last executing test programs:

2m18.185285076s ago: executing program 2 (id=1358):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f00000000c0), 0x4)

2m18.18410534s ago: executing program 2 (id=1361):
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0)

2m18.113733669s ago: executing program 2 (id=1363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014017000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)

2m18.053992101s ago: executing program 2 (id=1364):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x35, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x20082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffc00, 0x9, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0xa, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc8200, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, &(0x7f0000000300)=r0, 0x4)

2m17.898556948s ago: executing program 1 (id=1368):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2m17.837575637s ago: executing program 1 (id=1369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6f}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xffffffffffffff56, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)

2m17.738486658s ago: executing program 1 (id=1370):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x5a, 0x9, 0x2, 0x0, 0x6, 0x3000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x5, @perf_bp={&(0x7f0000000140)}, 0x104041, 0x5, 0x10000, 0x8, 0x0, 0x4, 0x200, 0x0, 0x9, 0x0, 0xe8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)=':\x00')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22"], 0xfdef)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ff000000000000000000000085000000090000008978fa76edaee39400000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

2m17.679926449s ago: executing program 1 (id=1372):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x38, 0x880}, 0x44040)

2m17.610408503s ago: executing program 2 (id=1373):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)

2m17.610215885s ago: executing program 1 (id=1374):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffdc29, 0x1}}, 0x20)

2m17.390471271s ago: executing program 2 (id=1375):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='-.%\x00')
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600, 0x0, 0x0, 0x0, 0x75}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[], 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff004c000000020a01"], 0xe0}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

2m17.275896234s ago: executing program 32 (id=1375):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='-.%\x00')
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600, 0x0, 0x0, 0x0, 0x75}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[], 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff004c000000020a01"], 0xe0}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

2m17.22970185s ago: executing program 1 (id=1377):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00000001000071101a000000000095"], 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2m17.082012561s ago: executing program 33 (id=1377):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00000001000071101a000000000095"], 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2m6.171676999s ago: executing program 4 (id=1486):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000740)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000680)="ae", 0x1}], 0x1}, 0x400c810)

2m6.082349987s ago: executing program 4 (id=1489):
socket$kcm(0xf, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0xf, 0x3, 0x2, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef)

2m5.998521618s ago: executing program 4 (id=1490):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2m5.947562325s ago: executing program 3 (id=1492):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="4c9bc5376b22498d87e43aad998bc9e06a919b75a5961112c82908d5b9d2241e5997e7582aa760525176d638b52a3b8d2d582be3344647d5d21810603172887708857dc880a24bb357eb15ed0cb30d9bb9c8d52d8c82afa3ac22b2452d4f894031cfb85dcf44356861d02a8998e8444c44388a78586b87101320b41aaa136a3485e9abfc1e9a52ae65feb4947f7d30983d54c6ee")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)

2m5.886446902s ago: executing program 3 (id=1494):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m5.819659991s ago: executing program 3 (id=1495):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r0})

2m5.819194347s ago: executing program 3 (id=1497):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="4c9bc5376b22498d87e43aad998bc9e06a919b75a5961112c82908d5b9d2241e5997e7582aa760525176d638b52a3b8d2d582be3344647d5d21810603172887708857dc880a24bb357eb15ed0cb30d9bb9c8d52d8c82afa3ac22b2452d4f894031cfb85dcf44356861d02a8998e8444c44388a78586b87101320b41aaa136a3485e9abfc1e9a52ae65feb4947f7d30983d54c6ee")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = socket$kcm(0x11, 0x2, 0x0)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4)

2m5.717639362s ago: executing program 4 (id=1498):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000240)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4e}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)

2m5.638445898s ago: executing program 4 (id=1500):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x24}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a)

2m5.637201732s ago: executing program 3 (id=1501):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

2m5.376100745s ago: executing program 4 (id=1502):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x70}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)

2m5.208959798s ago: executing program 34 (id=1502):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x70}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)

2m5.14926037s ago: executing program 3 (id=1504):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb904021d080006007c", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)

2m5.149195743s ago: executing program 35 (id=1504):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb904021d080006007c", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)

29.89940076s ago: executing program 6 (id=2788):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x85, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa892, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x1, 0x4}, 0x14105, 0x32, 0xfffffbff, 0x8, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100)

29.800091069s ago: executing program 6 (id=2791):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)

29.741349723s ago: executing program 6 (id=2793):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
syz_clone(0x1220000, 0x0, 0x0, 0x0, 0x0, 0x0)

28.862901419s ago: executing program 6 (id=2813):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

28.727481447s ago: executing program 6 (id=2817):
syz_clone(0x22a1080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

28.650480621s ago: executing program 6 (id=2820):
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="140000002b000b6c69000000000000", 0xf}], 0x1}, 0x480c0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="140000003800a334717f8064c15494f90b24fc600f", 0x15}], 0x1}, 0x4044)

13.64078275s ago: executing program 36 (id=2820):
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="140000002b000b6c69000000000000", 0xf}], 0x1}, 0x480c0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="140000003800a334717f8064c15494f90b24fc600f", 0x15}], 0x1}, 0x4044)

1.566876006s ago: executing program 0 (id=3158):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x40, 0x80000, 0x0, 0x0, 0x800000c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x65, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8088, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8800, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x711d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x73, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x3, 0x5, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="940000000001050575c420b023719dd47759e5ad124b00000000000000000a0000003c0002802c00018014000300ff010000c90d0000000000000000010014000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08a50700000000019aaa234de9aef32450de644db612b1b2fb7e8fbc7de6b2bbeaa9f031e64d98a5ee1e32a21f09a634e60fdf3eda0b1c7519530a9b53a3b42feafd2ae3c275f87fac586a480fdaa845cce960d6bac6"], 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff0100000047a69eba0000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000010800074000000000100006800c000380060002004e24"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
r8 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x40040c4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4)
recvmsg$unix(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/132, 0x84}, {0x0}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x40002001)
recvmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0x53, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t')
socket$nl_rdma(0x10, 0x3, 0x14)

642.317288ms ago: executing program 0 (id=3184):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081)
sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0xb8}, 0x10)

529.304942ms ago: executing program 7 (id=3190):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080))

459.080755ms ago: executing program 0 (id=3191):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080201000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d1d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)

458.799097ms ago: executing program 7 (id=3192):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x498d44d4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

458.372517ms ago: executing program 0 (id=3193):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0xd}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

391.376616ms ago: executing program 5 (id=3194):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ec4ff000000007110b2000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

391.134195ms ago: executing program 7 (id=3195):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(0xffffffffffffffff)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf262, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xa, 0x6, 0x80, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x10, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a7402a7df382949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

389.53152ms ago: executing program 5 (id=3196):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x3}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x2e]}}, 0x0, 0x2b, 0x0, 0x1, 0x2}, 0x28)

282.72522ms ago: executing program 0 (id=3197):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, 0x0)

282.337049ms ago: executing program 5 (id=3198):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r3})

170.655452ms ago: executing program 0 (id=3199):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653765eaa48185e2a380d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b", 0x7}], 0x1}, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xd000000)

81.242851ms ago: executing program 7 (id=3200):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d"], 0x0, 0x46, 0x0, 0x9}, 0x28)

81.070779ms ago: executing program 7 (id=3201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000680), &(0x7f0000000840)=r0}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

80.974847ms ago: executing program 5 (id=3202):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000a00000d000300686173683a6e6574000000000500050020000000050004"], 0x5c}}, 0x0)

518µs ago: executing program 5 (id=3203):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90)

312.742µs ago: executing program 7 (id=3204):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="a94f", 0x2}], 0x1, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x3, 0x5, 0x100, 0x7}}], 0x18, 0x800}, 0x40)

0s ago: executing program 5 (id=3205):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x1f6}, {}, {}, 0x0, 0x3506, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0x2}}]}, 0x148}}, 0x0)

kernel console output (not intermixed with test programs):

ted=200000)
[   78.639014][ T6347] netlink: 'syz.2.184': attribute type 2 has an invalid length.
[   79.075467][ T6373] netlink: 'syz.2.197': attribute type 210 has an invalid length.
[   79.080992][ T6373] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.126120][ T6369] netlink: 'syz.1.194': attribute type 11 has an invalid length.
[   79.522887][ T6430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.206'.
[   79.528833][ T6430] netlink: 'syz.2.206': attribute type 3 has an invalid length.
[   79.589071][ T6443] netlink: 56 bytes leftover after parsing attributes in process `syz.2.207'.
[   79.594255][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'.
[   79.692238][ T6460] netlink: 64 bytes leftover after parsing attributes in process `syz.2.208'.
[   79.913860][ T6500] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.212'.
[   79.928122][ T6507] warning: `syz.0.213' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.890968][ T6568] netlink: 'syz.2.239': attribute type 13 has an invalid length.
[   81.362426][ T6575] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   81.512955][   T33] audit: type=1107 audit(1757088299.849:2): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':8=5MHCIT2x'!{x5	E&'
[   81.590010][ T6590] openvswitch: netlink: IP tunnel dst address not specified
[   81.640350][ T6588] syzkaller0: entered promiscuous mode
[   81.642157][ T6588] syzkaller0: entered allmulticast mode
[   83.370110][ T6608] __nla_validate_parse: 3 callbacks suppressed
[   83.370127][ T6608] netlink: 548 bytes leftover after parsing attributes in process `syz.2.256'.
[   84.152170][ T6595] macvtap0: refused to change device tx_queue_len
[   84.155427][ T6606] netlink: 'syz.2.256': attribute type 29 has an invalid length.
[   84.401645][ T6628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'.
[   84.788546][ T6652] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   85.073968][ T6672] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.287'.
[   85.077648][ T6672] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.287'.
[   85.369902][ T6687] netlink: 'syz.2.294': attribute type 4 has an invalid length.
[   85.512944][ T6697] netlink: 'syz.1.299': attribute type 3 has an invalid length.
[   85.516276][ T6697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.299'.
[   85.698695][ T6702] netlink: 'syz.2.301': attribute type 10 has an invalid length.
[   85.759597][ T6702] netlink: 168 bytes leftover after parsing attributes in process `syz.2.301'.
[   86.045131][ T6718] netlink: 'syz.0.308': attribute type 10 has an invalid length.
[   86.147465][ T6722] netlink: 'syz.1.310': attribute type 1 has an invalid length.
[   86.152619][ T6722] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.310'.
[   86.460617][ T5851] Bluetooth: hci2: command 0x206a tx timeout
[   86.464629][ T5234] Bluetooth: hci2: Opcode 0x206a failed: -110
[   86.468390][   T10] cfg80211: failed to load regulatory.db
[   86.602792][ T6724] netlink: 15478 bytes leftover after parsing attributes in process `syz.1.311'.
[   86.607681][ T6726] netlink: 'syz.2.312': attribute type 25 has an invalid length.
[   86.611499][ T6726] netlink: 'syz.2.312': attribute type 3 has an invalid length.
[   86.649232][ T6729] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   86.649668][ T6730] netlink: 'syz.1.313': attribute type 9 has an invalid length.
[   86.656764][ T6730] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.313'.
[   86.656819][ T6729] netlink: 5 bytes leftover after parsing attributes in process `syz.2.314'.
[   86.749804][ T6718] syz.0.308 (6718) used greatest stack depth: 18424 bytes left
[   88.214143][ T6809] syzkaller0: entered promiscuous mode
[   88.216239][ T6809] syzkaller0: entered allmulticast mode
[   88.384578][ T6821] __nla_validate_parse: 7 callbacks suppressed
[   88.384595][ T6821] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.357'.
[   90.374372][ T6833] pim6reg1: entered promiscuous mode
[   90.377191][ T6833] pim6reg1: entered allmulticast mode
[   90.387265][ T6846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[   90.406504][ T6845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[   90.411489][ T6847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[   90.518413][ T6857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.235506][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'.
[   94.506528][ T6890] validate_nla: 3 callbacks suppressed
[   94.506550][ T6890] netlink: 'syz.0.383': attribute type 39 has an invalid length.
[   95.015785][ T6906] netlink: 'syz.2.391': attribute type 14 has an invalid length.
[   95.018362][ T6906] netlink: 164 bytes leftover after parsing attributes in process `syz.2.391'.
[   95.166526][ T6918] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[   95.174202][ T6918] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[   95.346283][ T6920] netlink: 188 bytes leftover after parsing attributes in process `syz.2.398'.
[   95.549758][ T6931] netlink: 'syz.1.402': attribute type 10 has an invalid length.
[   95.566135][ T6932] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.401'.
[   95.747981][ T6936] netlink: 'syz.0.404': attribute type 5 has an invalid length.
[   95.754840][ T6936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.404'.
[   96.098893][ T6968] netlink: 'syz.2.419': attribute type 29 has an invalid length.
[   96.103711][ T6968] netlink: 'syz.2.419': attribute type 29 has an invalid length.
[   96.107884][ T6968] netlink: 488 bytes leftover after parsing attributes in process `syz.2.419'.
[   96.638861][ T6989] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   96.966230][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'.
[   97.058800][ T7015] netlink: 'syz.1.439': attribute type 12 has an invalid length.
[   97.075965][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.439'.
[   97.122732][ T7019] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   97.139047][ T7019] netlink: 'syz.2.437': attribute type 2 has an invalid length.
[   99.737334][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.468'.
[   99.740638][ T7089] netlink: zone id is out of range
[   99.744759][ T7089] netlink: zone id is out of range
[   99.747116][ T7089] netlink: zone id is out of range
[   99.749329][ T7089] netlink: zone id is out of range
[   99.752186][ T7089] netlink: zone id is out of range
[   99.754470][ T7089] netlink: zone id is out of range
[   99.756727][ T7089] netlink: zone id is out of range
[   99.759008][ T7089] netlink: zone id is out of range
[   99.762030][ T7089] netlink: zone id is out of range
[  101.182975][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'.
[  101.981305][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'.
[  101.986217][ T7145] syz.0.491: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  101.995349][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.0.491 Not tainted syzkaller #0 PREEMPT(full) 
[  101.995366][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.995374][ T7145] Call Trace:
[  101.995379][ T7145]  <TASK>
[  101.995394][ T7145]  dump_stack_lvl+0x189/0x250
[  101.995415][ T7145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.995426][ T7145]  ? __pfx__printk+0x10/0x10
[  101.995439][ T7145]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.995450][ T7145]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.995460][ T7145]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  101.995470][ T7145]  warn_alloc+0x214/0x310
[  101.995484][ T7145]  ? stack_depot_save_flags+0x41b/0x860
[  101.995498][ T7145]  ? __pfx_warn_alloc+0x10/0x10
[  101.995512][ T7145]  ? kasan_save_track+0x4f/0x80
[  101.995525][ T7145]  ? xskq_create+0x56/0x170
[  101.995538][ T7145]  ? xsk_init_queue+0xb0/0x110
[  101.995547][ T7145]  ? xsk_setsockopt+0x57b/0x8d0
[  101.995558][ T7145]  ? do_sock_setsockopt+0x17c/0x1b0
[  101.995566][ T7145]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  101.995574][ T7145]  ? do_syscall_64+0xfa/0x3b0
[  101.995585][ T7145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.995597][ T7145]  __vmalloc_node_range_noprof+0x125/0x12f0
[  101.995625][ T7145]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.995639][ T7145]  ? __kasan_kmalloc+0x93/0xb0
[  101.995650][ T7145]  vmalloc_user_noprof+0xad/0xf0
[  101.995662][ T7145]  ? xskq_create+0xbf/0x170
[  101.995672][ T7145]  xskq_create+0xbf/0x170
[  101.995683][ T7145]  xsk_init_queue+0xb0/0x110
[  101.995694][ T7145]  xsk_setsockopt+0x57b/0x8d0
[  101.995704][ T7145]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.995713][ T7145]  ? __pfx_aa_sk_perm+0x10/0x10
[  101.995727][ T7145]  ? __fget_files+0x2a/0x420
[  101.995734][ T7145]  ? aa_sock_opt_perm+0xff/0x1b0
[  101.995743][ T7145]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  101.995751][ T7145]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.995761][ T7145]  do_sock_setsockopt+0x17c/0x1b0
[  101.995771][ T7145]  __x64_sys_setsockopt+0x13f/0x1b0
[  101.995781][ T7145]  do_syscall_64+0xfa/0x3b0
[  101.995792][ T7145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.995799][ T7145]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  101.995809][ T7145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.995817][ T7145] RIP: 0033:0x7fb0bb58ebe9
[  101.995830][ T7145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.995839][ T7145] RSP: 002b:00007fb0bc370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.995849][ T7145] RAX: ffffffffffffffda RBX: 00007fb0bb7c5fa0 RCX: 00007fb0bb58ebe9
[  101.995856][ T7145] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  101.995861][ T7145] RBP: 00007fb0bb611e19 R08: 0000000000000004 R09: 0000000000000000
[  101.995867][ T7145] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  101.995874][ T7145] R13: 00007fb0bb7c6038 R14: 00007fb0bb7c5fa0 R15: 00007ffd7cb67198
[  101.995888][ T7145]  </TASK>
[  101.995931][ T7145] Mem-Info:
[  102.174110][ T7145] active_anon:5144 inactive_anon:0 isolated_anon:0
[  102.174110][ T7145]  active_file:11361 inactive_file:38238 isolated_file:0
[  102.174110][ T7145]  unevictable:1768 dirty:163 writeback:0
[  102.174110][ T7145]  slab_reclaimable:9488 slab_unreclaimable:51642
[  102.174110][ T7145]  mapped:18043 shmem:2434 pagetables:1007
[  102.174110][ T7145]  sec_pagetables:0 bounce:0
[  102.174110][ T7145]  kernel_misc_reclaimable:0
[  102.174110][ T7145]  free:275314 free_pcp:22420 free_cma:0
[  102.191311][ T7145] Node 0 active_anon:12812kB inactive_anon:0kB active_file:35232kB inactive_file:144284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37944kB dirty:480kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4804kB pagetables:1884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.205838][ T7145] Node 1 active_anon:7696kB inactive_anon:0kB active_file:10212kB inactive_file:8668kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34228kB dirty:172kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6452kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.217728][ T7145] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  102.230473][ T7145] lowmem_reserve[]: 0 811 811 811 811
[  102.232921][ T7145] Node 0 DMA32 free:231348kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12812kB inactive_anon:0kB active_file:35232kB inactive_file:144284kB unevictable:3536kB writepending:480kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:37756kB local_pcp:19440kB free_cma:0kB
[  102.245414][ T7145] lowmem_reserve[]: 0 0 0 0 0
[  102.247900][ T7145] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  102.298716][ T7145] lowmem_reserve[]: 0 0 854 854 854
[  102.311026][ T7145] Node 1 Normal free:395408kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7696kB inactive_anon:0kB active_file:10212kB inactive_file:8668kB unevictable:3536kB writepending:172kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:52900kB local_pcp:17968kB free_cma:0kB
[  102.324133][ T7145] lowmem_reserve[]: 0 0 0 0 0
[  102.326814][ T7145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  102.359661][ T7145] Node 0 DMA32: 633*4kB (UME) 396*8kB (UME) 259*16kB (UM) 144*32kB (ME) 161*64kB (UME) 144*128kB (UME) 29*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 41*4096kB (M) = 231348kB
[  102.370453][ T7145] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  102.378541][ T7145] Node 1 Normal: 2*4kB (UM) 89*8kB (UME) 462*16kB (UE) 6*32kB (ME) 136*64kB (UME) 62*128kB (UM) 17*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 88*4096kB (M) = 395376kB
[  102.389307][ T7145] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.403486][ T7145] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.407517][ T7145] 52033 total pagecache pages
[  102.410991][ T7145] 0 pages in swap cache
[  102.413584][ T7145] Free swap  = 124996kB
[  102.415698][ T7145] Total swap = 124996kB
[  102.417895][ T7145] 786301 pages RAM
[  102.422027][ T7145] 0 pages HighMem/MovableOnly
[  102.424245][ T7145] 241329 pages reserved
[  102.426401][ T7145] 0 pages cma reserved
[  102.683139][ T7164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.501'.
[  102.686556][ T7164] netlink: 46 bytes leftover after parsing attributes in process `syz.2.501'.
[  102.692476][ T7164] netlink: 46 bytes leftover after parsing attributes in process `syz.2.501'.
[  102.732285][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'.
[  102.735124][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'.
[  102.793014][ T7177] netlink: 14 bytes leftover after parsing attributes in process `syz.0.507'.
[  103.946001][ T7185] validate_nla: 3 callbacks suppressed
[  103.946017][ T7185] netlink: 'syz.0.510': attribute type 3 has an invalid length.
[  103.952993][ T7185] netlink: 'syz.0.510': attribute type 3 has an invalid length.
[  103.956014][ T7185] netlink: 130500 bytes leftover after parsing attributes in process `syz.0.510'.
[  104.128255][ T7197] netlink: 'syz.2.516': attribute type 9 has an invalid length.
[  104.131633][ T7197] netlink: 44 bytes leftover after parsing attributes in process `syz.2.516'.
[  104.203107][ T7207] netlink: 'syz.0.521': attribute type 1 has an invalid length.
[  104.417146][ T7224] net_ratelimit: 163 callbacks suppressed
[  104.417318][ T7224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.725954][ T7258] __nla_validate_parse: 2 callbacks suppressed
[  107.725972][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'.
[  107.781668][ T7260] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.543'.
[  108.467464][ T7283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.554'.
[  108.474869][ T7283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.554'.
[  108.483760][ T7283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.554'.
[  108.913857][ T7298] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.561'.
[  109.240224][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.564'.
[  109.266291][ T7305] netlink: 56 bytes leftover after parsing attributes in process `syz.0.564'.
[  109.283934][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.564'.
[  112.336747][ T7314] netlink: 10 bytes leftover after parsing attributes in process `syz.0.568'.
[  112.634995][ T5234] Bluetooth: hci2: Malformed LE Event: 0x0b
[  112.844996][ T7344] __nla_validate_parse: 1 callbacks suppressed
[  112.845054][ T7344] netlink: 92 bytes leftover after parsing attributes in process `syz.0.583'.
[  112.870589][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[  113.821617][ T7366] netlink: 'syz.1.593': attribute type 10 has an invalid length.
[  114.427337][ T7396] netlink: 80 bytes leftover after parsing attributes in process `syz.1.606'.
[  114.496390][ T7401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.057428][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'.
[  115.654829][ T7447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.793633][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'.
[  115.990831][ T7454] netlink: 'syz.1.631': attribute type 10 has an invalid length.
[  116.053603][ T7455] netlink: 'syz.1.631': attribute type 10 has an invalid length.
[  116.165672][ T7455] team0: Device hsr_slave_0 failed to register rx_handler
[  116.168448][ T7459] netlink: 'syz.2.633': attribute type 21 has an invalid length.
[  116.402917][ T7477] netlink: 'syz.2.642': attribute type 11 has an invalid length.
[  116.406701][ T7477] netlink: 168 bytes leftover after parsing attributes in process `syz.2.642'.
[  117.176835][ T7494] netlink: 'syz.2.650': attribute type 7 has an invalid length.
[  118.220227][ T7510] netlink: 'syz.1.658': attribute type 1 has an invalid length.
[  118.223413][ T7510] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.658'.
[  118.254789][ T7512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.659'.
[  118.268860][ T7514] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.660'.
[  118.271537][ T7516] netlink: 'syz.0.661': attribute type 22 has an invalid length.
[  118.277368][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[  118.308579][ T7519] netlink: 56 bytes leftover after parsing attributes in process `syz.2.662'.
[  118.365176][ T7524] netlink: 277 bytes leftover after parsing attributes in process `syz.2.665'.
[  118.399024][ T7528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.667'.
[  118.464126][ T7536] openvswitch: netlink: Key type 29 is not supported
[  118.799750][ T7538] bridge_slave_1: left allmulticast mode
[  118.801794][ T7538] bridge_slave_1: left promiscuous mode
[  118.807380][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.899842][ T7551] nft_compat: unsupported protocol 0
[  119.392201][ T7538] bridge_slave_0: left allmulticast mode
[  119.394346][ T7538] bridge_slave_0: left promiscuous mode
[  119.396700][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.591395][ T7560] netlink: 'syz.2.681': attribute type 13 has an invalid length.
[  119.598780][ T5234] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[  119.688894][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.695623][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.822880][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.833226][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.037861][ T5874] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.042439][ T5874] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.056145][ T5874] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.069246][ T5874] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.578127][ T5234] Bluetooth: hci0: SCO packet too small
[  120.775872][ T7623] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  120.931773][ T7633] netlink: 3 bytes leftover after parsing attributes in process `syz.1.715'.
[  121.055657][ T7644] netlink: 'syz.2.720': attribute type 3 has an invalid length.
[  121.060110][ T7644] netlink: 186932 bytes leftover after parsing attributes in process `syz.2.720'.
[  121.311596][ T7647] netlink: 798 bytes leftover after parsing attributes in process `syz.0.719'.
[  121.638539][ T7679] netlink: 'syz.1.736': attribute type 2 has an invalid length.
[  121.965945][ T7696] netlink: 'syz.2.743': attribute type 29 has an invalid length.
[  128.157681][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1127185832 wd_nsec: 1127170397
[  131.135519][   T26] sched: DL replenish lagged too much
[  131.765863][ T7731] syzkaller0: entered promiscuous mode
[  131.768028][ T7731] syzkaller0: entered allmulticast mode
[  131.778897][ T7731] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  131.888630][ T7737] __nla_validate_parse: 2 callbacks suppressed
[  131.888642][ T7737] netlink: 104 bytes leftover after parsing attributes in process `syz.0.758'.
[  131.892741][ T7738] netlink: 'syz.1.759': attribute type 10 has an invalid length.
[  131.897701][ T7738] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.759'.
[  131.938522][ T7740] netlink: 'syz.2.761': attribute type 29 has an invalid length.
[  131.943731][ T7740] netlink: 'syz.2.761': attribute type 29 has an invalid length.
[  131.952780][ T7740] netlink: 'syz.2.761': attribute type 29 has an invalid length.
[  132.811642][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.814770][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.857864][ T7757] netlink: 7 bytes leftover after parsing attributes in process `syz.1.767'.
[  132.869293][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'.
[  133.370658][ T7790] netlink: 'syz.1.780': attribute type 21 has an invalid length.
[  135.389718][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'.
[  135.435975][ T7847] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[  135.573689][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  136.651007][ T7879] delete_channel: no stack
[  137.120819][ T7904] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.827'.
[  137.124950][ T7904] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  138.387711][ T7910] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.823370][ T7944] syzkaller0: entered promiscuous mode
[  138.825596][ T7944] syzkaller0: entered allmulticast mode
[  141.811795][ T7983] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.863'.
[  141.815622][ T7983] bridge: RTM_NEWNEIGH with invalid state 0x1
[  141.942099][ T7987] netlink: 'syz.2.865': attribute type 7 has an invalid length.
[  141.945629][ T7987] netlink: 140 bytes leftover after parsing attributes in process `syz.2.865'.
[  142.067577][ T7993] netlink: 'syz.2.868': attribute type 1 has an invalid length.
[  142.255514][ T7999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.275466][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'.
[  143.193568][ T8047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.889'.
[  143.202216][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'.
[  143.220574][ T8045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.888'.
[  143.256481][ T8051] netlink: 'syz.2.891': attribute type 3 has an invalid length.
[  144.258610][ T8069] tap0: tun_chr_ioctl cmd 2148553947
[  144.375883][ T8079] netlink: 'syz.1.905': attribute type 1 has an invalid length.
[  144.489675][ T8086] netlink: 'syz.0.904': attribute type 1 has an invalid length.
[  144.492917][ T8086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.594340][ T5714] syzkaller0: tun_net_xmit 76
[  144.596713][ T5714] syzkaller0: tun_net_xmit 48
[  144.614385][ T8088] syzkaller0: create flow: hash 957541710 index 1
[  144.619820][  T975] syzkaller0: tun_net_xmit 76
[  144.674613][ T8094] syzkaller0: delete flow: hash 957541710 index 1
[  145.367505][ T8106] netlink: 'syz.0.915': attribute type 6 has an invalid length.
[  145.376893][ T8106] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.915'.
[  146.022118][ T8108] netlink: 830 bytes leftover after parsing attributes in process `syz.1.916'.
[  146.088998][ T8116] netlink: 'syz.0.920': attribute type 12 has an invalid length.
[  146.094971][ T8116] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.920'.
[  146.203017][ T8126] netlink: 'syz.2.925': attribute type 13 has an invalid length.
[  146.217988][ T8126] gretap0: refused to change device tx_queue_len
[  146.222200][ T8126] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  146.507939][ T8140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.932'.
[  146.721017][ T8162] netlink: 'syz.2.943': attribute type 9 has an invalid length.
[  146.726605][ T8162] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.943'.
[  148.098654][ T8182] netlink: 'syz.2.952': attribute type 1 has an invalid length.
[  148.220646][ T8184] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  148.223169][ T8184] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  148.445953][ T8200] netlink: 'syz.1.961': attribute type 10 has an invalid length.
[  148.872322][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'.
[  149.415767][ T8254] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  150.144925][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'.
[  150.393185][ T8291] bpf: Bad value for 'gid'
[  151.500300][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1009'.
[  151.618053][ T8322] netlink: ct family unspecified
[  151.620163][ T8322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.678255][ T8327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1016'.
[  151.761828][ T8331] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1017'.
[  151.836370][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.185437][ T8389] netlink: 'syz.1.1043': attribute type 10 has an invalid length.
[  153.189277][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1043'.
[  153.198613][ T8389] batadv0: entered promiscuous mode
[  153.203786][ T8389] batadv0: entered allmulticast mode
[  153.215468][ T8389] bridge0: port 3(batadv0) entered blocking state
[  153.230348][ T8389] bridge0: port 3(batadv0) entered disabled state
[  153.324830][ T8389] bridge0: port 3(batadv0) entered blocking state
[  153.328547][ T8389] bridge0: port 3(batadv0) entered forwarding state
[  153.535824][ T5714] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  153.540023][ T5714] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  153.863115][ T8430] tun0: tun_chr_ioctl cmd 1074025675
[  153.867761][ T8430] tun0: persist enabled
[  153.871136][ T8425] tun0: tun_chr_ioctl cmd 1074025675
[  153.872972][ T8425] tun0: persist disabled
[  153.959046][ T8438] openvswitch: netlink: Message has 11 unknown bytes.
[  153.962277][ T8438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.133358][ T8450] netlink: 'syz.1.1073': attribute type 10 has an invalid length.
[  154.136887][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.147787][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.169526][ T8450] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  154.396242][ T8460] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1079'.
[  154.403594][ T8460] hsr_slave_0: left promiscuous mode
[  154.413965][ T8460] hsr_slave_1: left promiscuous mode
[  155.362927][ T8481] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1085'.
[  155.747261][ T8506] netlink: 64507 bytes leftover after parsing attributes in process `syz.2.1097'.
[  157.163769][ T8531] netlink: 'syz.0.1107': attribute type 10 has an invalid length.
[  157.166677][ T8531] netlink: 3531 bytes leftover after parsing attributes in process `syz.0.1107'.
[  157.291625][ T8537] netlink: 'syz.0.1110': attribute type 10 has an invalid length.
[  157.356635][ T8539] netlink: 'syz.0.1110': attribute type 11 has an invalid length.
[  157.366500][ T8539] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1110'.
[  157.382655][ T8537] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  157.386875][ T8537] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  157.407714][ T8537] team0: Port device wlan1 added
[  157.416310][ T8536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.751975][ T8556] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1119'.
[  158.090502][ T8565] netlink: 'syz.2.1122': attribute type 4 has an invalid length.
[  158.093659][ T8565] netlink: 'syz.2.1122': attribute type 11 has an invalid length.
[  158.097143][ T8565] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1122'.
[  159.588542][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1125'.
[  159.594947][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1125'.
[  160.113004][ T8578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1128'.
[  160.158085][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'.
[  160.165856][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'.
[  160.170379][ T8582] netlink: 'syz.0.1129': attribute type 2 has an invalid length.
[  160.173220][ T8582] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[  160.176114][ T8582] netlink: 'syz.0.1129': attribute type 8 has an invalid length.
[  160.178574][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1129'.
[  160.182509][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'.
[  160.208256][ T8584] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1131'.
[  161.317437][ T8627] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  161.348224][ T8629] netlink: 'syz.0.1150': attribute type 32 has an invalid length.
[  161.475586][ T8637] netlink: 'syz.0.1154': attribute type 21 has an invalid length.
[  161.603188][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1156'.
[  161.606496][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1156'.
[  162.382168][ T8683] netlink: 'syz.2.1176': attribute type 11 has an invalid length.
[  163.071757][ T8699] netlink: 'syz.2.1182': attribute type 6 has an invalid length.
[  164.179103][ T8718] openvswitch: netlink: Missing valid actions attribute.
[  164.190527][ T8718] openvswitch: netlink: Actions may not be safe on all matching packets
[  164.312234][ T8732] netlink: 'syz.2.1198': attribute type 29 has an invalid length.
[  164.316347][ T8732] netlink: 'syz.2.1198': attribute type 29 has an invalid length.
[  164.320843][ T8732] unsupported nla_type 58
[  164.405618][ T5234] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4
[  164.405656][ T5234] Bluetooth: hci2: unexpected event for opcode 0x6c6c
[  164.528300][ T8746] netlink: 'syz.2.1203': attribute type 39 has an invalid length.
[  165.206311][ T5234] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1
[  165.206749][ T5234] Bluetooth: hci2: hardware error 0x00
[  165.346356][ T5851] Bluetooth: hci1: unexpected event 0x3d length: 151 > 14
[  165.465485][ T8787] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.522357][ T8791] netlink: 'syz.2.1224': attribute type 15 has an invalid length.
[  165.525626][ T8791] __nla_validate_parse: 2 callbacks suppressed
[  165.525636][ T8791] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.1224'.
[  165.540418][ T8793] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1225'.
[  165.582429][ T8797] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1227'.
[  165.585378][ T8797] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1227'.
[  165.616197][ T5851] Bluetooth: hci0: adv larger than maximum supported
[  165.684704][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  165.695010][ T8807] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1232'.
[  165.698101][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  165.757695][ T8813] netlink: 'syz.1.1234': attribute type 2 has an invalid length.
[  165.777992][ T8813] k*: entered promiscuous mode
[  166.538232][ T8868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1261'.
[  166.543991][ T8868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1261'.
[  166.581453][ T8865] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1260'.
[  166.593172][ T8865] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  166.981083][ T8899] netlink: 'syz.2.1275': attribute type 1 has an invalid length.
[  167.036937][ T8902] netlink: 'syz.2.1277': attribute type 11 has an invalid length.
[  167.260032][ T5234] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  167.555739][ T8926] netlink: 'syz.0.1288': attribute type 1 has an invalid length.
[  167.560377][ T8926] netlink: 'syz.0.1288': attribute type 2 has an invalid length.
[  168.006770][ T8955] netlink: 'syz.1.1302': attribute type 4 has an invalid length.
[  168.008227][ T8957] netlink: 'syz.0.1303': attribute type 10 has an invalid length.
[  168.012139][ T8955] netlink: 'syz.1.1302': attribute type 11 has an invalid length.
[  168.016410][ T8957] netlink: 'syz.0.1303': attribute type 16 has an invalid length.
[  168.728681][ T8971] team0: Port device team_slave_0 removed
[  168.757125][ T8971] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  168.788145][ T8988] erspan0 speed is unknown, defaulting to 1000
[  168.853961][ T8988] erspan0 speed is unknown, defaulting to 1000
[  168.902775][ T8988] erspan0 speed is unknown, defaulting to 1000
[  169.588953][ T8988] infiniband syz2: set active
[  169.596701][ T5916] erspan0 speed is unknown, defaulting to 1000
[  169.602226][ T8988] infiniband syz2: added erspan0
[  169.646097][ T8988] RDS/IB: syz2: added
[  169.648180][ T8988] smc: adding ib device syz2 with port count 1
[  169.652569][ T8988] smc:    ib device syz2 port 1 has pnetid 
[  169.656508][   T10] erspan0 speed is unknown, defaulting to 1000
[  169.664803][ T8988] erspan0 speed is unknown, defaulting to 1000
[  169.982989][ T8988] erspan0 speed is unknown, defaulting to 1000
[  170.268393][ T9052] bridge_slave_0: entered allmulticast mode
[  170.288219][ T8988] erspan0 speed is unknown, defaulting to 1000
[  170.584247][ T9068] openvswitch: netlink: Unknown key attributes 1
[  170.642015][ T9076] __nla_validate_parse: 25 callbacks suppressed
[  170.642028][ T9076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1357'.
[  170.666634][ T9080] openvswitch: netlink: VXLAN extension 233 out of range max 1
[  171.006345][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1369'.
[  171.592380][ T5874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.672255][ T5874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.759733][ T5874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.834969][ T5874] bond0: (slave netdevsim0): Releasing backup interface
[  171.842590][ T5874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.938736][ T5874] bridge0: port 3(batadv0) entered disabled state
[  171.950679][ T5874] bridge_slave_1: left allmulticast mode
[  171.953328][ T5874] bridge_slave_1: left promiscuous mode
[  171.955791][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.963208][ T5874] bridge_slave_0: left allmulticast mode
[  171.965658][ T5874] bridge_slave_0: left promiscuous mode
[  171.968129][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.125873][   T28] smc: removing ib device syz2
[  172.309208][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.316019][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.321327][ T5874] bond0 (unregistering): (slave team0): Releasing backup interface
[  172.325505][ T5874] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  172.330679][ T5874] bond0 (unregistering): Released all slaves
[  172.341633][ T5881] erspan0 speed is unknown, defaulting to 1000
[  172.345120][  T792] erspan0 speed is unknown, defaulting to 1000
[  172.348040][ T5881] syz2: Port: 1 Link DOWN
[  173.034837][ T5874] k*: left promiscuous mode
[  173.224967][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.238200][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.249932][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.269063][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.274435][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.373007][ T9152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1383'.
[  173.377656][ T9152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1383'.
[  173.566609][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.571418][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.576023][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.589671][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.595534][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.643783][ T5874] hsr_slave_0: left promiscuous mode
[  173.649590][ T5874] hsr_slave_1: left promiscuous mode
[  173.652713][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.655671][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.694900][ T5874] veth1_vlan: left promiscuous mode
[  173.697479][ T5874] veth0_vlan: left promiscuous mode
[  173.910746][ T9171] validate_nla: 12 callbacks suppressed
[  173.910759][ T9171] netlink: 'syz.0.1388': attribute type 1 has an invalid length.
[  173.915458][ T9171] netlink: 'syz.0.1388': attribute type 4 has an invalid length.
[  173.918164][ T9171] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1388'.
[  174.094128][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  174.128849][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  174.536071][ T9177] netlink: 'syz.0.1391': attribute type 4 has an invalid length.
[  174.769805][ T9148] chnl_net:caif_netlink_parms(): no params data found
[  175.328195][ T9160] chnl_net:caif_netlink_parms(): no params data found
[  175.340426][ T5851] Bluetooth: hci0: command tx timeout
[  175.541673][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.545567][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.548472][ T9148] bridge_slave_0: entered allmulticast mode
[  175.553653][ T9148] bridge_slave_0: entered promiscuous mode
[  175.562446][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.565479][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.568416][ T9148] bridge_slave_1: entered allmulticast mode
[  175.573436][ T9148] bridge_slave_1: entered promiscuous mode
[  175.659918][ T5851] Bluetooth: hci1: command tx timeout
[  175.696300][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.712721][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.779006][ T9148] team0: Port device team_slave_0 added
[  175.790553][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.792826][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.795088][ T9160] bridge_slave_0: entered allmulticast mode
[  175.798896][ T9160] bridge_slave_0: entered promiscuous mode
[  175.805424][ T9148] team0: Port device team_slave_1 added
[  175.842625][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.851324][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.854252][ T9160] bridge_slave_1: entered allmulticast mode
[  175.867611][ T9160] bridge_slave_1: entered promiscuous mode
[  175.944814][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.947661][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.958847][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.968045][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.972192][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.985999][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.997908][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.006348][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.038082][ T9160] team0: Port device team_slave_0 added
[  176.071443][ T9160] team0: Port device team_slave_1 added
[  176.121632][ T9148] hsr_slave_0: entered promiscuous mode
[  176.125332][ T9148] hsr_slave_1: entered promiscuous mode
[  176.128140][ T9148] debugfs: 'hsr0' already exists in 'hsr'
[  176.131297][ T9148] Cannot create hsr debugfs directory
[  176.134693][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.137460][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.148579][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.172571][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.175369][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.189219][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.293242][ T9160] hsr_slave_0: entered promiscuous mode
[  176.297413][ T9160] hsr_slave_1: entered promiscuous mode
[  176.303971][ T9160] debugfs: 'hsr0' already exists in 'hsr'
[  176.306366][ T9160] Cannot create hsr debugfs directory
[  176.704464][ T9148] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  176.732615][ T9148] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  176.768498][ T9148] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.785461][ T9148] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.840550][ T9160] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  176.863451][ T9160] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  176.885258][ T9160] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  176.902264][ T9160] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  176.961789][ T9252] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1405'.
[  176.978228][ T9244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1405'.
[  176.991479][ T9252] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1405'.
[  177.070438][ T9254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.092648][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.116211][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.129280][ T9160] 8021q: adding VLAN 0 to HW filter on device team0
[  177.153519][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.156625][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.184664][ T9148] 8021q: adding VLAN 0 to HW filter on device team0
[  177.199865][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.203184][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.227625][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.230932][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.273333][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.276562][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.387607][ T9148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.420898][ T5851] Bluetooth: hci0: command tx timeout
[  177.563674][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.642660][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.653831][ T9148] veth0_vlan: entered promiscuous mode
[  177.683643][ T9148] veth1_vlan: entered promiscuous mode
[  177.740681][ T5851] Bluetooth: hci1: command tx timeout
[  177.757197][ T9148] veth0_macvtap: entered promiscuous mode
[  177.783811][ T9148] veth1_macvtap: entered promiscuous mode
[  177.824123][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.850717][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.891569][ T5714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.920562][ T5714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.939870][ T5714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.958709][ T5714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.027952][ T9160] veth0_vlan: entered promiscuous mode
[  178.042462][ T9160] veth1_vlan: entered promiscuous mode
[  178.093059][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.096071][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.156819][ T9160] veth0_macvtap: entered promiscuous mode
[  178.165885][ T9160] veth1_macvtap: entered promiscuous mode
[  178.184048][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.190998][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.198012][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.203909][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.226091][ T5714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.234550][ T5714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.242911][ T5714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.767489][ T5714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.965385][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.968445][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.027441][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.038438][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.358943][ T9325] netlink: 'syz.3.1417': attribute type 4 has an invalid length.
[  179.384215][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1420'.
[  179.411148][ T9325] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1417'.
[  179.510254][ T5851] Bluetooth: hci0: command tx timeout
[  179.680243][ T9325] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1417'.
[  179.683283][ T9325] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  179.830469][ T5851] Bluetooth: hci1: command tx timeout
[  180.417200][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1437'.
[  180.665199][ T9376] C: renamed from team_slave_0 (while UP)
[  180.669788][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1441'.
[  180.672295][ T9376] netlink: 'syz.3.1439': attribute type 3 has an invalid length.
[  180.682668][ T9376] netlink: 'syz.3.1439': attribute type 1 has an invalid length.
[  180.685144][ T9376] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1439'.
[  180.690617][ T9376] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  180.725186][ T9380] netlink: 'syz.4.1442': attribute type 4 has an invalid length.
[  180.727940][ T9380] netlink: 209028 bytes leftover after parsing attributes in process `syz.4.1442'.
[  180.856808][ T9392] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  180.944761][ T9398] delete_channel: no stack
[  181.021290][ T9410] netlink: 'syz.0.1457': attribute type 6 has an invalid length.
[  181.355803][ T5851] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[  181.584410][ T5851] Bluetooth: hci0: command tx timeout
[  181.643227][ T9438] netlink: 'syz.3.1470': attribute type 39 has an invalid length.
[  181.901589][ T5851] Bluetooth: hci1: command tx timeout
[  182.434318][ T9443] __nla_validate_parse: 3 callbacks suppressed
[  182.434330][ T9443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1473'.
[  182.723923][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1485'.
[  182.728010][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1485'.
[  182.731160][ T9470] netlink: 'syz.0.1484': attribute type 3 has an invalid length.
[  182.735735][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1485'.
[  182.804988][ T9477] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  182.856378][ T9480] netlink: 'syz.3.1491': attribute type 1 has an invalid length.
[  183.101023][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1496'.
[  183.113072][ T9493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1496'.
[  183.132740][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1496'.
[  183.494303][ T5714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.583963][ T5714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.652400][ T5714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.717115][ T5714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.807108][ T5714] bridge_slave_1: left allmulticast mode
[  183.814397][ T5714] bridge_slave_1: left promiscuous mode
[  183.817004][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.823015][ T5714] bridge_slave_0: left allmulticast mode
[  183.824824][ T5714] bridge_slave_0: left promiscuous mode
[  183.826676][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.075457][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.082280][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.086681][ T5714] bond0 (unregistering): Released all slaves
[  184.404454][ T5714] hsr_slave_0: left promiscuous mode
[  184.412239][ T5714] hsr_slave_1: left promiscuous mode
[  184.420262][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.423891][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.431274][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.439579][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.462967][ T5714] veth1_macvtap: left promiscuous mode
[  184.465187][ T5714] veth0_macvtap: left promiscuous mode
[  184.468061][ T5714] veth1_vlan: left promiscuous mode
[  184.470889][ T5714] veth0_vlan: left promiscuous mode
[  184.664202][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.677163][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.682963][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.686635][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.690114][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.012776][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.017894][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.022146][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.026053][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.029771][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.039276][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  185.114876][ T5714] team0 (unregistering): Port device team_slave_0 removed
[  185.442895][ T9544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'.
[  185.454837][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'.
[  185.463951][ T9546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'.
[  185.880359][ T9567] netlink: 'syz.0.1515': attribute type 1 has an invalid length.
[  185.882893][ T9567] netlink: 'syz.0.1515': attribute type 3 has an invalid length.
[  185.918002][ T9541] chnl_net:caif_netlink_parms(): no params data found
[  186.002234][ T5714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.058327][ T9532] chnl_net:caif_netlink_parms(): no params data found
[  186.067951][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.074594][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.077239][ T9541] bridge_slave_0: entered allmulticast mode
[  186.086918][ T9541] bridge_slave_0: entered promiscuous mode
[  186.091299][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.093630][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.096006][ T9541] bridge_slave_1: entered allmulticast mode
[  186.099325][ T9541] bridge_slave_1: entered promiscuous mode
[  186.127603][ T5714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.182549][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.187267][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.217918][ T5714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.273535][ T9541] team0: Port device team_slave_0 added
[  186.277621][ T9541] team0: Port device team_slave_1 added
[  186.304282][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.307878][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.312557][ T9532] bridge_slave_0: entered allmulticast mode
[  186.315590][ T9532] bridge_slave_0: entered promiscuous mode
[  186.336231][ T5714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.371817][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.374854][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.377230][ T9532] bridge_slave_1: entered allmulticast mode
[  186.383966][ T9532] bridge_slave_1: entered promiscuous mode
[  186.398626][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.401494][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.410546][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.431970][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.434229][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.444212][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.465729][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.473461][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.520074][ T9541] hsr_slave_0: entered promiscuous mode
[  186.524541][ T9541] hsr_slave_1: entered promiscuous mode
[  186.527487][ T9541] debugfs: 'hsr0' already exists in 'hsr'
[  186.532917][ T9541] Cannot create hsr debugfs directory
[  186.583444][ T9532] team0: Port device team_slave_0 added
[  186.622213][ T9532] team0: Port device team_slave_1 added
[  186.636608][ T9606] netlink: 'syz.0.1526': attribute type 33 has an invalid length.
[  186.714501][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.716858][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.726717][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.770857][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.773259][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.783545][ T5234] Bluetooth: hci0: command tx timeout
[  186.787148][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.833901][ T5714] bridge_slave_1: left allmulticast mode
[  186.838870][ T5714] bridge_slave_1: left promiscuous mode
[  186.843194][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.849306][ T5714] bridge_slave_0: left allmulticast mode
[  186.852565][ T5714] bridge_slave_0: left promiscuous mode
[  186.854455][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.100098][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.104781][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.108534][ T5714] bond0 (unregistering): Released all slaves
[  187.111903][ T5234] Bluetooth: hci1: command tx timeout
[  187.301293][ T9532] hsr_slave_0: entered promiscuous mode
[  187.303966][ T9532] hsr_slave_1: entered promiscuous mode
[  187.314265][ T9532] debugfs: 'hsr0' already exists in 'hsr'
[  187.316129][ T9532] Cannot create hsr debugfs directory
[  187.638543][ T9541] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  187.806133][ T9541] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  187.895718][ T9541] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  187.918147][ T5714] hsr_slave_0: left promiscuous mode
[  187.927497][ T5714] hsr_slave_1: left promiscuous mode
[  187.929932][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.932344][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.936505][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.938953][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.963959][ T5714] veth1_macvtap: left promiscuous mode
[  187.965905][ T5714] veth0_macvtap: left promiscuous mode
[  187.968168][ T5714] veth1_vlan: left promiscuous mode
[  187.973493][ T5714] veth0_vlan: left promiscuous mode
[  188.052896][ T9636] netlink: 'syz.0.1535': attribute type 10 has an invalid length.
[  188.725212][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  188.765624][ T5714] team0 (unregistering): Port device C removed
[  188.862441][ T5234] Bluetooth: hci0: command tx timeout
[  189.093212][ T9541] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  189.183124][ T5234] Bluetooth: hci1: command tx timeout
[  189.512108][ T9532] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  189.527833][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.537172][ T9532] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  189.544893][ T9532] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  189.570877][ T9532] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  189.708758][ T9541] 8021q: adding VLAN 0 to HW filter on device team0
[  189.737872][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.740457][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.756039][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.758320][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.877856][ T9674] netlink: 'syz.0.1539': attribute type 16 has an invalid length.
[  189.883293][ T9674] __nla_validate_parse: 5 callbacks suppressed
[  189.883333][ T9674] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1539'.
[  189.888087][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.916087][ T9532] 8021q: adding VLAN 0 to HW filter on device team0
[  189.932788][ T9674] netlink: 809 bytes leftover after parsing attributes in process `syz.0.1539'.
[  189.934307][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.935971][ T9674] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.1539'.
[  189.938750][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.947011][ T9674] netlink: 809 bytes leftover after parsing attributes in process `syz.0.1539'.
[  189.952088][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.952148][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.033453][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.193546][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.267662][ T9698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1541'.
[  190.280937][ T9698] unsupported nlmsg_type 40
[  190.293447][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1541'.
[  190.296513][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'.
[  190.361260][ T9541] veth0_vlan: entered promiscuous mode
[  190.385612][ T9541] veth1_vlan: entered promiscuous mode
[  190.439891][ T9541] veth0_macvtap: entered promiscuous mode
[  190.455640][ T9541] veth1_macvtap: entered promiscuous mode
[  190.490809][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.513748][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.568400][ T5874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.575090][ T5874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.589002][ T5874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.603414][ T9532] veth0_vlan: entered promiscuous mode
[  190.608359][ T5874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.666975][ T9532] veth1_vlan: entered promiscuous mode
[  190.759543][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.771603][ T9532] veth0_macvtap: entered promiscuous mode
[  190.779230][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.803238][ T9532] veth1_macvtap: entered promiscuous mode
[  190.854468][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.856942][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.878153][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.899161][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.941369][ T5234] Bluetooth: hci0: command tx timeout
[  190.952222][ T5873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.957540][ T9725] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1505'.
[  190.961800][ T5873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.964568][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1505'.
[  190.964617][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1505'.
[  191.004978][ T5873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.018878][ T5873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.195785][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.199028][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.250684][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.255792][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.262529][ T5234] Bluetooth: hci1: command tx timeout
[  193.019519][ T5234] Bluetooth: hci0: command tx timeout
[  193.353996][ T5234] Bluetooth: hci1: command tx timeout
[  193.983448][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.995780][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.179797][ T9807] netlink: 'syz.5.1568': attribute type 21 has an invalid length.
[  194.820453][ T9848] netlink: 'syz.5.1577': attribute type 5 has an invalid length.
[  194.823890][ T9848] netlink: 'syz.5.1577': attribute type 5 has an invalid length.
[  195.005632][ T9857] netlink: 'syz.5.1581': attribute type 29 has an invalid length.
[  195.989291][ T9918] netlink: 'syz.0.1601': attribute type 10 has an invalid length.
[  196.001367][ T9918] __nla_validate_parse: 3 callbacks suppressed
[  196.001388][ T9918] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1601'.
[  196.678919][ T9953] netlink: 'syz.5.1613': attribute type 21 has an invalid length.
[  196.689742][ T9953] netlink: 'syz.5.1613': attribute type 1 has an invalid length.
[  196.777075][ T9956] netlink: 'syz.0.1614': attribute type 11 has an invalid length.
[  197.460927][ T9993] netlink: 'syz.6.1626': attribute type 10 has an invalid length.
[  197.487593][ T9993] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1626'.
[  197.507243][ T9993] ipvlan1: entered promiscuous mode
[  197.514456][ T9993] ipvlan1: entered allmulticast mode
[  197.516859][ T9993] veth0_vlan: entered allmulticast mode
[  197.524148][ T9993] bridge0: port 3(ipvlan1) entered blocking state
[  197.527175][ T9993] bridge0: port 3(ipvlan1) entered disabled state
[  197.535828][ T9993] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  197.737234][T10000] xt_limit: Overflow, try lower: 324382443/4200216956
[  197.931818][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1636'.
[  197.934888][T10016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.253765][T10031] netlink: 'syz.5.1642': attribute type 25 has an invalid length.
[  198.263436][T10031] netlink: 'syz.5.1642': attribute type 16 has an invalid length.
[  198.265857][T10031] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1642'.
[  198.302276][T10031] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.307283][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1644'.
[  198.313077][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1644'.
[  199.182612][T10067] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.1649'.
[  199.306020][T10082] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1653'.
[  199.312608][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1653'.
[  199.442953][T10094] netlink: 400 bytes leftover after parsing attributes in process `syz.5.1658'.
[  199.692497][T10109] C: renamed from team_slave_0
[  199.695652][T10109] validate_nla: 1 callbacks suppressed
[  199.695663][T10109] netlink: 'syz.0.1662': attribute type 4 has an invalid length.
[  199.702916][T10109] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  201.486269][T10201] sit0: entered allmulticast mode
[  201.495163][T10201] sit0: entered promiscuous mode
[  201.521669][T10205] netlink: 'syz.6.1701': attribute type 1 has an invalid length.
[  201.638366][T10211] __nla_validate_parse: 6 callbacks suppressed
[  201.638458][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1704'.
[  201.861129][T10213] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  202.407152][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1710'.
[  202.677208][T10241] netlink: 'syz.0.1717': attribute type 16 has an invalid length.
[  202.681772][T10241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1717'.
[  202.821255][T10254] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1723'.
[  203.251416][T10281] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  203.255043][T10281] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  203.511338][T10289] netlink: 'syz.5.1738': attribute type 1 has an invalid length.
[  203.514213][T10289] netlink: 'syz.5.1738': attribute type 2 has an invalid length.
[  203.654102][T10295] netlink: 'syz.5.1740': attribute type 6 has an invalid length.
[  203.657856][T10295] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1740'.
[  204.807481][T10323] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1749'.
[  204.810776][T10323] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1749'.
[  204.848428][T10325] netlink: 'syz.6.1750': attribute type 1 has an invalid length.
[  204.856510][T10325] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1750'.
[  204.905754][T10327] netlink: 'syz.0.1751': attribute type 11 has an invalid length.
[  205.168861][ T5234] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  205.355446][T10341] netlink: 'syz.0.1757': attribute type 1 has an invalid length.
[  205.393927][T10351] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.1761'.
[  205.826630][T10372] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.1769'.
[  206.659577][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'.
[  207.218449][T10415] delete_channel: no stack
[  207.230480][T10415] delete_channel: no stack
[  207.285540][ T5874] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.318436][T10420] netlink: 'syz.0.1794': attribute type 2 has an invalid length.
[  207.362879][ T5874] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.421918][ T5874] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.521228][ T5874] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.716120][ T5874] bridge_slave_1: left allmulticast mode
[  207.718202][ T5874] bridge_slave_1: left promiscuous mode
[  207.724721][T10435] netlink: 'syz.6.1801': attribute type 21 has an invalid length.
[  207.727892][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.731270][T10435] netlink: 14565 bytes leftover after parsing attributes in process `syz.6.1801'.
[  207.745418][ T5874] bridge_slave_0: left promiscuous mode
[  207.747270][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.778047][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  207.788567][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  207.792865][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  207.800681][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  207.805299][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.397271][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.421195][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.493627][ T5874] bond0 (unregistering): Released all slaves
[  208.620881][T10460] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1809'.
[  208.646049][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1809'.
[  209.278928][T10437] chnl_net:caif_netlink_parms(): no params data found
[  209.910681][ T5851] Bluetooth: hci0: command tx timeout
[  210.873181][T10503] syzkaller0: entered promiscuous mode
[  210.879780][T10503] syzkaller0: entered allmulticast mode
[  210.905051][ T5874] hsr_slave_0: left promiscuous mode
[  210.908504][ T5874] hsr_slave_1: left promiscuous mode
[  210.913844][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.916455][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.923030][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.925537][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.941418][ T5874] veth1_macvtap: left promiscuous mode
[  210.943444][ T5874] veth0_macvtap: left promiscuous mode
[  210.945686][ T5874] veth1_vlan: left promiscuous mode
[  210.947824][ T5874] veth0_vlan: left promiscuous mode
[  211.407611][T10529] netlink: 'syz.6.1829': attribute type 1 has an invalid length.
[  211.407910][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  211.456068][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  211.989775][ T5851] Bluetooth: hci0: command tx timeout
[  212.974326][T10437] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.979864][T10437] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.983021][T10437] bridge_slave_0: entered allmulticast mode
[  212.987159][T10437] bridge_slave_0: entered promiscuous mode
[  212.997648][T10437] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.003818][T10437] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.022998][T10437] bridge_slave_1: entered allmulticast mode
[  213.035286][T10437] bridge_slave_1: entered promiscuous mode
[  213.106533][T10548] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1835'.
[  213.162528][T10437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.205228][T10437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.274411][T10437] team0: Port device team_slave_0 added
[  213.281526][T10437] team0: Port device team_slave_1 added
[  213.390239][T10437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.400368][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.423454][T10437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.436141][T10437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.438855][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.464955][T10437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.505724][T10575] netlink: 'syz.6.1841': attribute type 39 has an invalid length.
[  213.516460][T10575] veth0_macvtap: left promiscuous mode
[  213.557991][T10437] hsr_slave_0: entered promiscuous mode
[  213.573136][T10437] hsr_slave_1: entered promiscuous mode
[  213.576945][T10437] debugfs: 'hsr0' already exists in 'hsr'
[  213.586499][T10437] Cannot create hsr debugfs directory
[  214.059676][ T5851] Bluetooth: hci0: command tx timeout
[  214.488141][T10437] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  214.590495][T10437] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  214.605407][T10437] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  214.632332][T10437] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  214.763964][ T5851] Bluetooth: hci1: Dropping invalid advertising data
[  214.766433][ T5851] Bluetooth: hci1: unknown advertising packet type: 0xff
[  214.898433][T10437] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.942251][T10437] 8021q: adding VLAN 0 to HW filter on device team0
[  214.950370][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.953193][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.974991][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.978597][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.240583][T10437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.447605][T10437] veth0_vlan: entered promiscuous mode
[  215.470918][T10437] veth1_vlan: entered promiscuous mode
[  215.505802][T10670] delete_channel: no stack
[  215.511533][T10437] veth0_macvtap: entered promiscuous mode
[  215.523904][T10437] veth1_macvtap: entered promiscuous mode
[  215.559195][T10672] syzkaller0: entered promiscuous mode
[  215.563105][T10672] syzkaller0: entered allmulticast mode
[  215.565938][T10677] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1866'.
[  215.617670][T10437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.627372][T10437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.646998][ T5714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.661584][ T5714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.676598][ T5714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.683727][ T5714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.741626][T10686] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1868'.
[  215.828942][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.835751][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.877250][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.882786][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.042430][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'.
[  216.086373][T10713] netlink: 'syz.0.1874': attribute type 1 has an invalid length.
[  216.090673][T10713] netlink: 'syz.0.1874': attribute type 3 has an invalid length.
[  216.101553][T10713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1874'.
[  216.139964][ T5851] Bluetooth: hci0: command tx timeout
[  216.319215][T10735] netlink: 'syz.0.1877': attribute type 4 has an invalid length.
[  216.324133][T10735] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.1877'.
[  217.033096][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'.
[  217.037013][T10788] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  217.042597][T10788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.061724][T10786] syzkaller1: tun_chr_ioctl cmd 1074812117
[  217.446753][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1904'.
[  217.943871][T10835] wg0 speed is unknown, defaulting to 1000
[  217.947357][T10835] wg0 speed is unknown, defaulting to 1000
[  217.954237][T10835] wg0 speed is unknown, defaulting to 1000
[  217.984809][T10835] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  218.175872][T10835] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  218.578735][T10835] wg0 speed is unknown, defaulting to 1000
[  218.682852][T10835] wg0 speed is unknown, defaulting to 1000
[  218.765859][T10835] wg0 speed is unknown, defaulting to 1000
[  218.782436][T10835] wg0 speed is unknown, defaulting to 1000
[  218.932022][T10868] netlink: 'syz.6.1925': attribute type 33 has an invalid length.
[  218.935173][T10868] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1925'.
[  219.058748][T10868] mac80211_hwsim hwsim15 : renamed from wlan1 (while UP)
[  219.071979][T10868] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  219.865518][T10886] netlink: 'syz.6.1934': attribute type 41 has an invalid length.
[  219.872502][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1934'.
[  221.059185][T10899] netlink: 'syz.5.1939': attribute type 21 has an invalid length.
[  221.065694][T10899] netlink: 'syz.5.1939': attribute type 15 has an invalid length.
[  221.069187][T10899] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1939'.
[  221.078530][T10899] IPv6: NLM_F_CREATE should be specified when creating new route
[  221.092536][T10899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  221.096061][T10899] IPv6: NLM_F_CREATE should be set when creating new route
[  221.099461][T10899] IPv6: NLM_F_CREATE should be set when creating new route
[  221.102809][T10899] IPv6: NLM_F_CREATE should be set when creating new route
[  221.194315][T10907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1944'.
[  221.443378][T10917] sctp: [Deprecated]: syz.5.1948 (pid 10917) Use of int in max_burst socket option deprecated.
[  221.443378][T10917] Use struct sctp_assoc_value instead
[  221.727674][T10927] netlink: 'syz.0.1953': attribute type 1 has an invalid length.
[  221.896399][T10930] netlink: 'syz.0.1954': attribute type 1 has an invalid length.
[  222.033685][T10937] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1958'.
[  222.546002][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'.
[  222.641240][T10972] netlink: 'syz.0.1974': attribute type 21 has an invalid length.
[  222.644493][T10972] netlink: 'syz.0.1974': attribute type 4 has an invalid length.
[  222.647816][T10972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1974'.
[  222.915245][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1985'.
[  222.922591][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1985'.
[  222.927095][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1985'.
[  223.137918][T11008] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  223.194264][T11000] delete_channel: no stack
[  223.552214][T11018] netlink: 'syz.6.1995': attribute type 12 has an invalid length.
[  224.374766][T11077] netlink: 'syz.5.2024': attribute type 1 has an invalid length.
[  224.428027][T11083] __nla_validate_parse: 2 callbacks suppressed
[  224.428039][T11083] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2027'.
[  224.457790][T11085] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2028'.
[  225.486275][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2042'.
[  225.802882][T11127] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2046'.
[  225.870024][T11127] C: renamed from team_slave_0 (while UP)
[  225.937352][T11127] netlink: 'syz.6.2046': attribute type 3 has an invalid length.
[  225.953424][T11127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  226.403682][T11153] netlink: 'syz.5.2057': attribute type 21 has an invalid length.
[  226.406366][T11153] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2057'.
[  226.414221][T11153] netlink: 'syz.5.2057': attribute type 5 has an invalid length.
[  226.416848][T11153] netlink: 'syz.5.2057': attribute type 6 has an invalid length.
[  226.419316][T11153] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2057'.
[  227.358486][T11169] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2064'.
[  227.517335][T11180] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2069'.
[  227.612340][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2073'.
[  227.621312][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2073'.
[  228.394904][T11260] netlink: 'syz.6.2101': attribute type 3 has an invalid length.
[  228.486542][T11261] syzkaller0: entered promiscuous mode
[  228.488954][T11261] syzkaller0: entered allmulticast mode
[  230.007279][T11276] netlink: 'syz.6.2108': attribute type 29 has an invalid length.
[  230.017132][T11299] netlink: 'syz.0.2118': attribute type 29 has an invalid length.
[  230.023715][T11300] netlink: 'syz.0.2118': attribute type 29 has an invalid length.
[  230.027619][T11301] netlink: 'syz.0.2118': attribute type 29 has an invalid length.
[  230.034079][T11302] netlink: 'syz.0.2118': attribute type 29 has an invalid length.
[  230.302317][T11324] __nla_validate_parse: 2 callbacks suppressed
[  230.302328][T11324] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2127'.
[  231.022604][T11361] TCP: TCP_TX_DELAY enabled
[  231.027110][T11361] netlink: 146936 bytes leftover after parsing attributes in process `syz.5.2144'.
[  231.032864][T11361] openvswitch: netlink: Message has 6 unknown bytes.
[  231.351428][T11374] netlink: 'syz.5.2149': attribute type 10 has an invalid length.
[  231.354055][T11374] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2149'.
[  231.357044][T11374] dummy0: entered promiscuous mode
[  231.361783][T11374] bridge0: port 3(dummy0) entered blocking state
[  231.364093][T11374] bridge0: port 3(dummy0) entered disabled state
[  231.366246][T11374] dummy0: entered allmulticast mode
[  231.374286][T11374] bridge0: port 3(dummy0) entered blocking state
[  231.378084][T11374] bridge0: port 3(dummy0) entered forwarding state
[  231.764195][T11387] netlink: 'syz.5.2155': attribute type 39 has an invalid length.
[  231.950927][T11387] veth0_macvtap: left promiscuous mode
[  233.076612][T11423] netlink: 'syz.0.2164': attribute type 4 has an invalid length.
[  233.214900][T11437] netlink: 'syz.0.2171': attribute type 27 has an invalid length.
[  233.217402][T11437] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2171'.
[  233.512580][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2181'.
[  233.647767][T11467] cgroup: Unknown subsys name '0x0000000000000000'
[  233.746710][T11469] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2185'.
[  234.302507][T11486] debugfs: '!' already exists in 'ieee80211'
[  240.647305][T11540] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2211'.
[  240.704977][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2212'.
[  240.971720][T11568] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2225'.
[  241.021230][T11574] netlink: 'syz.0.2228': attribute type 16 has an invalid length.
[  241.028297][T11574] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2228'.
[  241.121929][T11584] netlink: 'syz.6.2233': attribute type 2 has an invalid length.
[  241.124408][T11584] netlink: 119 bytes leftover after parsing attributes in process `syz.6.2233'.
[  241.518931][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2252'.
[  241.613475][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'.
[  241.747565][T11642] netlink: 'syz.0.2261': attribute type 41 has an invalid length.
[  242.075072][T11645] : entered promiscuous mode
[  242.261880][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2265'.
[  242.277914][T11652] netlink: 'syz.6.2265': attribute type 1 has an invalid length.
[  242.283339][T11652] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2265'.
[  242.578287][T11656] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  242.582351][T11656] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  242.655760][T11666] syzkaller0: entered promiscuous mode
[  242.657830][T11666] syzkaller0: entered allmulticast mode
[  242.821124][T11668] netlink: 'syz.6.2270': attribute type 29 has an invalid length.
[  243.094203][T11692] netlink: 'syz.6.2278': attribute type 10 has an invalid length.
[  243.097103][T11692] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2278'.
[  243.604051][T11716] sit0: entered allmulticast mode
[  244.541328][T11744] netlink: 'syz.0.2299': attribute type 4 has an invalid length.
[  244.567205][T11744] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  244.730330][T11767] netlink: 'syz.5.2310': attribute type 1 has an invalid length.
[  244.869279][T11775] netlink: 'syz.6.2314': attribute type 1 has an invalid length.
[  244.872087][T11775] netlink: 'syz.6.2314': attribute type 4 has an invalid length.
[  246.289184][T11801] __nla_validate_parse: 6 callbacks suppressed
[  246.289196][T11801] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2325'.
[  246.499266][T11811] tap0: tun_chr_ioctl cmd 1074025672
[  246.501335][T11811] tap0: ignored: set checksum enabled
[  246.759177][T11816] netlink: 'syz.6.2330': attribute type 4 has an invalid length.
[  247.183457][T11844] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2343'.
[  247.186462][T11844] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2343'.
[  247.258478][T11852] netlink: 'syz.5.2347': attribute type 2 has an invalid length.
[  247.459874][T11859] syzkaller0: entered promiscuous mode
[  247.462524][T11859] syzkaller0: entered allmulticast mode
[  249.126211][T11873] netlink: 'syz.5.2356': attribute type 25 has an invalid length.
[  249.128828][T11873] netlink: 'syz.5.2356': attribute type 28 has an invalid length.
[  249.202065][T11884] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2361'.
[  249.208787][T11884] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  249.470480][T11905] : entered promiscuous mode
[  249.990657][T11922] netlink: 'syz.0.2378': attribute type 39 has an invalid length.
[  250.324484][T11948] netlink: 703 bytes leftover after parsing attributes in process `syz.5.2392'.
[  251.583743][ T5851] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  252.270222][T11999] netlink: 825 bytes leftover after parsing attributes in process `syz.6.2409'.
[  252.289557][T11999] netlink: 130144 bytes leftover after parsing attributes in process `syz.6.2409'.
[  252.327029][T12006] netlink: 'syz.0.2412': attribute type 21 has an invalid length.
[  252.330985][T12006] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2412'.
[  253.424173][T12030] netlink: 'syz.5.2423': attribute type 2 has an invalid length.
[  253.426817][T12030] netlink: 'syz.5.2423': attribute type 1 has an invalid length.
[  253.445343][T12038] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.2427'.
[  253.445917][T12030] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.2423'.
[  253.473505][T12030] block nbd5: not configured, cannot reconfigure
[  253.479552][T12042] netlink: 'syz.6.2428': attribute type 1 has an invalid length.
[  253.491440][T12043] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.2429'.
[  253.665412][ T5851] Bluetooth: hci0: command tx timeout
[  253.749146][ T5851] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  255.312835][T12063] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2439'.
[  255.322701][T12063] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2439'.
[  255.427661][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.430726][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.594222][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2449'.
[  255.597136][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2449'.
[  256.345061][T12125] netlink: 'syz.0.2467': attribute type 12 has an invalid length.
[  256.512382][T12135] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  256.528053][T12135] syzkaller0: entered promiscuous mode
[  256.538147][T12135] syzkaller0: entered allmulticast mode
[  257.950678][T12149] syz.5.2476: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  257.956364][T12149] CPU: 0 UID: 0 PID: 12149 Comm: syz.5.2476 Not tainted syzkaller #0 PREEMPT(full) 
[  257.956380][T12149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  257.956388][T12149] Call Trace:
[  257.956393][T12149]  <TASK>
[  257.956399][T12149]  dump_stack_lvl+0x189/0x250
[  257.956419][T12149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.956429][T12149]  ? __pfx__printk+0x10/0x10
[  257.956442][T12149]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  257.956454][T12149]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  257.956466][T12149]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  257.956477][T12149]  warn_alloc+0x214/0x310
[  257.956492][T12149]  ? stack_depot_save_flags+0x40/0x860
[  257.956504][T12149]  ? __pfx_warn_alloc+0x10/0x10
[  257.956517][T12149]  ? kasan_save_track+0x4f/0x80
[  257.956531][T12149]  ? xskq_create+0x56/0x170
[  257.956541][T12149]  ? xsk_init_queue+0xb0/0x110
[  257.956549][T12149]  ? xsk_setsockopt+0x57b/0x8d0
[  257.956557][T12149]  ? do_sock_setsockopt+0x17c/0x1b0
[  257.956564][T12149]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  257.956571][T12149]  ? do_syscall_64+0xfa/0x3b0
[  257.956608][T12149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.956621][T12149]  __vmalloc_node_range_noprof+0x125/0x12f0
[  257.956650][T12149]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  257.956664][T12149]  ? __kasan_kmalloc+0x93/0xb0
[  257.956676][T12149]  vmalloc_user_noprof+0xad/0xf0
[  257.956687][T12149]  ? xskq_create+0xbf/0x170
[  257.956697][T12149]  xskq_create+0xbf/0x170
[  257.956715][T12149]  xsk_init_queue+0xb0/0x110
[  257.956727][T12149]  xsk_setsockopt+0x57b/0x8d0
[  257.956738][T12149]  ? __pfx_xsk_setsockopt+0x10/0x10
[  257.956748][T12149]  ? __pfx_aa_sk_perm+0x10/0x10
[  257.956762][T12149]  ? __fget_files+0x2a/0x420
[  257.956771][T12149]  ? aa_sock_opt_perm+0xff/0x1b0
[  257.956780][T12149]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  257.956789][T12149]  ? __pfx_xsk_setsockopt+0x10/0x10
[  257.956799][T12149]  do_sock_setsockopt+0x17c/0x1b0
[  257.956809][T12149]  __x64_sys_setsockopt+0x13f/0x1b0
[  257.956819][T12149]  do_syscall_64+0xfa/0x3b0
[  257.956829][T12149]  ? lockdep_hardirqs_on+0x9c/0x150
[  257.956839][T12149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.956846][T12149]  ? exc_page_fault+0x9f/0xf0
[  257.956857][T12149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.956864][T12149] RIP: 0033:0x7f905f78ebe9
[  257.956874][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.956881][T12149] RSP: 002b:00007f90605a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  257.956890][T12149] RAX: ffffffffffffffda RBX: 00007f905f9c6180 RCX: 00007f905f78ebe9
[  257.956896][T12149] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  257.956900][T12149] RBP: 00007f905f811e19 R08: 0000000000000004 R09: 0000000000000000
[  257.956905][T12149] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  257.956909][T12149] R13: 00007f905f9c6218 R14: 00007f905f9c6180 R15: 00007ffc388c4988
[  257.956922][T12149]  </TASK>
[  257.956926][T12149] Mem-Info:
[  258.035658][T12150] netlink: 'syz.5.2476': attribute type 9 has an invalid length.
[  258.043123][T12149] active_anon:13222 inactive_anon:0 isolated_anon:0
[  258.043123][T12149]  active_file:11427 inactive_file:38313 isolated_file:0
[  258.043123][T12149]  unevictable:1768 dirty:114 writeback:0
[  258.043123][T12149]  slab_reclaimable:10228 slab_unreclaimable:82676
[  258.043123][T12149]  mapped:19168 shmem:2463 pagetables:1317
[  258.043123][T12149]  sec_pagetables:0 bounce:0
[  258.043123][T12149]  kernel_misc_reclaimable:0
[  258.043123][T12149]  free:249700 free_pcp:16751 free_cma:0
[  258.081081][T12149] Node 0 active_anon:37572kB inactive_anon:0kB active_file:35496kB inactive_file:144488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50488kB dirty:296kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5260kB pagetables:2668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  258.093210][T12149] Node 1 active_anon:15316kB inactive_anon:0kB active_file:10212kB inactive_file:8764kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26184kB dirty:160kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7260kB pagetables:2600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  258.103842][T12149] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  258.115059][T12149] lowmem_reserve[]: 0 811 811 811 811
[  258.117263][T12149] Node 0 DMA32 free:151372kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37572kB inactive_anon:0kB active_file:35496kB inactive_file:144488kB unevictable:3536kB writepending:296kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:40928kB local_pcp:20184kB free_cma:0kB
[  258.130313][T12149] lowmem_reserve[]: 0 0 0 0 0
[  258.132298][T12149] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  258.144279][T12149] lowmem_reserve[]: 0 0 854 854 854
[  258.146460][T12149] Node 1 Normal free:372712kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15316kB inactive_anon:0kB active_file:10212kB inactive_file:8764kB unevictable:3536kB writepending:160kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29520kB local_pcp:17860kB free_cma:0kB
[  258.157935][T12149] lowmem_reserve[]: 0 0 0 0 0
[  258.159748][T12149] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  258.164395][T12149] Node 0 DMA32: 963*4kB (ME) 678*8kB (UME) 459*16kB (UME) 363*32kB (UME) 226*64kB (UME) 111*128kB (UME) 31*256kB (UM) 7*512kB (UME) 7*1024kB (UME) 3*2048kB (UM) 17*4096kB (M) = 151372kB
[  258.170852][T12149] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  258.176332][T12149] Node 1 Normal: 1471*4kB (UME) 761*8kB (UM) 529*16kB (UM) 236*32kB (UME) 257*64kB (UM) 117*128kB (UM) 52*256kB (UM) 20*512kB (UME) 11*1024kB (UM) 10*2048kB (UM) 63*4096kB (UM) = 372756kB
[  258.183174][T12149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  258.186239][T12149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  258.189692][T12149] 52203 total pagecache pages
[  258.191485][T12149] 0 pages in swap cache
[  258.193084][T12149] Free swap  = 124996kB
[  258.194584][T12149] Total swap = 124996kB
[  258.196203][T12149] 786301 pages RAM
[  258.205495][T12149] 0 pages HighMem/MovableOnly
[  258.207157][T12149] 241329 pages reserved
[  258.208532][T12149] 0 pages cma reserved
[  258.734374][T12157] netlink: 'syz.0.2480': attribute type 3 has an invalid length.
[  258.739150][T12157] __nla_validate_parse: 4 callbacks suppressed
[  258.739224][T12157] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2480'.
[  258.882910][T12157] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2480'.
[  259.022284][T12164] netlink: 'syz.5.2482': attribute type 27 has an invalid length.
[  259.025070][T12164] netlink: 'syz.5.2482': attribute type 1 has an invalid length.
[  259.028455][T12164] bridge0: port 1(bridge_slave_0) entered learning state
[  259.286635][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2490'.
[  259.294775][T12182] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2490'.
[  259.551578][T12200] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2499'.
[  260.226115][T12229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2512'.
[  260.388628][T12246] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  260.446734][T12250] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2522'.
[  260.578735][T12258] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2526'.
[  260.927039][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2539'.
[  260.931685][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2539'.
[  261.071622][T12292] netlink: 'syz.6.2542': attribute type 29 has an invalid length.
[  261.078256][T12296] netlink: 'syz.5.2544': attribute type 25 has an invalid length.
[  261.083636][T12292] netlink: 'syz.6.2542': attribute type 29 has an invalid length.
[  261.116319][T12292] netlink: 'syz.6.2542': attribute type 29 has an invalid length.
[  261.132450][T12292] netlink: 'syz.6.2542': attribute type 29 has an invalid length.
[  261.526268][T12309] netlink: 'syz.0.2550': attribute type 2 has an invalid length.
[  261.956477][T12324] xt_time: unknown flags 0xf4
[  262.435438][T12317] : entered promiscuous mode
[  263.237702][T12363] validate_nla: 2 callbacks suppressed
[  263.237721][T12363] netlink: 'syz.0.2575': attribute type 9 has an invalid length.
[  263.983119][T12410] __nla_validate_parse: 8 callbacks suppressed
[  263.983166][T12410] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2595'.
[  264.067911][ T5851] Bluetooth: hci1: Dropping invalid advertising data
[  264.071934][ T5851] Bluetooth: hci1: Malformed LE Event: 0x02
[  264.878583][T12443] netlink: 'syz.6.2608': attribute type 29 has an invalid length.
[  264.889967][T12443] netlink: 'syz.6.2608': attribute type 29 has an invalid length.
[  265.014587][T12452] netlink: 'syz.6.2612': attribute type 21 has an invalid length.
[  265.017970][T12452] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2612'.
[  265.022587][T12452] netlink: 'syz.6.2612': attribute type 5 has an invalid length.
[  265.026097][T12452] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2612'.
[  265.054623][T12453] : renamed from pim6reg1
[  265.073325][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2614'.
[  265.842744][T12491] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2627'.
[  265.996655][T12495] tap0: tun_chr_ioctl cmd 1074025678
[  265.998675][T12495] tap0: group set to 0
[  266.413066][T12504] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2632'.
[  266.815768][ T5714] bridge_slave_1: left allmulticast mode
[  266.825043][ T5714] bridge_slave_1: left promiscuous mode
[  266.830474][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.861445][ T5714] bridge_slave_0: left promiscuous mode
[  266.867795][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.537180][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.542838][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.546503][ T5714] bond0 (unregistering): Released all slaves
[  267.644687][T12523] wg2: entered promiscuous mode
[  267.646532][T12523] wg2: entered allmulticast mode
[  267.712620][T12537] delete_channel: no stack
[  267.715448][T12537] delete_channel: no stack
[  268.075996][T12548] netlink: 'syz.0.2647': attribute type 4 has an invalid length.
[  268.078702][T12548] netlink: 'syz.0.2647': attribute type 3 has an invalid length.
[  268.084134][T12548] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2647'.
[  268.463289][T12554] sctp: [Deprecated]: syz.0.2649 (pid 12554) Use of int in max_burst socket option deprecated.
[  268.463289][T12554] Use struct sctp_assoc_value instead
[  269.645955][T12541] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2644'.
[  269.744359][ T5851] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10
[  269.830639][ T5714] hsr_slave_0: left promiscuous mode
[  269.853685][ T5714] hsr_slave_1: left promiscuous mode
[  269.856152][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.859163][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.011539][T12583] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  270.288888][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  270.335066][ T5714] team0 (unregistering): Port device team_slave_0 removed
[  270.806838][T12607] netlink: 'syz.0.2670': attribute type 1 has an invalid length.
[  270.881951][T12612] netlink: 'syz.0.2672': attribute type 7 has an invalid length.
[  270.906293][T12617] netlink: 'syz.5.2674': attribute type 29 has an invalid length.
[  270.915163][T12617] netlink: 'syz.5.2674': attribute type 29 has an invalid length.
[  270.923773][T12617] netlink: 'syz.5.2674': attribute type 29 has an invalid length.
[  270.998368][T12624] netlink: 'syz.6.2676': attribute type 1 has an invalid length.
[  271.523747][T12651] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2682'.
[  271.570749][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'.
[  271.825519][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2689'.
[  272.853652][T12703] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2694'.
[  272.859114][T12703] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2694'.
[  273.089184][ T5851] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  273.478213][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'.
[  273.515055][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'.
[  273.568669][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'.
[  274.327591][T12769] netlink: 'syz.5.2720': attribute type 1 has an invalid length.
[  274.424154][T12776] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.2723'.
[  274.441558][T12773] netlink: 'syz.6.2722': attribute type 6 has an invalid length.
[  274.768304][T12788] netlink: 'syz.6.2727': attribute type 2 has an invalid length.
[  275.141464][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2736'.
[  275.165364][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2737'.
[  275.207770][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'.
[  275.285926][T12813] netlink: 'syz.6.2737': attribute type 10 has an invalid length.
[  275.344309][T12813] bond0: (slave bond_slave_0): Releasing backup interface
[  276.124163][T12841] openvswitch: netlink: IP tunnel dst address not specified
[  276.242749][T12847] netlink: 'syz.6.2751': attribute type 29 has an invalid length.
[  276.246463][T12847] netlink: 'syz.6.2751': attribute type 29 has an invalid length.
[  276.259599][T12847] netlink: 'syz.6.2751': attribute type 29 has an invalid length.
[  276.346101][T12851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.352063][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2752'.
[  276.357321][T12849] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2752'.
[  276.362805][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2752'.
[  276.522159][T12864] netlink: 'syz.6.2758': attribute type 3 has an invalid length.
[  276.524813][T12864] netlink: 'syz.6.2758': attribute type 6 has an invalid length.
[  276.527498][T12864] netlink: 'syz.6.2758': attribute type 8 has an invalid length.
[  276.534844][T12864] netlink: 'syz.6.2758': attribute type 10 has an invalid length.
[  276.537963][T12864] netlink: 'syz.6.2758': attribute type 11 has an invalid length.
[  276.542314][T12864] netlink: 198236 bytes leftover after parsing attributes in process `syz.6.2758'.
[  277.147367][T12885] netlink: 'syz.5.2766': attribute type 17 has an invalid length.
[  277.151006][T12885] netlink: 'syz.5.2766': attribute type 16 has an invalid length.
[  277.155783][T12885] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2766'.
[  277.204170][T12887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.209298][T12887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.215579][T12887] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  277.338380][T12897] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  277.342118][T12897] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  277.600048][T12908] xt_time: invalid argument - start or stop time greater than 23:59:59
[  279.635873][T12950] team0 (unregistering): Port device C removed
[  279.716415][T12950] team0 (unregistering): Port device team_slave_1 removed
[  279.941893][T12989] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2811'.
[  279.978043][T12991] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2812'.
[  280.367907][T13013] __nla_validate_parse: 2 callbacks suppressed
[  280.367928][T13013] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2822'.
[  281.095493][T13029] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2830'.
[  281.145059][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2831'.
[  281.211149][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'.
[  281.329651][T13041] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2836'.
[  281.401895][T13045] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2838'.
[  281.877148][T13064] pim6reg1: entered promiscuous mode
[  281.878892][T13064] pim6reg1: entered allmulticast mode
[  282.004409][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2849'.
[  282.464336][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2854'.
[  283.143512][T13101] validate_nla: 4 callbacks suppressed
[  283.143529][T13101] netlink: 'syz.5.2858': attribute type 13 has an invalid length.
[  283.149114][T13101] netlink: 'syz.5.2858': attribute type 58 has an invalid length.
[  283.155531][T13101] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2858'.
[  283.651051][T13114] nftables ruleset with unbound chain
[  284.729546][T13154] netlink: 'syz.0.2872': attribute type 21 has an invalid length.
[  284.753728][T13154] netlink: 'syz.0.2872': attribute type 1 has an invalid length.
[  284.890896][T13162] netlink: 'syz.5.2874': attribute type 2 has an invalid length.
[  285.794340][T13168] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2876'.
[  285.834889][T13172] netlink: 'syz.0.2878': attribute type 29 has an invalid length.
[  285.838636][T13172] netlink: 'syz.0.2878': attribute type 29 has an invalid length.
[  286.178942][T13196] netlink: 'syz.0.2890': attribute type 21 has an invalid length.
[  286.193826][T13196] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2890'.
[  286.234618][T13200] netlink: 'syz.5.2892': attribute type 10 has an invalid length.
[  286.237121][T13200] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2892'.
[  286.383259][T13204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2894'.
[  286.389239][T13204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2894'.
[  287.880132][T13216] syzkaller0: entered promiscuous mode
[  287.881932][T13216] syzkaller0: entered allmulticast mode
[  288.208940][T13224] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2903'.
[  288.221035][T13224] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  289.707068][T13226] lo speed is unknown, defaulting to 1000
[  289.710519][T13226] lo speed is unknown, defaulting to 1000
[  289.712835][T13226] lo speed is unknown, defaulting to 1000
[  290.377844][T13226] infiniband syz2: set active
[  290.379601][ T5916] lo speed is unknown, defaulting to 1000
[  290.383926][T13226] infiniband syz2: added lo
[  290.401283][T13226] syz2: rxe_create_cq: returned err = -12
[  290.416296][T13226] infiniband syz2: Couldn't create ib_mad CQ
[  290.427758][T13226] infiniband syz2: Couldn't open port 1
[  290.546499][T13226] RDS/IB: syz2: added
[  290.548136][T13226] smc: adding ib device syz2 with port count 1
[  290.566320][T13226] smc:    ib device syz2 port 1 has pnetid 
[  290.577200][  T975] lo speed is unknown, defaulting to 1000
[  290.582762][T13226] lo speed is unknown, defaulting to 1000
[  291.134686][T13226] lo speed is unknown, defaulting to 1000
[  291.407888][T13226] lo speed is unknown, defaulting to 1000
[  292.823882][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2917'.
[  292.827617][T13256] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  292.831437][T13256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.045698][T13271] netlink: 'syz.5.2923': attribute type 29 has an invalid length.
[  293.388885][T13287] netlink: 'syz.5.2931': attribute type 27 has an invalid length.
[  293.391956][T13287] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.2931'.
[  293.612649][T13299] netlink: 'syz.5.2937': attribute type 4 has an invalid length.
[  293.615153][T13299] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2937'.
[  293.631297][T13299] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  294.191359][T13320] netlink: 'syz.0.2947': attribute type 10 has an invalid length.
[  294.291433][T13327] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.2949'.
[  295.085393][T13347] netlink: 'syz.0.2960': attribute type 3 has an invalid length.
[  295.088149][T13347] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2960'.
[  295.309271][T13362] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2968'.
[  295.590267][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2972'.
[  295.677516][T13374] siw: device registration error -23
[  295.944941][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  295.948573][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  295.952760][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  295.958479][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  295.962242][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  295.988465][T13381] wg0 speed is unknown, defaulting to 1000
[  295.993454][T13381] lo speed is unknown, defaulting to 1000
[  296.255116][T13381] chnl_net:caif_netlink_parms(): no params data found
[  296.268915][T13397] netlink: 495 bytes leftover after parsing attributes in process `syz.0.2981'.
[  296.300632][T13399] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.2982'.
[  296.318884][T13399] netlink: 'syz.5.2982': attribute type 2 has an invalid length.
[  296.322565][T13399] netlink: 62135 bytes leftover after parsing attributes in process `syz.5.2982'.
[  296.517159][T13381] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.541088][T13381] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.544241][T13381] bridge_slave_0: entered allmulticast mode
[  296.561774][T13381] bridge_slave_0: entered promiscuous mode
[  296.573115][T13381] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.576218][T13381] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.579274][T13381] bridge_slave_1: entered allmulticast mode
[  296.599003][T13381] bridge_slave_1: entered promiscuous mode
[  296.675332][T13381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.683590][T13381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.737152][T13381] team0: Port device team_slave_0 added
[  296.747505][T13381] team0: Port device team_slave_1 added
[  296.798377][T13381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.810575][T13381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.822995][T13381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.840415][T13381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.843287][T13381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.869561][T13381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.970172][T13381] hsr_slave_0: entered promiscuous mode
[  296.973507][T13381] hsr_slave_1: entered promiscuous mode
[  297.268416][T13381] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  297.278029][T13381] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  297.294185][T13381] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  297.311954][T13381] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  297.471888][T13381] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.501035][T13381] 8021q: adding VLAN 0 to HW filter on device team0
[  297.514447][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.516790][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.541552][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.544190][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.727395][T13433] wg0 speed is unknown, defaulting to 1000
[  297.762308][T13433] lo speed is unknown, defaulting to 1000
[  297.795230][T13381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.979926][ T5234] Bluetooth: hci1: command tx timeout
[  298.116703][T13381] veth0_vlan: entered promiscuous mode
[  298.135741][T13381] veth1_vlan: entered promiscuous mode
[  298.173330][T13381] veth0_macvtap: entered promiscuous mode
[  298.182086][T13381] veth1_macvtap: entered promiscuous mode
[  298.204169][T13381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.224058][T13381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.236258][ T5873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.247660][ T5873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.254413][ T5873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.456606][ T5873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.689907][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.693105][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.773775][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.778868][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.025970][T13489] netlink: 'syz.0.3012': attribute type 97 has an invalid length.
[  300.031335][T13487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3010'.
[  300.034387][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'.
[  300.039158][T13489] netlink: 'syz.0.3012': attribute type 97 has an invalid length.
[  300.044055][T13487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3010'.
[  300.059606][ T5234] Bluetooth: hci1: command tx timeout
[  300.060677][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'.
[  300.166848][T13492] netdevsim netdevsim7 : renamed from netdevsim0 (while UP)
[  300.317235][T13497] netlink: 'syz.5.3015': attribute type 21 has an invalid length.
[  300.325415][T13497] netlink: 'syz.5.3015': attribute type 5 has an invalid length.
[  300.345588][T13499] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3016'.
[  300.436325][T13505] netlink: 'syz.0.3019': attribute type 9 has an invalid length.
[  300.873302][T13519] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3025'.
[  301.028362][T13525] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.3028'.
[  301.395352][T13552] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3040'.
[  301.411028][T13553] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  301.535045][T13562] netlink: 'syz.0.3045': attribute type 1 has an invalid length.
[  301.537551][T13562] netlink: 'syz.0.3045': attribute type 2 has an invalid length.
[  301.541306][T13562] netlink: 'syz.0.3045': attribute type 4 has an invalid length.
[  301.544432][T13562] netlink: 'syz.0.3045': attribute type 1 has an invalid length.
[  301.547410][T13562] netlink: 'syz.0.3045': attribute type 2 has an invalid length.
[  301.550594][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'.
[  301.553805][T13562] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.3045'.
[  302.142305][ T5234] Bluetooth: hci1: command tx timeout
[  303.667057][T13629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.220365][ T5234] Bluetooth: hci1: command tx timeout
[  304.261805][T13672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.078910][T13679] validate_nla: 2 callbacks suppressed
[  305.078934][T13679] netlink: 'syz.0.3099': attribute type 9 has an invalid length.
[  305.087064][T13679] __nla_validate_parse: 4 callbacks suppressed
[  305.087078][T13679] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.3099'.
[  305.556463][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'.
[  305.715717][T13713] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3107'.
[  305.721461][T13713] bond_slave_0: entered promiscuous mode
[  305.723469][T13713] bond_slave_1: entered promiscuous mode
[  305.798245][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3122'.
[  305.808157][T13729] netlink: 'syz.7.3123': attribute type 21 has an invalid length.
[  305.811465][T13729] IPv6: NLM_F_CREATE should be specified when creating new route
[  305.820001][T13727] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3122'.
[  306.016219][T13739] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3128'.
[  306.068020][T13750] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  306.129876][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3135'.
[  306.292837][T13762] netlink: 'syz.7.3140': attribute type 27 has an invalid length.
[  306.408363][T13769] netlink: 'syz.7.3142': attribute type 19 has an invalid length.
[  306.607778][T13776] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3145'.
[  306.641437][T13776] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  306.783784][T13786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3150'.
[  306.914102][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3151'.
[  307.136681][ T5234] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28
[  307.140480][ T5234] Bluetooth: hci0: Unable to find connection with handle 0x0000
[  307.505268][T13813] bond_slave_0: entered promiscuous mode
[  307.507398][T13813] bond_slave_1: entered promiscuous mode
[  307.766876][T13832] netlink: 'syz.5.3171': attribute type 15 has an invalid length.
[  308.377345][T13874] netlink: 'syz.0.3191': attribute type 12 has an invalid length.
[  308.530396][T13885] netlink: 'syz.7.3195': attribute type 10 has an invalid length.
[  308.577670][T13885] batman_adv: batadv0: Adding interface: hsr_slave_1
[  308.592944][T13885] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.623220][T13885] batman_adv: batadv0: Interface activated: hsr_slave_1
[  308.884024][T13904] ==================================================================
[  308.886895][T13904] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  308.889489][T13904] Read of size 1 at addr ffff888113446bb0 by task syz.5.3205/13904
[  308.893027][T13904] 
[  308.894164][T13904] CPU: 1 UID: 0 PID: 13904 Comm: syz.5.3205 Not tainted syzkaller #0 PREEMPT(full) 
[  308.894178][T13904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.894187][T13904] Call Trace:
[  308.894193][T13904]  <TASK>
[  308.894200][T13904]  dump_stack_lvl+0x189/0x250
[  308.894218][T13904]  ? __virt_addr_valid+0x1c8/0x5c0
[  308.894230][T13904]  ? rcu_is_watching+0x15/0xb0
[  308.894240][T13904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.894251][T13904]  ? rcu_is_watching+0x15/0xb0
[  308.894261][T13904]  ? lock_release+0x4b/0x3e0
[  308.894275][T13904]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  308.894296][T13904]  ? __virt_addr_valid+0x1c8/0x5c0
[  308.894307][T13904]  ? __virt_addr_valid+0x4a5/0x5c0
[  308.894318][T13904]  print_report+0xca/0x240
[  308.894329][T13904]  ? __xfrm_state_insert+0x8af/0x1450
[  308.894337][T13904]  kasan_report+0x118/0x150
[  308.894352][T13904]  ? __xfrm_state_insert+0x8af/0x1450
[  308.894362][T13904]  __xfrm_state_insert+0x8af/0x1450
[  308.894373][T13904]  ? xfrm_state_insert+0x44/0x60
[  308.894382][T13904]  xfrm_state_insert+0x54/0x60
[  308.894390][T13904]  ipcomp6_init_state+0x655/0x900
[  308.894402][T13904]  __xfrm_init_state+0xa76/0x13f0
[  308.894411][T13904]  ? __xfrm_init_state+0x7ef/0x13f0
[  308.894421][T13904]  xfrm_add_sa+0x2f5b/0x4070
[  308.894432][T13904]  ? __pfx_xfrm_add_sa+0x10/0x10
[  308.894439][T13904]  ? apparmor_capable+0x137/0x1b0
[  308.894451][T13904]  ? __nla_parse+0x40/0x60
[  308.894463][T13904]  xfrm_user_rcv_msg+0x7a3/0xab0
[  308.894473][T13904]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  308.894490][T13904]  ? __pfx___mutex_trylock_common+0x10/0x10
[  308.894500][T13904]  ? rcu_is_watching+0x15/0xb0
[  308.894508][T13904]  ? trace_contention_end+0x39/0x120
[  308.894517][T13904]  ? __mutex_lock+0x335/0x1360
[  308.894529][T13904]  netlink_rcv_skb+0x208/0x470
[  308.894542][T13904]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  308.894551][T13904]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.894564][T13904]  ? netlink_deliver_tap+0x2e/0x1b0
[  308.894574][T13904]  ? netlink_deliver_tap+0x2e/0x1b0
[  308.894585][T13904]  xfrm_netlink_rcv+0x79/0x90
[  308.894593][T13904]  netlink_unicast+0x82f/0x9e0
[  308.894605][T13904]  ? __pfx_netlink_unicast+0x10/0x10
[  308.894614][T13904]  ? netlink_sendmsg+0x642/0xb30
[  308.894627][T13904]  ? skb_put+0x11b/0x210
[  308.894639][T13904]  netlink_sendmsg+0x805/0xb30
[  308.894663][T13904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.894686][T13904]  ? aa_sock_msg_perm+0xf1/0x1d0
[  308.894703][T13904]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  308.894721][T13904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.894740][T13904]  __sock_sendmsg+0x21c/0x270
[  308.894756][T13904]  ____sys_sendmsg+0x505/0x830
[  308.894769][T13904]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.894784][T13904]  ? import_iovec+0x74/0xa0
[  308.894799][T13904]  ___sys_sendmsg+0x21f/0x2a0
[  308.894813][T13904]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.894838][T13904]  ? __fget_files+0x2a/0x420
[  308.894853][T13904]  ? __fget_files+0x3a0/0x420
[  308.894870][T13904]  __x64_sys_sendmsg+0x19b/0x260
[  308.894887][T13904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  308.894905][T13904]  ? rcu_is_watching+0x15/0xb0
[  308.894920][T13904]  ? do_syscall_64+0xbe/0x3b0
[  308.894944][T13904]  do_syscall_64+0xfa/0x3b0
[  308.894961][T13904]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.894981][T13904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.894993][T13904]  ? exc_page_fault+0x9f/0xf0
[  308.895011][T13904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.895026][T13904] RIP: 0033:0x7f905f78ebe9
[  308.895039][T13904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.895053][T13904] RSP: 002b:00007f90605e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.895070][T13904] RAX: ffffffffffffffda RBX: 00007f905f9c5fa0 RCX: 00007f905f78ebe9
[  308.895080][T13904] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  308.895088][T13904] RBP: 00007f905f811e19 R08: 0000000000000000 R09: 0000000000000000
[  308.895096][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.895104][T13904] R13: 00007f905f9c6038 R14: 00007f905f9c5fa0 R15: 00007ffc388c4988
[  308.895120][T13904]  </TASK>
[  308.895125][T13904] 
[  309.053174][T13904] Allocated by task 12759:
[  309.054923][T13904]  kasan_save_track+0x3e/0x80
[  309.058165][T13904]  __kasan_slab_alloc+0x6c/0x80
[  309.060151][T13904]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  309.062366][T13904]  xfrm_state_alloc+0x24/0x2f0
[  309.064300][T13904]  xfrm_add_sa+0x17d1/0x4070
[  309.066187][T13904]  xfrm_user_rcv_msg+0x7a3/0xab0
[  309.068155][T13904]  netlink_rcv_skb+0x208/0x470
[  309.070047][T13904]  xfrm_netlink_rcv+0x79/0x90
[  309.071945][T13904]  netlink_unicast+0x82f/0x9e0
[  309.073857][T13904]  netlink_sendmsg+0x805/0xb30
[  309.075753][T13904]  __sock_sendmsg+0x21c/0x270
[  309.077605][T13904]  ____sys_sendmsg+0x505/0x830
[  309.079570][T13904]  ___sys_sendmsg+0x21f/0x2a0
[  309.081288][T13904]  __x64_sys_sendmsg+0x19b/0x260
[  309.083065][T13904]  do_syscall_64+0xfa/0x3b0
[  309.084726][T13904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.086809][T13904] 
[  309.087672][T13904] Freed by task 24:
[  309.089207][T13904]  kasan_save_track+0x3e/0x80
[  309.091090][T13904]  kasan_save_free_info+0x46/0x50
[  309.093118][T13904]  __kasan_slab_free+0x5b/0x80
[  309.095072][T13904]  kmem_cache_free+0x18f/0x400
[  309.097001][T13904]  xfrm_state_gc_task+0x52d/0x6b0
[  309.098991][T13904]  process_scheduled_works+0xae1/0x17b0
[  309.101187][T13904]  worker_thread+0x8a0/0xda0
[  309.103012][T13904]  kthread+0x711/0x8a0
[  309.104706][T13904]  ret_from_fork+0x3fc/0x770
[  309.106573][T13904]  ret_from_fork_asm+0x1a/0x30
[  309.108499][T13904] 
[  309.109489][T13904] The buggy address belongs to the object at ffff888113446880
[  309.109489][T13904]  which belongs to the cache xfrm_state of size 928
[  309.114646][T13904] The buggy address is located 816 bytes inside of
[  309.114646][T13904]  freed 928-byte region [ffff888113446880, ffff888113446c20)
[  309.119893][T13904] 
[  309.120859][T13904] The buggy address belongs to the physical page:
[  309.123407][T13904] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888113447a80 pfn:0x113444
[  309.127299][T13904] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  309.130567][T13904] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  309.133367][T13904] page_type: f5(slab)
[  309.134812][T13904] raw: 057ff00000000040 ffff888104e0eb40 dead000000000122 0000000000000000
[  309.138086][T13904] raw: ffff888113447a80 00000000800e0007 00000000f5000000 0000000000000000
[  309.141187][T13904] head: 057ff00000000040 ffff888104e0eb40 dead000000000122 0000000000000000
[  309.144276][T13904] head: ffff888113447a80 00000000800e0007 00000000f5000000 0000000000000000
[  309.147026][T13904] head: 057ff00000000002 ffffea00044d1101 00000000ffffffff 00000000ffffffff
[  309.150165][T13904] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  309.153307][T13904] page dumped because: kasan: bad access detected
[  309.155609][T13904] page_owner tracks the page as allocated
[  309.157584][T13904] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6357, tgid 6354 (syz.1.188), ts 78820620164, free_ts 73460504558
[  309.163962][T13904]  post_alloc_hook+0x240/0x2a0
[  309.165669][T13904]  get_page_from_freelist+0x21e4/0x22c0
[  309.167617][T13904]  __alloc_frozen_pages_noprof+0x181/0x370
[  309.169720][T13904]  alloc_pages_mpol+0x232/0x4a0
[  309.171275][T13904]  allocate_slab+0x8a/0x370
[  309.172977][T13904]  ___slab_alloc+0xbeb/0x1410
[  309.174774][T13904]  kmem_cache_alloc_noprof+0x283/0x3c0
[  309.176905][T13904]  xfrm_state_alloc+0x24/0x2f0
[  309.178646][T13904]  __find_acq_core+0x8a7/0x1c00
[  309.180112][T13904]  xfrm_find_acq+0x78/0xa0
[  309.181514][T13904]  pfkey_getspi+0x65d/0xee0
[  309.182927][T13904]  pfkey_sendmsg+0xbfe/0x1090
[  309.184374][T13904]  __sock_sendmsg+0x21c/0x270
[  309.185763][T13904]  ____sys_sendmsg+0x505/0x830
[  309.187214][T13904]  ___sys_sendmsg+0x21f/0x2a0
[  309.189045][T13904]  __x64_sys_sendmsg+0x19b/0x260
[  309.190992][T13904] page last free pid 6168 tgid 6166 stack trace:
[  309.192870][T13904]  __free_frozen_pages+0xbc4/0xd30
[  309.194735][T13904]  __slab_free+0x303/0x3c0
[  309.196093][T13904]  qlist_free_all+0x97/0x140
[  309.197655][T13904]  kasan_quarantine_reduce+0x148/0x160
[  309.199704][T13904]  __kasan_slab_alloc+0x22/0x80
[  309.201567][T13904]  __kmalloc_cache_noprof+0x1be/0x3d0
[  309.203557][T13904]  do_check+0x3558/0xe520
[  309.205188][T13904]  do_check_common+0x1949/0x24f0
[  309.206744][T13904]  bpf_check+0x1746a/0x1d2e0
[  309.208297][T13904]  bpf_prog_load+0x1318/0x1930
[  309.209971][T13904]  __sys_bpf+0x528/0x870
[  309.211638][T13904]  __x64_sys_bpf+0x7c/0x90
[  309.213232][T13904]  do_syscall_64+0xfa/0x3b0
[  309.214945][T13904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.216996][T13904] 
[  309.217731][T13904] Memory state around the buggy address:
[  309.219614][T13904]  ffff888113446a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  309.222550][T13904]  ffff888113446b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  309.225489][T13904] >ffff888113446b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  309.228176][T13904]                                      ^
[  309.230012][T13904]  ffff888113446c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  309.232458][T13904]  ffff888113446c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  309.235196][T13904] ==================================================================
[  309.238329][T13904] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  309.240896][T13904] CPU: 1 UID: 0 PID: 13904 Comm: syz.5.3205 Not tainted syzkaller #0 PREEMPT(full) 
[  309.244238][T13904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.247830][T13904] Call Trace:
[  309.248870][T13904]  <TASK>
[  309.249798][T13904]  dump_stack_lvl+0x99/0x250
[  309.251241][T13904]  ? __asan_memcpy+0x40/0x70
[  309.252986][T13904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.255055][T13904]  ? __pfx__printk+0x10/0x10
[  309.256546][T13904]  vpanic+0x281/0x750
[  309.258084][T13904]  ? __pfx_vpanic+0x10/0x10
[  309.259715][T13904]  ? irqentry_exit+0x74/0x90
[  309.261404][T13904]  panic+0xb9/0xc0
[  309.262776][T13904]  ? __pfx_panic+0x10/0x10
[  309.264373][T13904]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  309.266381][T13904]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  309.268506][T13904]  ? is_module_address+0x17/0xf0
[  309.270226][T13904]  ? __xfrm_state_insert+0x8af/0x1450
[  309.271931][T13904]  check_panic_on_warn+0x89/0xb0
[  309.273451][T13904]  ? __xfrm_state_insert+0x8af/0x1450
[  309.275354][T13904]  end_report+0x78/0x160
[  309.276641][T13904]  kasan_report+0x129/0x150
[  309.278317][T13904]  ? __xfrm_state_insert+0x8af/0x1450
[  309.279988][T13904]  __xfrm_state_insert+0x8af/0x1450
[  309.281990][T13904]  ? xfrm_state_insert+0x44/0x60
[  309.283767][T13904]  xfrm_state_insert+0x54/0x60
[  309.285629][T13904]  ipcomp6_init_state+0x655/0x900
[  309.287573][T13904]  __xfrm_init_state+0xa76/0x13f0
[  309.289054][T13904]  ? __xfrm_init_state+0x7ef/0x13f0
[  309.290616][T13904]  xfrm_add_sa+0x2f5b/0x4070
[  309.292039][T13904]  ? __pfx_xfrm_add_sa+0x10/0x10
[  309.293775][T13904]  ? apparmor_capable+0x137/0x1b0
[  309.295351][T13904]  ? __nla_parse+0x40/0x60
[  309.296740][T13904]  xfrm_user_rcv_msg+0x7a3/0xab0
[  309.298296][T13904]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  309.299994][T13904]  ? __pfx___mutex_trylock_common+0x10/0x10
[  309.301846][T13904]  ? rcu_is_watching+0x15/0xb0
[  309.303378][T13904]  ? trace_contention_end+0x39/0x120
[  309.305006][T13904]  ? __mutex_lock+0x335/0x1360
[  309.306569][T13904]  netlink_rcv_skb+0x208/0x470
[  309.308194][T13904]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  309.310024][T13904]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  309.311838][T13904]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.313558][T13904]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.315248][T13904]  xfrm_netlink_rcv+0x79/0x90
[  309.316766][T13904]  netlink_unicast+0x82f/0x9e0
[  309.318340][T13904]  ? __pfx_netlink_unicast+0x10/0x10
[  309.320516][T13904]  ? netlink_sendmsg+0x642/0xb30
[  309.323193][T13904]  ? skb_put+0x11b/0x210
[  309.325191][T13904]  netlink_sendmsg+0x805/0xb30
[  309.327230][T13904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.329474][T13904]  ? aa_sock_msg_perm+0xf1/0x1d0
[  309.331540][T13904]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  309.333728][T13904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.335958][T13904]  __sock_sendmsg+0x21c/0x270
[  309.338150][T13904]  ____sys_sendmsg+0x505/0x830
[  309.340146][T13904]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.341829][T13904]  ? import_iovec+0x74/0xa0
[  309.343594][T13904]  ___sys_sendmsg+0x21f/0x2a0
[  309.345220][T13904]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.347068][T13904]  ? __fget_files+0x2a/0x420
[  309.348635][T13904]  ? __fget_files+0x3a0/0x420
[  309.350105][T13904]  __x64_sys_sendmsg+0x19b/0x260
[  309.351814][T13904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  309.353643][T13904]  ? rcu_is_watching+0x15/0xb0
[  309.355653][T13904]  ? do_syscall_64+0xbe/0x3b0
[  309.357546][T13904]  do_syscall_64+0xfa/0x3b0
[  309.359197][T13904]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.361066][T13904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.363057][T13904]  ? exc_page_fault+0x9f/0xf0
[  309.365074][T13904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.367210][T13904] RIP: 0033:0x7f905f78ebe9
[  309.368617][T13904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.374698][T13904] RSP: 002b:00007f90605e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.377586][T13904] RAX: ffffffffffffffda RBX: 00007f905f9c5fa0 RCX: 00007f905f78ebe9
[  309.380130][T13904] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  309.382579][T13904] RBP: 00007f905f811e19 R08: 0000000000000000 R09: 0000000000000000
[  309.384990][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.387433][T13904] R13: 00007f905f9c6038 R14: 00007f905f9c5fa0 R15: 00007ffc388c4988
[  309.390258][T13904]  </TASK>
[  309.391823][T13904] Kernel Offset: disabled
[  309.393255][T13904] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:08:47  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44e0b RBX=1ffff11026cc7f61 RCX=ffff888109723980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900065cf4c0 RSP=ffffc900065cf340
R8 =ffffffff8fa38037 R9 =1ffffffff1f47006 R10=dffffc0000000000 R11=fffffbfff1f47007
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44df3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555558da2808 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f697b397498 00007f697b397470 XMM03=00007f697b3974a8 00007f697b3974a0
XMM04=00007f697befd100 00007f697b397460 XMM05=00007f697b397478 00007f697b3974c0
XMM06=00007f697b3974b8 00007f697b3974b0 XMM07=00007f697b3974a8 00007f697b3974a0
XMM08=0000000000000000 00007f697b212ee7 XMM09=0000000000000000 00007f697b212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000161a RDI=000000000000161b RBP=00000000000003f8 RSP=ffffc900065fe9f0
R8 =ffff888021610237 R9 =1ffff110042c2046 R10=dffffc0000000000 R11=ffffffff854ef9f0
R12=dffffc0000000000 R13=ffffffff99af98d2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efa6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f90605e56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000440 CR3=000000003c39c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f905f997498 00007f905f997470 XMM03=00007f905f9974a8 00007f905f9974a0
XMM04=00007f90604fd100 00007f905f997460 XMM05=00007f905f997478 00007f905f9974c0
XMM06=00007f905f9974b8 00007f905f9974b0 XMM07=00007f905f9974a8 00007f905f9974a0
XMM08=0000000000000000 00007f905f812ee7 XMM09=0000000000000000 00007f905f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
