last executing test programs:

8m21.133356552s ago: executing program 0 (id=1096):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)

8m21.078028495s ago: executing program 0 (id=1099):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

8m20.928317388s ago: executing program 0 (id=1102):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x24008855)

8m20.838656763s ago: executing program 0 (id=1103):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

8m20.759603742s ago: executing program 0 (id=1105):
r0 = getpid()
syz_open_procfs$namespace(r0, &(0x7f0000001e40)='ns/time\x00')

8m20.660423762s ago: executing program 0 (id=1106):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}, 0x20, 0x0, 0x0, 0x8, 0x6d, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

8m5.176214745s ago: executing program 32 (id=1106):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}, 0x20, 0x0, 0x0, 0x8, 0x6d, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

6m13.832299321s ago: executing program 3 (id=2751):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r1)
close(r0)

6m13.686778965s ago: executing program 3 (id=2754):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x20008088)

6m13.686518108s ago: executing program 3 (id=2755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0)

6m13.62272061s ago: executing program 3 (id=2756):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc2608000000001fbf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x7, 0x6, 0x7, 0xffffffffffffffc0}]}, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000100)=0x5, 0x12)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)

6m13.620338033s ago: executing program 1 (id=2757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38)

6m13.406204041s ago: executing program 1 (id=2758):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x4, 0x0, 0x0, 0x8, 0x3fb, 0xb, 0x48f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = getpid()
perf_event_open(0x0, r3, 0x5, r2, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="0730b5a81613612e129cfce1a5445900000000004000000000e209000000000000000000000000e1f49499332f97759f79c4698ce691c8a6c6c0aeaeed7417c1c6fcbdaa692c8cd19a6e2f3293f62f5ea3f29525c018dcd5fbc6547a"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x32, &(0x7f0000000700)=""/50}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x4}, 0x100, 0x2, 0xfffffffe, 0x8, 0x5, 0xfffffffe, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf7e5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xf, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="1809ebe95351000000000000000000f90001bc77037ebb5c0000", @ANYRES32=r0, @ANYBLOB="00000000000000008500b666df765a9f00000c780846ba8a230000000000000000b41a22c746bc0ef82f9468e506a44d62165459253693ba7c313737a0f0bda51c336749a434bfa03ec1672bd99a5180811ebbf685062c3b2bab779e97678d812791e43eb0b4b52c6e7f0bb6bad8d07c4fdc922c274a1e439c729f8f71ca4e1dd8cc86559a65125192edf77fa9013cd4df45f728fcf26c8f5858719dbf62c9f21b145c3967683c12606bfd6ca553571b9e7488f7e1c805aa39cdc67fca0cb3c9b22b7ff006e9938c57d07c669885"], &(0x7f0000000980)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r6})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="1808000000008000ee0000004000000018110000578e69aa220e013994bdfabb58c42f9333d26b4573e93e97f30c131bae1c010e27e2cfde3c181707e89c8076f9af8f219fbab493c015fae93ab3e8f624a8550eb166ae76d1e9a94f4589ee51d141d45046a12e1371ddd5fdb8bed5cbab521d2a4b3d2ae82a30f80fb72aabf44d24bd44cf8fa6586899140d8d91", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000a520040001000000de9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x48}], 0x1}, 0x20005)
sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="34000000050601010000000000000000010000060900030073797a31000000000900020073797a300000000005000100070000005074ae86770a800e6b054f32a38f7b357ac554a187ecdbc057a44817d75be3f28be45c4a8f49ddec9707e250ae790090f474fde0edb8f7dd7aff0ca1cf5e8d5027379be5439aa5421989bd81a1b6367ee831e1b20d5612d712d6f617fe6aa8c6c41ccc8d58829a9e2cc18d6bf593458105d7343f9bc776ad8cf3eb519298ea93c93cb73a9ea9d3788ac79b81c6478bbfaefc22b83222db34ad3d8915962b6460902623"], 0x34}}, 0x40000)

6m12.737965423s ago: executing program 1 (id=2762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00'}, 0x44)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f088a865e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c)

6m12.641918411s ago: executing program 1 (id=2763):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd4de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m12.638522675s ago: executing program 3 (id=2765):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000040))

6m12.546664296s ago: executing program 1 (id=2766):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f8000000190001002dbd700000000000000000000000000000000000000000016401010200000008000000000000000000000000000000000a00"], 0xf8}}, 0x0)

6m12.466741572s ago: executing program 1 (id=2767):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0)

6m12.326984858s ago: executing program 33 (id=2767):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0)

6m12.285791835s ago: executing program 3 (id=2769):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x45}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000f576ca76a5554ae27fb898440000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x6, 0x8}, 0xc)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)

6m12.212717347s ago: executing program 34 (id=2769):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x45}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000f576ca76a5554ae27fb898440000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x6, 0x8}, 0xc)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)

3m58.443000875s ago: executing program 5 (id=4628):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8)

3m58.442887883s ago: executing program 5 (id=4629):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x10000)

3m58.360620068s ago: executing program 5 (id=4631):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000610000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000600), 0x0}, 0x20)

3m58.359846244s ago: executing program 5 (id=4633):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e23, 0x7, @local}, 0x80, 0x0}, 0x0)

3m58.272981191s ago: executing program 5 (id=4635):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f0000001a40), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')

3m57.173349158s ago: executing program 5 (id=4639):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
close(r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2300, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x52f600, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

3m42.749415364s ago: executing program 35 (id=4639):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
close(r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2300, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x52f600, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

2m12.28316923s ago: executing program 2 (id=5944):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

2m12.282790987s ago: executing program 2 (id=5945):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0)

2m12.20196457s ago: executing program 2 (id=5948):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x30, 0x5f, 0x30, 0x1e]}}, 0x0, 0x2e, 0x0, 0x1, 0x3ff}, 0x28)

2m12.119424309s ago: executing program 2 (id=5952):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc)

2m12.118969405s ago: executing program 2 (id=5953):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000580)=""/250, 0x40f00}, 0x94)

2m11.943414927s ago: executing program 2 (id=5955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)

2m11.798948691s ago: executing program 36 (id=5955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)

1.520522792s ago: executing program 4 (id=8085):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2a, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x4}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$kcm(0xa, 0x1, 0x106)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @broadcast})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x36b4)

980.639618ms ago: executing program 6 (id=8100):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000180)={'full', 0x20, 0x2000000005, 0x20, 0xffffffffffffa240}, 0x11)

980.346002ms ago: executing program 6 (id=8101):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r0, 0x0, 0x417}, 0x18)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)

911.446439ms ago: executing program 6 (id=8103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000010000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

779.616832ms ago: executing program 6 (id=8105):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c680", 0x19a}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x40049409, 0x5)
r4 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="62a044"], 0x8)
socketpair(0x22, 0x6, 0x24, &(0x7f0000000ac0))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x22}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
socketpair(0x28, 0x2, 0x28, &(0x7f0000001400))
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
r8 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x24000000)
setsockopt$sock_attach_bpf(r8, 0x0, 0x4, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="030000000400010100060000000000000000", @ANYRES32, @ANYBLOB="eb1b0000000000000000", @ANYRES32=r6, @ANYRES32=r7], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0x6, 0x0, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

461.903949ms ago: executing program 6 (id=8112):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32], 0x48)
perf_event_open(&(0x7f0000001a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0xa3, 0xffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x10000, 0xaea}, 0x14105, 0xf, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

410.888961ms ago: executing program 7 (id=8113):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8)

410.660134ms ago: executing program 4 (id=8114):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d8000000100081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

410.516591ms ago: executing program 7 (id=8115):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x88}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)

351.172525ms ago: executing program 4 (id=8116):
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)

343.442424ms ago: executing program 4 (id=8117):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711263000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

278.658968ms ago: executing program 4 (id=8118):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x29, &(0x7f0000000000), 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x100)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000100), 0x2, 0x0)

278.450834ms ago: executing program 7 (id=8119):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000000000000000000005000014000000005f"], 0x0, 0x41, 0x0, 0x1}, 0x20)

201.075409ms ago: executing program 7 (id=8120):
socketpair(0x26, 0x0, 0x100, &(0x7f00000000c0))

200.459848ms ago: executing program 4 (id=8121):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0)

131.045801ms ago: executing program 7 (id=8122):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)

135.953µs ago: executing program 7 (id=8123):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="140000003500df746baa0700000000f90424", 0x12}, {&(0x7f0000000000)="fbb5549892418fbb", 0x8}], 0x2}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x6f, &(0x7f0000001040)}, 0x10)

0s ago: executing program 6 (id=8124):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r1], 0x8)

kernel console output (not intermixed with test programs):

[  337.965038][T14735] netlink: 'syz.2.3726': attribute type 13 has an invalid length.
[  337.967622][T14735] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.3726'.
[  338.111519][T14748] batadv0: left allmulticast mode
[  338.180437][T14754] netlink: 'syz.5.3734': attribute type 6 has an invalid length.
[  338.184292][T14754] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3734'.
[  338.248670][ T5846] Bluetooth: hci0: Malformed LE Event: 0x0d
[  338.504576][T14780] netlink: 'syz.4.3743': attribute type 21 has an invalid length.
[  339.002582][T14808] __nla_validate_parse: 1 callbacks suppressed
[  339.002602][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3756'.
[  339.491182][T14824] netlink: 'syz.4.3764': attribute type 29 has an invalid length.
[  339.495230][T14824] netlink: 'syz.4.3764': attribute type 29 has an invalid length.
[  339.499886][T14824] netlink: 'syz.4.3764': attribute type 29 has an invalid length.
[  339.639484][T14831] netlink: 'syz.2.3766': attribute type 21 has an invalid length.
[  339.662707][T14831] netlink: 'syz.2.3766': attribute type 6 has an invalid length.
[  339.665163][T14831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3766'.
[  339.724986][T14833] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3767'.
[  339.986845][T14842] netlink: 'syz.4.3771': attribute type 1 has an invalid length.
[  339.994468][T14842] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3771'.
[  340.469880][T14860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3778'.
[  340.490273][T14859] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  340.557735][T14866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3782'.
[  340.568430][T14866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3782'.
[  340.861168][T14893] syzkaller0: entered promiscuous mode
[  340.864924][T14893] syzkaller0: entered allmulticast mode
[  342.285731][T14908] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3802'.
[  342.452888][T14935] netlink: 'syz.5.3814': attribute type 2 has an invalid length.
[  342.456995][T14935] netlink: 'syz.5.3814': attribute type 1 has an invalid length.
[  342.467360][ T5846] Bluetooth: hci2: Malformed LE Event: 0x0d
[  342.580165][T14941] netlink: 'syz.4.3817': attribute type 9 has an invalid length.
[  342.584101][T14941] netlink: 'syz.4.3817': attribute type 8 has an invalid length.
[  342.587807][T14941] netlink: 143452 bytes leftover after parsing attributes in process `syz.4.3817'.
[  343.245792][T14976] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3834'.
[  343.356713][T14985] syzkaller0: entered promiscuous mode
[  343.359097][T14985] syzkaller0: entered allmulticast mode
[  343.704974][T15009] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  343.708366][T15009] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  343.954305][T15026] netlink: zone id is out of range
[  343.958762][T15026] netlink: zone id is out of range
[  343.961571][T15026] netlink: zone id is out of range
[  343.968772][T15026] netlink: get zone limit has 8 unknown bytes
[  344.938615][T15076] validate_nla: 4 callbacks suppressed
[  344.938632][T15076] netlink: 'syz.5.3875': attribute type 21 has an invalid length.
[  345.018243][T15080] netlink: 'syz.5.3877': attribute type 21 has an invalid length.
[  345.021612][T15080] __nla_validate_parse: 2 callbacks suppressed
[  345.021629][T15080] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3877'.
[  345.029358][T15080] netlink: 'syz.5.3877': attribute type 5 has an invalid length.
[  345.038421][T15080] netlink: 'syz.5.3877': attribute type 6 has an invalid length.
[  345.041370][T15080] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3877'.
[  345.386435][T15089] netlink: 'syz.5.3880': attribute type 6 has an invalid length.
[  345.390542][T15089] netlink: 'syz.5.3880': attribute type 25 has an invalid length.
[  345.398586][T15089] netlink: 'syz.5.3880': attribute type 27 has an invalid length.
[  345.404820][T15089] netlink: 15538 bytes leftover after parsing attributes in process `syz.5.3880'.
[  347.698238][T15138] netlink: 'syz.2.3898': attribute type 2 has an invalid length.
[  348.069134][T15167] netlink: 'syz.4.3909': attribute type 1 has an invalid length.
[  350.066781][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3947'.
[  351.054227][T15322] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3963'.
[  351.371124][T15344] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3973'.
[  351.497389][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3977'.
[  351.722294][ T5846] Bluetooth: hci1: ISO packet for unknown connection handle 62
[  351.792457][T15369] syzkaller0: entered promiscuous mode
[  351.794707][T15369] syzkaller0: entered allmulticast mode
[  353.190622][T15380] syzkaller0: entered promiscuous mode
[  353.193168][T15380] syzkaller0: entered allmulticast mode
[  353.592441][T15401] netlink: 'syz.5.3997': attribute type 11 has an invalid length.
[  355.317802][T15427] netlink: 'syz.5.4009': attribute type 3 has an invalid length.
[  355.329510][T15429] netlink: 'syz.4.4010': attribute type 2 has an invalid length.
[  355.333259][T15429] netlink: 110008 bytes leftover after parsing attributes in process `syz.4.4010'.
[  355.857895][T15451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4021'.
[  355.861415][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4021'.
[  360.421217][ T5846] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  360.424502][ T5846] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  360.850881][T15539] sit0: entered allmulticast mode
[  360.860900][T15539] sit0: entered promiscuous mode
[  361.371524][T15548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4063'.
[  361.377907][T15548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4063'.
[  361.381732][T15548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4063'.
[  363.291631][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b
[  363.664223][T15636] netlink: 'syz.2.4101': attribute type 10 has an invalid length.
[  364.343012][T15639] delete_channel: no stack
[  364.666846][T15649] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4109'.
[  364.669745][T15649] netlink: zone id is out of range
[  364.671343][T15649] netlink: zone id is out of range
[  364.673371][T15649] netlink: zone id is out of range
[  364.675245][T15649] netlink: zone id is out of range
[  364.676907][T15649] netlink: zone id is out of range
[  364.678456][T15649] netlink: zone id is out of range
[  364.680043][T15649] netlink: zone id is out of range
[  364.687191][T15649] netlink: zone id is out of range
[  364.689768][T15649] netlink: zone id is out of range
[  364.691814][T15649] netlink: zone id is out of range
[  365.394832][T15653] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4111'.
[  366.135476][T15685] bridge_slave_1: left allmulticast mode
[  366.138806][T15685] bridge_slave_1: left promiscuous mode
[  366.141213][T15685] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.150052][T15685] bridge_slave_0: left allmulticast mode
[  366.163717][T15685] bridge_slave_0: left promiscuous mode
[  366.165770][T15685] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.877046][T15724] delete_channel: no stack
[  367.882506][T15724] delete_channel: no stack
[  368.900290][T15749] netlink: 'syz.2.4151': attribute type 1 has an invalid length.
[  368.904410][T15749] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4151'.
[  369.153820][T15766] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4158'.
[  369.319232][T15779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4164'.
[  369.326289][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'.
[  369.841615][T15789] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4169'.
[  370.168077][ T5846] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6
[  370.341932][ T5846] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[  370.407291][T15808] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4177'.
[  370.447287][T15812] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4178'.
[  370.462854][T15812] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4178'.
[  370.588724][T15823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4183'.
[  370.603942][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4183'.
[  370.680213][T15830] netlink: 'syz.4.4187': attribute type 10 has an invalid length.
[  370.694584][T15830] team0: Device ipvlan1 failed to register rx_handler
[  370.899995][T15854] netlink: 'syz.2.4193': attribute type 2 has an invalid length.
[  371.037356][T15859] veth0_vlan: entered allmulticast mode
[  371.947499][T15884] netlink: 'syz.2.4211': attribute type 29 has an invalid length.
[  371.966292][T15884] netlink: 'syz.2.4211': attribute type 29 has an invalid length.
[  371.970121][T15884] netlink: 'syz.2.4211': attribute type 29 has an invalid length.
[  373.308762][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.376170][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.438601][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.053143][   T13] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.062190][T15922] __nla_validate_parse: 1 callbacks suppressed
[  374.062203][T15922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4227'.
[  374.067055][T15922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4227'.
[  374.314133][   T13] bridge_slave_1: left allmulticast mode
[  374.316034][   T13] bridge_slave_1: left promiscuous mode
[  374.322842][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.328197][   T13] bridge_slave_0: left allmulticast mode
[  374.330072][   T13] bridge_slave_0: left promiscuous mode
[  374.331942][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.714379][   T13] team0: Port device geneve1 removed
[  374.833922][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.837924][   T13] bond0 (unregistering): Released all slaves
[  375.193895][T15987] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4248'.
[  375.196815][T15987] net_ratelimit: 76 callbacks suppressed
[  375.196825][T15987] netlink: zone id is out of range
[  375.221460][T15987] netlink: zone id is out of range
[  375.240226][T15987] netlink: zone id is out of range
[  375.241893][T15987] netlink: zone id is out of range
[  375.252075][T15987] netlink: zone id is out of range
[  375.256041][T15987] netlink: zone id is out of range
[  375.268921][T15987] netlink: zone id is out of range
[  375.270604][T15987] netlink: zone id is out of range
[  375.290478][T15987] netlink: zone id is out of range
[  375.299288][T15987] netlink: zone id is out of range
[  375.448019][T15998] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.4251'.
[  375.487689][   T13] hsr_slave_0: left promiscuous mode
[  375.510411][   T13] hsr_slave_1: left promiscuous mode
[  375.525608][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  375.528864][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.538950][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.549962][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.561882][   T13] veth1_macvtap: left promiscuous mode
[  375.577745][   T13] veth0_macvtap: left promiscuous mode
[  375.580039][   T13] veth1_vlan: left promiscuous mode
[  375.581904][   T13] veth0_vlan: left promiscuous mode
[  375.626676][T16012] netlink: 'syz.4.4255': attribute type 4 has an invalid length.
[  375.629523][T16012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4255'.
[  376.219678][   T13] team0 (unregistering): Port device team_slave_1 removed
[  376.268378][   T13] team0 (unregistering): Port device team_slave_0 removed
[  377.364592][T16058] netlink: 'syz.5.4268': attribute type 16 has an invalid length.
[  377.368708][T16058] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4268'.
[  377.406532][T16058] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.251140][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.254068][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  379.359826][ T5846] Bluetooth: hci0: Dropping invalid advertising data
[  379.363520][ T5846] Bluetooth: hci0: unknown advertising packet type: 0xff
[  379.363543][ T5846] Bluetooth: hci0: Malformed LE Event: 0x02
[  379.443634][T16136] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4288'.
[  380.072810][T16147] lo: entered allmulticast mode
[  380.182745][T16149] lo: entered promiscuous mode
[  380.184768][T16149] lo: left allmulticast mode
[  380.261146][T16155] netlink: 'syz.2.4296': attribute type 21 has an invalid length.
[  380.267861][T16155] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4296'.
[  380.462821][T16161] netlink: 166 bytes leftover after parsing attributes in process `syz.4.4298'.
[  380.590390][T16169] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4301'.
[  380.662648][T16173] netlink: 'syz.2.4303': attribute type 26 has an invalid length.
[  381.426207][T16206] netlink: 'syz.2.4318': attribute type 29 has an invalid length.
[  381.437335][T16206] netlink: 'syz.2.4318': attribute type 29 has an invalid length.
[  381.550268][T16210] netlink: 'syz.2.4320': attribute type 21 has an invalid length.
[  381.557767][T16210] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4320'.
[  381.560732][T16210] netlink: 'syz.2.4320': attribute type 4 has an invalid length.
[  381.622974][T16216] net_ratelimit: 75 callbacks suppressed
[  381.622987][T16216] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  381.851815][T16226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4328'.
[  381.891552][ T5846] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10
[  382.040406][T16242] syzkaller0: entered promiscuous mode
[  382.046603][T16242] syzkaller0: entered allmulticast mode
[  382.131737][T16252] netlink: 'syz.4.4341': attribute type 2 has an invalid length.
[  382.140508][T16252] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.4341'.
[  382.218551][T16255] netlink: 'syz.2.4342': attribute type 33 has an invalid length.
[  382.221143][T16255] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4342'.
[  382.224842][T16255] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  382.395125][ T5846] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  382.478081][T16272] netlink: 'syz.4.4350': attribute type 3 has an invalid length.
[  382.480567][T16272] netlink: 'syz.4.4350': attribute type 1 has an invalid length.
[  382.485594][T16272] netlink: 201352 bytes leftover after parsing attributes in process `syz.4.4350'.
[  383.923496][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  384.051366][ T5846] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  384.166421][T16296] C: renamed from team_slave_0 (while UP)
[  384.174675][T16296] netlink: 'syz.5.4359': attribute type 3 has an invalid length.
[  384.177657][T16296] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4359'.
[  384.183229][T16296] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  384.858457][T16327] : port 1(erspan0) entered blocking state
[  384.860436][T16327] : port 1(erspan0) entered disabled state
[  384.862882][T16327] erspan0: entered allmulticast mode
[  384.865521][T16327] erspan0: entered promiscuous mode
[  385.610108][T16379] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4392'.
[  387.378267][T16404] netlink: 'syz.2.4405': attribute type 10 has an invalid length.
[  387.380936][T16404] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4405'.
[  387.575937][T16422] netlink: 'syz.2.4409': attribute type 10 has an invalid length.
[  387.579393][T16422] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  387.594757][T16424] netlink: 'syz.5.4414': attribute type 2 has an invalid length.
[  387.765355][T16431] netlink: 'syz.2.4416': attribute type 2 has an invalid length.
[  387.768555][T16431] netlink: 'syz.2.4416': attribute type 1 has an invalid length.
[  387.933009][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4425'.
[  389.131345][T16496] netlink: 'syz.4.4438': attribute type 33 has an invalid length.
[  389.135037][T16496] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4438'.
[  389.464302][T16519] netlink: 'syz.2.4445': attribute type 1 has an invalid length.
[  390.091367][T16558] syzkaller0: entered promiscuous mode
[  390.095900][T16558] syzkaller0: entered allmulticast mode
[  390.243316][T16563] blkio.reset_stats is deprecated
[  390.387972][ T5846] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  390.534391][T16588] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.4466'.
[  390.969322][T16617] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4476'.
[  391.038712][T16622] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4478'.
[  391.369343][T16650] netlink: 'syz.5.4491': attribute type 46 has an invalid length.
[  391.389566][T16652] netlink: 'syz.4.4492': attribute type 21 has an invalid length.
[  391.393592][T16652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4492'.
[  391.679168][T16667] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4498'.
[  391.750908][T16669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4499'.
[  391.764552][T16669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4499'.
[  391.769546][T16669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4499'.
[  392.446433][T16689] netlink: 'syz.5.4505': attribute type 29 has an invalid length.
[  392.453721][T16689] netlink: 'syz.5.4505': attribute type 10 has an invalid length.
[  392.537221][T16689] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.549110][T16689] team0: Port device bond0 added
[  392.645273][T16700] netlink: 'syz.5.4508': attribute type 39 has an invalid length.
[  392.754375][T16707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4512'.
[  392.759871][T16707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4512'.
[  392.764786][T16707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4512'.
[  392.903523][T16719] netlink: 'syz.4.4518': attribute type 10 has an invalid length.
[  392.965361][T16719] team0: Device ipvlan1 failed to register rx_handler
[  395.693094][T16737] Bluetooth: hci0: command 0x0406 tx timeout
[  395.695614][T16737] Bluetooth: hci1: command 0x0406 tx timeout
[  397.447438][T16750] netlink: 'syz.4.4530': attribute type 10 has an invalid length.
[  398.267044][T16779] __nla_validate_parse: 3 callbacks suppressed
[  398.267061][T16779] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4542'.
[  398.274103][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4542'.
[  398.341661][T16783] netlink: 'syz.4.4545': attribute type 13 has an invalid length.
[  398.347503][T16783] netlink: 'syz.4.4545': attribute type 58 has an invalid length.
[  398.350181][T16783] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4545'.
[  398.380382][T16787] tap0: tun_chr_ioctl cmd 2148553947
[  398.425632][T16794] cgroup: fork rejected by pids controller in /syz4
[  398.859243][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.959863][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.973319][T16813] delete_channel: no stack
[  399.063661][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.139274][   T13] batman_adv: batadv0: Removing interface: netdevsim0
[  399.154247][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  399.157990][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  399.160733][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  399.164464][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.168360][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  399.171565][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  399.823472][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.829566][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.835132][   T13] bond0 (unregistering): Released all slaves
[  399.939216][T16820] chnl_net:caif_netlink_parms(): no params data found
[  400.483894][T16820] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.486312][T16820] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.488602][T16820] bridge_slave_0: entered allmulticast mode
[  400.493518][T16820] bridge_slave_0: entered promiscuous mode
[  400.504020][T16820] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.506356][T16820] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.508600][T16820] bridge_slave_1: entered allmulticast mode
[  400.517623][T16820] bridge_slave_1: entered promiscuous mode
[  400.648137][T16820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.663111][T16820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.730142][   T13] hsr_slave_1: left promiscuous mode
[  400.740073][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.743346][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.752864][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.756003][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.767732][   T13] veth1_vlan: left promiscuous mode
[  400.769848][   T13] veth0_vlan: left promiscuous mode
[  401.081492][   T13] team0 (unregistering): Port device team_slave_1 removed
[  401.110760][   T13] team0 (unregistering): Port device team_slave_0 removed
[  401.202135][ T5845] Bluetooth: hci1: command tx timeout
[  401.523461][T16820] team0: Port device team_slave_0 added
[  401.525842][T16874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4576'.
[  401.552325][T16820] team0: Port device team_slave_1 added
[  401.577065][T16875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4576'.
[  401.587613][T16820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.590226][T16820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.600654][T16820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.612878][T16820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.616882][T16820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.636530][T16820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.640194][T16880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4576'.
[  401.728132][T16820] hsr_slave_0: entered promiscuous mode
[  401.737220][T16820] hsr_slave_1: entered promiscuous mode
[  401.740082][T16820] debugfs: 'hsr0' already exists in 'hsr'
[  401.742610][T16820] Cannot create hsr debugfs directory
[  401.954071][T16901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4583'.
[  402.008516][T16903] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4584'.
[  402.213470][T16916] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.4588'.
[  402.376651][T16928] netlink: 'syz.2.4593': attribute type 1 has an invalid length.
[  402.390292][T16932] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4595'.
[  402.490608][T16820] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  402.503649][T16820] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  402.513494][T16820] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  402.546652][T16820] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  402.650334][T16820] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.668050][T16820] 8021q: adding VLAN 0 to HW filter on device team0
[  402.676174][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.678507][ T9712] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.703106][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.706115][ T9712] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.784333][T16820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  403.048817][T16820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.282520][ T5845] Bluetooth: hci1: command tx timeout
[  403.587491][T16998] netlink: 'syz.2.4609': attribute type 29 has an invalid length.
[  403.601002][T16820] veth0_vlan: entered promiscuous mode
[  403.625673][T16820] veth1_vlan: entered promiscuous mode
[  403.658465][T16820] veth0_macvtap: entered promiscuous mode
[  403.669190][T16820] veth1_macvtap: entered promiscuous mode
[  403.704491][T16820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.726397][T16820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.738323][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.748885][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.757473][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.761272][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.494561][ T9712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.497487][ T9712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.530124][ T9712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.537740][ T9712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.695194][T17026] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4621'.
[  404.698102][T17026] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  404.700637][T17026] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  404.709385][T17027] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4618'.
[  405.052815][T17053] netlink: 'syz.2.4634': attribute type 21 has an invalid length.
[  405.056085][T17053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4634'.
[  405.870320][ T5845] Bluetooth: hci1: command tx timeout
[  407.676085][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  407.950503][ T5846] Bluetooth: hci1: command tx timeout
[  410.369116][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2496797471 wd_nsec: 2496797656
[  420.819224][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  420.825466][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  420.828187][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  420.830858][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  420.835158][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  420.979106][T17076] chnl_net:caif_netlink_parms(): no params data found
[  421.503146][T17076] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.505470][T17076] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.507826][T17076] bridge_slave_0: entered allmulticast mode
[  421.519102][T17076] bridge_slave_0: entered promiscuous mode
[  421.524173][T17076] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.526950][T17076] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.551484][T17076] bridge_slave_1: entered allmulticast mode
[  421.555508][T17076] bridge_slave_1: entered promiscuous mode
[  421.623163][T17090] netlink: 'syz.4.4644': attribute type 4 has an invalid length.
[  421.625599][T17090] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4644'.
[  421.629219][T17076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.635522][T17095] netlink: 'syz.2.4646': attribute type 15 has an invalid length.
[  421.636181][T17076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.644709][T17095] netlink: 'syz.2.4646': attribute type 7 has an invalid length.
[  421.649564][T17095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4646'.
[  421.671007][T17076] team0: Port device team_slave_0 added
[  421.682649][T17076] team0: Port device team_slave_1 added
[  421.684921][T17097] netlink: 'syz.4.4647': attribute type 1 has an invalid length.
[  421.687527][T17097] netlink: 'syz.4.4647': attribute type 2 has an invalid length.
[  421.722959][T17076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.725884][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.739670][T17076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.749997][T17076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.759430][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.772164][T17076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.785108][T17103] netlink: 'syz.2.4650': attribute type 4 has an invalid length.
[  421.794605][T17105] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4651'.
[  421.805195][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.836817][T17107] netlink: 'syz.4.4652': attribute type 17 has an invalid length.
[  421.840370][T17107] netlink: 'syz.4.4652': attribute type 16 has an invalid length.
[  421.844404][T17107] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4652'.
[  421.861823][T17076] hsr_slave_0: entered promiscuous mode
[  421.870275][T17076] hsr_slave_1: entered promiscuous mode
[  421.872603][T17076] debugfs: 'hsr0' already exists in 'hsr'
[  421.874492][T17076] Cannot create hsr debugfs directory
[  421.913681][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.014589][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.099616][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.110529][T17123] netlink: 'syz.2.4660': attribute type 1 has an invalid length.
[  422.113423][T17120] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4659'.
[  422.116723][T17123] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4660'.
[  422.167106][T17125] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4661'.
[  422.344451][   T12] bridge_slave_1: left allmulticast mode
[  422.346483][   T12] bridge_slave_1: left promiscuous mode
[  422.355141][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.359303][   T12] bridge_slave_0: left promiscuous mode
[  422.361191][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.370263][   T12] erspan0: left allmulticast mode
[  422.371911][   T12] erspan0: left promiscuous mode
[  422.382565][   T12] : port 1(erspan0) entered disabled state
[  422.507328][T17129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  422.513651][T17129] IPv6: NLM_F_CREATE should be set when creating new route
[  422.524240][T17129] IPv6: NLM_F_CREATE should be set when creating new route
[  422.887056][ T5845] Bluetooth: hci3: command tx timeout
[  423.055783][   T12] team0: Port device bond0 removed
[  423.066995][   T12] bond0 (unregistering): (slave 30): Releasing backup interface
[  423.073653][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.082390][   T12] bond0 (unregistering): Released all slaves
[  423.120527][T17138] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  423.131636][T17138] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  423.185192][T17076] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  423.218431][T17150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.223952][T17076] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  423.237784][T17076] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  423.247905][T17076] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  423.568988][   T12] hsr_slave_0: left promiscuous mode
[  423.572868][   T12] hsr_slave_1: left promiscuous mode
[  423.575855][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.578958][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.583684][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.589654][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.607684][   T12] veth0_macvtap: left promiscuous mode
[  423.610395][   T12] veth1_vlan: left promiscuous mode
[  423.618468][T17171] netlink: 'syz.4.4676': attribute type 10 has an invalid length.
[  424.940521][   T12] team0 (unregistering): Port device team_slave_1 removed
[  424.967220][ T5845] Bluetooth: hci3: command tx timeout
[  425.002671][   T12] team0 (unregistering): Port device C removed
[  425.590350][T17171] veth0_vlan: left promiscuous mode
[  425.597798][T17171] veth0_vlan: entered promiscuous mode
[  425.607513][T17171] team0: Device veth0_vlan failed to register rx_handler
[  425.710438][T17076] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.752366][T17076] 8021q: adding VLAN 0 to HW filter on device team0
[  425.785818][  T759] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.788270][  T759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.796321][  T759] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.798838][  T759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.039367][T17076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.380923][T17076] veth0_vlan: entered promiscuous mode
[  426.413383][T17076] veth1_vlan: entered promiscuous mode
[  426.456801][T17076] veth0_macvtap: entered promiscuous mode
[  426.481273][T17076] veth1_macvtap: entered promiscuous mode
[  426.497243][T17076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.505213][T17076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.512706][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.517665][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.554673][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.560819][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.663949][T17235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4693'.
[  426.698346][  T759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.701502][  T759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.754990][  T759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.758141][  T759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.792219][T17238] netlink: 731 bytes leftover after parsing attributes in process `syz.2.4695'.
[  426.988435][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4696'.
[  427.042395][ T5845] Bluetooth: hci3: command tx timeout
[  427.239296][T17247] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  427.477971][ T5845] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  427.478008][ T5845] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  427.939319][T17303] netlink: 'syz.6.4718': attribute type 10 has an invalid length.
[  427.941858][T17303] openvswitch: netlink: Flow key attr not present in new flow.
[  427.951367][T17306] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4719'.
[  428.331909][T17334] netlink: 'syz.4.4729': attribute type 1 has an invalid length.
[  428.337082][T17334] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.4729'.
[  428.935766][T17367] netlink: 'syz.4.4738': attribute type 22 has an invalid length.
[  429.123817][ T5845] Bluetooth: hci3: command tx timeout
[  429.311282][T17396] veth1_macvtap: left promiscuous mode
[  429.450842][T17396] macsec0: entered promiscuous mode
[  429.561030][ T5845] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  430.286224][T17423] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  430.304209][T17427] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4763'.
[  430.495756][T17447] netlink: 'syz.4.4771': attribute type 8 has an invalid length.
[  430.498220][T17447] netlink: 'syz.4.4771': attribute type 3 has an invalid length.
[  430.500729][T17447] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.4771'.
[  430.579253][T17456] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4776'.
[  430.647874][T17465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4780'.
[  430.653202][T17465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4780'.
[  430.691113][T17469] netlink: 'syz.4.4782': attribute type 21 has an invalid length.
[  431.561486][T17501] netlink: 'syz.2.4797': attribute type 2 has an invalid length.
[  431.605928][T17504] netlink: 'syz.4.4798': attribute type 2 has an invalid length.
[  431.681648][T17510] netlink: 'syz.4.4801': attribute type 9 has an invalid length.
[  431.686638][T17510] __nla_validate_parse: 2 callbacks suppressed
[  431.686653][T17510] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.4801'.
[  432.113725][T17534] netlink: 'syz.2.4813': attribute type 1 has an invalid length.
[  432.698599][T17579] netlink: 198112 bytes leftover after parsing attributes in process `syz.6.4834'.
[  432.918982][T17599] syzkaller0: tun_chr_ioctl cmd 1074025681
[  433.111535][T17609] validate_nla: 3 callbacks suppressed
[  433.111550][T17609] netlink: 'syz.2.4848': attribute type 21 has an invalid length.
[  433.116559][T17609] netlink: 'syz.2.4848': attribute type 15 has an invalid length.
[  433.120738][T17609] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4848'.
[  433.123688][T17609] IPv6: NLM_F_CREATE should be specified when creating new route
[  433.126217][T17609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  433.128503][T17609] IPv6: NLM_F_CREATE should be set when creating new route
[  433.130891][T17609] IPv6: NLM_F_CREATE should be set when creating new route
[  433.133299][T17609] IPv6: NLM_F_CREATE should be set when creating new route
[  433.692463][T17636] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4855'.
[  433.695968][T17636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  433.904986][T17636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.038543][T17656] netlink: 'syz.4.4864': attribute type 2 has an invalid length.
[  434.069638][T17660] netlink: 'syz.6.4866': attribute type 10 has an invalid length.
[  434.073890][T17660] bridge0: port 3(macsec0) entered blocking state
[  434.076205][T17660] bridge0: port 3(macsec0) entered disabled state
[  434.078424][T17660] macsec0: entered allmulticast mode
[  434.080215][T17660] veth1_macvtap: entered allmulticast mode
[  434.088282][T17660] macsec0: entered promiscuous mode
[  434.090852][T17660] bridge0: port 3(macsec0) entered blocking state
[  434.093298][T17660] bridge0: port 3(macsec0) entered forwarding state
[  434.200589][T17666] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.4869'.
[  434.239957][T17666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.260107][T17672] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.4872'.
[  434.405187][T17678] netlink: 'syz.4.4875': attribute type 9 has an invalid length.
[  434.407833][T17678] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4875'.
[  435.341396][T17717] tun0: tun_chr_ioctl cmd 1074025677
[  435.344897][T17717] tun0: linktype set to 270
[  435.734720][T17735] netlink: 208128 bytes leftover after parsing attributes in process `syz.6.4898'.
[  435.737725][T17735] openvswitch: netlink: Message has 4 unknown bytes.
[  436.061677][T17747] netlink: 'syz.6.4903': attribute type 21 has an invalid length.
[  436.115882][T17747] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4903'.
[  436.119534][T17747] netlink: 'syz.6.4903': attribute type 5 has an invalid length.
[  436.189548][T17747] netlink: 'syz.6.4903': attribute type 6 has an invalid length.
[  436.202112][T17747] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4903'.
[  436.550445][T17755] tap0: tun_chr_ioctl cmd 1074025677
[  436.555680][T17755] tap0: linktype set to 0
[  437.777914][T17807] netlink: 'syz.4.4930': attribute type 33 has an invalid length.
[  437.781941][T17807] netlink: 'syz.4.4930': attribute type 3 has an invalid length.
[  437.789322][T17807] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.4930'.
[  438.077196][T17834] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  438.268058][T17857] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4954'.
[  438.278262][T17857] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4954'.
[  438.288709][T17857] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4954'.
[  438.914287][T17909] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.4975'.
[  438.929874][T17914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4978'.
[  439.681001][T17968] IPv6: NLM_F_CREATE should be specified when creating new route
[  439.720278][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  439.723031][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  439.962976][T17978] validate_nla: 1 callbacks suppressed
[  439.962992][T17978] netlink: 'syz.4.4996': attribute type 2 has an invalid length.
[  440.675439][T17987] macsec0: left promiscuous mode
[  440.825500][T17999] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.5001'.
[  440.890610][T18004] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.5003'.
[  440.939616][T18004] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  440.943879][T18004] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  441.237204][T18017] syzkaller0: tun_chr_ioctl cmd 1074812117
[  441.868718][T18062] netlink: 'syz.6.5018': attribute type 10 has an invalid length.
[  441.947439][T18062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.969870][T18062] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  442.906233][T18083] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.5025'.
[  442.968142][T18083] netlink: 'syz.4.5025': attribute type 1 has an invalid length.
[  442.971532][T18083] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5025'.
[  443.145972][T18089] netlink: 'syz.2.5028': attribute type 1 has an invalid length.
[  443.163165][T18091] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5029'.
[  443.861268][T18111] Dead loop on virtual device ip6_vti0, fix it urgently!
[  444.442591][T18115] netlink: 'syz.6.5039': attribute type 1 has an invalid length.
[  444.445139][T18115] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.5039'.
[  445.441842][T18180] netlink: 'syz.4.5070': attribute type 10 has an invalid length.
[  445.448122][T18180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5070'.
[  445.452921][T18180] batadv0: entered promiscuous mode
[  445.454938][T18180] batadv0: entered allmulticast mode
[  445.459731][T18180] bridge0: port 3(batadv0) entered blocking state
[  445.463499][T18180] bridge0: port 3(batadv0) entered disabled state
[  445.486518][T18180] bridge0: port 3(batadv0) entered blocking state
[  445.489203][T18180] bridge0: port 3(batadv0) entered forwarding state
[  445.873042][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  445.877157][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  447.274509][T18224] syzkaller0: entered promiscuous mode
[  447.276731][T18224] syzkaller0: entered allmulticast mode
[  448.889729][T18257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5103'.
[  448.951916][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5106'.
[  449.130907][T18275] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5112'.
[  449.361909][T18291] macvtap0: refused to change device tx_queue_len
[  449.396443][T18296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5121'.
[  449.410934][T18296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5121'.
[  449.767617][T18313] netlink: 'syz.2.5130': attribute type 7 has an invalid length.
[  450.034913][T18327] nft_compat: unsupported protocol 0
[  450.193065][T18343] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5145'.
[  450.746484][T18370] sit0: entered allmulticast mode
[  450.751239][T18372] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5157'.
[  450.757231][T18370] sit0: entered promiscuous mode
[  450.994365][T18379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5160'.
[  450.997891][T18379] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5160'.
[  451.000931][T18379] netlink: 'syz.2.5160': attribute type 5 has an invalid length.
[  451.003817][T18379] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5160'.
[  451.746079][T18398] netlink: 'syz.2.5168': attribute type 21 has an invalid length.
[  451.875874][T18412] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  451.879016][T18412] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  451.931512][T18418] netlink: 'syz.2.5175': attribute type 21 has an invalid length.
[  452.034063][T18418] netlink: 'syz.2.5175': attribute type 5 has an invalid length.
[  452.340224][T18441] netlink: 'syz.4.5188': attribute type 39 has an invalid length.
[  452.629435][T18457] netlink: 'syz.6.5195': attribute type 21 has an invalid length.
[  452.864829][T18467] syzkaller0: entered promiscuous mode
[  452.867090][T18467] syzkaller0: entered allmulticast mode
[  452.971812][T18477] netlink: 'syz.2.5203': attribute type 21 has an invalid length.
[  452.974921][T18477] netlink: 'syz.2.5203': attribute type 20 has an invalid length.
[  455.346002][T18495] __nla_validate_parse: 9 callbacks suppressed
[  455.346044][T18495] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5211'.
[  455.429993][T18503] netlink: 'syz.4.5215': attribute type 46 has an invalid length.
[  455.434835][T18503] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.5215'.
[  455.994071][T18537] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.5231'.
[  456.130860][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5236'.
[  456.341753][T18562] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  456.430408][T18570] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.5247'.
[  458.640600][T18617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  458.653241][T18613] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5267'.
[  458.747873][T18630] syzkaller1: tun_chr_ioctl cmd 1074025677
[  458.750122][T18630] syzkaller1: linktype set to 780
[  459.102467][T18656] cgroup: fork rejected by pids controller in /syz2
[  459.448721][T17177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.570842][T17177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.686313][T17177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.794034][T17177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.091795][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  460.098333][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  460.101596][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  460.104446][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  460.107630][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  460.181623][T18684] netlink: 'syz.6.5296': attribute type 21 has an invalid length.
[  460.271480][T17177] team0: Port device geneve1 removed
[  460.377155][T18684] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5296'.
[  460.381049][T18686] net veth1_virt_wifi : renamed from virt_wifi0
[  460.524142][T18694] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5299'.
[  460.848131][T18680] chnl_net:caif_netlink_parms(): no params data found
[  461.169888][T17177] hsr_slave_0: left promiscuous mode
[  461.173914][T17177] hsr_slave_1: left promiscuous mode
[  461.176046][T17177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.179113][T17177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.181976][T17177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.185075][T17177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.195667][T17177] veth0_macvtap: left promiscuous mode
[  461.550025][T17177] team0 (unregistering): Port device team_slave_1 removed
[  461.618450][T17177] team0 (unregistering): Port device C removed
[  461.748532][T18734] netlink: 'syz.6.5310': attribute type 10 has an invalid length.
[  461.928370][T18680] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.930679][T18680] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.934115][T18680] bridge_slave_0: entered allmulticast mode
[  461.937463][T18680] bridge_slave_0: entered promiscuous mode
[  461.944789][T18734] veth0_macvtap: left promiscuous mode
[  461.957858][T18734] veth0_macvtap: entered promiscuous mode
[  461.973812][T18734] team0: Device macvtap0 failed to register rx_handler
[  461.976967][T18734] veth0_macvtap: left promiscuous mode
[  461.988443][T18680] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.990650][T18680] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.998035][T18680] bridge_slave_1: entered allmulticast mode
[  462.003740][T18680] bridge_slave_1: entered promiscuous mode
[  462.075822][T18680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.094943][T18680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.141268][T18680] team0: Port device team_slave_0 added
[  462.158272][T18680] team0: Port device team_slave_1 added
[  462.169285][ T5846] Bluetooth: hci0: command tx timeout
[  462.173415][T18744] netlink: 'syz.6.5315': attribute type 16 has an invalid length.
[  462.175848][T18744] netlink: 'syz.6.5315': attribute type 3 has an invalid length.
[  462.178181][T18744] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5315'.
[  462.221236][T18680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.226070][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.236672][T18680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.244907][T18680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.247708][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.270112][T18680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.280130][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5317'.
[  462.331250][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5317'.
[  462.339950][T18748] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5317'.
[  462.345259][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5317'.
[  462.353855][T18748] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5317'.
[  462.367903][T18680] hsr_slave_0: entered promiscuous mode
[  462.371055][T18680] hsr_slave_1: entered promiscuous mode
[  463.373001][T18780] netlink: 'syz.4.5324': attribute type 11 has an invalid length.
[  463.375472][T18780] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.5324'.
[  463.376288][T18680] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  463.431331][T18680] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  463.444892][T18680] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  463.455566][T18779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.461586][T18680] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  463.610998][T18680] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.659241][T18680] 8021q: adding VLAN 0 to HW filter on device team0
[  463.669117][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.672201][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.710839][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.713196][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.012694][T18680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.076301][T18828] openvswitch: netlink: Message has 24 unknown bytes.
[  464.081721][T18828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.091907][T18680] veth0_vlan: entered promiscuous mode
[  464.106889][T18680] veth1_vlan: entered promiscuous mode
[  464.147895][T18680] veth0_macvtap: entered promiscuous mode
[  464.160653][T18680] veth1_macvtap: entered promiscuous mode
[  464.185340][T18680] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.203447][T18680] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.211323][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.214736][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.222515][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.225521][T17177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.243903][ T5846] Bluetooth: hci0: command tx timeout
[  464.317479][ T3052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.319924][ T3052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.352619][ T3052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.357021][ T3052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.496185][T18847] bridge0: port 3(ip6gretap0) entered blocking state
[  464.498327][T18847] bridge0: port 3(ip6gretap0) entered disabled state
[  464.500468][T18847] ip6gretap0: entered allmulticast mode
[  464.525305][T18847] ip6gretap0: entered promiscuous mode
[  464.535076][T18847] bridge0: port 3(ip6gretap0) entered blocking state
[  464.537867][T18847] bridge0: port 3(ip6gretap0) entered forwarding state
[  465.096512][T18892] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5359'.
[  466.322319][ T5846] Bluetooth: hci0: command tx timeout
[  467.194116][ T5846] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  467.365763][T18942] netlink: 'syz.2.5380': attribute type 10 has an invalid length.
[  467.373946][T18942] syz_tun: entered promiscuous mode
[  467.380439][T18942] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  467.395514][T18944] netlink: 'syz.4.5381': attribute type 6 has an invalid length.
[  467.398721][T18944] netlink: 'syz.4.5381': attribute type 7 has an invalid length.
[  467.413699][T18944] __nla_validate_parse: 1 callbacks suppressed
[  467.413716][T18944] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5381'.
[  467.419510][T18944] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.5381'.
[  467.425521][T18944] netlink: 'syz.4.5381': attribute type 6 has an invalid length.
[  467.428632][T18944] netlink: 'syz.4.5381': attribute type 7 has an invalid length.
[  467.431671][T18944] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5381'.
[  467.681762][T18970] netlink: 'syz.2.5394': attribute type 21 has an invalid length.
[  468.264101][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5404'.
[  468.409081][ T5845] Bluetooth: hci0: command tx timeout
[  468.600592][T19001] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  468.627192][T19011] netlink: 'syz.4.5408': attribute type 40 has an invalid length.
[  468.687926][T19011] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.296491][T19023] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.5413'.
[  470.365611][T19027] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5415'.
[  470.459604][T19033] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  471.548143][T19088] syzkaller0: entered promiscuous mode
[  471.550738][T19088] syzkaller0: entered allmulticast mode
[  471.733936][T19095] ip6gretap0: left allmulticast mode
[  471.735683][T19095] ip6gretap0: left promiscuous mode
[  471.737470][T19095] bridge0: port 3(ip6gretap0) entered disabled state
[  471.953744][ T5845] Bluetooth: hci1: adv larger than maximum supported
[  471.953789][ T5845] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  471.957940][ T5845] Bluetooth: hci1: Malformed LE Event: 0x0d
[  472.500043][T19095] bridge_slave_1: left allmulticast mode
[  472.504281][T19095] bridge_slave_1: left promiscuous mode
[  472.506783][T19095] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.515454][T19095] bridge_slave_0: left allmulticast mode
[  472.517739][T19095] bridge_slave_0: left promiscuous mode
[  472.520201][T19095] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.572242][ T9712] wlan1: Trigger new scan to find an IBSS to join
[  472.845620][T19114] netlink: 'syz.2.5453': attribute type 2 has an invalid length.
[  473.695584][T19139] netlink: 'syz.2.5464': attribute type 1 has an invalid length.
[  473.698801][T19139] netlink: 'syz.2.5464': attribute type 4 has an invalid length.
[  473.704873][T19139] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5464'.
[  473.709469][T19139] netlink: 'syz.2.5464': attribute type 1 has an invalid length.
[  473.715553][T19139] netlink: 'syz.2.5464': attribute type 4 has an invalid length.
[  473.718971][T19139] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5464'.
[  473.904503][T19155] netlink: 'syz.6.5474': attribute type 21 has an invalid length.
[  473.907132][T19155] netlink: 'syz.6.5474': attribute type 1 has an invalid length.
[  473.912341][T19155] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.5474'.
[  475.052578][T19187] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5487'.
[  475.528441][ T9712] wlan1: Trigger new scan to find an IBSS to join
[  475.564306][T19215] netlink: 'syz.2.5499': attribute type 1 has an invalid length.
[  475.567453][T19215] netlink: 'syz.2.5499': attribute type 4 has an invalid length.
[  475.582329][T19215] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5499'.
[  475.603798][T19215] netlink: 'syz.2.5499': attribute type 1 has an invalid length.
[  475.606749][T19215] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5499'.
[  475.978551][T19243] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5511'.
[  476.073909][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5512'.
[  476.399938][T19258] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5516'.
[  476.463869][ T5845] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  476.466331][ T5845] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff
[  476.710345][T19271] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5522'.
[  477.522326][ T3052] wlan1: Creating new IBSS network, BSSID 56:84:75:88:1a:47
[  477.924272][ T5845] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  477.927116][ T5845] Bluetooth: hci1: Injecting HCI hardware error event
[  477.931342][ T5845] Bluetooth: hci1: hardware error 0x00
[  479.227482][T19378] validate_nla: 3 callbacks suppressed
[  479.227499][T19378] netlink: 'syz.6.5572': attribute type 17 has an invalid length.
[  479.237035][T19378] __nla_validate_parse: 4 callbacks suppressed
[  479.237050][T19378] netlink: 160 bytes leftover after parsing attributes in process `syz.6.5572'.
[  479.727143][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5590'.
[  479.730256][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5590'.
[  480.004551][ T5845] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  481.328467][T19494] delete_channel: no stack
[  481.568593][T19509] syzkaller0: entered promiscuous mode
[  481.570694][T19509] syzkaller0: entered allmulticast mode
[  483.111922][T19522] netlink: 'syz.6.5637': attribute type 3 has an invalid length.
[  483.114941][T19522] netlink: 'syz.6.5637': attribute type 1 has an invalid length.
[  483.117690][T19522] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.5637'.
[  483.459409][T19546] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.5649'.
[  483.552496][T19557] netlink: 'syz.2.5654': attribute type 27 has an invalid length.
[  483.555159][T19557] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.5654'.
[  483.790721][T19575] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  487.533750][T19626] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5682'.
[  488.160387][T19653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5692'.
[  488.873049][T19677] netlink: 'syz.2.5703': attribute type 10 has an invalid length.
[  488.875933][T19677] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5703'.
[  489.568340][T19691] netlink: 'syz.4.5709': attribute type 10 has an invalid length.
[  489.638243][T19674] delete_channel: no stack
[  489.663424][T19694] netlink: 'syz.4.5709': attribute type 29 has an invalid length.
[  489.666164][T19694] netlink: 'syz.4.5709': attribute type 3 has an invalid length.
[  489.668634][T19694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5709'.
[  489.707789][T19691] team0: Device ipvlan1 failed to register rx_handler
[  493.173184][T19777] netlink: 'syz.4.5740': attribute type 21 has an invalid length.
[  493.176654][T19777] netlink: 'syz.4.5740': attribute type 6 has an invalid length.
[  493.179677][T19777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5740'.
[  493.293009][T19783] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5744'.
[  494.114272][T19804] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5753'.
[  494.118325][T19804] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5753'.
[  494.169521][T19806] sit0: left promiscuous mode
[  494.564172][ T5845] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11
[  495.075568][T19832] syzkaller0: entered promiscuous mode
[  495.081066][T19832] syzkaller0: entered allmulticast mode
[  498.330578][ T5853] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.494852][T19864] netlink: 'syz.2.5779': attribute type 3 has an invalid length.
[  498.497819][T19864] netlink: 'syz.2.5779': attribute type 1 has an invalid length.
[  498.500637][T19864] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5779'.
[  500.286827][T19902] netlink: 'syz.2.5795': attribute type 3 has an invalid length.
[  500.289990][T19902] netlink: 'syz.2.5795': attribute type 2 has an invalid length.
[  500.293135][T19902] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.5795'.
[  500.477770][T19914] openvswitch: netlink: Message has 16 unknown bytes.
[  500.480422][T19914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.572658][T19918] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5803'.
[  500.699816][T19926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5808'.
[  501.135756][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  501.138362][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  501.795090][T19957] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  501.799648][ T9712] wlan1: Created IBSS using preconfigured BSSID 00:ff:8d:00:00:00
[  501.808080][ T9712] wlan1: Creating new IBSS network, BSSID 00:ff:8d:00:00:00
[  503.757717][T20026] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.5852'.
[  503.761583][T20026] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  503.766346][T20026] openvswitch: netlink: Key type 256 is out of range max 32
[  504.007715][T20037] : port 1(vlan0) entered blocking state
[  504.009798][T20037] : port 1(vlan0) entered disabled state
[  504.011757][T20037] vlan0: entered allmulticast mode
[  504.014192][T20037] veth0_vlan: entered allmulticast mode
[  504.020041][T20037] vlan0: entered promiscuous mode
[  504.035921][T20042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5859'.
[  504.039499][T20042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5859'.
[  504.087592][T20046] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5861'.
[  504.421770][T20071] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5872'.
[  505.090804][T20087] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5878'.
[  505.164601][T20092] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5880'.
[  505.167554][T20092] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.5880'.
[  505.338554][T20104] netlink: 'syz.2.5884': attribute type 4 has an invalid length.
[  505.341122][T20104] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5884'.
[  505.366963][T20104] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5884'.
[  505.372578][T20104] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  508.966761][T20122] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.5892'.
[  509.096031][T20133] sctp: [Deprecated]: syz.2.5894 (pid 20133) Use of struct sctp_assoc_value in delayed_ack socket option.
[  509.096031][T20133] Use struct sctp_sack_info instead
[  509.188553][T20137] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  509.891818][T20174] netlink: 'syz.6.5914': attribute type 10 has an invalid length.
[  510.141802][T20182] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.5918'.
[  510.176993][T20184] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  510.481141][ T5845] Bluetooth: hci0: adv larger than maximum supported
[  511.347070][T20260] bond0: (slave syz_tun): Releasing backup interface
[  511.506125][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.522401][   T26] wlan1: Trigger new scan to find an IBSS to join
[  511.627480][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.735106][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.799344][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.860825][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  511.866678][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  511.871721][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  511.881547][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  511.885584][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  512.468467][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  512.474577][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  512.478489][   T13] bond0 (unregistering): Released all slaves
[  512.739960][T20278] chnl_net:caif_netlink_parms(): no params data found
[  512.831620][   T13] hsr_slave_0: left promiscuous mode
[  512.834332][   T13] hsr_slave_1: left promiscuous mode
[  512.836397][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.838692][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.841545][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.845326][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  512.858533][   T13] veth1_macvtap: left promiscuous mode
[  512.860323][   T13] veth0_macvtap: left promiscuous mode
[  512.941032][T20308] netlink: 'syz.4.5965': attribute type 5 has an invalid length.
[  512.944461][T20308] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5965'.
[  513.238737][   T13] team0 (unregistering): Port device team_slave_1 removed
[  513.274865][   T13] team0 (unregistering): Port device team_slave_0 removed
[  513.934106][ T5845] Bluetooth: hci0: command tx timeout
[  515.272647][T20278] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.274989][T20278] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.277231][T20278] bridge_slave_0: entered allmulticast mode
[  515.280331][T20278] bridge_slave_0: entered promiscuous mode
[  515.285639][T20278] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.287945][T20278] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.290883][T20278] bridge_slave_1: entered allmulticast mode
[  515.294030][T20278] bridge_slave_1: entered promiscuous mode
[  515.300498][T20328] netlink: 531 bytes leftover after parsing attributes in process `syz.4.5971'.
[  515.364204][T20278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.368987][T20278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.435110][T20278] team0: Port device team_slave_0 added
[  515.446581][T20278] team0: Port device team_slave_1 added
[  515.501810][T20278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.506385][T20278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.516733][T20278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.522292][   T26] wlan1: Trigger new scan to find an IBSS to join
[  515.525557][T20278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.531541][T20278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.556010][T20278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.667702][T20278] hsr_slave_0: entered promiscuous mode
[  515.672305][T20278] hsr_slave_1: entered promiscuous mode
[  516.002753][ T5845] Bluetooth: hci0: command tx timeout
[  516.012656][T20278] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  516.015406][T20363] netlink: 'syz.4.5984': attribute type 46 has an invalid length.
[  516.023033][T20278] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  516.028678][T20278] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  516.035184][T20278] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  516.139402][T20278] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.161048][T20278] 8021q: adding VLAN 0 to HW filter on device team0
[  516.168926][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.171242][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.180269][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.182635][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.427371][T20278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.691508][T20278] veth0_vlan: entered promiscuous mode
[  516.702625][T20278] veth1_vlan: entered promiscuous mode
[  516.733364][T20278] veth0_macvtap: entered promiscuous mode
[  516.738520][T20278] veth1_macvtap: entered promiscuous mode
[  516.755798][T20278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.767928][T20278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.780490][T17177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.786063][T17177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.790881][T17177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.795671][T17177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.874061][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.881177][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.907704][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.910801][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.390547][T20425] netlink: 26 bytes leftover after parsing attributes in process `syz.6.5992'.
[  517.429432][T20427] netlink: 163260 bytes leftover after parsing attributes in process `syz.7.5993'.
[  517.532753][ T9712] wlan1: Creating new IBSS network, BSSID 62:ba:95:c4:c0:b7
[  518.093568][ T5845] Bluetooth: hci0: command tx timeout
[  520.172288][ T5845] Bluetooth: hci0: command tx timeout
[  520.261140][T20544] netlink: 'syz.6.6037': attribute type 4 has an invalid length.
[  520.270932][T20544] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.6037'.
[  520.775786][T20566] netlink: 'syz.6.6044': attribute type 21 has an invalid length.
[  520.778933][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6044'.
[  521.031479][T20583] syzkaller0: tun_chr_ioctl cmd 35111
[  521.129983][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6053'.
[  521.134863][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6053'.
[  521.341862][T20602] veth0_vlan: entered allmulticast mode
[  521.553562][T20609] veth0_vlan: left promiscuous mode
[  521.562958][T20609] veth0_vlan: entered promiscuous mode
[  521.788223][T20615] netlink: 'syz.7.6067': attribute type 4 has an invalid length.
[  521.795109][T20615] netlink: 14345 bytes leftover after parsing attributes in process `syz.7.6067'.
[  522.048024][T20631] netlink: 'syz.6.6078': attribute type 10 has an invalid length.
[  523.974120][T20657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6081'.
[  523.977358][T20657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6081'.
[  524.030590][T20661] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6083'.
[  524.943670][T20678] netlink: 'syz.6.6093': attribute type 21 has an invalid length.
[  524.946175][T20678] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6093'.
[  524.946459][T20679] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6094'.
[  525.025050][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6095'.
[  525.465901][T20713] netlink: 'syz.4.6107': attribute type 21 has an invalid length.
[  525.689099][T20727] delete_channel: no stack
[  526.551578][   T64] : port 1(vlan0) entered blocking state
[  526.554152][   T64] : port 1(vlan0) entered forwarding state
[  526.802072][T20753] veth0_vlan: entered allmulticast mode
[  526.890645][T20758] veth0_vlan: left promiscuous mode
[  526.899201][T20758] veth0_vlan: entered promiscuous mode
[  527.935394][ T9702] wlan1: Created IBSS using preconfigured BSSID 00:ff:8d:00:00:00
[  527.937851][ T9702] wlan1: Creating new IBSS network, BSSID 00:ff:8d:00:00:00
[  527.977023][T20795] netlink: 'syz.7.6145': attribute type 21 has an invalid length.
[  527.980310][T20795] __nla_validate_parse: 10 callbacks suppressed
[  527.980325][T20795] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6145'.
[  531.500588][T20815] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.6154'.
[  531.503645][T20815] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  531.506159][T20815] openvswitch: netlink: Key type 256 is out of range max 32
[  531.585153][ T5845] Bluetooth: hci3: unexpected event 0x2c length: 82 > 17
[  531.626046][T20824] netlink: 'syz.4.6158': attribute type 46 has an invalid length.
[  531.888588][T20846] netlink: 'syz.6.6169': attribute type 2 has an invalid length.
[  531.891696][T20846] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6169'.
[  531.906035][T20848] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6170'.
[  532.906444][T20880] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6184'.
[  533.198838][T20902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6194'.
[  533.278485][T20909] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6198'.
[  533.416341][T20913] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6200'.
[  533.420164][T20913] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6200'.
[  533.479349][T20919] netlink: 'syz.4.6202': attribute type 23 has an invalid length.
[  533.534874][T20923] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6203'.
[  534.623034][T20970] netlink: 1010 bytes leftover after parsing attributes in process `syz.7.6221'.
[  534.625856][T20970] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  534.641558][T20972] netlink: 'syz.4.6223': attribute type 10 has an invalid length.
[  534.695230][T20981] netlink: 'syz.4.6227': attribute type 1 has an invalid length.
[  534.817326][T20982] netlink: 'syz.7.6228': attribute type 25 has an invalid length.
[  534.820019][T20982] netlink: 'syz.7.6228': attribute type 1 has an invalid length.
[  534.833558][T20982] bridge0: port 1(bridge_slave_0) entered learning state
[  534.948405][T20990] delete_channel: no stack
[  535.484072][T21023] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6247'.
[  535.526287][T21027] netlink: 'syz.4.6249': attribute type 13 has an invalid length.
[  536.216674][T21083] sit0: entered allmulticast mode
[  536.748382][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6266'.
[  536.865287][T21121] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.6268'.
[  536.976679][T21133] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  537.367751][T21165] netlink: 'syz.6.6289': attribute type 2 has an invalid length.
[  537.370935][T21165] netlink: 'syz.6.6289': attribute type 8 has an invalid length.
[  537.376217][T21165] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6289'.
[  537.842233][T21195] veth0_to_bond: default FDB implementation only supports local addresses
[  539.257922][T21207] netlink: 'syz.7.6309': attribute type 22 has an invalid length.
[  539.260636][T21207] __nla_validate_parse: 1 callbacks suppressed
[  539.260645][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6309'.
[  539.590634][T21221] netlink: 'syz.4.6315': attribute type 10 has an invalid length.
[  539.604793][T21221] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6315'.
[  539.615227][T21221] team0: entered promiscuous mode
[  539.619594][T21221] team_slave_0: entered promiscuous mode
[  539.624745][T21221] team_slave_1: entered promiscuous mode
[  539.630187][T21221] bridge0: port 4(team0) entered blocking state
[  539.638881][T21221] bridge0: port 4(team0) entered disabled state
[  539.645159][T21221] team0: entered allmulticast mode
[  539.647386][T21221] team_slave_0: entered allmulticast mode
[  539.649784][T21221] team_slave_1: entered allmulticast mode
[  539.714889][T21221] bridge0: port 4(team0) entered blocking state
[  539.717425][T21221] bridge0: port 4(team0) entered forwarding state
[  539.819366][T21227] Dead loop on virtual device ip6_vti0, fix it urgently!
[  540.426257][T21239] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.6322'.
[  540.538335][T21252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6327'.
[  540.544023][T21253] netlink: 'syz.6.6329': attribute type 2 has an invalid length.
[  540.553412][T21252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6327'.
[  540.560876][T21252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6327'.
[  540.620077][T21260] netlink: 1057 bytes leftover after parsing attributes in process `syz.7.6333'.
[  541.635484][ T5845] Bluetooth: hci0: SCO packet too small
[  541.834531][T21302] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6350'.
[  542.067764][T21316] netlink: 'syz.7.6357': attribute type 2 has an invalid length.
[  542.070572][T21316] netlink: 'syz.7.6357': attribute type 1 has an invalid length.
[  542.078069][T21316] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.6357'.
[  542.220166][T21327] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6362'.
[  543.488890][T21365] netlink: 'syz.4.6378': attribute type 3 has an invalid length.
[  543.491612][T21365] netlink: 'syz.4.6378': attribute type 1 has an invalid length.
[  543.766758][T21381] delete_channel: no stack
[  544.164718][ T5845] Bluetooth: hci3: command 0x0406 tx timeout
[  544.200305][T21423] netlink: 'syz.6.6405': attribute type 10 has an invalid length.
[  544.284164][T21431] netlink: 'syz.4.6409': attribute type 10 has an invalid length.
[  544.286980][T21431] __nla_validate_parse: 4 callbacks suppressed
[  544.286991][T21431] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6409'.
[  545.327117][T21454] netlink: 'syz.6.6419': attribute type 3 has an invalid length.
[  545.329592][T21454] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6419'.
[  545.799220][T21484] netlink: 'syz.6.6433': attribute type 29 has an invalid length.
[  545.802978][T21484] netlink: 'syz.6.6433': attribute type 29 has an invalid length.
[  546.003515][T21493] bridge0: port 4(team0) entered disabled state
[  546.006284][T21493] bridge0: port 3(batadv0) entered disabled state
[  546.009784][T21493] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.017311][T21493] bridge0: entered allmulticast mode
[  546.038245][T21493] bridge0: port 4(team0) entered blocking state
[  546.041399][T21493] bridge0: port 4(team0) entered forwarding state
[  546.044253][T21493] bridge0: port 3(batadv0) entered blocking state
[  546.046889][T21493] bridge0: port 3(batadv0) entered forwarding state
[  546.049609][T21493] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.052344][T21493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.067928][T21493] bridge0: entered promiscuous mode
[  546.176090][T21497] netlink: 'syz.6.6438': attribute type 29 has an invalid length.
[  546.180143][T21497] netlink: 'syz.6.6438': attribute type 29 has an invalid length.
[  546.411942][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6442'.
[  546.764637][T21539] netlink: 'syz.6.6457': attribute type 7 has an invalid length.
[  546.968367][T21553] netlink: 495 bytes leftover after parsing attributes in process `syz.7.6465'.
[  549.885883][T21639] netlink: 'syz.4.6505': attribute type 21 has an invalid length.
[  549.918328][T21643] netlink: 'syz.4.6507': attribute type 10 has an invalid length.
[  549.921054][T21643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6507'.
[  550.237077][T21677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  550.239824][T21677] IPv6: NLM_F_CREATE should be set when creating new route
[  550.242195][T21677] IPv6: NLM_F_CREATE should be set when creating new route
[  550.245011][T21677] IPv6: NLM_F_CREATE should be set when creating new route
[  551.132654][T21679] delete_channel: no stack
[  551.170896][T21696] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6531'.
[  551.175466][T21696] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6531'.
[  551.189681][T21696] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6531'.
[  551.770386][T21755] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.773140][T21755] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.777359][T21755] bridge0: entered allmulticast mode
[  551.788596][T21755] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.791025][T21755] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.793551][T21755] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.796285][T21755] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.812360][T21755] bridge0: entered promiscuous mode
[  551.909002][T21764] netlink: 'syz.4.6563': attribute type 4 has an invalid length.
[  551.911953][T21764] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6563'.
[  551.947519][T21769] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.6566'.
[  552.065630][T21782] netlink: 'syz.4.6572': attribute type 21 has an invalid length.
[  553.126104][T21854] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  553.288272][T21862] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  553.291479][T21862] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  553.452992][T21870] team0: left allmulticast mode
[  553.454588][T21870] team_slave_0: left allmulticast mode
[  553.456322][T21870] team_slave_1: left allmulticast mode
[  553.458172][T21870] bridge0: port 4(team0) entered disabled state
[  553.743315][T21870] batadv0: left allmulticast mode
[  553.745256][T21870] bridge0: port 3(batadv0) entered disabled state
[  553.794775][T21870] bridge_slave_1: left allmulticast mode
[  553.799477][T21870] bridge_slave_1: left promiscuous mode
[  553.816912][T21870] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.920300][T21870] bridge_slave_0: left promiscuous mode
[  553.926308][T21870] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.046781][T21875] netlink: 'syz.6.6614': attribute type 2 has an invalid length.
[  554.049499][T21875] netlink: 119 bytes leftover after parsing attributes in process `syz.6.6614'.
[  554.485644][T21887] netlink: 'syz.7.6620': attribute type 10 has an invalid length.
[  554.494531][T21887] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.499063][T21887] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.527615][T21887] bridge0: left promiscuous mode
[  554.529887][T21887] bridge0: left allmulticast mode
[  554.589965][T21887] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.593219][T21887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.596738][T21887] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.599419][T21887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.629833][T21887] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  554.698186][T21901] netlink: 'syz.6.6626': attribute type 21 has an invalid length.
[  554.701599][T21901] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6626'.
[  555.801458][T21948] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.6647'.
[  555.879124][ T5846] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10
[  557.676455][T22001] netlink: 'syz.6.6670': attribute type 4 has an invalid length.
[  557.689025][T22002] : renamed from team_slave_1 (while UP)
[  557.691671][T22001] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6670'.
[  557.862934][T22007] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6674'.
[  558.325113][T22014] =======================================================
[  558.325113][T22014] WARNING: The mand mount option has been deprecated and
[  558.325113][T22014]          and is ignored by this kernel. Remove the mand
[  558.325113][T22014]          option from the mount to silence this warning.
[  558.325113][T22014] =======================================================
[  558.421925][T22016] syzkaller0: entered promiscuous mode
[  558.424867][T22016] syzkaller0: entered allmulticast mode
[  562.568030][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  562.571421][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  562.810567][T22067] : renamed from bond_slave_0 (while UP)
[  562.897334][T22075] netlink: 'syz.6.6704': attribute type 16 has an invalid length.
[  562.899890][T22075] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6704'.
[  563.022599][T22083] netlink: 'syz.7.6708': attribute type 5 has an invalid length.
[  563.025341][T22083] netlink: 'syz.7.6708': attribute type 7 has an invalid length.
[  563.032127][T22083] netlink: 137592 bytes leftover after parsing attributes in process `syz.7.6708'.
[  563.355742][T22113] netlink: 10 bytes leftover after parsing attributes in process `syz.7.6723'.
[  563.513531][T22122] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.6727'.
[  563.885312][T22144] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6737'.
[  563.895233][T22146] netlink: 144 bytes leftover after parsing attributes in process `syz.7.6738'.
[  564.109018][T22163] netlink: 'syz.4.6746': attribute type 10 has an invalid length.
[  564.112656][T22163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6746'.
[  564.122696][T22163] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  564.127185][T22163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  564.145945][T22167] netlink: 'syz.7.6749': attribute type 5 has an invalid length.
[  564.149348][T22167] netlink: 176 bytes leftover after parsing attributes in process `syz.7.6749'.
[  564.244440][T22175] netlink: 'syz.4.6752': attribute type 10 has an invalid length.
[  564.249693][T22175] veth1_vlan: entered allmulticast mode
[  564.254758][T22175] team0: Device veth1_vlan failed to register rx_handler
[  564.259722][ T9702] : port 1(vlan0) entered disabled state
[  564.727843][T22218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6771'.
[  566.631466][T22292] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6803'.
[  566.714946][T22299] netlink: 'syz.6.6806': attribute type 4 has an invalid length.
[  566.727188][T22299] .`: renamed from bond0 (while UP)
[  567.145049][T22338] netlink: 'syz.4.6825': attribute type 29 has an invalid length.
[  567.198700][T22344] netlink: 'syz.7.6828': attribute type 16 has an invalid length.
[  567.524911][T22357] openvswitch: netlink: Message has 16 unknown bytes.
[  568.111378][T22377] sit0: entered promiscuous mode
[  568.204240][T22375] netdevsim netdevsim7 : renamed from netdevsim0 (while UP)
[  569.853577][T22439] netlink: 'syz.6.6868': attribute type 10 has an invalid length.
[  569.856393][T22439] __nla_validate_parse: 9 callbacks suppressed
[  569.856404][T22439] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.6868'.
[  570.048634][T22444] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[  570.050990][T22444] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  570.630661][T22468] netlink: 'syz.6.6880': attribute type 11 has an invalid length.
[  570.633561][T22468] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6880'.
[  571.194133][T22486] netlink: 'syz.7.6886': attribute type 29 has an invalid length.
[  571.197297][T22485] netlink: 'syz.7.6886': attribute type 29 has an invalid length.
[  571.904239][T22533] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6908'.
[  574.940664][T22579] netlink: 'syz.6.6927': attribute type 2 has an invalid length.
[  574.944239][T22579] netlink: 119 bytes leftover after parsing attributes in process `syz.6.6927'.
[  575.183139][T22597] netdevsim0: mtu greater than device maximum
[  575.333867][ T5846] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  575.510688][T22610] bpf: Bad value for 'gid'
[  575.632567][T22624] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.6945'.
[  575.641345][T22624] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6945'.
[  575.653202][ T5846] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  575.655614][ T5846] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff
[  575.733806][T22628] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6948'.
[  575.797049][T22636] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6952'.
[  575.888754][T22646] netlink: 'syz.7.6957': attribute type 4 has an invalid length.
[  575.891915][T22646] netlink: 'syz.7.6957': attribute type 3 has an invalid length.
[  575.903831][T22646] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6957'.
[  576.344044][T22680] netlink: 'syz.7.6973': attribute type 29 has an invalid length.
[  576.363875][T22680] netlink: 'syz.7.6973': attribute type 3 has an invalid length.
[  576.366950][T22680] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6973'.
[  577.217760][T22730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6995'.
[  577.393679][T22736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6998'.
[  577.594431][T22751] netlink: 'syz.7.7005': attribute type 21 has an invalid length.
[  577.604328][T22751] netlink: 'syz.7.7005': attribute type 1 has an invalid length.
[  577.606871][T22751] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7005'.
[  577.871353][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.975144][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.058820][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.124338][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.284107][   T12] vlan0: left allmulticast mode
[  578.286972][   T12] vlan0: left promiscuous mode
[  578.289320][   T12] : port 1(vlan0) entered disabled state
[  578.302331][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  578.307301][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  578.311928][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  578.320289][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  578.326800][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  578.799711][T22780] netlink: 'syz.7.7018': attribute type 27 has an invalid length.
[  578.832926][   T12] bond0 (unregistering): (slave 4): Releasing backup interface
[  578.838269][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.842920][   T12] bond0 (unregistering): Released all slaves
[  579.045729][T22794] netlink: 'syz.7.7023': attribute type 10 has an invalid length.
[  579.085878][T22794] batman_adv: batadv0: Adding interface: hsr_slave_1
[  579.088271][T22794] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.099080][T22794] batman_adv: batadv0: Interface activated: hsr_slave_1
[  579.206526][T22769] chnl_net:caif_netlink_parms(): no params data found
[  579.230993][   T12] hsr_slave_0: left promiscuous mode
[  579.236027][   T12] hsr_slave_1: left promiscuous mode
[  579.247677][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  579.256601][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.269820][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  579.272901][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.288548][   T12] veth1_macvtap: left promiscuous mode
[  579.290380][   T12] veth0_macvtap: left promiscuous mode
[  579.292975][   T12] veth0_vlan: left promiscuous mode
[  579.312794][T22807] netlink: del zone limit has 4 unknown bytes
[  579.537188][T22821] netlink: 'syz.6.7033': attribute type 10 has an invalid length.
[  579.679624][T22823] can: request_module (can-proto-0) failed.
[  579.708332][   T12] team_slave_1 (unregistering): left promiscuous mode
[  579.711230][   T12] team0 (unregistering): Port device team_slave_1 removed
[  579.741540][   T12] team_slave_0 (unregistering): left promiscuous mode
[  579.744664][   T12] team0 (unregistering): Port device team_slave_0 removed
[  580.111695][T22821] 8021q: adding VLAN 0 to HW filter on device team0
[  580.115858][T22821] .`: (slave team0): Enslaving as an active interface with an up link
[  580.118727][T22822] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  580.181187][T22769] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.189084][T22769] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.191371][T22769] bridge_slave_0: entered allmulticast mode
[  580.195812][T22769] bridge_slave_0: entered promiscuous mode
[  580.208178][T22769] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.210405][T22769] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.217685][T22769] bridge_slave_1: entered allmulticast mode
[  580.221067][T22769] bridge_slave_1: entered promiscuous mode
[  580.307497][T22769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.321561][T22769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.412137][ T5845] Bluetooth: hci1: command tx timeout
[  580.437000][T22769] team0: Port device team_slave_0 added
[  580.455999][T22769] team0: Port device team_slave_1 added
[  580.554834][T22769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.557035][T22769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.582952][T22769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.588752][T22769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.591800][T22769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.600719][T22769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.639314][T22769] hsr_slave_0: entered promiscuous mode
[  580.644171][T22769] hsr_slave_1: entered promiscuous mode
[  580.646749][T22769] debugfs: 'hsr0' already exists in 'hsr'
[  580.649140][T22769] Cannot create hsr debugfs directory
[  580.793567][T22854] __nla_validate_parse: 1 callbacks suppressed
[  580.793584][T22854] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7045'.
[  581.050931][T22769] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  581.059306][T22769] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  581.066008][T22870] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.7053'.
[  581.075108][T22769] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  581.081544][T22769] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  581.149720][T22769] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.169441][T22769] 8021q: adding VLAN 0 to HW filter on device team0
[  581.177971][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.180244][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.188487][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.192164][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.275989][T22887] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.7058'.
[  581.350642][T22769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.571512][T22769] veth0_vlan: entered promiscuous mode
[  581.589573][T22769] veth1_vlan: entered promiscuous mode
[  581.665849][T22769] veth0_macvtap: entered promiscuous mode
[  581.690480][T22769] veth1_macvtap: entered promiscuous mode
[  581.741194][T22769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.761250][T22769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.797371][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.814874][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.819751][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.825771][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.027393][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.040671][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.126544][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.130101][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.482892][ T5845] Bluetooth: hci1: command tx timeout
[  582.498063][T22932] netlink: 164 bytes leftover after parsing attributes in process `syz.7.7072'.
[  584.572241][ T5845] Bluetooth: hci1: command tx timeout
[  586.081591][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7089'.
[  586.114637][T22972] netlink: 'syz.7.7090': attribute type 10 has an invalid length.
[  586.148929][T22972] 8021q: adding VLAN 0 to HW filter on device team0
[  586.156536][T22972] bond0: (slave team0): Enslaving as an active interface with an up link
[  586.361260][T22989] netlink: 'syz.6.7102': attribute type 3 has an invalid length.
[  586.363994][T22989] netlink: 'syz.6.7102': attribute type 3 has an invalid length.
[  586.367916][T22989] netlink: 130500 bytes leftover after parsing attributes in process `syz.6.7102'.
[  586.455516][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7103'.
[  586.882831][ T5845] Bluetooth: hci1: command tx timeout
[  587.106083][T23013] netlink: 'syz.4.7105': attribute type 6 has an invalid length.
[  587.108531][T23013] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7105'.
[  590.141137][T23061] netlink: 'syz.4.7126': attribute type 29 has an invalid length.
[  590.187965][T23061] netlink: 'syz.4.7126': attribute type 10 has an invalid length.
[  590.278256][T23061] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.287647][T23061] team0: Port device bond0 added
[  590.495614][T23073] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.7132'.
[  590.634863][T23080] netlink: 'syz.7.7135': attribute type 10 has an invalid length.
[  590.637411][T23080] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7135'.
[  590.640257][T23080] batadv0: entered promiscuous mode
[  590.641934][T23080] batadv0: entered allmulticast mode
[  590.672325][T23080] bridge0: port 3(batadv0) entered blocking state
[  590.676315][T23080] bridge0: port 3(batadv0) entered disabled state
[  590.727681][T23080] bridge0: port 3(batadv0) entered blocking state
[  590.731473][T23080] bridge0: port 3(batadv0) entered forwarding state
[  590.790136][T23086] netlink: 'syz.4.7137': attribute type 3 has an invalid length.
[  590.792870][T23086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7137'.
[  590.917642][T23092] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7140'.
[  591.034321][ T5853] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  591.037318][ T5853] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  591.801546][T23150] netlink: 'syz.4.7168': attribute type 27 has an invalid length.
[  591.805417][T23150] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7168'.
[  591.862865][T23142] netlink: 'syz.7.7164': attribute type 12 has an invalid length.
[  591.866439][T23142] netlink: 14585 bytes leftover after parsing attributes in process `syz.7.7164'.
[  591.966489][T23158] netlink: 'syz.4.7172': attribute type 1 has an invalid length.
[  591.969942][T23158] netlink: 'syz.4.7172': attribute type 3 has an invalid length.
[  591.974545][T23158] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7172'.
[  592.432889][ T5845] Bluetooth: hci1: Malformed HCI Event: 0x22
[  592.924548][T23206] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.7195'.
[  594.488716][T23231] netlink: 'syz.4.7205': attribute type 2 has an invalid length.
[  594.661922][T23247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7210'.
[  594.666875][T23242] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7210'.
[  594.670275][T23247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7210'.
[  594.979167][T23257] netlink: 'syz.4.7216': attribute type 4 has an invalid length.
[  594.981780][T23257] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7216'.
[  595.477022][T23289] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.7231'.
[  595.719353][T23310] netlink: 'syz.6.7241': attribute type 2 has an invalid length.
[  595.721883][T23310] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.7241'.
[  596.296460][T23334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  597.149528][T23349] syzkaller0: entered promiscuous mode
[  597.161529][T23349] syzkaller0: entered allmulticast mode
[  597.597941][T23367] netlink: 212424 bytes leftover after parsing attributes in process `syz.7.7263'.
[  599.399932][T23401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7282'.
[  599.729583][T23427] netlink: 'syz.6.7294': attribute type 4 has an invalid length.
[  599.735736][T23427] netlink: 209028 bytes leftover after parsing attributes in process `syz.6.7294'.
[  599.877998][T23440] netlink: 180 bytes leftover after parsing attributes in process `syz.7.7301'.
[  599.923260][T23445] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7303'.
[  599.931534][T23447] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7304'.
[  599.947648][T23447] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7304'.
[  599.951037][T23447] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7304'.
[  600.047593][T23459] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7311'.
[  600.061252][T23461] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7310'.
[  600.364594][T23494] netlink: 'syz.4.7328': attribute type 39 has an invalid length.
[  600.377231][T23494] veth0_macvtap: left promiscuous mode
[  600.648978][T23510] netlink: 'syz.4.7334': attribute type 4 has an invalid length.
[  600.653176][T23510] netlink: 'syz.4.7334': attribute type 3 has an invalid length.
[  601.240860][T23548] C: renamed from team_slave_0 (while UP)
[  601.244926][T23548] netlink: 'syz.6.7352': attribute type 3 has an invalid length.
[  601.248295][T23548] netlink: 'syz.6.7352': attribute type 1 has an invalid length.
[  602.222126][T23596] netlink: 'syz.7.7373': attribute type 40 has an invalid length.
[  602.275890][T23596] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.914744][T23671] netlink: 'syz.7.7408': attribute type 13 has an invalid length.
[  603.917312][T23671] __nla_validate_parse: 2 callbacks suppressed
[  603.917322][T23671] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.7408'.
[  604.057988][T23686] netlink: 144 bytes leftover after parsing attributes in process `syz.7.7415'.
[  604.951436][T23696] netlink: 'syz.6.7419': attribute type 21 has an invalid length.
[  604.956532][T23696] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7419'.
[  604.988828][T23698] netlink: 15999 bytes leftover after parsing attributes in process `syz.7.7420'.
[  605.275050][ T5845] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  605.513757][T23730] netlink: 'syz.6.7435': attribute type 21 has an invalid length.
[  605.517056][T23730] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7435'.
[  605.567634][T23732] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7436'.
[  605.634415][T23734] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7437'.
[  605.637924][T23736] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7438'.
[  605.661872][T23734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  605.687269][T23734] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.724184][T23734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  605.727854][T23734] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.768791][T23734] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  605.773543][T23734] batman_adv: batadv0: Removing interface: hsr_slave_1
[  605.867570][T23734] bridge0: port 3(batadv0) entered disabled state
[  606.010678][T23734] bridge0: port 3(batadv0) entered disabled state
[  606.212218][T23752] netlink: 'syz.4.7446': attribute type 21 has an invalid length.
[  606.284170][T23760] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7450'.
[  606.405603][T23770] delete_channel: no stack
[  606.407513][T23770] delete_channel: no stack
[  606.611865][T23787] netlink: 'syz.7.7462': attribute type 25 has an invalid length.
[  606.749362][T23795] netlink: 'syz.7.7466': attribute type 13 has an invalid length.
[  606.768058][ T5845] Bluetooth: hci1: Malformed Event: 0x2f
[  606.825168][T23799] sock: sock_set_timeout: `syz.7.7468' (pid 23799) tries to set negative timeout
[  606.920827][T23805] mac80211_hwsim hwsim31 O3c: renamed from wlan1 (while UP)
[  607.404385][T23837] netlink: 'syz.6.7486': attribute type 8 has an invalid length.
[  607.416388][T23837] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  607.590478][T23830] veth1_to_bond: entered allmulticast mode
[  607.747354][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7493'.
[  608.794807][ T5845] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[  609.039717][T23899] __nla_validate_parse: 4 callbacks suppressed
[  609.039740][T23899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7514'.
[  609.195137][T23909] netlink: 'syz.7.7519': attribute type 10 has an invalid length.
[  609.198529][T23909] macvlan0: entered promiscuous mode
[  609.200242][T23909] macvlan0: entered allmulticast mode
[  609.207336][T23909] veth1_vlan: entered allmulticast mode
[  609.213051][T23909] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  609.285960][ T5845] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  609.289427][ T5845] Bluetooth: hci0: Injecting HCI hardware error event
[  609.295160][ T5845] Bluetooth: hci0: hardware error 0x00
[  609.533884][T23935] netlink: 'syz.6.7531': attribute type 21 has an invalid length.
[  609.706326][T23952] netlink: 'syz.6.7537': attribute type 21 has an invalid length.
[  609.821471][T23962] netlink: 'syz.7.7542': attribute type 1 has an invalid length.
[  611.372920][ T5845] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  613.256352][T24008] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7563'.
[  613.368391][T24021] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7566'.
[  613.635353][T24033] netlink: 'syz.7.7571': attribute type 10 has an invalid length.
[  613.728679][T24033] veth0_vlan: left allmulticast mode
[  613.764569][T24033] veth0_vlan: left promiscuous mode
[  613.767779][T24033] veth0_vlan: entered promiscuous mode
[  613.775556][T24033] team0: Device veth0_vlan failed to register rx_handler
[  613.928138][ T5845] Bluetooth: hci3: unknown advertising packet type: 0xc5
[  614.540594][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7589'.
[  614.548430][T24067] delete_channel: no stack
[  614.874575][T24097] netlink: 'syz.4.7604': attribute type 3 has an invalid length.
[  614.877749][T24097] netlink: 'syz.4.7604': attribute type 8 has an invalid length.
[  614.889664][T24097] netlink: 'syz.4.7604': attribute type 6 has an invalid length.
[  614.893524][T24097] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.7604'.
[  615.225625][T24113] syzkaller0: entered promiscuous mode
[  615.227387][T24113] syzkaller0: entered allmulticast mode
[  617.363022][T24169] netlink: 'syz.7.7635': attribute type 1 has an invalid length.
[  617.371025][T24169] netlink: 157116 bytes leftover after parsing attributes in process `syz.7.7635'.
[  617.694533][T24181] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7641'.
[  618.364486][T24231] syzkaller0: entered promiscuous mode
[  618.366817][T24231] syzkaller0: entered allmulticast mode
[  618.455875][T24241] netlink: 'syz.6.7656': attribute type 29 has an invalid length.
[  619.908010][T24241] netlink: 'syz.6.7656': attribute type 29 has an invalid length.
[  619.951585][T24250] netlink: 146936 bytes leftover after parsing attributes in process `syz.6.7659'.
[  619.957499][T24250] openvswitch: netlink: Message has 6 unknown bytes.
[  620.414705][T24294] netlink: 'syz.4.7674': attribute type 33 has an invalid length.
[  620.417381][T24294] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7674'.
[  620.587885][T24312] C: renamed from team_slave_0 (while UP)
[  620.595557][T24312] netlink: 'syz.7.7679': attribute type 4 has an invalid length.
[  620.598623][T24312] netlink: 116 bytes leftover after parsing attributes in process `syz.7.7679'.
[  620.607496][T24312] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  621.287398][T24339] netlink: 'syz.6.7692': attribute type 4 has an invalid length.
[  621.324784][T24341] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7693'.
[  621.367126][T24347] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.7696'.
[  621.398597][T24349] netlink: 'syz.7.7697': attribute type 3 has an invalid length.
[  621.401406][T24349] netlink: 'syz.7.7697': attribute type 1 has an invalid length.
[  621.407153][T24349] netlink: 116 bytes leftover after parsing attributes in process `syz.7.7697'.
[  621.709882][T24373] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7709'.
[  622.477025][T24404] netlink: 'syz.6.7724': attribute type 29 has an invalid length.
[  622.479929][T24404] netlink: 'syz.6.7724': attribute type 3 has an invalid length.
[  622.492422][T24404] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7724'.
[  622.508795][T24406] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7725'.
[  622.594472][T24414] netlink: 'syz.7.7729': attribute type 6 has an invalid length.
[  623.123532][T24446] netlink: 332 bytes leftover after parsing attributes in process `syz.6.7743'.
[  623.397422][T24458] Q6\bY4: renamed from lo (while UP)
[  623.874739][T24489] netlink: 'syz.7.7764': attribute type 21 has an invalid length.
[  624.006799][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  624.009424][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  625.049572][T24525] __nla_validate_parse: 3 callbacks suppressed
[  625.049585][T24525] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7781'.
[  625.057302][T24525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7781'.
[  625.093512][T24531] syzkaller1: tun_chr_ioctl cmd 1074025676
[  625.095558][T24531] syzkaller1: owner set to 778
[  625.118831][T24535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7785'.
[  625.204215][T24545] validate_nla: 2 callbacks suppressed
[  625.204235][T24545] netlink: 'syz.6.7791': attribute type 21 has an invalid length.
[  625.209503][T24545] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7791'.
[  626.327607][T24564] netlink: 'syz.6.7801': attribute type 29 has an invalid length.
[  626.331930][T24564] netlink: 'syz.6.7801': attribute type 29 has an invalid length.
[  626.337462][T24564] netlink: 'syz.6.7801': attribute type 29 has an invalid length.
[  626.397233][T24570] netlink: 'syz.6.7803': attribute type 1 has an invalid length.
[  626.579739][T24587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7811'.
[  626.684421][T24594] netlink: 'syz.4.7814': attribute type 29 has an invalid length.
[  626.707080][T24594] netlink: 'syz.4.7814': attribute type 29 has an invalid length.
[  626.947997][T24620] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.7826'.
[  627.304164][T24656] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.7842'.
[  627.379580][T24666] sit0: entered allmulticast mode
[  627.388503][T24666] sit0: entered promiscuous mode
[  628.225920][T24690] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.7858'.
[  628.430004][T24706] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.7865'.
[  628.471876][T24702] netlink: 'syz.7.7863': attribute type 10 has an invalid length.
[  628.487644][T24702] team0: Port device wlan1 added
[  628.826347][T24732] C: renamed from team_slave_0 (while UP)
[  628.830453][T24735] IPv6: NLM_F_CREATE should be specified when creating new route
[  628.835457][T24732] netlink: 'syz.4.7876': attribute type 1 has an invalid length.
[  628.838022][T24732] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7876'.
[  628.841165][T24732] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  628.985630][T24752] netlink: 'syz.4.7886': attribute type 13 has an invalid length.
[  629.121240][T24752] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.124690][T24752] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.260435][T24752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  629.279577][T24752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.405668][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.408670][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.412455][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.415683][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.397835][T24806] netlink: 137592 bytes leftover after parsing attributes in process `syz.7.7907'.
[  631.402513][T24806] nbd: must specify a size in bytes for the device
[  631.541046][T24813] netlink: 'syz.4.7911': attribute type 21 has an invalid length.
[  631.544197][T24813] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.7911'.
[  632.457185][T24837] netlink: 'syz.7.7923': attribute type 10 has an invalid length.
[  632.494662][T24839] netlink: 7 bytes leftover after parsing attributes in process `syz.7.7924'.
[  632.498618][T24839] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7924'.
[  632.628796][T24849] netlink: 'syz.6.7929': attribute type 49 has an invalid length.
[  633.479649][T24881] netlink: 'syz.7.7943': attribute type 1 has an invalid length.
[  633.492997][T24881] netlink: 16255 bytes leftover after parsing attributes in process `syz.7.7943'.
[  633.651876][T24886] netlink: 'syz.4.7945': attribute type 1 has an invalid length.
[  633.673352][T24893] netlink: 763 bytes leftover after parsing attributes in process `syz.7.7948'.
[  633.688981][T24886] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7945'.
[  633.827337][T24902] netlink: 'syz.7.7951': attribute type 29 has an invalid length.
[  633.834316][T24902] netlink: 'syz.7.7951': attribute type 29 has an invalid length.
[  634.111732][T24908] netlink: 'syz.7.7952': attribute type 10 has an invalid length.
[  634.150567][T24908] veth1_vlan: left allmulticast mode
[  634.910521][T24958] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7977'.
[  634.918760][T24958] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7977'.
[  634.928873][T24958] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7977'.
[  635.473767][T24986] infiniband syz1: set down
[  635.476193][T24986] infiniband syz1: added bond0
[  635.504297][T24986] RDS/IB: syz1: added
[  635.511141][T24986] smc: adding ib device syz1 with port count 1
[  635.517239][T24986] smc:    ib device syz1 port 1 has pnetid 
[  636.255713][T25030] netlink: 'syz.7.8008': attribute type 10 has an invalid length.
[  636.365562][T25030] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  636.371571][T25030] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  636.381318][T25030] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  636.594610][T25042] __nla_validate_parse: 2 callbacks suppressed
[  636.594690][T25042] netlink: 830 bytes leftover after parsing attributes in process `syz.6.8012'.
[  636.967037][T25054] netlink: 830 bytes leftover after parsing attributes in process `syz.7.8018'.
[  637.169001][T25058] syzkaller0: entered promiscuous mode
[  637.171544][T25058] syzkaller0: entered allmulticast mode
[  637.834698][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8030'.
[  637.841012][T25079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8030'.
[  638.058433][T25090] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8036'.
[  638.066300][T25090] netlink: 'syz.6.8036': attribute type 2 has an invalid length.
[  638.069968][T25090] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8036'.
[  638.113279][T25090] netlink: 'syz.6.8036': attribute type 2 has an invalid length.
[  638.116810][T25090] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8036'.
[  638.581859][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8038'.
[  638.745244][T25100] netlink: 'syz.6.8040': attribute type 2 has an invalid length.
[  638.748566][T25100] netlink: 'syz.6.8040': attribute type 3 has an invalid length.
[  638.751838][T25100] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8040'.
[  640.387924][T25149] netlink: 'syz.6.8060': attribute type 10 has an invalid length.
[  640.653480][T25149] .`: (slave ): Enslaving as an active interface with an up link
[  641.013292][T25153] netlink: 'syz.4.8062': attribute type 40 has an invalid length.
[  641.197416][T25168] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8069'.
[  641.314353][T25176] netlink: 'syz.7.8073': attribute type 19 has an invalid length.
[  641.775825][T25196] netlink: 'syz.6.8082': attribute type 10 has an invalid length.
[  641.779199][T25196] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8082'.
[  642.010026][T25215] netlink: 4068 bytes leftover after parsing attributes in process `syz.6.8091'.
[  642.309461][T25232] netlink: 'syz.6.8098': attribute type 27 has an invalid length.
[  642.316377][T25232] netlink: 'syz.6.8098': attribute type 3 has an invalid length.
[  642.319154][T25232] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8098'.
[  642.345843][T25234] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.8099'.
[  642.499259][T25244] netlink: 198328 bytes leftover after parsing attributes in process `syz.7.8104'.
[  643.400781][    C1] ==================================================================
[  643.403540][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  643.406436][    C1] Read of size 2 at addr ffff888106f5bbc2 by task syz.7.8123/25288
[  643.409785][    C1] 
[  643.411533][    C1] CPU: 1 UID: 0 PID: 25288 Comm: syz.7.8123 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  643.411554][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  643.411564][    C1] Call Trace:
[  643.411573][    C1]  <IRQ>
[  643.411581][    C1]  dump_stack_lvl+0x189/0x250
[  643.411595][    C1]  ? __kasan_check_byte+0x12/0x40
[  643.411608][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  643.411616][    C1]  ? lock_release+0x4b/0x3e0
[  643.411636][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  643.411655][    C1]  print_report+0xca/0x240
[  643.411668][    C1]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  643.411685][    C1]  kasan_report+0x118/0x150
[  643.411703][    C1]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  643.411714][    C1]  __xfrm_state_lookup+0x6ad/0x8d0
[  643.411725][    C1]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  643.411745][    C1]  xfrm_input_state_lookup+0x6e9/0xa60
[  643.411765][    C1]  ? xfrm_input_state_lookup+0xcf/0xa60
[  643.411782][    C1]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  643.411800][    C1]  ? __asan_memset+0x22/0x50
[  643.411816][    C1]  xfrm_input+0x425c/0x72c0
[  643.411845][    C1]  vti_input+0x219/0x330
[  643.411855][    C1]  ? __pfx_vti_input+0x10/0x10
[  643.411872][    C1]  tunnel4_rcv+0xdd/0x2d0
[  643.411889][    C1]  ? __pfx_tunnel4_rcv+0x10/0x10
[  643.411907][    C1]  ip_protocol_deliver_rcu+0x2e0/0x440
[  643.411923][    C1]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  643.411938][    C1]  ip_local_deliver_finish+0x3bb/0x6f0
[  643.411954][    C1]  NF_HOOK+0x30c/0x3a0
[  643.411962][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  643.411975][    C1]  ? NF_HOOK+0x9a/0x3a0
[  643.412016][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  643.412028][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  643.412044][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  643.412059][    C1]  ? skb_dst+0x4f/0xd0
[  643.412069][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  643.412080][    C1]  NF_HOOK+0x30c/0x3a0
[  643.412093][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  643.412107][    C1]  ? NF_HOOK+0x9a/0x3a0
[  643.412120][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  643.412132][    C1]  ? ip_rcv_core+0x7f7/0xd00
[  643.412146][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  643.412159][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  643.412167][    C1]  __netif_receive_skb+0x143/0x380
[  643.412190][    C1]  ? process_backlog+0x2d5/0x14f0
[  643.412205][    C1]  process_backlog+0x60e/0x14f0
[  643.412224][    C1]  ? __pfx_process_backlog+0x10/0x10
[  643.412239][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  643.412256][    C1]  __napi_poll+0xc7/0x360
[  643.412266][    C1]  ? net_rx_action+0x46d/0xe30
[  643.412274][    C1]  net_rx_action+0x707/0xe30
[  643.412282][    C1]  ? ktime_get+0x3e/0x1f0
[  643.412294][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  643.412301][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  643.412311][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  643.412325][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  643.412343][    C1]  handle_softirqs+0x286/0x870
[  643.412357][    C1]  ? do_softirq+0xec/0x180
[  643.412377][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  643.412393][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.412413][    C1]  do_softirq+0xec/0x180
[  643.412423][    C1]  </IRQ>
[  643.412426][    C1]  <TASK>
[  643.412430][    C1]  ? __pfx_do_softirq+0x10/0x10
[  643.412445][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  643.412464][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  643.412478][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  643.412493][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.412511][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.412528][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.412546][    C1]  __dev_queue_xmit+0x1d79/0x3b50
[  643.412563][    C1]  ? register_lock_class+0x51/0x320
[  643.412578][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.412601][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  643.412619][    C1]  ? read_seqbegin+0x122/0x250
[  643.412632][    C1]  ? neigh_connected_output+0x1ea/0x460
[  643.412646][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.412655][    C1]  ? read_seqbegin+0x1ac/0x250
[  643.412663][    C1]  ? __pfx_read_seqbegin+0x10/0x10
[  643.412680][    C1]  ? neigh_connected_output+0x3b6/0x460
[  643.412700][    C1]  ip_finish_output2+0xd40/0x1160
[  643.412722][    C1]  ? ip_finish_output2+0x452/0x1160
[  643.412741][    C1]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  643.412757][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  643.412769][    C1]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  643.412785][    C1]  ? ip_skb_dst_mtu+0x866/0xab0
[  643.412803][    C1]  ? ip_finish_output+0x33a/0x3f0
[  643.412822][    C1]  ? __ip_queue_xmit+0x63/0x1b00
[  643.412839][    C1]  __ip_queue_xmit+0x1106/0x1b00
[  643.412858][    C1]  ? __ip_queue_xmit+0x63/0x1b00
[  643.412869][    C1]  ? __pfx_ip_queue_xmit+0x10/0x10
[  643.412885][    C1]  __tcp_transmit_skb+0x2215/0x3680
[  643.412913][    C1]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  643.412935][    C1]  ? tcp_fastopen_cookie_check+0x2b6/0x470
[  643.412951][    C1]  tcp_connect+0x3068/0x4ef0
[  643.413002][    C1]  ? __pfx_tcp_connect+0x10/0x10
[  643.413025][    C1]  ? __asan_memset+0x22/0x50
[  643.413041][    C1]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  643.413062][    C1]  tcp_v4_connect+0x1110/0x1a00
[  643.413091][    C1]  ? __pfx_tcp_v4_connect+0x10/0x10
[  643.413112][    C1]  __inet_stream_connect+0x2ae/0xe80
[  643.413131][    C1]  ? __pfx___inet_stream_connect+0x10/0x10
[  643.413149][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  643.413171][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  643.413189][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  643.413211][    C1]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  643.413234][    C1]  tcp_sendmsg_locked+0x4d9b/0x5620
[  643.413249][    C1]  ? __lock_acquire+0xab9/0xd20
[  643.413265][    C1]  ? tcp_sendmsg_locked+0x541/0x5620
[  643.413285][    C1]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  643.413311][    C1]  ? __lock_acquire+0xab9/0xd20
[  643.413334][    C1]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  643.413352][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  643.413366][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  643.413383][    C1]  tcp_sendmsg+0x2f/0x50
[  643.413402][    C1]  __sock_sendmsg+0x19c/0x270
[  643.413425][    C1]  ____sys_sendmsg+0x505/0x830
[  643.413443][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  643.413464][    C1]  ? import_iovec+0x74/0xa0
[  643.413484][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  643.413498][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  643.413523][    C1]  ? __fget_files+0x2a/0x420
[  643.413542][    C1]  ? __fget_files+0x3a0/0x420
[  643.413565][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  643.413581][    C1]  ? clockevents_program_event+0x24d/0x360
[  643.413600][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  643.413621][    C1]  ? do_syscall_64+0xbe/0x3b0
[  643.413633][    C1]  do_syscall_64+0xfa/0x3b0
[  643.413648][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.413662][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  643.413679][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.413693][    C1] RIP: 0033:0x7f587f38ebe9
[  643.413707][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  643.413720][    C1] RSP: 002b:00007f58801d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  643.413737][    C1] RAX: ffffffffffffffda RBX: 00007f587f5b6090 RCX: 00007f587f38ebe9
[  643.413747][    C1] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000009
[  643.413754][    C1] RBP: 00007f587f411e19 R08: 0000000000000000 R09: 0000000000000000
[  643.413759][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  643.413767][    C1] R13: 00007f587f5b6128 R14: 00007f587f5b6090 R15: 00007ffe9237e4d8
[  643.413783][    C1]  </TASK>
[  643.413788][    C1] 
[  643.667670][    C1] Allocated by task 23997:
[  643.669078][    C1]  kasan_save_track+0x3e/0x80
[  643.670555][    C1]  __kasan_slab_alloc+0x6c/0x80
[  643.672075][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  643.673753][    C1]  xfrm_state_alloc+0x24/0x2f0
[  643.675242][    C1]  __find_acq_core+0x8a7/0x1c00
[  643.676829][    C1]  xfrm_find_acq+0x78/0xa0
[  643.678449][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  643.680172][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  643.681709][    C1]  netlink_rcv_skb+0x208/0x470
[  643.683229][    C1]  xfrm_netlink_rcv+0x79/0x90
[  643.684702][    C1]  netlink_unicast+0x82f/0x9e0
[  643.686162][    C1]  netlink_sendmsg+0x805/0xb30
[  643.687738][    C1]  __sock_sendmsg+0x21c/0x270
[  643.689190][    C1]  ____sys_sendmsg+0x505/0x830
[  643.690733][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  643.692200][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  643.693751][    C1]  do_syscall_64+0xfa/0x3b0
[  643.695197][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.697137][    C1] 
[  643.698051][    C1] Freed by task 20285:
[  643.699508][    C1]  kasan_save_track+0x3e/0x80
[  643.700995][    C1]  kasan_save_free_info+0x46/0x50
[  643.702564][    C1]  __kasan_slab_free+0x62/0x70
[  643.704073][    C1]  kmem_cache_free+0x18f/0x400
[  643.705529][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  643.707078][    C1]  process_scheduled_works+0xae1/0x17b0
[  643.708892][    C1]  worker_thread+0x8a0/0xda0
[  643.710333][    C1]  kthread+0x711/0x8a0
[  643.711629][    C1]  ret_from_fork+0x3fc/0x770
[  643.713193][    C1]  ret_from_fork_asm+0x1a/0x30
[  643.714654][    C1] 
[  643.715409][    C1] The buggy address belongs to the object at ffff888106f5ba80
[  643.715409][    C1]  which belongs to the cache xfrm_state of size 928
[  643.720240][    C1] The buggy address is located 322 bytes inside of
[  643.720240][    C1]  freed 928-byte region [ffff888106f5ba80, ffff888106f5be20)
[  643.725000][    C1] 
[  643.725766][    C1] The buggy address belongs to the physical page:
[  643.727829][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888106f5b600 pfn:0x106f58
[  643.730975][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  643.733655][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  643.736020][    C1] page_type: f5(slab)
[  643.737298][    C1] raw: 057ff00000000040 ffff88801af15640 dead000000000122 0000000000000000
[  643.740501][    C1] raw: ffff888106f5b600 00000000800e000d 00000000f5000000 0000000000000000
[  643.743928][    C1] head: 057ff00000000040 ffff88801af15640 dead000000000122 0000000000000000
[  643.747221][    C1] head: ffff888106f5b600 00000000800e000d 00000000f5000000 0000000000000000
[  643.750695][    C1] head: 057ff00000000002 ffffea00041bd601 00000000ffffffff 00000000ffffffff
[  643.753768][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  643.756494][    C1] page dumped because: kasan: bad access detected
[  643.758486][    C1] page_owner tracks the page as allocated
[  643.760355][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6256, tgid 6255 (syz.2.156), ts 69303069155, free_ts 58303235592
[  643.766681][    C1]  post_alloc_hook+0x240/0x2a0
[  643.768205][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  643.769905][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  643.771968][    C1]  alloc_pages_mpol+0x232/0x4a0
[  643.773972][    C1]  allocate_slab+0x8a/0x370
[  643.775819][    C1]  ___slab_alloc+0xbeb/0x1410
[  643.777740][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  643.780102][    C1]  xfrm_state_alloc+0x24/0x2f0
[  643.782077][    C1]  xfrm_add_acquire+0xf7/0xb20
[  643.784047][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  643.786058][    C1]  netlink_rcv_skb+0x208/0x470
[  643.788051][    C1]  xfrm_netlink_rcv+0x79/0x90
[  643.789905][    C1]  netlink_unicast+0x82f/0x9e0
[  643.791838][    C1]  netlink_sendmsg+0x805/0xb30
[  643.793776][    C1]  __sock_sendmsg+0x21c/0x270
[  643.795676][    C1]  ____sys_sendmsg+0x505/0x830
[  643.797581][    C1] page last free pid 5839 tgid 5839 stack trace:
[  643.800152][    C1]  __free_frozen_pages+0xbc4/0xd30
[  643.802203][    C1]  __slab_free+0x303/0x3c0
[  643.804018][    C1]  qlist_free_all+0x97/0x140
[  643.805885][    C1]  kasan_quarantine_reduce+0x148/0x160
[  643.808140][    C1]  __kasan_slab_alloc+0x22/0x80
[  643.810081][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  643.812295][    C1]  getname_flags+0xb8/0x540
[  643.814158][    C1]  do_sys_openat2+0xbc/0x1c0
[  643.816044][    C1]  __x64_sys_openat+0x138/0x170
[  643.817992][    C1]  do_syscall_64+0xfa/0x3b0
[  643.819827][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.822231][    C1] 
[  643.823230][    C1] Memory state around the buggy address:
[  643.825499][    C1]  ffff888106f5ba80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  643.828716][    C1]  ffff888106f5bb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  643.831920][    C1] >ffff888106f5bb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  643.835143][    C1]                                            ^
[  643.837526][    C1]  ffff888106f5bc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  643.840749][    C1]  ffff888106f5bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  643.843982][    C1] ==================================================================
[  643.847614][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  643.850553][    C1] CPU: 1 UID: 0 PID: 25288 Comm: syz.7.8123 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  643.855324][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  643.859346][    C1] Call Trace:
[  643.860734][    C1]  <IRQ>
[  643.861906][    C1]  dump_stack_lvl+0x99/0x250
[  643.863794][    C1]  ? __asan_memcpy+0x40/0x70
[  643.865559][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  643.867274][    C1]  ? __pfx__printk+0x10/0x10
[  643.869044][    C1]  vpanic+0x27a/0x730
[  643.870666][    C1]  ? __pfx_vpanic+0x10/0x10
[  643.872530][    C1]  ? irqentry_exit+0x74/0x90
[  643.874409][    C1]  panic+0xb9/0xc0
[  643.875966][    C1]  ? __pfx_panic+0x10/0x10
[  643.877444][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  643.879535][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  643.881931][    C1]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  643.884099][    C1]  check_panic_on_warn+0x89/0xb0
[  643.886097][    C1]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  643.888261][    C1]  end_report+0x78/0x160
[  643.890012][    C1]  kasan_report+0x129/0x150
[  643.891894][    C1]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  643.894050][    C1]  __xfrm_state_lookup+0x6ad/0x8d0
[  643.896130][    C1]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  643.898378][    C1]  xfrm_input_state_lookup+0x6e9/0xa60
[  643.900577][    C1]  ? xfrm_input_state_lookup+0xcf/0xa60
[  643.902817][    C1]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  643.905213][    C1]  ? __asan_memset+0x22/0x50
[  643.907103][    C1]  xfrm_input+0x425c/0x72c0
[  643.909147][    C1]  vti_input+0x219/0x330
[  643.910879][    C1]  ? __pfx_vti_input+0x10/0x10
[  643.912841][    C1]  tunnel4_rcv+0xdd/0x2d0
[  643.914619][    C1]  ? __pfx_tunnel4_rcv+0x10/0x10
[  643.916526][    C1]  ip_protocol_deliver_rcu+0x2e0/0x440
[  643.918628][    C1]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  643.920802][    C1]  ip_local_deliver_finish+0x3bb/0x6f0
[  643.922990][    C1]  NF_HOOK+0x30c/0x3a0
[  643.924663][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  643.927159][    C1]  ? NF_HOOK+0x9a/0x3a0
[  643.928857][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  643.930742][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  643.932892][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  643.935311][    C1]  ? skb_dst+0x4f/0xd0
[  643.936775][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  643.938448][    C1]  NF_HOOK+0x30c/0x3a0
[  643.940045][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  643.942100][    C1]  ? NF_HOOK+0x9a/0x3a0
[  643.943769][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  643.945456][    C1]  ? ip_rcv_core+0x7f7/0xd00
[  643.947380][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  643.949442][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  643.951300][    C1]  __netif_receive_skb+0x143/0x380
[  643.953352][    C1]  ? process_backlog+0x2d5/0x14f0
[  643.955431][    C1]  process_backlog+0x60e/0x14f0
[  643.957409][    C1]  ? __pfx_process_backlog+0x10/0x10
[  643.959589][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  643.962016][    C1]  __napi_poll+0xc7/0x360
[  643.963747][    C1]  ? net_rx_action+0x46d/0xe30
[  643.965640][    C1]  net_rx_action+0x707/0xe30
[  643.967158][    C1]  ? ktime_get+0x3e/0x1f0
[  643.968654][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  643.970369][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  643.972448][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  643.974212][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  643.975890][    C1]  handle_softirqs+0x286/0x870
[  643.977484][    C1]  ? do_softirq+0xec/0x180
[  643.979023][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  643.981096][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.983150][    C1]  do_softirq+0xec/0x180
[  643.984811][    C1]  </IRQ>
[  643.985998][    C1]  <TASK>
[  643.987212][    C1]  ? __pfx_do_softirq+0x10/0x10
[  643.989164][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  643.991264][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  643.993155][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  643.995017][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.996643][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  643.998306][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  644.000186][    C1]  __dev_queue_xmit+0x1d79/0x3b50
[  644.002217][    C1]  ? register_lock_class+0x51/0x320
[  644.004297][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  644.006086][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  644.007822][    C1]  ? read_seqbegin+0x122/0x250
[  644.009400][    C1]  ? neigh_connected_output+0x1ea/0x460
[  644.011592][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  644.013690][    C1]  ? read_seqbegin+0x1ac/0x250
[  644.015443][    C1]  ? __pfx_read_seqbegin+0x10/0x10
[  644.017129][    C1]  ? neigh_connected_output+0x3b6/0x460
[  644.019035][    C1]  ip_finish_output2+0xd40/0x1160
[  644.021070][    C1]  ? ip_finish_output2+0x452/0x1160
[  644.023162][    C1]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  644.024851][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  644.026702][    C1]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  644.028294][    C1]  ? ip_skb_dst_mtu+0x866/0xab0
[  644.030192][    C1]  ? ip_finish_output+0x33a/0x3f0
[  644.032207][    C1]  ? __ip_queue_xmit+0x63/0x1b00
[  644.034239][    C1]  __ip_queue_xmit+0x1106/0x1b00
[  644.036114][    C1]  ? __ip_queue_xmit+0x63/0x1b00
[  644.037722][    C1]  ? __pfx_ip_queue_xmit+0x10/0x10
[  644.039565][    C1]  __tcp_transmit_skb+0x2215/0x3680
[  644.041662][    C1]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  644.043899][    C1]  ? tcp_fastopen_cookie_check+0x2b6/0x470
[  644.046244][    C1]  tcp_connect+0x3068/0x4ef0
[  644.048164][    C1]  ? __pfx_tcp_connect+0x10/0x10
[  644.050184][    C1]  ? __asan_memset+0x22/0x50
[  644.052082][    C1]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  644.054535][    C1]  tcp_v4_connect+0x1110/0x1a00
[  644.056515][    C1]  ? __pfx_tcp_v4_connect+0x10/0x10
[  644.058593][    C1]  __inet_stream_connect+0x2ae/0xe80
[  644.060708][    C1]  ? __pfx___inet_stream_connect+0x10/0x10
[  644.063059][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  644.065206][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  644.066994][    C1]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  644.069083][    C1]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  644.071218][    C1]  tcp_sendmsg_locked+0x4d9b/0x5620
[  644.073024][    C1]  ? __lock_acquire+0xab9/0xd20
[  644.074524][    C1]  ? tcp_sendmsg_locked+0x541/0x5620
[  644.076186][    C1]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  644.077857][    C1]  ? __lock_acquire+0xab9/0xd20
[  644.079529][    C1]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  644.081768][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  644.083946][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  644.085808][    C1]  tcp_sendmsg+0x2f/0x50
[  644.087323][    C1]  __sock_sendmsg+0x19c/0x270
[  644.088871][    C1]  ____sys_sendmsg+0x505/0x830
[  644.090356][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  644.091901][    C1]  ? import_iovec+0x74/0xa0
[  644.093392][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  644.094994][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  644.097030][    C1]  ? __fget_files+0x2a/0x420
[  644.098871][    C1]  ? __fget_files+0x3a0/0x420
[  644.100770][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  644.102785][    C1]  ? clockevents_program_event+0x24d/0x360
[  644.104941][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  644.106756][    C1]  ? do_syscall_64+0xbe/0x3b0
[  644.108308][    C1]  do_syscall_64+0xfa/0x3b0
[  644.109807][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.111931][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  644.114259][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.116279][    C1] RIP: 0033:0x7f587f38ebe9
[  644.117722][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  644.124851][    C1] RSP: 002b:00007f58801d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.127699][    C1] RAX: ffffffffffffffda RBX: 00007f587f5b6090 RCX: 00007f587f38ebe9
[  644.130398][    C1] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000009
[  644.133047][    C1] RBP: 00007f587f411e19 R08: 0000000000000000 R09: 0000000000000000
[  644.135695][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.138272][    C1] R13: 00007f587f5b6128 R14: 00007f587f5b6090 R15: 00007ffe9237e4d8
[  644.141290][    C1]  </TASK>
[  644.143269][    C1] Kernel Offset: disabled
[  644.145041][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:50:56  Registers:
info registers vcpu 0

CPU#0
RAX=cedfce94ccda6900 RBX=ffffffff819680b8 RCX=cedfce94ccda6900 RDX=0000000000000001
RSI=ffffffff8d9b1620 RDI=ffffffff8be2fd00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa32430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b775bb3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b862a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=0000000126ee6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f4a44012ee7 XMM09=0000000000000000 00007f4a44012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfc70
R8 =ffff888108208237 R9 =1ffff11021041046 R10=dffffc0000000000 R11=ffffffff854d32b0
R12=dffffc0000000000 R13=ffffffff99aeb8f7 R14=ffffffff99df0440 R15=0000000000000000
RIP=ffffffff854d332c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58801d66c0 ffffffff 00c00000
GS =0000 ffff8881a3c2a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003adb4000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f587f587498 00007f587f587470 XMM03=00007f587f5874a8 00007f587f5874a0
XMM04=00007f58800ed100 00007f587f587460 XMM05=00007f587f587478 00007f587f5874c0
XMM06=00007f587f5874b8 00007f587f5874b0 XMM07=00007f587f5874a8 00007f587f5874a0
XMM08=0000000000000000 00007f587f412ee7 XMM09=0000000000000000 00007f587f412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
