last executing test programs:

2.88111045s ago: executing program 0 (id=3522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x90}}, 0x0)

2.810079425s ago: executing program 0 (id=3523):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f00000002c0)=""/146, 0x92}], 0x2, &(0x7f0000000140)=""/37, 0x25}, 0x12100)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x1000000, 0xfffffffffffffc90, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e0028000f00000002800000121f", 0x2e}], 0x1}, 0x20)
close(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'wg0\x00', 0x200})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00eabbe6b344913f22a169e35e58b3d7000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r5 = gettid()
perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x0, 0x2, 0x8c, 0x10, 0x0, 0x6, 0x800, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0xfffffffffffffeff, 0x3b9a}, 0x10, 0x3, 0xfff, 0x2, 0x4, 0x7fff, 0x101, 0x0, 0x0, 0x0, 0x7fa}, r5, 0x7, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)

2.206131944s ago: executing program 1 (id=3530):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000200), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000300)=""/106, 0x6a}], 0x2, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x140)

2.142147673s ago: executing program 1 (id=3531):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = syz_clone(0xc220000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020003ffe42037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004)
sendmsg$kcm(r1, 0x0, 0x0)

1.808677746s ago: executing program 0 (id=3532):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0)

1.577518678s ago: executing program 1 (id=3535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x1, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000002b000701feffffff00eeffff027c"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x19, 0x0, 0x0)

1.410259359s ago: executing program 2 (id=3537):
r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r7)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b640000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v'], 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x453, 0x100, 0x70bd25, 0x25dfdbfc, "1f2c"}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e5f", @ANYRES64=r9], 0x0, 0x5e, 0x0, 0x1}, 0x28)

1.341268586s ago: executing program 1 (id=3538):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x8}, 0x512b, 0x5, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20)

1.052856406s ago: executing program 1 (id=3539):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)

932.833149ms ago: executing program 0 (id=3540):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081139000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106300000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

867.250196ms ago: executing program 0 (id=3541):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0)

865.354092ms ago: executing program 1 (id=3542):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x2, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x4, 0xeb, &(0x7f0000000a00)=""/235, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x5, 0x4cd9c8fb, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001140)=[{0x5, 0x3, 0x10, 0xc}, {0x3, 0x2, 0xc, 0x4}, {0x5, 0x1, 0x4, 0x6}, {0x4, 0x5, 0x4, 0x3}, {0x2, 0x3, 0x10, 0xc}, {0x2, 0xe9f, 0xb, 0x8}, {0x4, 0x1, 0xe, 0x6}, {0x1, 0x3, 0x3, 0x2}], 0x10, 0x5}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x18, 0x0, 0x2)
close(r7)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0x58, &(0x7f0000000200)}, 0x10)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/175, 0xaf}], 0x2, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2040)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

667.453824ms ago: executing program 0 (id=3543):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

486.175345ms ago: executing program 2 (id=3544):
r0 = socket$kcm(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000080), 0x4)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)

330.918779ms ago: executing program 2 (id=3545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff000000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031200048008000240000000120800014000000000140003006e657464657673696d3060fd"], 0xac}}, 0x0)

330.500441ms ago: executing program 2 (id=3546):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

328.928452ms ago: executing program 2 (id=3547):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socket$kcm(0x11, 0x200000000000002, 0x300)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1a500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x4402000a, 0x4, 0x0, 0x800, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x12, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r2, r2, 0x22, 0x1b, r2, @void, @value=r2, @void, @void, r4}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x13, 0x0, &(0x7f00000002c0)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x4b1f}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 2 (id=3548):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51063' (ED25519) to the list of known hosts.
syzkaller login: [   56.427608][ T5807] cgroup: Unknown subsys name 'net'
[   56.562995][ T5807] cgroup: Unknown subsys name 'cpuset'
[   56.568680][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.303111][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.357379][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.703855][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.707113][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.750033][  T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.753016][  T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.809523][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.815390][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.836602][ T5893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.841563][ T5893] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.845086][ T5893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.845128][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.856015][ T5893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.859991][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.860315][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.867519][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.955096][ T5889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.959686][ T5889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.964657][ T5889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.970745][ T5889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.974914][ T5889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.304982][ T5890] chnl_net:caif_netlink_parms(): no params data found
[   70.376654][ T5887] chnl_net:caif_netlink_parms(): no params data found
[   70.515295][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.517892][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.521694][ T5890] bridge_slave_0: entered allmulticast mode
[   70.525345][ T5890] bridge_slave_0: entered promiscuous mode
[   70.534750][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.537750][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.541021][ T5890] bridge_slave_1: entered allmulticast mode
[   70.544953][ T5890] bridge_slave_1: entered promiscuous mode
[   70.573232][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   70.578943][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.581371][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.584203][ T5887] bridge_slave_0: entered allmulticast mode
[   70.588445][ T5887] bridge_slave_0: entered promiscuous mode
[   70.611016][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.631460][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.634357][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.637128][ T5887] bridge_slave_1: entered allmulticast mode
[   70.642467][ T5887] bridge_slave_1: entered promiscuous mode
[   70.647758][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.696915][ T5890] team0: Port device team_slave_0 added
[   70.722258][ T5890] team0: Port device team_slave_1 added
[   70.726790][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.769203][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.772608][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.775424][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.778111][ T5894] bridge_slave_0: entered allmulticast mode
[   70.782794][ T5894] bridge_slave_0: entered promiscuous mode
[   70.800069][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.802949][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.815323][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.841593][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.844331][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.847111][ T5894] bridge_slave_1: entered allmulticast mode
[   70.851681][ T5894] bridge_slave_1: entered promiscuous mode
[   70.879787][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.882560][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.893507][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.899469][ T5887] team0: Port device team_slave_0 added
[   70.922027][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.933022][ T5887] team0: Port device team_slave_1 added
[   70.936957][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.026161][ T5894] team0: Port device team_slave_0 added
[   71.034210][ T5890] hsr_slave_0: entered promiscuous mode
[   71.036588][ T5890] hsr_slave_1: entered promiscuous mode
[   71.042407][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.045190][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.055520][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.063412][ T5894] team0: Port device team_slave_1 added
[   71.066251][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.069363][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.079955][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.123410][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.126182][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.135169][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.162074][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.164720][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.174101][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.232263][ T5887] hsr_slave_0: entered promiscuous mode
[   71.235398][ T5887] hsr_slave_1: entered promiscuous mode
[   71.239806][ T5887] debugfs: 'hsr0' already exists in 'hsr'
[   71.242247][ T5887] Cannot create hsr debugfs directory
[   71.290742][ T5894] hsr_slave_0: entered promiscuous mode
[   71.293716][ T5894] hsr_slave_1: entered promiscuous mode
[   71.296300][ T5894] debugfs: 'hsr0' already exists in 'hsr'
[   71.298470][ T5894] Cannot create hsr debugfs directory
[   71.374175][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.376743][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.544898][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.567845][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.606173][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.624698][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.667950][ T5887] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.701037][ T5887] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.710679][ T5887] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.719639][ T5887] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.781307][ T5894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.787388][ T5894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.802987][ T5894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.812691][ T5894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.872449][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.916079][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[   71.931123][ T5889] Bluetooth: hci0: command tx timeout
[   71.931137][ T5234] Bluetooth: hci1: command tx timeout
[   71.935392][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.939454][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.955224][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.958075][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.009511][ T5234] Bluetooth: hci2: command tx timeout
[   72.054009][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.091632][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   72.117041][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.119968][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.125064][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.127598][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.162177][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.195765][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   72.226040][  T741] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.229056][  T741] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.243936][  T741] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.247526][  T741] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.304501][ T5894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.315220][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.416502][ T5890] veth0_vlan: entered promiscuous mode
[   72.434716][ T5890] veth1_vlan: entered promiscuous mode
[   72.471033][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.493883][ T5890] veth0_macvtap: entered promiscuous mode
[   72.502780][ T5890] veth1_macvtap: entered promiscuous mode
[   72.523241][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.540349][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.564397][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.567189][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.581462][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.584566][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.599615][ T5887] veth0_vlan: entered promiscuous mode
[   72.604576][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.637862][ T5887] veth1_vlan: entered promiscuous mode
[   72.705497][ T5887] veth0_macvtap: entered promiscuous mode
[   72.709393][ T5894] veth0_vlan: entered promiscuous mode
[   72.715779][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.718102][ T5887] veth1_macvtap: entered promiscuous mode
[   72.723291][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.737017][ T5894] veth1_vlan: entered promiscuous mode
[   72.768563][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.781568][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.784290][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.790898][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.813153][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.817368][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.827209][ T5894] veth0_macvtap: entered promiscuous mode
[   72.833630][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.855156][ T5894] veth1_macvtap: entered promiscuous mode
[   72.858857][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.913881][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.944541][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.010819][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.030983][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.031475][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.044286][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.048435][ T5954] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.065776][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.073991][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.111798][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.115067][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.227160][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.238815][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.246133][ T5958] netlink: 124 bytes leftover after parsing attributes in process `syz.1.15'.
[   73.280617][  T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.284951][  T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.862851][ T5990] netlink: 'syz.2.34': attribute type 2 has an invalid length.
[   73.866297][ T5990] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   74.010026][ T5234] Bluetooth: hci1: command tx timeout
[   74.010933][ T5889] Bluetooth: hci0: command tx timeout
[   74.090520][ T5889] Bluetooth: hci2: command tx timeout
[   74.264287][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'.
[   74.267200][ T6012] netlink: 152 bytes leftover after parsing attributes in process `syz.0.44'.
[   74.285692][ T6013] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.43'.
[   74.342329][ T6015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.45'.
[   74.346432][ T6015] unsupported nlmsg_type 40
[   75.013440][    C0] hrtimer: interrupt took 69688 ns
[   75.848193][ T6075] netlink: 'syz.1.70': attribute type 9 has an invalid length.
[   75.853599][ T6075] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.70'.
[   76.088739][ T5889] Bluetooth: hci1: command tx timeout
[   76.099732][ T5889] Bluetooth: hci0: command tx timeout
[   76.181908][ T5889] Bluetooth: hci2: command tx timeout
[   76.192396][ T6093] netlink: 'syz.2.79': attribute type 1 has an invalid length.
[   76.212633][ T6093] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.79'.
[   77.028149][ T6129] netlink: 'syz.0.96': attribute type 19 has an invalid length.
[   77.820340][ T6154] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.105'.
[   78.093470][ T6165] netlink: 'syz.0.115': attribute type 10 has an invalid length.
[   78.125371][ T6165] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   78.181176][ T5889] Bluetooth: hci0: command tx timeout
[   78.183397][ T5889] Bluetooth: hci1: command tx timeout
[   78.259762][ T5889] Bluetooth: hci2: command tx timeout
[   78.405327][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'.
[   78.828011][ T6194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.001929][ T5889] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[   79.066298][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   79.078739][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   79.082449][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   80.951274][ T6264] netlink: 17 bytes leftover after parsing attributes in process `syz.0.155'.
[   80.970504][ T6264] netlink: zone id is out of range
[   80.972851][ T6264] netlink: zone id is out of range
[   80.975002][ T6264] netlink: zone id is out of range
[   80.997998][ T6264] netlink: zone id is out of range
[   81.012037][ T6264] netlink: zone id is out of range
[   81.014252][ T6264] netlink: zone id is out of range
[   81.016354][ T6264] netlink: zone id is out of range
[   81.018435][ T6264] netlink: zone id is out of range
[   81.053348][ T6266] Zero length message leads to an empty skb
[   81.060983][ T6264] netlink: zone id is out of range
[   81.898557][ T6284] netlink: 'syz.2.164': attribute type 10 has an invalid length.
[   81.901415][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.164'.
[   81.905154][ T6284] batman_adv: batadv0: Adding interface: vlan1
[   81.920673][ T6284] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.939443][ T6284] batman_adv: batadv0: Interface activated: vlan1
[   81.974035][ T5889] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[   81.981620][ T6260] infiniband syz1: set active
[   81.986295][ T6260] infiniband syz1: added bond0
[   81.990564][ T6260] syz1: rxe_create_cq: returned err = -12
[   81.992688][ T6260] infiniband syz1: Couldn't create ib_mad CQ
[   81.994828][ T6260] infiniband syz1: Couldn't open port 1
[   82.015858][ T6260] RDS/IB: syz1: added
[   82.017452][ T6260] smc: adding ib device syz1 with port count 1
[   82.021236][ T6260] smc:    ib device syz1 port 1 has pnetid 
[   83.006876][ T6309] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   83.013981][ T6309] netlink: 'syz.0.174': attribute type 4 has an invalid length.
[   83.017684][ T6309] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.174'.
[   83.033764][ T6311] netlink: 'syz.2.175': attribute type 2 has an invalid length.
[   83.091260][ T6291] delete_channel: no stack
[   83.154814][ T6319] netlink: 'syz.2.178': attribute type 3 has an invalid length.
[   83.158053][ T6319] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[   83.163127][ T6319] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.178'.
[   83.641456][ T6332] netlink: 168 bytes leftover after parsing attributes in process `syz.1.185'.
[   83.958811][ T6355] netlink: 'syz.1.194': attribute type 3 has an invalid length.
[   83.962700][ T6355] netlink: 'syz.1.194': attribute type 2 has an invalid length.
[   83.965867][ T6355] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.194'.
[   84.034004][ T6357] Illegal XDP return value 4294967294 on prog  (id 49) dev N/A, expect packet loss!
[   84.286019][ T6368] netlink: 830 bytes leftover after parsing attributes in process `syz.1.200'.
[   84.289505][ T6368] bond_slave_0: entered promiscuous mode
[   84.291699][ T6368] bond_slave_1: entered promiscuous mode
[   84.419898][ T6370] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.201'.
[   85.105680][ T6392] netlink: 'syz.1.211': attribute type 21 has an invalid length.
[   85.108441][ T6392] IPv6: NLM_F_CREATE should be specified when creating new route
[   85.116866][ T6392] IPv6: Can't replace route, no match found
[   85.126850][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   86.782192][   T10] cfg80211: failed to load regulatory.db
[   86.964521][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'.
[   87.289633][ T6437] netlink: 'syz.1.231': attribute type 21 has an invalid length.
[   87.456651][ T6443] net_ratelimit: 77 callbacks suppressed
[   87.456671][ T6443] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   87.522914][ T6447] netlink: 948 bytes leftover after parsing attributes in process `syz.2.236'.
[   88.338324][ T6462] netlink: 763 bytes leftover after parsing attributes in process `syz.1.241'.
[   89.247634][ T6483] netlink: 64019 bytes leftover after parsing attributes in process `syz.1.251'.
[   89.348051][ T6485] netlink: 176 bytes leftover after parsing attributes in process `syz.2.252'.
[   90.807014][ T6523] netlink: 'syz.2.269': attribute type 10 has an invalid length.
[   91.564529][ T6523] team0: Device veth1_macvtap failed to register rx_handler
[   92.153659][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[   92.397132][ T6544] netlink: 'syz.0.278': attribute type 64 has an invalid length.
[   92.505656][ T6553] netlink: zone id is out of range
[   92.520334][ T6553] netlink: del zone limit has 4 unknown bytes
[   92.523588][ T6553] =======================================================
[   92.523588][ T6553] WARNING: The mand mount option has been deprecated and
[   92.523588][ T6553]          and is ignored by this kernel. Remove the mand
[   92.523588][ T6553]          option from the mount to silence this warning.
[   92.523588][ T6553] =======================================================
[   92.726381][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[   92.731206][ T6566] netlink: 6 bytes leftover after parsing attributes in process `syz.1.287'.
[   92.816712][ T6574] netlink: 168 bytes leftover after parsing attributes in process `syz.1.291'.
[   92.950788][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.954256][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.960529][ T6582] bridge0: entered allmulticast mode
[   93.795899][ T6590] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.297'.
[   95.253059][ T6608] syzkaller0: tun_chr_ioctl cmd 1074025681
[   95.668261][ T6626] netlink: 'syz.0.313': attribute type 10 has an invalid length.
[   95.738567][ T6624] mac80211_hwsim hwsim9 .3c: renamed from wlan1 (while UP)
[   95.835995][ T6635] netlink: 'syz.0.317': attribute type 1 has an invalid length.
[   95.840150][ T6635] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.317'.
[   96.026910][ T6644] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.185687][ T6651] syzkaller0: entered promiscuous mode
[   96.187762][ T6651] syzkaller0: entered allmulticast mode
[   96.369566][ T6656] syzkaller0: tun_chr_ioctl cmd 1074025677
[   96.372216][ T6656] syzkaller0: linktype set to 801
[   96.471238][ T6661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.627318][ T6672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.851491][ T6679] netlink: 'syz.0.335': attribute type 1 has an invalid length.
[   97.060719][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.068193][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.093345][ T6691] bridge0: entered allmulticast mode
[   97.146966][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.149482][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.152936][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.155815][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.160403][ T6693] bridge0: entered promiscuous mode
[   98.884375][ T6731] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  102.343908][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1545249015 wd_nsec: 1545248898
[  103.460360][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'.
[  103.651931][ T6770] lo speed is unknown, defaulting to 1000
[  103.687143][ T6770] lo speed is unknown, defaulting to 1000
[  103.818013][ T6770] lo speed is unknown, defaulting to 1000
[  103.924502][ T6782] netlink: 'syz.0.376': attribute type 39 has an invalid length.
[  104.161122][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'.
[  104.217100][ T6770] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  104.342066][ T6793] @: renamed from veth0_vlan (while UP)
[  104.421356][ T6770] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  104.444841][ T6770] lo speed is unknown, defaulting to 1000
[  104.449859][ T6770] lo speed is unknown, defaulting to 1000
[  104.453952][ T6770] lo speed is unknown, defaulting to 1000
[  105.631494][ T6824] netlink: 'syz.1.391': attribute type 29 has an invalid length.
[  105.635586][ T6824] netlink: 'syz.1.391': attribute type 29 has an invalid length.
[  105.788235][ T6828] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.393'.
[  105.900562][ T6841] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.399'.
[  105.904433][ T6841] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.399'.
[  105.907870][ T6841] tc_dump_action: action bad kind
[  106.011605][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.2.402'.
[  106.421645][ T6857] netlink: 10 bytes leftover after parsing attributes in process `syz.2.406'.
[  106.550999][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'.
[  106.557061][ T6862] openvswitch: netlink: Missing key (keys=40, expected=80)
[  107.048459][ T5889] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  107.054409][ T5889] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  107.376493][ T6916] netlink: 17 bytes leftover after parsing attributes in process `syz.0.434'.
[  107.383332][ T6916] netlink: zone id is out of range
[  107.385408][ T6916] netlink: zone id is out of range
[  107.387327][ T6916] netlink: zone id is out of range
[  107.390856][ T6916] netlink: zone id is out of range
[  107.393478][ T6916] netlink: zone id is out of range
[  107.395469][ T6916] netlink: zone id is out of range
[  107.397509][ T6916] netlink: zone id is out of range
[  107.400119][ T6916] netlink: zone id is out of range
[  107.402259][ T6916] netlink: zone id is out of range
[  108.213546][ T6934] netlink: 156 bytes leftover after parsing attributes in process `syz.0.442'.
[  108.552618][ T6937] delete_channel: no stack
[  108.680275][ T6953] netlink: 'syz.0.450': attribute type 12 has an invalid length.
[  108.683925][ T6953] __nla_validate_parse: 1 callbacks suppressed
[  108.684006][ T6953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.450'.
[  108.778206][ T6959] syz.0.450 (6959) used obsolete PPPIOCDETACH ioctl
[  108.864121][ T6953] syz.0.450 uses obsolete (PF_INET,SOCK_PACKET)
[  109.991200][ T6998] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.995269][ T6998] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.339525][ T7015] netlink: 'syz.0.474': attribute type 21 has an invalid length.
[  110.342885][ T7015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.474'.
[  110.347638][ T7015] netlink: 'syz.0.474': attribute type 4 has an invalid length.
[  110.355274][ T7015] netlink: 'syz.0.474': attribute type 3 has an invalid length.
[  110.360340][ T7015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.474'.
[  111.262382][ T7035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.482'.
[  111.843435][ T7053] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.491'.
[  111.846547][ T7053] netlink: 5 bytes leftover after parsing attributes in process `syz.1.491'.
[  111.903243][ T7058] netlink: 'syz.2.494': attribute type 13 has an invalid length.
[  111.905891][ T7058] netlink: 'syz.2.494': attribute type 58 has an invalid length.
[  111.908454][ T7058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.494'.
[  112.102784][ T7069] netlink: 188 bytes leftover after parsing attributes in process `syz.2.499'.
[  112.446124][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[  113.379502][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.516'.
[  113.818016][ T7129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.522'.
[  113.852846][ T7131] netlink: 'syz.0.523': attribute type 33 has an invalid length.
[  113.855536][ T7131] netlink: 152 bytes leftover after parsing attributes in process `syz.0.523'.
[  114.282190][ T7137] netlink: 64 bytes leftover after parsing attributes in process `syz.0.526'.
[  114.765350][ T7153] netlink: 752 bytes leftover after parsing attributes in process `syz.0.533'.
[  114.905937][ T7161] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.536'.
[  117.410617][ T7186] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  117.442770][ T7186] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  117.555283][ T7189] netlink: 'syz.1.545': attribute type 21 has an invalid length.
[  117.560730][ T7189] netlink: 128 bytes leftover after parsing attributes in process `syz.1.545'.
[  117.566607][ T7189] netlink: 'syz.1.545': attribute type 5 has an invalid length.
[  117.575539][ T7189] netlink: 3 bytes leftover after parsing attributes in process `syz.1.545'.
[  118.257226][ T7198] netlink: 'syz.1.548': attribute type 10 has an invalid length.
[  118.267079][ T7198] 8021q: adding VLAN 0 to HW filter on device team0
[  118.271869][ T7198] team_slave_0: entered promiscuous mode
[  118.274240][ T7198] team_slave_1: entered promiscuous mode
[  118.276710][ T7198] bond0: (slave team0): Enslaving as an active interface with an up link
[  118.559930][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'.
[  118.914679][ T7235] netlink: 'syz.2.566': attribute type 4 has an invalid length.
[  118.918300][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'.
[  119.892710][ T7262] netlink: 'syz.1.579': attribute type 10 has an invalid length.
[  122.258160][ T7262] bond0: (slave bond_slave_0): Releasing backup interface
[  122.267167][ T7262] bond_slave_0: left promiscuous mode
[  122.405187][ T7274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.585'.
[  122.457042][ T7276] netlink: 'syz.2.588': attribute type 39 has an invalid length.
[  123.133220][ T7316] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.604'.
[  123.805084][ T7330] netlink: 763 bytes leftover after parsing attributes in process `syz.2.605'.
[  123.823568][ T7330] netlink: 'syz.2.605': attribute type 10 has an invalid length.
[  123.835591][ T7330] netlink: 40 bytes leftover after parsing attributes in process `syz.2.605'.
[  123.857175][ T7330] team0: entered promiscuous mode
[  123.870597][ T7330] team_slave_0: entered promiscuous mode
[  123.872520][ T7330] team_slave_1: entered promiscuous mode
[  123.886469][ T7330] team0: entered allmulticast mode
[  123.896540][ T7330] team_slave_0: entered allmulticast mode
[  123.905799][ T7330] team_slave_1: entered allmulticast mode
[  123.919274][ T7330] bridge0: port 3(team0) entered blocking state
[  123.927111][ T7330] bridge0: port 3(team0) entered disabled state
[  124.463266][ T7344] delete_channel: no stack
[  124.464776][ T7344] delete_channel: no stack
[  124.580433][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'.
[  124.584390][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'.
[  125.251668][ T7374] netlink: 'syz.0.625': attribute type 29 has an invalid length.
[  125.259727][ T7374] netlink: 'syz.0.625': attribute type 29 has an invalid length.
[  126.009556][ T7359] syz.1.617 (7359) used greatest stack depth: 17576 bytes left
[  126.136916][ T7394] netlink: 'syz.2.635': attribute type 10 has an invalid length.
[  126.140793][ T7394] netlink: 55 bytes leftover after parsing attributes in process `syz.2.635'.
[  129.399306][ T7402] delete_channel: no stack
[  129.696645][ T7415] netlink: 'syz.2.642': attribute type 2 has an invalid length.
[  129.701793][ T7416] netlink: 'syz.1.643': attribute type 10 has an invalid length.
[  129.716032][ T7416] syz_tun: entered promiscuous mode
[  129.725956][ T7416] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  129.822183][ T7424] syzkaller0: entered promiscuous mode
[  129.823993][ T7424] syzkaller0: entered allmulticast mode
[  129.891441][ T7430] netlink: 196 bytes leftover after parsing attributes in process `syz.1.649'.
[  131.650523][ T7475] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.667'.
[  131.778190][ T7483] netlink: 'syz.0.671': attribute type 10 has an invalid length.
[  131.787007][ T7483] netlink: 156 bytes leftover after parsing attributes in process `syz.0.671'.
[  132.814702][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.816858][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  136.172652][ T7557] net_ratelimit: 15 callbacks suppressed
[  136.172665][ T7557] openvswitch: netlink: Flow actions attr not present in new flow.
[  136.271467][ T7499] Set syz1 is full, maxelem 65536 reached
[  136.422702][ T7570] netlink: 'syz.1.711': attribute type 29 has an invalid length.
[  136.603630][ T7576] netlink: 'syz.0.713': attribute type 10 has an invalid length.
[  136.606615][ T7576] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.713'.
[  136.737126][ T7584] netlink: 'syz.1.717': attribute type 21 has an invalid length.
[  136.740664][ T7584] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.717'.
[  136.929512][ T5889] Bluetooth: hci0: adv larger than maximum supported
[  136.929553][ T5889] Bluetooth: hci0: Unknown advertising packet type: 0x73
[  136.967352][ T7597] netlink: 56 bytes leftover after parsing attributes in process `syz.0.723'.
[  136.985792][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.724'.
[  136.990821][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.724'.
[  136.995149][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.724'.
[  137.029470][ T7603] netlink: 'syz.0.725': attribute type 1 has an invalid length.
[  137.032913][ T7603] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.725'.
[  137.091629][ T7609] netlink: 'syz.0.728': attribute type 2 has an invalid length.
[  137.162096][ T7619] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.734'.
[  137.291923][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.738'.
[  138.821208][ T7679] openvswitch: netlink: Flow actions attr not present in new flow.
[  138.825243][ T7679] syzkaller0: entered promiscuous mode
[  139.128217][ T7687] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  139.162949][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'.
[  139.294653][ T7700] netlink: 'syz.1.772': attribute type 2 has an invalid length.
[  139.297178][ T7700] netlink: 'syz.1.772': attribute type 1 has an invalid length.
[  139.301148][ T7700] netlink: 'syz.1.772': attribute type 8 has an invalid length.
[  139.838330][ T7715] batadv_slave_1: entered promiscuous mode
[  142.110568][ T7749] __nla_validate_parse: 3 callbacks suppressed
[  142.110587][ T7749] netlink: 288 bytes leftover after parsing attributes in process `syz.2.790'.
[  142.119673][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'.
[  142.128741][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'.
[  142.143564][ T7693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.581200][ T7764] netlink: 'syz.0.795': attribute type 10 has an invalid length.
[  142.585087][ T7764] netlink: 55 bytes leftover after parsing attributes in process `syz.0.795'.
[  143.256670][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'.
[  143.798050][ T7805] netlink: 'syz.1.813': attribute type 13 has an invalid length.
[  143.804103][ T7805] netlink: 'syz.1.813': attribute type 17 has an invalid length.
[  144.008306][ T7805] bridge0: left promiscuous mode
[  144.011068][ T7805] bridge0: left allmulticast mode
[  144.083154][ T7805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.097136][   T24] lo speed is unknown, defaulting to 1000
[  144.865181][ T7841] netlink: 'syz.1.826': attribute type 28 has an invalid length.
[  144.872097][ T7841] netlink: 'syz.1.826': attribute type 29 has an invalid length.
[  144.878459][ T7841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.826'.
[  145.367606][ T7843] netlink: 'syz.2.829': attribute type 2 has an invalid length.
[  145.778062][ T7860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.837'.
[  145.793939][ T7860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.837'.
[  147.024268][ T7873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.843'.
[  147.027174][ T7873] netlink: 6 bytes leftover after parsing attributes in process `syz.1.843'.
[  147.198472][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'.
[  147.278052][ T7892] netlink: 'syz.2.851': attribute type 17 has an invalid length.
[  147.282351][ T7892] netlink: 148 bytes leftover after parsing attributes in process `syz.2.851'.
[  147.312836][ T7879] netlink: 'syz.1.846': attribute type 29 has an invalid length.
[  147.325144][ T7884] netlink: 'syz.1.846': attribute type 29 has an invalid length.
[  147.331405][ T7893] netlink: 'syz.1.846': attribute type 29 has an invalid length.
[  147.664570][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'.
[  147.669484][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'.
[  147.899198][ T7914] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.861'.
[  148.164657][ T7920] validate_nla: 2 callbacks suppressed
[  148.164728][ T7920] netlink: 'syz.1.864': attribute type 10 has an invalid length.
[  148.173562][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.864'.
[  148.176684][ T7920] batadv0: entered promiscuous mode
[  148.205658][ T7920] batadv0: entered allmulticast mode
[  148.279005][ T7920] bridge0: port 3(batadv0) entered blocking state
[  148.283243][ T7920] bridge0: port 3(batadv0) entered disabled state
[  148.308888][ T7920] bridge0: port 3(batadv0) entered blocking state
[  148.312427][ T7920] bridge0: port 3(batadv0) entered forwarding state
[  148.587433][ T7946] netlink: 188 bytes leftover after parsing attributes in process `syz.1.875'.
[  148.608978][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  148.612278][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  148.997855][ T7957] netlink: 180 bytes leftover after parsing attributes in process `syz.1.879'.
[  149.233219][ T7971] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.886'.
[  149.357105][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'.
[  149.507097][ T7985] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  150.718332][ T5889] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  150.846061][ T8053] netlink: 'syz.0.922': attribute type 5 has an invalid length.
[  151.480138][ T8081] netlink: 'syz.0.935': attribute type 29 has an invalid length.
[  153.195902][ T8111] __nla_validate_parse: 2 callbacks suppressed
[  153.195915][ T8111] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.950'.
[  153.213896][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.952'.
[  153.217535][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.952'.
[  153.462932][ T8125] netlink: 'syz.0.958': attribute type 21 has an invalid length.
[  153.758217][ T8141] : renamed from wg2 (while UP)
[  153.916248][ T8154] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  154.001481][ T8157] C: renamed from team_slave_0 (while UP)
[  154.011041][ T8157] netlink: 'syz.0.973': attribute type 8 has an invalid length.
[  154.014864][ T8157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  154.180569][ T8161] netlink: 14 bytes leftover after parsing attributes in process `syz.1.975'.
[  154.516303][ T8179] syzkaller0: entered promiscuous mode
[  154.518267][ T8179] syzkaller0: entered allmulticast mode
[  156.384366][ T8227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  156.611690][ T8233] netlink: 'syz.1.1008': attribute type 2 has an invalid length.
[  156.619818][ T8233] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.1008'.
[  156.920519][ T8241] netlink: 'syz.1.1012': attribute type 4 has an invalid length.
[  156.928970][ T8241] netlink: 'syz.1.1012': attribute type 2 has an invalid length.
[  156.934105][ T8241] netlink: 199288 bytes leftover after parsing attributes in process `syz.1.1012'.
[  157.608147][ T8267] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1025'.
[  157.814353][ T8270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1026'.
[  157.819743][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'.
[  157.918472][ T8280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1030'.
[  161.253338][ T8319] C: renamed from team_slave_0 (while UP)
[  161.262985][ T8319] netlink: 'syz.2.1047': attribute type 3 has an invalid length.
[  161.268280][ T8319] __nla_validate_parse: 5 callbacks suppressed
[  161.268297][ T8319] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1047'.
[  161.276728][ T8319] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  161.276827][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'.
[  161.352578][ T8328] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1051'.
[  161.692137][ T8354] netlink: 'syz.2.1061': attribute type 10 has an invalid length.
[  161.695576][ T8354] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1061'.
[  161.714410][ T8354] batman_adv: batadv0: Interface deactivated: vlan1
[  161.794742][ T8356] netlink: 'syz.1.1064': attribute type 7 has an invalid length.
[  162.248182][ T8359] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.1065'.
[  162.633545][ T8354] batman_adv: batadv0: Removing interface: vlan1
[  163.064146][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1080'.
[  163.066981][ T8389] netlink: 'syz.0.1080': attribute type 1 has an invalid length.
[  163.148852][ T8394] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  163.224417][ T8400] tap0: tun_chr_ioctl cmd 1074025678
[  163.226634][ T8400] tap0: group set to 0
[  163.265527][ T8404] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  163.906243][ T8445] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1100'.
[  164.105192][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'.
[  164.108402][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'.
[  164.134803][ T8465] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  165.183125][ T8483] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1115'.
[  166.332214][ T8527] __nla_validate_parse: 4 callbacks suppressed
[  166.332262][ T8527] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1134'.
[  166.348253][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'.
[  166.370851][ T8534] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1137'.
[  166.406472][ T8538] netlink: 'syz.0.1139': attribute type 13 has an invalid length.
[  166.409373][ T8538] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1139'.
[  166.433762][ T8538] erspan0: refused to change device tx_queue_len
[  166.437612][ T8538] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  166.488152][ T8544] netlink: 'syz.0.1142': attribute type 11 has an invalid length.
[  166.492219][ T8544] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1142'.
[  167.171712][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'.
[  167.175286][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'.
[  168.982363][ T8589] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1161'.
[  169.120781][ T8594] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1163'.
[  169.686179][ T8616] syzkaller0: entered promiscuous mode
[  169.688413][ T8616] syzkaller0: entered allmulticast mode
[  169.815406][ T8622] netlink: 'syz.1.1174': attribute type 1 has an invalid length.
[  170.373847][ T8630] netlink: 'syz.1.1176': attribute type 2 has an invalid length.
[  170.376882][ T8630] netlink: 'syz.1.1176': attribute type 7 has an invalid length.
[  170.379695][ T8630] netlink: 85 bytes leftover after parsing attributes in process `syz.1.1176'.
[  170.383555][ T8630] netlink: 'syz.1.1176': attribute type 2 has an invalid length.
[  170.386691][ T8630] netlink: 'syz.1.1176': attribute type 7 has an invalid length.
[  171.475744][ T8657] __nla_validate_parse: 2 callbacks suppressed
[  171.475760][ T8657] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1187'.
[  171.718904][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  171.797839][ T8679] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1198'.
[  172.790961][ T8713] lo speed is unknown, defaulting to 1000
[  173.022350][ T8729] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1218'.
[  173.145236][ T5889] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[  173.661040][ T8756] netlink: 'syz.2.1231': attribute type 10 has an invalid length.
[  173.667173][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1231'.
[  173.743242][ T8756] batman_adv: batadv0: Adding interface: hsr_slave_1
[  173.770919][ T8756] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.809178][ T8756] batman_adv: batadv0: Interface activated: hsr_slave_1
[  174.322760][ T8769] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1237'.
[  174.571884][ T8780] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.575650][ T8780] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.852549][ T8809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1255'.
[  176.106861][ T8823] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  176.137193][ T8827] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  177.143532][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1272'.
[  177.148140][ T8853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1272'.
[  177.992522][ T8890] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1286'.
[  178.424669][ T8905] sit0: entered allmulticast mode
[  178.995575][ T8912] netlink: 'syz.2.1295': attribute type 15 has an invalid length.
[  179.394079][ T8914] netlink: 'syz.2.1296': attribute type 3 has an invalid length.
[  179.398062][ T8914] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1296'.
[  179.427481][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1300'.
[  180.045408][ T8956] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1310'.
[  180.464421][ T8985] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1324'.
[  181.285019][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'.
[  185.554459][ T9146] netlink: zone id is out of range
[  185.556483][ T9146] netlink: zone id is out of range
[  185.572936][ T9146] netlink: set zone limit has 4 unknown bytes
[  185.577416][ T9146] netlink: del zone limit has 4 unknown bytes
[  185.596994][ T9146] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1369'.
[  187.587814][ T9195] bridge0: port 3(team0) entered disabled state
[  187.714162][ T9195] bridge_slave_1: left allmulticast mode
[  187.717614][ T9195] bridge_slave_1: left promiscuous mode
[  187.731266][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.219729][ T9195] bridge_slave_0: left allmulticast mode
[  188.222454][ T9195] bridge_slave_0: left promiscuous mode
[  188.225303][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.760773][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'.
[  188.765910][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'.
[  188.770252][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1400'.
[  188.983402][ T9233] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1403'.
[  189.195371][ T9243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1408'.
[  189.198403][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1408'.
[  189.724796][ T9260] netlink: 'syz.0.1413': attribute type 2 has an invalid length.
[  189.728480][ T9260] netlink: 'syz.0.1413': attribute type 8 has an invalid length.
[  189.731326][ T9260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1413'.
[  189.805142][ T9263] netlink: 'syz.0.1414': attribute type 29 has an invalid length.
[  189.815577][ T9263] netlink: 'syz.0.1414': attribute type 29 has an invalid length.
[  189.821061][ T9263] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1414'.
[  189.825097][ T9263] unsupported nla_type 58
[  190.798274][ T9287] netlink: 'syz.1.1424': attribute type 16 has an invalid length.
[  190.813298][ T9287] netlink: 'syz.1.1424': attribute type 3 has an invalid length.
[  190.816937][ T9287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1424'.
[  190.956411][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'.
[  190.960461][ T9295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1428'.
[  191.003573][ T9299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1429'.
[  191.018228][ T9299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1429'.
[  192.430309][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'.
[  193.368503][ T9395] netlink: 'syz.2.1472': attribute type 4 has an invalid length.
[  193.376783][ T9395] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1472'.
[  193.398186][ T9395] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  193.589450][ T9405] netlink: 'syz.1.1477': attribute type 25 has an invalid length.
[  193.887809][ T9423] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1484'.
[  193.889649][ T9422] sctp: [Deprecated]: syz.1.1482 (pid 9422) Use of int in max_burst socket option deprecated.
[  193.889649][ T9422] Use struct sctp_assoc_value instead
[  194.253919][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.257185][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.365768][ T9452] netlink: 208344 bytes leftover after parsing attributes in process `syz.1.1497'.
[  195.371991][ T9452] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  195.375682][ T9452] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  196.328913][ T5893] Bluetooth: hci2: command 0x0406 tx timeout
[  196.329037][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  196.457919][ T9493] bridge0: port 3(batadv0) entered disabled state
[  196.556803][ T9493] bridge_slave_1: left allmulticast mode
[  196.559851][ T9493] bridge_slave_1: left promiscuous mode
[  196.563411][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.570597][ T9493] bridge_slave_0: left allmulticast mode
[  196.573118][ T9493] bridge_slave_0: left promiscuous mode
[  196.575158][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.141608][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'.
[  197.237543][ T9529] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  198.431989][ T9556] netlink: 'syz.1.1535': attribute type 28 has an invalid length.
[  199.770388][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'.
[  200.024612][ T9609] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1561'.
[  200.205741][ T9601] lo speed is unknown, defaulting to 1000
[  200.536014][ T9634] netlink: 'syz.2.1568': attribute type 21 has an invalid length.
[  200.539516][ T9634] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1568'.
[  201.191593][ T9666] netlink: 'syz.1.1582': attribute type 3 has an invalid length.
[  201.194366][ T9666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1582'.
[  201.235225][ T9669] netlink: 'syz.1.1583': attribute type 11 has an invalid length.
[  201.238259][ T9669] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1583'.
[  201.255827][ T9669] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  201.263022][ T9669] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1583'.
[  201.268518][ T9668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.525176][ T9640] delete_channel: no stack
[  202.135798][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'.
[  202.139554][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'.
[  202.362019][ T9695] netlink: 'syz.0.1595': attribute type 46 has an invalid length.
[  202.730992][ T5234] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  203.133306][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'.
[  203.139910][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'.
[  203.195265][ T9739] netlink: 'syz.2.1611': attribute type 10 has an invalid length.
[  203.510859][ T9763] netlink: 'syz.1.1617': attribute type 10 has an invalid length.
[  205.024698][ T9781] netlink: 'syz.1.1626': attribute type 31 has an invalid length.
[  205.401915][ T9798] netlink: 'syz.2.1634': attribute type 29 has an invalid length.
[  205.411181][ T9798] netlink: 'syz.2.1634': attribute type 29 has an invalid length.
[  205.417212][ T9798] netlink: 'syz.2.1634': attribute type 29 has an invalid length.
[  205.593612][ T9784] cgroup: fork rejected by pids controller in /syz0
[  205.643434][ T9806] netlink: 'syz.2.1636': attribute type 10 has an invalid length.
[  206.138559][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.217988][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.264333][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.330927][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.395489][ T5889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  206.399411][ T5889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  206.409123][ T5889] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  206.413884][ T5889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.417791][ T5889] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.521950][   T13] bridge_slave_1: left allmulticast mode
[  206.526679][   T13] bridge_slave_1: left promiscuous mode
[  206.549943][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.582398][   T13] bridge_slave_0: left allmulticast mode
[  206.584257][   T13] bridge_slave_0: left promiscuous mode
[  206.586982][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.966509][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.974766][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.979998][   T13] bond0 (unregistering): Released all slaves
[  206.993255][ T9812] lo speed is unknown, defaulting to 1000
[  207.013399][ T9837] : port 1(erspan0) entered blocking state
[  207.016737][ T1093] smc: removing ib device syz1
[  207.021674][ T9837] : port 1(erspan0) entered disabled state
[  207.025350][ T9837] erspan0: entered allmulticast mode
[  207.042750][ T9837] erspan0: entered promiscuous mode
[  207.752586][ T9812] chnl_net:caif_netlink_parms(): no params data found
[  208.131121][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.133798][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.136958][ T9812] bridge_slave_0: entered allmulticast mode
[  208.163641][ T9812] bridge_slave_0: entered promiscuous mode
[  208.203374][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.206642][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.210495][ T9812] bridge_slave_1: entered allmulticast mode
[  208.215929][ T9812] bridge_slave_1: entered promiscuous mode
[  208.416819][ T9812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.425912][ T9812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.499605][ T5889] Bluetooth: hci1: command tx timeout
[  208.904297][ T9812] team0: Port device team_slave_0 added
[  208.946337][ T9812] team0: Port device team_slave_1 added
[  209.014642][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.016915][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.025169][ T9812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.030564][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.032772][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.041849][ T9812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.125220][   T13] hsr_slave_0: left promiscuous mode
[  209.128098][   T13] hsr_slave_1: left promiscuous mode
[  209.134913][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.137609][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.144853][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.147602][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.172234][   T13] veth1_macvtap: left promiscuous mode
[  209.174790][   T13] veth0_macvtap: left promiscuous mode
[  209.177193][   T13] veth1_vlan: left promiscuous mode
[  209.184985][   T13] veth0_vlan: left promiscuous mode
[  209.523910][   T13] team0 (unregistering): Port device team_slave_1 removed
[  209.553284][   T13] team0 (unregistering): Port device C removed
[  209.848200][ T9812] hsr_slave_0: entered promiscuous mode
[  209.856131][ T9812] hsr_slave_1: entered promiscuous mode
[  210.341978][ T9939] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1680'.
[  210.352834][ T9940] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1679'.
[  210.375314][ T9943] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1681'.
[  210.570211][ T5889] Bluetooth: hci1: command tx timeout
[  210.646666][ T9812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  210.660657][ T9812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  210.665996][ T9812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  210.675300][ T9812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  210.721053][ T9962] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1687'.
[  210.749846][ T9962] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1687'.
[  210.791145][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.805208][ T9812] 8021q: adding VLAN 0 to HW filter on device team0
[  210.812675][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.815022][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.826889][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.830015][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.145875][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.195891][ T9812] veth0_vlan: entered promiscuous mode
[  211.202913][ T9812] veth1_vlan: entered promiscuous mode
[  211.228927][ T9993] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1693'.
[  211.253626][ T9812] veth0_macvtap: entered promiscuous mode
[  211.270978][ T9812] veth1_macvtap: entered promiscuous mode
[  211.311693][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.349406][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.377226][ T5922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.389213][ T5922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.392834][ T5922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.396588][ T5922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.493532][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.507252][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.580988][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.584289][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.787746][T10017] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.1697'.
[  211.913714][T10020] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1698'.
[  212.355410][T10043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1705'.
[  212.367839][T10043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1705'.
[  212.650525][ T5889] Bluetooth: hci1: command tx timeout
[  212.748967][T10057] netlink: 'syz.2.1711': attribute type 46 has an invalid length.
[  213.061992][T10079] netlink: 'syz.1.1722': attribute type 17 has an invalid length.
[  213.065284][T10079] netlink: 'syz.1.1722': attribute type 16 has an invalid length.
[  213.157726][ T5889] Bluetooth: hci0: ISO packet too small
[  214.730022][ T5889] Bluetooth: hci1: command tx timeout
[  214.943552][T10146] netlink: 'syz.2.1749': attribute type 1 has an invalid length.
[  216.210937][T10168] __nla_validate_parse: 7 callbacks suppressed
[  216.210950][T10168] netlink: 4200 bytes leftover after parsing attributes in process `syz.2.1759'.
[  216.796838][T10181] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1764'.
[  216.891372][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1766'.
[  216.895238][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1766'.
[  217.016571][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1766'.
[  217.030061][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1766'.
[  217.056097][T10189] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1767'.
[  217.064090][T10189] netlink: 6264 bytes leftover after parsing attributes in process `syz.0.1767'.
[  217.067826][T10189] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1767'.
[  217.115869][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1766'.
[  218.834326][T10255] netlink: 'syz.1.1797': attribute type 1 has an invalid length.
[  218.837070][T10255] netlink: 'syz.1.1797': attribute type 1 has an invalid length.
[  219.990082][T10283] syzkaller0: entered promiscuous mode
[  219.991891][T10283] syzkaller0: entered allmulticast mode
[  220.216099][T10297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.484694][T10308] C: renamed from team_slave_0 (while UP)
[  220.491434][T10308] netlink: 'syz.0.1821': attribute type 3 has an invalid length.
[  220.494197][T10308] netlink: 'syz.0.1821': attribute type 1 has an invalid length.
[  220.496997][T10308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  221.124707][T10350] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  221.597366][T10368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.196071][T10390] __nla_validate_parse: 5 callbacks suppressed
[  222.196124][T10390] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1857'.
[  222.286114][T10397] : entered promiscuous mode
[  222.475680][T10413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1867'.
[  222.481617][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1867'.
[  222.595570][T10415] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1869'.
[  222.640628][T10418] syzkaller0: entered promiscuous mode
[  222.642431][T10418] syzkaller0: entered allmulticast mode
[  222.695601][T10427] netlink: 'syz.1.1874': attribute type 11 has an invalid length.
[  224.020357][ T5889] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  224.028145][ T5889] Bluetooth: hci1: Injecting HCI hardware error event
[  224.032474][ T5889] Bluetooth: hci1: hardware error 0x00
[  224.234756][T10442] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1881'.
[  224.237860][T10442] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1881'.
[  224.366648][T10454] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1884'.
[  224.419538][T10454] : renamed from gre0 (while UP)
[  224.479582][T10460] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1888'.
[  224.573471][T10469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1892'.
[  224.581093][T10469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1892'.
[  226.102910][ T5889] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  226.808537][T10563] syzkaller0: entered promiscuous mode
[  226.812624][T10563] syzkaller0: entered allmulticast mode
[  227.203728][T10570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.656434][T10612] netlink: 'syz.1.1957': attribute type 9 has an invalid length.
[  228.661459][T10612] __nla_validate_parse: 10 callbacks suppressed
[  228.661476][T10612] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1957'.
[  229.328126][T10638] netlink: 'syz.2.1968': attribute type 21 has an invalid length.
[  230.117506][T10643] netlink: 'syz.0.1970': attribute type 39 has an invalid length.
[  230.707262][T10649] netlink: 'syz.2.1972': attribute type 21 has an invalid length.
[  231.074207][T10672] netlink: 'syz.1.1982': attribute type 10 has an invalid length.
[  231.078037][T10672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1982'.
[  231.083359][T10672] ipvlan1: entered promiscuous mode
[  231.086084][T10672] ipvlan1: entered allmulticast mode
[  231.087740][T10672] veth0_vlan: entered allmulticast mode
[  231.093209][T10672] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  231.252124][T10680] delete_channel: no stack
[  231.351226][T10689] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1991'.
[  231.354005][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'.
[  231.358120][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'.
[  231.532504][T10696] netlink: 'syz.2.1994': attribute type 21 has an invalid length.
[  231.536119][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1994'.
[  231.802612][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'.
[  231.807235][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'.
[  235.025724][T10727] bpf: Bad value for 'mode'
[  237.681331][T10735] C: renamed from team_slave_0 (while UP)
[  237.690630][T10735] netlink: 'syz.1.2010': attribute type 3 has an invalid length.
[  237.693694][T10735] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2010'.
[  237.698129][T10735] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  237.761294][T10740] netlink: 'syz.2.2012': attribute type 16 has an invalid length.
[  237.765424][T10740] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2012'.
[  237.783396][T10740] bridge_slave_0: entered allmulticast mode
[  237.842265][T10749] netlink: 'syz.1.2016': attribute type 21 has an invalid length.
[  238.720213][T10760] netlink: 'syz.1.2020': attribute type 10 has an invalid length.
[  238.911176][T10760] veth0_vlan: left promiscuous mode
[  238.935299][T10760] veth0_vlan: entered promiscuous mode
[  238.979281][T10760] team0: Device veth0_vlan failed to register rx_handler
[  239.223882][T10767] netlink: 'syz.0.2023': attribute type 1 has an invalid length.
[  239.398276][T10771] netlink: 'syz.0.2025': attribute type 7 has an invalid length.
[  239.403413][T10771] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2025'.
[  239.465885][T10772] delete_channel: no stack
[  239.490804][T10775] netlink: 'syz.2.2027': attribute type 10 has an invalid length.
[  239.494198][T10775] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2027'.
[  239.497792][T10775] bond0: entered promiscuous mode
[  239.504413][T10775] bond_slave_0: entered promiscuous mode
[  239.507023][T10775] bond_slave_1: entered promiscuous mode
[  239.598029][T10781] netlink: 'syz.1.2030': attribute type 21 has an invalid length.
[  239.603009][T10781] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2030'.
[  239.687364][T10785] raw_sendmsg: syz.2.2032 forgot to set AF_INET. Fix it!
[  239.694299][T10787] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.2033'.
[  239.765857][T10793] netlink: 'syz.1.2036': attribute type 4 has an invalid length.
[  239.777813][T10790] netlink: 'syz.2.2035': attribute type 10 has an invalid length.
[  239.816575][T10790] geneve1: entered promiscuous mode
[  239.819866][T10790] geneve1: entered allmulticast mode
[  239.824828][T10790] team0: Port device geneve1 added
[  240.283888][T10812] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2044'.
[  240.302076][T10810] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2041'.
[  241.060238][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'.
[  241.215474][T10834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2053'.
[  241.939546][T10846] team0: entered promiscuous mode
[  241.941830][T10846] C: entered promiscuous mode
[  241.944171][T10846] team_slave_1: entered promiscuous mode
[  241.946898][T10846] team0: entered allmulticast mode
[  241.951713][T10846] C: entered allmulticast mode
[  241.953877][T10846] team_slave_1: entered allmulticast mode
[  241.957099][T10846] bridge0: port 3(team0) entered blocking state
[  241.960497][T10846] bridge0: port 3(team0) entered disabled state
[  241.966127][T10846] bridge0: port 3(team0) entered blocking state
[  241.968931][T10846] bridge0: port 3(team0) entered forwarding state
[  242.444411][T10864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.847169][T10893] __nla_validate_parse: 8 callbacks suppressed
[  242.847185][T10893] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2079'.
[  242.888064][T10895] validate_nla: 4 callbacks suppressed
[  242.888082][T10895] netlink: 'syz.0.2080': attribute type 21 has an invalid length.
[  242.894484][T10895] netlink: 14045 bytes leftover after parsing attributes in process `syz.0.2080'.
[  243.514407][T10917] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  243.516747][T10917] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  243.573187][T10921] netlink: 'syz.2.2092': attribute type 9 has an invalid length.
[  243.672465][T10929] netlink: 'syz.1.2096': attribute type 19 has an invalid length.
[  243.914963][T10942] netlink: 'syz.2.2101': attribute type 21 has an invalid length.
[  244.896325][T10990] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2124'.
[  245.008068][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'.
[  246.818407][T11058] netlink: 'syz.2.2155': attribute type 5 has an invalid length.
[  247.053584][T11075] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2162'.
[  247.521972][T11077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2163'.
[  247.946508][T11092] netlink: 'syz.2.2168': attribute type 28 has an invalid length.
[  247.949917][T11092] netlink: 'syz.2.2168': attribute type 4 has an invalid length.
[  247.953823][T11092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2168'.
[  249.711744][T11099] netlink: 'syz.1.2170': attribute type 29 has an invalid length.
[  250.777431][T11112] netlink: 'syz.1.2176': attribute type 39 has an invalid length.
[  251.009626][T11121] netlink: 'syz.0.2179': attribute type 2 has an invalid length.
[  251.019346][T11121] netlink: 'syz.0.2179': attribute type 1 has an invalid length.
[  251.022414][T11121] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2179'.
[  251.027672][T11121] block nbd5: not configured, cannot reconfigure
[  251.130339][T11122] netlink: 'syz.2.2180': attribute type 10 has an invalid length.
[  251.169886][T11131] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2183'.
[  251.283536][T11137] netlink: 'syz.1.2185': attribute type 10 has an invalid length.
[  251.376464][T11137] geneve0: entered promiscuous mode
[  251.405382][T11137] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  251.618386][T11152] lo speed is unknown, defaulting to 1000
[  252.293898][T11168] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2199'.
[  252.762683][T11189] netlink: 'syz.0.2209': attribute type 29 has an invalid length.
[  254.222076][T11205] sock: sock_set_timeout: `syz.0.2216' (pid 11205) tries to set negative timeout
[  254.599981][T11224] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2225'.
[  254.614977][T11224] netlink: 'syz.2.2225': attribute type 3 has an invalid length.
[  254.622305][T11224] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  255.127891][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2233'.
[  255.133526][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2233'.
[  255.136939][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2233'.
[  255.224683][T11244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2234'.
[  255.600155][T11158] Set syz1 is full, maxelem 65536 reached
[  255.693249][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.695360][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.148535][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'.
[  256.286819][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'.
[  256.299480][T11277] lo speed is unknown, defaulting to 1000
[  256.386090][T11283] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  256.735056][T11289] netlink: 'syz.2.2252': attribute type 10 has an invalid length.
[  256.744177][T11289] team0: left promiscuous mode
[  256.748046][T11289] C: left promiscuous mode
[  256.762501][T11289] team_slave_1: left promiscuous mode
[  256.764977][T11289] geneve1: left promiscuous mode
[  256.767195][T11289] team0: left allmulticast mode
[  256.772475][T11289] C: left allmulticast mode
[  256.774357][T11289] team_slave_1: left allmulticast mode
[  256.776477][T11289] geneve1: left allmulticast mode
[  256.792245][T11289] team0: Cannot enslave team device to itself
[  258.172952][T11311] netlink: 'syz.0.2262': attribute type 4 has an invalid length.
[  258.175726][T11311] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.2262'.
[  258.937537][T11357] netlink: 'syz.0.2283': attribute type 39 has an invalid length.
[  259.105199][T11359] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2284'.
[  259.230337][T11327] delete_channel: no stack
[  259.427341][T11373] lo speed is unknown, defaulting to 1000
[  259.622327][T11391] netlink: 'syz.2.2298': attribute type 11 has an invalid length.
[  259.999489][T11408] netlink: 'syz.2.2306': attribute type 2 has an invalid length.
[  260.010371][T11408] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2306'.
[  260.262934][T11425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2314'.
[  260.501323][T11433] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2318'.
[  260.678478][T11443] netlink: 'syz.1.2322': attribute type 29 has an invalid length.
[  260.686867][T11443] netlink: 'syz.1.2322': attribute type 29 has an invalid length.
[  261.811753][T11478] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2335'.
[  261.999679][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  262.002580][T11492] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2345'.
[  262.041350][T11496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  262.044652][T11496] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2346'.
[  262.047807][T11496] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2346'.
[  265.053170][T11611] netlink: 'syz.1.2373': attribute type 13 has an invalid length.
[  265.068830][T11611] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.2373'.
[  265.294691][T11619] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2376'.
[  265.364961][T11623] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2377'.
[  265.549900][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'.
[  266.047417][T11648] netlink: 'syz.1.2389': attribute type 33 has an invalid length.
[  266.157726][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'.
[  266.791464][T11658] netlink: 208344 bytes leftover after parsing attributes in process `syz.1.2393'.
[  267.378254][T11699] bridge0: port 3(team0) entered disabled state
[  267.383040][T11699] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.393057][T11699] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.473832][T11703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2415'.
[  268.098725][T11717] netlink: 'syz.1.2420': attribute type 6 has an invalid length.
[  268.177859][T11723] netlink: 'syz.1.2425': attribute type 12 has an invalid length.
[  268.184161][T11723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2425'.
[  268.617582][T11756] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2440'.
[  269.509674][T11764] sctp: [Deprecated]: syz.1.2443 (pid 11764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.509674][T11764] Use struct sctp_sack_info instead
[  269.641530][T11768] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2445'.
[  269.690685][T11772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  269.694033][T11772] IPv6: NLM_F_CREATE should be set when creating new route
[  269.697106][T11772] IPv6: NLM_F_CREATE should be set when creating new route
[  270.652270][T11796] pim6reg0: tun_chr_ioctl cmd 1074025681
[  270.679661][T11798] netlink: 'syz.1.2459': attribute type 4 has an invalid length.
[  270.769873][T11805] netlink: 'syz.0.2461': attribute type 4 has an invalid length.
[  271.122827][T11820] __nla_validate_parse: 1 callbacks suppressed
[  271.122944][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2469'.
[  273.361600][T11827] netlink: 'syz.0.2472': attribute type 10 has an invalid length.
[  273.481160][T11836] netlink: 'syz.1.2475': attribute type 2 has an invalid length.
[  273.483866][T11836] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2475'.
[  273.491261][T11836] nbd: must specify a device to reconfigure
[  274.007844][T11853] netlink: 'syz.0.2483': attribute type 23 has an invalid length.
[  274.094507][T11860] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2486'.
[  274.133756][T11865] netlink: 'syz.1.2489': attribute type 10 has an invalid length.
[  274.136701][T11865] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.2489'.
[  274.194256][T11870] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2490'.
[  275.332313][T11902] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2503'.
[  275.335224][T11902] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2503'.
[  275.492741][T11910] netlink: 'syz.1.2507': attribute type 29 has an invalid length.
[  275.508927][T11910] netlink: 'syz.1.2507': attribute type 29 has an invalid length.
[  275.517437][T11910] netlink: 'syz.1.2507': attribute type 29 has an invalid length.
[  276.117923][T11944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2522'.
[  276.124104][T11944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2522'.
[  276.296749][T11951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'.
[  276.302257][T11951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'.
[  276.799229][T11978] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2538'.
[  277.586192][T12005] netlink: 'syz.0.2551': attribute type 39 has an invalid length.
[  278.055458][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2550'.
[  278.558349][T12037] netlink: 'syz.2.2565': attribute type 3 has an invalid length.
[  278.567934][T12037] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.2565'.
[  278.588300][T12037] netlink: 'syz.2.2565': attribute type 3 has an invalid length.
[  278.592031][T12039] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2566'.
[  278.595761][T12039] netlink: zone id is out of range
[  278.597871][T12039] netlink: zone id is out of range
[  278.602554][T12037] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.2565'.
[  278.605304][T12041] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2567'.
[  278.606427][T12039] netlink: zone id is out of range
[  278.610736][T12041] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  278.612267][T12039] netlink: zone id is out of range
[  278.615134][T12041] openvswitch: netlink: Message has 6324 unknown bytes.
[  278.617852][T12039] netlink: zone id is out of range
[  278.629755][T12039] netlink: zone id is out of range
[  278.638868][T12039] netlink: zone id is out of range
[  278.642883][T12039] netlink: zone id is out of range
[  278.930053][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'.
[  278.932912][T12054] netlink: 'syz.0.2573': attribute type 3 has an invalid length.
[  279.144942][T12055] sit0: entered allmulticast mode
[  280.177349][T12102] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2595'.
[  280.332125][T12112] netlink: 'syz.2.2600': attribute type 21 has an invalid length.
[  281.546222][T12119] sit0: entered promiscuous mode
[  281.922471][T12133] __nla_validate_parse: 4 callbacks suppressed
[  281.922488][T12133] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2608'.
[  282.017116][T12135] lo speed is unknown, defaulting to 1000
[  282.053620][T12142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2609'.
[  282.074572][ T5889] Bluetooth: hci0: ISO packet for unknown connection handle 3327
[  282.077663][ T5889] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  282.189447][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'.
[  282.425058][T12166] netlink: 'syz.0.2621': attribute type 1 has an invalid length.
[  282.427771][T12166] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2621'.
[  283.080868][ T5234] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  283.236722][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'.
[  283.521509][T12239] netlink: 'syz.0.2656': attribute type 4 has an invalid length.
[  283.524195][T12239] netlink: 211448 bytes leftover after parsing attributes in process `syz.0.2656'.
[  283.618236][T12242] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.2658'.
[  283.629720][T12242] net_ratelimit: 78 callbacks suppressed
[  283.629772][T12242] openvswitch: netlink: Message has 6 unknown bytes.
[  283.733657][T12255] netlink: 'syz.0.2663': attribute type 39 has an invalid length.
[  283.737847][T12255] veth0_macvtap: left promiscuous mode
[  283.744229][T12257] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2664'.
[  283.920877][T12269] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2668'.
[  284.310907][T12288] netlink: 'syz.0.2678': attribute type 4 has an invalid length.
[  285.582452][T12327] netlink: 'syz.2.2695': attribute type 3 has an invalid length.
[  285.585572][T12327] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2695'.
[  287.236712][T12368] netlink: 'syz.2.2712': attribute type 21 has an invalid length.
[  287.244076][T12368] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2712'.
[  287.285769][T12371] netlink: 'syz.2.2713': attribute type 2 has an invalid length.
[  287.288451][T12371] netlink: 'syz.2.2713': attribute type 1 has an invalid length.
[  287.394017][T12382] netlink: 'syz.2.2716': attribute type 12 has an invalid length.
[  287.397218][T12382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2716'.
[  287.641427][T12404] netlink: 'syz.2.2725': attribute type 10 has an invalid length.
[  287.644596][T12404] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2725'.
[  288.128001][T12424] netlink: 'syz.2.2733': attribute type 1 has an invalid length.
[  288.542139][T12450] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.2746'.
[  288.546637][T12450] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2746'.
[  289.091752][T12486] netlink: 'syz.1.2764': attribute type 21 has an invalid length.
[  289.271618][T12494] veth1_to_bond: entered allmulticast mode
[  289.665925][T12522] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.2779'.
[  289.669657][T12522] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2779'.
[  290.712771][T12543] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2788'.
[  290.715959][T12543] bond_slave_1: left promiscuous mode
[  290.718125][T12543] C: left promiscuous mode
[  290.719770][T12543] team_slave_1: left promiscuous mode
[  290.726560][T12543] syz_tun: left promiscuous mode
[  290.907161][T12543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.924384][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  290.934251][T12543] bond0 (unregistering): (slave team0): Releasing backup interface
[  290.945132][T12543] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  290.963900][T12543] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  290.972615][T12543] bond0 (unregistering): Released all slaves
[  291.260478][T12567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2799'.
[  292.244079][T12574] blkio.reset_stats is deprecated
[  292.626578][T12591] netlink: 'syz.2.2809': attribute type 3 has an invalid length.
[  292.633216][T12591] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2809'.
[  293.247905][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'.
[  293.620955][T12634] netlink: 'syz.2.2827': attribute type 21 has an invalid length.
[  293.626920][T12634] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2827'.
[  294.373543][T12638] netlink: 'syz.0.2829': attribute type 1 has an invalid length.
[  295.403365][T12629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2827'.
[  295.406400][T12634] netlink: 'syz.2.2827': attribute type 4 has an invalid length.
[  295.410168][T12634] netlink: 'syz.2.2827': attribute type 5 has an invalid length.
[  295.412650][T12634] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2827'.
[  295.573162][T12651] netlink: 'syz.0.2835': attribute type 10 has an invalid length.
[  295.576904][T12651] lo: entered promiscuous mode
[  295.586806][T12651] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  295.653402][T12658] bridge0: port 3(team0) entered disabled state
[  296.238306][T12658] bridge_slave_1: left allmulticast mode
[  296.244808][T12658] bridge_slave_1: left promiscuous mode
[  296.249589][T12658] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.347881][T12663] netlink: 'syz.1.2840': attribute type 21 has an invalid length.
[  296.371932][T12658] bridge_slave_0: left allmulticast mode
[  296.374350][T12658] bridge_slave_0: left promiscuous mode
[  296.376867][T12658] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.444416][T12663] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2840'.
[  298.426422][T12707] syzkaller1: tun_chr_ioctl cmd 1074025677
[  298.430206][T12707] syzkaller1: linktype set to 780
[  298.464964][T12707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2858'.
[  298.472499][T12707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2858'.
[  298.478417][T12707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2858'.
[  300.782740][T12745] lo speed is unknown, defaulting to 1000
[  300.823386][T12749] netlink: 2451 bytes leftover after parsing attributes in process `syz.0.2874'.
[  301.026369][T12769] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2883'.
[  301.930799][T12796] netlink: 'syz.1.2895': attribute type 6 has an invalid length.
[  301.934164][T12796] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2895'.
[  302.041712][T12794] netlink: 'syz.0.2894': attribute type 10 has an invalid length.
[  302.271669][T12794] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  302.565271][T12804] netlink: 'syz.2.2898': attribute type 21 has an invalid length.
[  302.655078][T12812] netlink: 'syz.1.2900': attribute type 13 has an invalid length.
[  302.659645][T12812] netlink: 'syz.1.2900': attribute type 58 has an invalid length.
[  302.662836][T12812] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2900'.
[  302.831816][T12827] netlink: 'syz.1.2910': attribute type 2 has an invalid length.
[  302.833887][T12828] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  302.834913][T12827] netlink: 'syz.1.2910': attribute type 1 has an invalid length.
[  302.834946][T12827] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2910'.
[  302.834962][T12827] nbd: illegal input index 65540
[  302.933716][T12834] netlink: 'syz.1.2913': attribute type 3 has an invalid length.
[  302.938785][T12834] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2913'.
[  302.947610][T12834] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  305.334599][T12880] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.2933'.
[  305.668475][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'.
[  305.907116][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'.
[  306.216038][T12922] netlink: 'syz.2.2951': attribute type 29 has an invalid length.
[  306.465479][T12932] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2956'.
[  306.526106][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2958'.
[  306.619844][T12945] netlink: 'syz.1.2963': attribute type 2 has an invalid length.
[  306.622950][T12945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2963'.
[  306.707462][T12950] sctp: [Deprecated]: syz.1.2964 (pid 12950) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.707462][T12950] Use struct sctp_sack_info instead
[  308.123020][T12987] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2980'.
[  308.168089][T12991] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2982'.
[  308.331438][ T5234] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8
[  308.507164][T13002] validate_nla: 1 callbacks suppressed
[  308.507184][T13002] netlink: 'syz.1.2987': attribute type 21 has an invalid length.
[  308.568324][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2990'.
[  309.373254][T13049] netlink: 'syz.2.3000': attribute type 6 has an invalid length.
[  309.376379][T13049] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3000'.
[  310.332686][T13060] netlink: 'syz.1.3009': attribute type 21 has an invalid length.
[  310.335600][T13060] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.367794][T13064] ksmbd: Unknown IPC event: 1, ignore.
[  310.438484][T13067] lo speed is unknown, defaulting to 1000
[  310.542449][T13067] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  310.585037][T13082] netlink: 'syz.0.3018': attribute type 10 has an invalid length.
[  310.587656][T13082] __nla_validate_parse: 1 callbacks suppressed
[  310.587794][T13082] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3018'.
[  310.704804][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'.
[  310.787057][T13096] netlink: 'syz.2.3024': attribute type 29 has an invalid length.
[  312.272461][T13120] syzkaller0: entered promiscuous mode
[  312.279209][T13120] syzkaller0: entered allmulticast mode
[  312.513942][T13133] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3041'.
[  312.846584][T13138] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3044'.
[  314.462410][T13152] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3050'.
[  315.817770][T13178] netlink: 'syz.1.3061': attribute type 21 has an invalid length.
[  315.893115][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'.
[  317.136583][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.139019][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.662868][T13255] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3093'.
[  317.700380][T13257] netlink: 'syz.0.3094': attribute type 1 has an invalid length.
[  317.702977][T13257] netlink: 'syz.0.3094': attribute type 2 has an invalid length.
[  317.714635][T13258] netlink: 'syz.2.3091': attribute type 9 has an invalid length.
[  317.718226][T13258] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3091'.
[  318.233765][T13295] netlink: 'syz.0.3109': attribute type 10 has an invalid length.
[  318.236750][T13295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.245603][T13295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.251628][T13295] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  318.316454][T13299] netlink: 'syz.2.3112': attribute type 46 has an invalid length.
[  318.649983][T13314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3119'.
[  318.653917][T13314] openvswitch: netlink: Flow actions attr not present in new flow.
[  318.695570][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'.
[  318.702374][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'.
[  319.683426][T13334] netlink: 'syz.0.3128': attribute type 21 has an invalid length.
[  319.687046][T13334] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.3128'.
[  319.737623][T13336] netlink: 'syz.0.3129': attribute type 23 has an invalid length.
[  319.869836][T13338] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3130'.
[  320.129085][T13346] netlink: 'syz.0.3134': attribute type 3 has an invalid length.
[  320.256938][T13355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3138'.
[  320.582945][T13377] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3149'.
[  321.304370][T13403] __nla_validate_parse: 2 callbacks suppressed
[  321.304391][T13403] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.3159'.
[  321.311301][T13403] netlink: 'syz.2.3159': attribute type 3 has an invalid length.
[  321.719689][T13409] lo speed is unknown, defaulting to 1000
[  321.766299][T13411] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.3162'.
[  321.923292][T13417] netlink: 'syz.1.3164': attribute type 16 has an invalid length.
[  321.926848][T13417] netlink: 'syz.1.3164': attribute type 3 has an invalid length.
[  321.948834][T13417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3164'.
[  322.429432][T13433] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3172'.
[  322.432822][T13433] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.3172'.
[  322.436241][T13433] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3172'.
[  322.903375][T13441] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  323.195813][T13466] netlink: 'syz.0.3186': attribute type 3 has an invalid length.
[  323.198264][T13466] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3186'.
[  323.261136][T13468] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3188'.
[  323.265271][T13468] netlink: 'syz.2.3188': attribute type 1 has an invalid length.
[  323.419554][T13478] lo: entered allmulticast mode
[  323.428871][T13478] lo: entered promiscuous mode
[  323.430443][T13478] lo: left allmulticast mode
[  323.525113][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3195'.
[  323.662196][T13486] syzkaller0: entered promiscuous mode
[  323.664697][T13486] syzkaller0: entered allmulticast mode
[  323.799390][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'.
[  324.887615][T13510] netlink: 'syz.0.3204': attribute type 6 has an invalid length.
[  325.463460][T13524] netlink: 'syz.1.3211': attribute type 11 has an invalid length.
[  325.961228][T13551] openvswitch: netlink: Message has 4 unknown bytes.
[  326.304460][T13572] tap0: tun_chr_ioctl cmd 1074812118
[  326.334300][T13570] __nla_validate_parse: 6 callbacks suppressed
[  326.334341][T13570] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.3232'.
[  326.341689][T13570] openvswitch: netlink: Message has 6 unknown bytes.
[  326.383989][T13570] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.388258][T13570] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.423100][T13627] netlink: 'syz.2.3257': attribute type 3 has an invalid length.
[  327.428729][T13627] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3257'.
[  327.521555][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'.
[  327.601903][T13641] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3264'.
[  327.717584][T13650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.726893][T13647] netlink: 'syz.2.3267': attribute type 29 has an invalid length.
[  327.759069][T13655] netlink: 'syz.2.3270': attribute type 2 has an invalid length.
[  327.769801][T13655] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3270'.
[  327.774293][T13655] netlink: 'syz.2.3270': attribute type 2 has an invalid length.
[  327.777619][T13655] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3270'.
[  327.991310][T13666] netlink: 'syz.1.3275': attribute type 10 has an invalid length.
[  328.003988][T13666] team0: Device hsr_slave_0 failed to register rx_handler
[  332.044776][T13722] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3299'.
[  332.573853][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'.
[  332.577271][T13750] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3313'.
[  332.582754][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'.
[  332.801441][ T5234] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  333.105730][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'.
[  333.708956][T13802] netlink: 'syz.0.3336': attribute type 1 has an invalid length.
[  333.711557][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'.
[  333.792319][T13808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.663865][T13855] delete_channel: no stack
[  335.849869][T13861] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3364'.
[  338.966579][T13873] tap0: tun_chr_ioctl cmd 1074025677
[  338.969528][T13873] tap0: linktype set to 825
[  339.105894][T13890] : entered promiscuous mode
[  339.227891][T13901] netlink: 'syz.2.3379': attribute type 10 has an invalid length.
[  339.238893][T13901] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3379'.
[  339.524408][T13919] netlink: 'syz.1.3389': attribute type 10 has an invalid length.
[  339.531911][T13919] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3389'.
[  340.059835][T13931] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3393'.
[  340.062820][T13931] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.3393'.
[  340.065800][T13931] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3393'.
[  340.497564][T13933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3394'.
[  340.653067][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'.
[  340.657716][T13944] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3399'.
[  341.362915][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  341.376179][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  341.570537][T13968] netlink: 'syz.2.3410': attribute type 2 has an invalid length.
[  341.611322][T13971] openvswitch: netlink: Message has 6 unknown bytes.
[  341.894954][T13979] syzkaller0: entered promiscuous mode
[  341.897237][T13979] syzkaller0: entered allmulticast mode
[  342.528088][T14010] openvswitch: netlink: IP tunnel dst address not specified
[  343.154893][T14026] dvmrp1: tun_chr_ioctl cmd 1074025677
[  343.156938][T14026] dvmrp1: linktype set to 773
[  343.243648][T14028] netlink: 'syz.2.3437': attribute type 21 has an invalid length.
[  343.290551][T14034] netlink: 'syz.2.3440': attribute type 16 has an invalid length.
[  343.553067][T14044] : entered promiscuous mode
[  343.575298][T14048] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  344.955564][T14104] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  344.961169][T14104] netlink: 'syz.2.3473': attribute type 10 has an invalid length.
[  344.988379][T14104] mac80211_hwsim hwsim9 .3c: entered promiscuous mode
[  344.994165][T14104] bond0: (slave .3c): Enslaving as an active interface with an up link
[  345.633441][T14133] __nla_validate_parse: 10 callbacks suppressed
[  345.633466][T14133] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3486'.
[  346.255044][T14172] netlink: 'syz.0.3504': attribute type 33 has an invalid length.
[  346.266109][T14172] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3504'.
[  346.942542][T14185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3510'.
[  346.945456][T14185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3510'.
[  347.100609][T14196] netlink: 182 bytes leftover after parsing attributes in process `syz.1.3515'.
[  347.387982][T14221] netlink: 'syz.0.3523': attribute type 40 has an invalid length.
[  347.541222][T14225] netlink: 'syz.1.3527': attribute type 10 has an invalid length.
[  347.552379][T14225] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3527'.
[  348.636476][T14248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3535'.
[  348.913151][   T33] audit: type=1107 audit(1755490378.329:2): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  349.272067][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3541'.
[  349.712578][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'.
[  349.715676][T14273] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3545'.
[  350.213312][T14280] ==================================================================
[  350.215909][T14280] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  350.218817][T14280] Read of size 2 at addr ffff888110f0f2c2 by task syz.2.3548/14280
[  350.222339][T14280] 
[  350.223666][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.2.3548 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  350.223681][T14280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.223687][T14280] Call Trace:
[  350.223706][T14280]  <TASK>
[  350.223711][T14280]  dump_stack_lvl+0x189/0x250
[  350.223725][T14280]  ? __kasan_check_byte+0x12/0x40
[  350.223739][T14280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.223749][T14280]  ? lock_release+0x4b/0x3e0
[  350.223763][T14280]  ? __virt_addr_valid+0x4a5/0x5c0
[  350.223774][T14280]  print_report+0xca/0x240
[  350.223785][T14280]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  350.223805][T14280]  kasan_report+0x118/0x150
[  350.223827][T14280]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  350.223851][T14280]  __xfrm_state_lookup+0x6ad/0x8d0
[  350.223872][T14280]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  350.223894][T14280]  xfrm_state_add+0x27d/0xc40
[  350.223913][T14280]  xfrm_add_sa+0x35a1/0x4070
[  350.223931][T14280]  ? __pfx_xfrm_add_sa+0x10/0x10
[  350.223944][T14280]  ? apparmor_capable+0x137/0x1b0
[  350.223996][T14280]  ? __nla_parse+0x40/0x60
[  350.224015][T14280]  xfrm_user_rcv_msg+0x7a3/0xab0
[  350.224033][T14280]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.224062][T14280]  ? __pfx___mutex_trylock_common+0x10/0x10
[  350.224079][T14280]  ? rcu_is_watching+0x15/0xb0
[  350.224093][T14280]  ? trace_contention_end+0x39/0x120
[  350.224108][T14280]  ? __mutex_lock+0x335/0x1360
[  350.224129][T14280]  netlink_rcv_skb+0x208/0x470
[  350.224146][T14280]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.224162][T14280]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.224188][T14280]  ? netlink_deliver_tap+0x2e/0x1b0
[  350.224208][T14280]  ? netlink_deliver_tap+0x2e/0x1b0
[  350.224228][T14280]  xfrm_netlink_rcv+0x79/0x90
[  350.224243][T14280]  netlink_unicast+0x82f/0x9e0
[  350.224265][T14280]  ? __pfx_netlink_unicast+0x10/0x10
[  350.224283][T14280]  ? netlink_sendmsg+0x642/0xb30
[  350.224297][T14280]  ? skb_put+0x11b/0x210
[  350.224307][T14280]  netlink_sendmsg+0x805/0xb30
[  350.224330][T14280]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.224351][T14280]  ? aa_sock_msg_perm+0xf1/0x1d0
[  350.224373][T14280]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  350.224389][T14280]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.224406][T14280]  __sock_sendmsg+0x21c/0x270
[  350.224418][T14280]  ____sys_sendmsg+0x505/0x830
[  350.224435][T14280]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.224452][T14280]  ? import_iovec+0x74/0xa0
[  350.224469][T14280]  ___sys_sendmsg+0x21f/0x2a0
[  350.224484][T14280]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.224509][T14280]  ? __fget_files+0x2a/0x420
[  350.224516][T14280]  ? __fget_files+0x3a0/0x420
[  350.224531][T14280]  __x64_sys_sendmsg+0x19b/0x260
[  350.224544][T14280]  ? perf_trace_run_bpf_submit+0x100/0x170
[  350.224560][T14280]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.224586][T14280]  ? rcu_is_watching+0x15/0xb0
[  350.224599][T14280]  ? do_syscall_64+0xbe/0x3b0
[  350.224618][T14280]  do_syscall_64+0xfa/0x3b0
[  350.224637][T14280]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.224655][T14280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.224669][T14280]  ? exc_page_fault+0x9f/0xf0
[  350.224688][T14280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.224702][T14280] RIP: 0033:0x7f870158ebe9
[  350.224711][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.224721][T14280] RSP: 002b:00007f870247f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.224737][T14280] RAX: ffffffffffffffda RBX: 00007f87017b5fa0 RCX: 00007f870158ebe9
[  350.224749][T14280] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  350.224759][T14280] RBP: 00007f8701611e19 R08: 0000000000000000 R09: 0000000000000000
[  350.224768][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.224777][T14280] R13: 00007f87017b6038 R14: 00007f87017b5fa0 R15: 00007ffe39d390b8
[  350.224794][T14280]  </TASK>
[  350.224799][T14280] 
[  350.360757][T14280] Allocated by task 12257:
[  350.362173][T14280]  kasan_save_track+0x3e/0x80
[  350.363672][T14280]  __kasan_slab_alloc+0x6c/0x80
[  350.365219][T14280]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  350.366947][T14280]  xfrm_state_alloc+0x24/0x2f0
[  350.368480][T14280]  __find_acq_core+0x8a7/0x1c00
[  350.370029][T14280]  xfrm_find_acq+0x78/0xa0
[  350.371451][T14280]  xfrm_alloc_userspi+0x6b3/0xc90
[  350.373073][T14280]  xfrm_user_rcv_msg+0x7a3/0xab0
[  350.374645][T14280]  netlink_rcv_skb+0x208/0x470
[  350.376168][T14280]  xfrm_netlink_rcv+0x79/0x90
[  350.377666][T14280]  netlink_unicast+0x82f/0x9e0
[  350.379182][T14280]  netlink_sendmsg+0x805/0xb30
[  350.380697][T14280]  __sock_sendmsg+0x21c/0x270
[  350.382212][T14280]  ____sys_sendmsg+0x505/0x830
[  350.383722][T14280]  ___sys_sendmsg+0x21f/0x2a0
[  350.385204][T14280]  __x64_sys_sendmsg+0x19b/0x260
[  350.386763][T14280]  do_syscall_64+0xfa/0x3b0
[  350.388267][T14280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.390167][T14280] 
[  350.391020][T14280] Freed by task 10005:
[  350.392570][T14280]  kasan_save_track+0x3e/0x80
[  350.394402][T14280]  kasan_save_free_info+0x46/0x50
[  350.396422][T14280]  __kasan_slab_free+0x5b/0x80
[  350.398613][T14280]  kmem_cache_free+0x18f/0x400
[  350.400799][T14280]  xfrm_state_gc_task+0x52d/0x6b0
[  350.403128][T14280]  process_scheduled_works+0xae1/0x17b0
[  350.405604][T14280]  worker_thread+0x8a0/0xda0
[  350.407685][T14280]  kthread+0x711/0x8a0
[  350.409519][T14280]  ret_from_fork+0x3fc/0x770
[  350.411539][T14280]  ret_from_fork_asm+0x1a/0x30
[  350.413198][T14280] 
[  350.413976][T14280] The buggy address belongs to the object at ffff888110f0f180
[  350.413976][T14280]  which belongs to the cache xfrm_state of size 928
[  350.418282][T14280] The buggy address is located 322 bytes inside of
[  350.418282][T14280]  freed 928-byte region [ffff888110f0f180, ffff888110f0f520)
[  350.422555][T14280] 
[  350.423325][T14280] The buggy address belongs to the physical page:
[  350.425344][T14280] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888110f0c900 pfn:0x110f0c
[  350.428653][T14280] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  350.431269][T14280] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  350.433678][T14280] page_type: f5(slab)
[  350.434992][T14280] raw: 057ff00000000040 ffff888105112c80 dead000000000122 0000000000000000
[  350.437631][T14280] raw: ffff888110f0c900 00000000800e0008 00000000f5000000 0000000000000000
[  350.440272][T14280] head: 057ff00000000040 ffff888105112c80 dead000000000122 0000000000000000
[  350.443299][T14280] head: ffff888110f0c900 00000000800e0008 00000000f5000000 0000000000000000
[  350.446009][T14280] head: 057ff00000000002 ffffea000443c301 00000000ffffffff 00000000ffffffff
[  350.448697][T14280] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  350.451374][T14280] page dumped because: kasan: bad access detected
[  350.453377][T14280] page_owner tracks the page as allocated
[  350.455158][T14280] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6077, tgid 6076 (syz.1.71), ts 75970116575, free_ts 74889067267
[  350.461311][T14280]  post_alloc_hook+0x240/0x2a0
[  350.462858][T14280]  get_page_from_freelist+0x21e4/0x22c0
[  350.464684][T14280]  __alloc_frozen_pages_noprof+0x181/0x370
[  350.466512][T14280]  alloc_pages_mpol+0x232/0x4a0
[  350.468053][T14280]  allocate_slab+0x8a/0x370
[  350.469505][T14280]  ___slab_alloc+0xbeb/0x1410
[  350.471218][T14280]  kmem_cache_alloc_noprof+0x283/0x3c0
[  350.472964][T14280]  xfrm_state_alloc+0x24/0x2f0
[  350.474471][T14280]  xfrm_add_sa+0x17d1/0x4070
[  350.475967][T14280]  xfrm_user_rcv_msg+0x7a3/0xab0
[  350.477531][T14280]  netlink_rcv_skb+0x208/0x470
[  350.479082][T14280]  xfrm_netlink_rcv+0x79/0x90
[  350.480836][T14280]  netlink_unicast+0x82f/0x9e0
[  350.482534][T14280]  netlink_sendmsg+0x805/0xb30
[  350.484088][T14280]  __sock_sendmsg+0x21c/0x270
[  350.485587][T14280]  ____sys_sendmsg+0x505/0x830
[  350.487111][T14280] page last free pid 6048 tgid 6045 stack trace:
[  350.489082][T14280]  __free_frozen_pages+0xbc4/0xd30
[  350.490726][T14280]  stack_depot_save_flags+0x436/0x860
[  350.492560][T14280]  kasan_save_track+0x4f/0x80
[  350.494094][T14280]  __kasan_slab_alloc+0x6c/0x80
[  350.495650][T14280]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  350.497549][T14280]  __alloc_skb+0x112/0x2d0
[  350.498993][T14280]  ndisc_alloc_skb+0x9f/0x480
[  350.500496][T14280]  ndisc_send_rs+0x2b5/0x630
[  350.501991][T14280]  addrconf_rs_timer+0x369/0x670
[  350.503573][T14280]  call_timer_fn+0x17e/0x5f0
[  350.505103][T14280]  __run_timer_base+0x61a/0x860
[  350.507076][T14280]  run_timer_softirq+0xb7/0x180
[  350.508720][T14280]  handle_softirqs+0x286/0x870
[  350.510303][T14280]  do_softirq+0xec/0x180
[  350.511660][T14280]  __local_bh_enable_ip+0x17d/0x1c0
[  350.513333][T14280]  bpf_test_run_xdp_live+0x1868/0x1b10
[  350.515093][T14280] 
[  350.515862][T14280] Memory state around the buggy address:
[  350.517652][T14280]  ffff888110f0f180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  350.520219][T14280]  ffff888110f0f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  350.522787][T14280] >ffff888110f0f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  350.525324][T14280]                                            ^
[  350.527282][T14280]  ffff888110f0f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  350.529825][T14280]  ffff888110f0f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  350.532348][T14280] ==================================================================
[  350.535198][T14280] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  350.537493][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.2.3548 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  350.541684][T14280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.544859][T14280] Call Trace:
[  350.545930][T14280]  <TASK>
[  350.546880][T14280]  dump_stack_lvl+0x99/0x250
[  350.548376][T14280]  ? __asan_memcpy+0x40/0x70
[  350.549887][T14280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.551632][T14280]  ? __pfx__printk+0x10/0x10
[  350.553125][T14280]  vpanic+0x281/0x750
[  350.554411][T14280]  ? __pfx_vpanic+0x10/0x10
[  350.555852][T14280]  ? irqentry_exit+0x74/0x90
[  350.557341][T14280]  panic+0xb9/0xc0
[  350.558545][T14280]  ? __pfx_panic+0x10/0x10
[  350.559987][T14280]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  350.561867][T14280]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  350.563764][T14280]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  350.565456][T14280]  check_panic_on_warn+0x89/0xb0
[  350.567140][T14280]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  350.568841][T14280]  end_report+0x78/0x160
[  350.570225][T14280]  kasan_report+0x129/0x150
[  350.571689][T14280]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  350.573411][T14280]  __xfrm_state_lookup+0x6ad/0x8d0
[  350.575078][T14280]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  350.576897][T14280]  xfrm_state_add+0x27d/0xc40
[  350.578406][T14280]  xfrm_add_sa+0x35a1/0x4070
[  350.579898][T14280]  ? __pfx_xfrm_add_sa+0x10/0x10
[  350.581490][T14280]  ? apparmor_capable+0x137/0x1b0
[  350.583128][T14280]  ? __nla_parse+0x40/0x60
[  350.584596][T14280]  xfrm_user_rcv_msg+0x7a3/0xab0
[  350.586240][T14280]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.587970][T14280]  ? __pfx___mutex_trylock_common+0x10/0x10
[  350.589870][T14280]  ? rcu_is_watching+0x15/0xb0
[  350.591459][T14280]  ? trace_contention_end+0x39/0x120
[  350.593174][T14280]  ? __mutex_lock+0x335/0x1360
[  350.594863][T14280]  netlink_rcv_skb+0x208/0x470
[  350.596433][T14280]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.598165][T14280]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.599818][T14280]  ? netlink_deliver_tap+0x2e/0x1b0
[  350.601569][T14280]  ? netlink_deliver_tap+0x2e/0x1b0
[  350.603234][T14280]  xfrm_netlink_rcv+0x79/0x90
[  350.604684][T14280]  netlink_unicast+0x82f/0x9e0
[  350.606273][T14280]  ? __pfx_netlink_unicast+0x10/0x10
[  350.608039][T14280]  ? netlink_sendmsg+0x642/0xb30
[  350.609700][T14280]  ? skb_put+0x11b/0x210
[  350.611174][T14280]  netlink_sendmsg+0x805/0xb30
[  350.612767][T14280]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.614529][T14280]  ? aa_sock_msg_perm+0xf1/0x1d0
[  350.616149][T14280]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  350.617887][T14280]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.619721][T14280]  __sock_sendmsg+0x21c/0x270
[  350.621241][T14280]  ____sys_sendmsg+0x505/0x830
[  350.622805][T14280]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.624498][T14280]  ? import_iovec+0x74/0xa0
[  350.626028][T14280]  ___sys_sendmsg+0x21f/0x2a0
[  350.627593][T14280]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.629313][T14280]  ? __fget_files+0x2a/0x420
[  350.630767][T14280]  ? __fget_files+0x3a0/0x420
[  350.632244][T14280]  __x64_sys_sendmsg+0x19b/0x260
[  350.633858][T14280]  ? perf_trace_run_bpf_submit+0x100/0x170
[  350.636043][T14280]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.637796][T14280]  ? rcu_is_watching+0x15/0xb0
[  350.639315][T14280]  ? do_syscall_64+0xbe/0x3b0
[  350.640822][T14280]  do_syscall_64+0xfa/0x3b0
[  350.642272][T14280]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.643921][T14280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.645839][T14280]  ? exc_page_fault+0x9f/0xf0
[  350.647368][T14280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.649292][T14280] RIP: 0033:0x7f870158ebe9
[  350.650720][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.656734][T14280] RSP: 002b:00007f870247f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.659367][T14280] RAX: ffffffffffffffda RBX: 00007f87017b5fa0 RCX: 00007f870158ebe9
[  350.661862][T14280] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  350.664355][T14280] RBP: 00007f8701611e19 R08: 0000000000000000 R09: 0000000000000000
[  350.667068][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.669614][T14280] R13: 00007f87017b6038 R14: 00007f87017b5fa0 R15: 00007ffe39d390b8
[  350.672115][T14280]  </TASK>
[  350.673749][T14280] Kernel Offset: disabled
[  350.675126][T14280] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:12:59  Registers:
info registers vcpu 0

CPU#0
RAX=6abb451200d58c00 RBX=ffffffff81968308 RCX=6abb451200d58c00 RDX=0000000000000001
RSI=ffffffff8d9b6dcb RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f13b6681440 CR3=0000000124554000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=7acbc738c5000000 00a2b90d14aa4785
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f87022ed100 00007f8701787460 XMM05=00007f8701787478 00007f87017874c0
XMM06=00007f87017874b8 00007f87017874b0 XMM07=00007f87017874a8 00007f87017874a0
XMM08=0000000000000000 00007f8701612ee7 XMM09=0000000000000000 00007f8701612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000030f6 RDI=00000000000030f7 RBP=00000000000003f8 RSP=ffffc90006cf69d0
R8 =ffff8881077d8237 R9 =1ffff11020efb046 R10=dffffc0000000000 R11=ffffffff854ef6f0
R12=dffffc0000000000 R13=ffffffff99af98c9 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef76c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f870247f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34607ff8 CR3=0000000124554000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f441a812e53
XMM06=0000000000000000 00007f441a812e4d XMM07=0000000000000000 00007f441a812e61
XMM08=0000000000000000 00007f441a812ee7 XMM09=0000000000000000 00007f441a812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
