last executing test programs:

4m5.391894441s ago: executing program 1 (id=784):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10)

4m5.272032847s ago: executing program 1 (id=785):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x7c}}, 0x0)

4m5.271432629s ago: executing program 1 (id=786):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x3, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", ""]}, 0x10}}, 0x20008080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x80}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0xd2, &(0x7f0000000240)=""/210, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x4, 0xe9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0x1], 0x0, 0x10, 0xa42}, 0x94)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x14}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x480d1)
sendmsg$sock(r7, &(0x7f0000000b40)={&(0x7f0000000540)=@isdn={0x22, 0x3, 0x1, 0x9, 0xa}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)="903f2e6fdf65e7687285fac02e839f8738dd80dc93554ab7a02b696f022d4928337e435c6faf72583a87ffcc7fc2cb7907a0446e3d1fd26463f6c39c17d8c55e38df9c27f737e2b0098bc6d3a0fd0a59a6795f828a6ce1e48f3ea147720d8ebf4d087cdc0503b66355f09ea793d51461ad6cdcbb5f817829628cc5a59ee37ab17c72df129a2d374687672720975baa1d3760c1499c93efd636662d6f580168f9434de4ebca098524e60fc6a0fd73c03ac0ed993b77d2f30a897e2d259ad23cb8e1f5e526a0c760e9af6f81763651678edfecb9dd4c70836e89206bc5efec5bbdc455e883a5ce", 0xe6}, {&(0x7f0000000780)}, {&(0x7f0000000000)="441df99171de668764931eea9b1baa51d39c74efa4c4a8a64f533916bc44e9d9109b6f3293bf06756b7dc0795bdc9e2d5491db1f88fc", 0x36}, {&(0x7f0000000880)="a5b4160a2188a53a8fe75474c70827521e3bf2ee33817e009f2732b3655bf41ac40d90527ecdef2d919acec610dfb8351ccb8c262dfed5f828f8950b8e7019da6e0184d2996009375a098f03901958c7d3a408f61439614591a59adae501b2df14313310af8dfb917959556aab4726a8d237ed5637881fdf4a57500ae73940e7663f53712253c4c7d3e0bf382ddbcda9168bb5bb371cd61cad46d32d893c03a1784751077b49df4f05788d93da3f9b2a0fdf0a143aa52bbc810502962f3ed484d549605fec643b9860dd5ab8f5ac993cbb", 0xd1}, {&(0x7f0000000980)="1a03ff799201e55b7a648b6e735abfe80edbe411c036b06776b7b22fcd815eb18f80a1bb058096d25b1ff024dafe36afad432c0c414ab86bf97f6dd7f2107905f77d456990786afa43260e18e508b05d24941e1ca36ea0330f7b4f81c53e58285003d7be29d27d37e6b617a9c0520d44888141311346660d7a3c41b7003285b2a610a24ce6c37f", 0x87}], 0x5, &(0x7f0000000ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}, 0x8810)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)

4m4.824267375s ago: executing program 2 (id=788):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)

4m4.756938716s ago: executing program 1 (id=789):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84}, 0x38)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0xf}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0xf, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xaba}, 0x0, 0x1, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000094000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e08000007", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x100)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfe33)
socket$kcm(0x10, 0x7, 0x0)

4m4.744056957s ago: executing program 2 (id=790):
r0 = socket$kcm(0x23, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))

4m4.669863765s ago: executing program 2 (id=792):
r0 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x0)

4m4.603967668s ago: executing program 2 (id=793):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0)

4m4.533971079s ago: executing program 2 (id=794):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000003c0)="c5", 0x1}, {0x0}], 0x2}, 0x4040)

4m4.464271524s ago: executing program 1 (id=795):
r0 = socket$kcm(0xa, 0x3, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x40)
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d34, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8000000, 0xa9, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06010000", 0x54}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000001, 0x400}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x9, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

4m4.233829513s ago: executing program 2 (id=796):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4m4.101572586s ago: executing program 32 (id=796):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4m4.054000924s ago: executing program 1 (id=798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7400000002060500000000000000000005000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000280007801800028014000240000000000000000000000000000000010c0001800800010000001c0205000500020000000500010006"], 0x74}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

4m4.053916755s ago: executing program 33 (id=798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7400000002060500000000000000000005000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000280007801800028014000240000000000000000000000000000000010c0001800800010000001c0205000500020000000500010006"], 0x74}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

3m25.837015374s ago: executing program 0 (id=1203):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

3m25.784736942s ago: executing program 0 (id=1204):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)="2ad0", 0x2}, {&(0x7f0000000540)="e8e3ab", 0x3}, {&(0x7f0000000580)="23972c9a", 0x4}], 0x3}, 0x4004000)

3m25.690257101s ago: executing program 0 (id=1205):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002b000b002000000000000000040000000800030004000100080001"], 0x24}}, 0x8000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x2d, 0x9, 0x70bd2a, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42044}, 0x84)

3m24.23845382s ago: executing program 0 (id=1216):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='kfree\x00', r0, 0x0, 0x400000000000000}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)

3m23.981999986s ago: executing program 0 (id=1217):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

3m23.688575598s ago: executing program 0 (id=1221):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810)
setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000040), 0x19)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, 0x0)
socket$phonet(0x23, 0x2, 0x1)

3m8.680996497s ago: executing program 34 (id=1221):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810)
setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000040), 0x19)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, 0x0)
socket$phonet(0x23, 0x2, 0x1)

1m45.669446881s ago: executing program 4 (id=2430):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081", 0x7}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20)

1m45.668828719s ago: executing program 4 (id=2432):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5e, 0x2d16}, 0x0, 0x0, 0x0, 0x8, 0x75d, 0x7fffffff, 0x0, 0x0, 0xc6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000000000000018000000000000008400000005"], 0x38}, 0x41)

1m45.598600399s ago: executing program 4 (id=2435):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))

1m45.459163999s ago: executing program 4 (id=2437):
r0 = socket$kcm(0x23, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x12165)

1m45.367876486s ago: executing program 4 (id=2439):
socket$kcm(0x28, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1946}, 0x400, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xb3)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x1ed9, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x40040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socket$igmp6(0xa, 0x3, 0x2)

1m45.196697799s ago: executing program 4 (id=2442):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="e000230c1100"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

1m30.0211312s ago: executing program 35 (id=2442):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="e000230c1100"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

52.811500079s ago: executing program 6 (id=3299):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

52.661009682s ago: executing program 6 (id=3300):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)

52.591518172s ago: executing program 6 (id=3301):
socketpair(0x22, 0x80008, 0x4, &(0x7f0000000100))

52.589917756s ago: executing program 6 (id=3302):
bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38)

52.501499396s ago: executing program 6 (id=3303):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

51.195432009s ago: executing program 6 (id=3313):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402, 0x3, 0x0, 0x0, 0x400, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000079000000010001"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

36.138850488s ago: executing program 36 (id=3313):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402, 0x3, 0x0, 0x0, 0x400, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000079000000010001"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

911.181045ms ago: executing program 3 (id=4028):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b1, &(0x7f0000001580)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\b\x00\x00\x00\x00\x00\x00\x00\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y\xffE8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00R\xad\xd5O\xab\xed~f\xa4BY\xdd\x9f\xe54\x90\xef~D)oQ\xd6\x01R\xe2\x17W\xaf\xb4B\x0f\x034H\xc9;\v\x01a~\t\xe6_\x04\xdf\xe6')

910.258146ms ago: executing program 3 (id=4030):
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x4, 0xbe, 0xd, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))

880.115485ms ago: executing program 5 (id=4031):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
close(r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24004880)
ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random})
socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[], 0x20)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)

715.723682ms ago: executing program 5 (id=4034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x21, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

624.129998ms ago: executing program 5 (id=4035):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9ff0307680406", 0x0, 0x7fc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x105}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

623.886803ms ago: executing program 3 (id=4036):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f086dd6fe7f9c764", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

552.234365ms ago: executing program 7 (id=4037):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000440), 0x0}, 0x20)

551.658244ms ago: executing program 3 (id=4038):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x4300, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, 0x0, 0x32}, 0x28)

551.328484ms ago: executing program 7 (id=4039):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x90}}, 0x0)

489.17762ms ago: executing program 7 (id=4040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x40050)

488.562876ms ago: executing program 5 (id=4041):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x520}}, 0x0)

488.297689ms ago: executing program 3 (id=4042):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0xff00)
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x8, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

440.782473ms ago: executing program 7 (id=4043):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000800009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x200, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x0, 0x27, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000d62c005401000000000000005aa7b755cbdbeb0300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3db00f6b8267e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f01000e97", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a0001", 0x37}], 0x1}, 0x20000880)
r6 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x69, 0x3}, 0x0, 0xca, 0x200000, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="02000a"], 0x9a)

440.429577ms ago: executing program 5 (id=4044):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc730, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x11034, 0x80, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x7, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0xa, 0x6}, {0x7, 0xb}}}, 0x24}}, 0x20000011)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0)
close(r4)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000200)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[], 0x50)
socketpair(0x1, 0x1, 0x0, 0x0)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

291.147214ms ago: executing program 7 (id=4045):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000240001002abd7000fedbdf254400000020000e801c"], 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

290.612441ms ago: executing program 3 (id=4046):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffff7fffffff}, 0x0, 0xca, 0x6, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x77, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x23, 0x2, 0x0)
socket$kcm(0x23, 0x5, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

290.285068ms ago: executing program 7 (id=4047):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)

0s ago: executing program 5 (id=4048):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socket(0x1d, 0x2, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

kernel console output (not intermixed with test programs):

e
[  126.542723][   T13] bridge_slave_1: left promiscuous mode
[  126.548164][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.555192][   T13] bridge_slave_0: left allmulticast mode
[  126.557008][   T13] bridge_slave_0: left promiscuous mode
[  126.558874][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.632268][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.642904][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.652837][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.657342][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.663117][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.872365][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.877272][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.883250][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  126.888562][   T13] bond0 (unregistering): Released all slaves
[  126.936969][ T5913] wg0 speed is unknown, defaulting to 1000
[  126.941504][ T5913] syz0: Port: 1 Link DOWN
[  126.975247][ T7836] wg0 speed is unknown, defaulting to 1000
[  127.176710][   T13] hsr_slave_0: left promiscuous mode
[  127.182200][   T13] hsr_slave_1: left promiscuous mode
[  127.188543][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.193388][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.197641][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.199989][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.203685][   T13] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  127.208507][   T13] batman_adv: batadv0: Removing interface: virt_wifi0
[  127.217933][   T13] veth1_macvtap: left promiscuous mode
[  127.220072][   T13] veth0_macvtap: left promiscuous mode
[  127.222722][   T13] veth1_vlan: left promiscuous mode
[  127.536408][   T13] team0 (unregistering): Port device team_slave_1 removed
[  127.565528][   T13] team0 (unregistering): Port device team_slave_0 removed
[  127.794248][ T5854] Bluetooth: hci0: command tx timeout
[  127.883123][ T7854] syzkaller0: entered promiscuous mode
[  127.885038][ T7854] syzkaller0: entered allmulticast mode
[  127.971995][ T7798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.989557][ T7798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  128.744649][ T5854] Bluetooth: hci1: command tx timeout
[  128.853030][ T7798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  128.861627][ T7836] chnl_net:caif_netlink_parms(): no params data found
[  128.869635][ T7798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  128.981142][ T7873] netlink: 'syz.0.808': attribute type 11 has an invalid length.
[  128.987916][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.990922][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.995845][ T7836] bridge_slave_0: entered allmulticast mode
[  128.999764][ T7836] bridge_slave_0: entered promiscuous mode
[  129.011907][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.015594][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.019700][ T7836] bridge_slave_1: entered allmulticast mode
[  129.030627][ T7836] bridge_slave_1: entered promiscuous mode
[  129.079900][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.095318][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.129529][ T7878] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  129.148257][ T7836] team0: Port device team_slave_0 added
[  129.152015][ T7836] team0: Port device team_slave_1 added
[  129.189060][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.218779][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.221487][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.240172][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.252187][ T7798] 8021q: adding VLAN 0 to HW filter on device team0
[  129.255175][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.257621][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.267258][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.277343][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.280157][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.289867][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.292674][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.357338][ T7836] hsr_slave_0: entered promiscuous mode
[  129.359704][ T7836] hsr_slave_1: entered promiscuous mode
[  129.361626][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  129.365890][ T7836] debugfs: 'hsr0' already exists in 'hsr'
[  129.368255][ T7836] Cannot create hsr debugfs directory
[  129.623451][ T7836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  129.646184][ T7836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  129.653648][ T7836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  129.667049][ T7836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  129.711552][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.806779][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.828369][ T7836] 8021q: adding VLAN 0 to HW filter on device team0
[  129.839502][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.842213][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.864455][ T5854] Bluetooth: hci0: command tx timeout
[  129.868376][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.870688][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.942343][ T7836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.982418][ T7798] veth0_vlan: entered promiscuous mode
[  129.991506][ T7798] veth1_vlan: entered promiscuous mode
[  130.019791][ T7798] veth0_macvtap: entered promiscuous mode
[  130.029540][ T7798] veth1_macvtap: entered promiscuous mode
[  130.055233][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.063054][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.078961][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.081789][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.097517][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.106038][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.204580][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.207026][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.213515][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.258631][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.262697][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.305712][ T7836] veth0_vlan: entered promiscuous mode
[  130.318689][ T7836] veth1_vlan: entered promiscuous mode
[  130.342040][ T7836] veth0_macvtap: entered promiscuous mode
[  130.350292][ T7836] veth1_macvtap: entered promiscuous mode
[  130.379234][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.388520][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.419431][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.422777][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.440750][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.443538][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.521054][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.525800][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.556359][ T7952] netlink: 'syz.0.822': attribute type 13 has an invalid length.
[  130.624983][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.628393][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.838643][ T5854] Bluetooth: hci1: command tx timeout
[  131.979133][ T5854] Bluetooth: hci0: command tx timeout
[  132.444782][ T8021] netlink: 'syz.3.837': attribute type 11 has an invalid length.
[  132.447492][ T8021] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.837'.
[  132.563197][ T8020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.670219][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.672203][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.904395][ T5854] Bluetooth: hci1: command tx timeout
[  133.565933][ T8095] netlink: 'syz.0.859': attribute type 1 has an invalid length.
[  133.568786][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  133.585207][ T8095] netlink: 'syz.0.859': attribute type 16 has an invalid length.
[  133.588200][ T8095] netlink: 'syz.0.859': attribute type 17 has an invalid length.
[  133.712424][ T8106] netlink: 188 bytes leftover after parsing attributes in process `syz.3.862'.
[  133.948131][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.958793][ T8095] 8021q: adding VLAN 0 to HW filter on device team0
[  133.991240][ T8095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.024085][ T5854] Bluetooth: hci0: command tx timeout
[  134.068647][ T8095] syz.0.859 (8095) used greatest stack depth: 18040 bytes left
[  134.668170][ T5854] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  134.891001][ T8170] netlink: 'syz.0.883': attribute type 15 has an invalid length.
[  134.897170][ T8170] netlink: 'syz.0.883': attribute type 7 has an invalid length.
[  134.899726][ T8170] netlink: 52 bytes leftover after parsing attributes in process `syz.0.883'.
[  134.973681][ T8176] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.886'.
[  134.985619][ T5854] Bluetooth: hci1: command tx timeout
[  135.256241][ T8199] netlink: 'syz.3.896': attribute type 2 has an invalid length.
[  135.543093][ T5854] Bluetooth: hci0: Malformed Event: 0x13
[  136.517626][ T8230] netlink: 'syz.0.909': attribute type 19 has an invalid length.
[  136.638317][ T8239] netlink: 'syz.4.914': attribute type 10 has an invalid length.
[  136.662637][ T8239] batman_adv: batadv0: Adding interface: team0
[  136.668688][ T8239] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.676842][ T8239] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  136.886641][ T8249] netlink: 104 bytes leftover after parsing attributes in process `syz.3.918'.
[  137.017706][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'.
[  137.223068][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  137.598015][ T8271] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  138.279170][ T8292] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.934'.
[  138.481002][ T8305] netlink: 'syz.0.940': attribute type 6 has an invalid length.
[  138.642479][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'.
[  138.646652][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'.
[  138.668865][ T8319] netlink: 'syz.0.947': attribute type 21 has an invalid length.
[  138.671877][ T8319] netlink: 'syz.0.947': attribute type 4 has an invalid length.
[  138.678505][ T8319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.947'.
[  138.857708][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  138.906148][ T8332] netlink: 132 bytes leftover after parsing attributes in process `syz.4.952'.
[  138.990940][ T8338] delete_channel: no stack
[  139.339305][ T8367] netlink: 'syz.0.963': attribute type 17 has an invalid length.
[  139.342154][ T8367] netlink: 'syz.0.963': attribute type 16 has an invalid length.
[  139.346960][ T8367] netlink: 152 bytes leftover after parsing attributes in process `syz.0.963'.
[  139.347938][ T8370] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.966'.
[  140.009947][ T8394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.378562][ T8409] netlink: 56 bytes leftover after parsing attributes in process `syz.4.980'.
[  140.417409][ T8408] netlink: 'syz.3.979': attribute type 1 has an invalid length.
[  141.114777][ T8431] netlink: 360 bytes leftover after parsing attributes in process `syz.3.989'.
[  142.007355][ T8444] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  142.411960][ T8455] netlink: 'syz.0.998': attribute type 21 has an invalid length.
[  142.414667][ T8455] IPv6: NLM_F_CREATE should be specified when creating new route
[  143.019734][ T8476] netlink: 'syz.4.1008': attribute type 4 has an invalid length.
[  143.022781][ T8476] netlink: 'syz.4.1008': attribute type 16 has an invalid length.
[  143.203669][ T8483] netlink: 'syz.0.1011': attribute type 3 has an invalid length.
[  143.209653][ T8483] netlink: 'syz.0.1011': attribute type 1 has an invalid length.
[  143.468928][ T8499] __nla_validate_parse: 3 callbacks suppressed
[  143.468940][ T8499] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1017'.
[  143.506359][ T8502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1018'.
[  143.616545][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'.
[  143.646929][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'.
[  143.708490][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'.
[  143.779214][ T8522] netlink: 'syz.4.1022': attribute type 237 has an invalid length.
[  144.339020][ T8552] netlink: 'syz.0.1031': attribute type 4 has an invalid length.
[  144.342609][ T8552] netlink: 'syz.0.1031': attribute type 11 has an invalid length.
[  144.349047][ T8552] netlink: 'syz.0.1031': attribute type 1 has an invalid length.
[  144.353085][ T8552] netlink: 'syz.0.1031': attribute type 6 has an invalid length.
[  144.358821][ T8552] netlink: 197860 bytes leftover after parsing attributes in process `syz.0.1031'.
[  144.679348][ T8559] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1033'.
[  144.837240][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1036'.
[  144.969334][ T8585] netlink: 'syz.3.1037': attribute type 7 has an invalid length.
[  144.972722][ T8585] netlink: 'syz.3.1037': attribute type 8 has an invalid length.
[  145.973904][ T5854] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  146.524539][ T8660] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1053'.
[  146.883714][ T8669] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1058'.
[  146.993195][ T8676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.261735][ T8693] netlink: 'syz.0.1065': attribute type 21 has an invalid length.
[  147.851527][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  147.856699][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  147.861257][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  147.874245][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  147.878863][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  148.089900][ T8716] chnl_net:caif_netlink_parms(): no params data found
[  148.330310][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.333564][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.339181][ T8716] bridge_slave_0: entered allmulticast mode
[  148.343012][ T8716] bridge_slave_0: entered promiscuous mode
[  148.351906][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.355309][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.358434][ T8716] bridge_slave_1: entered allmulticast mode
[  148.362435][ T8716] bridge_slave_1: entered promiscuous mode
[  148.445822][ T8716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.461851][ T8716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.516719][ T8716] team0: Port device team_slave_0 added
[  148.521371][ T8716] team0: Port device team_slave_1 added
[  148.573740][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.576142][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.585710][ T8716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.589421][ T8750] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  148.616488][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.618690][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.629014][ T8716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.761542][ T8757] netlink: 'syz.4.1082': attribute type 21 has an invalid length.
[  148.778346][ T8716] hsr_slave_0: entered promiscuous mode
[  148.781689][ T8716] hsr_slave_1: entered promiscuous mode
[  148.786484][ T8716] debugfs: 'hsr0' already exists in 'hsr'
[  148.788568][ T8716] Cannot create hsr debugfs directory
[  149.318892][ T8716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.506443][ T8716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.582762][ T8716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.642238][ T8716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.779225][ T8716] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  149.959817][ T5854] Bluetooth: hci1: command tx timeout
[  151.590962][ T8716] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  151.602659][ T8716] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  151.625963][ T8716] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  151.967640][ T8716] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.998705][ T8716] 8021q: adding VLAN 0 to HW filter on device team0
[  152.017433][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.019798][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.023630][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.026308][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.029642][ T5854] Bluetooth: hci1: command tx timeout
[  152.475679][ T8716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.028645][ T8716] veth0_vlan: entered promiscuous mode
[  153.074906][ T8716] veth1_vlan: entered promiscuous mode
[  153.140591][ T8716] veth0_macvtap: entered promiscuous mode
[  153.160973][ T8716] veth1_macvtap: entered promiscuous mode
[  153.177539][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.188257][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.216372][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.231937][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.247814][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.250707][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.666731][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.670199][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.713927][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.719163][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.165773][ T5854] Bluetooth: hci1: command tx timeout
[  154.317158][ T8815] __nla_validate_parse: 3 callbacks suppressed
[  154.317176][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'.
[  154.620358][ T8829] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1103'.
[  154.649294][ T8829] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  155.613454][ T5854] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  155.968197][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1124'.
[  155.976614][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1124'.
[  156.162097][ T8889] netlink: 731 bytes leftover after parsing attributes in process `syz.0.1132'.
[  156.177194][ T8890] netlink: 'syz.4.1133': attribute type 29 has an invalid length.
[  156.181790][ T8890] netlink: 'syz.4.1133': attribute type 29 has an invalid length.
[  156.187067][ T5233] Bluetooth: hci1: command tx timeout
[  156.193693][ T8890] netlink: 508 bytes leftover after parsing attributes in process `syz.4.1133'.
[  156.279795][ T8897] cgroup: Unknown subsys name '0x0000000000000000'
[  156.479499][ T8911] netlink: 'syz.4.1141': attribute type 3 has an invalid length.
[  156.482114][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1141'.
[  156.570740][ T5233] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[  156.570760][ T5233] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  156.972829][ T5233] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7
[  158.821974][ T8958] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1163'.
[  159.071021][ T8973] netlink: 'syz.4.1169': attribute type 1 has an invalid length.
[  159.080874][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1169'.
[  159.216075][ T8977] netlink: 'syz.4.1171': attribute type 1 has an invalid length.
[  159.219296][ T8977] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1171'.
[  159.589139][ T8985] netlink: 'syz.4.1174': attribute type 21 has an invalid length.
[  160.240868][ T9000] netlink: 'syz.4.1180': attribute type 13 has an invalid length.
[  161.162609][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.165485][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.452608][ T9000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.465799][ T9000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.691875][ T5914] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0
[  161.704168][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.713637][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.721809][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.290542][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1194'.
[  162.663616][ T9049] netlink: 'syz.3.1202': attribute type 2 has an invalid length.
[  162.820636][ T9055] netlink: 'syz.0.1205': attribute type 1 has an invalid length.
[  164.780449][ T9088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1219'.
[  164.796873][ T9088] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1219'.
[  164.800645][ T9088] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1219'.
[  165.219261][ T9105] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1228'.
[  165.392195][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'.
[  166.085946][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1237'.
[  167.921672][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'.
[  168.387309][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.890138][ T9203] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1266'.
[  171.047554][ T9203] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1266'.
[  171.233008][ T9206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  171.236586][ T9206] IPv6: NLM_F_CREATE should be set when creating new route
[  171.239986][ T9206] IPv6: NLM_F_CREATE should be set when creating new route
[  174.576370][ T9275] netlink: 'syz.4.1297': attribute type 1 has an invalid length.
[  174.838364][ T9279] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1299'.
[  174.901113][ T9281] netlink: 'syz.4.1300': attribute type 5 has an invalid length.
[  174.903550][ T9281] netlink: 'syz.4.1300': attribute type 7 has an invalid length.
[  174.909014][ T9281] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.1300'.
[  174.948203][ T9283] netlink: 'syz.3.1301': attribute type 1 has an invalid length.
[  174.952932][ T9283] netlink: 'syz.3.1301': attribute type 3 has an invalid length.
[  174.962391][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1301'.
[  175.003450][ T9286] syz.3.1301: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  175.003701][ T9286] CPU: 0 UID: 0 PID: 9286 Comm: syz.3.1301 Not tainted syzkaller #0 PREEMPT(full) 
[  175.003713][ T9286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.003719][ T9286] Call Trace:
[  175.003722][ T9286]  <TASK>
[  175.003733][ T9286]  dump_stack_lvl+0x189/0x250
[  175.003749][ T9286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.003759][ T9286]  ? __pfx__printk+0x10/0x10
[  175.003771][ T9286]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  175.003782][ T9286]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  175.003793][ T9286]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  175.003810][ T9286]  warn_alloc+0x214/0x310
[  175.003823][ T9286]  ? stack_depot_save_flags+0x41b/0x860
[  175.003836][ T9286]  ? __pfx_warn_alloc+0x10/0x10
[  175.003848][ T9286]  ? kasan_save_track+0x4f/0x80
[  175.003858][ T9286]  ? xskq_create+0x56/0x170
[  175.003868][ T9286]  ? xsk_init_queue+0xb0/0x110
[  175.003876][ T9286]  ? xsk_setsockopt+0x57b/0x8d0
[  175.003884][ T9286]  ? do_sock_setsockopt+0x17c/0x1b0
[  175.003895][ T9286]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  175.003905][ T9286]  ? do_syscall_64+0xfa/0x3b0
[  175.003915][ T9286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.003928][ T9286]  __vmalloc_node_range_noprof+0x125/0x12f0
[  175.003975][ T9286]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  175.003991][ T9286]  ? __kasan_kmalloc+0x93/0xb0
[  175.004003][ T9286]  vmalloc_user_noprof+0xad/0xf0
[  175.004014][ T9286]  ? xskq_create+0xbf/0x170
[  175.004025][ T9286]  xskq_create+0xbf/0x170
[  175.004037][ T9286]  xsk_init_queue+0xb0/0x110
[  175.004048][ T9286]  xsk_setsockopt+0x57b/0x8d0
[  175.004059][ T9286]  ? __pfx_xsk_setsockopt+0x10/0x10
[  175.004068][ T9286]  ? __pfx_aa_sk_perm+0x10/0x10
[  175.004082][ T9286]  ? __fget_files+0x2a/0x420
[  175.004092][ T9286]  ? aa_sock_opt_perm+0xff/0x1b0
[  175.004106][ T9286]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  175.004114][ T9286]  ? __pfx_xsk_setsockopt+0x10/0x10
[  175.004124][ T9286]  do_sock_setsockopt+0x17c/0x1b0
[  175.004138][ T9286]  __x64_sys_setsockopt+0x13f/0x1b0
[  175.004153][ T9286]  do_syscall_64+0xfa/0x3b0
[  175.004162][ T9286]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.004172][ T9286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.004179][ T9286]  ? exc_page_fault+0x9f/0xf0
[  175.004190][ T9286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.004198][ T9286] RIP: 0033:0x7fdce598ebe9
[  175.004207][ T9286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.004213][ T9286] RSP: 002b:00007fdce3bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  175.004221][ T9286] RAX: ffffffffffffffda RBX: 00007fdce5bc6090 RCX: 00007fdce598ebe9
[  175.004228][ T9286] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  175.004233][ T9286] RBP: 00007fdce5a11e19 R08: 0000000000000004 R09: 0000000000000000
[  175.004237][ T9286] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  175.004243][ T9286] R13: 00007fdce5bc6128 R14: 00007fdce5bc6090 R15: 00007ffc4bee4aa8
[  175.004257][ T9286]  </TASK>
[  175.004400][ T9286] Mem-Info:
[  175.004408][ T9286] active_anon:5983 inactive_anon:0 isolated_anon:0
[  175.004408][ T9286]  active_file:16031 inactive_file:38274 isolated_file:0
[  175.004408][ T9286]  unevictable:1768 dirty:275 writeback:0
[  175.004408][ T9286]  slab_reclaimable:9940 slab_unreclaimable:112704
[  175.004408][ T9286]  mapped:18111 shmem:2428 pagetables:1154
[  175.004408][ T9286]  sec_pagetables:0 bounce:0
[  175.004408][ T9286]  kernel_misc_reclaimable:0
[  175.004408][ T9286]  free:226856 free_pcp:15108 free_cma:0
[  175.004431][ T9286] Node 0 active_anon:14000kB inactive_anon:0kB active_file:35360kB inactive_file:135472kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27644kB dirty:932kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8644kB pagetables:2620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  175.004453][ T9286] Node 1 active_anon:9932kB inactive_anon:0kB active_file:28764kB inactive_file:17624kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44800kB dirty:168kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3648kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  175.004474][ T9286] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  175.004498][ T9286] lowmem_reserve[]: 0 811 811 811 811
[  175.004518][ T9286] Node 0 DMA32 free:129628kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14000kB inactive_anon:0kB active_file:35360kB inactive_file:135472kB unevictable:3536kB writepending:932kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:29196kB local_pcp:10756kB free_cma:0kB
[  175.004543][ T9286] lowmem_reserve[]: 0 0 0 0 0
[  175.004561][ T9286] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  175.004609][ T9286] lowmem_reserve[]: 0 0 854 854 854
[  175.004629][ T9286] Node 1 Normal free:303944kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9932kB inactive_anon:0kB active_file:28764kB inactive_file:17624kB unevictable:3536kB writepending:168kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31120kB local_pcp:15564kB free_cma:0kB
[  175.004653][ T9286] lowmem_reserve[]: 0 0 0 0 0
[  175.004673][ T9286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  175.004750][ T9286] Node 0 DMA32: 571*4kB (UM) 972*8kB (UME) 265*16kB (UME) 69*32kB (M) 33*64kB (UME) 149*128kB (UME) 75*256kB (UM) 34*512kB (UME) 16*1024kB (UM) 9*2048kB (UME) 5*4096kB (UM) = 129596kB
[  175.004847][ T9286] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  175.004927][ T9286] Node 1 Normal: 232*4kB (UME) 341*8kB (UM) 412*16kB (UME) 646*32kB (UME) 278*64kB (UME) 88*128kB (UM) 29*256kB (UME) 14*512kB (UME) 16*1024kB (UM) 6*2048kB (UM) 49*4096kB (M) = 303944kB
[  175.005011][ T9286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  175.005018][ T9286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  175.005025][ T9286] 56733 total pagecache pages
[  175.005029][ T9286] 0 pages in swap cache
[  175.005032][ T9286] Free swap  = 124996kB
[  175.005036][ T9286] Total swap = 124996kB
[  175.005040][ T9286] 786301 pages RAM
[  175.005043][ T9286] 0 pages HighMem/MovableOnly
[  175.005046][ T9286] 241329 pages reserved
[  175.005050][ T9286] 0 pages cma reserved
[  175.208739][ T9287] netlink: 'syz.4.1302': attribute type 27 has an invalid length.
[  175.208753][ T9287] netlink: 'syz.4.1302': attribute type 3 has an invalid length.
[  175.208758][ T9287] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1302'.
[  176.308115][ T9297] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1306'.
[  176.727638][ T9312] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1310'.
[  177.685148][ T9336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1322'.
[  178.204368][ T9351] netlink: 'syz.4.1329': attribute type 13 has an invalid length.
[  178.213782][ T9351] netlink: 'syz.4.1329': attribute type 58 has an invalid length.
[  178.223185][ T9351] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1329'.
[  178.371061][ T9353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1330'.
[  179.085298][ T9358] netlink: 'syz.3.1331': attribute type 1 has an invalid length.
[  179.087961][ T9358] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1331'.
[  179.884908][ T9384] __nla_validate_parse: 1 callbacks suppressed
[  179.884920][ T9384] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1343'.
[  179.932507][ T9384] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1343'.
[  180.137499][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.141109][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.153829][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.158308][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  180.163727][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  180.526174][ T9389] chnl_net:caif_netlink_parms(): no params data found
[  180.645733][ T9389] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.648227][ T9389] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.651429][ T9389] bridge_slave_0: entered allmulticast mode
[  180.676429][ T9389] bridge_slave_0: entered promiscuous mode
[  180.702176][ T9389] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.707369][ T9389] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.712230][ T9389] bridge_slave_1: entered allmulticast mode
[  180.716747][ T9389] bridge_slave_1: entered promiscuous mode
[  180.724457][   T13] bridge_slave_1: left allmulticast mode
[  180.727128][   T13] bridge_slave_1: left promiscuous mode
[  180.734572][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.753353][   T13] bridge_slave_0: left allmulticast mode
[  180.755966][   T13] bridge_slave_0: left promiscuous mode
[  180.757972][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.914047][ T9433] validate_nla: 1 callbacks suppressed
[  180.914068][ T9433] netlink: 'syz.4.1363': attribute type 10 has an invalid length.
[  181.011893][ T9434] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1363'.
[  181.177474][   T13] bond0 (unregistering): (slave c@): Releasing backup interface
[  181.182764][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.186683][   T13] bond0 (unregistering): Released all slaves
[  181.384727][ T9433] batman_adv: batadv0: Removing interface: team0
[  181.389688][ T9433] team0 (unregistering): Port device team_slave_0 removed
[  181.394721][ T9433] team0 (unregistering): Port device team_slave_1 removed
[  181.421015][ T9389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.463404][ T9389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.800895][ T9389] team0: Port device team_slave_0 added
[  181.845236][ T9389] team0: Port device team_slave_1 added
[  181.909372][ T9389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.912415][ T9389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.922737][ T9389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.931748][ T9389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.938577][ T9389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.973401][ T9389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.102062][ T9389] hsr_slave_0: entered promiscuous mode
[  182.110455][ T9389] hsr_slave_1: entered promiscuous mode
[  182.120075][ T9389] debugfs: 'hsr0' already exists in 'hsr'
[  182.134281][ T9389] Cannot create hsr debugfs directory
[  182.210663][ T5233] Bluetooth: hci2: command tx timeout
[  182.473726][   T13] hsr_slave_0: left promiscuous mode
[  182.476948][   T13] hsr_slave_1: left promiscuous mode
[  182.479234][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.482213][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.823528][   T13] team0 (unregistering): Port device team_slave_1 removed
[  182.853442][   T13] team0 (unregistering): Port device team_slave_0 removed
[  183.152997][ T9483] netlink: 798 bytes leftover after parsing attributes in process `syz.3.1380'.
[  183.242496][ T9389] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  183.259211][ T9389] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  183.276870][ T9389] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  183.295502][ T9389] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  183.301980][ T9488] syzkaller0: tun_chr_ioctl cmd 1074025677
[  183.308608][ T9488] syzkaller0: linktype set to 801
[  183.569921][ T9389] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.597432][ T9389] 8021q: adding VLAN 0 to HW filter on device team0
[  183.610245][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.613224][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.647925][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.650807][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.957114][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.098737][ T9545] option changes via remount are deprecated (pid=9543 comm=syz.4.1395)
[  184.226255][ T9389] veth0_vlan: entered promiscuous mode
[  184.232676][ T9389] veth1_vlan: entered promiscuous mode
[  184.264773][ T5233] Bluetooth: hci2: command tx timeout
[  184.269575][ T9389] veth0_macvtap: entered promiscuous mode
[  184.275926][ T9389] veth1_macvtap: entered promiscuous mode
[  184.286674][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.295640][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.309007][ T5914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.312026][ T5914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.316707][ T5914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.319466][ T5914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.379609][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.382326][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.409143][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.411972][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.783278][ T9589] netlink: 'syz.5.1406': attribute type 21 has an invalid length.
[  184.790991][ T9589] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1406'.
[  185.066972][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1414'.
[  185.071392][ T9612] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  185.074706][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.299935][ T9619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.312860][ T9621] netlink: 'syz.5.1416': attribute type 11 has an invalid length.
[  185.316501][ T9621] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1416'.
[  186.129347][ T9638] netlink: 'syz.3.1421': attribute type 10 has an invalid length.
[  186.192221][ T9638] team0: Port device geneve1 added
[  186.344203][ T5233] Bluetooth: hci2: command tx timeout
[  186.618765][ T9656] netlink: 'syz.3.1425': attribute type 10 has an invalid length.
[  186.622037][ T9656] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1425'.
[  186.829841][ T5233] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  188.454172][ T5233] Bluetooth: hci2: command tx timeout
[  188.699585][ T9698] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1443'.
[  191.191304][ T9712] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1448'.
[  192.232132][ T9740] netlink: 'syz.3.1456': attribute type 1 has an invalid length.
[  192.454124][ T9745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.529393][ T9751] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1461'.
[  192.626707][ T9759] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  192.686324][ T9761] pim6reg1: entered promiscuous mode
[  192.688096][ T9761] pim6reg1: entered allmulticast mode
[  193.111277][ T9808] netlink: 'syz.4.1488': attribute type 2 has an invalid length.
[  193.113765][ T9808] netlink: 110008 bytes leftover after parsing attributes in process `syz.4.1488'.
[  193.424712][ T9819] sit0: entered allmulticast mode
[  194.114536][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.117069][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.588973][ T9856] _Z`Ԁ@S!!: entered promiscuous mode
[  194.775220][ T5233] Bluetooth: hci2: unknown advertising packet type: 0x5f
[  195.268390][ T9896] sctp: [Deprecated]: syz.4.1517 (pid 9896) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.268390][ T9896] Use struct sctp_sack_info instead
[  195.366205][ T9900] netlink: 'syz.3.1520': attribute type 21 has an invalid length.
[  195.594289][ T9910] netlink: 'syz.3.1523': attribute type 10 has an invalid length.
[  195.596835][ T9910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1523'.
[  195.599642][ T9910] dummy0: entered promiscuous mode
[  195.601779][ T9910] bridge0: port 3(dummy0) entered blocking state
[  195.603918][ T9910] bridge0: port 3(dummy0) entered disabled state
[  195.607213][ T9910] dummy0: entered allmulticast mode
[  195.610798][ T9910] bridge0: port 3(dummy0) entered blocking state
[  195.612910][ T9910] bridge0: port 3(dummy0) entered forwarding state
[  196.126488][ T9946] ]X: renamed from veth0_vlan
[  196.417938][ T9966] netlink: 'syz.4.1540': attribute type 40 has an invalid length.
[  196.441921][ T9967] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1539'.
[  196.564607][ T9948] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  196.685030][ T9975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1541'.
[  196.689471][ T9973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1541'.
[  197.074324][ T9991] netlink: 'syz.3.1546': attribute type 10 has an invalid length.
[  197.077607][ T9991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.081593][ T9991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.390466][T10014] netlink: 'syz.4.1552': attribute type 39 has an invalid length.
[  197.436329][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[  197.633867][T10013] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  198.423407][T10048] netlink: 'syz.5.1562': attribute type 33 has an invalid length.
[  198.428669][T10048] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1562'.
[  198.431866][T10048] `: renamed from team0 (while UP)
[  198.522624][ T5233] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  198.527569][ T5233] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  198.555174][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'.
[  198.558125][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1566'.
[  199.769749][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'.
[  199.888519][T10084] netlink: 'syz.4.1577': attribute type 29 has an invalid length.
[  199.892678][T10084] netlink: 'syz.4.1577': attribute type 29 has an invalid length.
[  200.436314][T10115] netlink: 'syz.4.1592': attribute type 27 has an invalid length.
[  201.507805][T10156] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1611'.
[  202.065367][T10165] netlink: 'syz.3.1615': attribute type 2 has an invalid length.
[  202.070542][T10165] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1615'.
[  202.200735][T10174] netlink: 'syz.4.1620': attribute type 10 has an invalid length.
[  202.209128][T10174] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1620'.
[  202.212543][T10174] bond0: entered promiscuous mode
[  202.215563][T10174] bond_slave_0: entered promiscuous mode
[  202.218357][T10174] bond_slave_1: entered promiscuous mode
[  202.229539][T10174] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.236468][T10174] bridge0: port 3(bond0) entered blocking state
[  202.239602][T10174] bridge0: port 3(bond0) entered disabled state
[  202.243699][T10174] bond0: entered allmulticast mode
[  202.246764][T10174] bond_slave_0: entered allmulticast mode
[  202.249272][T10174] bond_slave_1: entered allmulticast mode
[  202.322670][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1618'.
[  202.436181][T10176] netlink: 'syz.5.1619': attribute type 1 has an invalid length.
[  202.439775][T10176] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1619'.
[  203.300237][T10188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1624'.
[  203.651289][T10205] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1632'.
[  203.661081][T10205] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1632'.
[  203.670023][T10205] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1632'.
[  204.148736][T10224] netlink: 'syz.5.1641': attribute type 3 has an invalid length.
[  204.151386][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1641'.
[  204.229601][T10229] netlink: 'syz.5.1643': attribute type 2 has an invalid length.
[  204.232919][T10229] netlink: 'syz.5.1643': attribute type 7 has an invalid length.
[  204.236439][T10229] netlink: 'syz.5.1643': attribute type 2 has an invalid length.
[  204.238917][T10229] netlink: 'syz.5.1643': attribute type 7 has an invalid length.
[  205.061825][T10264] netlink: 'syz.5.1660': attribute type 21 has an invalid length.
[  205.463708][T10281] netlink: 'syz.3.1668': attribute type 1 has an invalid length.
[  206.700180][T10342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.855254][T10264] __nla_validate_parse: 8 callbacks suppressed
[  206.855267][T10264] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1660'.
[  207.020731][T10365] : renamed from vlan0
[  207.421586][T10396] netlink: 'syz.3.1685': attribute type 7 has an invalid length.
[  207.426373][T10396] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1685'.
[  207.652937][T10407] : renamed from pim6reg1
[  207.849016][T10406] bridge_slave_1: left allmulticast mode
[  207.855467][T10406] bridge_slave_1: left promiscuous mode
[  207.862302][T10406] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.892564][T10406] bridge_slave_0: left allmulticast mode
[  207.929383][T10406] bridge_slave_0: left promiscuous mode
[  207.933829][T10406] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.679540][T10437] netlink: 'syz.5.1702': attribute type 6 has an invalid length.
[  208.724972][T10437] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1702'.
[  208.845438][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'.
[  208.848221][T10443] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1704'.
[  209.051088][T10464] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.1714'.
[  209.059832][T10464] netlink: 62239 bytes leftover after parsing attributes in process `syz.3.1714'.
[  209.335714][T10484] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1724'.
[  209.417775][T10490] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1727'.
[  209.816659][T10508] syzkaller0: entered promiscuous mode
[  209.819139][T10508] syzkaller0: entered allmulticast mode
[  210.404573][T10514] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1737'.
[  211.345801][T10521] netlink: 'syz.4.1740': attribute type 21 has an invalid length.
[  211.870248][T10558] netlink: 'syz.5.1758': attribute type 21 has an invalid length.
[  213.102829][T10601] netlink: 'syz.5.1775': attribute type 40 has an invalid length.
[  213.823467][T10622] __nla_validate_parse: 2 callbacks suppressed
[  213.823479][T10622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1787'.
[  213.833151][T10622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1787'.
[  214.165758][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'.
[  216.798307][T10700] netlink: 'syz.5.1823': attribute type 21 has an invalid length.
[  216.800982][T10700] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1823'.
[  216.806118][T10700] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1823'.
[  217.268179][T10722] netlink: 'syz.4.1830': attribute type 7 has an invalid length.
[  217.620572][T10741] xt_l2tp: unknown flags: 51
[  218.591577][T10756] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1846'.
[  218.620499][T10758] netlink: 'syz.3.1847': attribute type 1 has an invalid length.
[  218.623801][T10758] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1847'.
[  218.708325][T10760] netlink: 'syz.4.1848': attribute type 10 has an invalid length.
[  219.573682][T10800] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1865'.
[  220.181215][T10820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1873'.
[  220.347936][T10824] erspan0 speed is unknown, defaulting to 1000
[  220.376148][T10824] erspan0 speed is unknown, defaulting to 1000
[  220.392128][T10824] erspan0 speed is unknown, defaulting to 1000
[  220.442790][T10824] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  220.539679][T10824] erspan0 speed is unknown, defaulting to 1000
[  220.569773][T10824] erspan0 speed is unknown, defaulting to 1000
[  220.574996][T10824] erspan0 speed is unknown, defaulting to 1000
[  220.579075][T10824] erspan0 speed is unknown, defaulting to 1000
[  220.776542][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'.
[  220.914396][T10840] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1881'.
[  220.928457][T10840] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1881'.
[  221.468124][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'.
[  221.476656][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'.
[  222.574067][T10923] lo: entered allmulticast mode
[  222.577595][T10923] lo: entered promiscuous mode
[  222.579138][T10923] lo: left allmulticast mode
[  222.659534][T10928] netlink: 'syz.5.1906': attribute type 21 has an invalid length.
[  222.939379][T10938] netlink: 'syz.4.1912': attribute type 11 has an invalid length.
[  222.948926][T10938] netlink: 'syz.4.1912': attribute type 11 has an invalid length.
[  222.951672][T10938] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1912'.
[  223.033714][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1915'.
[  223.037104][T10944] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  223.081441][ T5233] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  223.778651][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1931'.
[  223.803170][T10985] netlink: 'syz.4.1933': attribute type 10 has an invalid length.
[  223.816771][T10985] bond0: (slave bond_slave_0): Releasing backup interface
[  223.828847][T10985] bond_slave_0: left promiscuous mode
[  223.832124][T10985] bond_slave_0: left allmulticast mode
[  225.417000][T11044] openvswitch: netlink: Missing valid actions attribute.
[  225.420264][T11044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.591691][T11053] netlink: 'syz.5.1962': attribute type 2 has an invalid length.
[  225.595693][T11053] netlink: 'syz.5.1962': attribute type 3 has an invalid length.
[  225.598292][T11053] __nla_validate_parse: 3 callbacks suppressed
[  225.598344][T11053] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1962'.
[  225.662538][T11055] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1964'.
[  226.326616][T11087] netlink: 'syz.4.1979': attribute type 11 has an invalid length.
[  226.332956][T11078] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  226.341460][T11078] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  226.363771][T11089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'.
[  226.492319][T11095] C: renamed from team_slave_0
[  226.592875][T11095] netlink: 'syz.4.1981': attribute type 3 has an invalid length.
[  226.596854][T11095] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  226.610516][T11091] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1981'.
[  226.707548][T11097] netlink: 532 bytes leftover after parsing attributes in process `syz.3.1983'.
[  226.758180][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1984'.
[  226.878404][T11105] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1987'.
[  226.881273][T11105] netlink: zone id is out of range
[  226.883344][T11105] netlink: zone id is out of range
[  226.903702][T11105] netlink: zone id is out of range
[  226.906604][T11105] netlink: zone id is out of range
[  226.908379][T11105] netlink: zone id is out of range
[  226.910021][T11105] netlink: zone id is out of range
[  227.072697][T11116] netlink: 'syz.3.1992': attribute type 29 has an invalid length.
[  227.146839][T11119] netlink: 'syz.3.1992': attribute type 29 has an invalid length.
[  227.152456][T11116] netlink: 'syz.3.1992': attribute type 29 has an invalid length.
[  227.261069][T11119] netlink: 'syz.3.1992': attribute type 29 has an invalid length.
[  227.851092][T11143] bond0: left allmulticast mode
[  227.852684][T11143] bond_slave_1: left allmulticast mode
[  227.864142][T11143] bridge0: port 3(bond0) entered disabled state
[  227.886706][T11143] bridge_slave_1: left allmulticast mode
[  227.888511][T11143] bridge_slave_1: left promiscuous mode
[  227.890622][T11143] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.895863][T11143] bridge_slave_0: left allmulticast mode
[  227.898247][T11143] bridge_slave_0: left promiscuous mode
[  227.900836][T11143] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.699325][T11146] netlink: 'syz.5.2005': attribute type 49 has an invalid length.
[  229.168934][T11178] netlink: 'syz.4.2017': attribute type 3 has an invalid length.
[  229.171840][T11178] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2017'.
[  229.175546][T11177] netlink: 'syz.5.2016': attribute type 1 has an invalid length.
[  229.179748][T11177] netlink: 'syz.5.2016': attribute type 2 has an invalid length.
[  229.183033][T11177] netlink: 'syz.5.2016': attribute type 4 has an invalid length.
[  229.192535][T11177] netlink: 'syz.5.2016': attribute type 1 has an invalid length.
[  229.195917][T11177] netlink: 'syz.5.2016': attribute type 2 has an invalid length.
[  229.199070][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2016'.
[  229.202890][T11177] netlink: 130080 bytes leftover after parsing attributes in process `syz.5.2016'.
[  229.379155][T11191] net_ratelimit: 77 callbacks suppressed
[  229.379170][T11191] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  229.386826][T11191] openvswitch: netlink: Message has 2 unknown bytes.
[  229.605612][T11209] netlink: 'syz.3.2033': attribute type 1 has an invalid length.
[  229.608713][T11209] netlink: 'syz.3.2033': attribute type 4 has an invalid length.
[  229.927299][T11227] sit0: entered allmulticast mode
[  231.290919][T11259] __nla_validate_parse: 4 callbacks suppressed
[  231.290936][T11259] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2052'.
[  231.315028][T11259] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2052'.
[  231.319296][T11260] : port 1(veth0_to_bridge) entered blocking state
[  231.322114][T11260] : port 1(veth0_to_bridge) entered disabled state
[  231.325062][T11260] veth0_to_bridge: entered allmulticast mode
[  231.328849][T11260] veth0_to_bridge: entered promiscuous mode
[  231.590212][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'.
[  231.593735][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'.
[  231.768222][T11271] netlink: 'syz.3.2058': attribute type 10 has an invalid length.
[  231.771005][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2058'.
[  231.781348][T11271] batman_adv: batadv0: Adding interface: hsr_slave_1
[  231.783555][T11271] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.805978][T11271] batman_adv: batadv0: Interface activated: hsr_slave_1
[  231.868581][T11280] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2061'.
[  231.993879][T11285] netlink: 872 bytes leftover after parsing attributes in process `syz.4.2063'.
[  232.002059][T11285] netlink: 872 bytes leftover after parsing attributes in process `syz.4.2063'.
[  232.129419][T11296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.162232][T11299] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2065'.
[  232.889854][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1235842117 wd_nsec: 1235842691
[  232.990747][T11304] netlink: 199752 bytes leftover after parsing attributes in process `syz.3.2071'.
[  233.231549][T11311] : renamed from hsr0
[  234.567054][T11340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.709834][T11347] xt_policy: too many policy elements
[  234.940388][T11357] validate_nla: 1 callbacks suppressed
[  234.940403][T11357] netlink: 'syz.3.2095': attribute type 1 has an invalid length.
[  234.949053][T11357] netlink: 'syz.3.2095': attribute type 4 has an invalid length.
[  234.953079][T11357] netlink: 'syz.3.2095': attribute type 1 has an invalid length.
[  234.956787][T11357] netlink: 'syz.3.2095': attribute type 4 has an invalid length.
[  235.345353][T11384] bridge0: entered promiscuous mode
[  235.347183][T11384] bridge0: entered allmulticast mode
[  237.197742][T11438] __nla_validate_parse: 9 callbacks suppressed
[  237.197761][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2132'.
[  237.243524][T11439] netlink: 'syz.4.2131': attribute type 21 has an invalid length.
[  237.259399][T11439] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2131'.
[  237.372092][T11438] siw: device registration error -23
[  237.618800][T11442] macsec0: entered promiscuous mode
[  237.621738][T11442] macsec0: entered allmulticast mode
[  237.625871][T11442] veth1_macvtap: entered allmulticast mode
[  237.978482][T11458] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  238.953311][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'.
[  239.075486][T11483] netlink: 'syz.5.2147': attribute type 11 has an invalid length.
[  239.078236][T11483] netlink: 'syz.5.2147': attribute type 11 has an invalid length.
[  239.214920][T11489] : port 1() entered blocking state
[  239.217750][T11489] : port 1() entered disabled state
[  239.234208][T11489] : entered allmulticast mode
[  239.236348][T11489] ]X: entered allmulticast mode
[  239.239821][T11489] : entered promiscuous mode
[  239.647581][T11499] netlink: 809 bytes leftover after parsing attributes in process `syz.3.2153'.
[  239.651217][T11499] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.2153'.
[  239.681342][T11501] cgroup: Unknown subsys name 'uid'
[  239.858366][T11509] netlink: 'syz.4.2156': attribute type 9 has an invalid length.
[  239.901676][ T5233] Bluetooth: hci2: Unable to find connection for big 0x00
[  240.510610][T11528] sit0: entered allmulticast mode
[  240.542406][T11528] sit0: entered promiscuous mode
[  241.412074][T11547] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.2175'.
[  241.478130][T11551] netlink: 'syz.4.2178': attribute type 3 has an invalid length.
[  241.481286][T11551] netlink: 'syz.4.2178': attribute type 8 has an invalid length.
[  241.487452][T11551] netlink: 'syz.4.2178': attribute type 6 has an invalid length.
[  241.490581][T11551] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.2178'.
[  241.522441][T11557] netlink: 'syz.5.2180': attribute type 1 has an invalid length.
[  241.631393][T11562] : renamed from vlan0 (while UP)
[  241.673424][T11567] _Z`Ԁ@S!: entered promiscuous mode
[  241.760551][T11570] netlink: 'syz.4.2186': attribute type 1 has an invalid length.
[  241.763739][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  241.802689][T11574] netlink: 'syz.3.2188': attribute type 39 has an invalid length.
[  242.131497][T11585] bond0: entered promiscuous mode
[  242.133707][T11585] bond_slave_0: entered promiscuous mode
[  242.138669][T11585] bond_slave_1: entered promiscuous mode
[  242.140651][T11585] bond0: entered allmulticast mode
[  242.142614][T11585] bond_slave_0: entered allmulticast mode
[  242.146857][T11585] bond_slave_1: entered allmulticast mode
[  242.605532][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'.
[  242.826921][T11608] netlink: 'syz.5.2203': attribute type 39 has an invalid length.
[  245.282814][T11618] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2206'.
[  248.547795][   T13] bridge_slave_1: left allmulticast mode
[  248.549736][   T13] bridge_slave_1: left promiscuous mode
[  248.551708][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.588734][   T13] bridge_slave_0: left allmulticast mode
[  248.600175][   T13] bridge_slave_0: left promiscuous mode
[  248.602685][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.656472][T11644] netlink: 'syz.3.2213': attribute type 2 has an invalid length.
[  248.660800][T11644] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2213'.
[  248.711967][T11648] netlink: 'syz.3.2213': attribute type 2 has an invalid length.
[  248.717038][T11648] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2213'.
[  248.921241][T11656] netlink: 'syz.5.2217': attribute type 13 has an invalid length.
[  248.925342][T11656] netlink: 'syz.5.2217': attribute type 17 has an invalid length.
[  249.107903][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.112682][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.119433][   T13] bond0 (unregistering): Released all slaves
[  249.129177][T11652] sit0: entered promiscuous mode
[  249.155326][T11654] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2217'.
[  249.199696][T11656] sit0: left allmulticast mode
[  249.235661][T11656] bond0: left promiscuous mode
[  249.237337][T11656] bond_slave_0: left promiscuous mode
[  249.239240][T11656] bond_slave_1: left promiscuous mode
[  249.241453][T11656] bond0: left allmulticast mode
[  249.243229][T11656] bond_slave_0: left allmulticast mode
[  249.248273][T11656] bond_slave_1: left allmulticast mode
[  249.257939][T11656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.872095][   T13] hsr_slave_0: left promiscuous mode
[  249.877369][   T13] hsr_slave_1: left promiscuous mode
[  249.879706][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.882040][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.885412][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.887866][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.904698][   T13] veth1_macvtap: left promiscuous mode
[  249.906937][   T13] veth0_macvtap: left promiscuous mode
[  249.909259][   T13] veth1_vlan: left promiscuous mode
[  249.911548][   T13] veth0_vlan: left promiscuous mode
[  250.313133][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2227'.
[  250.353008][   T13] team0 (unregistering): Port device team_slave_1 removed
[  250.382139][   T13] team0 (unregistering): Port device team_slave_0 removed
[  250.661077][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2227'.
[  250.832561][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2231'.
[  250.844645][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2231'.
[  250.998260][T11703] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2237'.
[  251.031922][T11702] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2235'.
[  251.080524][T11709] netlink: 'syz.4.2240': attribute type 27 has an invalid length.
[  251.082897][T11709] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2240'.
[  251.141178][T11713] netlink: 'syz.5.2241': attribute type 3 has an invalid length.
[  251.620620][T11740] syzkaller0: entered promiscuous mode
[  251.622785][T11740] syzkaller0: entered allmulticast mode
[  252.506806][ T5233] Bluetooth: hci0: command 0x0406 tx timeout
[  253.258444][T11768] netlink: 'syz.5.2266': attribute type 26 has an invalid length.
[  253.621907][T11797] netlink: 'syz.3.2280': attribute type 6 has an invalid length.
[  253.682379][T11801] netlink: 'syz.3.2282': attribute type 10 has an invalid length.
[  254.923142][T11820] __nla_validate_parse: 3 callbacks suppressed
[  254.923153][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'.
[  255.550708][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.553319][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.156774][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2295'.
[  256.159814][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2295'.
[  256.327065][T11836] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2299'.
[  256.439474][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2300'.
[  256.442276][T11838] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2300'.
[  256.521972][T11844] netlink: 'syz.3.2303': attribute type 3 has an invalid length.
[  256.529121][T11844] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2303'.
[  257.257412][T11865] netlink: 'syz.4.2312': attribute type 10 has an invalid length.
[  257.261137][T11865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2312'.
[  257.267107][T11865] batadv0: entered promiscuous mode
[  257.270223][T11865] batadv0: entered allmulticast mode
[  257.273603][T11865] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  257.820844][T11897] netlink: 'syz.4.2327': attribute type 2 has an invalid length.
[  257.825749][T11897] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2327'.
[  258.172805][T11926] netlink: 'syz.4.2341': attribute type 10 has an invalid length.
[  258.181566][T11926] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  258.267869][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2347'.
[  258.487798][T11949] option changes via remount are deprecated (pid=11939 comm=syz.5.2348)
[  258.954861][T11972] netlink: 'syz.3.2362': attribute type 21 has an invalid length.
[  259.370068][T11988] netlink: 'syz.4.2370': attribute type 19 has an invalid length.
[  259.445327][T11998] netlink: 'syz.3.2375': attribute type 3 has an invalid length.
[  259.760363][T12022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.202186][T12044] __nla_validate_parse: 6 callbacks suppressed
[  260.202199][T12044] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2394'.
[  260.476975][T12058] netlink: 'syz.4.2401': attribute type 10 has an invalid length.
[  262.373157][T12105] netlink: 'syz.3.2417': attribute type 10 has an invalid length.
[  262.399819][T12105] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  262.472197][T12117] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2420'.
[  262.961757][T12144] netlink: 'syz.5.2434': attribute type 10 has an invalid length.
[  262.984935][T12144] `: Port device geneve1 added
[  263.133357][T12152] : port 1() entered blocking state
[  263.136437][T12152] : port 1() entered disabled state
[  263.140244][T12152] : entered allmulticast mode
[  263.142002][T12152] veth0_vlan: entered allmulticast mode
[  263.151995][T12152] : entered promiscuous mode
[  263.186031][T12152] : port 1() entered blocking state
[  263.189310][T12152] : port 1() entered forwarding state
[  263.637174][T12176] netlink: 'syz.3.2449': attribute type 2 has an invalid length.
[  263.639786][T12176] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2449'.
[  264.842517][T12207] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2464'.
[  264.871315][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  265.068039][T12219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2463'.
[  266.019949][T12240] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2472'.
[  267.081698][T12261] C: renamed from team_slave_0 (while UP)
[  267.087163][T12261] netlink: 'syz.5.2479': attribute type 8 has an invalid length.
[  267.091886][T12261] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  267.568552][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2493'.
[  267.572152][T12289] netlink: 'syz.5.2493': attribute type 2 has an invalid length.
[  267.577182][T12289] netlink: 'syz.5.2493': attribute type 2 has an invalid length.
[  267.580397][T12289] netlink: 'syz.5.2493': attribute type 1 has an invalid length.
[  267.583521][T12289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2493'.
[  267.642783][T12293] : renamed from dummy0 (while UP)
[  267.658795][T12293] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2495'.
[  268.393440][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2511'.
[  268.396371][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2511'.
[  268.458026][T12330] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.2512'.
[  268.510850][T12334] netlink: 'syz.3.2514': attribute type 10 has an invalid length.
[  268.546431][T12334] team0: Device ipvlan1 failed to register rx_handler
[  268.766552][   T33] audit: type=1107 audit(1757018357.170:2): pid=12337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  268.900138][T12342] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  268.932889][T12344] netlink: 'syz.3.2518': attribute type 23 has an invalid length.
[  269.052238][T12350] netlink: 'syz.3.2520': attribute type 21 has an invalid length.
[  269.271660][T12353] syzkaller1: tun_chr_ioctl cmd 1074025677
[  269.276312][T12353] syzkaller1: linktype set to 823
[  269.753200][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2525'.
[  269.908694][T12378] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2532'.
[  270.110600][T12386] netlink: 'syz.5.2536': attribute type 2 has an invalid length.
[  270.320304][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'.
[  270.340562][T12404] netlink: 'syz.3.2545': attribute type 40 has an invalid length.
[  271.085608][T12462] netlink: 'syz.3.2569': attribute type 27 has an invalid length.
[  271.088613][T12462] __nla_validate_parse: 2 callbacks suppressed
[  271.088622][T12462] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2569'.
[  271.379679][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'.
[  271.661907][T12485] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.2583'.
[  271.726688][T12489] netlink: 14453 bytes leftover after parsing attributes in process `syz.5.2585'.
[  271.892908][T12502] sctp: [Deprecated]: syz.3.2589 (pid 12502) Use of struct sctp_assoc_value in delayed_ack socket option.
[  271.892908][T12502] Use struct sctp_sack_info instead
[  272.984668][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  273.299666][T12520] delete_channel: no stack
[  273.301615][T12520] delete_channel: no stack
[  273.570727][T12529] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2603'.
[  273.656081][T12538] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2608'.
[  273.707049][T12544] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  273.719466][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2612'.
[  273.722360][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2612'.
[  273.731087][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2612'.
[  273.890944][T12560] netlink: 735 bytes leftover after parsing attributes in process `syz.5.2619'.
[  274.648622][T12601] validate_nla: 4 callbacks suppressed
[  274.648634][T12601] netlink: 'syz.3.2638': attribute type 3 has an invalid length.
[  275.259122][T12630] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  275.416780][T12639] syzkaller0: entered promiscuous mode
[  275.419074][T12639] syzkaller0: entered allmulticast mode
[  275.525450][T12645] netlink: 'syz.5.2660': attribute type 4 has an invalid length.
[  276.042558][T12671] netlink: 'syz.5.2673': attribute type 2 has an invalid length.
[  276.102006][T12674] netlink: 'syz.5.2674': attribute type 22 has an invalid length.
[  276.108045][T12674] __nla_validate_parse: 4 callbacks suppressed
[  276.108056][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2674'.
[  276.456153][T12695] netlink: 'syz.5.2681': attribute type 11 has an invalid length.
[  276.459807][T12695] netlink: 149476 bytes leftover after parsing attributes in process `syz.5.2681'.
[  276.528144][T12700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.181008][T12707] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.2686'.
[  277.565528][T12716] openvswitch: netlink: IP tunnel dst address not specified
[  277.691525][T12722] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  277.716244][T12722] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  278.553633][T12733] netlink: 'syz.3.2693': attribute type 21 has an invalid length.
[  278.570093][T12733] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2693'.
[  278.587225][T12733] netlink: 'syz.3.2693': attribute type 4 has an invalid length.
[  278.590190][T12733] netlink: 'syz.3.2693': attribute type 5 has an invalid length.
[  278.593221][T12733] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2693'.
[  278.626643][T12735] netlink: 'syz.5.2694': attribute type 9 has an invalid length.
[  278.629757][T12735] netlink: 211924 bytes leftover after parsing attributes in process `syz.5.2694'.
[  278.799000][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  278.805798][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  278.808322][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  278.810962][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.813518][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  278.836620][T12744] erspan0 speed is unknown, defaulting to 1000
[  278.887550][T12752] netlink: 'syz.3.2701': attribute type 21 has an invalid length.
[  278.936309][T12744] chnl_net:caif_netlink_parms(): no params data found
[  279.203062][T12744] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.208582][T12744] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.214330][T12744] bridge_slave_0: entered allmulticast mode
[  279.219927][T12744] bridge_slave_0: entered promiscuous mode
[  279.223235][T12744] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.226309][T12744] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.228752][T12744] bridge_slave_1: entered allmulticast mode
[  279.231529][T12744] bridge_slave_1: entered promiscuous mode
[  279.264527][T12744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.271595][T12744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.353919][T12779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2712'.
[  279.360544][T12744] team0: Port device team_slave_0 added
[  279.365699][T12744] team0: Port device team_slave_1 added
[  279.411026][T12744] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.413862][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.430369][T12744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.437943][T12744] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.440871][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.454041][T12744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.528909][T12744] hsr_slave_0: entered promiscuous mode
[  279.532078][T12744] hsr_slave_1: entered promiscuous mode
[  279.740613][T12744] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  279.756062][T12744] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  279.765139][T12744] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  279.779906][T12744] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  279.850375][T12744] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.852901][T12744] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.855350][T12744] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.857646][T12744] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.890643][T12801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2719'.
[  279.902908][T12799] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2719'.
[  279.969652][T12744] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.992289][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.000383][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.011576][T12744] 8021q: adding VLAN 0 to HW filter on device team0
[  280.035940][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.038347][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.062298][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.064688][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.131592][T12799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.303894][T12744] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.341205][T12808] netlink: 'syz.5.2720': attribute type 21 has an invalid length.
[  280.656319][T12744] veth0_vlan: entered promiscuous mode
[  280.675991][T12744] veth1_vlan: entered promiscuous mode
[  280.728457][T12744] veth0_macvtap: entered promiscuous mode
[  280.737972][T12744] veth1_macvtap: entered promiscuous mode
[  280.752981][T12744] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.767334][T12744] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.778146][ T5868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.782448][ T5868] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.795237][ T5868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.811870][ T5868] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.824234][ T5233] Bluetooth: hci3: command tx timeout
[  280.882211][ T3776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.893210][ T3776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.914011][ T3776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.916988][ T3776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.026290][T12824] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  281.090523][T12828] netlink: 'syz.3.2726': attribute type 21 has an invalid length.
[  281.331553][T12837] C: renamed from team_slave_0
[  281.344378][T12837] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2730'.
[  281.552782][T12849] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2736'.
[  281.739634][T12860] netlink: 'syz.3.2740': attribute type 21 has an invalid length.
[  282.469212][T12869] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2744'.
[  282.472022][T12869] netlink: zone id is out of range
[  282.473623][T12869] netlink: zone id is out of range
[  282.479831][T12869] netlink: zone id is out of range
[  282.481795][T12869] netlink: zone id is out of range
[  282.483758][T12869] netlink: zone id is out of range
[  282.489713][T12869] netlink: zone id is out of range
[  282.491780][T12869] netlink: zone id is out of range
[  282.493695][T12869] netlink: zone id is out of range
[  282.530936][T12871] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2745'.
[  282.906338][ T5233] Bluetooth: hci3: command tx timeout
[  283.023417][T12897] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2757'.
[  283.111826][T12901] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2760'.
[  283.336654][T12914] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2763'.
[  283.383550][T12917] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2765'.
[  283.399684][T12912] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2765'.
[  283.402560][T12917] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2765'.
[  283.425792][T12918] netlink: 'syz.6.2767': attribute type 21 has an invalid length.
[  283.428351][T12918] netlink: 'syz.6.2767': attribute type 1 has an invalid length.
[  283.581194][T12933] netlink: 'syz.6.2774': attribute type 13 has an invalid length.
[  283.594352][T12933] netlink: 'syz.6.2774': attribute type 58 has an invalid length.
[  283.628161][T12936] netlink: 'syz.3.2775': attribute type 1 has an invalid length.
[  284.240444][T12963] tc_dump_action: action bad kind
[  284.984150][ T5233] Bluetooth: hci3: command tx timeout
[  285.655533][T12989] syzkaller0: entered promiscuous mode
[  285.657407][T12989] syzkaller0: entered allmulticast mode
[  287.064079][ T5233] Bluetooth: hci3: command tx timeout
[  288.009907][T12997] netlink: 'syz.6.2801': attribute type 1 has an invalid length.
[  288.013167][T12997] __nla_validate_parse: 4 callbacks suppressed
[  288.013185][T12997] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.2801'.
[  288.169832][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2804'.
[  289.419601][T13025] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2813'.
[  289.431562][T13025] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2813'.
[  289.629907][T13033] erspan0 speed is unknown, defaulting to 1000
[  289.942292][T13045] netlink: 65027 bytes leftover after parsing attributes in process `syz.5.2821'.
[  290.501567][T13077] TCP: TCP_TX_DELAY enabled
[  290.712741][T13092] net_ratelimit: 79 callbacks suppressed
[  290.712757][T13092] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  291.914303][T13131] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2860'.
[  292.874899][T13089] syz.5.2840: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  292.880715][T13089] CPU: 0 UID: 0 PID: 13089 Comm: syz.5.2840 Not tainted syzkaller #0 PREEMPT(full) 
[  292.880726][T13089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.880732][T13089] Call Trace:
[  292.880737][T13089]  <TASK>
[  292.880742][T13089]  dump_stack_lvl+0x189/0x250
[  292.880758][T13089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.880768][T13089]  ? __pfx__printk+0x10/0x10
[  292.880779][T13089]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  292.880789][T13089]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  292.880799][T13089]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  292.880809][T13089]  warn_alloc+0x214/0x310
[  292.880824][T13089]  ? __pfx_warn_alloc+0x10/0x10
[  292.880840][T13089]  ? __get_vm_area_node+0x28f/0x300
[  292.880850][T13089]  ? hash_netportnet_create+0x354/0xf90
[  292.880865][T13089]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  292.880889][T13089]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  292.880899][T13089]  ? hash_netportnet_create+0x354/0xf90
[  292.880911][T13089]  ? __get_vm_area_node+0x28f/0x300
[  292.880922][T13089]  ? hash_netportnet_create+0x354/0xf90
[  292.880935][T13089]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  292.880951][T13089]  ? hash_netportnet_create+0x354/0xf90
[  292.880988][T13089]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  292.881009][T13089]  ? rcu_is_watching+0x15/0xb0
[  292.881023][T13089]  ? hash_netportnet_create+0x354/0xf90
[  292.881035][T13089]  ? hash_netportnet_create+0x354/0xf90
[  292.881045][T13089]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  292.881057][T13089]  ? hash_netportnet_create+0x354/0xf90
[  292.881068][T13089]  ? hash_netportnet_create+0x2fa/0xf90
[  292.881081][T13089]  hash_netportnet_create+0x354/0xf90
[  292.881096][T13089]  ? __nla_parse+0x40/0x60
[  292.881108][T13089]  ? __pfx_hash_netportnet_create+0x10/0x10
[  292.881120][T13089]  ip_set_create+0xa97/0x1940
[  292.881130][T13089]  ? ip_set_create+0x4a2/0x1940
[  292.881144][T13089]  ? __pfx_ip_set_create+0x10/0x10
[  292.881170][T13089]  nfnetlink_rcv_msg+0xb4d/0x1130
[  292.881180][T13089]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  292.881198][T13089]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  292.881206][T13089]  ? kasan_save_free_info+0x46/0x50
[  292.881238][T13089]  netlink_rcv_skb+0x208/0x470
[  292.881249][T13089]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  292.881259][T13089]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.881275][T13089]  ? bpf_lsm_capable+0x9/0x20
[  292.881285][T13089]  ? security_capable+0x7e/0x2e0
[  292.881300][T13089]  nfnetlink_rcv+0x26a/0x2520
[  292.881311][T13089]  ? __dev_queue_xmit+0x1d79/0x3b50
[  292.881351][T13089]  ? __dev_queue_xmit+0x27b/0x3b50
[  292.881365][T13089]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  292.881375][T13089]  ? __pfx___dev_queue_xmit+0x10/0x10
[  292.881390][T13089]  ? ref_tracker_free+0x63a/0x7d0
[  292.881400][T13089]  ? __asan_memcpy+0x40/0x70
[  292.881409][T13089]  ? __pfx_ref_tracker_free+0x10/0x10
[  292.881419][T13089]  ? __skb_clone+0x63/0x7a0
[  292.881429][T13089]  ? __skb_clone+0x483/0x7a0
[  292.881440][T13089]  ? skb_clone+0x246/0x3a0
[  292.881449][T13089]  ? __netlink_deliver_tap+0x807/0x850
[  292.881460][T13089]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.881473][T13089]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.881487][T13089]  netlink_unicast+0x82f/0x9e0
[  292.881501][T13089]  ? __pfx_netlink_unicast+0x10/0x10
[  292.881517][T13089]  ? netlink_sendmsg+0x642/0xb30
[  292.881526][T13089]  ? skb_put+0x11b/0x210
[  292.881540][T13089]  netlink_sendmsg+0x805/0xb30
[  292.881555][T13089]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.881567][T13089]  ? aa_sock_msg_perm+0xf1/0x1d0
[  292.881580][T13089]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.881589][T13089]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.881600][T13089]  __sock_sendmsg+0x21c/0x270
[  292.881611][T13089]  ____sys_sendmsg+0x505/0x830
[  292.881623][T13089]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.881635][T13089]  ? import_iovec+0x74/0xa0
[  292.881646][T13089]  ___sys_sendmsg+0x21f/0x2a0
[  292.881655][T13089]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.881680][T13089]  ? __fget_files+0x2a/0x420
[  292.881692][T13089]  ? __fget_files+0x3a0/0x420
[  292.881707][T13089]  __x64_sys_sendmsg+0x19b/0x260
[  292.881717][T13089]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.881730][T13089]  ? rcu_is_watching+0x15/0xb0
[  292.881740][T13089]  ? do_syscall_64+0xbe/0x3b0
[  292.881753][T13089]  do_syscall_64+0xfa/0x3b0
[  292.881763][T13089]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.881773][T13089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.881781][T13089]  ? exc_page_fault+0x9f/0xf0
[  292.881792][T13089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.881800][T13089] RIP: 0033:0x7f0526f8ebe9
[  292.881810][T13089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.881817][T13089] RSP: 002b:00007f0527e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.881826][T13089] RAX: ffffffffffffffda RBX: 00007f05271c5fa0 RCX: 00007f0526f8ebe9
[  292.881831][T13089] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  292.881837][T13089] RBP: 00007f0527011e19 R08: 0000000000000000 R09: 0000000000000000
[  292.881842][T13089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.881846][T13089] R13: 00007f05271c6038 R14: 00007f05271c5fa0 R15: 00007ffd6b1b0358
[  292.881860][T13089]  </TASK>
[  292.881863][T13089] Mem-Info:
[  293.058465][T13089] active_anon:13687 inactive_anon:13 isolated_anon:0
[  293.058465][T13089]  active_file:16083 inactive_file:37804 isolated_file:0
[  293.058465][T13089]  unevictable:1768 dirty:125 writeback:0
[  293.058465][T13089]  slab_reclaimable:10435 slab_unreclaimable:97399
[  293.058465][T13089]  mapped:23108 shmem:2469 pagetables:1341
[  293.058465][T13089]  sec_pagetables:0 bounce:0
[  293.058465][T13089]  kernel_misc_reclaimable:0
[  293.058465][T13089]  free:186210 free_pcp:17608 free_cma:0
[  293.073401][T13089] Node 0 active_anon:40316kB inactive_anon:4kB active_file:35432kB inactive_file:133516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57252kB dirty:396kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8772kB pagetables:2784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  293.084757][T13089] Node 1 active_anon:14432kB inactive_anon:48kB active_file:28900kB inactive_file:17700kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35180kB dirty:104kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3880kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  293.095919][T13089] Node 0 DMA free:3988kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:676kB local_pcp:396kB free_cma:0kB
[  293.107093][T13089] lowmem_reserve[]: 0 811 811 811 811
[  293.109279][T13089] Node 0 DMA32 free:41968kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:2048KB free_highatomic:136KB active_anon:40316kB inactive_anon:4kB active_file:35432kB inactive_file:133516kB unevictable:3536kB writepending:396kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:14196kB free_cma:0kB
[  293.121597][T13089] lowmem_reserve[]: 0 0 0 0 0
[  293.123535][T13089] Node 1 DMA32 free:445820kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:12788kB local_pcp:12672kB free_cma:0kB
[  293.135166][T13089] lowmem_reserve[]: 0 0 854 854 854
[  293.137265][T13089] Node 1 Normal free:253064kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14432kB inactive_anon:48kB active_file:28900kB inactive_file:17700kB unevictable:3536kB writepending:104kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37908kB local_pcp:18052kB free_cma:0kB
[  293.149401][T13089] lowmem_reserve[]: 0 0 0 0 0
[  293.150916][T13089] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 3*16kB (UM) 0*32kB 1*64kB (M) 2*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 3980kB
[  293.156741][T13089] Node 0 DMA32: 576*4kB (ME) 253*8kB (UMEH) 81*16kB (UME) 103*32kB (UMEH) 24*64kB (UMEH) 12*128kB (UM) 5*256kB (M) 20*512kB (ME) 14*1024kB (UME) 2*2048kB (M) 0*4096kB = 41944kB
[  293.163586][T13089] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 105*4096kB (UM) = 445820kB
[  293.170214][T13089] Node 1 Normal: 604*4kB (UME) 384*8kB (UME) 299*16kB (UME) 225*32kB (ME) 188*64kB (UME) 180*128kB (UME) 85*256kB (UM) 37*512kB (UME) 18*1024kB (UME) 15*2048kB (UME) 27*4096kB (U) = 252992kB
[  293.177570][T13089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  293.181182][T13089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  293.184900][T13089] 56390 total pagecache pages
[  293.186842][T13089] 34 pages in swap cache
[  293.188507][T13089] Free swap  = 124816kB
[  293.190072][T13089] Total swap = 124996kB
[  293.191695][T13089] 786301 pages RAM
[  293.193160][T13089] 0 pages HighMem/MovableOnly
[  293.195103][T13089] 241329 pages reserved
[  293.196729][T13089] 0 pages cma reserved
[  293.391217][T13146] netlink: 'syz.6.2867': attribute type 21 has an invalid length.
[  293.394753][T13146] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2867'.
[  293.424127][T13089] syz.5.2840 (13089) used greatest stack depth: 16296 bytes left
[  293.529562][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2872'.
[  293.933100][T13179] netlink: 'syz.3.2883': attribute type 12 has an invalid length.
[  293.936083][T13179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2883'.
[  294.280439][T13181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2882'.
[  294.372486][T13187] netlink: 'syz.3.2885': attribute type 4 has an invalid length.
[  294.387068][T13187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2885'.
[  294.399844][T13187] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  294.623085][T13198] netlink: 'syz.5.2889': attribute type 1 has an invalid length.
[  294.720501][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2891'.
[  294.724928][T13202] netlink: 'syz.3.2891': attribute type 2 has an invalid length.
[  294.769814][T13200] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2890'.
[  294.809626][T13206] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2893'.
[  295.778539][T13253] syzkaller1: tun_chr_ioctl cmd 1074812118
[  295.785032][T13253] netlink: 'syz.6.2916': attribute type 3 has an invalid length.
[  295.788092][T13253] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.2916'.
[  296.023216][T13283] hsr0: entered promiscuous mode
[  296.176043][T13295] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2934'.
[  296.187880][T13295] bridge0: port 3(dummy0) entered disabled state
[  296.205682][T13295] dummy0 (unregistering): left allmulticast mode
[  296.208152][T13295] bridge0: port 3(dummy0) entered disabled state
[  297.666162][T13328] netlink: 'syz.5.2951': attribute type 13 has an invalid length.
[  297.779443][T13344] netlink: 'syz.3.2959': attribute type 1 has an invalid length.
[  297.782041][T13344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.793741][ T5233] Bluetooth: hci3: Malformed HCI Event
[  297.886335][T13357] netlink: 'syz.3.2964': attribute type 1 has an invalid length.
[  298.078371][T13371] netlink: 'syz.3.2971': attribute type 16 has an invalid length.
[  298.247673][T13385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.562761][T13410] netlink: 'syz.3.2989': attribute type 3 has an invalid length.
[  298.572066][T13410] netlink: 'syz.3.2989': attribute type 4 has an invalid length.
[  298.627321][T13418] openvswitch: netlink: Message has 1 unknown bytes.
[  298.629466][T13418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.651956][T13417] netlink: 'syz.3.2992': attribute type 10 has an invalid length.
[  298.670624][T13417] macvlan0: entered promiscuous mode
[  298.672592][T13417] macvlan0: entered allmulticast mode
[  298.744851][T10327] wlan1: Trigger new scan to find an IBSS to join
[  298.763375][T13417] veth1_vlan: entered allmulticast mode
[  298.791094][T13417] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  299.080963][T13443] __nla_validate_parse: 4 callbacks suppressed
[  299.081003][T13443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3004'.
[  299.456438][T13460] netlink: 16054 bytes leftover after parsing attributes in process `syz.6.3012'.
[  300.056188][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'.
[  302.762070][T13560] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  302.771798][T13560] syzkaller0: entered promiscuous mode
[  302.773612][T13560] syzkaller0: entered allmulticast mode
[  303.706513][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  303.706570][T10327] wlan1: Trigger new scan to find an IBSS to join
[  304.650471][   T27] wlan1: Creating new IBSS network, BSSID ae:d3:e9:92:89:dd
[  304.767918][T13607] netlink: 'syz.3.3083': attribute type 10 has an invalid length.
[  304.770953][T13607] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3083'.
[  304.775698][T13607] batadv0: entered promiscuous mode
[  304.777351][T13607] batadv0: entered allmulticast mode
[  304.779552][T13607] bridge0: port 3(batadv0) entered blocking state
[  304.784101][T13607] bridge0: port 3(batadv0) entered disabled state
[  304.791370][T13607] bridge0: port 3(batadv0) entered blocking state
[  304.793485][T13607] bridge0: port 3(batadv0) entered forwarding state
[  304.933139][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3090'.
[  305.056542][T13631] xt_time: unknown flags 0xf4
[  305.066603][ T5914] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  305.069752][ T5914] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  305.154432][T13637] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3101'.
[  305.256315][T13640] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.3096'.
[  305.868114][T13656] syzkaller1: tun_chr_ioctl cmd 1074812118
[  305.878145][T13656] netlink: 'syz.5.3104': attribute type 3 has an invalid length.
[  305.882966][T13656] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3104'.
[  305.951827][T13660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  305.954824][T13660] IPv6: NLM_F_CREATE should be set when creating new route
[  305.957816][T13660] IPv6: NLM_F_CREATE should be set when creating new route
[  305.960677][T13660] IPv6: NLM_F_CREATE should be set when creating new route
[  306.136657][T13671] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.3111'.
[  306.370178][ T5233] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  307.354476][T13712] netlink: 'syz.3.3130': attribute type 6 has an invalid length.
[  307.557274][T13720] openvswitch: netlink: Flow key attr not present in new flow.
[  307.635491][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3135'.
[  307.639525][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3135'.
[  307.647886][T13726] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3135'.
[  307.755481][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3137'.
[  307.854992][T13735] netlink: 'syz.3.3140': attribute type 9 has an invalid length.
[  310.122115][T13814] netlink: 'syz.3.3175': attribute type 4 has an invalid length.
[  310.126336][T13814] __nla_validate_parse: 6 callbacks suppressed
[  310.126347][T13814] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3175'.
[  310.132838][T13814] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  310.726149][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3196'.
[  311.030697][T13880] netlink: 324 bytes leftover after parsing attributes in process `syz.5.3207'.
[  311.046540][T13883] delete_channel: no stack
[  311.048212][T13883] delete_channel: no stack
[  311.103513][T13888] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3210'.
[  311.109530][T13886] netlink: 'syz.6.3209': attribute type 29 has an invalid length.
[  311.151115][T13888] hsr_slave_0: left promiscuous mode
[  311.158099][T13888] hsr_slave_1: left promiscuous mode
[  311.212282][T13886] netlink: 'syz.6.3209': attribute type 29 has an invalid length.
[  311.967631][T13928] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3229'.
[  312.217378][T13936] netlink: 'syz.3.3232': attribute type 97 has an invalid length.
[  312.219929][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'.
[  312.223114][T13936] netlink: 'syz.3.3232': attribute type 97 has an invalid length.
[  312.226492][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'.
[  312.888241][ T5233] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10
[  313.103830][T13989] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  313.209697][T13999] netlink: 'syz.6.3263': attribute type 21 has an invalid length.
[  313.430893][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'.
[  314.188549][T14018] netlink: 'syz.5.3271': attribute type 10 has an invalid length.
[  314.193682][T14018] veth1_macvtap: left promiscuous mode
[  314.735497][T14035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3279'.
[  314.797870][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3280'.
[  317.003415][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.005476][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.223056][T14105] __nla_validate_parse: 2 callbacks suppressed
[  317.223072][T14105] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3311'.
[  317.236690][T14105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3311'.
[  317.363295][T14111] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.3315'.
[  318.258705][T14132] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3325'.
[  318.423661][T14140] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.3329'.
[  318.440252][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'.
[  319.587812][T14186] ref_ctr_offset mismatch. inode: 0x117a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  320.026765][T14204] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3360'.
[  320.048369][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3361'.
[  320.267939][T14219] netlink: 'syz.5.3366': attribute type 12 has an invalid length.
[  320.270532][T14219] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3366'.
[  321.545129][T14240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3375'.
[  322.132486][T14265] tmpfs: Bad value for 'mode'
[  322.575278][T14284] __nla_validate_parse: 1 callbacks suppressed
[  322.575288][T14284] netlink: 5844 bytes leftover after parsing attributes in process `syz.5.3395'.
[  322.677140][T14290] netlink: 'syz.3.3398': attribute type 5 has an invalid length.
[  322.679624][T14290] netlink: 'syz.3.3398': attribute type 15 has an invalid length.
[  322.810645][T14294] tc_dump_action: action bad kind
[  322.882857][T14298] netlink: 'syz.3.3402': attribute type 28 has an invalid length.
[  323.229760][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3401'.
[  323.233913][T14296] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3401'.
[  324.673696][T14351] netlink: 'syz.3.3420': attribute type 10 has an invalid length.
[  324.894131][T14353] syzkaller0: entered promiscuous mode
[  324.896573][T14353] syzkaller0: entered allmulticast mode
[  325.651915][T14364] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.3426'.
[  326.148274][T14382] nft_compat: unsupported protocol 0
[  326.518782][T14400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  326.569471][T14403] netlink: 'syz.5.3444': attribute type 27 has an invalid length.
[  326.571939][T14403] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3444'.
[  327.028182][T14428] netlink: 'syz.3.3457': attribute type 1 has an invalid length.
[  327.037435][T14428] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3457'.
[  328.487228][T14476] IPv6: NLM_F_CREATE should be specified when creating new route
[  328.492437][T14476] netlink: 'syz.3.3479': attribute type 2 has an invalid length.
[  328.504531][T14476] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.3479'.
[  330.960975][T14501] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  331.117358][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3489'.
[  331.428812][T14517] siw: device registration error -23
[  332.154047][T14533] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3499'.
[  332.239131][T14534] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3498'.
[  332.304460][T14537] netlink: 'syz.5.3498': attribute type 1 has an invalid length.
[  332.307098][T14537] netlink: 'syz.5.3498': attribute type 2 has an invalid length.
[  332.351816][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'.
[  332.661205][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  332.664931][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  332.668206][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  332.672311][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  332.676119][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  332.749226][T14543] erspan0 speed is unknown, defaulting to 1000
[  332.983643][T14543] chnl_net:caif_netlink_parms(): no params data found
[  333.077906][T14543] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.080267][T14543] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.082591][T14543] bridge_slave_0: entered allmulticast mode
[  333.088388][T14543] bridge_slave_0: entered promiscuous mode
[  333.097341][T14543] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.101454][T14543] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.114402][T14543] bridge_slave_1: entered allmulticast mode
[  333.119967][T14543] bridge_slave_1: entered promiscuous mode
[  333.202317][T14543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.218795][T14543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.361529][T14566] netlink: 'syz.3.3511': attribute type 1 has an invalid length.
[  333.588830][T14543] team0: Port device team_slave_0 added
[  333.596276][T14543] team0: Port device team_slave_1 added
[  333.701760][T14543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.705861][T14543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.713730][T14543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.719317][T14543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.721529][T14543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.731225][T14543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.041486][T14543] hsr_slave_0: entered promiscuous mode
[  334.046943][T14543] hsr_slave_1: entered promiscuous mode
[  334.049861][T14543] debugfs: 'hsr0' already exists in 'hsr'
[  334.052163][T14543] Cannot create hsr debugfs directory
[  334.322530][T14543] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  334.329246][T14543] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  334.338019][T14543] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  334.344624][T14543] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  334.488187][T14543] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.505123][T14543] 8021q: adding VLAN 0 to HW filter on device team0
[  334.511081][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.513314][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.533543][  T731] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.535863][  T731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.591727][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3521'.
[  334.601762][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3522'.
[  334.676781][T10327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  334.754834][ T5233] Bluetooth: hci4: command tx timeout
[  334.762988][T14543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.963406][T14543] veth0_vlan: entered promiscuous mode
[  334.987249][T14626] netlink: 'syz.3.3530': attribute type 21 has an invalid length.
[  334.990639][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3530'.
[  334.999771][T14543] veth1_vlan: entered promiscuous mode
[  335.023425][T14543] veth0_macvtap: entered promiscuous mode
[  335.030876][T14543] veth1_macvtap: entered promiscuous mode
[  335.043707][T14543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.050927][T14543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.059781][ T5914] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.062633][ T5914] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.076428][ T5914] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.088946][ T5914] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.136982][T10331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.148303][T10331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.171632][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.178681][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.270348][T14641] erspan0 speed is unknown, defaulting to 1000
[  336.545030][T14699] netlink: 'syz.5.3560': attribute type 10 has an invalid length.
[  336.548005][T14699] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.3560'.
[  336.583270][T14703] netlink: 'syz.5.3562': attribute type 10 has an invalid length.
[  336.692822][T14705] netlink: 'syz.3.3563': attribute type 10 has an invalid length.
[  336.698856][T14705] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3563'.
[  336.844328][ T5233] Bluetooth: hci4: command tx timeout
[  336.875411][T14728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.877808][T14728] IPv6: NLM_F_CREATE should be set when creating new route
[  336.880083][T14728] IPv6: NLM_F_CREATE should be set when creating new route
[  337.763227][T14755] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3586'.
[  338.904739][ T5233] Bluetooth: hci4: command tx timeout
[  340.984306][ T5233] Bluetooth: hci4: command tx timeout
[  341.418663][T14803] netlink: 'syz.5.3606': attribute type 58 has an invalid length.
[  341.421240][T14803] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3606'.
[  341.541036][T14797] syzkaller0: entered promiscuous mode
[  341.542977][T14797] syzkaller0: entered allmulticast mode
[  341.549366][T14797] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  341.588264][T14816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.771540][ T5233] Bluetooth: hci4: unexpected event 0x01 length: 151 > 1
[  341.823726][T14831] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3617'.
[  341.934132][T14836] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3619'.
[  342.086533][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3625'.
[  342.257181][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3629'.
[  342.436725][T14871] netlink: 'syz.7.3635': attribute type 20 has an invalid length.
[  342.439210][T14871] IPv6: NLM_F_CREATE should be specified when creating new route
[  342.662044][T14876] netlink: 'syz.7.3637': attribute type 12 has an invalid length.
[  342.684207][T14876] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3637'.
[  345.686587][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3645'.
[  345.689460][T14896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.750485][T14899] netlink: 'syz.7.3646': attribute type 29 has an invalid length.
[  345.755567][T14899] netlink: 'syz.7.3646': attribute type 29 has an invalid length.
[  346.089693][T14909] netlink: 42496 bytes leftover after parsing attributes in process `syz.7.3650'.
[  346.408512][T14919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3655'.
[  346.520373][T14930] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3660'.
[  346.707911][T14934] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  347.178303][T14958] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3673'.
[  347.320839][T14968] netlink: 'syz.5.3678': attribute type 21 has an invalid length.
[  347.323646][T14968] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3678'.
[  347.376475][T14974] netlink: 'syz.7.3681': attribute type 2 has an invalid length.
[  348.760310][T15019] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3698'.
[  348.764541][T15020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3699'.
[  348.927947][T15032] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3705'.
[  349.127690][T15046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.447498][T15057] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.3716'.
[  349.451565][T15057] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  349.455081][T15057] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  349.499945][T15059] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3717'.
[  349.969855][T15064] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3719'.
[  349.973390][T15064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.012203][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'.
[  350.040367][T15070] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  350.043432][T15070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.175107][T15074] netlink: 'syz.3.3723': attribute type 39 has an invalid length.
[  350.743044][T15096] netlink: 'syz.3.3733': attribute type 7 has an invalid length.
[  350.917518][T15108] netlink: zone id is out of range
[  350.919186][T15108] netlink: zone id is out of range
[  350.920787][T15108] netlink: zone id is out of range
[  351.300810][T15142] netlink: 'syz.3.3756': attribute type 2 has an invalid length.
[  351.556937][T15164] netlink: 'syz.5.3767': attribute type 39 has an invalid length.
[  352.082248][T15172] __nla_validate_parse: 10 callbacks suppressed
[  352.082259][T15172] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3770'.
[  353.323290][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3777'.
[  353.569346][T15206] syzkaller0: entered promiscuous mode
[  353.571389][T15206] syzkaller0: entered allmulticast mode
[  355.376893][T15245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3798'.
[  355.380707][T15237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3798'.
[  355.384947][T15245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3798'.
[  355.726414][T15267] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.3809'.
[  355.729997][T15267] netlink: 'syz.3.3809': attribute type 2 has an invalid length.
[  355.732942][T15267] netlink: 62135 bytes leftover after parsing attributes in process `syz.3.3809'.
[  355.767544][T15271] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3810'.
[  355.913758][T15279] netlink: 65055 bytes leftover after parsing attributes in process `syz.7.3814'.
[  355.941929][T15281] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3815'.
[  356.021240][T15285] netlink: 'syz.7.3817': attribute type 2 has an invalid length.
[  356.023701][T15285] netlink: 'syz.7.3817': attribute type 7 has an invalid length.
[  356.027721][T15285] netlink: 'syz.7.3817': attribute type 2 has an invalid length.
[  356.030868][T15285] netlink: 'syz.7.3817': attribute type 7 has an invalid length.
[  357.121573][T15306] __nla_validate_parse: 3 callbacks suppressed
[  357.121583][T15306] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3825'.
[  357.647988][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3837'.
[  358.010465][T15345] netlink: 'syz.5.3841': attribute type 4 has an invalid length.
[  358.131193][T15351] netlink: 'syz.5.3844': attribute type 10 has an invalid length.
[  358.134444][T15351] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3844'.
[  358.167418][T15351] : port 1() entered disabled state
[  358.235176][T15351]  (unregistering): left allmulticast mode
[  358.245730][T15351] veth0_vlan (unregistering): left allmulticast mode
[  358.247928][T15351]  (unregistering): left promiscuous mode
[  358.249996][T15351] : port 1() entered disabled state
[  358.505678][T15363] delete_channel: no stack
[  359.475904][ T5914] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.516804][ T5233] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[  360.769470][T15447] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3882'.
[  360.781941][T15444] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3882'.
[  360.820792][T15451] netlink: 'syz.5.3885': attribute type 27 has an invalid length.
[  360.823696][T15451] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3885'.
[  360.951747][T15457] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3888'.
[  361.007332][T15461] netlink: 'syz.3.3889': attribute type 1 has an invalid length.
[  361.257892][T15482] netlink: 'syz.3.3899': attribute type 3 has an invalid length.
[  361.260530][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'.
[  362.599962][T15547] netlink: 'syz.3.3929': attribute type 10 has an invalid length.
[  362.602462][T15547] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3929'.
[  362.772778][T15547] veth1_vlan (unregistering): left allmulticast mode
[  362.801805][T15547] bond0: (slave macvlan0): Releasing backup interface
[  362.883252][ T5233] Bluetooth: hci4: adv larger than maximum supported
[  362.883281][ T5233] Bluetooth: hci4: Unknown advertising packet type: 0x73
[  363.260985][T15590] netlink: 'syz.3.3950': attribute type 11 has an invalid length.
[  363.266175][T15590] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3950'.
[  363.270071][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.317942][T15598] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3952'.
[  363.321432][T15598] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3952'.
[  364.481234][T15621] netlink: 'syz.3.3962': attribute type 1 has an invalid length.
[  364.781386][T15635] erspan0 speed is unknown, defaulting to 1000
[  365.352544][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3984'.
[  365.442046][T15680] mac80211_hwsim hwsim33 .3c: renamed from wlan1 (while UP)
[  365.743718][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3989'.
[  365.791171][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3995'.
[  365.909330][T10331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  366.315581][T15713] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3999'.
[  366.319945][T15709] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3999'.
[  366.336852][T15713] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3999'.
[  366.425827][ T5233] Bluetooth: hci2: Opcode 0x206a failed: -110
[  366.434705][ T5233] Bluetooth: hci2: command 0x0406 tx timeout
[  366.792048][ T5233] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  367.085961][T15748] netlink: 'syz.7.4016': attribute type 1 has an invalid length.
[  368.043360][T15807] __nla_validate_parse: 7 callbacks suppressed
[  368.043374][T15807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4041'.
[  368.070173][T15809] netlink: 'syz.7.4043': attribute type 12 has an invalid length.
[  368.073207][T15809] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4043'.
[  368.088130][T15809] C: renamed from team_slave_0 (while UP)
[  368.093723][T15809] netlink: 'syz.7.4043': attribute type 1 has an invalid length.
[  368.098955][T15809] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4043'.
[  368.103192][T15809] net_ratelimit: 82 callbacks suppressed
[  368.103204][T15809] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  368.165228][T15813] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  368.313809][ T5233] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[  368.553646][T15822] ==================================================================
[  368.558461][T15822] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  368.561339][T15822] Read of size 2 at addr ffff88803b7a20c2 by task syz.5.4048/15822
[  368.564975][T15822] 
[  368.566327][T15822] CPU: 0 UID: 0 PID: 15822 Comm: syz.5.4048 Not tainted syzkaller #0 PREEMPT(full) 
[  368.566346][T15822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.566356][T15822] Call Trace:
[  368.566364][T15822]  <TASK>
[  368.566369][T15822]  dump_stack_lvl+0x189/0x250
[  368.566385][T15822]  ? __virt_addr_valid+0x1c8/0x5c0
[  368.566400][T15822]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.566408][T15822]  ? __virt_addr_valid+0x1c8/0x5c0
[  368.566419][T15822]  ? lock_release+0x4b/0x3e0
[  368.566443][T15822]  ? __virt_addr_valid+0x4a5/0x5c0
[  368.566457][T15822]  print_report+0xca/0x240
[  368.566467][T15822]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  368.566479][T15822]  kasan_report+0x118/0x150
[  368.566496][T15822]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  368.566519][T15822]  __xfrm_state_lookup+0x6ad/0x8d0
[  368.566545][T15822]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  368.566572][T15822]  ? xfrm_state_lookup+0x45/0x1e0
[  368.566584][T15822]  xfrm_state_lookup+0x11e/0x1e0
[  368.566605][T15822]  ipcomp4_init_state+0x205/0xb20
[  368.566619][T15822]  ? __xfrm_init_state+0x7ef/0x13f0
[  368.566635][T15822]  __xfrm_init_state+0xa76/0x13f0
[  368.566644][T15822]  ? __xfrm_init_state+0x7ef/0x13f0
[  368.566659][T15822]  xfrm_add_sa+0x2f5b/0x4070
[  368.566680][T15822]  ? __pfx_xfrm_add_sa+0x10/0x10
[  368.566698][T15822]  ? __nla_parse+0x40/0x60
[  368.566717][T15822]  xfrm_user_rcv_msg+0x7a3/0xab0
[  368.566735][T15822]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  368.566786][T15822]  ? __pfx___mutex_trylock_common+0x10/0x10
[  368.566802][T15822]  ? rcu_is_watching+0x15/0xb0
[  368.566813][T15822]  ? trace_contention_end+0x39/0x120
[  368.566824][T15822]  ? __mutex_lock+0x335/0x1360
[  368.566844][T15822]  netlink_rcv_skb+0x208/0x470
[  368.566859][T15822]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  368.566873][T15822]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  368.566913][T15822]  xfrm_netlink_rcv+0x79/0x90
[  368.566924][T15822]  netlink_unicast+0x82f/0x9e0
[  368.566946][T15822]  ? __pfx_netlink_unicast+0x10/0x10
[  368.566960][T15822]  ? netlink_sendmsg+0x642/0xb30
[  368.566970][T15822]  ? skb_put+0x11b/0x210
[  368.566988][T15822]  netlink_sendmsg+0x805/0xb30
[  368.567011][T15822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.567028][T15822]  ? aa_sock_msg_perm+0xf1/0x1d0
[  368.567044][T15822]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  368.567053][T15822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.567066][T15822]  __sock_sendmsg+0x21c/0x270
[  368.567083][T15822]  ____sys_sendmsg+0x505/0x830
[  368.567130][T15822]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.567154][T15822]  ? import_iovec+0x74/0xa0
[  368.567171][T15822]  ___sys_sendmsg+0x21f/0x2a0
[  368.567185][T15822]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.567222][T15822]  ? __fget_files+0x2a/0x420
[  368.567249][T15822]  ? __fget_files+0x2a/0x420
[  368.567260][T15822]  ? __fget_files+0x3a0/0x420
[  368.567285][T15822]  __x64_sys_sendmsg+0x19b/0x260
[  368.567293][T15822]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  368.567305][T15822]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  368.567338][T15822]  ? do_syscall_64+0xbe/0x3b0
[  368.567355][T15822]  do_syscall_64+0xfa/0x3b0
[  368.567368][T15822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.567376][T15822]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  368.567390][T15822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.567398][T15822] RIP: 0033:0x7f0526f8ebe9
[  368.567409][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.567416][T15822] RSP: 002b:00007f0527e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.567426][T15822] RAX: ffffffffffffffda RBX: 00007f05271c5fa0 RCX: 00007f0526f8ebe9
[  368.567433][T15822] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  368.567438][T15822] RBP: 00007f0527011e19 R08: 0000000000000000 R09: 0000000000000000
[  368.567443][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.567448][T15822] R13: 00007f05271c6038 R14: 00007f05271c5fa0 R15: 00007ffd6b1b0358
[  368.567478][T15822]  </TASK>
[  368.567481][T15822] 
[  368.703074][T15822] Allocated by task 13347:
[  368.704613][T15822]  kasan_save_track+0x3e/0x80
[  368.706446][T15822]  __kasan_slab_alloc+0x6c/0x80
[  368.708077][T15822]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  368.709749][T15822]  xfrm_state_alloc+0x24/0x2f0
[  368.711263][T15822]  __find_acq_core+0x8a7/0x1c00
[  368.713075][T15822]  xfrm_find_acq+0x78/0xa0
[  368.714718][T15822]  xfrm_alloc_userspi+0x6b3/0xc90
[  368.716686][T15822]  xfrm_user_rcv_msg+0x7a3/0xab0
[  368.718596][T15822]  netlink_rcv_skb+0x208/0x470
[  368.720443][T15822]  xfrm_netlink_rcv+0x79/0x90
[  368.722241][T15822]  netlink_unicast+0x82f/0x9e0
[  368.723749][T15822]  netlink_sendmsg+0x805/0xb30
[  368.725383][T15822]  __sock_sendmsg+0x21c/0x270
[  368.727110][T15822]  ____sys_sendmsg+0x505/0x830
[  368.728652][T15822]  ___sys_sendmsg+0x21f/0x2a0
[  368.730286][T15822]  __x64_sys_sendmsg+0x19b/0x260
[  368.732101][T15822]  do_syscall_64+0xfa/0x3b0
[  368.733570][T15822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.735473][T15822] 
[  368.736364][T15822] Freed by task 5917:
[  368.737680][T15822]  kasan_save_track+0x3e/0x80
[  368.739303][T15822]  kasan_save_free_info+0x46/0x50
[  368.741048][T15822]  __kasan_slab_free+0x5b/0x80
[  368.742589][T15822]  kmem_cache_free+0x18f/0x400
[  368.744037][T15822]  xfrm_state_gc_task+0x52d/0x6b0
[  368.745565][T15822]  process_scheduled_works+0xae1/0x17b0
[  368.747488][T15822]  worker_thread+0x8a0/0xda0
[  368.749017][T15822]  kthread+0x711/0x8a0
[  368.750433][T15822]  ret_from_fork+0x3fc/0x770
[  368.752138][T15822]  ret_from_fork_asm+0x1a/0x30
[  368.753890][T15822] 
[  368.754735][T15822] The buggy address belongs to the object at ffff88803b7a1f80
[  368.754735][T15822]  which belongs to the cache xfrm_state of size 928
[  368.759935][T15822] The buggy address is located 322 bytes inside of
[  368.759935][T15822]  freed 928-byte region [ffff88803b7a1f80, ffff88803b7a2320)
[  368.764391][T15822] 
[  368.765133][T15822] The buggy address belongs to the physical page:
[  368.767093][T15822] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b7a0000 pfn:0x3b7a0
[  368.770055][T15822] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  368.773017][T15822] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  368.775431][T15822] page_type: f5(slab)
[  368.776795][T15822] raw: 00fff00000000040 ffff888104d25640 dead000000000122 0000000000000000
[  368.779627][T15822] raw: ffff88803b7a0000 00000000800e0007 00000000f5000000 0000000000000000
[  368.782445][T15822] head: 00fff00000000040 ffff888104d25640 dead000000000122 0000000000000000
[  368.785358][T15822] head: ffff88803b7a0000 00000000800e0007 00000000f5000000 0000000000000000
[  368.788347][T15822] head: 00fff00000000002 ffffea0000ede801 00000000ffffffff 00000000ffffffff
[  368.790996][T15822] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  368.794126][T15822] page dumped because: kasan: bad access detected
[  368.796332][T15822] page_owner tracks the page as allocated
[  368.798226][T15822] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5928, tgid 5927 (syz.1.7), ts 65780051851, free_ts 65719517240
[  368.804764][T15822]  post_alloc_hook+0x240/0x2a0
[  368.806315][T15822]  get_page_from_freelist+0x21e4/0x22c0
[  368.808115][T15822]  __alloc_frozen_pages_noprof+0x181/0x370
[  368.809938][T15822]  alloc_pages_mpol+0x232/0x4a0
[  368.811492][T15822]  allocate_slab+0x8a/0x370
[  368.812927][T15822]  ___slab_alloc+0xbeb/0x1410
[  368.814440][T15822]  kmem_cache_alloc_noprof+0x283/0x3c0
[  368.816353][T15822]  xfrm_state_alloc+0x24/0x2f0
[  368.818274][T15822]  xfrm_add_sa+0x17d1/0x4070
[  368.820131][T15822]  xfrm_user_rcv_msg+0x7a3/0xab0
[  368.822043][T15822]  netlink_rcv_skb+0x208/0x470
[  368.823722][T15822]  xfrm_netlink_rcv+0x79/0x90
[  368.825335][T15822]  netlink_unicast+0x82f/0x9e0
[  368.826995][T15822]  netlink_sendmsg+0x805/0xb30
[  368.828665][T15822]  __sock_sendmsg+0x21c/0x270
[  368.830226][T15822]  ____sys_sendmsg+0x505/0x830
[  368.831869][T15822] page last free pid 5293 tgid 5293 stack trace:
[  368.834122][T15822]  __free_frozen_pages+0xbc4/0xd30
[  368.835880][T15822]  __put_partials+0x156/0x1a0
[  368.837789][T15822]  put_cpu_partial+0x17c/0x250
[  368.839438][T15822]  __slab_free+0x2d5/0x3c0
[  368.840803][T15822]  qlist_free_all+0x97/0x140
[  368.842213][T15822]  kasan_quarantine_reduce+0x148/0x160
[  368.843940][T15822]  __kasan_slab_alloc+0x22/0x80
[  368.845470][T15822]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  368.847647][T15822]  getname_flags+0xb8/0x540
[  368.849487][T15822]  do_readlinkat+0xbc/0x500
[  368.851218][T15822]  __x64_sys_readlink+0x7f/0x90
[  368.853135][T15822]  do_syscall_64+0xfa/0x3b0
[  368.854675][T15822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.856739][T15822] 
[  368.857717][T15822] Memory state around the buggy address:
[  368.859929][T15822]  ffff88803b7a1f80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.863115][T15822]  ffff88803b7a2000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.866261][T15822] >ffff88803b7a2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.869398][T15822]                                            ^
[  368.871699][T15822]  ffff88803b7a2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.874719][T15822]  ffff88803b7a2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.877826][T15822] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  369.009170][T15822] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  369.011439][T15822] CPU: 1 UID: 0 PID: 15822 Comm: syz.5.4048 Not tainted syzkaller #0 PREEMPT(full) 
[  369.014325][T15822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.017436][T15822] Call Trace:
[  369.018488][T15822]  <TASK>
[  369.019416][T15822]  dump_stack_lvl+0x99/0x250
[  369.020826][T15822]  ? __asan_memcpy+0x40/0x70
[  369.022285][T15822]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.023910][T15822]  ? __pfx__printk+0x10/0x10
[  369.025383][T15822]  vpanic+0x281/0x750
[  369.026797][T15822]  ? preempt_schedule+0xae/0xc0
[  369.028419][T15822]  ? __pfx_vpanic+0x10/0x10
[  369.029814][T15822]  ? preempt_schedule_common+0x83/0xd0
[  369.031625][T15822]  ? preempt_schedule+0xae/0xc0
[  369.033151][T15822]  ? __pfx_preempt_schedule+0x10/0x10
[  369.034833][T15822]  panic+0xb9/0xc0
[  369.036033][T15822]  ? __pfx_panic+0x10/0x10
[  369.037456][T15822]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  369.039335][T15822]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  369.041046][T15822]  check_panic_on_warn+0x89/0xb0
[  369.042801][T15822]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  369.044482][T15822]  end_report+0x78/0x160
[  369.046002][T15822]  kasan_report+0x129/0x150
[  369.047666][T15822]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  369.049453][T15822]  __xfrm_state_lookup+0x6ad/0x8d0
[  369.051091][T15822]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  369.052791][T15822]  ? xfrm_state_lookup+0x45/0x1e0
[  369.054802][T15822]  xfrm_state_lookup+0x11e/0x1e0
[  369.056851][T15822]  ipcomp4_init_state+0x205/0xb20
[  369.058826][T15822]  ? __xfrm_init_state+0x7ef/0x13f0
[  369.060930][T15822]  __xfrm_init_state+0xa76/0x13f0
[  369.062655][T15822]  ? __xfrm_init_state+0x7ef/0x13f0
[  369.064301][T15822]  xfrm_add_sa+0x2f5b/0x4070
[  369.065779][T15822]  ? __pfx_xfrm_add_sa+0x10/0x10
[  369.067348][T15822]  ? __nla_parse+0x40/0x60
[  369.068761][T15822]  xfrm_user_rcv_msg+0x7a3/0xab0
[  369.070341][T15822]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  369.072068][T15822]  ? __pfx___mutex_trylock_common+0x10/0x10
[  369.073935][T15822]  ? rcu_is_watching+0x15/0xb0
[  369.075443][T15822]  ? trace_contention_end+0x39/0x120
[  369.077118][T15822]  ? __mutex_lock+0x335/0x1360
[  369.078630][T15822]  netlink_rcv_skb+0x208/0x470
[  369.080145][T15822]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  369.081857][T15822]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  369.083580][T15822]  xfrm_netlink_rcv+0x79/0x90
[  369.085063][T15822]  netlink_unicast+0x82f/0x9e0
[  369.086568][T15822]  ? __pfx_netlink_unicast+0x10/0x10
[  369.088422][T15822]  ? netlink_sendmsg+0x642/0xb30
[  369.090104][T15822]  ? skb_put+0x11b/0x210
[  369.091442][T15822]  netlink_sendmsg+0x805/0xb30
[  369.092945][T15822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.094593][T15822]  ? aa_sock_msg_perm+0xf1/0x1d0
[  369.096146][T15822]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  369.097806][T15822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.099458][T15822]  __sock_sendmsg+0x21c/0x270
[  369.100919][T15822]  ____sys_sendmsg+0x505/0x830
[  369.102712][T15822]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.104736][T15822]  ? import_iovec+0x74/0xa0
[  369.106259][T15822]  ___sys_sendmsg+0x21f/0x2a0
[  369.108081][T15822]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.110180][T15822]  ? __fget_files+0x2a/0x420
[  369.112066][T15822]  ? __fget_files+0x2a/0x420
[  369.113952][T15822]  ? __fget_files+0x3a0/0x420
[  369.115518][T15822]  __x64_sys_sendmsg+0x19b/0x260
[  369.117066][T15822]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  369.118829][T15822]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  369.120543][T15822]  ? do_syscall_64+0xbe/0x3b0
[  369.122020][T15822]  do_syscall_64+0xfa/0x3b0
[  369.123463][T15822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.125330][T15822]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  369.127199][T15822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.129032][T15822] RIP: 0033:0x7f0526f8ebe9
[  369.130424][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.136173][T15822] RSP: 002b:00007f0527e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.138740][T15822] RAX: ffffffffffffffda RBX: 00007f05271c5fa0 RCX: 00007f0526f8ebe9
[  369.141097][T15822] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  369.143440][T15822] RBP: 00007f0527011e19 R08: 0000000000000000 R09: 0000000000000000
[  369.145747][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.148156][T15822] R13: 00007f05271c6038 R14: 00007f05271c5fa0 R15: 00007ffd6b1b0358
[  369.150549][T15822]  </TASK>
[  369.152112][T15822] Kernel Offset: disabled
[  369.153458][T15822] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:40:57  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002ea4 RDI=0000000000002ea5 RBP=00000000000003f8 RSP=ffffc9000379e930
R8 =ffff888106c68237 R9 =1ffff11020d8d046 R10=dffffc0000000000 R11=ffffffff854eedf0
R12=dffffc0000000000 R13=ffffffff99af9912 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eee6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0527e966c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0527e95fc8 CR3=000000012f88e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0527197498 00007f0527197470 XMM03=00007f05271974a8 00007f05271974a0
XMM04=00007f0527cfd100 00007f0527197460 XMM05=00007f0527197478 00007f05271974c0
XMM06=00007f05271974b8 00007f05271974b0 XMM07=00007f05271974a8 00007f05271974a0
XMM08=0000000000000000 00007f0527012ee7 XMM09=0000000000000000 00007f0527012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44e0b RBX=1ffff11009608341 RCX=ffff88810e3c1cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002a5f840 RSP=ffffc90002a5f6c0
R8 =ffff88810e7e3507 R9 =1ffff11021cfc6a0 R10=dffffc0000000000 R11=ffffed1021cfc6a1
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44df3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555733a5500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2cee9b CR3=000000003af88000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=9500000000000000 0000000000000000 XMM03=1800000000000000 0000000000000008
XMM04=00007f888ccfd100 00007f888c197460 XMM05=00007f888c197478 00007f888c1974c0
XMM06=00007f888c1974b8 00007f888c1974b0 XMM07=00007f888c1974a8 00007f888c1974a0
XMM08=0000000000000000 00007f888c012ee7 XMM09=0000000000000000 00007f888c012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
