last executing test programs:

2m23.073111515s ago: executing program 1 (id=2872):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close(r0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})

2m22.889401619s ago: executing program 1 (id=2877):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x4, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x20000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)

2m22.803218604s ago: executing program 1 (id=2881):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x1000b, 0x6}], 0x10, 0xfffffff6}, 0x94)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

2m22.666810297s ago: executing program 1 (id=2885):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xfeff}}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94)

2m22.559881823s ago: executing program 1 (id=2887):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="61104a000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)

2m22.270143921s ago: executing program 1 (id=2888):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269}, 0x94)

2m22.132674948s ago: executing program 32 (id=2888):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269}, 0x94)

2.79852951s ago: executing program 2 (id=4811):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x4c}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000fcff000000000000000000850000002200000085000000070000009500000000000000e3b791f4a4a3972200e1d2acd44498f2cfbf4ae21867953463a9211404aa0e942d2460473901162b5db03303d2731c0e8ff5f76396f3a69ef52a00e8ae396de506de923c26c5bc87e3461c93cca3b186787c11d06d49d19896534d476fb6550cd031867572ce45503f6f46284b1ce64c582ae6c0e66319f800991ca2b186824cd560affec254ea32ac97873b303fdaa7cdbd52b2f10fc45beb3b5eb9b866fea3b1d06ecc"], &(0x7f0000000080)='GPL\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203}, 0x25)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@o_path={&(0x7f0000002480)='./file0\x00', 0x0, 0x4008, r3}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x2b, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff26ba, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x0, 0x7, 0x0, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x63b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0x8, 0xb, 0x5, 0xfffffffffffffe7b, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001440)='syzkaller\x00', 0x2, 0x27, &(0x7f0000001480)=""/39, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002300)={0x3, 0xe, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002500)=[r4, 0xffffffffffffffff, r5], &(0x7f0000002540)=[{0x1, 0x2, 0x10}], 0x10, 0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.808697971s ago: executing program 0 (id=4816):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
close(0x3)

1.798992235s ago: executing program 2 (id=4818):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000300000000000000050000a3492b469660008ec7a1bd4c00000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r0, 0x11, 0x4, 0x0, @void, @value=r3}, 0x20)

1.681217575s ago: executing program 2 (id=4819):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0)

1.620208533s ago: executing program 2 (id=4820):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000090)

1.619051138s ago: executing program 0 (id=4822):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec000000210001000000000200000000fc0000000300000000000000000000000000000000000000000000000000000100000009000000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x810)

1.519395586s ago: executing program 0 (id=4823):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000edffffff00000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000004c0)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x928, 0x400000000, 0x0, 0x2, 0x9, 0x800000, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x8000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
sendmsg$xdp(r3, &(0x7f0000000740)={&(0x7f00000002c0)={0x2c, 0xa, r4, 0xe}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="c2ce9d4662b3592ea5c6f9dfec7fdb092e48b04d2e90e0207159640d16", 0x1d}, {&(0x7f0000000340)="f71b7c3709722f8a19b99614cf1d752e8ef2512b9fd635c8938f486040560ecd05d3e9c07364b753c3cd26846ecd32b64f856616f0cc5ded925ff7a4c442e5d7ac0875679090faf74ca413529f156d3ee34fd79abf78ee27ce799df6ab90896f2e13f572be2a6ad3789d6d06614e53f1c59342bdd1aa7a3598bcd915e3fb08d5701fec96e7e728cc7993b68e76f149bf624985443a45219c2f8561375661bb3074", 0xa1}, {&(0x7f0000000400)="2a5d9180978638dfd03803e8a7dcbf3461b82000c0a7db202c16903d7ad024db80b25a20effeb2f2ca8c99794a378c9c9d709206e40aed7cdbf302180f6b1f1589e43a225375073fbdd3132258da7ee413c597cba5330b95b16d5326", 0x5c}, {&(0x7f0000000600)="5d6c96af191969b0945ec44cc4c9f6c8e4d6ee942a30ebc926830b3cf0e25f0fc0a73f66fd31c249cad147d80906db0550c350780e64a0544864f0e177f8b9feb8b2bba027c01c4430bb11620299ea8b2266a54c09c481f5181510f4c523c533c4e7c282388dde61374d026352d21dd7058e33800c5bd33a", 0x78}, {&(0x7f0000000840)="c0177b7a4ddde364017dde3bf357d72822ce93ae51c2a571b493ad43d5aeacd3f6f13ba80e13acdd329c8c92b268a2e78a2b356622a0404af2527f145dc2ee32523b48ba55b0307c9dfd58f65ac75600f2612dc4971f32e69c1944a075a5ecc4a5722bd651595043e0a49d4e2cc112de7209d086e695553d2c278dc872ccc2a90858b9ab8ec9c51a72d65f6d8e0cfc14b7ae832e499b7147fd81e93c4ce334febe80a67174006d0cc42ba13649ac500652b72933e1a371ea68c8ae6bdbff13413deaf0f264b153f1f966135fadf21ad431240444b87a756a7ff310e86a40b0cafbeb59c20d4702d847", 0xe9}, {&(0x7f0000000500)="210e76c70925e0a42c13a14d3e1123c0e95d4ac81a335e2fdf28ec", 0x1b}, {&(0x7f0000000580)="4c486d36fa24c1c138476cd6", 0xc}], 0x7, 0x0, 0x0, 0x4000800}, 0x4040)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
socketpair(0x23, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0x80001280, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x18, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)

1.430018943s ago: executing program 2 (id=4826):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x26, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x49238, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x23fd6b854b20bbab, 0x0, 0x4, 0x9, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff800000003, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x8000007, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x408, 0x8, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84)

805.844261ms ago: executing program 3 (id=4829):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003700)=@newspdinfo={0x1c, 0x24, 0x103, 0x70bd2b, 0x25dfdbfb, 0x3, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4068000}, 0x80)

730.03012ms ago: executing program 0 (id=4830):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='GPL\x00')
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r4, &(0x7f0000000340)="11362b5f4081a3023d15beae34183d85e37098055b3d6a64fd873c48e3e949911d7a1d945a13db22cebd", &(0x7f0000000380)=""/220, 0x4}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

729.73234ms ago: executing program 3 (id=4831):
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)

729.671175ms ago: executing program 3 (id=4832):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000640), 0x4)

618.623692ms ago: executing program 2 (id=4833):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x3, 0x3, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)

570.959912ms ago: executing program 3 (id=4834):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4)

570.621869ms ago: executing program 3 (id=4835):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98)

450.414971ms ago: executing program 3 (id=4836):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)

306.186518ms ago: executing program 33 (id=4836):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804)

266.703311ms ago: executing program 0 (id=4838):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x1c}, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000540)={'full', 0x20, 0x2, 0x20, 0x6}, 0x2f)

380.701µs ago: executing program 0 (id=4839):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x4000044)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000103010100000000000000004000000a0c0002"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10)

0s ago: executing program 34 (id=4839):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x4000044)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000103010100000000000000004000000a0c0002"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10)

kernel console output (not intermixed with test programs):

ne id is out of range
[  140.802759][ T7226] netlink: zone id is out of range
[  140.804973][ T7226] netlink: zone id is out of range
[  140.807964][ T7226] netlink: zone id is out of range
[  140.810100][ T7226] netlink: zone id is out of range
[  140.812254][ T7226] netlink: zone id is out of range
[  140.816970][ T7226] netlink: zone id is out of range
[  140.819870][ T7226] netlink: zone id is out of range
[  140.831744][ T7226] netlink: zone id is out of range
[  140.842124][ T7226] netlink: zone id is out of range
[  141.020636][ T7227] syz.1.529 (7227) used obsolete PPPIOCDETACH ioctl
[  144.364408][ T7247] netlink: 148 bytes leftover after parsing attributes in process `syz.2.539'.
[  144.933532][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'.
[  146.005400][ T5877] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  149.439619][ T5877] Bluetooth: hci2: command tx timeout
[  150.602021][ T7334] netlink: 'syz.1.575': attribute type 29 has an invalid length.
[  150.609161][ T7334] netlink: 'syz.1.575': attribute type 29 has an invalid length.
[  150.620274][ T7334] netlink: 'syz.1.575': attribute type 29 has an invalid length.
[  150.627837][ T7334] netlink: 'syz.1.575': attribute type 29 has an invalid length.
[  151.758796][ T7365] net_ratelimit: 76 callbacks suppressed
[  151.758816][ T7365] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  153.171287][ T7431] netlink: 'syz.1.617': attribute type 29 has an invalid length.
[  153.205300][ T7428] netlink: 'syz.1.617': attribute type 29 has an invalid length.
[  153.255845][ T7428] netlink: 'syz.1.617': attribute type 29 has an invalid length.
[  153.296180][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'.
[  153.300396][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'.
[  154.036471][ T7459] blkio.reset_stats is deprecated
[  155.082564][ T7469] netlink: 'syz.0.631': attribute type 3 has an invalid length.
[  155.403521][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'.
[  155.411310][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'.
[  155.417003][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'.
[  155.531080][ T7493] netlink: 'syz.1.643': attribute type 10 has an invalid length.
[  155.536299][ T7493] geneve0: entered promiscuous mode
[  155.551516][ T7493] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  156.476878][ T7512] netlink: 'syz.0.652': attribute type 21 has an invalid length.
[  156.495721][ T7512] netlink: 128 bytes leftover after parsing attributes in process `syz.0.652'.
[  156.499480][ T7512] netlink: 'syz.0.652': attribute type 4 has an invalid length.
[  156.502924][ T7512] netlink: 3 bytes leftover after parsing attributes in process `syz.0.652'.
[  156.682402][ T7526] netlink: 'syz.2.654': attribute type 10 has an invalid length.
[  156.710693][ T7528] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[  156.736897][ T7526] veth0_vlan: left promiscuous mode
[  156.742681][ T7526] veth0_vlan: entered promiscuous mode
[  156.769810][ T7526] team0: Device veth0_vlan failed to register rx_handler
[  156.910570][ T7528] team0 (unregistering): Port device team_slave_0 removed
[  156.926567][ T7528] team0 (unregistering): Port device team_slave_1 removed
[  157.110232][ T7544] netlink: 71 bytes leftover after parsing attributes in process `syz.1.667'.
[  157.554895][ T7565] netlink: 168 bytes leftover after parsing attributes in process `syz.1.677'.
[  157.666766][ T7574] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.679'.
[  158.458529][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.466219][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.479744][ T7592] bridge0: entered allmulticast mode
[  158.518300][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.521140][ T7595] bridge0: port 2(bridge_slave_1) entered listening state
[  158.524120][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.527428][ T7595] bridge0: port 1(bridge_slave_0) entered listening state
[  158.531761][ T7595] bridge0: entered promiscuous mode
[  159.322523][ T7634] netlink: 'syz.1.702': attribute type 16 has an invalid length.
[  159.328707][ T7634] __nla_validate_parse: 4 callbacks suppressed
[  159.328723][ T7634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.702'.
[  159.680128][ T7660] netlink: 'syz.0.715': attribute type 3 has an invalid length.
[  159.684687][ T7660] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.715'.
[  160.012492][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.023735][ T7681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.039672][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.042516][ T7681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.178897][ T7693] netlink: 26 bytes leftover after parsing attributes in process `syz.0.730'.
[  160.667866][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[  160.672102][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[  161.008748][ T7720] syzkaller0: entered promiscuous mode
[  161.011874][ T7720] syzkaller0: entered allmulticast mode
[  161.529200][ T7735] netlink: 'syz.2.747': attribute type 16 has an invalid length.
[  161.532914][ T7735] netlink: 156 bytes leftover after parsing attributes in process `syz.2.747'.
[  161.581814][ T7737] netlink: 809 bytes leftover after parsing attributes in process `syz.2.747'.
[  161.588452][ T7737] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.747'.
[  161.592669][ T7737] netlink: 809 bytes leftover after parsing attributes in process `syz.2.747'.
[  162.811753][ T7756] netlink: 2 bytes leftover after parsing attributes in process `syz.1.757'.
[  162.991119][ T7766] netlink: 'syz.1.762': attribute type 10 has an invalid length.
[  163.555716][ T7789] netlink: 'syz.1.773': attribute type 4 has an invalid length.
[  164.656619][ T7797] __nla_validate_parse: 2 callbacks suppressed
[  164.656634][ T7797] netlink: 172 bytes leftover after parsing attributes in process `syz.0.778'.
[  164.665471][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'.
[  164.743894][ T7806] netlink: 182 bytes leftover after parsing attributes in process `syz.1.781'.
[  165.839135][ T7833] netlink: 26 bytes leftover after parsing attributes in process `syz.2.791'.
[  166.366275][ T7861] netlink: 'syz.2.801': attribute type 4 has an invalid length.
[  166.370284][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'.
[  166.381450][ T7847] netlink: 'syz.1.797': attribute type 6 has an invalid length.
[  166.405910][ T7847] netlink: 168 bytes leftover after parsing attributes in process `syz.1.797'.
[  166.947352][ T7888] netlink: 10 bytes leftover after parsing attributes in process `syz.1.815'.
[  167.683135][ T7935] netlink: 164 bytes leftover after parsing attributes in process `syz.1.836'.
[  167.987640][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'.
[  168.397640][ T7968] netlink: 830 bytes leftover after parsing attributes in process `syz.2.851'.
[  171.288626][ T8014] syzkaller0: entered promiscuous mode
[  171.291360][ T8014] syzkaller0: entered allmulticast mode
[  171.556893][ T8025] netlink: 'syz.0.875': attribute type 31 has an invalid length.
[  171.994782][ T8030] netlink: 'syz.0.877': attribute type 10 has an invalid length.
[  172.933615][ T8027] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[  172.943198][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.953031][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.967543][ T8030] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  173.008751][ T8032] netlink: 'syz.2.878': attribute type 3 has an invalid length.
[  173.012405][ T8032] __nla_validate_parse: 2 callbacks suppressed
[  173.012419][ T8032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.878'.
[  173.613334][ T8065] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.893'.
[  173.661593][ T8067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.894'.
[  173.767335][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'.
[  173.780853][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.896'.
[  173.934951][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  173.939413][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  174.453463][ T8109] netlink: 'syz.0.910': attribute type 9 has an invalid length.
[  174.676947][ T8114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'.
[  174.708963][ T8121] netlink: 'syz.0.915': attribute type 39 has an invalid length.
[  175.768180][ T8148] netlink: 'syz.1.925': attribute type 10 has an invalid length.
[  175.847472][ T8154] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.927'.
[  175.930183][ T8156] lo speed is unknown, defaulting to 1000
[  177.301089][ T8199] netlink: 'syz.2.946': attribute type 1 has an invalid length.
[  177.307478][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.946'.
[  177.633548][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'.
[  178.372969][ T8227] lo speed is unknown, defaulting to 1000
[  180.454761][ T8253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.970'.
[  180.631067][ T8274] delete_channel: no stack
[  180.962755][ T8299] netlink: 180 bytes leftover after parsing attributes in process `syz.1.992'.
[  181.084818][ T8305] netlink: 136 bytes leftover after parsing attributes in process `syz.0.995'.
[  181.095952][ T8307] netlink: 'syz.1.996': attribute type 6 has an invalid length.
[  181.099546][ T8307] netlink: 168 bytes leftover after parsing attributes in process `syz.1.996'.
[  181.223540][ T8319] netlink: 'syz.1.1001': attribute type 1 has an invalid length.
[  181.233788][ T8319] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1001'.
[  181.255737][ T8321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1003'.
[  181.339723][ T8328] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1006'.
[  181.811906][ T8356] netlink: 'syz.2.1019': attribute type 2 has an invalid length.
[  183.290939][ T8368] netlink: 'syz.0.1023': attribute type 2 has an invalid length.
[  183.296394][ T8368] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1023'.
[  184.746503][ T8428] cgroup: fork rejected by pids controller in /syz2
[  185.328505][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.440894][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.578706][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.901397][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.906829][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.911081][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.917045][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.921097][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.452862][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.496432][ T8445] lo speed is unknown, defaulting to 1000
[  186.716692][   T12] bridge_slave_1: left allmulticast mode
[  186.718967][   T12] bridge_slave_1: left promiscuous mode
[  186.721841][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.766397][   T12] bridge_slave_0: left allmulticast mode
[  186.769142][   T12] bridge_slave_0: left promiscuous mode
[  186.772001][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.209155][ T8477] netlink: 'syz.0.1063': attribute type 2 has an invalid length.
[  187.212959][ T8477] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1063'.
[  187.290804][ T8481] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1065'.
[  187.295744][ T8481] nbd: must specify a size in bytes for the device
[  187.553482][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.565284][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.572357][   T12] bond0 (unregistering): Released all slaves
[  187.632980][ T8487] netlink: 'syz.1.1067': attribute type 29 has an invalid length.
[  187.817000][ T8494] netlink: 'syz.0.1069': attribute type 5 has an invalid length.
[  187.820090][ T8494] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.1069'.
[  187.934692][   T54] Bluetooth: hci2: command tx timeout
[  188.241967][ T8445] chnl_net:caif_netlink_parms(): no params data found
[  188.430748][   T12] hsr_slave_0: left promiscuous mode
[  188.443073][   T12] hsr_slave_1: left promiscuous mode
[  188.455145][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.458672][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.464206][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.467583][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.495178][   T12] veth0_macvtap: left promiscuous mode
[  188.498252][   T12] veth1_vlan: left promiscuous mode
[  188.881831][ T8524] netlink: 'syz.0.1078': attribute type 12 has an invalid length.
[  188.889034][ T8524] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1078'.
[  189.013227][   T12] team0 (unregistering): Port device team_slave_1 removed
[  189.041986][   T12] team0 (unregistering): Port device team_slave_0 removed
[  189.294396][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.297982][    C0] bridge0: topology change detected, propagating
[  189.308140][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.311888][    C0] bridge0: topology change detected, propagating
[  189.780927][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.788029][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.792326][ T8445] bridge_slave_0: entered allmulticast mode
[  189.806361][ T8445] bridge_slave_0: entered promiscuous mode
[  189.821021][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.824818][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.829804][ T8445] bridge_slave_1: entered allmulticast mode
[  189.840018][ T8445] bridge_slave_1: entered promiscuous mode
[  190.014284][   T54] Bluetooth: hci2: command tx timeout
[  190.121859][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.149481][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.195636][ T8445] team0: Port device team_slave_0 added
[  190.206589][ T8445] team0: Port device team_slave_1 added
[  190.267831][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.270380][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.289747][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.296709][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.299369][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.319538][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.494575][ T8445] hsr_slave_0: entered promiscuous mode
[  190.498537][ T8445] hsr_slave_1: entered promiscuous mode
[  190.566251][ T8569] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1095'.
[  190.570194][ T8569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1095'.
[  190.680938][ T8572] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1096'.
[  190.804130][ T8580] netlink: 'syz.0.1098': attribute type 1 has an invalid length.
[  191.499740][ T8445] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  191.519296][ T8445] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  191.530553][ T8445] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  191.559641][ T8445] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  191.742109][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.764577][ T8445] 8021q: adding VLAN 0 to HW filter on device team0
[  191.772274][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.775342][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.793591][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.797127][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.833389][ T8445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.847899][ T8445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.047462][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.104324][   T54] Bluetooth: hci2: command tx timeout
[  192.128972][ T8445] veth0_vlan: entered promiscuous mode
[  192.150572][ T8445] veth1_vlan: entered promiscuous mode
[  192.195665][ T8445] veth0_macvtap: entered promiscuous mode
[  192.201431][ T8445] veth1_macvtap: entered promiscuous mode
[  192.218985][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.241402][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.263347][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.281749][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.288963][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.305452][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.459671][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.475919][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.521402][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.526824][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.130523][ T8688] netlink: 'syz.1.1120': attribute type 4 has an invalid length.
[  194.174072][   T54] Bluetooth: hci2: command tx timeout
[  195.227788][ T8712] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1128'.
[  195.232600][ T8712] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1128'.
[  195.237197][ T8712] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1128'.
[  195.540106][ T8722] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1132'.
[  195.678885][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1136'.
[  196.109482][ T8760] IPv6: NLM_F_REPLACE set, but no existing node found!
[  196.113454][ T8760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.117324][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.352350][ T8773] unsupported nla_type 256
[  196.531037][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'.
[  197.301695][ T8804] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1167'.
[  197.351479][ T8806] C: renamed from team_slave_0 (while UP)
[  197.365521][ T8806] netlink: 'syz.2.1168': attribute type 3 has an invalid length.
[  197.369153][ T8806] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1168'.
[  197.375354][ T8806] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  197.558456][ T8816] netlink: 'syz.1.1173': attribute type 3 has an invalid length.
[  197.562437][ T8816] netlink: 'syz.1.1173': attribute type 1 has an invalid length.
[  197.574553][ T8816] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.1173'.
[  197.638016][ T8820] netlink: 'syz.2.1175': attribute type 3 has an invalid length.
[  197.641858][ T8820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'.
[  197.768433][   T54] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  199.338808][ T8881] delete_channel: no stack
[  199.518389][ T8892] lo speed is unknown, defaulting to 1000
[  199.538745][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  199.541540][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  199.557530][ T8895] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  199.669840][ T8895] lo speed is unknown, defaulting to 1000
[  200.329111][ T8922] netlink: 294 bytes leftover after parsing attributes in process `syz.2.1221'.
[  200.872901][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1226'.
[  200.879654][ T8937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1226'.
[  200.886175][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1226'.
[  201.209478][ T8958] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1237'.
[  201.488575][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1243'.
[  201.498755][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1243'.
[  201.502849][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1243'.
[  201.563477][ T8973] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1244'.
[  202.014055][   T68] wlan1: Trigger new scan to find an IBSS to join
[  202.240531][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1251'.
[  203.000531][ T8994] netlink: 'syz.2.1252': attribute type 3 has an invalid length.
[  203.479147][ T9023] netlink: 'syz.0.1266': attribute type 1 has an invalid length.
[  204.255446][ T9058] lo speed is unknown, defaulting to 1000
[  204.775811][ T9075] syzkaller0: entered promiscuous mode
[  204.778148][ T9075] syzkaller0: entered allmulticast mode
[  204.973946][  T134] wlan1: Trigger new scan to find an IBSS to join
[  205.232990][ T9071] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7
[  206.734947][ T9071] Bluetooth: hci0: command 0x0406 tx timeout
[  206.741809][ T9071] Bluetooth: hci1: command 0x0406 tx timeout
[  206.872869][ T9114] netlink: 'syz.1.1302': attribute type 64 has an invalid length.
[  207.001658][   T68] wlan1: Creating new IBSS network, BSSID b6:67:31:82:d1:b5
[  207.727425][ T9139] __nla_validate_parse: 4 callbacks suppressed
[  207.727448][ T9139] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1310'.
[  207.795878][ T9145] netlink: 'syz.1.1314': attribute type 21 has an invalid length.
[  207.799822][ T9145] IPv6: NLM_F_CREATE should be specified when creating new route
[  207.805459][ T9145] IPv6: Can't replace route, no match found
[  207.888418][ T9151] netlink: 'syz.1.1315': attribute type 10 has an invalid length.
[  207.892440][ T9151] netlink: 'syz.1.1315': attribute type 19 has an invalid length.
[  207.898813][ T9151] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1315'.
[  207.984611][ T9156] tap0: tun_chr_ioctl cmd 2147767521
[  208.082653][ T9161] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1319'.
[  208.182968][ T9166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1320'.
[  208.248186][ T9170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1320'.
[  208.490279][ T9178] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1325'.
[  208.510692][ T9178] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1325'.
[  208.602375][ T9180] netlink: 'syz.2.1326': attribute type 1 has an invalid length.
[  208.607335][ T9180] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1326'.
[  209.109390][ T9194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.602541][ T9205] netlink: 'syz.0.1337': attribute type 3 has an invalid length.
[  209.614487][ T9205] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1337'.
[  209.619510][ T9205] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  209.657803][ T9220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1343'.
[  209.772128][ T9228] netlink: 'syz.2.1348': attribute type 3 has an invalid length.
[  209.783249][ T9228] netlink: 'syz.2.1348': attribute type 1 has an invalid length.
[  212.299234][ T9287] netlink: 'syz.2.1371': attribute type 39 has an invalid length.
[  213.628500][ T9317] __nla_validate_parse: 7 callbacks suppressed
[  213.628521][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'.
[  213.637635][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'.
[  213.644868][ T9317] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1380'.
[  213.756485][ T9325] netlink: 'syz.0.1385': attribute type 21 has an invalid length.
[  214.920735][ T9354] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1396'.
[  215.355384][ T9358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1398'.
[  216.332942][ T9375] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  216.341083][ T9375] netlink: 'syz.0.1405': attribute type 10 has an invalid length.
[  216.376075][ T9375] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  216.687377][ T9390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.255988][ T9402] veth0_vlan: entered allmulticast mode
[  218.848425][ T9426] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  218.864003][ T9426] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  218.899108][ T9429] netlink: 'syz.2.1427': attribute type 21 has an invalid length.
[  218.906331][ T9429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1427'.
[  218.916526][ T9432] netlink: 'syz.0.1429': attribute type 19 has an invalid length.
[  218.953037][ T9429] netlink: 'syz.2.1427': attribute type 5 has an invalid length.
[  219.171851][ T9448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1436'.
[  219.177949][ T9448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1436'.
[  219.182175][ T9450] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1437'.
[  219.599628][ T9461] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1442'.
[  219.870486][ T9471] netlink: 'syz.0.1447': attribute type 4 has an invalid length.
[  219.877429][ T9471] netlink: 'syz.0.1447': attribute type 1 has an invalid length.
[  219.881551][ T9471] netlink: 'syz.0.1447': attribute type 2 has an invalid length.
[  219.885961][ T9471] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.1447'.
[  220.056516][ T9480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.075762][   T10] lo speed is unknown, defaulting to 1000
[  220.142656][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  220.526492][ T9523] netlink: 'syz.1.1472': attribute type 10 has an invalid length.
[  221.356057][ T9559] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1488'.
[  221.418097][ T9564] tun0: tun_chr_ioctl cmd 1074025677
[  221.420838][ T9564] tun0: linktype set to 270
[  221.620334][ T9572] openvswitch: netlink: EtherType 50a is less than min 600
[  221.699699][ T9576] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1497'.
[  221.861659][   T54] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8
[  221.879032][ T9582] netlink: 'syz.0.1500': attribute type 11 has an invalid length.
[  222.951829][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'.
[  223.109801][ T9621] syzkaller0: entered promiscuous mode
[  223.119836][ T9621] syzkaller0: entered allmulticast mode
[  224.838182][ T9647] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1527'.
[  225.034642][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  225.241771][ T9671] netlink: 'syz.2.1540': attribute type 13 has an invalid length.
[  225.246061][ T9671] netlink: 'syz.2.1540': attribute type 17 has an invalid length.
[  225.329547][ T9662] netlink: 208344 bytes leftover after parsing attributes in process `syz.1.1534'.
[  225.335622][ T9662] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  225.340173][ T9662] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  225.382483][ T9677] tap0: tun_chr_ioctl cmd 2148553947
[  225.487252][ T9679] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1543'.
[  225.601074][ T9687] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1548'.
[  225.646364][   T54] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  225.730892][ T5877] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[  226.268549][ T9714] netlink: 'syz.1.1559': attribute type 21 has an invalid length.
[  227.073536][ T5877] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  227.694989][ T5877] Bluetooth: hci0: command 0x0406 tx timeout
[  229.785207][ T5877] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  229.788635][ T5877] Bluetooth: hci2: Injecting HCI hardware error event
[  229.797663][ T5877] Bluetooth: hci2: hardware error 0x00
[  230.872175][ T9769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1582'.
[  231.105555][ T9777] syzkaller0: entered promiscuous mode
[  231.108795][ T9777] syzkaller0: entered allmulticast mode
[  231.157058][ T9785] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1589'.
[  231.854026][ T5877] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  232.893413][ T9803] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1599'.
[  233.028224][ T9811] netlink: 'syz.2.1602': attribute type 4 has an invalid length.
[  233.042961][ T9811] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1602'.
[  233.056244][ T9812] can: request_module (can-proto-0) failed.
[  233.059938][ T9811] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  233.480262][ T9834] veth1_macvtap: left promiscuous mode
[  233.483406][ T9834] macsec0: entered allmulticast mode
[  233.505048][ T9834] veth1_macvtap: entered promiscuous mode
[  233.507873][ T9834] veth1_macvtap: entered allmulticast mode
[  233.519920][ T9834] macsec0: entered promiscuous mode
[  233.894915][ T9846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'.
[  233.898910][ T9846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'.
[  233.975366][ T9850] lo: entered allmulticast mode
[  233.993158][ T9850] lo: entered promiscuous mode
[  233.995207][ T9850] lo: left allmulticast mode
[  234.091653][ T9854] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1621'.
[  234.095799][ T9854] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  234.099520][ T9854] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  234.704988][ T9864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1625'.
[  234.778098][ T9866] netlink: 'syz.0.1627': attribute type 62 has an invalid length.
[  234.990282][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'.
[  235.657826][ T9893] netlink: 'syz.1.1639': attribute type 11 has an invalid length.
[  235.661310][ T9893] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1639'.
[  235.979185][ T9911] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  235.990173][ T9911] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.026506][ T9914] __nla_validate_parse: 1 callbacks suppressed
[  236.026529][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'.
[  236.139884][ T9921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1647'.
[  236.253846][ T9923] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1649'.
[  236.421755][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'.
[  236.640142][ T9939] netlink: 'syz.0.1656': attribute type 7 has an invalid length.
[  236.901178][ T9950] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.1661'.
[  237.026550][ T9954] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1663'.
[  237.366102][ T9970] netlink: 'syz.2.1670': attribute type 3 has an invalid length.
[  237.443131][ T9976] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1674'.
[  237.522228][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'.
[  238.412090][ T9999] syzkaller0: create flow: hash 2935008937 index 1
[  239.421363][   T12] syzkaller0: tun_net_xmit 76
[  239.424941][   T12] syzkaller0: tun_net_xmit 48
[  239.428369][ T9996] syzkaller0: delete flow: hash 2935008937 index 1
[  239.824629][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'.
[  239.875749][T10025] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1695'.
[  241.242541][T10047] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1705'.
[  241.439890][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'.
[  241.708882][ T5877] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  241.711505][T10077] netlink: 'syz.2.1719': attribute type 2 has an invalid length.
[  241.831861][T10085] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1722'.
[  242.760720][T10109] netlink: 'syz.2.1734': attribute type 2 has an invalid length.
[  242.764512][T10109] netlink: 'syz.2.1734': attribute type 8 has an invalid length.
[  242.768211][T10109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1734'.
[  243.259731][T10124] delete_channel: no stack
[  243.440186][T10129] netlink: 'syz.1.1742': attribute type 14 has an invalid length.
[  243.445851][T10129] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1742'.
[  244.489535][T10154] netlink: 'syz.1.1750': attribute type 27 has an invalid length.
[  244.492742][T10154] netlink: 'syz.1.1750': attribute type 3 has an invalid length.
[  244.503738][T10154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1750'.
[  244.616468][T10159] lo speed is unknown, defaulting to 1000
[  245.276702][T10186] netlink: 'syz.2.1764': attribute type 2 has an invalid length.
[  245.280803][T10186] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1764'.
[  246.335191][T10201] netlink: 'syz.1.1770': attribute type 10 has an invalid length.
[  246.400028][T10205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1772'.
[  246.403448][T10205] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1772'.
[  246.408802][T10205] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1772'.
[  246.502230][T10211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1775'.
[  246.817180][T10230] netlink: 'syz.0.1782': attribute type 3 has an invalid length.
[  246.825283][T10230] netlink: 'syz.0.1782': attribute type 1 has an invalid length.
[  246.844092][T10229] netlink: 'syz.2.1783': attribute type 11 has an invalid length.
[  246.848405][T10229] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1783'.
[  246.861986][T10230] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1782'.
[  248.824827][T10255] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1795'.
[  249.082289][T10265] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1800'.
[  249.100550][T10263] mac80211_hwsim hwsim6 .3c: renamed from wlan1
[  249.156375][T10269] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1802'.
[  249.324218][T10277] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1806'.
[  249.394161][T10283] netlink: 'syz.2.1808': attribute type 28 has an invalid length.
[  249.397756][T10283] netlink: 'syz.2.1808': attribute type 29 has an invalid length.
[  249.778189][T10304] veth1_macvtap: left promiscuous mode
[  249.792821][T10302] veth1_macvtap: entered promiscuous mode
[  249.797441][T10302] macsec0: entered promiscuous mode
[  249.801700][T10302] macsec0: entered allmulticast mode
[  249.804819][T10302] veth1_macvtap: entered allmulticast mode
[  250.138166][T10327] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  251.097954][T10346] netlink: 'syz.0.1834': attribute type 3 has an invalid length.
[  251.101469][T10346] netlink: 'syz.0.1834': attribute type 2 has an invalid length.
[  252.598594][T10411] __nla_validate_parse: 4 callbacks suppressed
[  252.598607][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'.
[  252.678152][T10416] netlink: 'syz.0.1865': attribute type 1 has an invalid length.
[  252.750533][T10422] bpf: Bad value for 'gid'
[  252.756969][T10421] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1867'.
[  253.749910][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1881'.
[  253.755531][T10452] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  254.260184][T10460] netlink: 'syz.0.1885': attribute type 2 has an invalid length.
[  254.264290][T10460] netlink: 'syz.0.1885': attribute type 1 has an invalid length.
[  254.368867][T10465] syzkaller0: entered promiscuous mode
[  254.370958][T10465] syzkaller0: entered allmulticast mode
[  255.637404][T10467] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1888'.
[  256.144782][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1905'.
[  256.196272][T10506] bridge_slave_0 (unregistering): left allmulticast mode
[  256.199895][T10506] bridge_slave_0 (unregistering): left promiscuous mode
[  256.202746][T10506] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.444892][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'.
[  256.448197][T10520] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  256.451053][T10520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.917858][T10538] netlink: 'syz.2.1918': attribute type 41 has an invalid length.
[  257.485718][T10554] netlink: 'syz.0.1925': attribute type 1 has an invalid length.
[  257.489180][T10554] netlink: 'syz.0.1925': attribute type 3 has an invalid length.
[  257.492878][T10554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1925'.
[  260.089083][T10584] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1936'.
[  260.978622][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  260.987763][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  261.232840][T10631] netlink: 'syz.2.1959': attribute type 2 has an invalid length.
[  261.236906][T10631] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1959'.
[  262.988143][T10649] netlink: 'syz.1.1967': attribute type 3 has an invalid length.
[  262.993871][T10649] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1967'.
[  263.188457][T10670] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1976'.
[  263.193248][T10670] netlink: zone id is out of range
[  263.197343][T10670] netlink: get zone limit has 8 unknown bytes
[  263.852057][T10713] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  264.518396][T10750] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2015'.
[  264.554196][T10752] ref_ctr_offset mismatch. inode: 0xe10 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  264.621352][T10758] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2019'.
[  264.636364][T10760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2020'.
[  264.644930][T10760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2020'.
[  264.655932][T10760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2020'.
[  264.734844][T10764] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2022'.
[  264.777382][T10762] netlink: 'syz.1.2021': attribute type 21 has an invalid length.
[  264.781409][T10762] netlink: 'syz.1.2021': attribute type 1 has an invalid length.
[  265.280486][T10798] __nla_validate_parse: 2 callbacks suppressed
[  265.280498][T10798] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2037'.
[  265.485339][T10811] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2043'.
[  265.741307][T10823] syzkaller0: entered promiscuous mode
[  265.743584][T10823] syzkaller0: entered allmulticast mode
[  266.258748][T10844] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2053'.
[  267.185551][T10844] hsr_slave_0: left promiscuous mode
[  267.189235][T10844] hsr_slave_1: left promiscuous mode
[  267.238891][T10846] netlink: 'syz.0.2054': attribute type 4 has an invalid length.
[  267.310677][T10850] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2055'.
[  267.341235][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'.
[  267.345050][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'.
[  267.500289][T10860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2060'.
[  267.597904][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'.
[  267.639540][T10868] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.2064'.
[  267.809401][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'.
[  269.855949][T10976] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  269.865872][T10976] netlink: 'syz.2.2109': attribute type 2 has an invalid length.
[  271.130583][T11006] netlink: 'syz.0.2128': attribute type 29 has an invalid length.
[  271.147134][T11006] netlink: 'syz.0.2128': attribute type 29 has an invalid length.
[  271.355683][T11023] netlink: 'syz.2.2136': attribute type 21 has an invalid length.
[  272.074449][T11058] __nla_validate_parse: 2 callbacks suppressed
[  272.074501][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2152'.
[  272.231322][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'.
[  272.270480][T11076] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  272.274802][T11076] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  272.457680][T11090] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2167'.
[  272.987557][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'.
[  273.099253][T11106] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  274.458160][T11136] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  274.462508][T11136] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  275.610857][T11148] netlink: 'syz.0.2188': attribute type 2 has an invalid length.
[  275.617693][T11148] netlink: 'syz.0.2188': attribute type 1 has an invalid length.
[  275.621964][T11148] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2188'.
[  275.629438][T11148] block nbd5: not configured, cannot reconfigure
[  276.026101][T11164] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2196'.
[  276.338857][T11180] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  276.342298][T11180] netlink: 'syz.0.2204': attribute type 2 has an invalid length.
[  276.838622][T11193] x_tables: ip_tables: icmp match: only valid for protocol 1
[  277.013159][T11198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2212'.
[  277.018393][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2212'.
[  277.028707][T11198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2212'.
[  277.093305][T11202] netlink: 'syz.2.2214': attribute type 10 has an invalid length.
[  277.151218][T11204] netlink: 'syz.1.2215': attribute type 5 has an invalid length.
[  277.158370][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'.
[  277.288905][T11202] team0 (unregistering): Port device C removed
[  277.300031][T11202] team0 (unregistering): Port device team_slave_1 removed
[  277.362706][T11208] netlink: 11318 bytes leftover after parsing attributes in process `syz.1.2217'.
[  278.001994][T11238] netlink: 'syz.1.2229': attribute type 21 has an invalid length.
[  278.007362][T11238] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2229'.
[  278.011130][T11238] netlink: 'syz.1.2229': attribute type 5 has an invalid length.
[  278.014607][T11238] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2229'.
[  278.131806][T11246] netlink: 'syz.1.2233': attribute type 7 has an invalid length.
[  278.284839][T11252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2236'.
[  278.288769][T11252] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2236'.
[  278.335223][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'.
[  279.450508][T11310] netlink: 'syz.2.2262': attribute type 2 has an invalid length.
[  279.457884][T11310] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2262'.
[  279.463275][T11310] nbd: illegal input index 65540
[  279.763199][T11315] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2264'.
[  280.103228][T11327] netlink: 948 bytes leftover after parsing attributes in process `syz.2.2270'.
[  281.470866][T11362] validate_nla: 1 callbacks suppressed
[  281.470908][T11362] netlink: 'syz.0.2285': attribute type 1 has an invalid length.
[  281.680918][T11370] netlink: 'syz.0.2287': attribute type 21 has an invalid length.
[  283.213822][T11376] __nla_validate_parse: 6 callbacks suppressed
[  283.213837][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'.
[  284.457195][T11403] veth1_macvtap: left allmulticast mode
[  284.460144][T11403] veth1_macvtap: left promiscuous mode
[  284.462735][T11403] macsec0: left promiscuous mode
[  284.533131][T11407] netlink: 'syz.0.2303': attribute type 10 has an invalid length.
[  284.655059][T11407] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  285.015234][T11426] lo speed is unknown, defaulting to 1000
[  285.194230][T11433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.878192][T11441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.882556][T11441] IPv6: NLM_F_CREATE should be set when creating new route
[  285.886945][T11441] IPv6: NLM_F_CREATE should be set when creating new route
[  285.891229][T11441] IPv6: NLM_F_CREATE should be set when creating new route
[  286.733280][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'.
[  286.739127][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'.
[  286.745428][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'.
[  287.204657][T11497] netlink: 'syz.1.2338': attribute type 2 has an invalid length.
[  287.683323][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'.
[  288.072299][T11515] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2346'.
[  288.152415][T11523] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2350'.
[  288.181736][T11521] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2349'.
[  288.185769][T11521] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  288.189273][T11521] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  288.288312][T11529] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.2353'.
[  288.329164][T11534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.384646][T11536] netlink: 'syz.2.2356': attribute type 21 has an invalid length.
[  288.397583][T11536] netlink: 'syz.2.2356': attribute type 6 has an invalid length.
[  288.411392][T11536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2356'.
[  288.691543][T11545] netlink: 'syz.0.2359': attribute type 10 has an invalid length.
[  288.698448][T11545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2359'.
[  288.703163][T11545] team0: entered promiscuous mode
[  288.710636][T11545] C: entered promiscuous mode
[  288.715053][T11545] team_slave_1: entered promiscuous mode
[  288.720801][T11545] team0: entered allmulticast mode
[  288.723359][T11545] C: entered allmulticast mode
[  288.727434][T11545] team_slave_1: entered allmulticast mode
[  288.733879][T11545] bridge0: port 1(team0) entered blocking state
[  288.738128][T11545] bridge0: port 1(team0) entered disabled state
[  289.267282][T11568] netlink: 'syz.1.2370': attribute type 2 has an invalid length.
[  289.273985][T11568] netlink: 'syz.1.2370': attribute type 8 has an invalid length.
[  289.279549][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2370'.
[  289.377505][T11575] sctp: [Deprecated]: syz.0.2372 (pid 11575) Use of struct sctp_assoc_value in delayed_ack socket option.
[  289.377505][T11575] Use struct sctp_sack_info instead
[  290.570223][T11609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2388'.
[  290.580792][T11609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2388'.
[  290.747139][T11621] nftables ruleset with unbound chain
[  290.924711][T11635] netlink: 703 bytes leftover after parsing attributes in process `syz.2.2401'.
[  292.008720][T11651] syzkaller0: entered promiscuous mode
[  292.011549][T11651] syzkaller0: entered allmulticast mode
[  293.520595][T11671] netlink: 'syz.2.2417': attribute type 10 has an invalid length.
[  293.923859][T11695] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2430'.
[  294.023052][T11707] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2434'.
[  294.073379][T11712] delete_channel: no stack
[  294.079241][T11712] delete_channel: no stack
[  294.320001][T11718] lo speed is unknown, defaulting to 1000
[  294.645674][T11738] netlink: 496 bytes leftover after parsing attributes in process `syz.1.2447'.
[  294.829608][T11744] sit0: entered allmulticast mode
[  295.148202][T11747] sit0: entered promiscuous mode
[  295.667543][T11761] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2455'.
[  296.092324][T11777] netlink: 'syz.1.2461': attribute type 3 has an invalid length.
[  296.103412][T11777] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2461'.
[  296.631618][T11783] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2465'.
[  296.777263][T11787] =======================================================
[  296.777263][T11787] WARNING: The mand mount option has been deprecated and
[  296.777263][T11787]          and is ignored by this kernel. Remove the mand
[  296.777263][T11787]          option from the mount to silence this warning.
[  296.777263][T11787] =======================================================
[  296.947684][T11790] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2468'.
[  297.116100][T11796] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.2470'.
[  298.042727][T11818] lo speed is unknown, defaulting to 1000
[  298.276850][T11823] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2481'.
[  298.759552][T11841] syzkaller0: tun_chr_ioctl cmd 1074812117
[  298.877025][T11835] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2486'.
[  298.988074][T11847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2490'.
[  299.376956][T11862] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2496'.
[  299.497569][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'.
[  299.747641][T11883] netlink: 'syz.0.2507': attribute type 21 has an invalid length.
[  299.751453][T11883] netlink: 'syz.0.2507': attribute type 1 has an invalid length.
[  300.061536][T11899] netlink: 'syz.1.2514': attribute type 29 has an invalid length.
[  300.109193][T11902] netlink: 'syz.1.2514': attribute type 29 has an invalid length.
[  300.134249][T11905] netlink: 'syz.1.2514': attribute type 29 has an invalid length.
[  300.182916][T11907] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2517'.
[  300.308658][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2518'.
[  300.335765][T11911] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2519'.
[  300.340532][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2519'.
[  300.341904][T11902] netlink: 'syz.1.2514': attribute type 29 has an invalid length.
[  300.682885][T11930] syzkaller0: entered promiscuous mode
[  300.685337][T11930] syzkaller0: entered allmulticast mode
[  301.068571][T11919] netlink: 'syz.0.2522': attribute type 10 has an invalid length.
[  302.968505][T11919] bond0: (slave bond_slave_0): Releasing backup interface
[  303.117576][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'.
[  303.164873][T11955] netlink: 'syz.0.2534': attribute type 10 has an invalid length.
[  303.168377][T11955] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2534'.
[  303.172256][T11955] dummy0: entered promiscuous mode
[  303.195408][T11955] bridge0: port 3(dummy0) entered blocking state
[  303.201756][T11955] bridge0: port 3(dummy0) entered disabled state
[  303.207666][T11955] dummy0: entered allmulticast mode
[  303.419425][T11971] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2542'.
[  304.241855][T12012] netlink: 'syz.0.2560': attribute type 29 has an invalid length.
[  304.269620][T12012] netlink: 'syz.0.2560': attribute type 29 has an invalid length.
[  304.526634][T12024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2565'.
[  304.703379][T12032] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.709366][T12032] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.764818][T12037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.671605][T12048] validate_nla: 3 callbacks suppressed
[  305.671659][T12048] netlink: 'syz.2.2575': attribute type 29 has an invalid length.
[  305.682533][T12048] netlink: 'syz.2.2575': attribute type 29 has an invalid length.
[  305.694717][T12048] netlink: 'syz.2.2575': attribute type 29 has an invalid length.
[  305.755714][T12048] netlink: 'syz.2.2575': attribute type 29 has an invalid length.
[  305.853323][T12060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2580'.
[  306.010277][T12065] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2583'.
[  306.279934][T12089] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2596'.
[  306.551286][T12104] netlink: 'syz.0.2603': attribute type 1 has an invalid length.
[  306.555659][T12104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.682195][T12116] netlink: 'syz.2.2608': attribute type 2 has an invalid length.
[  306.685680][T12116] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2608'.
[  306.800468][T12126] netlink: 'syz.1.2614': attribute type 3 has an invalid length.
[  306.803476][T12126] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  306.806810][T12126] netlink: 5886 bytes leftover after parsing attributes in process `syz.1.2614'.
[  306.814824][T12129] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2612'.
[  306.825616][T12122] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2612'.
[  306.834512][T12128] lo speed is unknown, defaulting to 1000
[  307.387002][T12164] netlink: 'syz.0.2629': attribute type 21 has an invalid length.
[  307.390183][T12164] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2629'.
[  307.687463][T12175] netlink: 'syz.0.2634': attribute type 28 has an invalid length.
[  307.691331][T12175] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2634'.
[  308.984072][   T33] audit: type=1107 audit(1755240102.338:2): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  310.037154][T12290] __nla_validate_parse: 6 callbacks suppressed
[  310.037169][T12290] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2686'.
[  310.043544][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'.
[  310.049700][T12290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2686'.
[  310.095333][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'.
[  310.980929][T12318] validate_nla: 5 callbacks suppressed
[  310.980950][T12318] netlink: 'syz.2.2695': attribute type 29 has an invalid length.
[  310.988321][T12318] netlink: 'syz.2.2695': attribute type 29 has an invalid length.
[  311.031933][T12315] : renamed from vlan0 (while UP)
[  311.473162][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'.
[  313.572458][T12424] netlink: 'syz.2.2745': attribute type 10 has an invalid length.
[  313.576444][T12424] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2745'.
[  313.715599][T12438] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2752'.
[  313.898444][T12454] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.2760'.
[  313.904857][T12454] netlink: 'syz.1.2760': attribute type 3 has an invalid length.
[  314.099079][T12467] netlink: 'syz.1.2765': attribute type 29 has an invalid length.
[  314.103128][T12467] netlink: 'syz.1.2765': attribute type 29 has an invalid length.
[  314.109738][T12467] netlink: 'syz.1.2765': attribute type 29 has an invalid length.
[  314.115831][T12467] netlink: 'syz.1.2765': attribute type 29 has an invalid length.
[  314.149813][T12455] syz.2.2761 (12455) used greatest stack depth: 18480 bytes left
[  315.604852][T12524] lo: entered allmulticast mode
[  315.642006][T12524] lo: entered promiscuous mode
[  315.645827][T12524] lo: left allmulticast mode
[  315.738808][T12528] netlink: 'syz.1.2791': attribute type 10 has an invalid length.
[  315.744469][T12528] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  315.756788][T12534] netlink: 'syz.0.2793': attribute type 21 has an invalid length.
[  315.759849][T12534] netlink: 14453 bytes leftover after parsing attributes in process `syz.0.2793'.
[  315.955586][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2798'.
[  315.999375][T12548] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2800'.
[  316.004001][T12548] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.2800'.
[  316.617230][T12597] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.2822'.
[  318.526538][T12630] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2836'.
[  318.700846][T12636] validate_nla: 2 callbacks suppressed
[  318.700863][T12636] netlink: 'syz.1.2839': attribute type 25 has an invalid length.
[  319.267448][T12670] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2853'.
[  320.681197][ T5877] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  320.711587][T12711] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2871'.
[  320.717050][T12711] netlink: zone id is out of range
[  320.719804][T12711] netlink: get zone limit has 8 unknown bytes
[  320.981045][T12733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2880'.
[  321.012805][T12731] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2881'.
[  321.022928][T12731] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2881'.
[  321.528474][ T5873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.611488][ T5873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.710305][ T5873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.777077][ T5873] bond0: (slave netdevsim0): Releasing backup interface
[  321.787647][ T5873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.899422][ T5873] bridge_slave_1: left allmulticast mode
[  321.902178][ T5873] bridge_slave_1: left promiscuous mode
[  321.905818][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.915291][ T5873] bridge_slave_0: left promiscuous mode
[  321.917556][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.198353][ T5873] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  322.277510][T12759] sctp: [Deprecated]: syz.2.2891 (pid 12759) Use of int in max_burst socket option deprecated.
[  322.277510][T12759] Use struct sctp_assoc_value instead
[  322.351259][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  322.363041][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  322.378172][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  322.391644][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  322.418683][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  322.421041][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  322.421815][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  322.495770][   T68] smc: removing ib device syz1
[  322.500888][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.508105][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.513298][ T5873] bond0 (unregistering): Released all slaves
[  322.600825][T12762] lo speed is unknown, defaulting to 1000
[  323.281387][T12762] chnl_net:caif_netlink_parms(): no params data found
[  323.537498][ T5873] : left promiscuous mode
[  323.552223][T12762] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.563801][T12762] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.566711][T12762] bridge_slave_0: entered allmulticast mode
[  323.570158][T12762] bridge_slave_0: entered promiscuous mode
[  323.574923][T12762] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.578046][T12762] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.580935][T12762] bridge_slave_1: entered allmulticast mode
[  323.584431][T12762] bridge_slave_1: entered promiscuous mode
[  323.642024][T12789] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2901'.
[  323.682278][T12762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.691659][T12762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.703340][T12791] ref_ctr_offset mismatch. inode: 0x13e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  323.808838][T12762] team0: Port device team_slave_0 added
[  323.813151][T12762] team0: Port device team_slave_1 added
[  323.842605][T12762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.846129][T12762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.855899][T12762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.866819][T12762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.875706][T12762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.885577][T12762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.938554][T12762] hsr_slave_0: entered promiscuous mode
[  323.941620][T12762] hsr_slave_1: entered promiscuous mode
[  324.161706][ T5873] hsr_slave_0: left promiscuous mode
[  324.170205][ T5873] hsr_slave_1: left promiscuous mode
[  324.201280][ T5873] veth1_macvtap: left promiscuous mode
[  324.204721][T12797] netlink: 'syz.0.2905': attribute type 7 has an invalid length.
[  324.205789][ T5873] veth0_macvtap: left promiscuous mode
[  324.211186][ T5873] veth1_vlan: left promiscuous mode
[  324.215345][ T5873] veth0_vlan: left promiscuous mode
[  324.493896][   T54] Bluetooth: hci1: command tx timeout
[  325.002731][ T1279] lo speed is unknown, defaulting to 1000
[  325.023764][ T1279] infiniband syz2: ib_query_port failed (-19)
[  325.131002][T12762] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  325.146876][T12762] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  325.158732][T12762] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  325.175431][T12811] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  325.178777][T12762] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  325.284222][T12762] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.327225][T12762] 8021q: adding VLAN 0 to HW filter on device team0
[  325.359463][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.362892][ T6450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.375735][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.378442][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.487143][T12829] syzkaller0: entered promiscuous mode
[  325.489644][T12829] syzkaller0: entered allmulticast mode
[  325.581649][T12762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.628817][T12762] veth0_vlan: entered promiscuous mode
[  325.637011][T12762] veth1_vlan: entered promiscuous mode
[  325.653268][T12842] netlink: 'syz.2.2921': attribute type 26 has an invalid length.
[  325.667030][T12762] veth0_macvtap: entered promiscuous mode
[  325.672429][T12762] veth1_macvtap: entered promiscuous mode
[  325.686943][T12762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.696565][T12762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.715628][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.726069][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.732434][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.737027][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.741627][T12849] netlink: 'syz.2.2924': attribute type 19 has an invalid length.
[  325.822883][ T6467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.831858][ T6467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.857555][ T6467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.861470][ T6467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.909924][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'.
[  326.453311][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'.
[  326.574587][   T54] Bluetooth: hci1: command tx timeout
[  326.864187][T12902] netlink: 'syz.3.2947': attribute type 21 has an invalid length.
[  326.867280][T12902] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2947'.
[  326.940542][T12906] netlink: 'syz.0.2949': attribute type 8 has an invalid length.
[  326.943482][T12906] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  327.059152][T12912] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  327.531394][T12922] netlink: 'syz.0.2955': attribute type 10 has an invalid length.
[  327.687008][T12924] netlink: 'syz.3.2953': attribute type 64 has an invalid length.
[  328.018016][T12930] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2958'.
[  328.081824][T12934] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2960'.
[  328.306514][T12952] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2968'.
[  328.329321][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'.
[  328.398601][T12958] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2972'.
[  328.472964][T12964] netlink: 'syz.3.2975': attribute type 10 has an invalid length.
[  328.479147][T12964] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2975'.
[  328.655238][   T54] Bluetooth: hci1: command tx timeout
[  328.722730][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'.
[  328.756224][T12983] netlink: 'syz.3.2984': attribute type 1 has an invalid length.
[  328.759245][T12983] netlink: 'syz.3.2984': attribute type 2 has an invalid length.
[  328.762558][T12983] netlink: 37 bytes leftover after parsing attributes in process `syz.3.2984'.
[  328.905748][T12987] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  329.040207][T12990] : renamed from gre0 (while UP)
[  329.651684][T13013] validate_nla: 3 callbacks suppressed
[  329.651707][T13013] netlink: 'syz.3.2997': attribute type 6 has an invalid length.
[  329.798621][T13017] netlink: 'syz.0.2999': attribute type 29 has an invalid length.
[  330.415597][T13051] netlink: 'syz.2.3015': attribute type 4 has an invalid length.
[  330.523535][T13057] netlink: 'syz.0.3017': attribute type 29 has an invalid length.
[  330.560325][T13057] netlink: 'syz.0.3017': attribute type 10 has an invalid length.
[  330.662770][T13057] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.712313][T13057] bond0: entered promiscuous mode
[  330.719923][T13057] bond_slave_1: entered promiscuous mode
[  330.742464][T13057] batadv_slave_0: entered promiscuous mode
[  330.762171][T13057] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  330.777518][   T54] Bluetooth: hci1: command tx timeout
[  330.786760][T13057] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  330.796793][T13057] bond0: entered allmulticast mode
[  330.799813][T13057] bond_slave_1: entered allmulticast mode
[  330.803157][T13057] batadv_slave_0: entered allmulticast mode
[  330.812797][T13057] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  330.822640][T13057] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  330.836864][T13057] team0: Port device bond0 added
[  330.848761][T13061] !: renamed from bond_slave_0 (while UP)
[  332.327687][T13112] __nla_validate_parse: 3 callbacks suppressed
[  332.327702][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3041'.
[  332.393611][T13117] netlink: 'syz.2.3043': attribute type 1 has an invalid length.
[  332.461167][T13119] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3044'.
[  333.555101][   T54] Bluetooth: hci0: adv larger than maximum supported
[  333.555134][   T54] Bluetooth: hci0: Unknown advertising packet type: 0x18
[  333.562025][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[  333.573200][T13156] netlink: 'syz.3.3060': attribute type 10 has an invalid length.
[  333.581864][T13156] team0: Device hsr_slave_0 failed to register rx_handler
[  333.652790][T13158] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  334.029588][T13174] netlink: 'syz.0.3069': attribute type 10 has an invalid length.
[  334.033418][T13174] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3069'.
[  334.038768][T13174] bond0: left allmulticast mode
[  334.041339][T13174] bond_slave_1: left allmulticast mode
[  334.044419][T13174] batadv_slave_0: left allmulticast mode
[  334.047187][T13174] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  334.052011][T13174] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  334.062867][T13174] team0: Port device bond0 removed
[  334.067729][T13174] bridge0: port 4(bond0) entered blocking state
[  334.070827][T13174] bridge0: port 4(bond0) entered disabled state
[  334.076527][T13174] bond0: entered allmulticast mode
[  334.079009][T13174] bond_slave_1: entered allmulticast mode
[  334.081725][T13174] batadv_slave_0: entered allmulticast mode
[  334.086157][T13174] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  334.089750][T13174] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  334.169677][T13178] openvswitch: netlink: Missing valid actions attribute.
[  334.179648][T13178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.405941][T13192] netlink: 'syz.3.3078': attribute type 33 has an invalid length.
[  334.417091][T13192] netlink: 'syz.3.3078': attribute type 3 has an invalid length.
[  334.427295][T13192] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.3078'.
[  334.428115][T13184] syzkaller0: entered promiscuous mode
[  334.440282][T13184] syzkaller0: entered allmulticast mode
[  334.457794][T13184] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  334.876930][T13221] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3090'.
[  335.822119][T13242] netlink: 'syz.3.3099': attribute type 10 has an invalid length.
[  335.827072][T13242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3099'.
[  335.832710][T13242] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  335.838107][T13242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.667065][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'.
[  338.062111][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3135'.
[  338.066175][T13323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3135'.
[  338.146786][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'.
[  342.924731][T13381] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  343.016547][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'.
[  343.133886][T13391] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3163'.
[  344.632224][T13434] netlink: 'syz.3.3184': attribute type 39 has an invalid length.
[  344.659473][T13434] veth0_macvtap: left promiscuous mode
[  344.897608][T13446] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3190'.
[  344.949125][T13448] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3191'.
[  345.150092][T13462] netlink: 'syz.0.3198': attribute type 12 has an invalid length.
[  345.163350][T13462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3198'.
[  345.178835][T13465] netlink: 'syz.3.3199': attribute type 17 has an invalid length.
[  345.181772][T13465] netlink: 'syz.3.3199': attribute type 16 has an invalid length.
[  345.185268][T13465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3199'.
[  345.539580][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3211'.
[  345.665732][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'.
[  346.351857][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'.
[  346.360802][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3229'.
[  346.367967][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3229'.
[  347.384237][T13651] netlink: 'syz.2.3249': attribute type 3 has an invalid length.
[  347.949072][T13672] netlink: 'syz.0.3259': attribute type 10 has an invalid length.
[  348.398524][T13672] team0: Device ipvlan1 failed to register rx_handler
[  348.555345][T13687] netlink: 'syz.3.3264': attribute type 21 has an invalid length.
[  348.786810][T13706] tc_dump_action: action bad kind
[  348.831858][T13710] __nla_validate_parse: 3 callbacks suppressed
[  348.831875][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'.
[  348.840560][T13672] syz.0.3259 (13672) used greatest stack depth: 17976 bytes left
[  348.912606][T13716] netlink: 'syz.2.3278': attribute type 21 has an invalid length.
[  349.038632][T13725] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3282'.
[  349.179383][   T33] audit: type=1107 audit(1755240142.538:3): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  349.466769][T13733] macsec0: left allmulticast mode
[  349.511661][T13733] veth1_macvtap: entered promiscuous mode
[  349.524828][T13733] macsec0: entered promiscuous mode
[  349.529749][T13733] macsec0: entered allmulticast mode
[  349.532653][T13733] veth1_macvtap: entered allmulticast mode
[  351.808417][T13746] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3289'.
[  352.046309][T13747] netlink: 'syz.3.3289': attribute type 10 has an invalid length.
[  352.070287][T13747] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  352.219149][T13758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3294'.
[  352.223508][T13758] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3294'.
[  352.235746][T13758] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3294'.
[  352.483437][T13780] netlink: 182 bytes leftover after parsing attributes in process `syz.3.3304'.
[  352.688596][T13791] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3309'.
[  352.932346][T13802] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3314'.
[  353.032145][T13805] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.036641][T13805] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.581167][T13811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3318'.
[  354.244123][T13848] __nla_validate_parse: 6 callbacks suppressed
[  354.244192][T13848] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3336'.
[  354.259302][T13848] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.3336'.
[  354.285215][T13848] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3336'.
[  354.592443][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'.
[  354.603153][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'.
[  354.826326][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'.
[  355.330513][T13884] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3353'.
[  355.561106][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'.
[  355.568815][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'.
[  356.726330][T13895] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3358'.
[  356.731290][T13897] tap0: tun_chr_ioctl cmd 1074025678
[  356.735668][T13897] tap0: group set to 0
[  357.345833][T13939] netlink: 'syz.0.3377': attribute type 5 has an invalid length.
[  357.538752][T13949] caif0: entered promiscuous mode
[  357.541057][T13949] caif0: entered allmulticast mode
[  357.689080][T13958] netlink: 'syz.0.3387': attribute type 23 has an invalid length.
[  357.902472][T13973] syzkaller0: entered promiscuous mode
[  357.904971][T13973] syzkaller0: entered allmulticast mode
[  358.107903][T13981] netlink: 'syz.3.3398': attribute type 11 has an invalid length.
[  358.165708][T13988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.690910][T14014] sock: sock_timestamping_bind_phc: sock not bind to device
[  359.473214][T14040] __nla_validate_parse: 11 callbacks suppressed
[  359.473236][T14040] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3425'.
[  360.061833][T14047] netlink: 'syz.3.3428': attribute type 4 has an invalid length.
[  360.101899][T14047] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.3428'.
[  360.303972][T14063] netlink: 'syz.0.3435': attribute type 1 has an invalid length.
[  360.307324][T14063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.570025][T14077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  360.576316][T14077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  360.782124][   T54] Bluetooth: hci0: unexpected event 0x3d length: 151 > 14
[  361.262947][T14120] netlink: 'syz.0.3462': attribute type 28 has an invalid length.
[  362.107807][T14158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3474'.
[  365.824228][   T54] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  365.835629][T14201] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3491'.
[  365.849325][T14201] netlink: 'syz.2.3491': attribute type 3 has an invalid length.
[  365.929645][T14205] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3492'.
[  365.944208][T14205] netlink: zone id is out of range
[  365.946654][T14205] netlink: zone id is out of range
[  365.949117][T14205] netlink: zone id is out of range
[  365.951907][T14205] netlink: zone id is out of range
[  365.957049][T14205] netlink: zone id is out of range
[  365.959564][T14205] netlink: zone id is out of range
[  365.962390][T14205] netlink: zone id is out of range
[  365.965071][T14205] netlink: zone id is out of range
[  365.967597][T14205] netlink: zone id is out of range
[  365.970018][T14205] netlink: zone id is out of range
[  366.107436][T14218] netlink: 'syz.2.3498': attribute type 10 has an invalid length.
[  366.111554][T14218] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3498'.
[  366.227952][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'.
[  366.415779][T14227] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  367.342230][T14293] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3532'.
[  367.623337][T14309] syz.2.3536: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  367.631506][T14309] CPU: 0 UID: 0 PID: 14309 Comm: syz.2.3536 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  367.631578][T14309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.631597][T14309] Call Trace:
[  367.631632][T14309]  <TASK>
[  367.631656][T14309]  dump_stack_lvl+0x189/0x250
[  367.631698][T14309]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  367.631740][T14309]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.631775][T14309]  ? __pfx__printk+0x10/0x10
[  367.631816][T14309]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  367.631847][T14309]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  367.631914][T14309]  warn_alloc+0x214/0x310
[  367.631960][T14309]  ? stack_depot_save_flags+0x41b/0x860
[  367.632005][T14309]  ? __pfx_warn_alloc+0x10/0x10
[  367.632057][T14309]  ? kasan_save_track+0x4f/0x80
[  367.632093][T14309]  ? xskq_create+0x56/0x170
[  367.632119][T14309]  ? xsk_init_queue+0xb0/0x110
[  367.632142][T14309]  ? xsk_setsockopt+0x57b/0x8d0
[  367.632164][T14309]  ? do_sock_setsockopt+0x17c/0x1b0
[  367.632183][T14309]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  367.632201][T14309]  ? do_syscall_64+0xfa/0x3b0
[  367.632228][T14309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.632290][T14309]  __vmalloc_node_range_noprof+0x125/0x12f0
[  367.632448][T14309]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  367.632515][T14309]  ? __kasan_kmalloc+0x93/0xb0
[  367.632601][T14309]  vmalloc_user_noprof+0xad/0xf0
[  367.632641][T14309]  ? xskq_create+0xbf/0x170
[  367.632697][T14309]  xskq_create+0xbf/0x170
[  367.632742][T14309]  xsk_init_queue+0xb0/0x110
[  367.632790][T14309]  xsk_setsockopt+0x57b/0x8d0
[  367.632839][T14309]  ? __pfx_xsk_setsockopt+0x10/0x10
[  367.632897][T14309]  ? __pfx_aa_sk_perm+0x10/0x10
[  367.632955][T14309]  ? __fget_files+0x2a/0x420
[  367.632974][T14309]  ? aa_sock_opt_perm+0xff/0x1b0
[  367.633018][T14309]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  367.633042][T14309]  ? __pfx_xsk_setsockopt+0x10/0x10
[  367.633084][T14309]  do_sock_setsockopt+0x17c/0x1b0
[  367.633136][T14309]  __x64_sys_setsockopt+0x13f/0x1b0
[  367.633189][T14309]  do_syscall_64+0xfa/0x3b0
[  367.633221][T14309]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.633273][T14309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.633298][T14309]  ? exc_page_fault+0x9f/0xf0
[  367.633340][T14309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.633357][T14309] RIP: 0033:0x7fe75b38ebe9
[  367.633382][T14309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.633405][T14309] RSP: 002b:00007fe75c141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  367.633433][T14309] RAX: ffffffffffffffda RBX: 00007fe75b5b6180 RCX: 00007fe75b38ebe9
[  367.633451][T14309] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  367.633466][T14309] RBP: 00007fe75b411e19 R08: 0000000000000004 R09: 0000000000000000
[  367.633482][T14309] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  367.633497][T14309] R13: 00007fe75b5b6218 R14: 00007fe75b5b6180 R15: 00007ffd924906c8
[  367.633626][T14309]  </TASK>
[  367.834372][T14309] Mem-Info:
[  367.836041][T14309] active_anon:6125 inactive_anon:0 isolated_anon:0
[  367.836041][T14309]  active_file:16031 inactive_file:38334 isolated_file:0
[  367.836041][T14309]  unevictable:1768 dirty:155 writeback:0
[  367.836041][T14309]  slab_reclaimable:9950 slab_unreclaimable:53690
[  367.836041][T14309]  mapped:19009 shmem:2403 pagetables:903
[  367.836041][T14309]  sec_pagetables:0 bounce:0
[  367.836041][T14309]  kernel_misc_reclaimable:0
[  367.836041][T14309]  free:284380 free_pcp:17759 free_cma:0
[  367.862764][T14309] Node 0 active_anon:15112kB inactive_anon:0kB active_file:41888kB inactive_file:23560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48496kB dirty:28kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5452kB pagetables:2108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  367.878534][T14309] Node 1 active_anon:9388kB inactive_anon:0kB active_file:22236kB inactive_file:129776kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27540kB dirty:592kB writeback:0kB shmem:4736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5948kB pagetables:1504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  367.899925][T14309] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  367.902667][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3538'.
[  367.917673][T14309] lowmem_reserve[]: 0 811 811 811 811
[  367.920396][T14309] Node 0 DMA32 free:319828kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15112kB inactive_anon:0kB active_file:41888kB inactive_file:23560kB unevictable:3536kB writepending:28kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:39564kB local_pcp:19536kB free_cma:0kB
[  367.920827][T14312] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3538'.
[  367.934046][T14309] lowmem_reserve[]: 0 0 0 0 0
[  367.939235][T14309] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  367.953022][T14309] lowmem_reserve[]: 0 0 854 854 854
[  367.971811][T14309] Node 1 Normal free:343516kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9408kB inactive_anon:0kB active_file:22236kB inactive_file:129776kB unevictable:3536kB writepending:552kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31160kB local_pcp:13676kB free_cma:0kB
[  367.993907][T14309] lowmem_reserve[]: 0 0 0 0 0
[  367.995804][T14309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  368.000662][T14309] Node 0 DMA32: 148*4kB (ME) 397*8kB (UME) 343*16kB (UME) 351*32kB (UME) 229*64kB (UME) 90*128kB (UME) 11*256kB (UME) 10*512kB (UME) 7*1024kB (UM) 6*2048kB (UME) 60*4096kB (M) = 319816kB
[  368.013223][T14309] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  368.023708][T14309] Node 1 Normal: 738*4kB (UM) 298*8kB (UME) 94*16kB (UME) 588*32kB (UME) 201*64kB (UME) 187*128kB (UM) 96*256kB (UM) 73*512kB (UME) 42*1024kB (UM) 10*2048kB (UM) 38*4096kB (UM) = 343544kB
[  368.031381][T14309] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.042957][T14309] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.047073][T14309] 56768 total pagecache pages
[  368.048959][T14309] 0 pages in swap cache
[  368.050649][T14309] Free swap  = 124996kB
[  368.052369][T14309] Total swap = 124996kB
[  368.063937][T14309] 786301 pages RAM
[  368.065854][T14309] 0 pages HighMem/MovableOnly
[  368.068163][T14309] 241329 pages reserved
[  368.070115][T14309] 0 pages cma reserved
[  368.527294][T14330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3548'.
[  368.531165][T14330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3548'.
[  369.280714][T14382] netlink: 'syz.3.3572': attribute type 16 has an invalid length.
[  369.291520][T14382] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3572'.
[  370.673526][T14417] veth1_macvtap: left promiscuous mode
[  370.685113][T14417] macsec0: entered promiscuous mode
[  370.687803][T14417] macsec0: entered allmulticast mode
[  370.843324][T14420] veth1_macvtap: entered promiscuous mode
[  370.866884][T14420] veth1_macvtap: entered allmulticast mode
[  371.400548][T14433] __nla_validate_parse: 4 callbacks suppressed
[  371.400566][T14433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3591'.
[  371.410819][T14428] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3591'.
[  371.421706][T14433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3591'.
[  371.793613][T14458] netlink: 'syz.3.3605': attribute type 2 has an invalid length.
[  372.033589][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3616'.
[  372.337473][T14500] netlink: 'syz.3.3626': attribute type 12 has an invalid length.
[  372.346750][T14500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3626'.
[  373.271934][T14514] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3632'.
[  373.400204][   T54] Bluetooth: hci1: Malformed Event: 0x02
[  373.647105][T14534] net_ratelimit: 76 callbacks suppressed
[  373.647123][T14534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.183054][T14574] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3659'.
[  376.196519][T14605] netlink: 'syz.3.3671': attribute type 27 has an invalid length.
[  376.199494][T14605] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3671'.
[  376.419270][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'.
[  376.470634][T14622] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3681'.
[  376.587724][   T54] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1
[  376.588290][   T54] Bluetooth: hci0: hardware error 0x00
[  376.879960][T14645] netlink: 'syz.2.3691': attribute type 10 has an invalid length.
[  376.938281][T14645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.958099][T14645] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  376.983565][T14648] bond0: entered promiscuous mode
[  376.986297][T14648] bond_slave_0: entered promiscuous mode
[  376.989209][T14648] bond_slave_1: entered promiscuous mode
[  376.992123][T14648] batadv0: entered promiscuous mode
[  377.008182][T14650] netlink: 51563 bytes leftover after parsing attributes in process `syz.3.3693'.
[  377.112797][T14656] sctp: [Deprecated]: syz.0.3697 (pid 14656) Use of int in maxseg socket option.
[  377.112797][T14656] Use struct sctp_assoc_value instead
[  377.147467][T14658] netlink: 'syz.2.3696': attribute type 7 has an invalid length.
[  377.150434][T14658] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3696'.
[  377.711632][T14690] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3711'.
[  377.802997][T14697] syzkaller1: tun_chr_ioctl cmd 1074025677
[  377.806459][T14697] syzkaller1: linktype set to 776
[  378.653812][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  381.809925][T14745] netlink: 'syz.3.3733': attribute type 22 has an invalid length.
[  381.849104][T14747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3734'.
[  381.853180][T14747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3734'.
[  381.932373][T14753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3737'.
[  381.940095][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'.
[  382.085375][T14758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3737'.
[  382.092244][T14758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3737'.
[  382.147285][T14753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3737'.
[  382.249775][T14769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3743'.
[  382.258454][T14769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3743'.
[  382.265412][T14769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3743'.
[  382.582807][T14777] netlink: 'syz.3.3747': attribute type 10 has an invalid length.
[  382.591416][T14777] ipvlan1: entered promiscuous mode
[  382.596500][T14777] ipvlan1: entered allmulticast mode
[  382.599322][T14777] veth0_vlan: entered allmulticast mode
[  382.605482][T14777] bridge0: port 3(ipvlan1) entered blocking state
[  382.608964][T14777] bridge0: port 3(ipvlan1) entered disabled state
[  382.617336][T14777] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  383.288762][T14810] netlink: 'syz.3.3763': attribute type 10 has an invalid length.
[  383.293191][T14810] dummy0: entered promiscuous mode
[  383.296427][T14810] dummy0: entered allmulticast mode
[  383.300870][T14810] bond0: (slave dummy0): Releasing backup interface
[  383.312134][T14810] bridge0: port 3(dummy0) entered blocking state
[  383.316164][T14810] bridge0: port 3(dummy0) entered disabled state
[  383.493390][T14823] netlink: 'syz.0.3769': attribute type 2 has an invalid length.
[  383.498223][T14823] nbd: must specify a device to reconfigure
[  383.859894][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  383.862326][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  384.477649][T14860] netlink: 'syz.3.3783': attribute type 10 has an invalid length.
[  384.892586][T14870] netlink: 'syz.0.3787': attribute type 1 has an invalid length.
[  386.023889][T14896] bridge0: entered allmulticast mode
[  386.246898][T14905] netlink: 'syz.2.3800': attribute type 2 has an invalid length.
[  386.473064][T14921] netlink: 'syz.0.3811': attribute type 3 has an invalid length.
[  386.484373][T14921] netlink: 'syz.0.3811': attribute type 3 has an invalid length.
[  386.982304][T14962] __nla_validate_parse: 7 callbacks suppressed
[  386.982325][T14962] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3830'.
[  387.262666][T14959] delete_channel: no stack
[  387.420686][T14987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3843'.
[  387.425228][T14987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3843'.
[  388.067574][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3857'.
[  388.132812][T15022] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3859'.
[  388.294901][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.368565][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.475718][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.565949][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.720171][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  388.727704][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  388.731712][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  388.736486][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  388.741001][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  388.778051][   T12] bridge_slave_1: left allmulticast mode
[  388.780680][   T12] bridge_slave_1: left promiscuous mode
[  388.783406][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.792553][   T12] bridge_slave_0: left promiscuous mode
[  388.795906][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.340905][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.344826][   T12] bond_slave_0: left promiscuous mode
[  389.351530][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.356462][   T12] bond_slave_1: left promiscuous mode
[  389.360599][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  389.364594][   T12] batadv0: left promiscuous mode
[  389.367850][   T12] bond0 (unregistering): Released all slaves
[  389.589510][T15042] chnl_net:caif_netlink_parms(): no params data found
[  389.682138][T15042] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.685838][T15042] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.688590][T15042] bridge_slave_0: entered allmulticast mode
[  389.691999][T15042] bridge_slave_0: entered promiscuous mode
[  389.696687][T15042] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.699442][T15042] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.702266][T15042] bridge_slave_1: entered allmulticast mode
[  389.705644][T15042] bridge_slave_1: entered promiscuous mode
[  389.740481][T15042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.746377][T15042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.807418][T15042] team0: Port device team_slave_0 added
[  389.822816][T15042] team0: Port device team_slave_1 added
[  389.912269][T15042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.915834][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.931100][T15042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.958482][T15042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.961171][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.983103][T15042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.319225][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.323199][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.383953][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.388003][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.446113][   T12] veth1_macvtap: left allmulticast mode
[  390.457524][   T12] veth1_macvtap: left promiscuous mode
[  390.460220][   T12] veth0_macvtap: left promiscuous mode
[  390.462995][   T12] veth1_vlan: left promiscuous mode
[  390.487891][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3883'.
[  390.494429][T15081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3883'.
[  390.814367][   T54] Bluetooth: hci2: command tx timeout
[  391.459578][T15042] hsr_slave_0: entered promiscuous mode
[  391.474558][T15042] hsr_slave_1: entered promiscuous mode
[  391.479874][T15042] debugfs: 'hsr0' already exists in 'hsr'
[  391.482594][T15042] Cannot create hsr debugfs directory
[  392.010574][T15116] netlink: 'syz.0.3897': attribute type 33 has an invalid length.
[  392.022117][T15116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3897'.
[  392.034000][T15116] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP)
[  392.050960][T15116] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  392.226347][T15042] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  392.236099][T15042] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  392.259006][T15042] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  392.276453][T15042] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  392.407547][T15042] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.429678][T15042] 8021q: adding VLAN 0 to HW filter on device team0
[  392.449473][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.452362][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.477409][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.481448][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.790658][T15149] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3909'.
[  392.828348][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.885598][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3910'.
[  392.907163][   T54] Bluetooth: hci2: command tx timeout
[  392.910863][T15042] veth0_vlan: entered promiscuous mode
[  392.927257][T15042] veth1_vlan: entered promiscuous mode
[  392.978985][T15042] veth0_macvtap: entered promiscuous mode
[  392.992884][T15042] veth1_macvtap: entered promiscuous mode
[  393.007484][T15155] netlink: 'syz.0.3912': attribute type 12 has an invalid length.
[  393.011343][T15155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3912'.
[  393.036115][T15042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.050342][T15042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.066222][ T5885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.079766][ T5885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.086192][ T5885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.105130][ T5885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.179758][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.182818][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.222768][ T6450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.228066][ T6450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.653571][T15167] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3915'.
[  394.098661][T15173] : port 1(erspan0) entered blocking state
[  394.119024][T15173] : port 1(erspan0) entered disabled state
[  394.127691][T15173] erspan0: entered allmulticast mode
[  394.135149][T15173] erspan0: entered promiscuous mode
[  394.975569][   T54] Bluetooth: hci2: command tx timeout
[  395.331635][T15222] netlink: 'syz.3.3941': attribute type 10 has an invalid length.
[  395.335081][T15222] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3941'.
[  395.889274][T15241] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3950'.
[  396.524053][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  397.054114][   T54] Bluetooth: hci2: command tx timeout
[  397.136773][T15309] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3979'.
[  397.390516][T15323] netlink: 'syz.2.3986': attribute type 21 has an invalid length.
[  397.825923][T15350] netlink: 'syz.2.3998': attribute type 29 has an invalid length.
[  397.831475][T15350] netlink: 'syz.2.3998': attribute type 29 has an invalid length.
[  398.708762][T15382] netlink: 'syz.3.4013': attribute type 41 has an invalid length.
[  398.855905][T15393] netlink: 'syz.2.4017': attribute type 1 has an invalid length.
[  398.859356][T15393] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4017'.
[  398.998945][T15405] netlink: 'syz.3.4024': attribute type 39 has an invalid length.
[  399.401318][ T5885] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.127567][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4039'.
[  400.779312][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'.
[  401.408591][T15488] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4060'.
[  401.482326][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'.
[  401.541401][T15494] netlink: 'syz.2.4063': attribute type 39 has an invalid length.
[  401.818161][T15508] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4069'.
[  401.998928][T15518] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4074'.
[  402.455866][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4079'.
[  402.731810][T15535] netlink: 'syz.0.4080': attribute type 10 has an invalid length.
[  402.737580][T15535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4080'.
[  403.189349][T15561] netlink: 'syz.3.4093': attribute type 21 has an invalid length.
[  403.193605][T15561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4093'.
[  403.260327][T15565] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4095'.
[  403.309406][T15569] dummy0: mtu less than device minimum
[  403.494724][T15583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4104'.
[  403.735988][T15595] openvswitch: netlink: Flow actions attr not present in new flow.
[  403.740124][T15595] syzkaller0: entered promiscuous mode
[  404.071503][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'.
[  404.343282][T15625] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4122'.
[  408.609317][T15634] syzkaller0: tun_chr_ioctl cmd 1074025681
[  409.065678][T15636] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4125'.
[  409.508260][T15660] netlink: 'syz.3.4131': attribute type 10 has an invalid length.
[  409.524425][T15660] team0: Port device geneve1 added
[  409.835896][T15664] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.839216][T15664] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.844086][T15664] bridge0: entered allmulticast mode
[  409.849861][T15158] syz0: Port: 1 Link DOWN
[  409.855632][T15664] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.859039][T15664] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.862775][T15664] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.866380][T15664] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.870173][T15664] bridge0: entered promiscuous mode
[  409.884108][T15158] syz0: Port: 1 Link ACTIVE
[  411.368637][T15699] syzkaller0: entered promiscuous mode
[  411.370783][T15699] syzkaller0: entered allmulticast mode
[  411.826019][T15718] netlink: 'syz.0.4154': attribute type 2 has an invalid length.
[  411.829284][T15718] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4154'.
[  411.835768][T15718] netlink: 'syz.0.4154': attribute type 2 has an invalid length.
[  411.839701][T15718] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4154'.
[  412.151519][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'.
[  412.640982][T15735] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4160'.
[  412.644619][T15735] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  412.647638][T15735] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  413.085911][T15759] netlink: 'syz.0.4172': attribute type 1 has an invalid length.
[  413.151535][T15766] netlink: 'syz.2.4175': attribute type 29 has an invalid length.
[  413.156108][T15766] netlink: 'syz.2.4175': attribute type 29 has an invalid length.
[  413.160536][T15766] netlink: 'syz.2.4175': attribute type 29 has an invalid length.
[  413.169002][T15766] netlink: 'syz.2.4175': attribute type 29 has an invalid length.
[  413.486425][T15782] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4182'.
[  413.728971][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4189'.
[  413.762285][T15798] netlink: 'syz.2.4190': attribute type 21 has an invalid length.
[  414.142641][T15832] netlink: 'syz.0.4207': attribute type 2 has an invalid length.
[  414.151263][T15832] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4207'.
[  414.203037][T15836] 8021q: adding VLAN 0 to HW filter on device team0
[  414.209216][T15836] bond0: (slave team0): Enslaving as an active interface with an up link
[  414.241620][T15836] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  416.029985][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4230'.
[  417.346443][T15910] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  417.349051][T15910] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  417.568359][T15925] validate_nla: 1 callbacks suppressed
[  417.568379][T15925] netlink: 'syz.3.4247': attribute type 10 has an invalid length.
[  417.718135][T15930] netlink: 'syz.3.4249': attribute type 21 has an invalid length.
[  417.722542][T15930] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4249'.
[  417.937699][T15942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4255'.
[  417.996923][T15940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4254'.
[  418.341649][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'.
[  418.465803][T15972] netlink: 'syz.3.4269': attribute type 21 has an invalid length.
[  418.609089][T15984] syzkaller1: tun_chr_ioctl cmd 1074025677
[  418.611568][T15984] syzkaller1: linktype set to 805
[  419.364550][T16021] netlink: 'syz.3.4292': attribute type 16 has an invalid length.
[  419.368435][T16021] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4292'.
[  419.457540][T16027] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4295'.
[  419.513322][T16029] netlink: 'syz.2.4296': attribute type 2 has an invalid length.
[  419.525103][T16033] netlink: 'syz.3.4298': attribute type 29 has an invalid length.
[  419.535686][T16033] netlink: 'syz.3.4298': attribute type 29 has an invalid length.
[  419.545021][T16033] netlink: 'syz.3.4298': attribute type 29 has an invalid length.
[  419.619719][   T54] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  419.774253][T16049] tun0: tun_chr_ioctl cmd 1074025677
[  419.778955][T16049] tun0: linktype set to 774
[  419.827051][T16053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.830583][T16053] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.840117][T16053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.844160][T16053] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.850039][T16055] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4309'.
[  420.166375][T16065] netlink: 'syz.0.4313': attribute type 10 has an invalid length.
[  420.590202][T16080] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4319'.
[  421.246655][T16115] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4335'.
[  421.405269][T16120] netlink: 'syz.3.4338': attribute type 10 has an invalid length.
[  421.407651][T16121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4337'.
[  421.418618][T16121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4337'.
[  421.426080][T16121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4337'.
[  421.911330][T16137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4343'.
[  422.024931][T16141] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4346'.
[  422.437389][T16150] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  422.772804][T16163] netlink: 'syz.3.4356': attribute type 13 has an invalid length.
[  422.777635][T16163] netlink: 'syz.3.4356': attribute type 17 has an invalid length.
[  423.352233][T16163] bridge0: left promiscuous mode
[  423.354518][T16163] bridge0: left allmulticast mode
[  423.385579][T16163] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.445596][T16163] bridge0: port 3(dummy0) entered blocking state
[  423.453053][T16163] bridge0: port 3(dummy0) entered forwarding state
[  423.498411][T16163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.870645][T16207] netlink: 'syz.2.4374': attribute type 10 has an invalid length.
[  423.893579][T16207] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.905658][T16207] team0: Port device bond0 added
[  424.442979][T16226] syzkaller0: entered promiscuous mode
[  424.445370][T16226] syzkaller0: entered allmulticast mode
[  427.030356][T16253] __nla_validate_parse: 8 callbacks suppressed
[  427.030660][T16253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4396'.
[  427.284900][T16257] netlink: 'syz.2.4398': attribute type 10 has an invalid length.
[  427.289799][T16257] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.295228][T16257] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.331894][T16257] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.336351][T16257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.340671][T16257] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.343959][T16257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.399212][T16257] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  427.616572][T16270] netlink: 'syz.2.4402': attribute type 10 has an invalid length.
[  427.654194][T16270] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  427.847407][T16283] netlink: 'syz.2.4407': attribute type 39 has an invalid length.
[  427.868414][T16284] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4406'.
[  428.153094][T16286] netlink: 'syz.0.4408': attribute type 1 has an invalid length.
[  428.156382][T16286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.301526][T16339] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.4435'.
[  430.394730][T16347] dummy0: left allmulticast mode
[  430.396733][T16347] dummy0: left promiscuous mode
[  430.398898][T16347] bridge0: port 3(dummy0) entered disabled state
[  430.430089][T16347] bridge_slave_1: left allmulticast mode
[  430.432300][T16347] bridge_slave_1: left promiscuous mode
[  430.435767][T16347] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.583597][T16359] netlink: 'syz.0.4443': attribute type 10 has an invalid length.
[  430.599016][T16359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4443'.
[  430.838967][T16347] bridge_slave_0: left allmulticast mode
[  430.841308][T16347] bridge_slave_0: left promiscuous mode
[  430.844882][T16347] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.968307][T16359] ipvlan1: entered promiscuous mode
[  430.970507][T16359] ipvlan1: entered allmulticast mode
[  430.975828][T16359] bridge0: port 5(ipvlan1) entered blocking state
[  430.978363][T16359] bridge0: port 5(ipvlan1) entered disabled state
[  430.982574][T16359] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  430.990729][ T5948] infiniband syz0: ib_query_port failed (-19)
[  432.079541][T16433] netlink: 'syz.0.4477': attribute type 19 has an invalid length.
[  432.494318][T16449] netlink: 'syz.3.4485': attribute type 8 has an invalid length.
[  432.736459][T16453] netlink: 'syz.0.4486': attribute type 3 has an invalid length.
[  432.739630][T16453] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.4486'.
[  432.748538][T16454] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4487'.
[  433.053852][T16466] netlink: 'syz.2.4492': attribute type 10 has an invalid length.
[  433.101917][T16466] veth0_vlan: left promiscuous mode
[  433.108528][T16466] veth0_vlan: entered promiscuous mode
[  433.120447][T16466] team0: Device veth0_vlan failed to register rx_handler
[  433.149066][T16472] C: renamed from team_slave_0 (while UP)
[  433.159478][T16472] netlink: 'syz.3.4495': attribute type 2 has an invalid length.
[  433.163352][T16472] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4495'.
[  433.178515][T16472] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  433.187798][T16474] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4496'.
[  433.433043][T16486] delete_channel: no stack
[  433.435630][T16486] delete_channel: no stack
[  433.512452][T16492] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4505'.
[  435.326838][T16522] netlink: 'syz.3.4520': attribute type 39 has an invalid length.
[  435.435281][T16526] netlink: 'syz.0.4521': attribute type 11 has an invalid length.
[  442.509158][T16560] netlink: 'syz.3.4537': attribute type 39 has an invalid length.
[  442.589940][T16565] delete_channel: no stack
[  443.066909][T16593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4552'.
[  443.469860][T16623] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4567'.
[  443.475231][T16623] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4567'.
[  443.901756][T16643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4576'.
[  443.911543][T16643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4576'.
[  444.088666][T16648] netlink: 'syz.0.4578': attribute type 10 has an invalid length.
[  444.917217][T16648] veth1_macvtap (unregistering): left allmulticast mode
[  445.040971][T16653] netlink: del zone limit has 4 unknown bytes
[  445.067002][T16652] netlink: set zone limit has 4 unknown bytes
[  445.128828][T16657] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4581'.
[  445.318440][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  445.322968][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  445.507695][T16666] netlink: 'syz.3.4585': attribute type 10 has an invalid length.
[  445.590588][T16670] netlink: 182 bytes leftover after parsing attributes in process `syz.2.4587'.
[  446.282177][T16666] bond0: (slave team0): Releasing backup interface
[  446.295424][T16666] batman_adv: batadv0: Adding interface: team0
[  446.298261][T16666] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.311446][T16666] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  447.373865][ T5877] Bluetooth: hci1: command 0x0406 tx timeout
[  447.574985][T16722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4612'.
[  448.079948][   T54] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[  448.097888][T16743] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.4620'.
[  450.007053][T16778] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4635'.
[  450.217669][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4643'.
[  450.240876][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4644'.
[  450.246142][T16796] netlink: 'syz.0.4644': attribute type 2 has an invalid length.
[  450.513831][T16812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4652'.
[  450.518363][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4652'.
[  450.522660][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4652'.
[  450.572475][T16816] openvswitch: netlink: Missing key (keys=40, expected=100)
[  450.713881][T16820] netlink: 'syz.3.4655': attribute type 6 has an invalid length.
[  450.717867][T16820] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4655'.
[  450.727409][T16817] netlink: 'syz.0.4653': attribute type 39 has an invalid length.
[  450.978819][T16822] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4656'.
[  451.699843][T16837] netlink: 'syz.0.4663': attribute type 11 has an invalid length.
[  451.702838][T16837] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.4663'.
[  451.778407][T16837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.522792][T16887] netlink: 'syz.3.4687': attribute type 9 has an invalid length.
[  452.548569][T16887] netlink: 'syz.3.4687': attribute type 8 has an invalid length.
[  452.716877][T16903] netlink: 'syz.3.4695': attribute type 41 has an invalid length.
[  452.814082][T16910] bond_slave_0: entered promiscuous mode
[  452.818350][T16910] bond_slave_1: entered promiscuous mode
[  452.821747][T16910] bridge0: entered promiscuous mode
[  453.174268][T16923] __nla_validate_parse: 3 callbacks suppressed
[  453.174290][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'.
[  453.184526][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'.
[  454.529300][T16962] netlink: 'syz.0.4721': attribute type 40 has an invalid length.
[  455.354665][T16990] netlink: 183676 bytes leftover after parsing attributes in process `syz.2.4733'.
[  456.603347][T17018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4745'.
[  456.844653][T17027] netlink: 'syz.0.4749': attribute type 10 has an invalid length.
[  456.848306][T17027] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4749'.
[  457.879624][T17063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4764'.
[  458.035428][T17073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4769'.
[  458.549829][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4774'.
[  459.579043][T17102] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4782'.
[  459.788748][T17107] netlink: 'syz.0.4784': attribute type 10 has an invalid length.
[  460.139083][T17107] bond0: (slave ): Releasing backup interface
[  460.149542][T17107] mac80211_hwsim hwsim3 : left promiscuous mode
[  460.154136][T17107] mac80211_hwsim hwsim3 : left allmulticast mode
[  460.180937][T17115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4787'.
[  460.185626][T17115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4787'.
[  460.346607][T17128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4793'.
[  460.730604][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  460.820358][   T54] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  460.824301][   T54] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  461.920430][T17174] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4814'.
[  462.271267][T17194] netlink: 'syz.3.4824': attribute type 64 has an invalid length.
[  462.620438][T17205] netlink: 'syz.2.4826': attribute type 10 has an invalid length.
[  462.624855][T17205] bond_slave_0: left promiscuous mode
[  462.629769][T17205] bond_slave_1: left promiscuous mode
[  462.632730][T17205] bridge0: left promiscuous mode
[  463.088451][T17214] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.4830'.
[  463.382782][ T5873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.476546][ T5873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.547834][ T5873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.629537][ T5873] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.872597][ T5873] team0: Port device geneve1 removed
[  463.973411][ T5873] bond0 (unregistering): (slave 1!): Releasing backup interface
SYZFAIL: repeatedly failed to execute the program
proc=4 req=4837 state=1 status=7 (errno 9: Bad file descriptor)
[  463.986954][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  463.991721][ T5873] bond0 (unregistering): Released all slaves
[  464.241389][ T5873] hsr_slave_0: left promiscuous mode
[  464.247022][ T5873] hsr_slave_1: left promiscuous mode
[  464.249464][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.252243][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.256620][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.259422][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.262665][ T5873] batman_adv: batadv0: Removing interface: team0
[  464.282117][ T5873] veth1_macvtap: left allmulticast mode
[  464.285668][ T5873] veth1_macvtap: left promiscuous mode
[  464.288593][ T5873] veth1_vlan: left promiscuous mode
[  464.291261][ T5873] veth0_vlan: left promiscuous mode
[  464.617155][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  464.642181][ T5873] team0 (unregistering): Port device C removed
[  465.238451][ T5873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.306995][ T5873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.395200][ T5873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.584749][ T5873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.653475][ T5873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.722994][ T5873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.801735][ T5873] bond0: (slave netdevsim0): Releasing backup interface
[  465.805578][ T5873] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  465.808905][ T5873] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  465.813869][ T5873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.885482][ T5873] bridge_slave_1: left allmulticast mode
[  465.887733][ T5873] bridge_slave_1: left promiscuous mode
[  465.889968][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.895794][ T5873] bridge_slave_0: left promiscuous mode
[  465.898436][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.904497][ T5873] bond0: left allmulticast mode
[  465.906403][ T5873] bond_slave_1: left allmulticast mode
[  465.908466][ T5873] batadv_slave_0: left allmulticast mode
[  465.910755][ T5873] bridge0: port 4(bond0) entered disabled state
[  465.915096][ T5873] dummy0: left allmulticast mode
[  465.917418][ T5873] bridge0: port 3(dummy0) entered disabled state
[  465.921613][ T5873] bridge0: port 1(team0) entered disabled state
[  465.925931][ T5873] bridge_slave_1: left allmulticast mode
[  465.928049][ T5873] bridge_slave_1: left promiscuous mode
[  465.930209][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.936454][ T5873] erspan0: left allmulticast mode
[  465.938399][ T5873] erspan0: left promiscuous mode
[  465.940413][ T5873] : port 1(erspan0) entered disabled state
[  466.111340][ T5873] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  466.310049][ T5873] team0: Port device bond0 removed
[  466.315601][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.322576][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.328981][ T5873] bond0 (unregistering): Released all slaves
[  466.723106][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.727986][ T5873] bond_slave_1: left promiscuous mode
[  466.733184][ T5873] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  466.738666][ T5873] batadv_slave_0: left promiscuous mode
[  466.742971][ T5873] bond0 (unregistering): Released all slaves
[  467.344827][ T5873] hsr_slave_0: left promiscuous mode
[  467.348038][ T5873] hsr_slave_1: left promiscuous mode
[  467.386253][ T5873] veth1_macvtap: left promiscuous mode
[  467.388884][ T5873] veth0_macvtap: left promiscuous mode
[  467.391554][ T5873] veth1_vlan: left promiscuous mode
[  467.397162][ T5873] veth1_vlan: left promiscuous mode
[  467.824084][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  467.857374][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  468.393114][ T5873] team_slave_1 (unregistering): left promiscuous mode
[  468.396751][ T5873] team_slave_1 (unregistering): left allmulticast mode
[  468.400795][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  468.430335][ T5873] C (unregistering): left promiscuous mode
[  468.432922][ T5873] C (unregistering): left allmulticast mode
[  468.436776][ T5873] team0 (unregistering): Port device C removed
[  469.179109][ T5873] ------------[ cut here ]------------
[  469.181835][ T5873] WARNING: CPU: 1 PID: 5873 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  469.186202][ T5873] Modules linked in:
[  469.188066][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  469.193558][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.198479][ T5873] Workqueue: netns cleanup_net
[  469.200694][ T5873] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  469.203127][ T5873] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 41 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 fe e1 f7 e8 b1 ce 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 ce 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  469.212052][ T5873] RSP: 0018:ffffc9000363f898 EFLAGS: 00010293
[  469.215082][ T5873] RAX: ffffffff8a21dcff RBX: ffff88802ad30000 RCX: ffff88810d8e9cc0
[  469.218638][ T5873] RDX: 0000000000000000 RSI: ffffffff8dba603a RDI: ffff88810d8e9cc0
[  469.222232][ T5873] RBP: ffffc9000363f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  469.226098][ T5873] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630ae0
[  469.229618][ T5873] R13: 1ffff920006c7f40 R14: ffff88802ad31480 R15: dffffc0000000000
[  469.233109][ T5873] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  469.237551][ T5873] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  469.240459][ T5873] CR2: 00007f98d82e7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  469.244287][ T5873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  469.247905][ T5873] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  469.251520][ T5873] Call Trace:
[  469.253051][ T5873]  <TASK>
[  469.254743][ T5873]  xfrm_net_exit+0x2d/0x70
[  469.256714][ T5873]  ops_undo_list+0x49a/0x990
[  469.258845][ T5873]  ? __pfx_ops_undo_list+0x10/0x10
[  469.261163][ T5873]  ? do_raw_spin_unlock+0x4d/0x240
[  469.263533][ T5873]  cleanup_net+0x4c5/0x800
[  469.266060][ T5873]  ? __pfx_cleanup_net+0x10/0x10
[  469.268367][ T5873]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.270748][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  469.273361][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  469.276425][ T5873]  process_scheduled_works+0xae1/0x17b0
[  469.278969][ T5873]  ? __pfx_process_scheduled_works+0x10/0x10
[  469.281750][ T5873]  worker_thread+0x8a0/0xda0
[  469.284125][ T5873]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  469.287026][ T5873]  ? __kthread_parkme+0x7b/0x200
[  469.289375][ T5873]  kthread+0x711/0x8a0
[  469.291257][ T5873]  ? __pfx_worker_thread+0x10/0x10
[  469.293742][ T5873]  ? __pfx_kthread+0x10/0x10
[  469.295884][ T5873]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.298229][ T5873]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.300588][ T5873]  ? __pfx_kthread+0x10/0x10
[  469.302733][ T5873]  ret_from_fork+0x3fc/0x770
[  469.304983][ T5873]  ? __pfx_ret_from_fork+0x10/0x10
[  469.307369][ T5873]  ? __switch_to_asm+0x39/0x70
[  469.309492][ T5873]  ? __switch_to_asm+0x33/0x70
[  469.311690][ T5873]  ? __pfx_kthread+0x10/0x10
[  469.313892][ T5873]  ret_from_fork_asm+0x1a/0x30
[  469.316107][ T5873]  </TASK>
[  469.317554][ T5873] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  469.320876][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  469.326593][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.331031][ T5873] Workqueue: netns cleanup_net
[  469.333234][ T5873] Call Trace:
[  469.334806][ T5873]  <TASK>
[  469.336185][ T5873]  dump_stack_lvl+0x99/0x250
[  469.338362][ T5873]  ? __asan_memcpy+0x40/0x70
[  469.340456][ T5873]  ? __pfx_dump_stack_lvl+0x10/0x10
[  469.342750][ T5873]  ? __pfx__printk+0x10/0x10
[  469.344851][ T5873]  vpanic+0x281/0x750
[  469.346675][ T5873]  ? __pfx__printk+0x10/0x10
[  469.348739][ T5873]  ? __pfx_vpanic+0x10/0x10
[  469.350800][ T5873]  ? is_bpf_text_address+0x292/0x2b0
[  469.353222][ T5873]  panic+0xb9/0xc0
[  469.354980][ T5873]  ? __pfx_panic+0x10/0x10
[  469.357014][ T5873]  __warn+0x31b/0x4b0
[  469.358816][ T5873]  ? xfrm_state_fini+0x270/0x2f0
[  469.361049][ T5873]  ? xfrm_state_fini+0x270/0x2f0
[  469.363356][ T5873]  report_bug+0x2be/0x4f0
[  469.365400][ T5873]  ? xfrm_state_fini+0x270/0x2f0
[  469.367609][ T5873]  ? xfrm_state_fini+0x270/0x2f0
[  469.369782][ T5873]  ? xfrm_state_fini+0x272/0x2f0
[  469.371972][ T5873]  handle_bug+0x84/0x160
[  469.373936][ T5873]  exc_invalid_op+0x1a/0x50
[  469.376041][ T5873]  asm_exc_invalid_op+0x1a/0x20
[  469.378274][ T5873] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  469.380807][ T5873] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 41 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 fe e1 f7 e8 b1 ce 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 ce 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  469.389509][ T5873] RSP: 0018:ffffc9000363f898 EFLAGS: 00010293
[  469.392275][ T5873] RAX: ffffffff8a21dcff RBX: ffff88802ad30000 RCX: ffff88810d8e9cc0
[  469.395895][ T5873] RDX: 0000000000000000 RSI: ffffffff8dba603a RDI: ffff88810d8e9cc0
[  469.399467][ T5873] RBP: ffffc9000363f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  469.403051][ T5873] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630ae0
[  469.406658][ T5873] R13: 1ffff920006c7f40 R14: ffff88802ad31480 R15: dffffc0000000000
[  469.410257][ T5873]  ? xfrm_state_fini+0x26f/0x2f0
[  469.412545][ T5873]  ? xfrm_state_fini+0x26f/0x2f0
[  469.414815][ T5873]  xfrm_net_exit+0x2d/0x70
[  469.416882][ T5873]  ops_undo_list+0x49a/0x990
[  469.419007][ T5873]  ? __pfx_ops_undo_list+0x10/0x10
[  469.421384][ T5873]  ? do_raw_spin_unlock+0x4d/0x240
[  469.423736][ T5873]  cleanup_net+0x4c5/0x800
[  469.425812][ T5873]  ? __pfx_cleanup_net+0x10/0x10
[  469.428080][ T5873]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.430469][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  469.433125][ T5873]  ? process_scheduled_works+0x9ef/0x17b0
[  469.435694][ T5873]  process_scheduled_works+0xae1/0x17b0
[  469.438267][ T5873]  ? __pfx_process_scheduled_works+0x10/0x10
[  469.441001][ T5873]  worker_thread+0x8a0/0xda0
[  469.443148][ T5873]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  469.446053][ T5873]  ? __kthread_parkme+0x7b/0x200
[  469.448362][ T5873]  kthread+0x711/0x8a0
[  469.450252][ T5873]  ? __pfx_worker_thread+0x10/0x10
[  469.452567][ T5873]  ? __pfx_kthread+0x10/0x10
[  469.454677][ T5873]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.457007][ T5873]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.459396][ T5873]  ? __pfx_kthread+0x10/0x10
[  469.461499][ T5873]  ret_from_fork+0x3fc/0x770
[  469.463600][ T5873]  ? __pfx_ret_from_fork+0x10/0x10
[  469.465959][ T5873]  ? __switch_to_asm+0x39/0x70
[  469.468187][ T5873]  ? __switch_to_asm+0x33/0x70
[  469.470399][ T5873]  ? __pfx_kthread+0x10/0x10
[  469.472528][ T5873]  ret_from_fork_asm+0x1a/0x30
[  469.474749][ T5873]  </TASK>
[  469.477151][ T5873] Kernel Offset: disabled
[  469.479187][ T5873] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:44:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8b7bcbd2 RCX=5580de8a0dc86500 RDX=ffff88801f629cc0
RSI=ffffffff8d9b6df1 RDI=ffffffff8be33300 RBP=ffffc90000007af0 RSP=ffffc90000007a20
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=dffffc0000000000 R13=0000000003400000 R14=ffff88801f629cc0 R15=1ffff92000000f4c
RIP=ffffffff8b79519a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f49510e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f49505876c3 00007f49505876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0000000100000017 ffffffff00000001 XMM07=ffffffff896c6a00 ffffffff89bb4949
XMM08=0000000000000100 06d0030020f88090 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000019 RBX=ffffffff8e139ee0 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88810d8e9cc0 RBP=0000000000000007 RSP=ffffc9000363ed08
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc9000363ef58 R11=ffffffff81ac3890
R12=0000000000020000 R13=0000000000000000 R14=ffff88810d8ea878 R15=ffff88810d8ea7b0
RIP=ffffffff819d61f2 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f49512a1ff8 CR3=000000010f0b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f98d7612e53
XMM06=0000000000000000 00007f98d7612e4d XMM07=0000000000000000 00007f98d7612e61
XMM08=0000000000000000 00007f98d7612ee7 XMM09=0000000000000000 00007f98d7612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
