type 2 has an invalid length.
[  279.502542][T11323] netlink: 'syz.1.2271': attribute type 29 has an invalid length.
[  279.508650][T11323] netlink: 'syz.1.2271': attribute type 29 has an invalid length.
[  279.558227][T11325] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2272'.
[  279.561844][T11325] block nbd5: not configured, cannot reconfigure
[  280.301829][T11345] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  280.462878][T11354] tap0: tun_chr_ioctl cmd 1074025678
[  280.466326][T11354] tap0: group set to 0
[  280.876826][T11370] syzkaller0: entered promiscuous mode
[  280.879075][T11370] syzkaller0: entered allmulticast mode
[  280.912090][T11373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2294'.
[  280.917388][T11372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2294'.
[  282.520031][T11377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2296'.
[  282.523378][T11377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2296'.
[  282.594862][T11393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2301'.
[  282.606784][T11393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2301'.
[  282.625505][T11393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2301'.
[  282.697239][T11395] syzkaller0: entered promiscuous mode
[  282.700090][T11395] syzkaller0: entered allmulticast mode
[  283.023887][T11405] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  284.745255][T11422] bridge0: port 3(batadv0) entered disabled state
[  284.978532][T11422] bridge_slave_1: left allmulticast mode
[  284.981090][T11422] bridge_slave_1: left promiscuous mode
[  284.984035][T11422] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.129133][T11422] bridge_slave_0: left allmulticast mode
[  285.132563][T11422] bridge_slave_0: left promiscuous mode
[  285.142004][T11422] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.910032][T11460] : renamed from gre0 (while UP)
[  286.241245][T11460] syz.0.2327 (11460) used greatest stack depth: 19064 bytes left
[  287.172230][T11508] validate_nla: 5 callbacks suppressed
[  287.172246][T11508] netlink: 'syz.1.2349': attribute type 10 has an invalid length.
[  287.190445][T11508] netlink: 'syz.1.2349': attribute type 19 has an invalid length.
[  287.201707][T11508] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2349'.
[  290.212305][T11543] : renamed from bond_slave_0 (while UP)
[  290.807902][T11552] vcan0 speed is unknown, defaulting to 1000
[  290.812649][T11552] vcan0 speed is unknown, defaulting to 1000
[  290.819613][T11552] vcan0 speed is unknown, defaulting to 1000
[  290.940889][T11560] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.082419][T11552] infiniband syz1: set active
[  291.086911][    T9] vcan0 speed is unknown, defaulting to 1000
[  291.091408][T11552] infiniband syz1: added vcan0
[  291.148480][T11552] RDS/IB: syz1: added
[  291.150949][T11552] smc: adding ib device syz1 with port count 1
[  291.155347][T11552] smc:    ib device syz1 port 1 has pnetid 
[  291.160605][ T5916] vcan0 speed is unknown, defaulting to 1000
[  291.172975][T11552] vcan0 speed is unknown, defaulting to 1000
[  291.459636][T11552] vcan0 speed is unknown, defaulting to 1000
[  291.646857][T11552] vcan0 speed is unknown, defaulting to 1000
[  292.273792][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2387'.
[  292.286547][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2387'.
[  292.309905][T11595] netlink: 'syz.0.2388': attribute type 21 has an invalid length.
[  292.320833][T11595] IPv6: NLM_F_CREATE should be specified when creating new route
[  292.332584][T11595] IPv6: Can't replace route, no match found
[  292.484204][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  292.722292][T11619] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2398'.
[  293.272024][T11645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  293.281602][ T5890] lo speed is unknown, defaulting to 1000
[  293.981515][T11661] syzkaller0: entered promiscuous mode
[  293.984011][T11661] syzkaller0: entered allmulticast mode
[  293.997557][T11666] netlink: 'syz.2.2414': attribute type 2 has an invalid length.
[  294.398457][T11681] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2421'.
[  295.969620][T11676] netlink: 'syz.2.2419': attribute type 29 has an invalid length.
[  296.123326][T11698] xt_policy: too many policy elements
[  296.140332][T11700] raw_sendmsg: syz.0.2430 forgot to set AF_INET. Fix it!
[  296.195744][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2432'.
[  297.076927][T11734] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2444'.
[  298.438418][T11770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2458'.
[  298.445730][T11770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2458'.
[  298.451675][T11770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2458'.
[  298.571049][T11775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2460'.
[  298.655692][T11778] netlink: 'syz.0.2454': attribute type 64 has an invalid length.
[  300.406330][T11792] vxcan1: entered allmulticast mode
[  300.897494][T11800] netlink: 'syz.1.2469': attribute type 13 has an invalid length.
[  300.901054][T11800] netlink: 'syz.1.2469': attribute type 58 has an invalid length.
[  300.910634][T11800] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2469'.
[  301.218837][T11826] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2481'.
[  301.223573][T11826] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  301.246413][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'.
[  302.002149][ T5235] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  302.030010][T11877] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2505'.
[  302.038028][T11877] netlink: 'syz.2.2505': attribute type 1 has an invalid length.
[  302.164338][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2508'.
[  303.431857][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2518'.
[  303.607560][T11913] netlink: 'syz.1.2520': attribute type 19 has an invalid length.
[  303.710583][T11920] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2524'.
[  303.788589][T11923] netlink: 6536 bytes leftover after parsing attributes in process `syz.2.2526'.
[  303.884318][T11928] netlink: 'syz.2.2528': attribute type 2 has an invalid length.
[  303.889541][T11928] netlink: 'syz.2.2528': attribute type 3 has an invalid length.
[  303.893927][T11928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2528'.
[  304.519554][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2538'.
[  304.524332][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2538'.
[  304.533707][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2538'.
[  304.569967][T11955] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2540'.
[  304.634243][T11957] netlink: 'syz.0.2541': attribute type 21 has an invalid length.
[  304.638917][T11957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2541'.
[  305.931190][T11981] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2552'.
[  305.940188][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2552'.
[  306.052749][T11985] netlink: 'syz.2.2554': attribute type 3 has an invalid length.
[  306.064283][T11985] netlink: 'syz.2.2554': attribute type 10 has an invalid length.
[  307.106296][T12035] sit0: entered promiscuous mode
[  307.471657][T12049] netlink: 'syz.1.2584': attribute type 2 has an invalid length.
[  308.126863][T12068] netlink: 'syz.0.2593': attribute type 3 has an invalid length.
[  308.138858][T12068] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  308.342053][T12084] netlink: 'syz.0.2600': attribute type 2 has an invalid length.
[  309.381192][T12141] netlink: 'syz.2.2624': attribute type 1 has an invalid length.
[  309.597493][T12154] __nla_validate_parse: 5 callbacks suppressed
[  309.597507][T12154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2631'.
[  309.868567][T12167] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2636'.
[  310.023745][T12176] netlink: 'syz.0.2641': attribute type 3 has an invalid length.
[  310.042604][T12176] netlink: 'syz.0.2641': attribute type 2 has an invalid length.
[  310.047407][T12176] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.2641'.
[  310.112235][   T33] audit: type=1107 audit(1755228795.151:2): pid=12179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  310.986982][T12213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.050277][T12215] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2658'.
[  312.371297][T12243] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2670'.
[  312.709121][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'.
[  312.773877][T12257] mac80211_hwsim hwsim11 O3c: renamed from wlan1
[  312.830940][T12263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2678'.
[  313.023486][T12270] netlink: 948 bytes leftover after parsing attributes in process `syz.2.2681'.
[  313.169070][T12280] netlink: 4172 bytes leftover after parsing attributes in process `syz.0.2685'.
[  313.477211][T12297] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2693'.
[  313.811795][ T5235] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[  314.137610][T12323] netlink: 'syz.0.2706': attribute type 10 has an invalid length.
[  314.141900][T12323] batman_adv: batadv0: Adding interface: hsr_slave_1
[  314.145944][T12323] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.161649][T12323] batman_adv: batadv0: Interface activated: hsr_slave_1
[  314.193619][T12327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  314.917581][T12358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.073046][T12364] netlink: 'syz.2.2725': attribute type 1 has an invalid length.
[  315.080023][T12364] __nla_validate_parse: 2 callbacks suppressed
[  315.080043][T12364] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2725'.
[  315.821859][T12399] netlink: 'syz.1.2741': attribute type 4 has an invalid length.
[  316.368732][T12426] netlink: 'syz.1.2752': attribute type 1 has an invalid length.
[  316.432505][T12428] syzkaller0: entered promiscuous mode
[  316.435599][T12430] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.2754'.
[  316.439687][T12428] syzkaller0: entered allmulticast mode
[  317.828702][T12432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2755'.
[  318.091948][T12450] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  318.095383][T12450] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  318.121206][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'.
[  318.240152][T12460] netlink: 'syz.2.2768': attribute type 2 has an invalid length.
[  318.244124][T12460] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2768'.
[  319.031000][T12485] netlink: 'syz.2.2777': attribute type 10 has an invalid length.
[  319.157696][T12494] netlink: 'syz.1.2784': attribute type 23 has an invalid length.
[  319.266509][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'.
[  319.284674][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'.
[  319.756464][T12518] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.760560][T12518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.764240][T12518] IPv6: NLM_F_CREATE should be set when creating new route
[  320.078231][T12530] ==================================================================
[  320.081904][T12530] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  320.085555][T12530] Read of size 2 at addr ffff88811c518a42 by task syz.2.2797/12530
[  320.090488][T12530] 
[  320.091762][T12530] CPU: 1 UID: 0 PID: 12530 Comm: syz.2.2797 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  320.091788][T12530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.091812][T12530] Call Trace:
[  320.091820][T12530]  <TASK>
[  320.091829][T12530]  dump_stack_lvl+0x189/0x250
[  320.091857][T12530]  ? __kasan_check_byte+0x12/0x40
[  320.091886][T12530]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.091908][T12530]  ? lock_release+0x4b/0x3e0
[  320.091936][T12530]  ? __virt_addr_valid+0x4a5/0x5c0
[  320.091960][T12530]  print_report+0xca/0x240
[  320.091978][T12530]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  320.092007][T12530]  kasan_report+0x118/0x150
[  320.092033][T12530]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  320.092062][T12530]  __xfrm_state_lookup+0x6ad/0x8d0
[  320.092123][T12530]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  320.092153][T12530]  ? xfrm_state_lookup+0x45/0x1e0
[  320.092173][T12530]  xfrm_state_lookup+0x11e/0x1e0
[  320.092195][T12530]  ipcomp4_init_state+0x205/0xb20
[  320.092216][T12530]  ? __xfrm_init_state+0x7ef/0x13f0
[  320.092239][T12530]  __xfrm_init_state+0xa76/0x13f0
[  320.092259][T12530]  ? __xfrm_init_state+0x7ef/0x13f0
[  320.092281][T12530]  xfrm_add_sa+0x2f5b/0x4070
[  320.092304][T12530]  ? __pfx_xfrm_add_sa+0x10/0x10
[  320.092323][T12530]  ? apparmor_capable+0x137/0x1b0
[  320.092346][T12530]  ? __nla_parse+0x40/0x60
[  320.092373][T12530]  xfrm_user_rcv_msg+0x7a3/0xab0
[  320.092395][T12530]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.092428][T12530]  ? __pfx___mutex_trylock_common+0x10/0x10
[  320.092451][T12530]  ? rcu_is_watching+0x15/0xb0
[  320.092469][T12530]  ? trace_contention_end+0x39/0x120
[  320.092488][T12530]  ? __mutex_lock+0x335/0x1360
[  320.092516][T12530]  netlink_rcv_skb+0x208/0x470
[  320.092546][T12530]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.092568][T12530]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.092599][T12530]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.092625][T12530]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.092651][T12530]  xfrm_netlink_rcv+0x79/0x90
[  320.092671][T12530]  netlink_unicast+0x82f/0x9e0
[  320.092699][T12530]  ? __pfx_netlink_unicast+0x10/0x10
[  320.092723][T12530]  ? netlink_sendmsg+0x642/0xb30
[  320.092748][T12530]  ? skb_put+0x11b/0x210
[  320.092766][T12530]  netlink_sendmsg+0x805/0xb30
[  320.092804][T12530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.092832][T12530]  ? aa_sock_msg_perm+0xf1/0x1d0
[  320.092851][T12530]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.092873][T12530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.092900][T12530]  __sock_sendmsg+0x21c/0x270
[  320.092926][T12530]  ____sys_sendmsg+0x505/0x830
[  320.092947][T12530]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.092969][T12530]  ? import_iovec+0x74/0xa0
[  320.092991][T12530]  ___sys_sendmsg+0x21f/0x2a0
[  320.093010][T12530]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.093050][T12530]  ? __fget_files+0x2a/0x420
[  320.093069][T12530]  ? __fget_files+0x3a0/0x420
[  320.093121][T12530]  __x64_sys_sendmsg+0x19b/0x260
[  320.093142][T12530]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.093165][T12530]  ? rcu_is_watching+0x15/0xb0
[  320.093187][T12530]  ? do_syscall_64+0xbe/0x3b0
[  320.093216][T12530]  do_syscall_64+0xfa/0x3b0
[  320.093239][T12530]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.093263][T12530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.093284][T12530]  ? exc_page_fault+0x9f/0xf0
[  320.093307][T12530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.093325][T12530] RIP: 0033:0x7fe7d938ebe9
[  320.093346][T12530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.093362][T12530] RSP: 002b:00007fe7da279038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.093382][T12530] RAX: ffffffffffffffda RBX: 00007fe7d95b5fa0 RCX: 00007fe7d938ebe9
[  320.093398][T12530] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000003
[  320.093411][T12530] RBP: 00007fe7d9411e19 R08: 0000000000000000 R09: 0000000000000000
[  320.093424][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.093437][T12530] R13: 00007fe7d95b6038 R14: 00007fe7d95b5fa0 R15: 00007ffd21851698
[  320.093457][T12530]  </TASK>
[  320.093465][T12530] 
[  320.294683][T12530] Allocated by task 9503:
[  320.296888][T12530]  kasan_save_track+0x3e/0x80
[  320.299318][T12530]  __kasan_slab_alloc+0x6c/0x80
[  320.301798][T12530]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  320.304558][T12530]  xfrm_state_alloc+0x24/0x2f0
[  320.306968][T12530]  xfrm_add_sa+0x17d1/0x4070
[  320.309363][T12530]  xfrm_user_rcv_msg+0x7a3/0xab0
[  320.311865][T12530]  netlink_rcv_skb+0x208/0x470
[  320.314329][T12530]  xfrm_netlink_rcv+0x79/0x90
[  320.316704][T12530]  netlink_unicast+0x82f/0x9e0
[  320.319157][T12530]  netlink_sendmsg+0x805/0xb30
[  320.321557][T12530]  __sock_sendmsg+0x21c/0x270
[  320.323846][T12530]  ____sys_sendmsg+0x505/0x830
[  320.326271][T12530]  ___sys_sendmsg+0x21f/0x2a0
[  320.328678][T12530]  __x64_sys_sendmsg+0x19b/0x260
[  320.331197][T12530]  do_syscall_64+0xfa/0x3b0
[  320.333524][T12530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.336509][T12530] 
[  320.337769][T12530] Freed by task 5916:
[  320.339787][T12530]  kasan_save_track+0x3e/0x80
[  320.342213][T12530]  kasan_save_free_info+0x46/0x50
[  320.344797][T12530]  __kasan_slab_free+0x5b/0x80
[  320.347274][T12530]  kmem_cache_free+0x18f/0x400
[  320.349679][T12530]  xfrm_state_gc_task+0x52d/0x6b0
[  320.352149][T12530]  process_scheduled_works+0xae1/0x17b0
[  320.354819][T12530]  worker_thread+0x8a0/0xda0
[  320.357162][T12530]  kthread+0x711/0x8a0
[  320.359096][T12530]  ret_from_fork+0x3fc/0x770
[  320.361394][T12530]  ret_from_fork_asm+0x1a/0x30
[  320.363844][T12530] 
[  320.365097][T12530] The buggy address belongs to the object at ffff88811c518900
[  320.365097][T12530]  which belongs to the cache xfrm_state of size 928
[  320.371872][T12530] The buggy address is located 322 bytes inside of
[  320.371872][T12530]  freed 928-byte region [ffff88811c518900, ffff88811c518ca0)
[  320.378638][T12530] 
[  320.379856][T12530] The buggy address belongs to the physical page:
[  320.383085][T12530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811c51ad00 pfn:0x11c518
[  320.388141][T12530] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  320.392299][T12530] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  320.396113][T12530] page_type: f5(slab)
[  320.398148][T12530] raw: 057ff00000000040 ffff88801c7bab40 dead000000000122 0000000000000000
[  320.402345][T12530] raw: ffff88811c51ad00 00000000800e0005 00000000f5000000 0000000000000000
[  320.406658][T12530] head: 057ff00000000040 ffff88801c7bab40 dead000000000122 0000000000000000
[  320.410963][T12530] head: ffff88811c51ad00 00000000800e0005 00000000f5000000 0000000000000000
[  320.415314][T12530] head: 057ff00000000002 ffffea0004714601 00000000ffffffff 00000000ffffffff
[  320.419598][T12530] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  320.423865][T12530] page dumped because: kasan: bad access detected
[  320.427097][T12530] page_owner tracks the page as allocated
[  320.429891][T12530] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6019, tgid 6016 (syz.0.47), ts 92916935519, free_ts 92382895019
[  320.438723][T12530]  post_alloc_hook+0x240/0x2a0
[  320.441008][T12530]  get_page_from_freelist+0x21e4/0x22c0
[  320.443780][T12530]  __alloc_frozen_pages_noprof+0x181/0x370
[  320.446704][T12530]  alloc_pages_mpol+0x232/0x4a0
[  320.449180][T12530]  allocate_slab+0x8a/0x370
[  320.451470][T12530]  ___slab_alloc+0xbeb/0x1410
[  320.453862][T12530]  kmem_cache_alloc_noprof+0x283/0x3c0
[  320.456632][T12530]  xfrm_state_alloc+0x24/0x2f0
[  320.459082][T12530]  xfrm_add_sa+0x17d1/0x4070
[  320.461428][T12530]  xfrm_user_rcv_msg+0x7a3/0xab0
[  320.463916][T12530]  netlink_rcv_skb+0x208/0x470
[  320.466374][T12530]  xfrm_netlink_rcv+0x79/0x90
[  320.468772][T12530]  netlink_unicast+0x82f/0x9e0
[  320.471219][T12530]  netlink_sendmsg+0x805/0xb30
[  320.473636][T12530]  __sock_sendmsg+0x21c/0x270
[  320.476008][T12530]  ____sys_sendmsg+0x505/0x830
[  320.478431][T12530] page last free pid 5876 tgid 5876 stack trace:
[  320.481546][T12530]  __free_frozen_pages+0xbc4/0xd30
[  320.484141][T12530]  __slab_free+0x303/0x3c0
[  320.486484][T12530]  qlist_free_all+0x97/0x140
[  320.488870][T12530]  kasan_quarantine_reduce+0x148/0x160
[  320.491635][T12530]  __kasan_slab_alloc+0x22/0x80
[  320.494008][T12530]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  320.496728][T12530]  getname_flags+0xb8/0x540
[  320.498980][T12530]  do_sys_openat2+0xbc/0x1c0
[  320.501354][T12530]  __x64_sys_openat+0x138/0x170
[  320.503781][T12530]  do_syscall_64+0xfa/0x3b0
[  320.506103][T12530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.509100][T12530] 
[  320.510278][T12530] Memory state around the buggy address:
[  320.513017][T12530]  ffff88811c518900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.516854][T12530]  ffff88811c518980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.520639][T12530] >ffff88811c518a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.524421][T12530]                                            ^
[  320.527369][T12530]  ffff88811c518a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.531200][T12530]  ffff88811c518b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.534961][T12530] ==================================================================
[  320.551184][T12530] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  320.554759][T12530] CPU: 0 UID: 0 PID: 12530 Comm: syz.2.2797 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  320.560771][T12530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.565672][T12530] Call Trace:
[  320.567331][T12530]  <TASK>
[  320.568799][T12530]  dump_stack_lvl+0x99/0x250
[  320.571062][T12530]  ? __asan_memcpy+0x40/0x70
[  320.573328][T12530]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.575909][T12530]  ? __pfx__printk+0x10/0x10
[  320.578207][T12530]  vpanic+0x281/0x750
[  320.580163][T12530]  ? preempt_schedule+0xae/0xc0
[  320.582013][T12530]  ? __pfx_vpanic+0x10/0x10
[  320.583826][T12530]  ? preempt_schedule_common+0x83/0xd0
[  320.585976][T12530]  ? preempt_schedule+0xae/0xc0
[  320.587900][T12530]  ? __pfx_preempt_schedule+0x10/0x10
[  320.589972][T12530]  panic+0xb9/0xc0
[  320.591716][T12530]  ? __pfx_panic+0x10/0x10
[  320.593703][T12530]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  320.596047][T12530]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  320.598271][T12530]  check_panic_on_warn+0x89/0xb0
[  320.600309][T12530]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  320.602426][T12530]  end_report+0x78/0x160
[  320.604113][T12530]  kasan_report+0x129/0x150
[  320.606383][T12530]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  320.608967][T12530]  __xfrm_state_lookup+0x6ad/0x8d0
[  320.611513][T12530]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  320.614326][T12530]  ? xfrm_state_lookup+0x45/0x1e0
[  320.616755][T12530]  xfrm_state_lookup+0x11e/0x1e0
[  320.619213][T12530]  ipcomp4_init_state+0x205/0xb20
[  320.621647][T12530]  ? __xfrm_init_state+0x7ef/0x13f0
[  320.624194][T12530]  __xfrm_init_state+0xa76/0x13f0
[  320.626540][T12530]  ? __xfrm_init_state+0x7ef/0x13f0
[  320.629071][T12530]  xfrm_add_sa+0x2f5b/0x4070
[  320.631301][T12530]  ? __pfx_xfrm_add_sa+0x10/0x10
[  320.633666][T12530]  ? apparmor_capable+0x137/0x1b0
[  320.636127][T12530]  ? __nla_parse+0x40/0x60
[  320.638265][T12530]  xfrm_user_rcv_msg+0x7a3/0xab0
[  320.640588][T12530]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.643140][T12530]  ? __pfx___mutex_trylock_common+0x10/0x10
[  320.645981][T12530]  ? rcu_is_watching+0x15/0xb0
[  320.648375][T12530]  ? trace_contention_end+0x39/0x120
[  320.650864][T12530]  ? __mutex_lock+0x335/0x1360
[  320.653236][T12530]  netlink_rcv_skb+0x208/0x470
[  320.655600][T12530]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.658232][T12530]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.660735][T12530]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.663202][T12530]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.665730][T12530]  xfrm_netlink_rcv+0x79/0x90
[  320.668075][T12530]  netlink_unicast+0x82f/0x9e0
[  320.670408][T12530]  ? __pfx_netlink_unicast+0x10/0x10
[  320.672988][T12530]  ? netlink_sendmsg+0x642/0xb30
[  320.675470][T12530]  ? skb_put+0x11b/0x210
[  320.677689][T12530]  netlink_sendmsg+0x805/0xb30
[  320.680050][T12530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.682606][T12530]  ? aa_sock_msg_perm+0xf1/0x1d0
[  320.684977][T12530]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.687529][T12530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.690092][T12530]  __sock_sendmsg+0x21c/0x270
[  320.692310][T12530]  ____sys_sendmsg+0x505/0x830
[  320.694612][T12530]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.697180][T12530]  ? import_iovec+0x74/0xa0
[  320.699350][T12530]  ___sys_sendmsg+0x21f/0x2a0
[  320.701614][T12530]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.704088][T12530]  ? __fget_files+0x2a/0x420
[  320.706323][T12530]  ? __fget_files+0x3a0/0x420
[  320.708485][T12530]  __x64_sys_sendmsg+0x19b/0x260
[  320.710809][T12530]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.713454][T12530]  ? rcu_is_watching+0x15/0xb0
[  320.715779][T12530]  ? do_syscall_64+0xbe/0x3b0
[  320.718080][T12530]  do_syscall_64+0xfa/0x3b0
[  320.720283][T12530]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.722796][T12530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.725724][T12530]  ? exc_page_fault+0x9f/0xf0
[  320.728057][T12530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.730902][T12530] RIP: 0033:0x7fe7d938ebe9
[  320.733088][T12530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.742149][T12530] RSP: 002b:00007fe7da279038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.746133][T12530] RAX: ffffffffffffffda RBX: 00007fe7d95b5fa0 RCX: 00007fe7d938ebe9
[  320.749820][T12530] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000003
[  320.753576][T12530] RBP: 00007fe7d9411e19 R08: 0000000000000000 R09: 0000000000000000
[  320.757181][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.760907][T12530] R13: 00007fe7d95b6038 R14: 00007fe7d95b5fa0 R15: 00007ffd21851698
[  320.764736][T12530]  </TASK>
[  320.767119][T12530] Kernel Offset: disabled
[  320.769224][T12530] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:33:25  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff821a6bb4 RBX=0000000000000016 RCX=ffff888021df5640 RDX=0000000080000000
RSI=0000000000000016 RDI=000000000000001f RBP=ffffc90002f6f328 RSP=ffffc90002f6f098
R8 =ffffea0000a3af87 R9 =1ffffd40001475f0 R10=dffffc0000000000 R11=fffff940001475f1
R12=1ffff110044e4875 R13=dffffc0000000000 R14=0000000000000017 R15=0000000000000073
RIP=ffffffff81bfabc8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fca207ee6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2bd0d3 CR3=0000000028674000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fca22612e53
XMM06=0000000000000000 00007fca22612e4d XMM07=0000000000000000 00007fca22612e61
XMM08=0000000000000000 00007fca22612ee7 XMM09=0000000000000000 00007fca22612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=00000000000015c8 RDI=00000000000015c9 RBP=00000000000003f9 RSP=ffffc90002f1e930
R8 =ffff8881078e0237 R9 =1ffff11020f1c046 R10=dffffc0000000000 R11=ffffffff854f01b0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f022c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe7da2796c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000500 CR3=0000000125e6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe7d9587498 00007fe7d9587470 XMM03=00007fe7d95874a8 00007fe7d95874a0
XMM04=00007fe7da0ed100 00007fe7d9587460 XMM05=00007fe7d9587478 00007fe7d95874c0
XMM06=00007fe7d95874b8 00007fe7d95874b0 XMM07=00007fe7d95874a8 00007fe7d95874a0
XMM08=0000000000000000 00007fe7d9412ee7 XMM09=0000000000000000 00007fe7d9412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
