last executing test programs:

3.380032834s ago: executing program 0 (id=1843):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8fe7aaea6a5664e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) (async, rerun: 32)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 64)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104043, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
fstat(r2, &(0x7f0000000100)) (async)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (rerun: 64)

3.379583995s ago: executing program 2 (id=1844):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)="3284927c3a2d28e9f0ccc8c2e591a7fd2f5ed7eda85e0c5686213f3f02b4880deaf45f757fc5dec96dd9406bf1ba474ff6b5a4d9ce9faab9fb3df467f976ccab855c6a5f971a2c302df0ddb5ae9f270ba51b4c08fd74459dbcd969dd1828279e2a1d378b49395c9b0d88e1c84f136276825aaf82a1dfcb6cf32e8b92718c2fc28b575d3a43cf888f90b6d596d4001234886241760bebfc75e20e592db55edb457f17561032cb405e5a1e43227c2446c685ad8dbd1e74db5d7a401ce4cb01097ee7dae924e96c683c3cd8153fd766c2918083", 0xd2}], 0x2}, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x48894)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/97, 0x61}], 0x8}, 0x100)
sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff7f000001fe8000000000000000000000000000214e2300004e200003020020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000ac1414aa04000000000000000000000008000000000000001000000000000000040000000000000001800000000000000800000000000000f707000000000000f0aa0000000000000200000000000000000050000000000004000000000000000400000000000000010000000000000008c900008a262721080000002bbd700007350000000000001000000000000000ff0002000200008008000b0007000000"], 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140))
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DATA={0x0, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x0, 0x8, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x0, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_CLOSED={0x0, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x0, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x0, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x0, 0x9, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x0, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x0, 0x3, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO, @CTA_TIMEOUT_DATA={0x0, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x0, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x0, 0x6, 0x1, 0x0, 0xd78e}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x0, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x0, 0x5, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x0, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x0, 0xa, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
socket$kcm(0x11, 0x200000000000002, 0x300)
close(0xffffffffffffffff)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d00010026bdf000fcdbdf250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.229472355s ago: executing program 0 (id=1846):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xfffffff6, @mcast1, 0x20000000}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000290000000b000000cf1a432f1b40dd0efc4797c38b07a1c80311c55b6eb2dde1e79c03847c2b7c57c1cf547d030038d55a5a809aaf5408002ba9739ea8a9205cbaf26c33ffb0b33a26c05dc54c854d02237cc973fbee984eff3bd57aa1c37d2fe5c226679ad3bf375d677ccad2585757844d3b8f3d8851e24be3eadf6b9c6ed300ffffff3f5f8d2db0830c00000000000000f0ec95dfb302f4470679dcb348c2efefdb2d3ec7"], 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
sendmsg$kcm(r2, 0x0, 0x10)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x3}, 0x3}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0817d8242ea43c9e284f19f655c08c813809860d25f9355d464c95f2f2af2fe9298bb455cea3543f30c2f0cf2d7756aefdf61c807f1f1ca28a3445c2f54dc5962ce66b35a070cfbd428ceaee6b633d6edc56ea54ea606af7805e9bbe238b1bc3bb0c4a02e1cd7ba800ef", 0x6a}, {&(0x7f0000000240)="f19bbf769fe002aaa07c79b4e1f63c4ff88c813e5bcb3d81ce327ccf68ba63ca", 0x20}, {&(0x7f0000000280)="978572499b717d73112f6772cd00cfefce1ab203d485badb53410470e76652211195fea263992876623b7237c3fc2d35d1a724777eb9137b13", 0x39}], 0x3}, 0x24008011)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x2}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0xb, 0x1}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000140)=""/3, 0x5c, 0x3, 0x1, 0x2}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="0300"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="03000091040000001000"/24], 0x50)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380)={0x0, r7}, 0x10)
ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x2)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_clone(0x20a22000, &(0x7f0000000000), 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000480))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x32, 0x0, 0x3, 0xfffffffb}, 0x28)

2.569308222s ago: executing program 1 (id=1851):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x219b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
ioctl$TUNSETFILTEREBPF(r2, 0xb701, 0x0) (async, rerun: 32)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async, rerun: 32)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0x1, 0x4, 0xfc, 0x0, 0x3e5c, 0x10000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x10000, 0x9}, 0x9010, 0x4, 0x8, 0x0, 0x4, 0x4, 0x2, 0x0, 0x200, 0x0, 0xd548}, r3, 0x7, 0xffffffffffffffff, 0x0) (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc3d5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x1000, 0x16, &(0x7f00000003c0)=""/22, 0x41000, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x3, 0xde0d, 0x95f}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x2, 0xa, 0x6}, {0x1, 0x4, 0x9, 0xb}, {0x0, 0x1, 0x2, 0x3}, {0x4, 0x4, 0xb, 0x6}, {0x3, 0x1, 0xf, 0x7}, {0x2, 0x4, 0x6}, {0x1, 0x2, 0xe, 0x6}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r2, 0x5, 0x1, 0x1ff, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0], <r5=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@fallback=r0, r4, 0x8, 0x2008, r2, @value, @void, @void, @void, r5}, 0x20) (async, rerun: 64)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x10004, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000780)='syzkaller\x00') (rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async)
perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x3, 0x7, 0x8, 0x8, 0x0, 0x101, 0x10c0a1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x400, 0x8}, 0x891, 0x3, 0x2, 0x4, 0xffffffffffffffff, 0x10000, 0x5d, 0x0, 0x3, 0x0, 0xffffffffffff731b}, r3, 0x3, r6, 0x8) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f)

2.430298055s ago: executing program 2 (id=1852):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x200})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000500)={'wg1\x00', 0x200})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f00000003c0)={&(0x7f00000000c0)=@abs, 0x6e, 0x0}, 0x2123)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x1, 0xff, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df1}}, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8)
ioctl$SIOCSIFHWADDR(r8, 0x5452, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000400)={'wlan1\x00'})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0))

2.429626599s ago: executing program 1 (id=1853):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x24, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000740)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000b40)={0x0, 0x5}, 0x8}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000580)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r8, &(0x7f00000011c0))
fstat(r7, 0x0)
fstat(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
fstat(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r10, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
fstat(r10, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000008c0)=@flushpolicy={0x2ec, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010101, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x7, 0x79f29e91d42d2838, 0xfe, 0x80000000, 0x0, 0x8}, {{@in6=@private0, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x3504, 0x1, 0x2, 0x4, 0x2e5631dd, 0x101, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x4d3, 0x6c}, 0xa, @in6=@mcast1, 0x3505, 0x3, 0x0, 0xc, 0x9, 0x291, 0x7}]}, @algo_auth={0x48, 0x1, {{'crc32c-intel\x00'}}}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x4e23, 0x401, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0xff, 0x0, r12}, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d6, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x2f}, {0xd4bd, 0x2e61, 0x7, 0x9, 0x4, 0x4, 0x7f, 0x40dd}, {0x1, 0xfffffffffffffff9, 0x9, 0x9}, {0x0, 0x6, 0x8}, 0x70bd2b, 0x0, 0x2, 0x2, 0x7, 0x4}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @sa={0xe4, 0x6, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x2, 0x4e21, 0x9, 0xa, 0x40, 0x40, 0x1d, r13, r14}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xff}, @in=@private=0xa010101, {0xfff, 0x0, 0x401, 0x3283, 0x81, 0x9db6, 0x8, 0xe1}, {0x6, 0x8, 0x81, 0x8001}, {0x5, 0x5, 0xd1}, 0x70bd29, 0x0, 0xa, 0x0, 0xf}}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x48801, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r6}}, {@uid={'uid', 0x3d, r9}}, {@uid={'uid', 0x3d, r14}}], [{@measure}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'memory.events\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)

2.320158784s ago: executing program 0 (id=1854):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(r0, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x78, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0xc910) (async)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
gettid() (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}) (async)
fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}) (async)
fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x4008, &(0x7f00000003c0)={[{@gid={'gid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}, {}]}) (async)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000200)={[{@uid={'uid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x300}}, {@mode={'mode', 0x3d, 0xfff}}, {@mode={'mode', 0x3d, 0x3d8a}}], [{@flag='sync'}, {@appraise_type}, {@dont_measure}, {@appraise_type}]})

2.084573039s ago: executing program 1 (id=1855):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x38, 0x701, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x3}, 0x29, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

2.083695744s ago: executing program 2 (id=1856):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x10}, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000000000001c2d69e510228e227fd0b19f9600000000000000ac1414aa0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffefffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000822906cc0000fc000000000000000000000000000001fc020000000000000000000000000000fe8000f0ffffffffffffff00000000aa33030009020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000800"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10140)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x60)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x24000884)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x1c1)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000000000000002000005000000000000c552d47ec152440ac739b64c9cda8c4a8b8cb30ff57b1a0a443f419e8f9605fae2d146cd2caeb98d514c1e00aa4fd6afbde80dee25e75738987b5ca804d9e64305d01c2fabeca11d945b4cf7e634a9e4385dc079a06e63aeea43b22bc8d4a9ff6da3913e41fabec0f1c3fb772c31ebe1fd680590d176fef029de0b54abb6b22a75b57b7304879cde10547bf462e15f2758c0e18faf5798f894aba886124b8bf544c3eb4898f42a6649b754bf8341f3b03be0d5"], 0x14}}, 0x4000810)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c3a0500000b01020000000000000000000000080800034000000001080002400000000108000240000000030800034000000001080003400000000008000340000000010800010077673100080001007d232d00080003400000000057e71d4558059881baafbb10c239b83cbe97ea5a81e43e31c8edf6694fc5fb9294d6d862f477009562adee3e1bd3009be1c349"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

1.969634861s ago: executing program 2 (id=1857):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r5 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c5c908f000000040601010000000000000000010000040900020073797a3200000000050001000700000005000100070000000900020073797a300048dae8c64cd8ef28c5599f6da81472cb3c8e747703fe2f5e6966e3311c2395ea0a50a1e5d67c179965e55d031cc9d793fefe029fd1490040916a230057dad9576a808c0721f84c9a166d15273cc283910f81a7ebb5f5a3812ad9c44989c4c0b725f4f0275dcf722351c23e819867b189db2da2b7b5c51ae75089da9d94f0250d54bdec435735186b8d89b3bb615472a16c30fd8014e3beb06bf8a4dbcccb1136ce05f3c68313a3a4ea448167956c3c597a187fd8db"], 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async)
r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x785, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x8, 0x3, 0x6, 0x6}, {0x5, 0x1, 0xb, 0x9}, {0x100001, 0x1, 0x4, 0x7}], 0x10, 0x3}, 0x94)
r8 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000140), 0x4d) (async)
recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80)
close(r8) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=r8, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async)
r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7f)

1.660925273s ago: executing program 0 (id=1858):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x88054)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a1b0000000000000000000a0000090c00024000000000000000010900010073797a31000000000900030073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4048851}, 0x490)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0xfffa)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r0)

1.120736852s ago: executing program 0 (id=1859):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x22a1080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="1543", 0x2}, {&(0x7f0000000280)="fe44005d58eb6d4c207d5cfbab4adc9aec56b82f06a4e593f1bf6dec043a8baca49f73bf34d413df88b717f67d7009e8842c4ff971761e0d362065c4f530892a0281eca30b500636bef3a9bf09fe34c111c5759f6cfb2a938e04d13fa32b9f03759a78683b26997d0f0317d2beab1e64c7b589b8e4fd27b5e50dc2fdc0a1d3d1c3dde472775176f51ed9e5477b3c75b46bdf212667d1ba36491e564ac4255cacfde4", 0xa2}], 0x2, 0x0, 0x0, 0x79726c27eeca33b0}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50)
ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180))
close(r2)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000))

1.030235442s ago: executing program 1 (id=1860):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xa37, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x48800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x19, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10) (async)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1}, 0x90) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (rerun: 32)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) (async, rerun: 64)
ioctl$TUNSETOFFLOAD(r3, 0x4004743c, 0xf0ff1f00000000) (async, rerun: 64)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0xfffffffffffffffb) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffe75) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28)

830.195867ms ago: executing program 2 (id=1861):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8484300ffa15e140602200000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$key(0xf, 0x3, 0x2)
write$cgroup_subtree(r3, 0x0, 0xe)
write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x2b, 'freezer'}, {0x2d, 'freezer'}]}, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063112f0000000000851000000200000085550000000000000095000000000007abd52ad95d5200009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000002060102000000000000000067030000140007800800134001a576ea08000600000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080))

739.516667ms ago: executing program 0 (id=1862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x400, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x300}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

569.389319ms ago: executing program 1 (id=1863):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=<r1=>r0, 0x6, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
r2 = openat$cgroup_int(r1, &(0x7f0000000140)='memory.oom.group\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000180)=0xc000, 0x12)
r3 = syz_clone(0x80800000, &(0x7f0000000200)="50f62bda2328d9eea73a228761c1682d7e05a151650fac51fdac189afcaf5fb77819f55b3cb6734f5c585d714040ae421a2af31aa692b718dddab5e07e450919a430453a058cbf378e74de3663f5cbb8516b9378abb0f44f60aed6a1f528120c764f47c960878453697b02533b404c88137556f6f8ac2533b77e6fd9063e64ae7a558a748993517e17517ad6b1282ffaa65e4fb430ede481944f8f", 0x9b, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="1af580ff1f748cf261e0673903f05d5fa95e237851657c2b6b6cee37d2ca17afeedc09a02e6b5852188d6fe98f30e7b7c24cc318af0f2abf5dbc25d6e7be7ef422f8b2130b12bb1feefbf0729761a0bf4bcdfe6d8eca3a8e1a69edc4c62fb502f5a821c98539871b0ce05951636054526f7c5bac367fd035c2c011bcbfab83c22d70f9fb8f39da91ce48cc4ebc0ff915236f84d76520b94161c4159bd714fa6e3e73d359f2a8e4a750b24e8236f53ef41a3a7d1abf1e52c9b002c4b7")
sendmsg$AUDIT_SET(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x3e9, 0x10, 0x70bd28, 0x25dfdbfc, {0x41, 0x1, 0x1, r3, 0x8001, 0x8, 0x3, 0x6e, 0x0, 0x2, 0x1}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x9040)
sendmsg$nl_crypto(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x22000008}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@alg={0xf8, 0x10, 0x300, 0x70bd26, 0x25dfdbfc, {{'rfc4106-gcm-aesni\x00'}, '\x00', '\x00', 0x2400, 0x400}, [{0x8, 0x1, 0xa0a2}, {0x8, 0x1, 0x3}, {0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004010)
sendmsg$nl_crypto(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@alg={0xf8, 0x10, 0x8, 0x70bd2a, 0x25dfdbfb, {{'ecb-des3_ede-asm\x00'}, '\x00', '\x00', 0x2400, 0x1800}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000842}, 0x8841)
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f5, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x94}, 0x20000000)
perf_event_open(&(0x7f0000000940)={0xd4247ef091560a2b, 0x80, 0xfc, 0x4, 0x4, 0x6b, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xffffffffffffff81, 0x6}, 0xc42, 0x7, 0x8, 0x9, 0xf, 0x80, 0x5, 0x0, 0xffff5f1d, 0x0, 0x1}, 0x0, 0x5, r1, 0x8)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x18}, 0x18)
recvmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f0000000ac0)=""/66, 0x42}, {&(0x7f0000000b40)=""/145, 0x91}, {&(0x7f0000000c00)=""/231, 0xe7}, {&(0x7f0000000d00)=""/26, 0x1a}, {&(0x7f0000000d40)=""/55, 0x37}, {&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/96, 0x60}, {&(0x7f0000000f00)=""/212, 0xd4}], 0x9, &(0x7f00000010c0)=""/152, 0x98}, 0x40002000)
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={r1, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r1, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000001440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0xa, 0x8, 0x8, &(0x7f0000001500)}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={r1, 0x58, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r1, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000017c0)=[0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000001800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001840), &(0x7f0000001880), 0x8, 0x66, 0x8, 0x8, &(0x7f00000018c0)}}, 0x10)
sendmsg$inet(r4, &(0x7f0000001b40)={&(0x7f00000011c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001200)}], 0x1, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}], 0xf8}, 0x4000000)
sendmsg$AUDIT_USER(r1, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x58, 0x3ed, 0x400, 0x2, 0x25dfdbff, "afb2bfbf51841fb62b87039e0fbe7e404dcad5cacb5ec47a260f88849a6eca024e416733fb51559f659a9e1d2b9252d6c01d090135fa4130e44963e8eb7f7670fbf146326bf04f", [""]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)
sendmsg$inet6(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001cc0)="5613e04b8edcb68ca800202dd914a6bc53a4c90e0cc2c5d08d580876a60d4d7c4c2388ad890b9b975295e3e8916b76ea775ca7fa334d9b3cd285275196ed04865a3526a7dd30b6790b77e54751029914c815124a1427e232340057b0df8c8c8c3151a85c76492aacc2289f6dc14200637564f67bc2330a893de71a1605cf917e005757916116b488e41b1feafb19b6a0325a", 0x92}, {&(0x7f0000001d80)="c96f45227e", 0x5}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="89305421d902b932f3de6533e21e5c895b5072e8c21f6211b7caafb81ffee84f406f3095e7f27a36", 0x28}], 0x4}, 0x100000d0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x50, 0x140b, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x408c080}, 0x20000000)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000002fc0)={'veth0_to_bond\x00', 0x600})
bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r1}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000030c0)={{r1, <r9=>0xffffffffffffffff}, &(0x7f0000003040), &(0x7f0000003080)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003240)={r9, &(0x7f0000003100)="c2f5618df8ce965828383772ed1bc7a485c8b37598", &(0x7f0000003140)=""/223, 0x4}, 0x20)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r10, &(0x7f0000003fc0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003f80)={&(0x7f00000032c0)=@deltclass={0xc8c, 0x29, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0, 0x8}, {0xfff2}, {0xffe6}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xf}}}, @c_cbq={{0x8}, {0xc30, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5b, 0x71f7, 0x9, 0x3, 0x7fff, 0xf40, 0x1, 0xe35, 0x5, 0xc, 0xfffffe01, 0x6, 0xfffffffb, 0x7fff, 0x3, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x9, 0x2, 0x69, 0x8, 0x2, 0x44, 0x800, 0x6, 0xfffffffd, 0x3, 0x437, 0x0, 0x5f, 0x2, 0x1, 0x1, 0x3, 0x1ff, 0x40, 0x6, 0x2bc4, 0x7fffffff, 0x99f, 0x7fff, 0xd71f, 0xb, 0xfff, 0x9, 0x3, 0x5, 0xe251, 0x1, 0xfffffffc, 0x6, 0x9, 0x3, 0x2, 0x6, 0x6, 0xfffffffa, 0xf2, 0x3f4f, 0xc28, 0x700, 0x800, 0x200, 0x100, 0xd, 0xd, 0x3, 0x80000000, 0x70, 0x3, 0x36f29273, 0x1, 0x8, 0x1000, 0xbfc, 0x7fffffff, 0x2, 0x101, 0x7fff, 0x7, 0x5b6, 0x3f4c, 0x6, 0x1000, 0x8, 0x41, 0xffffffc5, 0x4, 0x101, 0x2, 0x84, 0x8, 0x80000001, 0x4, 0x7, 0xfffffff9, 0x4, 0x9, 0x6, 0xfffffffc, 0x210, 0x8, 0xfffffffe, 0x7, 0x9, 0xb, 0x9, 0x6, 0xa, 0x23917e64, 0x8, 0xa76, 0x200, 0x8, 0x4, 0xfffffb93, 0x2, 0x9, 0xd, 0x53, 0x10, 0x4, 0x5, 0x7, 0x5, 0xfffffffb, 0x9, 0x8, 0x8, 0x401, 0x966b, 0xb, 0x2, 0x1, 0x2, 0xfff, 0x4fa0, 0x400, 0xfffffdad, 0x8001, 0x8, 0x930, 0x1, 0x745c, 0x3, 0x1d35, 0x7000000, 0x4, 0xc, 0x5, 0x0, 0xd, 0x9, 0xc00, 0x0, 0x2, 0x1000, 0x6, 0x3, 0x9, 0x6, 0x80, 0x3, 0x0, 0x37a, 0x9, 0xff, 0xfff, 0x9, 0x3, 0x7, 0x45a, 0x4, 0x7e40685e, 0x90d, 0x7, 0x4, 0x5, 0x7, 0x3, 0x4, 0xffff, 0x0, 0x599, 0x6, 0x77, 0x401, 0x1, 0x4, 0x0, 0x100, 0x101, 0x7ff, 0x8000, 0x1, 0x5, 0x5, 0xd097, 0x1, 0x3ff, 0x1ff, 0x34, 0x3, 0x1, 0x7, 0xd, 0x6, 0x84c, 0x2, 0x10000, 0x2d000000, 0x5, 0x1, 0x4, 0x1, 0x0, 0x0, 0xe5a3, 0x7, 0x7, 0x856a, 0x6, 0x100, 0x13a, 0x1f, 0xe0e, 0x2, 0x7fff, 0x2, 0xf270, 0x8, 0x53cd3a88, 0x800, 0x3, 0x4, 0x4, 0x4, 0x9, 0x7, 0x1d4, 0xf, 0x4, 0x6, 0x0, 0xce6e, 0x0, 0x7, 0x3ff, 0x9, 0x8, 0x8, 0x1]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x8, 0x9, 0x5, 0x7fffffff, 0x2, 0xff, 0x2, 0x1, 0x3, 0xfcc, 0x0, 0x2, 0xdcb, 0x0, 0x5, 0x6d, 0x6, 0x8, 0x0, 0x5, 0xffff, 0x0, 0x4, 0x1, 0xd687, 0x1, 0x6, 0x8, 0x1, 0x0, 0xc0, 0x9, 0x362, 0x7, 0x9, 0xc1c, 0xa7, 0x7, 0x3, 0x7c, 0x9, 0x7, 0x0, 0x0, 0x5, 0x10001, 0x1, 0x9, 0x8, 0x2, 0xe, 0x8, 0x8, 0x7, 0x4f, 0x3, 0x6b8e, 0x8, 0x400, 0x28, 0x101, 0xffffff7a, 0xc, 0x7, 0x80000001, 0x800, 0x86, 0xa, 0x40, 0x80000000, 0x1, 0x782, 0xff, 0x1, 0x1, 0xe12, 0x7ff, 0x200, 0x9, 0x8, 0xbc3, 0xfffffffb, 0x4, 0x9, 0x51, 0x3, 0xfffffff9, 0x74e1, 0x9, 0xfffffffa, 0x0, 0x6, 0x3, 0xd7ea, 0xb6, 0x8, 0x0, 0x0, 0xab6, 0xfff, 0x9853, 0x9, 0x4, 0x9, 0x94, 0xffffffff, 0x9, 0x2, 0x8001, 0x40004000, 0x7ff, 0x9, 0x400, 0x8, 0x8, 0x6, 0x10, 0x6, 0x4, 0x1, 0x6, 0x5, 0xe, 0x4, 0x7, 0x5cbf, 0x0, 0x4, 0xfffffff9, 0x7fff, 0x6, 0xbd, 0x8, 0x3, 0x0, 0x7, 0x6, 0x5, 0x6, 0xa, 0xffffffff, 0x6, 0x1, 0x17b, 0x4800000, 0x8, 0x101, 0x16, 0x1, 0x400, 0x8, 0xb, 0x7, 0x6, 0x200, 0x7, 0x1, 0xd, 0x963, 0x6, 0x0, 0xfffffff7, 0x1f28c0, 0x80000000, 0xbbc5, 0x8, 0xcd36, 0xb, 0xac8, 0x100, 0x0, 0x401, 0x200, 0xfffffff7, 0x7fffffff, 0x5, 0x7, 0x66, 0x4, 0x62c6, 0x1, 0x8, 0x5, 0xb, 0x1, 0x5, 0xfffffff8, 0x3, 0xd4, 0x1, 0x0, 0x7fff, 0x899, 0xfffffff7, 0x0, 0x5dbe, 0x2, 0x5, 0x9, 0x6, 0x0, 0x0, 0x6, 0x1, 0x4, 0xc, 0x4, 0x6, 0x5, 0x9, 0x81, 0xe, 0x3, 0x4, 0xa, 0x1, 0x7, 0x7fffffff, 0x4851, 0xc30, 0x1ff, 0x8001, 0x1, 0x8, 0x1, 0x101, 0x80000000, 0x2, 0x0, 0x401, 0x8, 0x200, 0x9, 0x4, 0x5, 0x401, 0x0, 0x4, 0x401, 0x3fa, 0x6, 0x1, 0x9213, 0x2, 0x80000001, 0x81, 0x8, 0x95, 0x4, 0x10001, 0x0, 0x5, 0x1, 0x5, 0xec0]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x7, 0x7, 0x7f, 0x2, 0xfffffff8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0x1, 0x8, 0x9, 0x80}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x3d6b, 0x1, 0x5, 0x2, 0x1, 0x6, 0xfffffffe, 0x5, 0x4, 0x0, 0x744, 0x1, 0x0, 0x3, 0x6, 0x6, 0x8, 0x7fff, 0x2, 0x8, 0x5, 0xf, 0x6, 0x6, 0x0, 0x8, 0xcd, 0x4, 0xf6, 0xffbb, 0x7, 0x8000, 0x1, 0x4, 0x6, 0x9, 0x717b, 0x8, 0x74, 0x81, 0x100, 0x0, 0x5cb, 0x0, 0x0, 0x9, 0x7, 0x40, 0x1, 0x1000, 0x3, 0xe5, 0x60000, 0xc, 0x5, 0x1000, 0x7, 0x0, 0x97cb, 0x80, 0x9, 0x3, 0x5, 0x6, 0x604, 0xd, 0xa5, 0x1, 0x7, 0x1a, 0x4, 0x100, 0x80000000, 0x9, 0x9, 0x77d0ffb8, 0x10000, 0x7, 0x42, 0x45, 0xb4fa, 0x2, 0x0, 0xb6d, 0x5, 0x272, 0x2, 0xfffffe00, 0x80000000, 0x3, 0x8, 0xd, 0x401, 0x47f0, 0xc0, 0xb, 0x9, 0x5, 0xc3, 0x7, 0x0, 0x8, 0x1, 0x8, 0x4, 0x6, 0x100, 0x1, 0xc, 0x401, 0xb, 0x80000000, 0xffffffc0, 0x4, 0x9, 0x7fff, 0x5, 0x6, 0x10, 0x3, 0x18000000, 0x2, 0x5c1b, 0x6, 0x100, 0x2, 0xc, 0x5, 0x6, 0x35f3, 0x5, 0x2, 0x5f5, 0x7ff, 0xd8, 0x4, 0x7, 0xffffffff, 0x200, 0xfffffff7, 0x2, 0x9, 0x8, 0xe4, 0xfffffc01, 0xfffffffe, 0x400, 0x7f, 0xe6b, 0x4, 0x7fff, 0x95, 0x1ff, 0xfffffffd, 0x5, 0x3, 0x494f, 0x9, 0x1a, 0x2a6b, 0x3ff, 0x1ff, 0x1, 0x7, 0x8, 0x2, 0x10001, 0xa, 0x556d, 0x8, 0x2, 0xfffffffd, 0x1, 0xe0c, 0xb, 0x1, 0x393, 0x2, 0xffffffff, 0x3, 0x400, 0x0, 0x0, 0x1, 0x5, 0x1, 0x8000, 0x7, 0x4, 0x1, 0x1, 0xff, 0xfffffffa, 0x6, 0x101, 0x3, 0x2, 0x9, 0x6, 0x81, 0x80000001, 0xc00000, 0x0, 0x0, 0x1, 0xd985, 0xfffffffc, 0x1, 0xc, 0x240b, 0x4, 0x2, 0x4, 0x26fd, 0xd, 0x0, 0x3d0, 0xffff7fff, 0xd, 0x3000, 0x7, 0x5, 0x80000001, 0x766, 0x52b, 0x86, 0x8, 0x1ff, 0x3, 0x2, 0x401, 0x3, 0x0, 0x3918a3f2, 0x8001, 0x3, 0x7fff, 0x2, 0x6, 0xf9, 0x4, 0x1, 0x10, 0xfffffff1, 0x7, 0xfffffff7, 0x7ac, 0x40c, 0xfff, 0x200, 0x1, 0x4, 0x1, 0x80000000, 0x27c]}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}]}, 0xc8c}, 0x1, 0x0, 0x0, 0x2004801}, 0x0)
close(r10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000004140)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004100)={&(0x7f0000004040)={0x88, 0x1403, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x88}}, 0x4004004)

109.994514ms ago: executing program 1 (id=1864):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d640500000000006504"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff4}, 0x0, 0xc8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22e0ee00000000000000000000000000007fc5f603ff65ec5deb004298f479a79d93014b8e7781c2"], 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000, 0x1946}, 0x0, 0x9, 0x8, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0xa, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socket$kcm(0x10, 0x2, 0x10)

0s ago: executing program 2 (id=1865):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000a00010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="5c0000007a006bcd9e3fe3dc6e08170007000054250ec000488bc3a00000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000003c0000017c00000400fc800c00018006000600800a0000080002801326da080c000500050000c49ad25d18b1d0991b9e5d0100000000005bef617b04ffff68d0ce3fb3f800"/97], 0x38}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000a00010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="5c0000007a006bcd9e3fe3dc6e08170007000054250ec000488bc3a00000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000003c0000017c00000400fc800c00018006000600800a0000080002801326da080c000500050000c49ad25d18b1d0991b9e5d0100000000005bef617b04ffff68d0ce3fb3f800"/97], 0x38}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) (async)

kernel console output (not intermixed with test programs):

[   60.164354][ T5970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.219442][ T5971] netlink: 'syz.0.19': attribute type 13 has an invalid length.
[   60.223495][ T5971] netlink: 'syz.0.19': attribute type 17 has an invalid length.
[   60.276567][ T5971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.847988][ T5974] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20'.
[   60.954194][ T5978] netlink: 'syz.2.23': attribute type 10 has an invalid length.
[   60.957285][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.960360][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.994787][ T5978] bridge_slave_1: left allmulticast mode
[   60.997030][ T5978] bridge_slave_1: left promiscuous mode
[   60.998877][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.014595][ T5978] bridge_slave_0: left allmulticast mode
[   61.016662][ T5978] bridge_slave_0: left promiscuous mode
[   61.018868][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.057375][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   61.486890][ T6009] netlink: 'syz.2.29': attribute type 10 has an invalid length.
[   61.543983][ T6009] bond0: (slave bond_slave_0): Releasing backup interface
[   61.709034][ T6022] netlink: 'syz.0.35': attribute type 10 has an invalid length.
[   61.720739][ T5853] Bluetooth: hci1: command tx timeout
[   61.722715][ T5845] Bluetooth: hci0: command tx timeout
[   61.724568][ T5845] Bluetooth: hci2: command tx timeout
[   61.729618][ T6022] bridge0: port 3(netdevsim0) entered blocking state
[   61.737213][ T6022] bridge0: port 3(netdevsim0) entered disabled state
[   61.742567][ T6022] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   61.777541][ T6022] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   62.323036][ T6033] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET)
[   62.572130][ T6040] syzkaller0: entered promiscuous mode
[   62.573992][ T6040] syzkaller0: entered allmulticast mode
[   63.015956][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.270354][ T6078] netlink: 'syz.0.46': attribute type 1 has an invalid length.
[   63.280638][ T6078] netlink: 'syz.0.46': attribute type 3 has an invalid length.
[   63.800701][   T54] Bluetooth: hci2: command tx timeout
[   63.802402][   T54] Bluetooth: hci1: command tx timeout
[   63.804036][   T54] Bluetooth: hci0: command tx timeout
[   63.837694][ T6090] netlink: 'syz.1.53': attribute type 10 has an invalid length.
[   63.889132][ T6090] team0: Port device wlan1 added
[   63.918261][ T6094] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.132082][ T6110] netlink: 'syz.0.57': attribute type 29 has an invalid length.
[   64.135607][ T6110] __nla_validate_parse: 15 callbacks suppressed
[   64.135623][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   64.149897][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'.
[   64.174379][ T6114] netlink: 'syz.1.58': attribute type 10 has an invalid length.
[   64.234536][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'.
[   64.237991][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.59'.
[   64.249921][ T6114] netlink: 'syz.1.58': attribute type 11 has an invalid length.
[   64.253879][ T6114] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.58'.
[   64.258801][ T6112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.363501][ T6126] netlink: 'syz.2.60': attribute type 4 has an invalid length.
[   64.365942][ T6126] netlink: 152 bytes leftover after parsing attributes in process `syz.2.60'.
[   64.438247][ T6130] netlink: 'syz.1.62': attribute type 27 has an invalid length.
[   64.442385][ T6130] netlink: 'syz.1.62': attribute type 4 has an invalid length.
[   64.444997][ T6130] netlink: 152 bytes leftover after parsing attributes in process `syz.1.62'.
[   64.526058][ T6125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.544009][ T6126] .`: renamed from bond0 (while UP)
[   64.635813][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   64.649123][ T6134] netlink: 'syz.1.64': attribute type 10 has an invalid length.
[   64.744715][ T6134] team0 (unregistering): Port device team_slave_0 removed
[   64.754694][ T6134] team0 (unregistering): Port device team_slave_1 removed
[   64.759002][ T6134] team0 (unregistering): Port device wlan1 removed
[   64.775322][ T6133] netlink: 'syz.0.63': attribute type 10 has an invalid length.
[   64.778674][ T6133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.63'.
[   65.283004][ T6171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.73'.
[   66.114813][ T6197] .`: renamed from bond0 (while UP)
[   66.133052][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.137119][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.150493][ T6196] bridge_slave_1: left allmulticast mode
[   66.153419][ T6196] bridge_slave_1: left promiscuous mode
[   66.155774][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.160374][ T6196] bridge_slave_0: left allmulticast mode
[   66.163178][ T6196] bridge_slave_0: left promiscuous mode
[   66.165100][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.303181][ T6204] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.364974][ T6211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.313370][ T6227] =======================================================
[   68.313370][ T6227] WARNING: The mand mount option has been deprecated and
[   68.313370][ T6227]          and is ignored by this kernel. Remove the mand
[   68.313370][ T6227]          option from the mount to silence this warning.
[   68.313370][ T6227] =======================================================
[   68.494344][ T6240] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   68.708551][ T6256] delete_channel: no stack
[   68.870169][ T6268] validate_nla: 4 callbacks suppressed
[   68.870200][ T6268] netlink: 'syz.2.99': attribute type 10 has an invalid length.
[   68.992352][ T6269] unsupported nlmsg_type 40
[   68.995872][ T6269] netlink: 'syz.2.99': attribute type 10 has an invalid length.
[   69.591794][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.602185][ T6268] .`: (slave batadv0): Enslaving as an active interface with an up link
[   69.605111][ T6269] batadv0: entered promiscuous mode
[   69.607043][ T6269] batadv0: entered allmulticast mode
[   69.612143][ T6269] .`: (slave batadv0): Releasing backup interface
[   69.636467][ T6269] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   69.857433][ T6288] __nla_validate_parse: 11 callbacks suppressed
[   69.857444][ T6288] netlink: 232 bytes leftover after parsing attributes in process `syz.0.104'.
[   69.864280][ T6288] netlink: 'syz.0.104': attribute type 5 has an invalid length.
[   69.868085][ T6288] netlink: 'syz.0.104': attribute type 7 has an invalid length.
[   69.876941][ T6288] : entered promiscuous mode
[   70.008314][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   70.071545][ T6298] netlink: 72 bytes leftover after parsing attributes in process `syz.0.108'.
[   70.294314][ T6323] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.114'.
[   70.299810][ T6323] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   70.881417][ T6336] netlink: 'syz.0.118': attribute type 8 has an invalid length.
[   70.886131][ T6336] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.118'.
[   70.952158][ T6336] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   71.052816][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.054993][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.224449][ T6342] syzkaller0: entered allmulticast mode
[   71.280968][ T6344] netlink: 80 bytes leftover after parsing attributes in process `syz.1.122'.
[   71.816213][    C1] Illegal XDP return value 16128 on prog  (id 58) dev bond_slave_0, expect packet loss!
[   72.188343][ T6367] netlink: 68 bytes leftover after parsing attributes in process `syz.2.128'.
[   72.209295][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'.
[   72.227175][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'.
[   72.382327][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   72.404799][ T6373] : entered promiscuous mode
[   73.185069][ T6389] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   73.684474][ T6399] netlink: 'syz.0.138': attribute type 10 has an invalid length.
[   73.687869][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.696552][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.699176][ T6399] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.714804][ T6399] team0: Port device bridge0 added
[   74.769066][ T6420] lo: entered allmulticast mode
[   74.790945][ T6420] lo: entered promiscuous mode
[   74.792632][ T6420] lo: left allmulticast mode
[   74.903337][ T6422] __nla_validate_parse: 6 callbacks suppressed
[   74.903348][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[   74.909065][ T6422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'.
[   77.249122][ T6429] pim6reg1: entered promiscuous mode
[   77.256274][ T6429] pim6reg1: entered allmulticast mode
[   77.270203][ T6436] veth1_macvtap: left promiscuous mode
[   77.274019][ T6436] macsec0: entered promiscuous mode
[   77.348146][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'.
[   77.356293][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'.
[   77.458957][ T6444] syzkaller0: entered promiscuous mode
[   77.462194][ T6444] syzkaller0: entered allmulticast mode
[   77.553994][ T6448] netlink: 14 bytes leftover after parsing attributes in process `syz.2.153'.
[   77.781428][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.154'.
[   78.054645][ T6459] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   78.117566][ T6463] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.158'.
[   78.122284][ T6463] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.158'.
[   78.125139][ T6463] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.158'.
[   78.129980][ T6463] veth1_macvtap: left promiscuous mode
[   78.133496][ T6463] macsec0: entered promiscuous mode
[   78.194575][ T6468] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   78.197121][ T6468] batadv0: left promiscuous mode
[   78.198638][ T6468] batadv0: left allmulticast mode
[   78.204820][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.208040][ T6468] .`: (slave batadv0): Enslaving as an active interface with an up link
[   78.344708][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'.
[   78.412738][ T6487] netlink: 'syz.2.165': attribute type 27 has an invalid length.
[   78.415868][ T6487] netlink: 'syz.2.165': attribute type 4 has an invalid length.
[   78.478640][ T6496] netlink: 'syz.2.168': attribute type 10 has an invalid length.
[   78.487902][ T6496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.550664][ T6500] netlink: 'syz.1.170': attribute type 10 has an invalid length.
[   78.605161][ T6494] netlink: 'syz.0.167': attribute type 12 has an invalid length.
[   78.649666][ T6502] netlink: 'syz.2.171': attribute type 1 has an invalid length.
[   79.079768][ T6512] netlink: 'syz.2.173': attribute type 2 has an invalid length.
[   79.084670][ T6512] netlink: 'syz.2.173': attribute type 8 has an invalid length.
[   79.161786][ T6517] vxcan1: entered allmulticast mode
[   79.278038][ T6526] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   79.392681][ T6520] syzkaller0: entered promiscuous mode
[   79.394605][ T6520] syzkaller0: entered allmulticast mode
[   79.404520][ T6520] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   79.926866][ T6535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.984833][ T6556] __nla_validate_parse: 11 callbacks suppressed
[   79.984845][ T6556] netlink: 152 bytes leftover after parsing attributes in process `syz.1.184'.
[   80.040089][ T6556] .`: renamed from bond0 (while UP)
[   80.650925][ T5845] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[   80.764025][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'.
[   81.092597][ T6604] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.198'.
[   81.196469][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'.
[   81.226090][ T6616] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   81.237466][ T6615] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.201'.
[   81.247358][   T47] cfg80211: failed to load regulatory.db
[   81.509329][ T6625] nft_compat: unsupported protocol 0
[   81.530281][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'.
[   81.607597][ T6628] C: renamed from team_slave_0
[   81.612701][ T6628] netlink: 116 bytes leftover after parsing attributes in process `syz.1.204'.
[   81.734160][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.206'.
[   81.737581][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.206'.
[   81.889143][ T6639] netlink: 152 bytes leftover after parsing attributes in process `syz.0.208'.
[   81.897756][ T6639] `: renamed from team0 (while UP)
[   82.397106][ T6644] mac80211_hwsim hwsim3 .3c: renamed from wlan1
[   82.425501][ T6647] syzkaller0: entered promiscuous mode
[   82.427910][ T6647] syzkaller0: entered allmulticast mode
[   82.813568][ T6672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.128647][ T6680] validate_nla: 10 callbacks suppressed
[   83.128661][ T6680] netlink: 'syz.2.219': attribute type 13 has an invalid length.
[   83.143011][ T6680] erspan0: refused to change device tx_queue_len
[   83.145569][ T6680] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   83.219665][ T6683] Dead loop on virtual device ip6_vti0, fix it urgently!
[   83.237269][ T6683] openvswitch: netlink: Tunnel attr 72 out of range max 16
[   83.241129][ T6683] netlink: 'syz.1.220': attribute type 10 has an invalid length.
[   84.313140][ T6721] netlink: 'syz.2.229': attribute type 21 has an invalid length.
[   84.671707][ T6728] netlink: 'syz.0.233': attribute type 21 has an invalid length.
[   84.676051][ T6730] netlink: 'syz.0.233': attribute type 21 has an invalid length.
[   84.678591][ T6730] netlink: 'syz.0.233': attribute type 22 has an invalid length.
[   84.791866][ T6741] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   84.967410][ T6755] pim6reg1: entered allmulticast mode
[   85.033515][ T6765] netlink: 'syz.2.244': attribute type 39 has an invalid length.
[   85.065358][ T6765] syzkaller0: entered promiscuous mode
[   85.068207][ T6765] syzkaller0: entered allmulticast mode
[   85.325930][ T6779] : port 1(vlan0) entered blocking state
[   85.328955][ T6779] : port 1(vlan0) entered disabled state
[   85.332322][ T6779] vlan0: entered allmulticast mode
[   85.334307][ T6779] veth0_vlan: entered allmulticast mode
[   85.340311][ T6779] vlan0: entered promiscuous mode
[   85.346975][ T6775] : port 1(vlan0) entered blocking state
[   85.349805][ T6775] : port 1(vlan0) entered forwarding state
[   85.523286][ T6785] netlink: 'syz.2.250': attribute type 11 has an invalid length.
[   85.525732][ T6785] __nla_validate_parse: 11 callbacks suppressed
[   85.525740][ T6785] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.250'.
[   85.703283][ T6784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.725653][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.774192][ T5909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.845788][ T5909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.923381][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[   85.926147][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[   85.929242][ T5909] bridge0: port 3(netdevsim0) entered disabled state
[   85.947792][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.001989][ T6791] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[   86.083051][ T6791] : port 1(vlan0) entered disabled state
[   86.173220][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.176530][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.179258][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.182669][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.185392][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.264385][ T5909] bridge_slave_1: left allmulticast mode
[   86.270597][ T5909] bridge_slave_1: left promiscuous mode
[   86.273377][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.339542][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.546241][ T5909] `: Port device bridge0 removed
[   86.653117][ T5909] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.671106][ T5909] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.676439][ T5909] .` (unregistering): Released all slaves
[   86.702055][ T6810] netlink: 'syz.1.256': attribute type 11 has an invalid length.
[   86.704809][ T6810] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.256'.
[   86.756635][ T5909] : left promiscuous mode
[   86.869687][ T6833] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'.
[   86.877708][ T6797] chnl_net:caif_netlink_parms(): no params data found
[   86.953987][ T6833] netlink: 'syz.2.257': attribute type 12 has an invalid length.
[   86.959368][ T6833] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.257'.
[   86.998733][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.003484][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.005821][ T6797] bridge_slave_0: entered allmulticast mode
[   87.008579][ T6797] bridge_slave_0: entered promiscuous mode
[   87.031649][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.034553][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.036992][ T6797] bridge_slave_1: entered allmulticast mode
[   87.039787][ T6797] bridge_slave_1: entered promiscuous mode
[   87.171887][ T6809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.214624][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.219681][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.267532][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'.
[   87.270347][ T6845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'.
[   87.280396][ T6797] team0: Port device team_slave_0 added
[   87.369671][ T6857] netlink: 'syz.2.261': attribute type 41 has an invalid length.
[   87.374223][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.261'.
[   87.380957][ T6797] team0: Port device team_slave_1 added
[   87.413052][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.420631][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.428609][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.439061][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.441348][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.449105][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.491908][ T5909] hsr_slave_0: left promiscuous mode
[   87.494698][ T5909] hsr_slave_1: left promiscuous mode
[   87.496769][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.499508][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.517394][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.519716][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.532766][ T5909] veth0_macvtap: left promiscuous mode
[   87.534808][ T5909] veth1_vlan: left promiscuous mode
[   87.915170][ T5909] ` (unregistering): Port device team_slave_1 removed
[   87.936248][ T5909] ` (unregistering): Port device team_slave_0 removed
[   88.184200][ T6862] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[   88.200818][   T54] Bluetooth: hci1: command tx timeout
[   88.267536][ T6797] hsr_slave_0: entered promiscuous mode
[   88.269842][ T6797] hsr_slave_1: entered promiscuous mode
[   88.434828][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   88.437583][ T6883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'.
[   88.471962][ T6884] netlink: 'syz.2.265': attribute type 10 has an invalid length.
[   88.474321][ T6884] netlink: 55 bytes leftover after parsing attributes in process `syz.2.265'.
[   88.496715][ T6887] netlink: 'syz.1.267': attribute type 10 has an invalid length.
[   88.543152][ T6884] vlan0 (unregistering): left allmulticast mode
[   88.545127][ T6884] vlan0 (unregistering): left promiscuous mode
[   88.547111][ T6884] : port 1(vlan0) entered disabled state
[   88.816224][ T6797] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.824504][ T6797] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.843330][ T6797] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.859303][ T6797] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.960403][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.978633][ T6797] 8021q: adding VLAN 0 to HW filter on device team0
[   88.985688][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.988016][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.996463][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.998805][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.130239][ T6797] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.169574][ T6797] veth0_vlan: entered promiscuous mode
[   89.181219][ T6797] veth1_vlan: entered promiscuous mode
[   89.204860][ T6797] veth0_macvtap: entered promiscuous mode
[   89.210866][ T6797] veth1_macvtap: entered promiscuous mode
[   89.228183][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.245646][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.267409][ T5909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.276061][ T5909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.283254][ T5909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.288558][ T5909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.385573][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.388666][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.429698][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.433731][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.589508][ T6947] netlink: 'syz.2.273': attribute type 11 has an invalid length.
[   89.661665][   T33] audit: type=1107 audit(1758562312.330:2): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   89.662131][ T6949] netlink: 'syz.1.274': attribute type 4 has an invalid length.
[   89.747296][ T6953] netlink: 'syz.1.276': attribute type 3 has an invalid length.
[   89.969421][ T6972] netlink: 'syz.1.281': attribute type 10 has an invalid length.
[   90.138856][ T6984] netlink: 'syz.1.284': attribute type 10 has an invalid length.
[   90.145423][ T6984] veth0_vlan: entered allmulticast mode
[   90.221082][ T6988] veth1_macvtap: left promiscuous mode
[   90.223342][ T6988] macsec0: entered promiscuous mode
[   90.281209][   T54] Bluetooth: hci1: command tx timeout
[   90.292613][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.438627][ T6997] netlink: 'syz.0.287': attribute type 10 has an invalid length.
[   90.495674][ T7000] nft_compat: unsupported protocol 0
[   90.607513][ T6997] team0 (unregistering): Port device team_slave_0 removed
[   90.626044][ T6997] team0 (unregistering): Port device team_slave_1 removed
[   91.377870][ T7007] netlink: 'syz.2.291': attribute type 8 has an invalid length.
[   91.380327][ T7007] __nla_validate_parse: 7 callbacks suppressed
[   91.380334][ T7007] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.291'.
[   91.574778][ T7010] netlink: 'syz.2.292': attribute type 10 has an invalid length.
[   91.708752][ T7020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.294'.
[   92.361758][   T54] Bluetooth: hci1: command tx timeout
[   92.650212][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[   93.278878][ T7053] aaaaaaaaa: renamed from wg2 (while UP)
[   93.285865][ T7051] validate_nla: 2 callbacks suppressed
[   93.285875][ T7051] netlink: 'syz.0.301': attribute type 3 has an invalid length.
[   93.290052][ T7051] netlink: 201332 bytes leftover after parsing attributes in process `syz.0.301'.
[   93.487417][ T7064] netlink: 'syz.2.305': attribute type 9 has an invalid length.
[   93.491079][ T7064] netlink: 'syz.2.305': attribute type 13 has an invalid length.
[   93.493851][ T7064] netlink: 'syz.2.305': attribute type 58 has an invalid length.
[   93.496897][ T7064] netlink: 152 bytes leftover after parsing attributes in process `syz.2.305'.
[   93.509826][ T7065] ]X: renamed from veth0_vlan
[   93.687345][ T5909] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.903556][ T7079] xt_socket: unknown flags 0x20
[   93.906235][ T7080] xt_socket: unknown flags 0x20
[   93.908889][ T7080] netlink: 96 bytes leftover after parsing attributes in process `syz.2.310'.
[   93.913124][ T7079] netlink: 96 bytes leftover after parsing attributes in process `syz.2.310'.
[   93.916952][ T7080] netlink: 'syz.2.310': attribute type 10 has an invalid length.
[   94.035900][ T7084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.038922][ T7084] IPv6: NLM_F_CREATE should be set when creating new route
[   94.041506][ T7084] IPv6: NLM_F_CREATE should be set when creating new route
[   94.043868][ T7084] IPv6: NLM_F_CREATE should be set when creating new route
[   94.230975][ T7093] netlink: 'syz.1.314': attribute type 10 has an invalid length.
[   94.234085][ T7093] netlink: 55 bytes leftover after parsing attributes in process `syz.1.314'.
[   94.283273][ T7095] netlink: 14 bytes leftover after parsing attributes in process `syz.2.315'.
[   94.442527][   T54] Bluetooth: hci1: command tx timeout
[   94.554504][ T7102] netlink: 'syz.0.318': attribute type 10 has an invalid length.
[   94.563394][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'.
[   94.847627][ T7102] batman_adv: batadv0: Adding interface: virt_wifi0
[   94.849745][ T7102] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.869312][ T7102] batman_adv: batadv0: Interface activated: virt_wifi0
[   95.368150][ T7118] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   95.374222][ T7118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.477783][ T7118] netlink: 'syz.2.323': attribute type 39 has an invalid length.
[   95.535157][ T7133] netlink: 'syz.0.326': attribute type 10 has an invalid length.
[   95.752625][ T7139] netlink: 'syz.1.328': attribute type 25 has an invalid length.
[   96.716837][ T7159] __nla_validate_parse: 4 callbacks suppressed
[   96.716949][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'.
[   97.275935][ T7173] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.337'.
[   97.344048][ T7176] netlink: 348 bytes leftover after parsing attributes in process `syz.2.338'.
[   97.348440][ T7176] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.338'.
[   97.509714][ T7182] netlink: 152 bytes leftover after parsing attributes in process `syz.2.340'.
[   97.556572][ T7182] netlink: 6 bytes leftover after parsing attributes in process `syz.2.340'.
[   97.572444][ T7182] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[   98.131146][ T7202] netlink: 196 bytes leftover after parsing attributes in process `syz.0.345'.
[   98.235330][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[   98.415606][ T7213] 8021q: adding VLAN 0 to HW filter on device .`
[   98.423435][ T7213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.600439][ T7221] tun0: tun_chr_ioctl cmd 1074025675
[   98.605992][ T7221] tun0: persist enabled
[   98.611466][ T7221] tun0: tun_chr_ioctl cmd 1074025675
[   98.614112][ T7221] tun0: persist disabled
[  100.044531][ T7247] validate_nla: 6 callbacks suppressed
[  100.044583][ T7247] netlink: 'syz.1.357': attribute type 39 has an invalid length.
[  100.120792][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'.
[  100.209864][ T7247] hsr_slave_0 (unregistering): left promiscuous mode
[  100.232852][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'.
[  100.266814][ T7252] netlink: 'syz.0.359': attribute type 29 has an invalid length.
[  100.270035][ T7253] netlink: 'syz.0.359': attribute type 29 has an invalid length.
[  100.508200][ T7260] pim6reg1: entered promiscuous mode
[  100.510032][ T7260] pim6reg1: entered allmulticast mode
[  100.528214][ T7257] netlink: 'syz.2.360': attribute type 29 has an invalid length.
[  100.535362][ T7257] netlink: 'syz.2.360': attribute type 29 has an invalid length.
[  100.547028][ T7257] netlink: 'syz.2.360': attribute type 29 has an invalid length.
[  100.552625][ T7257] netlink: 'syz.2.360': attribute type 29 has an invalid length.
[  100.669424][ T7264] netlink: 'syz.1.362': attribute type 10 has an invalid length.
[  100.672845][ T7264] batman_adv: batadv0: Adding interface: hsr_slave_1
[  100.675170][ T7264] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.688058][ T7264] batman_adv: batadv0: Interface activated: hsr_slave_1
[  101.059865][ T7273] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  101.098692][ T7273] netlink: 'syz.0.366': attribute type 10 has an invalid length.
[  101.113351][ T7273] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.360958][ T7279] netlink: 'syz.0.369': attribute type 21 has an invalid length.
[  101.388811][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.394736][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.409267][ T7282] openvswitch: netlink: IP tunnel dst address not specified
[  101.423680][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.426239][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.429117][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.431860][ T7279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.464647][ T7279] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  101.834180][ T7293] __nla_validate_parse: 6 callbacks suppressed
[  101.834195][ T7293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.373'.
[  101.850356][ T7293] netlink: 3 bytes leftover after parsing attributes in process `syz.0.373'.
[  102.099594][ T7298] .`: (slave hsr0): The slave device specified does not support setting the MAC address
[  102.132977][ T7298] .`: (slave hsr0): Error -95 calling set_mac_address
[  102.421134][ T7322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.380'.
[  102.426286][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.445840][ T7322] bridge_slave_0 (unregistering): left allmulticast mode
[  102.448706][ T7322] bridge_slave_0 (unregistering): left promiscuous mode
[  102.452052][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.550897][ T7325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.381'.
[  102.663065][   T54] Bluetooth: hci0: ISO packet for unknown connection handle 5
[  102.673399][ T7333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.383'.
[  102.697285][ T7335] netlink: 182 bytes leftover after parsing attributes in process `syz.0.385'.
[  102.803244][ T7340] netlink: 216 bytes leftover after parsing attributes in process `syz.0.385'.
[  102.824135][ T7335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.385'.
[  102.879391][ T7347] pim6reg1: entered promiscuous mode
[  102.881697][ T7347] pim6reg1: entered allmulticast mode
[  102.888653][ T7351] netlink: 182 bytes leftover after parsing attributes in process `syz.2.389'.
[  103.113845][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'.
[  103.316073][ T7375] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  103.481114][ T4482] wlan1: Trigger new scan to find an IBSS to join
[  104.062424][ T7391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.777686][ T7397] lo: entered allmulticast mode
[  104.812567][ T7397] lo: entered promiscuous mode
[  104.814695][ T7397] lo: left allmulticast mode
[  105.234029][ T7427] lo: left promiscuous mode
[  105.236905][ T7427] lo: entered allmulticast mode
[  105.306567][ T7430] validate_nla: 17 callbacks suppressed
[  105.306580][ T7430] netlink: 'syz.1.412': attribute type 39 has an invalid length.
[  105.413390][ T7432] netlink: 'syz.0.413': attribute type 10 has an invalid length.
[  105.429580][ T7435] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[  105.443311][ T7432] netlink: 'syz.0.413': attribute type 10 has an invalid length.
[  106.063138][ T7455] : renamed from pim6reg1
[  106.730153][ T7465] netlink: 'syz.0.424': attribute type 1 has an invalid length.
[  107.206313][ T7487] __nla_validate_parse: 13 callbacks suppressed
[  107.206329][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'.
[  107.406761][ T7488] netlink: 328 bytes leftover after parsing attributes in process `syz.1.427'.
[  107.483376][ T4482] wlan1: Trigger new scan to find an IBSS to join
[  108.216250][ T7518] netlink: 'syz.0.435': attribute type 27 has an invalid length.
[  108.226259][ T7518] netlink: 'syz.0.435': attribute type 4 has an invalid length.
[  108.233912][ T7518] netlink: 144 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.368257][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'.
[  108.523419][   T29] wlan1: Creating new IBSS network, BSSID 96:99:75:48:1c:66
[  108.649882][ T7529] netlink: 'syz.2.439': attribute type 4 has an invalid length.
[  108.660309][ T7529] netlink: 152 bytes leftover after parsing attributes in process `syz.2.439'.
[  108.672039][ T7527] netlink: 'syz.0.437': attribute type 10 has an invalid length.
[  108.755059][ T7527] bond0: (slave wlan1): Releasing backup interface
[  108.860141][ T7537] veth1_macvtap: left promiscuous mode
[  108.863733][ T7537] macsec0: entered promiscuous mode
[  109.124571][ T7557] nftables ruleset with unbound chain
[  109.176552][ T7555] openvswitch: netlink: Key type 144 is out of range max 32
[  109.336674][ T7563] netlink: 'syz.1.448': attribute type 10 has an invalid length.
[  109.339329][ T7563] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  109.434280][ T7565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  109.507689][ T7563] syzkaller0: entered promiscuous mode
[  109.510301][ T7563] syzkaller0: entered allmulticast mode
[  109.531114][ T7563] netlink: 'syz.1.448': attribute type 11 has an invalid length.
[  109.534269][ T7563] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.448'.
[  109.611481][ T7562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.761532][ T7573] syzkaller1: tun_chr_ioctl cmd 1074025677
[  109.764345][ T7573] syzkaller1: linktype set to 1
[  109.783518][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'.
[  109.787325][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'.
[  109.809911][ T7573] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  110.663402][ T7623] validate_nla: 1 callbacks suppressed
[  110.663415][ T7623] netlink: 'syz.1.464': attribute type 39 has an invalid length.
[  112.393943][ T7637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.467'.
[  112.468780][ T7642] netlink: 'syz.1.468': attribute type 10 has an invalid length.
[  112.468832][ T7643] netlink: 'syz.1.468': attribute type 10 has an invalid length.
[  113.275918][ T7672] netlink: 'syz.0.476': attribute type 10 has an invalid length.
[  113.282202][ T7671] netlink: 'syz.2.477': attribute type 12 has an invalid length.
[  113.285679][ T7671] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.477'.
[  113.334722][ T7670] netlink: 'syz.2.477': attribute type 12 has an invalid length.
[  113.338862][ T7670] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.477'.
[  113.374564][ T7677] netlink: 'syz.1.478': attribute type 1 has an invalid length.
[  113.377310][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'.
[  113.661440][ T7674] netlink: 6 bytes leftover after parsing attributes in process `syz.1.478'.
[  113.930025][ T7697] netlink: 182 bytes leftover after parsing attributes in process `syz.0.484'.
[  113.938411][ T7697] netlink: 'syz.0.484': attribute type 10 has an invalid length.
[  114.049725][ T7703] netlink: 216 bytes leftover after parsing attributes in process `syz.0.484'.
[  114.069017][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.484'.
[  114.185536][ T7705] netlink: 809 bytes leftover after parsing attributes in process `syz.1.485'.
[  114.189699][ T7705] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.485'.
[  114.830057][ T7715] netlink: 'syz.0.487': attribute type 10 has an invalid length.
[  115.727690][ T7737] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  115.737276][ T7737] netlink: 'syz.2.493': attribute type 10 has an invalid length.
[  115.746414][ T7737] wlan1: mtu less than device minimum
[  115.748166][ T7737] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  115.818326][ T7740] netlink: 'syz.0.495': attribute type 10 has an invalid length.
[  115.821030][ T7740] dummy0: entered promiscuous mode
[  115.821395][ T7741] netlink: 'syz.1.494': attribute type 9 has an invalid length.
[  116.022393][ T7756] netlink: 'syz.0.499': attribute type 10 has an invalid length.
[  116.024936][ T7756] batadv0: entered promiscuous mode
[  116.026593][ T7756] batadv0: entered allmulticast mode
[  116.028856][ T7756] bridge0: port 1(batadv0) entered blocking state
[  116.034702][ T7756] bridge0: port 1(batadv0) entered disabled state
[  116.043397][ T7756] bridge0: port 1(batadv0) entered blocking state
[  116.046252][ T7756] bridge0: port 1(batadv0) entered forwarding state
[  116.274623][ T5857] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  116.277897][ T5857] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  117.349608][ T7769] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.415005][ T7769] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.674210][ T7781] netlink: 'syz.0.506': attribute type 10 has an invalid length.
[  117.677434][ T7781] __nla_validate_parse: 4 callbacks suppressed
[  117.677446][ T7781] netlink: 2 bytes leftover after parsing attributes in process `syz.0.506'.
[  117.743400][ T7782] netlink: 'syz.1.507': attribute type 17 has an invalid length.
[  117.746821][ T7782] netlink: 'syz.1.507': attribute type 16 has an invalid length.
[  117.750009][ T7782] netlink: 152 bytes leftover after parsing attributes in process `syz.1.507'.
[  117.768639][ T5909] syzkaller0: tun_net_xmit 76
[  117.771590][ T5909] syzkaller0: tun_net_xmit 48
[  117.790983][ T2351] syzkaller0: tun_net_xmit 76
[  119.593306][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[  119.682699][   T33] audit: type=1107 audit(1758562342.350:3): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='oO;ܺv#1޴Cao4TGCW`HnGFwR.~ja!GEWpK'
[  119.699824][ T7820] netlink: 'syz.1.517': attribute type 17 has an invalid length.
[  119.707922][ T7820] netlink: 'syz.1.517': attribute type 16 has an invalid length.
[  119.720137][ T7822] netlink: 'syz.2.520': attribute type 10 has an invalid length.
[  119.720576][ T7820] netlink: 152 bytes leftover after parsing attributes in process `syz.1.517'.
[  119.748954][ T7822] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  120.086612][ T7827] netlink: 55 bytes leftover after parsing attributes in process `syz.2.522'.
[  120.390308][ T7831] netlink: 1 bytes leftover after parsing attributes in process `syz.2.523'.
[  120.404065][ T7831] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  120.414606][ T7831] wlan1: mtu less than device minimum
[  120.416800][ T7831] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  120.743588][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'.
[  120.750117][ T7850] validate_nla: 2 callbacks suppressed
[  120.750183][ T7850] netlink: 'syz.2.530': attribute type 10 has an invalid length.
[  120.773726][ T7850] netlink: 'syz.2.530': attribute type 11 has an invalid length.
[  120.781284][ T7850] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.530'.
[  120.785316][ T7851] netlink: 'syz.2.530': attribute type 11 has an invalid length.
[  120.788807][ T7851] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.530'.
[  120.793700][ T7849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.948618][ T7856] netlink: 'syz.2.531': attribute type 4 has an invalid length.
[  120.953954][ T7856] netlink: 14333 bytes leftover after parsing attributes in process `syz.2.531'.
[  121.306216][ T7868] syzkaller0: entered promiscuous mode
[  121.308493][ T7868] syzkaller0: entered allmulticast mode
[  121.335379][ T7868] netlink: 'syz.0.534': attribute type 10 has an invalid length.
[  121.368712][ T7873] netlink: 'syz.2.535': attribute type 9 has an invalid length.
[  122.727093][ T7879] netlink: 'syz.0.537': attribute type 3 has an invalid length.
[  122.730465][ T7879] netlink: 'syz.0.537': attribute type 1 has an invalid length.
[  122.736852][ T7879] __nla_validate_parse: 1 callbacks suppressed
[  122.736865][ T7879] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.537'.
[  122.768675][ T7879] wg2: entered promiscuous mode
[  122.788992][ T7879] wg2: entered allmulticast mode
[  122.968042][ T7906] netlink: 'syz.1.543': attribute type 10 has an invalid length.
[  123.089158][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.546'.
[  123.101639][ T7912] netlink: 'syz.0.544': attribute type 10 has an invalid length.
[  123.122861][ T7912] macvlan0: entered promiscuous mode
[  123.153743][ T7912] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  123.203198][ T7926] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  123.242808][ T7933] netlink: 152 bytes leftover after parsing attributes in process `syz.0.549'.
[  123.247248][ T7933] netlink: 'syz.0.549': attribute type 10 has an invalid length.
[  123.274326][ T7933] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  123.278925][ T7933] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  123.283397][ T7933] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  123.726112][ T7948] can: request_module (can-proto-0) failed.
[  124.478448][ T7948] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  124.514302][ T7952] netlink: 76 bytes leftover after parsing attributes in process `syz.1.554'.
[  124.786878][ T7976] netlink: 228 bytes leftover after parsing attributes in process `syz.0.560'.
[  124.843844][ T7979] netlink: 'syz.2.561': attribute type 1 has an invalid length.
[  125.386945][ T7988] bridge0: port 3(netdevsim0) entered blocking state
[  125.390052][ T7988] bridge0: port 3(netdevsim0) entered disabled state
[  125.397024][ T7988] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  125.417300][ T7988] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  126.078859][ T7995] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  126.321108][ T8012] syzkaller1: tun_chr_ioctl cmd 1074025677
[  126.325751][ T8012] syzkaller1: linktype set to 780
[  126.355269][ T8012] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'.
[  126.359579][ T8012] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'.
[  126.400150][ T8022] validate_nla: 1 callbacks suppressed
[  126.400205][ T8022] netlink: 'syz.0.571': attribute type 10 has an invalid length.
[  126.738798][ T8024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.572'.
[  126.815911][ T8031] netlink: 182 bytes leftover after parsing attributes in process `syz.0.575'.
[  126.825199][ T8031] netlink: 'syz.0.575': attribute type 10 has an invalid length.
[  126.878734][ T8031] netlink: 216 bytes leftover after parsing attributes in process `syz.0.575'.
[  126.966900][ T8037] netlink: 'syz.2.576': attribute type 1 has an invalid length.
[  126.969567][ T8037] netlink: 'syz.2.576': attribute type 2 has an invalid length.
[  127.053172][ T8039] netlink: 'syz.1.577': attribute type 2 has an invalid length.
[  127.057307][ T8039] netlink: 'syz.1.577': attribute type 2 has an invalid length.
[  128.658516][ T8086] netlink: 'syz.1.587': attribute type 21 has an invalid length.
[  128.662697][ T8086] __nla_validate_parse: 5 callbacks suppressed
[  128.662750][ T8086] netlink: 168 bytes leftover after parsing attributes in process `syz.1.587'.
[  128.749545][ T8090] netlink: 'syz.0.589': attribute type 10 has an invalid length.
[  128.802145][ T8086] netlink: 'syz.1.587': attribute type 10 has an invalid length.
[  128.832706][ T8090] netdevsim netdevsim0 : renamed from netdevsim0
[  128.862284][ T8096] netlink: 'syz.2.590': attribute type 10 has an invalid length.
[  128.864759][ T8096] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  128.868651][ T8096] wlan1: mtu less than device minimum
[  128.870373][ T8096] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  128.904692][ T8090] can: request_module (can-proto-0) failed.
[  129.077527][ T8116] bridge_slave_0: entered promiscuous mode
[  129.080349][ T8116] bridge_slave_0: entered allmulticast mode
[  129.142513][ T8119] C: renamed from team_slave_0
[  129.153520][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  129.156344][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'.
[  129.167706][ T8119] netlink: 144 bytes leftover after parsing attributes in process `syz.0.594'.
[  129.228179][ T8127] bridge0: port 1(batadv0) entered disabled state
[  129.234169][ T8127] batadv0: left allmulticast mode
[  129.235946][ T8127] batadv0: left promiscuous mode
[  129.238724][ T8127] bridge0: port 1(batadv0) entered disabled state
[  129.248325][ T8127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.255480][ T8127] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  129.348622][ T8135] netlink: 182 bytes leftover after parsing attributes in process `syz.0.599'.
[  131.484450][ T8166] validate_nla: 1 callbacks suppressed
[  131.484463][ T8166] netlink: 'syz.2.605': attribute type 10 has an invalid length.
[  131.686608][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'.
[  131.813426][ T8186] raw_sendmsg: syz.2.612 forgot to set AF_INET. Fix it!
[  132.634327][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.636723][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  133.004939][ T8225] netlink: 'syz.1.620': attribute type 14 has an invalid length.
[  133.032807][ T8225] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[  133.036607][ T8225] netlink: 55 bytes leftover after parsing attributes in process `syz.1.620'.
[  133.138964][ T8237] sctp: [Deprecated]: syz.0.622 (pid 8237) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.138964][ T8237] Use struct sctp_sack_info instead
[  133.456260][ T8246] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.625'.
[  133.587208][ T8251] netlink: 'syz.2.627': attribute type 10 has an invalid length.
[  133.848632][ T8258] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.628'.
[  134.586722][ T8268] netlink: 'syz.1.630': attribute type 10 has an invalid length.
[  134.589733][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.630'.
[  134.629875][ T8272] : port 1(veth0_to_team) entered blocking state
[  134.633427][ T8272] : port 1(veth0_to_team) entered disabled state
[  134.637339][ T8272] veth0_to_team: entered allmulticast mode
[  134.647619][ T8272] veth0_to_team: entered promiscuous mode
[  134.669327][ T8274] : entered promiscuous mode
[  134.873208][ T8286] netlink: 'syz.2.637': attribute type 10 has an invalid length.
[  134.876115][ T8286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.637'.
[  134.881367][ T8286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.391482][ T8307] netlink: 'syz.0.644': attribute type 1 has an invalid length.
[  136.518100][ T8311] netlink: 'syz.2.645': attribute type 64 has an invalid length.
[  136.544199][ T8313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  136.547264][ T8313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.633742][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'.
[  136.949598][ T8314] netlink: 56 bytes leftover after parsing attributes in process `syz.1.646'.
[  137.078944][ T8319] macsec0: left promiscuous mode
[  137.080461][ T8319] macsec0: entered allmulticast mode
[  137.932365][ T8319] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  139.455375][ T8339] netlink: 168 bytes leftover after parsing attributes in process `syz.2.653'.
[  139.473870][ T8339] netlink: 'syz.2.653': attribute type 4 has an invalid length.
[  139.476493][ T8339] netlink: 152 bytes leftover after parsing attributes in process `syz.2.653'.
[  139.547415][ T8339] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  140.446071][ T8359] netlink: 64 bytes leftover after parsing attributes in process `syz.2.659'.
[  140.610789][ T8361] syzkaller0: entered promiscuous mode
[  140.612534][ T8361] syzkaller0: entered allmulticast mode
[  140.698271][ T8376] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  140.940982][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'.
[  141.038795][ T8379] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.665'.
[  141.404794][ T8396] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  141.407895][ T8396] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  141.412111][ T8395] netlink: 'syz.0.669': attribute type 4 has an invalid length.
[  141.414542][ T8395] netlink: 152 bytes leftover after parsing attributes in process `syz.0.669'.
[  141.429886][ T8395] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  141.441920][ T8395] netlink: 'syz.0.669': attribute type 13 has an invalid length.
[  141.557981][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.835670][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.865506][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.951318][ T8395] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  142.248340][ T8397] bond0: entered promiscuous mode
[  142.257546][ T8397] bond_slave_0: entered promiscuous mode
[  142.263330][ T8397] bond_slave_1: entered promiscuous mode
[  142.269011][ T8397] bridge0: entered promiscuous mode
[  142.273991][ T8397] batadv0: entered promiscuous mode
[  142.276574][ T8397] bond0: entered allmulticast mode
[  142.278862][ T8397] bond_slave_0: entered allmulticast mode
[  142.283049][ T8397] bond_slave_1: entered allmulticast mode
[  142.285608][ T8397] bridge0: entered allmulticast mode
[  142.287976][ T8397] macvlan0: entered allmulticast mode
[  142.290229][ T8397] batadv0: entered allmulticast mode
[  142.297701][ T8397] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.533367][ T5909] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.537514][ T5909] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.544256][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'.
[  142.548248][ T5909] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.553318][ T8415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'.
[  142.557800][ T8413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'.
[  142.561866][ T8413] netlink: 'syz.0.675': attribute type 10 has an invalid length.
[  142.769306][ T8422] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.678'.
[  142.921712][ T8427] netlink: 'syz.1.679': attribute type 21 has an invalid length.
[  142.965774][ T8427] netlink: 'syz.1.679': attribute type 21 has an invalid length.
[  143.259065][ T8442] can: request_module (can-proto-0) failed.
[  143.345331][ T8442] netlink: 'syz.1.682': attribute type 10 has an invalid length.
[  143.352464][ T8447] netlink: 'syz.0.683': attribute type 39 has an invalid length.
[  143.387900][ T8442] .`: (slave netdevsim0): Releasing backup interface
[  143.837704][ T8447] hsr_slave_0 (unregistering): left promiscuous mode
[  144.501040][ T8489] __nla_validate_parse: 1 callbacks suppressed
[  144.501056][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'.
[  144.702787][ T8499] : renamed from wg2
[  144.941938][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'.
[  145.664468][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'.
[  145.668337][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'.
[  145.937823][ T8529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.705'.
[  146.097913][ T8536] netlink: 'syz.0.708': attribute type 11 has an invalid length.
[  146.102604][ T8536] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.708'.
[  146.252448][ T8546] netlink: 'syz.0.710': attribute type 21 has an invalid length.
[  146.377584][ T8545] netlink: 'syz.2.709': attribute type 21 has an invalid length.
[  146.385089][ T8543] netlink: 'syz.2.709': attribute type 21 has an invalid length.
[  146.848545][ T8559] netlink: 'syz.2.713': attribute type 1 has an invalid length.
[  146.857565][ T8559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.196430][ T8575] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.718'.
[  147.310196][ T8579] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.717'.
[  147.853350][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'.
[  149.184341][ T8624] netlink: 7 bytes leftover after parsing attributes in process `syz.0.727'.
[  149.427973][ T8639] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  149.432250][ T8639] openvswitch: netlink: Duplicate key (type 0).
[  150.566896][ T8643] __nla_validate_parse: 2 callbacks suppressed
[  150.566907][ T8643] netlink: 68 bytes leftover after parsing attributes in process `syz.1.732'.
[  150.668634][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'.
[  150.679420][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'.
[  150.825950][ T8662] netlink: 'syz.0.737': attribute type 10 has an invalid length.
[  150.828475][ T8662] netlink: 2 bytes leftover after parsing attributes in process `syz.0.737'.
[  150.840010][ T8662] openvswitch: netlink: IP tunnel TTL not specified.
[  152.182148][ T8681] netlink: 180 bytes leftover after parsing attributes in process `syz.1.743'.
[  152.272687][ T8693] netlink: 10 bytes leftover after parsing attributes in process `syz.2.747'.
[  152.349134][ T8695] IPv6: : Disabled Multicast RS
[  152.582804][ T8705] netlink: 'syz.0.749': attribute type 10 has an invalid length.
[  152.619760][ T8709] syzkaller1: tun_chr_ioctl cmd 1074025677
[  152.627263][ T8709] syzkaller1: linktype set to 823
[  152.738874][ T8722] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  152.917386][ T8725] netlink: 'syz.1.756': attribute type 10 has an invalid length.
[  152.920425][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.756'.
[  152.984319][ T8735] syzkaller0: entered promiscuous mode
[  152.986046][ T8735] syzkaller0: entered allmulticast mode
[  153.037441][ T8737] netlink: 'syz.1.759': attribute type 10 has an invalid length.
[  153.163380][ T8747] netlink: 'syz.1.759': attribute type 10 has an invalid length.
[  153.331300][ T8755] netlink: 'syz.2.763': attribute type 10 has an invalid length.
[  153.343976][ T8755] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  153.346666][ T8755] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  153.358600][ T8755] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  154.017896][ T8759] sit0: entered allmulticast mode
[  154.054107][ T8763] netlink: 'syz.2.766': attribute type 10 has an invalid length.
[  154.320370][ T8772] netlink: 'syz.0.768': attribute type 1 has an invalid length.
[  154.328986][ T8776] sit0: entered allmulticast mode
[  154.363162][ T8776] sit0: entered promiscuous mode
[  154.633953][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 51
[  154.638026][ T8784] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.771'.
[  154.800276][ T8789] netlink: 'syz.0.773': attribute type 13 has an invalid length.
[  155.122148][ T8799] netlink: 192 bytes leftover after parsing attributes in process `syz.2.776'.
[  155.886681][ T8795] validate_nla: 3 callbacks suppressed
[  155.886696][ T8795] netlink: 'syz.0.775': attribute type 29 has an invalid length.
[  155.892251][ T8797] bond0: left promiscuous mode
[  155.893805][ T8797] bond_slave_0: left promiscuous mode
[  155.895587][ T8797] bond_slave_1: left promiscuous mode
[  155.897769][ T8797] bridge0: left promiscuous mode
[  155.899594][ T8797] batadv0: left promiscuous mode
[  155.903164][ T8797] bond0: left allmulticast mode
[  155.904889][ T8797] bond_slave_0: left allmulticast mode
[  155.906937][ T8797] bond_slave_1: left allmulticast mode
[  155.908873][ T8797] bridge0: left allmulticast mode
[  155.911627][ T8797] batadv0: left allmulticast mode
[  155.944985][ T8803] netlink: 'syz.0.777': attribute type 10 has an invalid length.
[  156.016651][ T8810] netlink: 'syz.0.780': attribute type 9 has an invalid length.
[  156.059665][ T8811] pim6reg1: entered allmulticast mode
[  156.063858][ T8813] netlink: 14 bytes leftover after parsing attributes in process `syz.1.778'.
[  156.168157][ T8813] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.172980][ T8813] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.176788][ T8813] .` (unregistering): Released all slaves
[  156.345664][ T8828] netlink: 'syz.2.784': attribute type 10 has an invalid length.
[  156.379867][ T8828] .`: (slave netdevsim0): Releasing backup interface
[  156.407044][ T8828] batman_adv: batadv0: Adding interface: netdevsim0
[  156.409567][ T8828] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  156.643270][ T8841] netlink: 14 bytes leftover after parsing attributes in process `syz.2.787'.
[  156.736197][ T8841] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.744035][ T8841] .` (unregistering): (slave batadv0): Releasing backup interface
[  156.748072][ T8841] .` (unregistering): Released all slaves
[  156.907044][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'.
[  156.915089][ T8847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.789'.
[  157.825380][ T8859] netlink: 'syz.2.792': attribute type 10 has an invalid length.
[  157.828491][ T8859] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  157.999716][ T8863] netlink: 'syz.1.794': attribute type 10 has an invalid length.
[  158.089996][ T8867] netlink: 'syz.1.795': attribute type 4 has an invalid length.
[  158.093338][ T8867] netlink: 152 bytes leftover after parsing attributes in process `syz.1.795'.
[  158.526627][ T8879] wg2: entered promiscuous mode
[  158.528341][ T8879] wg2: entered allmulticast mode
[  158.717263][ T8885] delete_channel: no stack
[  158.718786][ T8885] delete_channel: no stack
[  158.828935][ T8882] syzkaller0: entered promiscuous mode
[  158.963168][ T8882] syzkaller0: entered allmulticast mode
[  160.697874][ T8908] netlink: 'syz.0.805': attribute type 10 has an invalid length.
[  160.707331][ T8908] netlink: 55 bytes leftover after parsing attributes in process `syz.0.805'.
[  160.763294][ T8913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.773381][ T8913] netlink: 168 bytes leftover after parsing attributes in process `syz.2.806'.
[  160.870882][ T8908] batman_adv: batadv0: Removing interface: virt_wifi0
[  160.881647][ T8918] netlink: 'syz.1.807': attribute type 10 has an invalid length.
[  161.195392][ T8921] netlink: 'syz.2.808': attribute type 10 has an invalid length.
[  161.198494][ T8921] batman_adv: batadv0: Removing interface: netdevsim0
[  161.264187][ T8931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.808'.
[  161.270013][ T8921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.808'.
[  161.287254][ T8931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.808'.
[  161.512095][ T8940] syzkaller0: entered promiscuous mode
[  161.514546][ T8940] syzkaller0: entered allmulticast mode
[  162.350167][ T8955] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.815'.
[  162.498529][ T8954] delete_channel: no stack
[  162.546634][ T8971] netlink: 'syz.2.819': attribute type 10 has an invalid length.
[  162.766620][ T8978] netlink: 'syz.2.821': attribute type 39 has an invalid length.
[  163.622050][ T8988] netlink: 'syz.2.824': attribute type 10 has an invalid length.
[  163.648031][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.826'.
[  163.651581][ T8994] veth0_vlan: entered allmulticast mode
[  163.681244][ T8999] netlink: 196 bytes leftover after parsing attributes in process `syz.2.827'.
[  163.711571][ T9004] netlink: 'syz.1.826': attribute type 12 has an invalid length.
[  163.714011][ T9004] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.826'.
[  163.837325][ T8994] veth0_vlan: left promiscuous mode
[  163.850676][ T8994] veth0_vlan: entered promiscuous mode
[  163.938086][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'.
[  164.066965][ T9025] netlink: 'syz.1.833': attribute type 33 has an invalid length.
[  164.076581][ T9025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.833'.
[  164.293355][ T9032] netlink: 'syz.1.835': attribute type 10 has an invalid length.
[  164.359091][ T9035] netlink: 'syz.1.836': attribute type 10 has an invalid length.
[  164.360107][ T9034] netlink: 'syz.1.836': attribute type 10 has an invalid length.
[  164.509670][ T9044] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.838'.
[  164.987082][ T9072] netlink: 'syz.1.848': attribute type 33 has an invalid length.
[  166.051173][ T9121] : renamed from bond_slave_0
[  166.403938][   T54] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  166.412483][ T9128] __nla_validate_parse: 1 callbacks suppressed
[  166.412493][ T9128] netlink: 7 bytes leftover after parsing attributes in process `syz.1.861'.
[  166.422066][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'.
[  166.451803][ T9128] netlink: 'syz.1.861': attribute type 10 has an invalid length.
[  166.515911][ T9134] netlink: 'syz.2.863': attribute type 4 has an invalid length.
[  166.518686][ T9134] netlink: 152 bytes leftover after parsing attributes in process `syz.2.863'.
[  166.524708][ T9134] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.863'.
[  166.578276][ T9139] netlink: 40 bytes leftover after parsing attributes in process `syz.2.865'.
[  167.079056][ T9153] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  167.252976][ T9165] netlink: 'syz.0.871': attribute type 3 has an invalid length.
[  167.255481][ T9165] netlink: 'syz.0.871': attribute type 6 has an invalid length.
[  167.257909][ T9165] netlink: 'syz.0.871': attribute type 8 has an invalid length.
[  167.260373][ T9165] netlink: 'syz.0.871': attribute type 10 has an invalid length.
[  167.263743][ T9165] netlink: 'syz.0.871': attribute type 11 has an invalid length.
[  167.266233][ T9165] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.871'.
[  167.273329][ T9165] netlink: 'syz.0.871': attribute type 2 has an invalid length.
[  167.276241][ T9165] netlink: 'syz.0.871': attribute type 8 has an invalid length.
[  167.278826][ T9165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.871'.
[  167.323351][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'.
[  167.327401][ T9163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.871'.
[  167.787318][ T9183] netlink: 68 bytes leftover after parsing attributes in process `syz.0.876'.
[  168.021899][ T9195] netlink: 'syz.1.878': attribute type 10 has an invalid length.
[  168.784301][ T9232] hsr_slave_0 (unregistering): left promiscuous mode
[  168.848844][ T9234] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  169.072892][ T9249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.077274][ T9249] hsr0: entered promiscuous mode
[  169.079376][ T9249] hsr0: entered allmulticast mode
[  169.083031][ T9249] hsr_slave_1: entered allmulticast mode
[  169.730942][ T9254] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  170.408250][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.556728][ T9299] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  171.670014][ T9333] __nla_validate_parse: 11 callbacks suppressed
[  171.670074][ T9333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.918'.
[  171.786455][ T9335] validate_nla: 16 callbacks suppressed
[  171.786467][ T9335] netlink: 'syz.0.918': attribute type 12 has an invalid length.
[  171.796727][ T9335] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.918'.
[  172.055323][ T9360] netlink: 'syz.1.924': attribute type 10 has an invalid length.
[  172.119949][ T9365] netlink: 'syz.2.926': attribute type 1 has an invalid length.
[  172.134181][ T9365] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.926'.
[  172.206908][ T9369] netlink: 'syz.2.927': attribute type 21 has an invalid length.
[  172.270833][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  172.612167][ T9381] netlink: 248 bytes leftover after parsing attributes in process `syz.0.929'.
[  172.633375][ T9381] netlink: 'syz.0.929': attribute type 10 has an invalid length.
[  172.893274][ T9398] netlink: 56799 bytes leftover after parsing attributes in process `syz.2.934'.
[  173.002461][ T9412] netlink: 'syz.1.937': attribute type 10 has an invalid length.
[  173.107650][ T9402] netlink: 'syz.2.936': attribute type 41 has an invalid length.
[  173.110454][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.936'.
[  173.123496][ T9415] netlink: 'syz.0.938': attribute type 10 has an invalid length.
[  173.243132][ T9415] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  173.396377][ T9422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.939'.
[  173.540584][ T9439] syzkaller0: entered promiscuous mode
[  173.543391][ T9439] syzkaller0: entered allmulticast mode
[  174.547503][ T9457] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.947'.
[  174.742465][ T9461] netlink: 'syz.1.949': attribute type 10 has an invalid length.
[  174.747291][ T9459] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  174.822843][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.839056][ T9461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.982916][ T9472] netlink: 14 bytes leftover after parsing attributes in process `syz.0.951'.
[  174.988491][ T9476] netlink: 'syz.1.952': attribute type 8 has an invalid length.
[  176.002444][ T9478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.704303][ T9521] : renamed from bond_slave_0
[  177.954587][ T9536] __nla_validate_parse: 6 callbacks suppressed
[  177.954598][ T9536] netlink: 182 bytes leftover after parsing attributes in process `syz.1.970'.
[  177.962701][ T9536] validate_nla: 4 callbacks suppressed
[  177.962715][ T9536] netlink: 'syz.1.970': attribute type 10 has an invalid length.
[  178.026587][ T9543] netlink: 216 bytes leftover after parsing attributes in process `syz.1.970'.
[  178.041629][ T9543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.970'.
[  178.103514][ T9535] netlink: 'syz.2.969': attribute type 4 has an invalid length.
[  178.106713][ T9535] netlink: 14333 bytes leftover after parsing attributes in process `syz.2.969'.
[  178.118999][ T9535] veth0_virt_wifi: entered promiscuous mode
[  178.126171][ T9535] veth0_virt_wifi: entered allmulticast mode
[  178.285488][ T9554] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.974'.
[  178.513210][ T9562] netlink: 2 bytes leftover after parsing attributes in process `syz.0.976'.
[  178.517789][ T9562] batadv_slave_1: entered promiscuous mode
[  178.553390][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.600814][ T5239] Bluetooth: hci2: command 0x0406 tx timeout
[  180.600912][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  181.044514][ T9572] netlink: 'syz.0.979': attribute type 10 has an invalid length.
[  181.048221][ T9572] bond0: (slave wlan1): Opening slave failed
[  181.075626][ T9575] netlink: 'syz.1.980': attribute type 10 has an invalid length.
[  181.091848][ T9575] netlink: 'syz.1.980': attribute type 4 has an invalid length.
[  181.094805][ T9575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.980'.
[  181.292853][ T9593] netlink: 'syz.0.984': attribute type 2 has an invalid length.
[  181.297576][ T9593] netlink: 'syz.0.984': attribute type 8 has an invalid length.
[  181.300031][ T9593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.984'.
[  181.379709][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'.
[  182.165901][ T9602] netlink: 'syz.2.986': attribute type 10 has an invalid length.
[  182.194613][ T9602] netlink: 'syz.2.986': attribute type 11 has an invalid length.
[  182.196932][ T9602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.986'.
[  182.255207][ T9611] netlink: 'syz.0.989': attribute type 7 has an invalid length.
[  182.257782][ T9611] netlink: 'syz.0.989': attribute type 8 has an invalid length.
[  182.282450][ T9609] syzkaller0: entered promiscuous mode
[  182.284412][ T9609] syzkaller0: entered allmulticast mode
[  182.296738][ T9611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.499372][ T9619] xt_l2tp: invalid flags combination: 8
[  183.815524][ T9641] __nla_validate_parse: 4 callbacks suppressed
[  183.815534][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.997'.
[  184.005691][ T9648] validate_nla: 1 callbacks suppressed
[  184.005708][ T9648] netlink: 'syz.0.1000': attribute type 10 has an invalid length.
[  184.025118][ T9648] bond0: (slave wlan1): Opening slave failed
[  184.346519][ T9671] netlink: 'syz.2.1004': attribute type 4 has an invalid length.
[  184.349868][ T9671] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1004'.
[  184.456881][ T9674] netlink: 'syz.2.1005': attribute type 10 has an invalid length.
[  184.478263][ T9675] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode
[  184.485092][ T9675] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode
[  185.118399][ T9678] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1006'.
[  185.125210][ T9677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1006'.
[  185.852614][ T9680] netlink: 'syz.1.1007': attribute type 9 has an invalid length.
[  185.855613][ T9680] netlink: 211924 bytes leftover after parsing attributes in process `syz.1.1007'.
[  185.868126][ T9680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1007'.
[  186.680752][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  187.322746][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'.
[  187.326755][ T9704] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1013'.
[  188.269885][ T9725] netlink: 'syz.0.1020': attribute type 39 has an invalid length.
[  189.158088][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.162404][ T9731] : renamed from pim6reg1
[  189.166680][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.175504][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.192381][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.195026][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.198228][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.205470][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.208743][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.212812][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.216019][ T9733] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  189.373794][ T9740] net veth1_virt_wifi : renamed from virt_wifi0
[  193.050435][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.091974][ T9763] dummy0: left promiscuous mode
[  193.131314][ T9763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.176502][ T9769] syzkaller0: create flow: hash 398028635 index 1
[  193.183706][ T9772] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1036'.
[  193.191906][ T9763] syz.0.1032 (9763) used greatest stack depth: 17528 bytes left
[  193.206394][ T9769] syzkaller0: delete flow: hash 398028635 index 1
[  193.347202][ T9780] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1036'.
[  193.885844][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  193.888652][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  194.345802][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  194.357923][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  194.437317][ T9792] validate_nla: 28 callbacks suppressed
[  194.437328][ T9792] netlink: 'syz.2.1041': attribute type 10 has an invalid length.
[  194.443482][ T9792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1041'.
[  194.498949][ T9793] netlink: 'syz.2.1041': attribute type 10 has an invalid length.
[  194.502196][ T9793] hsr0: left promiscuous mode
[  194.504040][ T9793] hsr0: left allmulticast mode
[  194.505743][ T9793] hsr_slave_1: left allmulticast mode
[  194.932918][ T9803] netlink: 'syz.0.1043': attribute type 21 has an invalid length.
[  194.936371][ T9803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1043'.
[  194.946722][ T9803] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  195.069253][ T9816] netlink: 'syz.1.1046': attribute type 9 has an invalid length.
[  195.199165][ T9826] netlink: 'syz.1.1049': attribute type 4 has an invalid length.
[  195.204955][ T9826] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1049'.
[  195.325132][ T9832] netlink: 'syz.2.1052': attribute type 3 has an invalid length.
[  195.334212][ T9830] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  195.540396][ T9840] netlink: 'syz.2.1053': attribute type 10 has an invalid length.
[  195.546977][ T9843] netlink: 'syz.2.1053': attribute type 10 has an invalid length.
[  195.725856][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'.
[  195.730213][ T9848] netlink: 'syz.2.1056': attribute type 10 has an invalid length.
[  195.766376][ T9842] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1054'.
[  196.896229][ T9870] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1062'.
[  197.312823][ T9893] syzkaller0: create flow: hash 2121161726 index 1
[  197.348993][ T9892] syzkaller0: delete flow: hash 2121161726 index 1
[  198.771797][ T9900] bond0: (slave macvlan0): Releasing backup interface
[  198.818955][ T9910] __nla_validate_parse: 1 callbacks suppressed
[  198.818966][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'.
[  198.914299][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'.
[  199.147972][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1076'.
[  199.361564][   T54] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  199.466934][ T9940] validate_nla: 5 callbacks suppressed
[  199.466949][ T9940] netlink: 'syz.2.1079': attribute type 3 has an invalid length.
[  199.482426][ T9942] netlink: 'syz.2.1079': attribute type 10 has an invalid length.
[  199.517856][ T9945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.525437][ T9945] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.588694][ T9945] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  199.596086][ T9945] batman_adv: batadv0: Removing interface: hsr_slave_1
[  199.639703][ T9951] netlink: 'syz.2.1081': attribute type 10 has an invalid length.
[  199.646755][ T9951] geneve0: entered promiscuous mode
[  199.665112][ T5909] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.674125][ T5909] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.677511][ T5909] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.680850][ T5909] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.737703][ T9934] : renamed from pim6reg1
[  199.957457][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'.
[  199.963918][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'.
[  200.034560][ T9969] netlink: 'syz.1.1087': attribute type 10 has an invalid length.
[  200.089759][ T9971] syzkaller1: tun_chr_ioctl cmd 1074025677
[  200.092460][ T9971] syzkaller1: linktype set to 1
[  200.175688][ T9974] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1089'.
[  200.179284][ T9974] netlink: 'syz.1.1089': attribute type 4 has an invalid length.
[  200.181718][ T9975] netlink: 'syz.1.1089': attribute type 4 has an invalid length.
[  200.182671][ T9974] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1089'.
[  200.184750][ T9975] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1089'.
[  200.192421][ T9974] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  200.199689][ T9975] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  200.307089][ T9982] netlink: 'syz.0.1093': attribute type 10 has an invalid length.
[  200.310170][ T9982] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.318286][ T9982] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  200.948047][ T9997] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1097'.
[  200.952942][ T9997] netlink: 'syz.2.1097': attribute type 13 has an invalid length.
[  201.050021][ T9994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.313989][T10008] netlink: 'syz.0.1101': attribute type 10 has an invalid length.
[  201.316673][T10008] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1101'.
[  201.356659][T10011] netlink: 'syz.0.1102': attribute type 10 has an invalid length.
[  201.798549][T10029] netlink: zone id is out of range
[  201.801896][T10029] netlink: zone id is out of range
[  201.803649][T10029] netlink: zone id is out of range
[  201.805574][T10029] netlink: zone id is out of range
[  201.807734][T10029] netlink: zone id is out of range
[  201.810036][T10029] netlink: zone id is out of range
[  201.812456][T10029] netlink: zone id is out of range
[  201.935387][T10037] sit0: left promiscuous mode
[  201.998426][T10037] sit0: entered promiscuous mode
[  203.165495][T10063] syzkaller0: entered promiscuous mode
[  203.167555][T10063] syzkaller0: entered allmulticast mode
[  203.829442][T10114] __nla_validate_parse: 11 callbacks suppressed
[  203.829459][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  204.093917][T10128] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1133'.
[  204.099077][T10129] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1133'.
[  204.259638][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1135'.
[  204.417600][T10139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.421715][T10139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.427131][T10139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.431117][T10139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.441660][T10139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.445476][T10139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.502655][T10144] syzkaller0: tun_chr_ioctl cmd 21731
[  204.536865][T10144] syzkaller0: entered promiscuous mode
[  204.538822][T10144] syzkaller0: entered allmulticast mode
[  204.545597][T10144] syzkaller0: create flow: hash 2121161726 index 1
[  204.620355][T10150] syzkaller0: delete flow: hash 2121161726 index 1
[  205.672688][T10161] validate_nla: 136 callbacks suppressed
[  205.672703][T10161] netlink: 'syz.0.1145': attribute type 10 has an invalid length.
[  205.973304][T10178] netlink: 'syz.0.1149': attribute type 8 has an invalid length.
[  205.986538][T10178] netlink: 'syz.0.1149': attribute type 3 has an invalid length.
[  206.423302][T10192] netlink: 'syz.0.1153': attribute type 17 has an invalid length.
[  206.715263][T10197] caif0: entered promiscuous mode
[  206.717907][T10197] caif0: entered allmulticast mode
[  206.729480][T10197] netlink: 'syz.1.1155': attribute type 13 has an invalid length.
[  206.734312][T10197] netlink: 'syz.1.1155': attribute type 17 has an invalid length.
[  206.738112][T10197] lo: left allmulticast mode
[  206.934439][T10210] netlink: 'syz.2.1156': attribute type 39 has an invalid length.
[  207.424448][T10197] sit0: left allmulticast mode
[  207.462942][T10197] caif0: left promiscuous mode
[  207.464650][T10197] caif0: left allmulticast mode
[  207.466597][T10197] net_ratelimit: 78 callbacks suppressed
[  207.466619][T10197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.962136][T10229] netlink: 'syz.2.1162': attribute type 13 has an invalid length.
[  208.005945][T10232] netlink: 'syz.0.1163': attribute type 10 has an invalid length.
[  208.129195][T10237] netlink: 'syz.2.1165': attribute type 11 has an invalid length.
[  209.926360][T10261] netlink: 'syz.0.1171': attribute type 10 has an invalid length.
[  209.934081][T10261] bond0: (slave bridge0): Releasing backup interface
[  209.995225][T10258] __nla_validate_parse: 66 callbacks suppressed
[  209.995281][T10258] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1170'.
[  210.135728][T10276] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1175'.
[  210.139848][T10275] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1175'.
[  210.249413][T10283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1176'.
[  210.361901][T10289] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1178'.
[  210.549039][T10296] C: renamed from team_slave_0
[  210.641367][T10305] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1180'.
[  210.882297][T10305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.895400][T10305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.907821][T10305] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  211.322761][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  211.427870][T10305] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  211.434214][T10305] bond0 (unregistering): Released all slaves
[  211.622281][T10319] validate_nla: 5 callbacks suppressed
[  211.622305][T10319] netlink: 'syz.1.1187': attribute type 21 has an invalid length.
[  211.956078][T10330] netlink: 'syz.0.1188': attribute type 10 has an invalid length.
[  211.958732][T10330] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1188'.
[  213.194868][T10345] netlink: 'syz.1.1193': attribute type 39 has an invalid length.
[  213.466191][T10341] syzkaller0: entered promiscuous mode
[  213.468797][T10341] syzkaller0: entered allmulticast mode
[  214.689541][T10352] netlink: 'syz.2.1195': attribute type 17 has an invalid length.
[  214.786365][T10354] netlink: 'syz.2.1197': attribute type 21 has an invalid length.
[  214.789648][T10354] netlink: 'syz.2.1197': attribute type 4 has an invalid length.
[  214.795108][T10355] netlink: 'syz.2.1197': attribute type 21 has an invalid length.
[  214.795170][T10355] netlink: 'syz.2.1197': attribute type 4 has an invalid length.
[  215.397459][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1203'.
[  216.435787][T10409] netlink: 'syz.1.1210': attribute type 4 has an invalid length.
[  216.439327][T10409] netlink: 'syz.1.1210': attribute type 1 has an invalid length.
[  216.546412][T10421] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1211'.
[  216.598869][T10414] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1212'.
[  217.456462][T10446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.517049][T10449] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1220'.
[  217.673713][T10466] validate_nla: 1 callbacks suppressed
[  217.673851][T10466] netlink: 'syz.1.1224': attribute type 10 has an invalid length.
[  217.679535][T10466] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  217.712022][T10468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1225'.
[  217.745242][T10469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1225'.
[  217.799001][T10469] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1225'.
[  217.803110][T10468] netlink: 'syz.2.1225': attribute type 39 has an invalid length.
[  217.862348][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'.
[  217.875550][T10471] : entered promiscuous mode
[  218.172407][T10486] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1230'.
[  218.222071][T10491] netlink: 'syz.2.1231': attribute type 10 has an invalid length.
[  218.224622][T10491] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1231'.
[  218.362548][T10494] netlink: 'syz.1.1232': attribute type 39 has an invalid length.
[  218.758185][T10511] netlink: 'syz.0.1237': attribute type 10 has an invalid length.
[  218.763303][T10511] netdevsim netdevsim0 : left allmulticast mode
[  218.765726][T10511] netdevsim netdevsim0 : left promiscuous mode
[  218.769666][T10511] bridge0: port 3() entered disabled state
[  218.812934][T10517] netlink: 'syz.0.1239': attribute type 3 has an invalid length.
[  219.147576][T10532] netlink: 'syz.0.1243': attribute type 16 has an invalid length.
[  219.150006][T10532] netlink: 'syz.0.1243': attribute type 17 has an invalid length.
[  219.165556][T10532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.252083][T10538] tap0: tun_chr_ioctl cmd 21731
[  219.290879][T10539] tap0: tun_chr_ioctl cmd 2147767521
[  219.955531][T10568] netlink: 'syz.0.1248': attribute type 11 has an invalid length.
[  219.965205][T10568] openvswitch: netlink: Flow actions attr not present in new flow.
[  221.088642][T10590] __nla_validate_parse: 7 callbacks suppressed
[  221.088695][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'.
[  221.157616][T10592] netlink: 'syz.0.1256': attribute type 21 has an invalid length.
[  221.576396][T10605] tmpfs: Bad value for 'uid'
[  221.577894][T10605] tmpfs: Bad value for 'uid'
[  221.584097][T10605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.957528][T10620] netlink: 809 bytes leftover after parsing attributes in process `syz.2.1263'.
[  221.967426][T10620] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1263'.
[  222.514519][T10613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.696420][T10627] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1268'.
[  222.803367][T10636] validate_nla: 4 callbacks suppressed
[  222.803379][T10636] netlink: 'syz.2.1271': attribute type 10 has an invalid length.
[  222.810028][T10636] nft_compat: unsupported protocol 0
[  222.962409][T10642] netlink: 'syz.2.1273': attribute type 10 has an invalid length.
[  223.235337][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'.
[  223.242329][T10668] : entered promiscuous mode
[  223.247129][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'.
[  223.319853][T10678] netlink: 'syz.0.1280': attribute type 2 has an invalid length.
[  223.325374][T10678] netlink: 'syz.0.1280': attribute type 1 has an invalid length.
[  223.327016][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'.
[  223.332088][T10664] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1277'.
[  223.338479][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'.
[  223.359490][T10683] netlink: 'syz.2.1281': attribute type 19 has an invalid length.
[  223.377632][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.379919][T10683] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.383605][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.385870][T10683] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.491773][T10693] netlink: 'syz.2.1284': attribute type 13 has an invalid length.
[  223.567711][T10697] netlink: 'syz.2.1285': attribute type 39 has an invalid length.
[  223.603162][T10700] netlink: 'syz.1.1286': attribute type 10 has an invalid length.
[  224.038139][T10719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.174826][T10723] netlink: 'syz.2.1294': attribute type 4 has an invalid length.
[  224.179394][T10723] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1294'.
[  224.343411][T10725] syzkaller0: entered promiscuous mode
[  224.345209][T10725] syzkaller0: entered allmulticast mode
[  224.702535][T10744] netlink: 'syz.1.1300': attribute type 1 has an invalid length.
[  224.814950][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.215042][T10735] delete_channel: no stack
[  226.380631][T10807] __nla_validate_parse: 4 callbacks suppressed
[  226.380646][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'.
[  226.501023][T10809] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  226.606238][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1318'.
[  226.682331][T10825] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1319'.
[  226.761642][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'.
[  227.509501][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'.
[  227.543518][T10852] : renamed from dummy0
[  227.618626][T10856] batman_adv: batadv0: Adding interface: 
[  227.630877][T10856] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  227.824570][T10875] tmpfs: Bad value for 'uid'
[  227.826421][T10875] tmpfs: Bad value for 'uid'
[  227.975419][T10885] validate_nla: 13 callbacks suppressed
[  227.975435][T10885] netlink: 'syz.1.1334': attribute type 10 has an invalid length.
[  228.070346][T10887] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  228.202792][T10897] netlink: 'syz.1.1337': attribute type 11 has an invalid length.
[  228.205783][T10897] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1337'.
[  228.345046][T10899] netlink: 'syz.1.1338': attribute type 3 has an invalid length.
[  228.348349][T10899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  228.583856][T10902] netlink: 'syz.1.1339': attribute type 1 has an invalid length.
[  228.587421][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'.
[  228.664946][T10908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1341'.
[  228.776793][T10911] sit0: entered promiscuous mode
[  228.846470][T10915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1343'.
[  228.883527][T10918] netlink: 'syz.2.1344': attribute type 10 has an invalid length.
[  228.983024][T10930] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1344'.
[  229.095005][T10937] netlink: 'syz.1.1347': attribute type 10 has an invalid length.
[  229.137327][T10937] netdevsim netdevsim1 : renamed from netdevsim0
[  229.173933][T10937] can: request_module (can-proto-0) failed.
[  229.363753][T10942] netlink: 'syz.1.1349': attribute type 2 has an invalid length.
[  229.673003][T10948] netlink: 'syz.1.1351': attribute type 10 has an invalid length.
[  230.335733][T10956] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  230.659965][T10974] netlink: 'syz.0.1357': attribute type 10 has an invalid length.
[  231.085253][T10994] netlink: 'syz.1.1361': attribute type 27 has an invalid length.
[  231.088021][T10994] netlink: 'syz.1.1361': attribute type 4 has an invalid length.
[  232.454679][T11039] __nla_validate_parse: 7 callbacks suppressed
[  232.454754][T11039] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1370'.
[  232.661783][T11042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1371'.
[  233.074089][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'.
[  233.098211][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'.
[  233.112598][T11054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1377'.
[  233.918544][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'.
[  233.946375][T11072] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1380'.
[  234.155281][T11074] validate_nla: 3 callbacks suppressed
[  234.155293][T11074] netlink: 'syz.0.1383': attribute type 10 has an invalid length.
[  234.155306][T11075] netlink: 'syz.0.1383': attribute type 10 has an invalid length.
[  234.166455][T11074] netlink: 'syz.0.1383': attribute type 10 has an invalid length.
[  235.047824][T11076] delete_channel: no stack
[  235.104679][T11088] netlink: 'syz.2.1386': attribute type 21 has an invalid length.
[  235.108092][T11088] netlink: 'syz.2.1386': attribute type 4 has an invalid length.
[  235.170668][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'.
[  235.219840][T11092] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1388'.
[  236.026538][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'.
[  236.070908][T11100] netlink: 'syz.2.1390': attribute type 2 has an invalid length.
[  236.441299][T11105] netlink: zone id is out of range
[  236.443253][T11105] netlink: zone id is out of range
[  236.445276][T11105] netlink: zone id is out of range
[  236.447301][T11105] netlink: zone id is out of range
[  236.449324][T11105] netlink: zone id is out of range
[  236.468179][T11105] netlink: zone id is out of range
[  236.470182][T11105] netlink: zone id is out of range
[  236.472396][T11105] netlink: zone id is out of range
[  236.474504][T11105] netlink: zone id is out of range
[  236.476438][T11105] netlink: zone id is out of range
[  236.793791][T11115] netlink: 'syz.0.1394': attribute type 10 has an invalid length.
[  236.796864][T11115] batman_adv: batadv0: Removing interface: 
[  237.366205][T11119] netlink: 'syz.0.1396': attribute type 1 has an invalid length.
[  237.662286][T11125] netlink: 'syz.0.1398': attribute type 10 has an invalid length.
[  237.909819][T11132] netlink: 'syz.0.1399': attribute type 21 has an invalid length.
[  237.928028][T11127] __nla_validate_parse: 6 callbacks suppressed
[  237.928143][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1397'.
[  238.092448][T11132] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1399'.
[  238.578645][T11144] bpf: Bad value for 'gid'
[  238.825432][T11151] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1375'.
[  238.850143][T11152] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1375'.
[  238.873607][T11151] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1375'.
[  238.880181][T11152] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1375'.
[  238.898285][T11151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1375'.
[  239.438017][T11170] validate_nla: 2 callbacks suppressed
[  239.438034][T11170] netlink: 'syz.1.1410': attribute type 10 has an invalid length.
[  239.690210][T11188] netlink: 'syz.2.1413': attribute type 10 has an invalid length.
[  239.799196][T11192] pim6reg1: entered allmulticast mode
[  239.860384][T11202] pim6reg1: left allmulticast mode
[  239.902848][T11206] netlink: 'syz.2.1418': attribute type 10 has an invalid length.
[  240.280317][T11219] netlink: 'syz.2.1423': attribute type 10 has an invalid length.
[  240.288897][T11219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1423'.
[  240.434542][T11221] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1424'.
[  240.446934][T11221] netlink: 'syz.1.1424': attribute type 4 has an invalid length.
[  240.450749][T11221] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1424'.
[  240.492972][T11224] -1: renamed from syzkaller0
[  240.907924][T11240] netlink: 'syz.1.1426': attribute type 10 has an invalid length.
[  241.474058][T11258] netlink: 'syz.2.1433': attribute type 10 has an invalid length.
[  241.557575][T11250] net_ratelimit: 77 callbacks suppressed
[  241.557631][T11250] openvswitch: netlink: Flow actions attr not present in new flow.
[  241.614697][T11260] wg2: left promiscuous mode
[  241.617586][T11260] wg2: left allmulticast mode
[  241.628613][T11250] syzkaller0: entered promiscuous mode
[  241.684227][T11260] wg2: entered promiscuous mode
[  241.687101][T11260] wg2: entered allmulticast mode
[  241.780471][T11265] netlink: 'syz.2.1436': attribute type 10 has an invalid length.
[  242.043889][T11283] netlink: 'syz.2.1440': attribute type 10 has an invalid length.
[  242.074783][T11285] debugfs: '`]Iq!>s*!' already exists in 'ieee80211'
[  242.399023][T11309] netlink: 'syz.1.1446': attribute type 10 has an invalid length.
[  242.835848][T11321] bridge_slave_1: left allmulticast mode
[  242.837910][T11321] bridge_slave_1: left promiscuous mode
[  242.840065][T11321] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.237060][T11329] __nla_validate_parse: 10 callbacks suppressed
[  243.237127][T11329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1452'.
[  243.356248][T11330] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1452'.
[  243.536028][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1453'.
[  243.647905][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'.
[  243.653446][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'.
[  243.791884][T11344] IPv6: NLM_F_CREATE should be specified when creating new route
[  243.877970][T11348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.896215][T11350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1457'.
[  243.956308][T11355] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1459'.
[  243.971892][T11355] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1459'.
[  243.985318][T11355] hsr_slave_1: left promiscuous mode
[  244.182593][T11364] nft_compat: unsupported protocol 0
[  244.204219][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'.
[  244.207907][T11366] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1463'.
[  244.934327][T11372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.996140][T11372] validate_nla: 39 callbacks suppressed
[  244.996181][T11372] netlink: 'syz.0.1465': attribute type 10 has an invalid length.
[  245.358943][T11401] netlink: 'syz.1.1469': attribute type 10 has an invalid length.
[  245.775098][T11410] netlink: 'syz.0.1473': attribute type 3 has an invalid length.
[  245.778544][T11410] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  246.242232][T11430] @: renamed from bond_slave_0
[  246.244741][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 8
[  246.399965][T11434] netlink: 'syz.0.1482': attribute type 12 has an invalid length.
[  246.713014][T11443] debugfs: '`]Iq!>s*!' already exists in 'ieee80211'
[  246.831291][T11450] veth1_to_bond: entered allmulticast mode
[  247.017246][T11453] netlink: 'syz.2.1486': attribute type 39 has an invalid length.
[  247.450482][T11460] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  247.487700][T11461] netlink: 'syz.1.1489': attribute type 10 has an invalid length.
[  247.709166][T11473] netlink: 'syz.0.1492': attribute type 64 has an invalid length.
[  248.144755][T11484] netlink: 'syz.1.1493': attribute type 10 has an invalid length.
[  248.171273][T11492] netlink: 'syz.2.1495': attribute type 11 has an invalid length.
[  248.494817][T11503] openvswitch: netlink: EtherType 50a is less than min 600
[  248.745598][T11517] syzkaller0: entered promiscuous mode
[  248.747517][T11517] syzkaller0: entered allmulticast mode
[  250.266589][T11534] __nla_validate_parse: 42 callbacks suppressed
[  250.266606][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'.
[  250.403010][T11538] netlink: 'syz.1.1507': attribute type 10 has an invalid length.
[  250.406399][T11538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1507'.
[  250.413153][T11538] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  250.469867][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'.
[  250.513179][T11547] netlink: 'syz.1.1510': attribute type 10 has an invalid length.
[  250.516222][T11547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1510'.
[  250.523096][T11547] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  250.598874][T11554] pim6reg1: entered allmulticast mode
[  250.606477][T11554] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1512'.
[  250.703933][T11556] syzkaller0: entered promiscuous mode
[  250.706251][T11556] syzkaller0: entered allmulticast mode
[  250.766488][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'.
[  250.770060][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'.
[  250.776852][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  250.888658][T11562] netlink: 'syz.1.1515': attribute type 11 has an invalid length.
[  250.892979][T11562] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1515'.
[  251.261964][T11573] netlink: 'syz.1.1519': attribute type 10 has an invalid length.
[  251.265046][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1519'.
[  251.271873][T11573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.437664][T11575] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  251.540130][T11587] netlink: 'syz.0.1524': attribute type 39 has an invalid length.
[  251.773131][T11595] syzkaller1: tun_chr_ioctl cmd 1074025677
[  251.776701][T11595] syzkaller1: linktype set to 823
[  251.824047][T11598] netlink: 'syz.0.1528': attribute type 3 has an invalid length.
[  251.826995][T11598] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  251.982538][T11602] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  252.006527][T11604] netlink: 'syz.0.1531': attribute type 3 has an invalid length.
[  252.009197][T11604] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[  252.443368][T11624] openvswitch: netlink: Message has 4 unknown bytes.
[  252.467384][T11621] openvswitch: netlink: IPv6 tunnel dst address is zero
[  252.551433][T11633] openvswitch: netlink: EtherType 50a is less than min 600
[  252.678085][T11639] netlink: 'syz.2.1540': attribute type 10 has an invalid length.
[  252.861988][T11659] syzkaller0: create flow: hash 2121161726 index 1
[  252.885408][T11659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.888580][T11659] syzkaller0: delete flow: hash 2121161726 index 1
[  253.006817][T11661] netlink: 'syz.2.1545': attribute type 11 has an invalid length.
[  254.228819][T11683] netlink: 'syz.2.1551': attribute type 39 has an invalid length.
[  254.387138][T11686] syzkaller0: entered promiscuous mode
[  254.389267][T11686] syzkaller0: entered allmulticast mode
[  255.339423][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  255.341866][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  257.264609][T11773] validate_nla: 5 callbacks suppressed
[  257.264620][T11773] netlink: 'syz.2.1570': attribute type 10 has an invalid length.
[  257.270161][T11772] netlink: 'syz.1.1571': attribute type 2 has an invalid length.
[  257.274527][T11772] __nla_validate_parse: 13 callbacks suppressed
[  257.274539][T11772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1571'.
[  257.723676][T11779] netlink: 'syz.1.1572': attribute type 10 has an invalid length.
[  258.011579][T11794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1575'.
[  258.042614][T11799] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1577'.
[  258.046930][T11799] netlink: 'syz.1.1577': attribute type 10 has an invalid length.
[  258.105282][T11799] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1577'.
[  258.133212][T11799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1577'.
[  258.136198][T11807] netlink: 'syz.0.1579': attribute type 1 has an invalid length.
[  258.244303][T11822] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1582'.
[  258.283811][T11824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1583'.
[  258.287163][T11824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1583'.
[  258.290280][T11824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1583'.
[  258.349011][T11826] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1584'.
[  258.356362][T11826] netlink: 'syz.0.1584': attribute type 10 has an invalid length.
[  258.872776][T11845] netlink: 'syz.2.1588': attribute type 10 has an invalid length.
[  259.344268][T11847] netlink: 'syz.1.1589': attribute type 10 has an invalid length.
[  259.380106][T11849] netlink: 'syz.0.1590': attribute type 10 has an invalid length.
[  259.503654][T11858] openvswitch: netlink: Missing key (keys=40, expected=100)
[  259.507486][T11858] netlink: 'syz.2.1592': attribute type 10 has an invalid length.
[  260.263684][T11898] Y4`Ҙ: renamed from lo (while UP)
[  260.289614][T11904] batman_adv: batadv0: Adding interface: hsr_slave_1
[  260.294419][T11904] batman_adv: batadv0: Interface activated: hsr_slave_1
[  260.738616][T11922] batadv_slave_1: entered promiscuous mode
[  264.243545][T11974] validate_nla: 5 callbacks suppressed
[  264.243557][T11974] netlink: 'syz.1.1621': attribute type 10 has an invalid length.
[  264.368454][T11987] __nla_validate_parse: 12 callbacks suppressed
[  264.368465][T11987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1624'.
[  264.375517][T11986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1624'.
[  264.418353][T11993] netlink: 'syz.2.1626': attribute type 64 has an invalid length.
[  264.853069][T12010] syzkaller0: entered allmulticast mode
[  264.943232][T12015] netlink: 'syz.0.1630': attribute type 12 has an invalid length.
[  264.946293][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1630'.
[  264.993425][T12020] netlink: 'syz.2.1634': attribute type 10 has an invalid length.
[  264.997308][T12020] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  265.073063][T12018] syzkaller0: entered promiscuous mode
[  265.075291][T12018] syzkaller0: entered allmulticast mode
[  266.610627][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1179887622 wd_nsec: 1179887654
[  268.229332][T12035] syzkaller0: entered promiscuous mode
[  268.231186][T12035] syzkaller0: entered allmulticast mode
[  268.241109][T12037] netlink: 'syz.2.1638': attribute type 10 has an invalid length.
[  268.247309][T12037] netlink: 'syz.2.1638': attribute type 11 has an invalid length.
[  268.249738][T12037] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1638'.
[  268.264064][T12034] openvswitch: netlink: EtherType 50a is less than min 600
[  268.270126][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'.
[  268.380438][T12043] netlink: 'syz.1.1641': attribute type 6 has an invalid length.
[  268.385185][T12043] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1641'.
[  268.460073][T12049] netlink: 'syz.1.1642': attribute type 27 has an invalid length.
[  268.463389][T12049] netlink: 'syz.1.1642': attribute type 4 has an invalid length.
[  268.466448][T12049] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1642'.
[  268.596513][T12051] netlink: 'syz.2.1643': attribute type 10 has an invalid length.
[  269.924655][T12071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1650'.
[  269.928141][T12070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1650'.
[  269.935828][T12070] netlink: 'syz.1.1650': attribute type 4 has an invalid length.
[  269.939004][T12070] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1650'.
[  269.952492][T12067] netlink: 'syz.0.1648': attribute type 17 has an invalid length.
[  269.955013][T12067] netlink: 'syz.0.1648': attribute type 16 has an invalid length.
[  269.960135][T12067] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1648'.
[  270.012122][T12073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1651'.
[  270.066077][T12081] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1653'.
[  270.071423][T12081] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1653'.
[  270.076315][T12081] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1653'.
[  270.085645][T12081] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1653'.
[  270.092359][T12081] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1653'.
[  270.119343][T12083] netlink: 'syz.1.1654': attribute type 9 has an invalid length.
[  270.168102][T12086] netlink: 'syz.0.1655': attribute type 13 has an invalid length.
[  270.279710][T12092] netlink: 'syz.0.1658': attribute type 21 has an invalid length.
[  270.298346][T12095] netlink: 'syz.0.1658': attribute type 10 has an invalid length.
[  270.313533][T12095] netlink: 'syz.0.1658': attribute type 10 has an invalid length.
[  270.316815][T12095] netlink: 'syz.0.1658': attribute type 10 has an invalid length.
[  270.320008][T12095] netlink: 'syz.0.1658': attribute type 10 has an invalid length.
[  271.282505][T12148] pim6reg0: tun_chr_ioctl cmd 1074025681
[  272.237035][T12202] openvswitch: netlink: Message has 6 unknown bytes.
[  273.681427][T12264] delete_channel: no stack
[  273.786540][T12268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.013516][T12304] validate_nla: 76 callbacks suppressed
[  275.013552][T12304] netlink: 'syz.0.1716': attribute type 10 has an invalid length.
[  275.055144][T12312] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.058425][T12312] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.065100][T12314] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.068352][T12314] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.072256][T12312] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.075648][T12314] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.078844][T12314] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.092206][T12312] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.101770][T12312] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  275.384700][T12329] __nla_validate_parse: 31 callbacks suppressed
[  275.384717][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'.
[  275.403851][T12328] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1722'.
[  275.635830][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'.
[  275.913420][T12348] sit0: left promiscuous mode
[  276.007263][T12348] : left promiscuous mode
[  276.009510][T12348] : left allmulticast mode
[  276.034402][T12348] veth1_to_bond: left allmulticast mode
[  276.072597][T12348] batadv_slave_1: left promiscuous mode
[  276.088128][T12348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.126386][T12348] mac80211_hwsim hwsim15 wlan0: left promiscuous mode
[  276.129086][T12348] mac80211_hwsim hwsim15 wlan0: left allmulticast mode
[  276.136090][T12348] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  276.293014][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.296351][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.322284][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.493857][T12353] pim6reg1: entered allmulticast mode
[  276.806326][T12389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.103701][T12415] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1747'.
[  277.327974][T12424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1749'.
[  277.396286][T12426] pim6reg1: entered allmulticast mode
[  277.597942][T12440] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1755'.
[  277.644165][T12442] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1756'.
[  278.017905][T12459] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1761'.
[  278.026357][T12459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1761'.
[  278.305145][T12464] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1763'.
[  278.786563][T12472] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check.
[  278.808676][T12474] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  280.444097][T12523] validate_nla: 112 callbacks suppressed
[  280.444141][T12523] netlink: 'syz.0.1779': attribute type 21 has an invalid length.
[  280.448325][T12523] __nla_validate_parse: 2 callbacks suppressed
[  280.448333][T12523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1779'.
[  280.457794][T12523] hsr0 speed is unknown, defaulting to 1000
[  280.460282][T12523] hsr0 speed is unknown, defaulting to 1000
[  280.467189][T12523] hsr0 speed is unknown, defaulting to 1000
[  280.478291][T12523] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  280.489288][T12523] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  280.524359][T12525] netlink: 'syz.2.1780': attribute type 39 has an invalid length.
[  280.548957][T12523] hsr0 speed is unknown, defaulting to 1000
[  280.557788][T12523] hsr0 speed is unknown, defaulting to 1000
[  280.564445][T12523] hsr0 speed is unknown, defaulting to 1000
[  280.629073][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1781'.
[  280.640151][T12529] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1781'.
[  280.835856][T12538] netlink: 'syz.2.1784': attribute type 10 has an invalid length.
[  280.944009][T12543] netlink: 'syz.1.1786': attribute type 21 has an invalid length.
[  280.947185][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'.
[  280.955246][T12543] netlink: 'syz.1.1786': attribute type 10 has an invalid length.
[  281.030346][T12552] netlink: 'syz.1.1789': attribute type 2 has an invalid length.
[  281.035313][T12552] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1789'.
[  281.039134][T12552] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  281.209244][T12560] netlink: 'syz.1.1791': attribute type 10 has an invalid length.
[  281.343278][T12560] netlink: 62779 bytes leftover after parsing attributes in process `syz.1.1791'.
[  281.361613][T12560] syzkaller0: entered promiscuous mode
[  281.363812][T12560] syzkaller0: entered allmulticast mode
[  281.607433][T12565] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1792'.
[  281.614521][T12565] netlink: 'syz.0.1792': attribute type 4 has an invalid length.
[  281.617997][T12565] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1792'.
[  281.626422][T12565] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  281.674868][T12565] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  281.685211][   T47] hsr0 speed is unknown, defaulting to 1000
[  281.688511][   T47] syz0: Port: 1 Link DOWN
[  281.911704][T12581] netlink: 'syz.2.1797': attribute type 1 has an invalid length.
[  281.962186][T12583] netlink: 'syz.2.1798': attribute type 10 has an invalid length.
[  282.456238][T12596] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1802'.
[  282.459042][T12597] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1802'.
[  282.472116][T12596] syzkaller0: entered promiscuous mode
[  282.474083][T12596] syzkaller0: entered allmulticast mode
[  282.709711][T12610] hsr0 speed is unknown, defaulting to 1000
[  282.798603][T12609] hsr0 speed is unknown, defaulting to 1000
[  284.381427][T12641] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  285.028380][T12685] syzkaller0: entered allmulticast mode
[  285.031661][T12684] hsr0 speed is unknown, defaulting to 1000
[  285.320015][T12694] netlink: 'syz.2.1823': attribute type 11 has an invalid length.
[  285.463866][T12696] validate_nla: 10 callbacks suppressed
[  285.463878][T12696] netlink: 'syz.1.1824': attribute type 21 has an invalid length.
[  285.468188][T12696] __nla_validate_parse: 19 callbacks suppressed
[  285.468196][T12696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1824'.
[  285.525668][T12698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1825'.
[  285.529879][T12698] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1825'.
[  285.588202][T12699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1825'.
[  285.593026][T12699] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  285.621069][T12699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.624683][T12699] netlink: 'syz.2.1825': attribute type 1 has an invalid length.
[  285.739222][T12705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1826'.
[  285.825360][T12707] netlink: 'syz.0.1827': attribute type 10 has an invalid length.
[  285.928046][T12713] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1829'.
[  285.932215][T12713] netlink: zone id is out of range
[  285.934035][T12713] netlink: zone id is out of range
[  285.935744][T12713] netlink: zone id is out of range
[  285.937458][T12713] netlink: zone id is out of range
[  285.939234][T12713] netlink: zone id is out of range
[  285.942739][T12713] netlink: zone id is out of range
[  285.944609][T12713] netlink: zone id is out of range
[  286.015015][T12714] -1: renamed from syzkaller0
[  287.094731][T12746] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1839'.
[  287.123905][T12743] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1838'.
[  287.457177][T12755] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1841'.
[  287.552450][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'.
[  287.782012][T12767] delete_channel: no stack
[  288.671028][T12800] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  289.124421][T12812] hsr0 speed is unknown, defaulting to 1000
[  290.412439][T12837] netlink: 'syz.2.1861': attribute type 10 has an invalid length.
[  290.961724][T12842] xt_bpf: check failed: parse error
[  290.987717][T12840] ==================================================================
[  290.990853][T12840] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  290.993899][T12840] Read of size 1 at addr ffff888111e799b0 by task syz.1.1864/12840
[  290.998128][T12840] 
[  290.999070][T12840] CPU: 0 UID: 0 PID: 12840 Comm: syz.1.1864 Not tainted syzkaller #0 PREEMPT(full) 
[  290.999088][T12840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.999097][T12840] Call Trace:
[  290.999104][T12840]  <TASK>
[  290.999111][T12840]  dump_stack_lvl+0x189/0x250
[  290.999141][T12840]  ? __virt_addr_valid+0x1c8/0x5c0
[  290.999161][T12840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.999177][T12840]  ? __virt_addr_valid+0x1c8/0x5c0
[  290.999192][T12840]  ? lock_release+0x4b/0x3e0
[  290.999214][T12840]  ? __virt_addr_valid+0x4a5/0x5c0
[  290.999232][T12840]  print_report+0xca/0x240
[  290.999245][T12840]  ? __xfrm_state_insert+0x8af/0x1450
[  290.999264][T12840]  kasan_report+0x118/0x150
[  290.999279][T12840]  ? __xfrm_state_insert+0x8af/0x1450
[  290.999303][T12840]  __xfrm_state_insert+0x8af/0x1450
[  290.999352][T12840]  ? xfrm_state_insert+0x44/0x60
[  290.999374][T12840]  xfrm_state_insert+0x54/0x60
[  290.999393][T12840]  ipcomp6_init_state+0x655/0x900
[  290.999417][T12840]  __xfrm_init_state+0xa76/0x13f0
[  290.999431][T12840]  ? __xfrm_init_state+0x7ef/0x13f0
[  290.999446][T12840]  xfrm_init_state+0x18/0xa0
[  290.999464][T12840]  pfkey_add+0x1d38/0x2e00
[  290.999492][T12840]  ? __pfx_pfkey_add+0x10/0x10
[  290.999508][T12840]  ? kmem_cache_free+0x18f/0x400
[  290.999534][T12840]  pfkey_sendmsg+0xbfe/0x1090
[  290.999551][T12840]  ? trace_sched_exit_tp+0x36/0x110
[  290.999577][T12840]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  290.999608][T12840]  ? aa_sock_msg_perm+0xf1/0x1d0
[  290.999625][T12840]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  290.999642][T12840]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  290.999660][T12840]  __sock_sendmsg+0x21c/0x270
[  290.999677][T12840]  ____sys_sendmsg+0x505/0x830
[  290.999699][T12840]  ? __pfx_____sys_sendmsg+0x10/0x10
[  290.999721][T12840]  ? import_iovec+0x74/0xa0
[  290.999743][T12840]  ___sys_sendmsg+0x21f/0x2a0
[  290.999763][T12840]  ? __pfx____sys_sendmsg+0x10/0x10
[  290.999793][T12840]  ? __fget_files+0x2a/0x420
[  290.999814][T12840]  ? __fget_files+0x2a/0x420
[  290.999826][T12840]  ? __fget_files+0x3a0/0x420
[  290.999845][T12840]  __x64_sys_sendmsg+0x19b/0x260
[  290.999865][T12840]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  290.999890][T12840]  ? rcu_is_watching+0x15/0xb0
[  290.999907][T12840]  ? do_syscall_64+0xbe/0x3b0
[  290.999927][T12840]  do_syscall_64+0xfa/0x3b0
[  290.999943][T12840]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.999958][T12840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.999979][T12840]  ? exc_page_fault+0x9f/0xf0
[  290.999996][T12840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.000011][T12840] RIP: 0033:0x7f61a918ec29
[  291.000026][T12840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.000040][T12840] RSP: 002b:00007f61aa0b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.000056][T12840] RAX: ffffffffffffffda RBX: 00007f61a93d5fa0 RCX: 00007f61a918ec29
[  291.000067][T12840] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  291.000076][T12840] RBP: 00007f61a9211e41 R08: 0000000000000000 R09: 0000000000000000
[  291.000084][T12840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.000093][T12840] R13: 00007f61a93d6038 R14: 00007f61a93d5fa0 R15: 00007ffdbaa10438
[  291.000110][T12840]  </TASK>
[  291.000116][T12840] 
[  291.121937][T12840] Allocated by task 9605:
[  291.123648][T12840]  kasan_save_track+0x3e/0x80
[  291.125524][T12840]  __kasan_slab_alloc+0x6c/0x80
[  291.127450][T12840]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  291.129579][T12840]  xfrm_state_alloc+0x24/0x2f0
[  291.131415][T12840]  __find_acq_core+0x8a7/0x1c00
[  291.133459][T12840]  xfrm_find_acq+0x78/0xa0
[  291.135206][T12840]  xfrm_alloc_userspi+0x6b3/0xc90
[  291.137190][T12840]  xfrm_user_rcv_msg+0x7a3/0xab0
[  291.139131][T12840]  netlink_rcv_skb+0x208/0x470
[  291.141058][T12840]  xfrm_netlink_rcv+0x79/0x90
[  291.142903][T12840]  netlink_unicast+0x82f/0x9e0
[  291.144756][T12840]  netlink_sendmsg+0x805/0xb30
[  291.146586][T12840]  __sock_sendmsg+0x21c/0x270
[  291.148429][T12840]  ____sys_sendmsg+0x505/0x830
[  291.150297][T12840]  ___sys_sendmsg+0x21f/0x2a0
[  291.152144][T12840]  __x64_sys_sendmsg+0x19b/0x260
[  291.154098][T12840]  do_syscall_64+0xfa/0x3b0
[  291.155913][T12840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.158227][T12840] 
[  291.159261][T12840] Freed by task 8615:
[  291.160841][T12840]  kasan_save_track+0x3e/0x80
[  291.162681][T12840]  kasan_save_free_info+0x46/0x50
[  291.164654][T12840]  __kasan_slab_free+0x5b/0x80
[  291.166568][T12840]  kmem_cache_free+0x18f/0x400
[  291.168480][T12840]  xfrm_state_gc_task+0x52d/0x6b0
[  291.170477][T12840]  process_scheduled_works+0xae1/0x17b0
[  291.172635][T12840]  worker_thread+0x8a0/0xda0
[  291.174444][T12840]  kthread+0x711/0x8a0
[  291.176056][T12840]  ret_from_fork+0x439/0x7d0
[  291.177870][T12840]  ret_from_fork_asm+0x1a/0x30
[  291.179823][T12840] 
[  291.180799][T12840] The buggy address belongs to the object at ffff888111e79680
[  291.180799][T12840]  which belongs to the cache xfrm_state of size 928
[  291.186176][T12840] The buggy address is located 816 bytes inside of
[  291.186176][T12840]  freed 928-byte region [ffff888111e79680, ffff888111e79a20)
[  291.191393][T12840] 
[  291.192343][T12840] The buggy address belongs to the physical page:
[  291.194763][T12840] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111e7a400 pfn:0x111e78
[  291.198926][T12840] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  291.202151][T12840] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  291.205154][T12840] page_type: f5(slab)
[  291.206760][T12840] raw: 057ff00000000040 ffff88801beae780 dead000000000122 0000000000000000
[  291.210134][T12840] raw: ffff888111e7a400 00000000800e000a 00000000f5000000 0000000000000000
[  291.213474][T12840] head: 057ff00000000040 ffff88801beae780 dead000000000122 0000000000000000
[  291.216877][T12840] head: ffff888111e7a400 00000000800e000a 00000000f5000000 0000000000000000
[  291.220227][T12840] head: 057ff00000000002 ffffea0004479e01 00000000ffffffff 00000000ffffffff
[  291.223623][T12840] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  291.227033][T12840] page dumped because: kasan: bad access detected
[  291.229522][T12840] page_owner tracks the page as allocated
[  291.231750][T12840] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6545, tgid 6540 (syz.2.183), ts 79788534513, free_ts 79787721195
[  291.239043][T12840]  post_alloc_hook+0x240/0x2a0
[  291.240953][T12840]  get_page_from_freelist+0x21e4/0x22c0
[  291.243343][T12840]  __alloc_frozen_pages_noprof+0x181/0x370
[  291.245650][T12840]  alloc_pages_mpol+0x232/0x4a0
[  291.247574][T12840]  allocate_slab+0x8a/0x370
[  291.249384][T12840]  ___slab_alloc+0xbeb/0x1420
[  291.251115][T12840]  kmem_cache_alloc_noprof+0x283/0x3c0
[  291.253179][T12840]  xfrm_state_alloc+0x24/0x2f0
[  291.255058][T12840]  xfrm_add_sa+0x17d1/0x4070
[  291.256870][T12840]  xfrm_user_rcv_msg+0x7a3/0xab0
[  291.258805][T12840]  netlink_rcv_skb+0x208/0x470
[  291.260713][T12840]  xfrm_netlink_rcv+0x79/0x90
[  291.262712][T12840]  netlink_unicast+0x82f/0x9e0
[  291.264652][T12840]  netlink_sendmsg+0x805/0xb30
[  291.266596][T12840]  __sock_sendmsg+0x21c/0x270
[  291.268564][T12840]  ____sys_sendmsg+0x505/0x830
[  291.270532][T12840] page last free pid 6540 tgid 6540 stack trace:
[  291.272898][T12840]  __free_frozen_pages+0xbc4/0xd30
[  291.274883][T12840]  stack_depot_save_flags+0x436/0x860
[  291.277030][T12840]  kasan_save_track+0x4f/0x80
[  291.278828][T12840]  __kasan_kmalloc+0x93/0xb0
[  291.280608][T12840]  __kmalloc_node_noprof+0x276/0x4e0
[  291.282205][T12840]  allocate_slab+0x16a/0x370
[  291.283565][T12840]  ___slab_alloc+0xbeb/0x1420
[  291.285146][T12840]  kmem_cache_alloc_lru_noprof+0x288/0x3d0
[  291.286933][T12840]  alloc_inode+0xb8/0x1b0
[  291.288177][T12840]  path_from_stashed+0x200/0x5c0
[  291.289777][T12840]  perf_event_namespaces+0x342/0x920
[  291.291631][T12840]  perf_event_fork+0x152/0x7d0
[  291.293227][T12840]  copy_process+0x386a/0x3c00
[  291.294872][T12840]  kernel_clone+0x21e/0x840
[  291.296556][T12840]  __se_sys_clone3+0x256/0x2d0
[  291.298197][T12840]  do_syscall_64+0xfa/0x3b0
[  291.299795][T12840] 
[  291.300530][T12840] Memory state around the buggy address:
[  291.302351][T12840]  ffff888111e79880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  291.305263][T12840]  ffff888111e79900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  291.307700][T12840] >ffff888111e79980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  291.310189][T12840]                                      ^
[  291.312019][T12840]  ffff888111e79a00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  291.314818][T12840]  ffff888111e79a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  291.317800][T12840] ==================================================================
[  291.320522][T12840] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  291.322879][T12840] CPU: 0 UID: 0 PID: 12840 Comm: syz.1.1864 Not tainted syzkaller #0 PREEMPT(full) 
[  291.326329][T12840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.329411][T12840] Call Trace:
[  291.330651][T12840]  <TASK>
[  291.331625][T12840]  dump_stack_lvl+0x99/0x250
[  291.333142][T12840]  ? __asan_memcpy+0x40/0x70
[  291.334789][T12840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.336588][T12840]  ? __pfx__printk+0x10/0x10
[  291.338190][T12840]  vpanic+0x281/0x750
[  291.339488][T12840]  ? __pfx_vpanic+0x10/0x10
[  291.341123][T12840]  ? irqentry_exit+0x74/0x90
[  291.342661][T12840]  panic+0xb9/0xc0
[  291.343989][T12840]  ? __pfx_panic+0x10/0x10
[  291.345721][T12840]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  291.347799][T12840]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  291.349953][T12840]  ? __xfrm_state_insert+0x8af/0x1450
[  291.351859][T12840]  check_panic_on_warn+0x89/0xb0
[  291.353470][T12840]  ? __xfrm_state_insert+0x8af/0x1450
[  291.355160][T12840]  end_report+0x78/0x160
[  291.356748][T12840]  kasan_report+0x129/0x150
[  291.358235][T12840]  ? __xfrm_state_insert+0x8af/0x1450
[  291.359975][T12840]  __xfrm_state_insert+0x8af/0x1450
[  291.361577][T12840]  ? xfrm_state_insert+0x44/0x60
[  291.363443][T12840]  xfrm_state_insert+0x54/0x60
[  291.365282][T12840]  ipcomp6_init_state+0x655/0x900
[  291.367214][T12840]  __xfrm_init_state+0xa76/0x13f0
[  291.368942][T12840]  ? __xfrm_init_state+0x7ef/0x13f0
[  291.370600][T12840]  xfrm_init_state+0x18/0xa0
[  291.372046][T12840]  pfkey_add+0x1d38/0x2e00
[  291.373440][T12840]  ? __pfx_pfkey_add+0x10/0x10
[  291.374900][T12840]  ? kmem_cache_free+0x18f/0x400
[  291.376403][T12840]  pfkey_sendmsg+0xbfe/0x1090
[  291.377829][T12840]  ? trace_sched_exit_tp+0x36/0x110
[  291.379494][T12840]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  291.381031][T12840]  ? aa_sock_msg_perm+0xf1/0x1d0
[  291.382545][T12840]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  291.384211][T12840]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  291.385929][T12840]  __sock_sendmsg+0x21c/0x270
[  291.387470][T12840]  ____sys_sendmsg+0x505/0x830
[  291.389087][T12840]  ? __pfx_____sys_sendmsg+0x10/0x10
[  291.391033][T12840]  ? import_iovec+0x74/0xa0
[  291.392500][T12840]  ___sys_sendmsg+0x21f/0x2a0
[  291.394200][T12840]  ? __pfx____sys_sendmsg+0x10/0x10
[  291.395901][T12840]  ? __fget_files+0x2a/0x420
[  291.397468][T12840]  ? __fget_files+0x2a/0x420
[  291.398962][T12840]  ? __fget_files+0x3a0/0x420
[  291.400640][T12840]  __x64_sys_sendmsg+0x19b/0x260
[  291.402199][T12840]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  291.403883][T12840]  ? rcu_is_watching+0x15/0xb0
[  291.405565][T12840]  ? do_syscall_64+0xbe/0x3b0
[  291.407324][T12840]  do_syscall_64+0xfa/0x3b0
[  291.408954][T12840]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.410569][T12840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.412711][T12840]  ? exc_page_fault+0x9f/0xf0
[  291.414326][T12840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.416279][T12840] RIP: 0033:0x7f61a918ec29
[  291.417843][T12840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.424088][T12840] RSP: 002b:00007f61aa0b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.427097][T12840] RAX: ffffffffffffffda RBX: 00007f61a93d5fa0 RCX: 00007f61a918ec29
[  291.429690][T12840] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  291.432455][T12840] RBP: 00007f61a9211e41 R08: 0000000000000000 R09: 0000000000000000
[  291.435158][T12840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.438038][T12840] R13: 00007f61a93d6038 R14: 00007f61a93d5fa0 R15: 00007ffdbaa10438
[  291.440652][T12840]  </TASK>
[  291.442370][T12840] Kernel Offset: disabled
[  291.443883][T12840] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:35:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000014a2 RDI=00000000000014a3 RBP=00000000000003f8 RSP=ffffc9000282edb0
R8 =ffff88801f4d8237 R9 =1ffff11003e9b046 R10=dffffc0000000000 R11=ffffffff85501400
R12=dffffc0000000000 R13=ffffffff99b03904 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550147c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61aa0b06c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2520ac CR3=00000001239d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f61a93a7498 00007f61a93a7470 XMM03=00007f61a93a74a8 00007f61a93a74a0
XMM04=00007f61a9f0d100 00007f61a93a7460 XMM05=00007f61a93a7478 00007f61a93a74c0
XMM06=00007f61a93a74b8 00007f61a93a74b0 XMM07=00007f61a93a74a8 00007f61a93a74a0
XMM08=0000000000000000 00007f61a9212f0f XMM09=0000000000000000 00007f61a9212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000202 RCX=e1fd7e4db3b69900 RDX=ffffffff8172d195
RSI=ffffffff8be34260 RDI=ffffffff8d9ce553 RBP=dffffc0000000000 RSP=ffffc90001c9ed50
R8 =ffffc90001c9f0f8 R9 =0000000000000000 R10=ffffc90001c9eed8 R11=fffff52000393ddd
R12=ffffc90001c9f108 R13=ffffffff8172d195 R14=ffffffff8e13a120 R15=ffff888033fa0000
RIP=ffffffff819d8117 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61aa08f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d7c798fc8 CR3=0000000026792000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f3d7ba12e7b
XMM06=0000000000000000 00007f3d7ba12e75 XMM07=0000000000000000 00007f3d7ba12e89
XMM08=0000000000000000 00007f3d7ba12f0f XMM09=0000000000000000 00007f3d7ba12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
