last executing test programs:

49.145082308s ago: executing program 2 (id=360):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)

48.835591986s ago: executing program 1 (id=365):
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

48.8354194s ago: executing program 2 (id=366):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="d3000000000000007b11b800000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

48.834992717s ago: executing program 1 (id=367):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800000, 0xfffd, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)

48.764557507s ago: executing program 2 (id=368):
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$inet(r0, &(0x7f0000001980)={&(0x7f00000012c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}, 0x840)

48.764411561s ago: executing program 2 (id=369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)

48.712758279s ago: executing program 1 (id=370):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000680), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

48.711091896s ago: executing program 1 (id=372):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4081)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x84000)

48.655283066s ago: executing program 2 (id=374):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000230000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20)

48.593936615s ago: executing program 1 (id=375):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011006d"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

48.34420822s ago: executing program 1 (id=376):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

48.129541885s ago: executing program 32 (id=376):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

48.082847205s ago: executing program 2 (id=378):
r0 = socket$alg(0x26, 0x5, 0x0)
close(r0)

48.082756317s ago: executing program 33 (id=378):
r0 = socket$alg(0x26, 0x5, 0x0)
close(r0)

3.371508823s ago: executing program 0 (id=950):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0)

3.370992787s ago: executing program 3 (id=952):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0x50, 0xc, "45c670b78a43493facd9311e14402d020cd5a8c61e431d2da90a7ae4cb3598511d124b42164784b4a8fb5493e36411c7648294e5bffab3f02af34a3d017189ad71f4afa8a09d9bd177fca025"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000)

3.315562821s ago: executing program 0 (id=954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b9000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2000, &(0x7f0000000040), 0x3b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000180))
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="f01000002d00010026bd7000fcdbdf250b0000000c00168006006e005d0000000800bd00e000000208009700", @ANYRES32=r2, @ANYBLOB="bd10028014"], 0x10f0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2.408199076s ago: executing program 0 (id=958):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000640), 0x4)

2.357603822s ago: executing program 0 (id=960):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc730, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x11034, 0x80, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000011)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.291073064s ago: executing program 3 (id=963):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x1006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

2.05182848s ago: executing program 4 (id=964):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xb, 0x1}, 0x10}, 0x90)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc)

2.051555933s ago: executing program 4 (id=965):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)

2.000585295s ago: executing program 4 (id=966):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001480)={&(0x7f00000012c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0)

2.000391887s ago: executing program 3 (id=967):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffffffffffedd}, 0x48)

2.000257744s ago: executing program 4 (id=968):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)

1.932049275s ago: executing program 3 (id=969):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)
close(0x3)

1.931877334s ago: executing program 0 (id=970):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.750649423s ago: executing program 4 (id=971):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.681685772s ago: executing program 0 (id=972):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000001000008510000000000095000000f1e280bd42ad63135ac47f9ff282693da06736ce2fcc50e3eda52d08"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)

1.606876806s ago: executing program 34 (id=972):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000001000008510000000000095000000f1e280bd42ad63135ac47f9ff282693da06736ce2fcc50e3eda52d08"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)

1.4552056s ago: executing program 4 (id=974):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x100c, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200003, 0x0)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

1.455020594s ago: executing program 35 (id=974):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x100c, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200003, 0x0)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

130.703027ms ago: executing program 3 (id=975):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xfe00000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}}, 0x80, 0x0, 0x0, 0x0, 0xfea5}, 0x4004090)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

0s ago: executing program 3 (id=976):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, 0x0, 0x20000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="000003009165a101010000aaaaaaaa07aaaaaaaaaaaa"])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r4 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=""/167, 0xa7}, 0x50)
sendmsg$kcm(r4, 0x0, 0x40)
r5 = socket$kcm(0x28, 0x1, 0x0)
recvmsg(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)
close(r0)
sendmsg$sock(r4, 0x0, 0x4004840)
r6 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640))
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff}, 0x14}}, 0x4040000)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2061' (ED25519) to the list of known hosts.
syzkaller login: [   57.146358][ T5831] cgroup: Unknown subsys name 'net'
[   57.316725][ T5831] cgroup: Unknown subsys name 'cpuset'
[   57.322368][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.127178][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.382143][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.386443][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.396199][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.399708][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.404273][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.407003][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.410570][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.424775][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.428145][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.433923][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.437883][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.439243][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.441288][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.448729][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.455160][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.822590][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.886525][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   65.926882][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   65.990646][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.993550][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.996682][ T5855] bridge_slave_0: entered allmulticast mode
[   66.002602][ T5855] bridge_slave_0: entered promiscuous mode
[   66.027957][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.031230][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.034071][ T5855] bridge_slave_1: entered allmulticast mode
[   66.037360][ T5855] bridge_slave_1: entered promiscuous mode
[   66.088462][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.107207][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.110160][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.112380][ T5845] bridge_slave_0: entered allmulticast mode
[   66.115048][ T5845] bridge_slave_0: entered promiscuous mode
[   66.127880][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.144733][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.147693][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.151203][ T5845] bridge_slave_1: entered allmulticast mode
[   66.155008][ T5845] bridge_slave_1: entered promiscuous mode
[   66.222404][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.224719][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.227439][ T5850] bridge_slave_0: entered allmulticast mode
[   66.231875][ T5850] bridge_slave_0: entered promiscuous mode
[   66.238403][ T5855] team0: Port device team_slave_0 added
[   66.243759][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.249024][ T5855] team0: Port device team_slave_1 added
[   66.251797][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.254614][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.257491][ T5850] bridge_slave_1: entered allmulticast mode
[   66.261507][ T5850] bridge_slave_1: entered promiscuous mode
[   66.267222][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.338154][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.341059][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.351701][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.357237][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.360249][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.370869][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.384481][ T5845] team0: Port device team_slave_0 added
[   66.394231][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.400468][ T5845] team0: Port device team_slave_1 added
[   66.406744][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.463241][ T5850] team0: Port device team_slave_0 added
[   66.468223][ T5850] team0: Port device team_slave_1 added
[   66.484503][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.486676][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.496218][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.524499][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.527254][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.537721][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.547597][ T5855] hsr_slave_0: entered promiscuous mode
[   66.551522][ T5855] hsr_slave_1: entered promiscuous mode
[   66.568187][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.571031][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.579890][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.584622][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.586696][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.596625][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.668125][ T5845] hsr_slave_0: entered promiscuous mode
[   66.671440][ T5845] hsr_slave_1: entered promiscuous mode
[   66.674246][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   66.676614][ T5845] Cannot create hsr debugfs directory
[   66.732984][ T5850] hsr_slave_0: entered promiscuous mode
[   66.736285][ T5850] hsr_slave_1: entered promiscuous mode
[   66.739327][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   66.741543][ T5850] Cannot create hsr debugfs directory
[   67.054206][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.064635][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.081338][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.097331][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.146773][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.159592][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.176810][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.183641][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.255992][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.263450][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.274835][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.280305][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.363990][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.371876][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.402783][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.420197][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   67.429017][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.432013][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.444900][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.447864][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.462890][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.465190][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.490045][ T5854] Bluetooth: hci2: command tx timeout
[   67.492464][ T5854] Bluetooth: hci1: command tx timeout
[   67.494915][   T55] Bluetooth: hci0: command tx timeout
[   67.504526][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.507393][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.558153][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.569504][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.605790][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.621440][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.623725][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.628694][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.631242][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.802981][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.852044][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.884129][ T5855] veth0_vlan: entered promiscuous mode
[   67.905018][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.911310][ T5855] veth1_vlan: entered promiscuous mode
[   67.957828][ T5845] veth0_vlan: entered promiscuous mode
[   67.976097][ T5850] veth0_vlan: entered promiscuous mode
[   67.982543][ T5855] veth0_macvtap: entered promiscuous mode
[   67.987448][ T5845] veth1_vlan: entered promiscuous mode
[   67.994558][ T5855] veth1_macvtap: entered promiscuous mode
[   68.001008][ T5850] veth1_vlan: entered promiscuous mode
[   68.037113][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.059900][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.064596][ T5845] veth0_macvtap: entered promiscuous mode
[   68.081873][ T5845] veth1_macvtap: entered promiscuous mode
[   68.085394][ T5850] veth0_macvtap: entered promiscuous mode
[   68.091103][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.096508][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.109949][ T5850] veth1_macvtap: entered promiscuous mode
[   68.113263][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.119502][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.136307][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.164941][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.174447][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.196748][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.213114][ T5912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.216640][ T5912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.241809][ T5912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.253859][ T5912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.265470][ T5912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.275360][ T5912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.281721][ T5912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.288572][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.301346][ T5912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.306538][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.378419][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.387574][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.435328][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.438911][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.457794][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.482548][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.485563][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.552968][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.557996][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.578660][    C0] hrtimer: interrupt took 45747 ns
[   68.606035][ T5915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.611201][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.619977][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.652798][ T5915] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   68.656517][ T5915] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.924946][ T5918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.938271][ T5918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'.
[   69.570199][ T5849] Bluetooth: hci1: command tx timeout
[   69.572378][ T5854] Bluetooth: hci2: command tx timeout
[   69.574476][   T55] Bluetooth: hci0: command tx timeout
[   69.698044][ T5939] netlink: 'syz.0.11': attribute type 10 has an invalid length.
[   69.732670][ T5917] delete_channel: no stack
[   69.808397][ T5939] team0 (unregistering): Port device team_slave_0 removed
[   69.815764][ T5939] team0 (unregistering): Port device team_slave_1 removed
[   69.920631][ T5940] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.11'.
[   70.119703][ T5947] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.14'.
[   71.179928][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.182602][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.197910][ T5981] netlink: 'syz.1.29': attribute type 29 has an invalid length.
[   71.211791][ T5981] netlink: 'syz.1.29': attribute type 10 has an invalid length.
[   71.280563][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.296509][ T5981] team0: Port device bond0 added
[   71.650944][ T5854] Bluetooth: hci2: command tx timeout
[   71.652694][ T5854] Bluetooth: hci0: command tx timeout
[   71.661560][ T5854] Bluetooth: hci1: command tx timeout
[   71.847963][ T6011] netlink: 'syz.1.42': attribute type 21 has an invalid length.
[   72.004818][ T6017] =======================================================
[   72.004818][ T6017] WARNING: The mand mount option has been deprecated and
[   72.004818][ T6017]          and is ignored by this kernel. Remove the mand
[   72.004818][ T6017]          option from the mount to silence this warning.
[   72.004818][ T6017] =======================================================
[   72.320741][ T6019] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   72.425556][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.517379][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.728263][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.736566][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.740790][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.747544][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.751380][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.731425][ T5854] Bluetooth: hci2: command tx timeout
[   73.733827][   T55] Bluetooth: hci0: command tx timeout
[   74.769577][   T55] Bluetooth: hci1: command tx timeout
[   74.917868][ T6066] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.66'.
[   74.930339][ T6066] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   74.938962][ T6066] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[   75.176658][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.259996][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.362009][ T6032] chnl_net:caif_netlink_parms(): no params data found
[   75.477490][ T5862] bridge_slave_1: left allmulticast mode
[   75.485409][ T5862] bridge_slave_1: left promiscuous mode
[   75.488486][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.519028][ T5862] bridge_slave_0: left allmulticast mode
[   75.527953][ T5862] bridge_slave_0: left promiscuous mode
[   75.534363][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.089408][ T5862] team0: Port device bond0 removed
[   76.095427][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.110882][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.115675][ T5862] bond0 (unregistering): Released all slaves
[   76.236139][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.244879][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.247786][ T6032] bridge_slave_0: entered allmulticast mode
[   76.260202][ T6032] bridge_slave_0: entered promiscuous mode
[   76.321882][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.324800][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.338244][ T6032] bridge_slave_1: entered allmulticast mode
[   76.343184][ T6032] bridge_slave_1: entered promiscuous mode
[   76.503160][ T6032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.515023][ T6032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.591412][ T5862] hsr_slave_0: left promiscuous mode
[   76.598737][ T5862] hsr_slave_1: left promiscuous mode
[   76.601536][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.604483][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.619794][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.622737][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.651006][ T5862] veth1_macvtap: left promiscuous mode
[   76.653408][ T5862] veth0_macvtap: left promiscuous mode
[   76.655718][ T5862] veth1_vlan: left promiscuous mode
[   76.657928][ T5862] veth0_vlan: left promiscuous mode
[   76.850736][   T55] Bluetooth: hci1: command tx timeout
[   77.095364][ T5862] team0 (unregistering): Port device team_slave_1 removed
[   77.130237][ T5862] team0 (unregistering): Port device team_slave_0 removed
[   77.475312][ T6032] team0: Port device team_slave_0 added
[   77.489827][ T6032] team0: Port device team_slave_1 added
[   77.531652][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.534293][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.559060][ T6032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.565750][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.568511][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.583962][ T6032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.644856][ T6032] hsr_slave_0: entered promiscuous mode
[   77.647444][ T6032] hsr_slave_1: entered promiscuous mode
[   77.650308][ T6032] debugfs: 'hsr0' already exists in 'hsr'
[   77.655847][ T6032] Cannot create hsr debugfs directory
[   78.073770][ T6064] syz.2.65: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   78.081433][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) 
[   78.081450][ T6064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   78.081455][ T6064] Call Trace:
[   78.081459][ T6064]  <TASK>
[   78.081463][ T6064]  dump_stack_lvl+0x189/0x250
[   78.081479][ T6064]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.081489][ T6064]  ? __pfx__printk+0x10/0x10
[   78.081500][ T6064]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   78.081510][ T6064]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   78.081519][ T6064]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   78.081529][ T6064]  warn_alloc+0x214/0x310
[   78.081563][ T6064]  ? __pfx_warn_alloc+0x10/0x10
[   78.081575][ T6064]  ? __get_vm_area_node+0x28f/0x300
[   78.081583][ T6064]  ? hash_ipportip_create+0x358/0xfe0
[   78.081596][ T6064]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   78.081617][ T6064]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   78.081624][ T6064]  ? hash_ipportip_create+0x358/0xfe0
[   78.081636][ T6064]  ? __get_vm_area_node+0x28f/0x300
[   78.081643][ T6064]  ? hash_ipportip_create+0x358/0xfe0
[   78.081654][ T6064]  __vmalloc_node_range_noprof+0x56a/0x12f0
[   78.081662][ T6064]  ? hash_ipportip_create+0x358/0xfe0
[   78.081671][ T6064]  ? do_syscall_64+0xfa/0x3b0
[   78.081693][ T6064]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   78.081703][ T6064]  ? rcu_is_watching+0x15/0xb0
[   78.081712][ T6064]  ? hash_ipportip_create+0x358/0xfe0
[   78.081722][ T6064]  ? hash_ipportip_create+0x358/0xfe0
[   78.081731][ T6064]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   78.081739][ T6064]  ? hash_ipportip_create+0x358/0xfe0
[   78.081749][ T6064]  ? hash_ipportip_create+0x2fe/0xfe0
[   78.081762][ T6064]  hash_ipportip_create+0x358/0xfe0
[   78.081772][ T6064]  ? ip_set_create+0x4a2/0x1940
[   78.081782][ T6064]  ? __nla_parse+0x40/0x60
[   78.081792][ T6064]  ? __pfx_hash_ipportip_create+0x10/0x10
[   78.081804][ T6064]  ip_set_create+0xa97/0x1940
[   78.081811][ T6064]  ? ip_set_create+0x4a2/0x1940
[   78.081824][ T6064]  ? __pfx_ip_set_create+0x10/0x10
[   78.081847][ T6064]  nfnetlink_rcv_msg+0xb4d/0x1130
[   78.081856][ T6064]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   78.081876][ T6064]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   78.081888][ T6064]  ? kasan_save_free_info+0x46/0x50
[   78.081926][ T6064]  netlink_rcv_skb+0x208/0x470
[   78.081938][ T6064]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   78.081946][ T6064]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   78.081961][ T6064]  ? bpf_lsm_capable+0x9/0x20
[   78.081968][ T6064]  ? security_capable+0x7e/0x2e0
[   78.081980][ T6064]  nfnetlink_rcv+0x26a/0x2520
[   78.081990][ T6064]  ? __dev_queue_xmit+0x1d79/0x3b50
[   78.082002][ T6064]  ? __dev_queue_xmit+0x27b/0x3b50
[   78.082014][ T6064]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   78.082022][ T6064]  ? __pfx___dev_queue_xmit+0x10/0x10
[   78.082039][ T6064]  ? ref_tracker_free+0x63a/0x7d0
[   78.082054][ T6064]  ? __asan_memcpy+0x40/0x70
[   78.082072][ T6064]  ? __pfx_ref_tracker_free+0x10/0x10
[   78.082081][ T6064]  ? __skb_clone+0x63/0x7a0
[   78.082093][ T6064]  ? perf_trace_lock+0xec/0x3b0
[   78.082101][ T6064]  ? __skb_clone+0x483/0x7a0
[   78.082113][ T6064]  ? __pfx_perf_trace_lock+0x10/0x10
[   78.082120][ T6064]  ? skb_clone+0x246/0x3a0
[   78.082128][ T6064]  ? __netlink_deliver_tap+0x807/0x850
[   78.082142][ T6064]  ? netlink_deliver_tap+0x2e/0x1b0
[   78.082154][ T6064]  ? netlink_deliver_tap+0x2e/0x1b0
[   78.082167][ T6064]  netlink_unicast+0x82f/0x9e0
[   78.082179][ T6064]  ? __pfx_netlink_unicast+0x10/0x10
[   78.082189][ T6064]  ? netlink_sendmsg+0x642/0xb30
[   78.082197][ T6064]  ? skb_put+0x11b/0x210
[   78.082209][ T6064]  netlink_sendmsg+0x805/0xb30
[   78.082222][ T6064]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.082233][ T6064]  ? aa_sock_msg_perm+0xf1/0x1d0
[   78.082244][ T6064]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   78.082253][ T6064]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.082263][ T6064]  __sock_sendmsg+0x21c/0x270
[   78.082273][ T6064]  ____sys_sendmsg+0x505/0x830
[   78.082287][ T6064]  ? __pfx_____sys_sendmsg+0x10/0x10
[   78.082301][ T6064]  ? import_iovec+0x74/0xa0
[   78.082315][ T6064]  ___sys_sendmsg+0x21f/0x2a0
[   78.082327][ T6064]  ? __pfx____sys_sendmsg+0x10/0x10
[   78.082346][ T6064]  ? __fget_files+0x2a/0x420
[   78.082360][ T6064]  ? __fget_files+0x2a/0x420
[   78.082368][ T6064]  ? __fget_files+0x3a0/0x420
[   78.082395][ T6064]  __x64_sys_sendmsg+0x19b/0x260
[   78.082408][ T6064]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   78.082424][ T6064]  ? rcu_is_watching+0x15/0xb0
[   78.082434][ T6064]  ? do_syscall_64+0xbe/0x3b0
[   78.082445][ T6064]  do_syscall_64+0xfa/0x3b0
[   78.082454][ T6064]  ? lockdep_hardirqs_on+0x9c/0x150
[   78.082463][ T6064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.082470][ T6064]  ? exc_page_fault+0x9f/0xf0
[   78.082480][ T6064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.082487][ T6064] RIP: 0033:0x7f200f38ec29
[   78.082496][ T6064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.082502][ T6064] RSP: 002b:00007f20102ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.082511][ T6064] RAX: ffffffffffffffda RBX: 00007f200f5d5fa0 RCX: 00007f200f38ec29
[   78.082516][ T6064] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[   78.082520][ T6064] RBP: 00007f200f411e41 R08: 0000000000000000 R09: 0000000000000000
[   78.082525][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.082529][ T6064] R13: 00007f200f5d6038 R14: 00007f200f5d5fa0 R15: 00007fff26cce6a8
[   78.082560][ T6064]  </TASK>
[   78.082644][ T6064] Mem-Info:
[   78.268467][ T6064] active_anon:5246 inactive_anon:6 isolated_anon:0
[   78.268467][ T6064]  active_file:1000 inactive_file:38243 isolated_file:0
[   78.268467][ T6064]  unevictable:1768 dirty:3 writeback:0
[   78.268467][ T6064]  slab_reclaimable:9528 slab_unreclaimable:50059
[   78.268467][ T6064]  mapped:18014 shmem:2435 pagetables:1055
[   78.268467][ T6064]  sec_pagetables:0 bounce:0
[   78.268467][ T6064]  kernel_misc_reclaimable:0
[   78.268467][ T6064]  free:262076 free_pcp:27458 free_cma:0
[   78.283118][ T6064] Node 0 active_anon:10420kB inactive_anon:4kB active_file:3612kB inactive_file:16064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22524kB dirty:12kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5888kB pagetables:2160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   78.302285][ T6064] Node 1 active_anon:10564kB inactive_anon:20kB active_file:388kB inactive_file:136908kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49532kB dirty:0kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5280kB pagetables:2060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   78.313829][ T6064] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   78.323690][ T6064] lowmem_reserve[]: 0 811 811 811 811
[   78.325395][ T6064] Node 0 DMA32 free:396944kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10148kB inactive_anon:4kB active_file:3612kB inactive_file:16064kB unevictable:3536kB writepending:12kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:36580kB local_pcp:20856kB free_cma:0kB
[   78.336672][ T6064] lowmem_reserve[]: 0 0 0 0 0
[   78.338210][ T6064] Node 1 DMA32 free:440824kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:9720kB free_cma:0kB
[   78.347809][ T6064] lowmem_reserve[]: 0 0 854 854 854
[   78.350248][ T6064] Node 1 Normal free:195176kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10564kB inactive_anon:20kB active_file:388kB inactive_file:136908kB unevictable:3536kB writepending:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:55988kB local_pcp:33356kB free_cma:0kB
[   78.361650][ T6064] lowmem_reserve[]: 0 0 0 0 0
[   78.363166][ T6064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   78.367414][ T6064] Node 0 DMA32: 2*4kB (ME) 2*8kB (E) 0*16kB 2*32kB (ME) 1*64kB (U) 2*128kB (UE) 2*256kB (ME) 1*512kB (U) 2*1024kB (UM) 2*2048kB (UE) 95*4096kB (M) = 396696kB
[   78.373270][ T6064] Node 1 DMA32: 2*4kB (M) 4*8kB (UM) 3*16kB (UM) 3*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 104*4096kB (UM) = 440824kB
[   78.380020][ T6064] Node 1 Normal: 327*4kB (UME) 177*8kB (ME) 91*16kB (ME) 36*32kB (ME) 36*64kB (UME) 13*128kB (ME) 8*256kB (UME) 11*512kB (UME) 24*1024kB (UM) 7*2048kB (UM) 34*4096kB (UM) = 195156kB
[   78.386907][ T6064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   78.390881][ T6064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   78.394465][ T6064] 41688 total pagecache pages
[   78.396153][ T6064] 10 pages in swap cache
[   78.397572][ T6064] Free swap  = 124812kB
[   78.399349][ T6064] Total swap = 124996kB
[   78.400615][ T6064] 786301 pages RAM
[   78.401710][ T6064] 0 pages HighMem/MovableOnly
[   78.408344][ T6032] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.410220][ T6064] 241359 pages reserved
[   78.412949][ T6064] 0 pages cma reserved
[   78.415491][ T6032] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.428232][ T6032] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.442550][ T6032] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.537826][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.548169][ T6032] 8021q: adding VLAN 0 to HW filter on device team0
[   78.561208][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.563425][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.579801][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.582034][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.685994][ T6064] syz.2.65 (6064) used greatest stack depth: 16056 bytes left
[   78.795777][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.841687][ T6032] veth0_vlan: entered promiscuous mode
[   78.866619][ T6032] veth1_vlan: entered promiscuous mode
[   78.932436][   T55] Bluetooth: hci1: command tx timeout
[   78.965892][ T6032] veth0_macvtap: entered promiscuous mode
[   78.978386][ T6032] veth1_macvtap: entered promiscuous mode
[   79.001125][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.022710][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.034942][ T5912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.038337][ T5912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.070029][ T5912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.072719][ T5912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.149843][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.152270][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.243866][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.246331][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.479475][ T6173] netlink: 100 bytes leftover after parsing attributes in process `syz.1.90'.
[   80.799522][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   80.802849][ T6191] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   80.806002][ T6191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.008851][   T55] Bluetooth: hci1: command tx timeout
[   81.031543][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'.
[   81.388590][ T6225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.112'.
[   81.401895][ T6221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.112'.
[   81.735077][ T6242] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[   81.738146][ T6242] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[   81.742406][ T6242] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[   82.087164][ T6257] Zero length message leads to an empty skb
[   82.103440][ T6257] netlink: 798 bytes leftover after parsing attributes in process `syz.0.128'.
[   82.431331][ T6264] delete_channel: no stack
[   82.738029][ T6287] netlink: 103 bytes leftover after parsing attributes in process `syz.2.139'.
[   82.792489][ T6289] netlink: 'syz.2.140': attribute type 274 has an invalid length.
[   82.993200][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'.
[   83.009306][ T6302] netlink: 76 bytes leftover after parsing attributes in process `syz.1.147'.
[   83.272147][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[   83.715534][   T55] Bluetooth: hci1: ACL packet for unknown connection handle 0
[   84.401978][ T6374] netlink: 'syz.1.177': attribute type 15 has an invalid length.
[   84.462044][ T6378] Driver unsupported XDP return value 0 on prog  (id 73) dev N/A, expect packet loss!
[   85.511524][ T6392] __nla_validate_parse: 5 callbacks suppressed
[   85.511535][ T6392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.184'.
[   85.678729][ T6404] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.189'.
[   85.681728][ T6403] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.189'.
[   85.685469][ T6404] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.189'.
[   86.530058][   T24] cfg80211: failed to load regulatory.db
[   86.792151][ T6446] netlink: 176 bytes leftover after parsing attributes in process `syz.2.209'.
[   88.896977][   T55] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[   88.897006][   T55] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[   88.897023][ T6464] netlink: 'syz.1.216': attribute type 23 has an invalid length.
[   88.948137][ T6467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'.
[   88.953788][ T6467] netlink: 'syz.2.218': attribute type 1 has an invalid length.
[   89.045261][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   92.374528][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.232'.
[   92.377935][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.232'.
[   93.188330][ T6540] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   93.200719][ T6540] syzkaller0: entered promiscuous mode
[   93.202901][ T6540] syzkaller0: entered allmulticast mode
[   98.732356][   T55] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4
[   98.744901][ T6600] netlink: 277 bytes leftover after parsing attributes in process `syz.0.278'.
[   99.040938][ T6620] syz.2.288 uses obsolete (PF_INET,SOCK_PACKET)
[   99.059612][ T6622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.675721][ T6624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.765762][ T6630] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  100.177410][ T6647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.301'.
[  100.471931][ T6664] netlink: 'syz.2.309': attribute type 13 has an invalid length.
[  100.475537][ T6664] netlink: 'syz.2.309': attribute type 17 has an invalid length.
[  100.641969][ T6664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.172607][ T6690] netlink: 'syz.1.316': attribute type 3 has an invalid length.
[  103.175168][ T6690] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[  103.185669][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'.
[  103.236648][ T6695] netlink: 68 bytes leftover after parsing attributes in process `syz.1.318'.
[  103.239896][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'.
[  103.243431][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'.
[  103.406041][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'.
[  103.499434][ T6712] netlink: 68 bytes leftover after parsing attributes in process `syz.2.327'.
[  103.771999][ T6729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.335'.
[  103.775824][ T6729] netlink: 67 bytes leftover after parsing attributes in process `syz.1.335'.
[  104.354044][ T6759] netlink: 72 bytes leftover after parsing attributes in process `syz.2.349'.
[  104.472657][ T6764] tap0: tun_chr_ioctl cmd 1074025677
[  104.474495][ T6764] tap0: linktype set to 804
[  104.748763][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.355'.
[  104.995585][ T6784] netlink: 'syz.1.358': attribute type 21 has an invalid length.
[  105.842087][ T5912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.931561][ T5912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.039618][ T5912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.102858][ T5912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.231548][ T5912] bridge_slave_1: left allmulticast mode
[  106.233816][ T5912] bridge_slave_1: left promiscuous mode
[  106.236171][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.243449][ T5912] bridge_slave_0: left allmulticast mode
[  106.245684][ T5912] bridge_slave_0: left promiscuous mode
[  106.248161][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.553260][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.557918][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.562049][ T5912] bond0 (unregistering): Released all slaves
[  106.857641][ T5912] hsr_slave_0: left promiscuous mode
[  106.860274][ T5912] hsr_slave_1: left promiscuous mode
[  106.862334][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.864633][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.867708][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.870330][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.883051][ T5912] veth1_macvtap: left promiscuous mode
[  106.884978][ T5912] veth0_macvtap: left promiscuous mode
[  106.886781][ T5912] veth1_vlan: left promiscuous mode
[  106.888445][ T5912] veth0_vlan: left promiscuous mode
[  107.146185][ T5912] team0 (unregistering): Port device team_slave_1 removed
[  107.167754][ T5912] team0 (unregistering): Port device team_slave_0 removed
[  107.751419][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  107.755266][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  107.758730][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  107.762474][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  107.766245][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  107.963523][ T6884] chnl_net:caif_netlink_parms(): no params data found
[  108.033927][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.036897][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.039977][ T6884] bridge_slave_0: entered allmulticast mode
[  108.042962][ T6884] bridge_slave_0: entered promiscuous mode
[  108.046682][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.050325][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.052743][ T6884] bridge_slave_1: entered allmulticast mode
[  108.055309][ T6884] bridge_slave_1: entered promiscuous mode
[  108.089860][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.094312][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.116605][ T6884] team0: Port device team_slave_0 added
[  108.122478][ T6884] team0: Port device team_slave_1 added
[  108.142800][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.145319][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.155425][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.160409][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.162571][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.172954][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.204390][ T6884] hsr_slave_0: entered promiscuous mode
[  108.206641][ T6884] hsr_slave_1: entered promiscuous mode
[  108.209663][ T6884] debugfs: 'hsr0' already exists in 'hsr'
[  108.211474][ T6884] Cannot create hsr debugfs directory
[  108.330754][ T6884] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  108.334823][ T6884] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  108.341031][ T6884] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  108.345414][ T6884] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  108.366047][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.368407][ T6884] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.371450][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.374007][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.414908][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.431245][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.434726][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.446187][ T6884] 8021q: adding VLAN 0 to HW filter on device team0
[  108.453869][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.456083][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.463246][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.465426][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.591051][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.716112][ T6919] warning: `syz.0.381' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  108.825649][ T6884] veth0_vlan: entered promiscuous mode
[  108.834980][ T6884] veth1_vlan: entered promiscuous mode
[  108.855608][ T6884] veth0_macvtap: entered promiscuous mode
[  108.867603][ T6884] veth1_macvtap: entered promiscuous mode
[  108.892999][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.898375][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.911899][ T5912] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.915250][ T5912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.921498][ T5912] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.931894][ T5912] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.054869][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.060650][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.064447][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.070205][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.074073][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.078485][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.087979][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.123835][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.131816][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.245398][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'.
[  109.307476][ T6930] chnl_net:caif_netlink_parms(): no params data found
[  109.395167][ T6941] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.387'.
[  109.453189][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.455885][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.464447][ T6930] bridge_slave_0: entered allmulticast mode
[  109.471980][ T6930] bridge_slave_0: entered promiscuous mode
[  109.476375][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.481452][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.489329][ T6930] bridge_slave_1: entered allmulticast mode
[  109.492257][ T6930] bridge_slave_1: entered promiscuous mode
[  109.536975][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.561956][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.642666][ T6952] netlink: 'syz.0.391': attribute type 6 has an invalid length.
[  109.646381][ T6952] netlink: 164 bytes leftover after parsing attributes in process `syz.0.391'.
[  109.673086][ T6930] team0: Port device team_slave_0 added
[  109.809021][   T55] Bluetooth: hci0: command tx timeout
[  110.362101][ T6930] team0: Port device team_slave_1 added
[  110.394675][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.397395][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.410844][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.435651][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.437958][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.450738][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.506368][ T6966] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.397'.
[  110.512755][ T6930] hsr_slave_0: entered promiscuous mode
[  110.516027][ T6930] hsr_slave_1: entered promiscuous mode
[  110.527519][ T6930] debugfs: 'hsr0' already exists in 'hsr'
[  110.532016][ T6930] Cannot create hsr debugfs directory
[  110.677987][ T6930] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.689925][ T6930] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.707751][ T6930] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.718068][ T6930] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.795348][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.808362][ T6930] 8021q: adding VLAN 0 to HW filter on device team0
[  110.815386][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.818337][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.832530][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.834947][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.968580][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.977607][ T6982] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[  111.016871][ T6930] veth0_vlan: entered promiscuous mode
[  111.023514][ T6930] veth1_vlan: entered promiscuous mode
[  111.044630][ T6930] veth0_macvtap: entered promiscuous mode
[  111.052614][ T6930] veth1_macvtap: entered promiscuous mode
[  111.065523][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.077446][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.093091][   T55] Bluetooth: hci1: command tx timeout
[  111.097817][ T5862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.101695][ T5862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.116119][ T5862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.123470][ T5862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.240262][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.243404][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.320355][  T377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.324036][  T377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.893409][   T55] Bluetooth: hci0: command tx timeout
[  113.169040][   T55] Bluetooth: hci1: command tx timeout
[  113.793059][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'.
[  113.968848][   T55] Bluetooth: hci0: command tx timeout
[  114.287757][ T7100] netlink: 'syz.3.452': attribute type 21 has an invalid length.
[  114.299306][ T7100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.452'.
[  114.304001][ T7100] netlink: 'syz.3.452': attribute type 1 has an invalid length.
[  115.065641][ T7139] netlink: 'syz.4.467': attribute type 21 has an invalid length.
[  115.089064][ T7139] netlink: 'syz.4.467': attribute type 15 has an invalid length.
[  115.091877][ T7139] netlink: 156 bytes leftover after parsing attributes in process `syz.4.467'.
[  115.095334][ T7139] IPv6: NLM_F_CREATE should be specified when creating new route
[  115.100790][ T7139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.103578][ T7139] IPv6: NLM_F_CREATE should be set when creating new route
[  115.107154][ T7139] IPv6: NLM_F_CREATE should be set when creating new route
[  115.110536][ T7139] IPv6: NLM_F_CREATE should be set when creating new route
[  115.249110][   T55] Bluetooth: hci1: command tx timeout
[  115.328339][ T7148] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.487920][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'.
[  115.879929][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'.
[  115.915288][ T7176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.051712][   T55] Bluetooth: hci0: command tx timeout
[  116.057277][ T7186] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.487'.
[  116.067351][ T7183] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.487'.
[  116.078984][ T7186] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.487'.
[  116.100708][ T7188] netlink: 'syz.0.489': attribute type 21 has an invalid length.
[  116.103614][ T7188] netlink: 'syz.0.489': attribute type 11 has an invalid length.
[  116.140130][ T7192] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.492'.
[  116.326579][ T7203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.495'.
[  116.417741][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.496'.
[  116.913422][ T7223] netlink: 'syz.4.505': attribute type 11 has an invalid length.
[  117.010623][ T7226] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  117.329063][   T55] Bluetooth: hci1: command tx timeout
[  117.766880][ T7259] netlink: 'syz.0.517': attribute type 2 has an invalid length.
[  117.909518][ T7261] netlink: 'syz.4.519': attribute type 5 has an invalid length.
[  120.396500][ T7315] : entered promiscuous mode
[  120.404852][ T7311] __nla_validate_parse: 1 callbacks suppressed
[  120.404906][ T7311] netlink: 17 bytes leftover after parsing attributes in process `syz.3.534'.
[  120.451829][ T7311] netlink: zone id is out of range
[  120.454240][ T7311] netlink: zone id is out of range
[  120.456649][ T7311] netlink: zone id is out of range
[  120.479685][ T7311] netlink: zone id is out of range
[  120.482461][ T7311] netlink: zone id is out of range
[  120.488510][ T7317] Dead loop on virtual device ip6_vti0, fix it urgently!
[  120.489059][ T7311] netlink: zone id is out of range
[  120.493882][ T7311] netlink: zone id is out of range
[  121.138818][ T7340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.546'.
[  121.142291][ T7340] netlink: 'syz.0.546': attribute type 1 has an invalid length.
[  121.381786][ T7348] netlink: 144 bytes leftover after parsing attributes in process `syz.0.550'.
[  121.819069][ T7332] warn_alloc: 1 callbacks suppressed
[  121.819085][ T7332] syz.4.541: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  121.861616][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.4.541 Not tainted syzkaller #0 PREEMPT(full) 
[  121.861636][ T7332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.861644][ T7332] Call Trace:
[  121.861650][ T7332]  <TASK>
[  121.861657][ T7332]  dump_stack_lvl+0x189/0x250
[  121.861683][ T7332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.861699][ T7332]  ? __pfx__printk+0x10/0x10
[  121.861726][ T7332]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  121.861744][ T7332]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  121.861760][ T7332]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  121.861779][ T7332]  warn_alloc+0x214/0x310
[  121.861799][ T7332]  ? __pfx_warn_alloc+0x10/0x10
[  121.861822][ T7332]  ? __get_vm_area_node+0x28f/0x300
[  121.861836][ T7332]  ? hash_netportnet_create+0x354/0xf90
[  121.861860][ T7332]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  121.861897][ T7332]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  121.861912][ T7332]  ? hash_netportnet_create+0x354/0xf90
[  121.861930][ T7332]  ? __get_vm_area_node+0x28f/0x300
[  121.861945][ T7332]  ? hash_netportnet_create+0x354/0xf90
[  121.861963][ T7332]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  121.861978][ T7332]  ? hash_netportnet_create+0x354/0xf90
[  121.862017][ T7332]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  121.862037][ T7332]  ? rcu_is_watching+0x15/0xb0
[  121.862051][ T7332]  ? hash_netportnet_create+0x354/0xf90
[  121.862069][ T7332]  ? hash_netportnet_create+0x354/0xf90
[  121.862085][ T7332]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  121.862099][ T7332]  ? hash_netportnet_create+0x354/0xf90
[  121.862117][ T7332]  ? hash_netportnet_create+0x2fa/0xf90
[  121.862138][ T7332]  hash_netportnet_create+0x354/0xf90
[  121.862155][ T7332]  ? ip_set_create+0x4a2/0x1940
[  121.862174][ T7332]  ? __nla_parse+0x40/0x60
[  121.862192][ T7332]  ? __pfx_hash_netportnet_create+0x10/0x10
[  121.862212][ T7332]  ip_set_create+0xa97/0x1940
[  121.862226][ T7332]  ? ip_set_create+0x4a2/0x1940
[  121.862249][ T7332]  ? __pfx_ip_set_create+0x10/0x10
[  121.862290][ T7332]  nfnetlink_rcv_msg+0xb4d/0x1130
[  121.862308][ T7332]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  121.862360][ T7332]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  121.862374][ T7332]  ? kasan_save_free_info+0x46/0x50
[  121.862429][ T7332]  netlink_rcv_skb+0x208/0x470
[  121.862449][ T7332]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  121.862466][ T7332]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  121.862492][ T7332]  ? bpf_lsm_capable+0x9/0x20
[  121.862506][ T7332]  ? security_capable+0x7e/0x2e0
[  121.862526][ T7332]  nfnetlink_rcv+0x26a/0x2520
[  121.862543][ T7332]  ? __dev_queue_xmit+0x1d79/0x3b50
[  121.862564][ T7332]  ? __dev_queue_xmit+0x27b/0x3b50
[  121.862587][ T7332]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  121.862601][ T7332]  ? __pfx___dev_queue_xmit+0x10/0x10
[  121.862626][ T7332]  ? ref_tracker_free+0x63a/0x7d0
[  121.862642][ T7332]  ? __asan_memcpy+0x40/0x70
[  121.862659][ T7332]  ? __pfx_ref_tracker_free+0x10/0x10
[  121.862672][ T7332]  ? __skb_clone+0x63/0x7a0
[  121.862694][ T7332]  ? perf_trace_lock+0xec/0x3b0
[  121.862707][ T7332]  ? __skb_clone+0x483/0x7a0
[  121.862736][ T7332]  ? __pfx_perf_trace_lock+0x10/0x10
[  121.862749][ T7332]  ? skb_clone+0x246/0x3a0
[  121.862763][ T7332]  ? __netlink_deliver_tap+0x807/0x850
[  121.862780][ T7332]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.862802][ T7332]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.862825][ T7332]  netlink_unicast+0x82f/0x9e0
[  121.862849][ T7332]  ? __pfx_netlink_unicast+0x10/0x10
[  121.862866][ T7332]  ? netlink_sendmsg+0x642/0xb30
[  121.862881][ T7332]  ? skb_put+0x11b/0x210
[  121.862901][ T7332]  netlink_sendmsg+0x805/0xb30
[  121.862927][ T7332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.862946][ T7332]  ? aa_sock_msg_perm+0xf1/0x1d0
[  121.862965][ T7332]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  121.862982][ T7332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.863000][ T7332]  __sock_sendmsg+0x21c/0x270
[  121.863018][ T7332]  ____sys_sendmsg+0x505/0x830
[  121.863043][ T7332]  ? __pfx_____sys_sendmsg+0x10/0x10
[  121.863068][ T7332]  ? import_iovec+0x74/0xa0
[  121.863091][ T7332]  ___sys_sendmsg+0x21f/0x2a0
[  121.863113][ T7332]  ? __pfx____sys_sendmsg+0x10/0x10
[  121.863148][ T7332]  ? __fget_files+0x2a/0x420
[  121.863174][ T7332]  ? __fget_files+0x2a/0x420
[  121.863188][ T7332]  ? __fget_files+0x3a0/0x420
[  121.863211][ T7332]  __x64_sys_sendmsg+0x19b/0x260
[  121.863232][ T7332]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  121.863260][ T7332]  ? rcu_is_watching+0x15/0xb0
[  121.863278][ T7332]  ? do_syscall_64+0xbe/0x3b0
[  121.863300][ T7332]  do_syscall_64+0xfa/0x3b0
[  121.863337][ T7332]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.863355][ T7332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.863368][ T7332]  ? exc_page_fault+0x9f/0xf0
[  121.863385][ T7332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.863399][ T7332] RIP: 0033:0x7f53dff8ec29
[  121.863412][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.863423][ T7332] RSP: 002b:00007f53e0e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.863438][ T7332] RAX: ffffffffffffffda RBX: 00007f53e01d5fa0 RCX: 00007f53dff8ec29
[  121.863448][ T7332] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  121.863456][ T7332] RBP: 00007f53e0011e41 R08: 0000000000000000 R09: 0000000000000000
[  121.863464][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.863470][ T7332] R13: 00007f53e01d6038 R14: 00007f53e01d5fa0 R15: 00007ffde050d9d8
[  121.863494][ T7332]  </TASK>
[  121.863500][ T7332] Mem-Info:
[  122.072858][ T7332] active_anon:5445 inactive_anon:0 isolated_anon:0
[  122.072858][ T7332]  active_file:10915 inactive_file:38264 isolated_file:0
[  122.072858][ T7332]  unevictable:1768 dirty:69 writeback:0
[  122.072858][ T7332]  slab_reclaimable:9978 slab_unreclaimable:65287
[  122.072858][ T7332]  mapped:18053 shmem:2450 pagetables:1127
[  122.072858][ T7332]  sec_pagetables:0 bounce:0
[  122.072858][ T7332]  kernel_misc_reclaimable:0
[  122.072858][ T7332]  free:237441 free_pcp:24390 free_cma:0
[  122.089732][ T7332] Node 0 active_anon:11976kB inactive_anon:0kB active_file:36016kB inactive_file:16072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44892kB dirty:124kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6132kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  122.101360][ T7332] Node 1 active_anon:9736kB inactive_anon:0kB active_file:7644kB inactive_file:136984kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27320kB dirty:152kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5872kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  122.113139][ T7332] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  122.123705][ T7332] lowmem_reserve[]: 0 811 811 811 811
[  122.125793][ T7332] Node 0 DMA32 free:288700kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11976kB inactive_anon:0kB active_file:36016kB inactive_file:16072kB unevictable:3536kB writepending:124kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:27668kB local_pcp:13672kB free_cma:0kB
[  122.137649][ T7332] lowmem_reserve[]: 0 0 0 0 0
[  122.139138][ T7332] Node 1 DMA32 free:442560kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16056kB local_pcp:6336kB free_cma:0kB
[  122.148908][ T7332] lowmem_reserve[]: 0 0 854 854 854
[  122.151712][ T7332] Node 1 Normal free:202760kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9804kB inactive_anon:0kB active_file:7644kB inactive_file:136984kB unevictable:3536kB writepending:152kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:54008kB local_pcp:17176kB free_cma:0kB
[  122.162799][ T7332] lowmem_reserve[]: 0 0 0 0 0
[  122.164656][ T7332] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  122.170139][ T7332] Node 0 DMA32: 224*4kB (UME) 26*8kB (ME) 239*16kB (M) 178*32kB (M) 152*64kB (UME) 120*128kB (ME) 10*256kB (UM) 5*512kB (UME) 4*1024kB (ME) 1*2048kB (M) 59*4096kB (M) = 288640kB
[  122.176636][ T7332] Node 1 DMA32: 2*4kB (M) 5*8kB (UM) 3*16kB (UM) 3*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 4*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 105*4096kB (UM) = 442560kB
[  122.182963][ T7332] Node 1 Normal: 306*4kB (UME) 140*8kB (ME) 94*16kB (UME) 31*32kB (UM) 8*64kB (UME) 4*128kB (ME) 0*256kB 22*512kB (UE) 63*1024kB (UME) 11*2048kB (UE) 24*4096kB (UM) = 202472kB
[  122.189680][ T7332] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  122.193094][ T7332] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  122.196583][ T7332] 51629 total pagecache pages
[  122.198391][ T7332] 0 pages in swap cache
[  122.209008][ T7332] Free swap  = 124996kB
[  122.210925][ T7332] Total swap = 124996kB
[  122.212506][ T7332] 786301 pages RAM
[  122.213964][ T7332] 0 pages HighMem/MovableOnly
[  122.215738][ T7332] 241359 pages reserved
[  122.217476][ T7332] 0 pages cma reserved
[  122.941021][ T7394] netlink: 'syz.0.571': attribute type 1 has an invalid length.
[  123.470678][ T7415] netlink: 'syz.0.581': attribute type 21 has an invalid length.
[  123.473767][ T7415] netlink: 128 bytes leftover after parsing attributes in process `syz.0.581'.
[  123.477311][ T7415] netlink: 'syz.0.581': attribute type 3 has an invalid length.
[  123.487732][ T7415] netlink: 3 bytes leftover after parsing attributes in process `syz.0.581'.
[  123.604904][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'.
[  123.615968][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'.
[  123.686659][ T7419] netlink: 'syz.0.582': attribute type 10 has an invalid length.
[  123.748857][ T7419] bond0: (slave bond_slave_0): Releasing backup interface
[  124.182960][ T7435] sctp: [Deprecated]: syz.4.588 (pid 7435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.182960][ T7435] Use struct sctp_sack_info instead
[  125.622018][ T7457] netlink: 'syz.3.599': attribute type 21 has an invalid length.
[  125.624473][ T7457] netlink: 128 bytes leftover after parsing attributes in process `syz.3.599'.
[  126.237250][ T7457] netlink: 'syz.3.599': attribute type 5 has an invalid length.
[  126.240326][ T7457] netlink: 'syz.3.599': attribute type 6 has an invalid length.
[  126.242722][ T7457] netlink: 3 bytes leftover after parsing attributes in process `syz.3.599'.
[  128.159032][   T55] Bluetooth: hci2: ACL packet too small
[  128.891018][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.0.649'.
[  129.116774][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'.
[  129.167542][ T7582] : entered promiscuous mode
[  129.266604][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'.
[  129.271344][ T7590] net_ratelimit: 15 callbacks suppressed
[  129.271366][ T7590] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  129.276883][ T7590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.391601][ T7596] netlink: 'syz.3.663': attribute type 29 has an invalid length.
[  129.414061][ T7596] netlink: 'syz.3.663': attribute type 29 has an invalid length.
[  129.430017][ T7596] netlink: 'syz.3.663': attribute type 29 has an invalid length.
[  129.436543][ T7596] netlink: 'syz.3.663': attribute type 29 has an invalid length.
[  129.650619][ T7614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.672'.
[  129.716050][ T7618] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  129.817387][ T7625] syzkaller1: tun_chr_ioctl cmd 1074025677
[  129.822163][ T7625] syzkaller1: linktype set to 1
[  129.852979][ T7620] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  129.856388][ T7620] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  129.997216][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'.
[  130.334505][ T7656] netlink: 'syz.0.685': attribute type 10 has an invalid length.
[  130.427307][ T7656] bridge0: port 3(netdevsim0) entered blocking state
[  130.430725][ T7656] bridge0: port 3(netdevsim0) entered disabled state
[  130.434962][ T7656] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  130.449220][ T7656] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  130.656685][ T7667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.315445][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.704'.
[  132.613288][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.615881][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.461373][ T7730] netlink: 'syz.0.715': attribute type 10 has an invalid length.
[  133.464531][ T7730] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.715'.
[  134.726922][ T7753] netlink: 277 bytes leftover after parsing attributes in process `syz.0.724'.
[  135.936422][   T55] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  137.048133][ T7802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.746'.
[  137.505071][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.754'.
[  137.510546][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.754'.
[  137.546978][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'.
[  137.549987][ T7822] openvswitch: netlink: Missing key (keys=40, expected=80)
[  137.697229][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'.
[  138.516662][ T7848] netlink: 'syz.4.768': attribute type 11 has an invalid length.
[  138.520055][ T7848] netlink: 140 bytes leftover after parsing attributes in process `syz.4.768'.
[  138.525507][ T7849] bpf: Bad value for 'gid'
[  138.744345][ T7863] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  138.747184][ T7863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.064828][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.777'.
[  139.068447][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.777'.
[  139.554940][ T7888] erspan0 speed is unknown, defaulting to 1000
[  139.583579][ T7888] erspan0 speed is unknown, defaulting to 1000
[  139.594439][ T7888] erspan0 speed is unknown, defaulting to 1000
[  140.394200][ T7910] netlink: 'syz.0.794': attribute type 12 has an invalid length.
[  140.397648][ T7910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.794'.
[  140.496568][   T10] erspan0 speed is unknown, defaulting to 1000
[  140.503319][ T7888] infiniband syz2: set active
[  140.504906][ T7888] infiniband syz2: added erspan0
[  140.507663][ T7888] syz2: rxe_create_cq: returned err = -12
[  140.510497][ T7888] infiniband syz2: Couldn't create ib_mad CQ
[  140.512480][ T7888] infiniband syz2: Couldn't open port 1
[  140.527691][ T7888] RDS/IB: syz2: added
[  140.529755][ T7888] smc: adding ib device syz2 with port count 1
[  140.536502][ T7888] smc:    ib device syz2 port 1 has pnetid 
[  140.540400][   T10] erspan0 speed is unknown, defaulting to 1000
[  140.544155][ T7888] erspan0 speed is unknown, defaulting to 1000
[  140.832769][ T7888] erspan0 speed is unknown, defaulting to 1000
[  141.064666][ T7888] erspan0 speed is unknown, defaulting to 1000
[  141.324986][ T7888] erspan0 speed is unknown, defaulting to 1000
[  141.575336][ T7963] netlink: 'syz.4.820': attribute type 12 has an invalid length.
[  141.591630][ T7963] netlink: 132 bytes leftover after parsing attributes in process `syz.4.820'.
[  141.696002][ T7971] netlink: 'syz.4.823': attribute type 10 has an invalid length.
[  141.707352][ T7971] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  142.576874][ T8001] netlink: 'syz.3.836': attribute type 12 has an invalid length.
[  142.617864][ T8001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.836'.
[  142.675359][ T8006] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.838'.
[  143.080365][   T33] audit: type=1107 audit(1758753399.223:2): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  143.387918][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'.
[  143.397046][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'.
[  143.403601][ T8048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.857'.
[  143.643667][ T8062] netlink: 'syz.0.864': attribute type 3 has an invalid length.
[  143.775311][ T8072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'.
[  144.090202][ T8094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.879'.
[  144.094863][ T8094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.879'.
[  144.102583][ T8094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.879'.
[  144.389943][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.393133][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.397887][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.401430][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.624967][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'.
[  145.291068][ T8114] bridge_slave_1: left allmulticast mode
[  145.294441][ T8114] bridge_slave_1: left promiscuous mode
[  145.297006][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.304504][ T8114] bridge_slave_0: left allmulticast mode
[  145.306807][ T8114] bridge_slave_0: left promiscuous mode
[  145.309718][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.421742][ T8125] netlink: 'syz.4.890': attribute type 10 has an invalid length.
[  145.425439][ T8125] ipvlan1: entered promiscuous mode
[  145.427550][ T8125] ipvlan1: entered allmulticast mode
[  145.431792][ T8125] veth0_vlan: entered allmulticast mode
[  145.437468][ T8125] bridge0: port 3(ipvlan1) entered blocking state
[  145.440537][ T8125] bridge0: port 3(ipvlan1) entered disabled state
[  145.445727][ T8125] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  146.098098][ T8161] netlink: 'syz.3.909': attribute type 10 has an invalid length.
[  149.563982][ T8220] __nla_validate_parse: 2 callbacks suppressed
[  149.564037][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'.
[  149.591337][ T8220] netlink: 'syz.3.938': attribute type 10 has an invalid length.
[  149.805498][ T8220] bond0: (slave bond_slave_0): Releasing backup interface
[  149.872207][ T8226] netlink: 'syz.4.941': attribute type 2 has an invalid length.
[  149.875117][ T8226] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.941'.
[  149.878334][ T8226] nbd: must specify a device to reconfigure
[  149.947448][ T8233] netlink: 196 bytes leftover after parsing attributes in process `syz.3.944'.
[  150.048606][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'.
[  150.186333][ T8244] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  151.715301][ T8257] netlink: 'syz.0.954': attribute type 11 has an invalid length.
[  151.718523][ T8257] netlink: 'syz.0.954': attribute type 11 has an invalid length.
[  151.757896][ T8263] tc_dump_action: action bad kind
[  152.487819][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.567222][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.617766][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.661812][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  152.666052][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  152.671206][   T13] bridge0: port 3(netdevsim0) entered disabled state
[  152.677431][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.792443][   T13] bridge_slave_1: left allmulticast mode
[  152.796519][   T13] bridge_slave_1: left promiscuous mode
[  152.798980][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.807960][   T13] bridge_slave_0: left allmulticast mode
[  152.812248][   T13] bridge_slave_0: left promiscuous mode
[  152.814554][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.026125][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.030652][   T13] bond0 (unregistering): Released all slaves
[  153.391939][   T13] hsr_slave_0: left promiscuous mode
[  153.394223][   T13] hsr_slave_1: left promiscuous mode
[  153.396312][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.398493][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.411516][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.413905][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.424699][   T13] veth1_macvtap: left promiscuous mode
[  153.427162][   T13] veth0_macvtap: left promiscuous mode
[  153.429690][   T13] veth1_vlan: left promiscuous mode
[  153.431474][   T13] veth0_vlan: left promiscuous mode
[  153.464413][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.468124][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.472882][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.475766][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.478442][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.008053][ T8312] erspan0 speed is unknown, defaulting to 1000
[  154.072011][ T8316] C: renamed from team_slave_0 (while UP)
[  154.082506][ T8316] netlink: 'syz.3.975': attribute type 2 has an invalid length.
[  154.084808][ T8316] netlink: 116 bytes leftover after parsing attributes in process `syz.3.975'.
[  154.087794][ T8316] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  154.229493][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.235276][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.239426][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.245056][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.250487][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.589039][   T13] ------------[ cut here ]------------
[  154.591056][   T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  154.593891][   T13] Modules linked in:
[  154.595548][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  154.599772][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.603444][   T13] Workqueue: netns cleanup_net
[  154.605238][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  154.607507][   T13] Code: e8 ca de f7 4b 83 3c 2c 00 75 19 e8 9c a5 7a f7 49 81 fd f8 07 00 00 74 1d e8 8e a5 7a f7 49 83 c5 08 eb c9 e8 83 a5 7a f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  154.614935][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  154.615475][ T8319] erspan0 speed is unknown, defaulting to 1000
[  154.617234][   T13] RAX: ffffffff8a45201d RBX: ffff888011468000 RCX: ffff88801c2f8000
[  154.617279][   T13] RDX: 0000000000000000 RSI: ffffffff8d9baf3d RDI: ffff888011468000
[  154.625062][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3b637 R09: 1ffffffff1f476c6
[  154.628088][   T13] R10: dffffc0000000000 R11: fffffbfff1f476c7 R12: ffff888011468000
[  154.631311][   T13] R13: 0000000000000000 R14: ffff88802a9b0000 R15: dffffc0000000000
[  154.634407][   T13] FS:  0000000000000000(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  154.637893][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.640432][   T13] CR2: 0000000000000000 CR3: 000000010f0a2000 CR4: 00000000000006f0
[  154.643382][   T13] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  154.645948][   T13] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  154.648415][   T13] Call Trace:
[  154.649699][   T13]  <TASK>
[  154.650804][   T13]  ops_undo_list+0x49a/0x990
[  154.652563][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  154.654480][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  154.656397][   T13]  cleanup_net+0x4c5/0x800
[  154.658103][   T13]  ? __pfx_cleanup_net+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  154.660195][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  154.662283][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  154.664417][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  154.666563][   T13]  process_scheduled_works+0xae1/0x17b0
[  154.668458][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  154.670364][   T13]  worker_thread+0x8a0/0xda0
[  154.672234][   T13]  kthread+0x711/0x8a0
[  154.673840][   T13]  ? __pfx_worker_thread+0x10/0x10
[  154.675795][   T13]  ? __pfx_kthread+0x10/0x10
[  154.677552][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  154.679630][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.681657][   T13]  ? __pfx_kthread+0x10/0x10
[  154.683312][   T13]  ret_from_fork+0x439/0x7d0
[  154.684740][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  154.686538][   T13]  ? __switch_to_asm+0x39/0x70
[  154.688083][   T13]  ? __switch_to_asm+0x33/0x70
[  154.689804][   T13]  ? __pfx_kthread+0x10/0x10
[  154.691190][   T13]  ret_from_fork_asm+0x1a/0x30
[  154.692581][   T13]  </TASK>
[  154.693637][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  154.696036][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  154.699446][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.702504][   T13] Workqueue: netns cleanup_net
[  154.704053][   T13] Call Trace:
[  154.705150][   T13]  <TASK>
[  154.706291][   T13]  dump_stack_lvl+0x99/0x250
[  154.707852][   T13]  ? __asan_memcpy+0x40/0x70
[  154.709279][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.710870][   T13]  ? __pfx__printk+0x10/0x10
[  154.712312][   T13]  vpanic+0x281/0x750
[  154.713638][   T13]  ? __pfx__printk+0x10/0x10
[  154.715291][   T13]  ? __pfx_vpanic+0x10/0x10
[  154.716727][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  154.718338][   T13]  panic+0xb9/0xc0
[  154.719506][   T13]  ? __pfx_panic+0x10/0x10
[  154.721003][   T13]  __warn+0x31b/0x4b0
[  154.722348][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  154.724222][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  154.725918][   T13]  report_bug+0x2be/0x4f0
[  154.727276][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  154.728947][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  154.730505][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  154.732062][   T13]  handle_bug+0x84/0x160
[  154.733430][   T13]  exc_invalid_op+0x1a/0x50
[  154.734813][   T13]  asm_exc_invalid_op+0x1a/0x20
[  154.736615][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  154.738644][   T13] Code: e8 ca de f7 4b 83 3c 2c 00 75 19 e8 9c a5 7a f7 49 81 fd f8 07 00 00 74 1d e8 8e a5 7a f7 49 83 c5 08 eb c9 e8 83 a5 7a f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  154.744234][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  154.746044][   T13] RAX: ffffffff8a45201d RBX: ffff888011468000 RCX: ffff88801c2f8000
[  154.748370][   T13] RDX: 0000000000000000 RSI: ffffffff8d9baf3d RDI: ffff888011468000
[  154.750672][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3b637 R09: 1ffffffff1f476c6
[  154.752957][   T13] R10: dffffc0000000000 R11: fffffbfff1f476c7 R12: ffff888011468000
[  154.755318][   T13] R13: 0000000000000000 R14: ffff88802a9b0000 R15: dffffc0000000000
[  154.757648][   T13]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  154.759314][   T13]  ops_undo_list+0x49a/0x990
[  154.760742][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  154.762306][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  154.763796][   T13]  cleanup_net+0x4c5/0x800
[  154.765244][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  154.766963][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  154.768574][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  154.770328][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  154.772072][   T13]  process_scheduled_works+0xae1/0x17b0
[  154.773878][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  154.775763][   T13]  worker_thread+0x8a0/0xda0
[  154.777430][   T13]  kthread+0x711/0x8a0
[  154.778806][   T13]  ? __pfx_worker_thread+0x10/0x10
[  154.780461][   T13]  ? __pfx_kthread+0x10/0x10
[  154.781928][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  154.783453][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.785020][   T13]  ? __pfx_kthread+0x10/0x10
[  154.786380][   T13]  ret_from_fork+0x439/0x7d0
[  154.787764][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  154.789313][   T13]  ? __switch_to_asm+0x39/0x70
[  154.790710][   T13]  ? __switch_to_asm+0x33/0x70
[  154.792106][   T13]  ? __pfx_kthread+0x10/0x10
[  154.793478][   T13]  ret_from_fork_asm+0x1a/0x30
[  154.794923][   T13]  </TASK>
[  154.796421][   T13] Kernel Offset: disabled
[  154.797742][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:36:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107050
R8 =ffff888020388237 R9 =1ffff11004071046 R10=dffffc0000000000 R11=ffffffff85504b00
R12=dffffc0000000000 R13=ffffffff99b048dc R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010f0a2000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efc04da7498 00007efc04da7470 XMM03=00007efc04da74a8 00007efc04da74a0
XMM04=00007efc0590d100 00007efc04da7460 XMM05=00007efc04da7478 00007efc04da74c0
XMM06=00007efc04da74b8 00007efc04da74b0 XMM07=00007efc04da74a8 00007efc04da74a0
XMM08=0000000000000000 00007efc04c12f0f XMM09=0000000000000000 00007efc04c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000075 RBX=0000000000000000 RCX=00000000ffffffff RDX=0000000000000003
RSI=0000000000000000 RDI=ffff888109095640 RBP=0000000000000000 RSP=ffffc900033cf550
R8 =0000000000000000 R9 =ffffffff8888e444 R10=dffffc0000000000 R11=ffffffff88afdc40
R12=ffffffffffffff05 R13=0000000000000001 R14=ffff888109096180 R15=ffff888109096150
RIP=ffffffff819d7c7c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557b863500 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003dfce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000000fff81a7b 2020200000000000 XMM03=fffffff800000107 000000000000a1bf
XMM04=9500000017000000 8500000000000003 XMM05=b700000008000002 b7fffffff8000001
XMM06=07000000000000a1 bf00000000fff81a XMM07=7b20202000000000 0025732020000001
XMM08=0000000000000000 00007efc04c12f0f XMM09=0000000000000000 00007efc04c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
