last executing test programs:

4m8.223159234s ago: executing program 1 (id=89):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)

4m8.15219371s ago: executing program 1 (id=92):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x5a130500)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0xc0045878, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r2}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8918, &(0x7f0000000000)={r7})

4m7.904590533s ago: executing program 2 (id=96):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)

4m7.743623644s ago: executing program 2 (id=98):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000036004b63d25a59ce0630fc2b139a7ad9", 0x14}], 0x1}, 0x20000040)

4m7.594593538s ago: executing program 2 (id=99):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0)

4m7.497002551s ago: executing program 1 (id=101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)

4m7.487600559s ago: executing program 2 (id=102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae4000000060a0b0400000000000000000200fffeb80004802800018007000100637400001c0002800800014000000002080002400000001705000300000000008c0001800c000100636f756e746572007c0002800c00014000000000000000020c00024000000000000000090c000140fffffffffffffbff0c00024000000000000000010c00024000000000000006920c00014000000000000000020c00024000000000000000010c00024000000000000000070c00014000000000000088770c00024000000000000000060900010073797a30000000000900020073797a32"], 0x10c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040))
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000980e25ed6f8fa7954c71dd05ff6dd142566a90fc5704d02f24dce36ebe43e2d884a1dcc7066a26de4e58063f52", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x0, 0x88, 0x0, 0x0, 0x101}, 0x28)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000140)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xa, 0xb}, {0xffff, 0x9}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x737}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x841}, 0x800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x3f, 0x70bd2d, 0x25dfdbfd, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x0, 0x1000, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="680200000005010400000000000000000700000254020100010000000800000005f7070002000a0073797a300000000000000000000000000000000000000000004e00fffb61b17abd928eae016b7405ebb16fdd36fbd1173ac829ed2fd7d61ae00aa850874c0687"], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x560, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x66, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

4m7.230487727s ago: executing program 1 (id=103):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x12}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20040811)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r4, 0x0, 0x200000}, 0x18)
r5 = socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r7, 0xe8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfffffda6, 0x10, 0x8, 0x0, 0x0}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)
setsockopt$sock_attach_bpf(r3, 0x84, 0x82, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)}, 0x8100)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x0)

4m6.517395294s ago: executing program 2 (id=107):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

4m6.496019512s ago: executing program 1 (id=108):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r0)

4m6.21473018s ago: executing program 2 (id=109):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x69}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

4m6.214256951s ago: executing program 1 (id=110):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xc68, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfef8a)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x60}}, 0x0)

4m5.965468417s ago: executing program 32 (id=109):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x69}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

4m5.920711095s ago: executing program 33 (id=110):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xc68, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfef8a)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x60}}, 0x0)

24.751216996s ago: executing program 4 (id=2814):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r3 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900)=r2, 0x4)

24.472168551s ago: executing program 4 (id=2817):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10020324}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xc8, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_ID={0x8}, @CTA_MARK={0x8}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}]}, @CTA_STATUS={0x8}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xbf2}]}}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0xa, 0x8001, 0x1, 0x4, 0x9, 0x1a2]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24010}, 0x20004041)
fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x3ff}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x74, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x1a, 0xc, "8b6e6966bfaf1bed3e7febcd5a8f626d88cbe9c9950d"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x801)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1a0000000200000000000000080000001811006e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x25a, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x10, 0xeda0, 0xfffffc27}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[0xffffffffffffffff, r6], &(0x7f0000000a40)=[{0x2, 0x1, 0x0, 0x1}], 0x10, 0x7}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e0000000f000000090000000100000090900400", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000000001000000060000000000000070e92590dcc5678da943425b88601ac2f2244b1022390ecdd77be6ffa6cdbbfc726251cea89ad7b419a5e380a775839a8f575e7b4796dc8e4954e2b59578e830b00db5958ce5e00cfc02ff90d6f3a07ed52ea776d817f1fe32249510ac127c4d108ad77bed63", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000bc0)={r7, r8}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0xe0}}, 0x4850)
sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x18, 0x0}, 0x20000804)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x1a, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x8000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000000000800000"], 0xb8}}, 0x4000)
close(r1)

24.374404977s ago: executing program 4 (id=2819):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000007c0), 0x4}, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
close(0xffffffffffffffff)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x5}, 0x49651e38e90d59e2, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x1340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x4}, 0x0, 0x100, 0x2003}, 0x0, 0xffffffffffffffff, r5, 0x1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10)
r6 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x22, &(0x7f0000000000)=r9, 0x10)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, 0x0, 0xb2)

20.650458107s ago: executing program 4 (id=2851):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'geneve1\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

20.582599505s ago: executing program 4 (id=2855):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

20.488990813s ago: executing program 4 (id=2858):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x401, 0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x4, 0x8, 0x1}, 0x50)

5.466787255s ago: executing program 34 (id=2858):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x401, 0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x4, 0x8, 0x1}, 0x50)

5.241726188s ago: executing program 3 (id=3061):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0xc, &(0x7f0000000500), 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYBLOB="05"], 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tmm'], 0xa)
close(0xffffffffffffffff)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

4.967934315s ago: executing program 3 (id=3067):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11, 0xb, &(0x7f0000000040), 0xcf)

4.847574034s ago: executing program 3 (id=3069):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10)

4.762569708s ago: executing program 3 (id=3071):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.61498762s ago: executing program 3 (id=3075):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

4.372864103s ago: executing program 3 (id=3077):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x480020a1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000080)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x1d, &(0x7f0000000680)}, 0x7)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x44)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc7, &(0x7f0000000380)=""/199, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, 0x0, 0x0}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
recvmsg$kcm(r5, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x20)

1.192425338s ago: executing program 0 (id=3096):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94)

1.118291899s ago: executing program 0 (id=3097):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

183.09484ms ago: executing program 0 (id=3098):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x8, 0x4, 0x2, 0x40082, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)

182.827647ms ago: executing program 0 (id=3099):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa938f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

76.859573ms ago: executing program 0 (id=3100):
perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0xe, 0x3, 0xff, 0x23, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xfffffffffffffffa, 0xffffffff}, 0x800, 0x0, 0x3, 0x2, 0x1, 0xfb2b, 0x7e8c, 0x0, 0xf0, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33)

0s ago: executing program 0 (id=3101):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.454767][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.461212][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.467420][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.471279][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.811411][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   70.830804][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   71.051056][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   71.057911][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.060957][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.063945][ T5880] bridge_slave_0: entered allmulticast mode
[   71.068853][ T5880] bridge_slave_0: entered promiscuous mode
[   71.074249][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.077873][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.080175][ T5877] bridge_slave_0: entered allmulticast mode
[   71.083137][ T5877] bridge_slave_0: entered promiscuous mode
[   71.098874][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.101717][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.104763][ T5880] bridge_slave_1: entered allmulticast mode
[   71.109977][ T5880] bridge_slave_1: entered promiscuous mode
[   71.114155][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.117139][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.119946][ T5877] bridge_slave_1: entered allmulticast mode
[   71.123258][ T5877] bridge_slave_1: entered promiscuous mode
[   71.194150][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.215187][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.221881][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.251292][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.284697][ T5877] team0: Port device team_slave_0 added
[   71.302979][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.305958][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.308763][ T5881] bridge_slave_0: entered allmulticast mode
[   71.312481][ T5881] bridge_slave_0: entered promiscuous mode
[   71.317884][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.320890][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.323905][ T5881] bridge_slave_1: entered allmulticast mode
[   71.328092][ T5881] bridge_slave_1: entered promiscuous mode
[   71.332317][ T5877] team0: Port device team_slave_1 added
[   71.397480][ T5880] team0: Port device team_slave_0 added
[   71.413456][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.420193][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.440831][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.442361][ T5880] team0: Port device team_slave_1 added
[   71.443296][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.461591][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.464141][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.474223][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.504337][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.507087][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.514733][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.527275][ T5881] team0: Port device team_slave_0 added
[   71.530733][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.533352][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.545007][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.550462][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.552961][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.563424][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.568042][ T5881] team0: Port device team_slave_1 added
[   71.617447][ T5877] hsr_slave_0: entered promiscuous mode
[   71.620620][ T5877] hsr_slave_1: entered promiscuous mode
[   71.660343][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.663165][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.675449][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.685110][ T5880] hsr_slave_0: entered promiscuous mode
[   71.688834][ T5880] hsr_slave_1: entered promiscuous mode
[   71.692105][ T5880] debugfs: 'hsr0' already exists in 'hsr'
[   71.694800][ T5880] Cannot create hsr debugfs directory
[   71.710624][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.712652][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.722396][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.843656][ T5881] hsr_slave_0: entered promiscuous mode
[   71.847277][ T5881] hsr_slave_1: entered promiscuous mode
[   71.850268][ T5881] debugfs: 'hsr0' already exists in 'hsr'
[   71.852743][ T5881] Cannot create hsr debugfs directory
[   72.163292][ T5880] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.177921][ T5880] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.201030][ T5880] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.219788][ T5880] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.264105][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.275197][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.293099][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.300105][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.373545][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.388657][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.401763][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.424180][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.466336][ T5886] Bluetooth: hci2: command tx timeout
[   72.468882][ T5879] Bluetooth: hci0: command tx timeout
[   72.541152][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.546765][ T5879] Bluetooth: hci1: command tx timeout
[   72.573667][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.593766][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   72.613676][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.616833][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.634252][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.637056][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.644588][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   72.675918][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.678927][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.710624][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.713318][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.750632][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.801123][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   72.809939][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.812940][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.850265][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.852977][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.999096][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.057014][ T5880] veth0_vlan: entered promiscuous mode
[   73.070754][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.080230][ T5880] veth1_vlan: entered promiscuous mode
[   73.100088][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.141017][ T5880] veth0_macvtap: entered promiscuous mode
[   73.158165][ T5877] veth0_vlan: entered promiscuous mode
[   73.163184][ T5880] veth1_macvtap: entered promiscuous mode
[   73.179468][ T5877] veth1_vlan: entered promiscuous mode
[   73.207104][ T5881] veth0_vlan: entered promiscuous mode
[   73.218464][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.227852][ T5881] veth1_vlan: entered promiscuous mode
[   73.235302][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.256926][ T5906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.263812][ T5906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.272472][ T5906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.279438][ T5906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.302728][ T5877] veth0_macvtap: entered promiscuous mode
[   73.312600][ T5877] veth1_macvtap: entered promiscuous mode
[   73.331864][ T5881] veth0_macvtap: entered promiscuous mode
[   73.351375][ T5881] veth1_macvtap: entered promiscuous mode
[   73.409530][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.419716][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.452104][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.461212][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.467608][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.472703][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.483579][ T5906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.508220][ T5906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.530350][ T5906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.549259][ T5906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.552382][ T5906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.574432][ T5906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.581582][ T5906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.591064][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.603027][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.625944][ T5906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.701214][ T5880] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.708507][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.711780][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.803622][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.812586][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.816439][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.825151][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.891408][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.898768][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.914894][ T5947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'.
[   74.108325][ T5954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'.
[   74.120367][ T5950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'.
[   74.134258][ T5954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'.
[   74.483284][    C0] hrtimer: interrupt took 46709 ns
[   74.546170][ T5879] Bluetooth: hci0: command tx timeout
[   74.548710][ T5879] Bluetooth: hci2: command tx timeout
[   74.630914][ T5886] Bluetooth: hci1: command tx timeout
[   74.635487][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   74.651893][ T5967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.099538][ T5984] netlink: 'syz.2.27': attribute type 2 has an invalid length.
[   75.288286][ T5991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'.
[   75.380729][ T5993] tap0: tun_chr_ioctl cmd 1074025677
[   75.383128][ T5993] tap0: linktype set to 804
[   75.427034][ T5997] xt_limit: Overflow, try lower: 324382443/4200216956
[   75.535685][ T6003] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.35'.
[   75.550371][ T6005] netlink: 'syz.2.37': attribute type 39 has an invalid length.
[   75.637830][ T6010] netlink: 'syz.2.40': attribute type 25 has an invalid length.
[   75.677602][ T6010] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.40'.
[   76.037657][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'.
[   76.134878][ T6028] netlink: 232 bytes leftover after parsing attributes in process `syz.2.47'.
[   76.625645][ T5886] Bluetooth: hci2: command tx timeout
[   76.625933][ T5879] Bluetooth: hci0: command tx timeout
[   76.706938][ T5879] Bluetooth: hci1: command tx timeout
[   77.067522][ T6067] netlink: 'syz.0.65': attribute type 10 has an invalid length.
[   77.443022][ T6067] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   77.449152][ T6067] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   77.453925][ T6067] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   77.476024][  T793] cfg80211: failed to load regulatory.db
[   77.476705][ T6073] syzkaller1: tun_chr_ioctl cmd 1074812117
[   77.998310][ T6089] netlink: 'syz.0.74': attribute type 22 has an invalid length.
[   78.759178][ T5879] Bluetooth: hci2: command tx timeout
[   79.009521][ T5879] Bluetooth: hci0: command tx timeout
[   79.011452][ T5879] Bluetooth: hci1: command tx timeout
[   79.040975][ T6100] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.073426][ T6102] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   80.462940][ T6149] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.473516][ T6149] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   80.520039][ T6150] Zero length message leads to an empty skb
[   80.650952][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[   81.943924][ T5906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.040276][ T5906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.117307][ T5906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.172108][ T5906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.332505][ T5906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.410985][ T5906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.460966][ T5906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.512200][ T5906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.695819][ T5906] bridge_slave_1: left allmulticast mode
[   82.698310][ T5906] bridge_slave_1: left promiscuous mode
[   82.701726][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.731079][ T5906] bridge_slave_0: left allmulticast mode
[   82.733438][ T5906] bridge_slave_0: left promiscuous mode
[   82.756010][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.790253][ T5906] bridge_slave_1: left allmulticast mode
[   82.792517][ T5906] bridge_slave_1: left promiscuous mode
[   82.794839][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.872896][ T5906] bridge_slave_0: left allmulticast mode
[   82.877062][ T5906] bridge_slave_0: left promiscuous mode
[   82.879679][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.187283][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.192267][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.197189][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.201951][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.211107][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.258152][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.262318][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.270507][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.277016][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.286713][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.465432][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.472398][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.479537][ T5906] bond0 (unregistering): Released all slaves
[   83.797108][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.802448][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.807318][ T5906] bond0 (unregistering): Released all slaves
[   83.825241][ T5313] infiniband syz2: ib_query_port failed (-19)
[   84.047717][ T6207] netlink: 'syz.0.115': attribute type 4 has an invalid length.
[   84.051239][ T6207] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.115'.
[   84.369053][ T6220] netlink: 104 bytes leftover after parsing attributes in process `syz.0.117'.
[   84.498072][ T5906] hsr_slave_0: left promiscuous mode
[   84.515188][ T5906] hsr_slave_1: left promiscuous mode
[   84.521734][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.524691][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.538476][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.541225][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.563936][ T5906] hsr_slave_0: left promiscuous mode
[   84.569131][ T5906] hsr_slave_1: left promiscuous mode
[   84.571648][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.574574][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.583568][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.586700][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.605692][ T5906] veth1_macvtap: left promiscuous mode
[   84.607966][ T5906] veth0_macvtap: left promiscuous mode
[   84.610268][ T5906] veth1_vlan: left promiscuous mode
[   84.612108][ T5906] veth0_vlan: left promiscuous mode
[   84.617262][ T5906] veth1_macvtap: left promiscuous mode
[   84.619338][ T5906] veth0_macvtap: left promiscuous mode
[   84.621524][ T5906] veth1_vlan: left promiscuous mode
[   84.623606][ T5906] veth0_vlan: left promiscuous mode
[   84.634048][ T6227] =======================================================
[   84.634048][ T6227] WARNING: The mand mount option has been deprecated and
[   84.634048][ T6227]          and is ignored by this kernel. Remove the mand
[   84.634048][ T6227]          option from the mount to silence this warning.
[   84.634048][ T6227] =======================================================
[   85.126801][ T5906] team0 (unregistering): Port device team_slave_1 removed
[   85.158815][ T5906] team0 (unregistering): Port device team_slave_0 removed
[   85.267203][ T5886] Bluetooth: hci1: command tx timeout
[   85.345212][ T5886] Bluetooth: hci2: command tx timeout
[   85.843506][ T5906] team0 (unregistering): Port device team_slave_1 removed
[   85.870005][ T5906] team0 (unregistering): Port device team_slave_0 removed
[   86.188886][ T6204] chnl_net:caif_netlink_parms(): no params data found
[   86.511400][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.521555][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.526025][ T6204] bridge_slave_0: entered allmulticast mode
[   86.530387][ T6204] bridge_slave_0: entered promiscuous mode
[   86.539732][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.543289][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.550921][ T6204] bridge_slave_1: entered allmulticast mode
[   86.555678][ T6204] bridge_slave_1: entered promiscuous mode
[   86.560175][ T6202] chnl_net:caif_netlink_parms(): no params data found
[   86.742353][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.751196][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.839864][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.097063][ T6204] team0: Port device team_slave_0 added
[   87.107823][ T6204] team0: Port device team_slave_1 added
[   87.277486][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.280211][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.297174][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.346251][ T5886] Bluetooth: hci1: command tx timeout
[   87.371242][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.379283][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.382204][ T6202] bridge_slave_0: entered allmulticast mode
[   87.388020][ T6202] bridge_slave_0: entered promiscuous mode
[   87.393432][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.402822][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.408121][ T6202] bridge_slave_1: entered allmulticast mode
[   87.419313][ T6202] bridge_slave_1: entered promiscuous mode
[   87.428152][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.431649][ T5886] Bluetooth: hci2: command tx timeout
[   87.434832][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.446487][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.530604][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.601614][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.632571][ T6204] hsr_slave_0: entered promiscuous mode
[   87.646661][ T6204] hsr_slave_1: entered promiscuous mode
[   87.653386][ T6204] debugfs: 'hsr0' already exists in 'hsr'
[   87.657221][ T6204] Cannot create hsr debugfs directory
[   87.683507][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   87.717367][ T6202] team0: Port device team_slave_0 added
[   87.759568][ T6202] team0: Port device team_slave_1 added
[   87.838613][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.841414][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.854167][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.867395][ T6265] veth0_vlan: entered allmulticast mode
[   88.218963][ T6274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.126'.
[   88.271735][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.274568][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.285892][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.331689][ T6272] veth0_vlan: left promiscuous mode
[   88.334793][ T6272] veth0_vlan: entered promiscuous mode
[   88.474781][ T6278] netlink: 148 bytes leftover after parsing attributes in process `syz.0.128'.
[   88.536003][ T6202] hsr_slave_0: entered promiscuous mode
[   88.540482][ T6202] hsr_slave_1: entered promiscuous mode
[   88.543496][ T6202] debugfs: 'hsr0' already exists in 'hsr'
[   88.548779][ T6202] Cannot create hsr debugfs directory
[   88.922057][ T6204] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.967097][ T6204] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.984696][ T6204] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.003426][ T6204] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.161389][ T6202] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.167631][ T6293] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.170872][ T6293] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.179763][ T6202] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.201025][ T6202] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.213277][ T6202] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.300528][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.341477][ T6204] 8021q: adding VLAN 0 to HW filter on device team0
[   89.360663][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.364139][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.388621][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.392036][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.425487][ T5886] Bluetooth: hci1: command tx timeout
[   89.505788][ T5886] Bluetooth: hci2: command tx timeout
[   89.570961][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.593622][ T6202] 8021q: adding VLAN 0 to HW filter on device team0
[   89.618729][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.621116][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.632335][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.635469][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.916566][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.984013][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.067687][ T6202] veth0_vlan: entered promiscuous mode
[   90.089198][ T6202] veth1_vlan: entered promiscuous mode
[   90.144093][ T6202] veth0_macvtap: entered promiscuous mode
[   90.175751][ T6202] veth1_macvtap: entered promiscuous mode
[   90.222634][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.247641][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'.
[   90.252962][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.286702][ T5906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.296479][ T5906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.300102][ T5906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.334170][ T5906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.493271][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.500369][ T6204] veth0_vlan: entered promiscuous mode
[   90.515183][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.539468][ T6204] veth1_vlan: entered promiscuous mode
[   90.582694][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.607890][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.646596][ T6204] veth0_macvtap: entered promiscuous mode
[   90.657027][ T6204] veth1_macvtap: entered promiscuous mode
[   90.670866][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.678525][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.685662][ T5726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.689155][ T5726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.693062][ T5726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.703971][ T5726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.834675][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.841990][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.883650][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.888850][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.932208][ T6357] Illegal XDP return value 4294967274 on prog  (id 46) dev N/A, expect packet loss!
[   91.243367][ T6365] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.144'.
[   91.249011][ T6365] openvswitch: netlink: Message has 6 unknown bytes.
[   91.505617][ T5886] Bluetooth: hci1: command tx timeout
[   91.587474][ T5886] Bluetooth: hci2: command tx timeout
[   91.736536][ T6374] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.741767][ T6374] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.045562][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'.
[   92.839742][ T6387] netlink: 14 bytes leftover after parsing attributes in process `syz.3.150'.
[   93.014611][ T6395] netlink: 211 bytes leftover after parsing attributes in process `syz.4.154'.
[   93.020128][ T6396] netlink: 17 bytes leftover after parsing attributes in process `syz.0.153'.
[   93.032249][ T6396] netlink: zone id is out of range
[   93.036459][ T6396] netlink: zone id is out of range
[   93.040162][ T6396] netlink: zone id is out of range
[   93.042456][ T6396] netlink: zone id is out of range
[   93.045224][ T6396] netlink: zone id is out of range
[   93.047430][ T6396] netlink: zone id is out of range
[   93.049588][ T6396] netlink: zone id is out of range
[   93.053060][ T6396] netlink: zone id is out of range
[   93.056103][ T6396] netlink: zone id is out of range
[   93.218591][ T6397] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.150'.
[   93.287457][ T6403] syz.0.157 uses obsolete (PF_INET,SOCK_PACKET)
[   93.629965][ T6407] netlink: 176 bytes leftover after parsing attributes in process `syz.3.159'.
[   93.704896][ T6401] netlink: 60 bytes leftover after parsing attributes in process `syz.4.156'.
[   94.751077][ T6453] netlink: 'syz.0.179': attribute type 10 has an invalid length.
[   94.754118][ T6453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.772967][ T6453] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.803505][ T6453] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   95.776079][ T5886] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7
[   96.187388][ T6479] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   96.505496][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.508679][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.528382][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.531430][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.259072][ T6505] net_ratelimit: 14 callbacks suppressed
[   97.259110][ T6505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.585458][ T6523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.205'.
[   97.588605][ T6523] unsupported nlmsg_type 40
[   98.924068][ T6555] netlink: 'syz.4.216': attribute type 32 has an invalid length.
[   98.928509][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'.
[  101.492936][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'.
[  101.630655][ T6593] netlink: 156 bytes leftover after parsing attributes in process `syz.4.226'.
[  102.111665][ T6630] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.238'.
[  102.803074][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[  103.794057][ T6687] tun0: tun_chr_ioctl cmd 1074025675
[  103.799369][ T6687] tun0: persist enabled
[  103.801309][ T6687] tun0: tun_chr_ioctl cmd 1074025675
[  103.804451][ T6687] tun0: persist disabled
[  104.037374][ T6702] netlink: 'syz.4.262': attribute type 30 has an invalid length.
[  104.614352][ T6728] netlink: 'syz.3.274': attribute type 3 has an invalid length.
[  104.630236][ T6728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.274'.
[  104.946753][ T6743] raw_sendmsg: syz.4.280 forgot to set AF_INET. Fix it!
[  104.952955][ T6746] sit0: entered allmulticast mode
[  104.976600][ T6746] sit0: entered promiscuous mode
[  105.006544][ T5886] Bluetooth: hci0: Dropping invalid advertising data
[  105.009820][ T5886] Bluetooth: hci0: unknown advertising packet type: 0xff
[  105.463178][ T6758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.286'.
[  105.472975][ T6758] D`: renamed from hsr_slave_1 (while UP)
[  106.052109][ T6762] netlink: 6 bytes leftover after parsing attributes in process `syz.0.288'.
[  106.172396][ T6768] netlink: 'syz.3.291': attribute type 29 has an invalid length.
[  106.177160][ T6768] netlink: 'syz.3.291': attribute type 29 has an invalid length.
[  106.182115][ T6768] netlink: 500 bytes leftover after parsing attributes in process `syz.3.291'.
[  106.187485][ T6768] unsupported nla_type 58
[  107.059999][ T6780] netlink: 176 bytes leftover after parsing attributes in process `syz.0.296'.
[  107.231433][ T6791] netlink: 56 bytes leftover after parsing attributes in process `syz.4.300'.
[  107.412089][ T6798] netlink: 763 bytes leftover after parsing attributes in process `syz.0.304'.
[  108.145685][ T6832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.317'.
[  108.149721][ T6831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.317'.
[  108.151248][ T6832] netlink: 6 bytes leftover after parsing attributes in process `syz.0.317'.
[  108.334535][ T6838] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  108.337877][ T6838] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  108.753660][ T6852] netlink: 'syz.0.327': attribute type 13 has an invalid length.
[  109.570491][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.746795][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.034707][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.043191][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.055471][ T6852] syz.0.327 (6852) used greatest stack depth: 19256 bytes left
[  110.063457][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.074163][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.368403][ T5886] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  110.836515][ T6907] netlink: 'syz.0.349': attribute type 2 has an invalid length.
[  111.122110][ T6918] __nla_validate_parse: 2 callbacks suppressed
[  111.122168][ T6918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.353'.
[  111.928671][ T6938] netlink: 'syz.0.360': attribute type 10 has an invalid length.
[  111.931488][ T6938] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  111.947788][ T6938] batman_adv: batadv0: Adding interface: netdevsim0
[  111.950490][ T6938] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.984440][ T6938] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  112.281262][ T6954] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.367'.
[  112.736097][ T6979] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  113.184177][ T7000] netlink: 'syz.0.388': attribute type 21 has an invalid length.
[  113.187526][ T7000] netlink: 100 bytes leftover after parsing attributes in process `syz.0.388'.
[  113.529736][ T7016] netlink: 'syz.0.397': attribute type 2 has an invalid length.
[  113.535329][ T7016] netlink: 'syz.0.397': attribute type 8 has an invalid length.
[  113.540453][ T7016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.397'.
[  113.571129][ T5906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.670602][ T5906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.000862][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.008953][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.012940][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.019515][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.023142][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  116.066656][ T5879] Bluetooth: hci1: command tx timeout
[  116.108142][ T5906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.232884][ T5906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.484612][ T5906] bridge_slave_1: left allmulticast mode
[  116.491740][ T5906] bridge_slave_1: left promiscuous mode
[  116.495029][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.529111][ T5906] bridge_slave_0: left allmulticast mode
[  116.531422][ T5906] bridge_slave_0: left promiscuous mode
[  116.533965][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.794306][ T7049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.746585][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.753409][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.761641][ T5906] bond0 (unregistering): Released all slaves
[  117.779085][ T7053] sit0: entered allmulticast mode
[  117.785820][ T7054] sit0: entered promiscuous mode
[  117.827179][ T7026] chnl_net:caif_netlink_parms(): no params data found
[  118.021995][ T7073] : renamed from bond_slave_0 (while UP)
[  118.146786][ T5879] Bluetooth: hci1: command tx timeout
[  118.208881][ T5906] hsr_slave_0: left promiscuous mode
[  118.213268][ T5906] hsr_slave_1: left promiscuous mode
[  118.242384][ T5906] veth1_macvtap: left promiscuous mode
[  118.247747][ T5906] veth0_macvtap: left promiscuous mode
[  118.250097][ T5906] veth1_vlan: left promiscuous mode
[  118.252530][ T5906] veth0_vlan: left promiscuous mode
[  118.727666][ T5906] team0 (unregistering): Port device team_slave_1 removed
[  118.768327][ T5906] team0 (unregistering): Port device team_slave_0 removed
[  119.180923][ T7087] netlink: 'syz.0.419': attribute type 10 has an invalid length.
[  119.184393][ T7087] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.419'.
[  119.252069][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.258746][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.266441][ T7026] bridge_slave_0: entered allmulticast mode
[  119.273797][ T7026] bridge_slave_0: entered promiscuous mode
[  119.282528][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.286865][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.289933][ T7026] bridge_slave_1: entered allmulticast mode
[  119.293119][ T7026] bridge_slave_1: entered promiscuous mode
[  119.351455][ T7026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.367037][ T7026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.657149][ T7026] team0: Port device team_slave_0 added
[  119.684539][ T7026] team0: Port device team_slave_1 added
[  119.712930][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.715545][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.724176][ T7026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.734385][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.738767][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.749078][ T7026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.787968][ T7026] hsr_slave_0: entered promiscuous mode
[  119.790984][ T7026] hsr_slave_1: entered promiscuous mode
[  119.793710][ T7026] debugfs: 'hsr0' already exists in 'hsr'
[  119.795963][ T7026] Cannot create hsr debugfs directory
[  120.235335][ T5879] Bluetooth: hci1: command tx timeout
[  120.344918][ T7125] syzkaller0: entered promiscuous mode
[  120.346921][ T7125] syzkaller0: entered allmulticast mode
[  120.365777][ T7026] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  120.382981][ T7026] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  120.394857][ T7026] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  120.400432][ T7026] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  120.431950][ T7132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.599108][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.619563][ T7026] 8021q: adding VLAN 0 to HW filter on device team0
[  120.633268][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.636362][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.656437][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.659494][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.965819][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.018532][ T7026] veth0_vlan: entered promiscuous mode
[  121.028926][ T7026] veth1_vlan: entered promiscuous mode
[  121.062638][ T7026] veth0_macvtap: entered promiscuous mode
[  121.072079][ T7026] veth1_macvtap: entered promiscuous mode
[  121.090417][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.103560][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.117321][ T5726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.126902][ T5726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.137015][ T5726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.142271][ T5726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.244595][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.249693][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.284409][ T7174] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[  121.299725][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.303128][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.413661][ T7182] netlink: 'syz.3.396': attribute type 9 has an invalid length.
[  121.419722][ T7182] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.396'.
[  121.458368][ T7183] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  121.579197][ T7188] netlink: 'syz.0.446': attribute type 3 has an invalid length.
[  122.305835][ T5879] Bluetooth: hci1: command tx timeout
[  122.853069][ T7218] netlink: 763 bytes leftover after parsing attributes in process `syz.3.459'.
[  124.370118][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.073365][ T7305] netlink: 'syz.3.493': attribute type 1 has an invalid length.
[  125.079016][ T7305] netlink: 'syz.3.493': attribute type 4 has an invalid length.
[  125.082423][ T7305] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.493'.
[  126.517363][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'.
[  126.521255][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'.
[  126.683379][ T7343] delete_channel: no stack
[  126.706271][ T7350] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  126.784085][ T7356] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.516'.
[  126.900167][ T7363] netlink: 'syz.3.518': attribute type 13 has an invalid length.
[  126.933221][ T7367] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.522'.
[  127.140679][ T7358] Set syz1 is full, maxelem 6117 reached
[  127.146067][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.149742][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.286989][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.297221][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.497283][ T5726] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.568245][ T5726] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.572462][ T5726] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.602573][ T5726] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.640411][ T7389] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.532'.
[  127.643970][ T7389] netlink: zone id is out of range
[  127.653740][ T7389] netlink: zone id is out of range
[  127.658110][ T7389] netlink: get zone limit has 8 unknown bytes
[  128.100405][ T7410] netlink: 'syz.4.540': attribute type 4 has an invalid length.
[  128.568217][ T7436] netlink: 14 bytes leftover after parsing attributes in process `syz.0.552'.
[  128.828350][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'.
[  129.529189][ T7459] netlink: 'syz.3.561': attribute type 2 has an invalid length.
[  129.563997][ T7461] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[  129.670264][ T7468] netlink: 'syz.4.566': attribute type 5 has an invalid length.
[  129.910411][ T7485] netlink: 'syz.4.573': attribute type 2 has an invalid length.
[  129.913660][ T7485] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.573'.
[  129.921002][ T7485] nbd: must specify at least one socket
[  130.034671][ T7489] : entered promiscuous mode
[  130.037453][ T7490] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  131.510687][ T7519] Set syz1 is full, maxelem 6117 reached
[  131.513230][ T7523] netlink: 277 bytes leftover after parsing attributes in process `syz.0.590'.
[  131.590513][ T7530] netlink: 'syz.4.593': attribute type 21 has an invalid length.
[  131.593665][ T7530] netlink: 156 bytes leftover after parsing attributes in process `syz.4.593'.
[  131.703136][ T7529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.594'.
[  131.722895][ T7529] sock: sock_timestamping_bind_phc: sock not bind to device
[  132.101747][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'.
[  132.132490][ T7549] netlink: 'syz.3.603': attribute type 16 has an invalid length.
[  132.156093][ T7549] netlink: 48 bytes leftover after parsing attributes in process `syz.3.603'.
[  132.174784][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.606'.
[  132.199728][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.606'.
[  132.203852][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.606'.
[  132.849608][ T7562] netlink: 'syz.3.609': attribute type 28 has an invalid length.
[  132.856180][ T7562] netlink: 2 bytes leftover after parsing attributes in process `syz.3.609'.
[  132.902577][ T7562] netlink: 220 bytes leftover after parsing attributes in process `syz.3.609'.
[  132.937436][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.940119][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.128954][ T7562] bridge_slave_0 (unregistering): left promiscuous mode
[  133.134178][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.703303][ T7569] netlink: 'syz.0.612': attribute type 1 has an invalid length.
[  134.372252][ T7604] netlink: 'syz.0.628': attribute type 2 has an invalid length.
[  134.379796][ T7604] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[  134.384284][ T7604] nbd: couldn't find device at index 16
[  136.053244][ T7637] delete_channel: no stack
[  136.061118][ T7637] delete_channel: no stack
[  136.596874][ T7661] __nla_validate_parse: 6 callbacks suppressed
[  136.596892][ T7661] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.655'.
[  136.861812][ T7669] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.658'.
[  136.897052][ T7666] netlink: 4800 bytes leftover after parsing attributes in process `syz.0.657'.
[  136.907593][ T7666] netlink: 4800 bytes leftover after parsing attributes in process `syz.0.657'.
[  137.510181][ T7680] netlink: 'syz.4.663': attribute type 29 has an invalid length.
[  137.940973][ T7699] sit0: entered allmulticast mode
[  137.949486][ T7699] sit0: entered promiscuous mode
[  139.459149][ T7749] netlink: 'syz.0.692': attribute type 10 has an invalid length.
[  139.463860][ T7749] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  139.499871][ T7750] netlink: 'syz.4.690': attribute type 10 has an invalid length.
[  139.503647][ T7750] bond0: (slave c1): Releasing backup interface
[  139.641615][ T7754] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.694'.
[  140.291463][ T7791] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  140.558622][ T7803] netlink: 'syz.0.717': attribute type 6 has an invalid length.
[  140.562487][ T7803] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.717'.
[  141.147188][ T7828] netlink: 'syz.0.726': attribute type 39 has an invalid length.
[  141.484807][ T7835] netlink: 'syz.4.729': attribute type 21 has an invalid length.
[  141.491147][ T7835] netlink: 144 bytes leftover after parsing attributes in process `syz.4.729'.
[  141.941971][ T7853] syzkaller0: entered promiscuous mode
[  141.989936][ T7853] syzkaller0: entered allmulticast mode
[  143.674065][ T7886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.749'.
[  144.011451][ T7881] netlink: 798 bytes leftover after parsing attributes in process `syz.0.748'.
[  144.016352][ T7888] netlink: 'syz.3.750': attribute type 12 has an invalid length.
[  144.019719][ T7888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.750'.
[  144.091697][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'.
[  146.188179][ T7934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.771'.
[  146.271754][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[  150.013155][ T7980] netlink: 188 bytes leftover after parsing attributes in process `syz.0.786'.
[  150.911368][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'.
[  151.189292][ T5879] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  151.332206][ T8035] netlink: 180 bytes leftover after parsing attributes in process `syz.3.813'.
[  151.344191][ T8035] netlink: 'syz.3.813': attribute type 2 has an invalid length.
[  151.349347][ T8035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.813'.
[  151.368191][ T8035] netlink: 'syz.3.813': attribute type 2 has an invalid length.
[  151.372883][ T8035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.813'.
[  151.841827][ T8068] netlink: 'syz.4.820': attribute type 291 has an invalid length.
[  151.927075][ T8074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.824'.
[  153.102546][ T8113] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.843'.
[  153.158323][ T8126] netlink: 'syz.4.848': attribute type 21 has an invalid length.
[  153.272581][ T8136] netlink: 'syz.4.853': attribute type 29 has an invalid length.
[  153.295594][ T8136] netlink: 'syz.4.853': attribute type 29 has an invalid length.
[  153.714126][ T8144] syzkaller0: tun_chr_ioctl cmd 1074025677
[  153.726880][ T8144] syzkaller0: Linktype set failed because interface is up
[  153.745300][ T5906] syzkaller0: tun_net_xmit 76
[  153.750540][ T5906] syzkaller0: tun_net_xmit 48
[  153.765895][ T5941] syzkaller0: tun_net_xmit 76
[  154.378301][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'.
[  154.633870][ T8173] netlink: 'syz.4.867': attribute type 9 has an invalid length.
[  155.910268][ T8184] netlink: 'syz.4.870': attribute type 1 has an invalid length.
[  155.914872][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'.
[  156.449782][ T8226] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.890'.
[  156.504047][ T8230] netlink: 'syz.0.890': attribute type 2 has an invalid length.
[  156.999665][ T8256] netlink: 'syz.4.900': attribute type 10 has an invalid length.
[  157.051147][ T8258] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.902'.
[  157.475334][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'.
[  158.020837][ T8287] netlink: 'syz.0.915': attribute type 3 has an invalid length.
[  158.024893][ T8287] netlink: 'syz.0.915': attribute type 2 has an invalid length.
[  158.028806][ T8287] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.915'.
[  158.233912][ T8305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.340541][ T8313] netlink: 'syz.3.928': attribute type 21 has an invalid length.
[  158.471535][ T8321] netlink: 'syz.0.932': attribute type 21 has an invalid length.
[  158.478016][ T8321] netlink: 'syz.0.932': attribute type 1 has an invalid length.
[  158.732920][ T8335] netlink: 'syz.0.939': attribute type 10 has an invalid length.
[  158.741883][ T8335] team0: Port device wlan1 added
[  158.747964][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'.
[  158.756367][ T8335] netlink: 'syz.0.939': attribute type 11 has an invalid length.
[  158.759619][ T8335] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.939'.
[  158.764239][ T8334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.787762][ T8340] netlink: 'syz.4.941': attribute type 23 has an invalid length.
[  158.836745][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.938'.
[  159.275078][ T5879] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  159.290430][ T8348] netlink: 10 bytes leftover after parsing attributes in process `syz.0.945'.
[  159.559794][ T8367] netlink: 'syz.0.952': attribute type 3 has an invalid length.
[  159.565178][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'.
[  159.920193][ T8377] delete_channel: no stack
[  161.128131][ T8414] sctp: [Deprecated]: syz.4.974 (pid 8414) Use of int in maxseg socket option.
[  161.128131][ T8414] Use struct sctp_assoc_value instead
[  161.555609][ T8431] __nla_validate_parse: 4 callbacks suppressed
[  161.555628][ T8431] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.981'.
[  161.609370][ T8429] team0 (unregistering): Port device team_slave_0 removed
[  161.627130][ T8429] team0 (unregistering): Port device team_slave_1 removed
[  161.664152][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'.
[  161.671483][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'.
[  162.362910][ T8449] C: renamed from team_slave_0
[  162.658860][ T8449] netlink: 152 bytes leftover after parsing attributes in process `syz.3.989'.
[  162.843305][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'.
[  163.529897][ T8484] netlink: 'syz.3.1004': attribute type 11 has an invalid length.
[  163.535037][ T8484] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1004'.
[  164.495471][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.426570][ T5886] Bluetooth: hci2: command 0x0406 tx timeout
[  166.293221][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2410199331 wd_nsec: 2410199374
[  166.898296][ T8511] validate_nla: 4 callbacks suppressed
[  166.898323][ T8511] netlink: 'syz.3.1014': attribute type 1 has an invalid length.
[  166.903521][ T8511] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1014'.
[  167.667014][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'.
[  167.670821][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'.
[  167.675850][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'.
[  167.680050][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'.
[  168.261969][ T8527] netlink: 'syz.0.1020': attribute type 1 has an invalid length.
[  168.344016][ T8527] netlink: 'syz.0.1020': attribute type 2 has an invalid length.
[  169.016691][ T8537] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  169.180634][ T8551] netlink: 'syz.4.1029': attribute type 4 has an invalid length.
[  169.258795][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1030'.
[  169.311111][ T8544] : entered promiscuous mode
[  169.321288][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.341931][ T8553] bridge_slave_0 (unregistering): left allmulticast mode
[  169.344720][ T8553] bridge_slave_0 (unregistering): left promiscuous mode
[  169.348544][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.611419][ T8562] netlink: 'syz.3.1034': attribute type 3 has an invalid length.
[  169.614020][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'.
[  169.618345][ T8562] netlink: 'syz.3.1034': attribute type 3 has an invalid length.
[  169.621583][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'.
[  169.624860][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'.
[  169.911602][ T8564] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1035'.
[  169.921987][ T8564] bond_slave_1: entered promiscuous mode
[  170.172580][ T8581] syzkaller0: entered promiscuous mode
[  170.174855][ T8581] syzkaller0: entered allmulticast mode
[  170.887024][ T8623] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  170.891240][ T8623] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  171.093740][ T8635] C: renamed from team_slave_0
[  171.100274][ T8635] netlink: 'syz.0.1062': attribute type 3 has an invalid length.
[  171.103270][ T8635] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  171.733578][ T8659] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  172.183287][ T8682] netlink: 'syz.0.1083': attribute type 10 has an invalid length.
[  172.321717][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.491554][ T8682] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  172.626060][ T8692] erspan0 speed is unknown, defaulting to 1000
[  172.696416][ T8694] dvmrp0: tun_chr_ioctl cmd 2148553947
[  172.702894][ T8692] erspan0 speed is unknown, defaulting to 1000
[  172.754109][ T8692] erspan0 speed is unknown, defaulting to 1000
[  172.868764][ T8701] __nla_validate_parse: 4 callbacks suppressed
[  172.868785][ T8701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1092'.
[  172.999814][ T8706] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1094'.
[  173.637298][  T793] erspan0 speed is unknown, defaulting to 1000
[  173.642635][ T8692] infiniband syz0: set down
[  173.644623][ T8692] infiniband syz0: added erspan0
[  173.652897][ T8692] syz0: rxe_create_cq: returned err = -12
[  173.659458][ T8692] infiniband syz0: Couldn't create ib_mad CQ
[  173.663634][ T8692] infiniband syz0: Couldn't open port 1
[  173.706409][ T8692] RDS/IB: syz0: added
[  173.710823][ T8692] smc: adding ib device syz0 with port count 1
[  173.713121][ T8692] smc:    ib device syz0 port 1 has pnetid 
[  173.722380][   T47] erspan0 speed is unknown, defaulting to 1000
[  173.727128][ T8692] erspan0 speed is unknown, defaulting to 1000
[  173.915381][ T8728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1104'.
[  173.917465][ T8692] erspan0 speed is unknown, defaulting to 1000
[  173.994890][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'.
[  174.193407][ T8692] erspan0 speed is unknown, defaulting to 1000
[  174.213781][ T8737] netlink: zone id is out of range
[  174.216884][ T8737] netlink: zone id is out of range
[  174.219879][ T8737] netlink: zone id is out of range
[  174.222998][ T8737] netlink: zone id is out of range
[  174.227274][ T8737] netlink: zone id is out of range
[  174.229976][ T8737] netlink: zone id is out of range
[  174.235267][ T8737] netlink: zone id is out of range
[  174.245446][ T8737] netlink: zone id is out of range
[  174.248412][ T8737] netlink: zone id is out of range
[  174.550037][ T8753] : renamed from dummy0
[  174.566907][ T8753] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1115'.
[  175.171471][ T8786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1131'.
[  175.458293][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'.
[  175.461398][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'.
[  175.475567][ T8806] netlink: 'syz.3.1141': attribute type 4 has an invalid length.
[  175.561305][ T8812] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1144'.
[  175.673098][ T8814] syzkaller0: entered promiscuous mode
[  175.675647][ T8814] syzkaller0: entered allmulticast mode
[  175.985789][ T8828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1151'.
[  177.873670][ T8835] netlink: 'syz.3.1152': attribute type 19 has an invalid length.
[  177.929011][ T8837] netlink: 'syz.4.1153': attribute type 10 has an invalid length.
[  178.040061][ T8837] team0: Device ipvlan1 failed to register rx_handler
[  178.212501][ T8844] sit0: left allmulticast mode
[  179.611783][ T8898] __nla_validate_parse: 2 callbacks suppressed
[  179.611899][ T8898] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1181'.
[  181.304307][ T8945] netlink: 'syz.3.1201': attribute type 1 has an invalid length.
[  181.309739][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'.
[  181.420960][ T8953] net_ratelimit: 9 callbacks suppressed
[  181.420974][ T8953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.481159][ T8957] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1207'.
[  181.562696][ T8963] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1210'.
[  181.963359][ T8979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1218'.
[  182.233948][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'.
[  182.278735][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1226'.
[  182.282227][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1226'.
[  182.305243][ T9000] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1228'.
[  182.730627][ T9019] netlink: 'syz.4.1237': attribute type 39 has an invalid length.
[  183.649161][ T5879] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[  183.901010][ T9046] netlink: 'syz.0.1249': attribute type 10 has an invalid length.
[  183.944191][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'.
[  183.953877][ T9050] openvswitch: netlink: nsh attr 165 is out of range max 3
[  183.957633][ T9050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.268515][ T9046] team0: Port device wlan1 removed
[  184.351893][ T9046] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  184.393266][ T9066] netlink: 'syz.4.1257': attribute type 2 has an invalid length.
[  184.396806][ T9066] nbd: must specify a device to reconfigure
[  184.449512][ T9046] syz.0.1249 (9046) used greatest stack depth: 18552 bytes left
[  184.546769][ T9078] netlink: 'syz.0.1262': attribute type 6 has an invalid length.
[  185.132134][ T9108] netlink: 'syz.3.1275': attribute type 10 has an invalid length.
[  185.662484][ T9128] xt_HMARK: proto mask must be zero with L3 mode
[  185.691934][ T9127] __nla_validate_parse: 5 callbacks suppressed
[  185.691954][ T9127] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1283'.
[  185.699123][ T9127] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  185.703021][ T9127] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  185.946227][ T9143] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1290'.
[  186.001249][ T9149] netlink: 'syz.0.1293': attribute type 29 has an invalid length.
[  186.005916][ T9149] netlink: 'syz.0.1293': attribute type 29 has an invalid length.
[  186.009660][ T9149] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1293'.
[  186.170086][ T9160] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1298'.
[  186.258578][ T9160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.263057][ T9160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.269543][ T9160] bond0 (unregistering): Released all slaves
[  187.240020][ T9188] netlink: 'syz.4.1310': attribute type 2 has an invalid length.
[  187.242730][ T9188] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1310'.
[  187.313979][ T9188] nbd: must specify at least one socket
[  187.543814][ T9198] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1314'.
[  187.549046][ T9198] netlink: zone id is out of range
[  187.551169][ T9198] netlink: zone id is out of range
[  187.553320][ T9198] netlink: zone id is out of range
[  187.557204][ T9198] netlink: zone id is out of range
[  187.559316][ T9198] netlink: zone id is out of range
[  187.561487][ T9198] netlink: zone id is out of range
[  187.563610][ T9198] netlink: zone id is out of range
[  187.566342][ T9198] netlink: zone id is out of range
[  187.572310][ T9198] netlink: zone id is out of range
[  187.574569][ T9198] netlink: zone id is out of range
[  187.820945][ T9214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'.
[  187.824220][ T9214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1321'.
[  189.048934][ T9253] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1339'.
[  189.057263][ T9253] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1339'.
[  190.637045][ T9280] netlink: 'syz.3.1347': attribute type 27 has an invalid length.
[  190.640798][ T9280] netlink: 'syz.3.1347': attribute type 3 has an invalid length.
[  191.427910][ T9291] __nla_validate_parse: 5 callbacks suppressed
[  191.427925][ T9291] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1352'.
[  191.732966][ T9303] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1358'.
[  192.079985][ T9311] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1362'.
[  192.628903][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'.
[  193.335759][ T9351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1378'.
[  193.341203][ T9351] netlink: 'syz.0.1378': attribute type 13 has an invalid length.
[  193.348855][ T9351] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1378'.
[  193.352916][ T9351] : renamed from syz_tun
[  193.364734][ T9351] : refused to change device tx_queue_len
[  193.367979][ T9351] net_ratelimit: 77 callbacks suppressed
[  193.367994][ T9351] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  193.626487][ T9362] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.1382'.
[  194.147638][ T9384] xt_l2tp: unknown flags: 51
[  194.320900][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.323784][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.309009][ T9426] bpf: Bad value for 'uid'
[  195.429597][ T9432] netlink: 'syz.4.1406': attribute type 21 has an invalid length.
[  195.433389][ T9432] IPv6: NLM_F_CREATE should be specified when creating new route
[  195.653391][ T9439] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1409'.
[  196.170384][ T9451] netlink: 'syz.3.1415': attribute type 29 has an invalid length.
[  196.256947][   T33] audit: type=1107 audit(1758474075.117:2): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lJ$'
[  196.396348][ T5879] Bluetooth: hci0: command 0x0406 tx timeout
[  196.569939][ T9479] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1426'.
[  196.574690][ T9479] netlink: zone id is out of range
[  196.579876][ T9479] netlink: zone id is out of range
[  196.583358][ T9479] netlink: zone id is out of range
[  196.588307][ T9479] netlink: zone id is out of range
[  196.596215][ T9479] netlink: zone id is out of range
[  196.599544][ T9479] netlink: zone id is out of range
[  196.602877][ T9479] netlink: zone id is out of range
[  196.611197][ T9479] netlink: zone id is out of range
[  196.614541][ T9479] netlink: zone id is out of range
[  196.712394][ T9484] netlink: 'syz.4.1428': attribute type 49 has an invalid length.
[  196.899883][ T9494] netlink: 'syz.3.1433': attribute type 16 has an invalid length.
[  196.903686][ T9494] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1433'.
[  197.026757][ T9501] netlink: 'syz.3.1436': attribute type 3 has an invalid length.
[  197.029860][ T9501] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1436'.
[  197.454024][ T9514] netlink: 'syz.3.1442': attribute type 9 has an invalid length.
[  197.601077][ T9518] -1: renamed from syzkaller0
[  197.608774][ T9520] netlink: 'syz.3.1444': attribute type 3 has an invalid length.
[  198.948799][ T9554] netlink: 'syz.4.1458': attribute type 2 has an invalid length.
[  198.952350][ T9554] netlink: 'syz.4.1458': attribute type 1 has an invalid length.
[  198.963808][ T9554] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1458'.
[  199.821279][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1472'.
[  200.331265][ T9596] netlink: 'syz.3.1476': attribute type 4 has an invalid length.
[  200.374321][ T9598] syzkaller0: entered promiscuous mode
[  200.378135][ T9598] syzkaller0: entered allmulticast mode
[  200.801361][ T9604] netlink: 'syz.0.1480': attribute type 3 has an invalid length.
[  200.804655][ T9604] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1480'.
[  200.812985][ T9604] net_ratelimit: 77 callbacks suppressed
[  200.812999][ T9604] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  201.011370][ T9615] syzkaller0: entered promiscuous mode
[  201.013627][ T9615] syzkaller0: entered allmulticast mode
[  201.310192][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'.
[  201.989129][ T9630] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  202.039952][ T9632] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1493'.
[  203.969749][ T9659] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1504'.
[  204.093917][ T9665] bpf: Bad value for 'mode'
[  204.302956][ T9680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.504508][ T9694] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1521'.
[  206.291698][ T9715] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1530'.
[  206.346221][ T9717] validate_nla: 1 callbacks suppressed
[  206.346243][ T9717] netlink: 'syz.4.1531': attribute type 21 has an invalid length.
[  206.354282][ T9717] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1531'.
[  206.689338][ T9742] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  206.708881][ T5879] Bluetooth: hci2: command 0x0406 tx timeout
[  206.786439][ T9749] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  206.808717][ T9751] netlink: 'syz.0.1546': attribute type 1 has an invalid length.
[  206.813461][ T9751] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1546'.
[  207.884498][ T9806] xt_socket: unknown flags 0x6
[  208.095308][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'.
[  208.237168][ T9820] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  208.886753][ T9857] netlink: 'syz.3.1595': attribute type 21 has an invalid length.
[  209.311107][ T9883] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  209.879373][ T9901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.013157][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'.
[  210.072847][ T9915] netlink: 'syz.0.1622': attribute type 4 has an invalid length.
[  210.084384][ T9915] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1622'.
[  210.548528][ T9915] wlan1: mtu less than device minimum
[  210.643687][ T9919] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1624'.
[  210.647518][ T9919] netlink: zone id is out of range
[  210.649562][ T9919] netlink: zone id is out of range
[  210.651729][ T9919] netlink: zone id is out of range
[  210.654028][ T9919] netlink: zone id is out of range
[  210.660206][ T9919] netlink: zone id is out of range
[  210.662573][ T9919] netlink: zone id is out of range
[  210.664889][ T9919] netlink: zone id is out of range
[  210.722347][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'.
[  211.059801][ T9944] netlink: 'syz.4.1635': attribute type 1 has an invalid length.
[  211.480913][ T9967] netlink: 'syz.4.1645': attribute type 10 has an invalid length.
[  211.488361][ T9967] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  211.708655][ T9973] lo speed is unknown, defaulting to 1000
[  211.719184][ T9973] lo speed is unknown, defaulting to 1000
[  211.726093][ T9973] lo speed is unknown, defaulting to 1000
[  211.804215][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'.
[  211.940271][ T9973] infiniband syz2: set down
[  211.942336][ T5313] lo speed is unknown, defaulting to 1000
[  211.945972][ T9973] infiniband syz2: added lo
[  211.991265][ T9973] RDS/IB: syz2: added
[  211.992993][ T9973] smc: adding ib device syz2 with port count 1
[  211.997776][ T9973] smc:    ib device syz2 port 1 has pnetid 
[  212.000506][ T5313] lo speed is unknown, defaulting to 1000
[  212.003955][ T9973] lo speed is unknown, defaulting to 1000
[  212.198704][ T9973] lo speed is unknown, defaulting to 1000
[  212.459491][ T9973] lo speed is unknown, defaulting to 1000
[  212.800835][T10013] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1664'.
[  212.805199][T10013] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1664'.
[  213.061664][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'.
[  213.066897][T10032] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1668'.
[  213.522322][T10054] netlink: 'syz.3.1683': attribute type 1 has an invalid length.
[  213.779328][T10065] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1688'.
[  214.283326][T10080] netlink: 'syz.4.1695': attribute type 27 has an invalid length.
[  214.308175][T10080] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1695'.
[  215.173353][T10111] net_ratelimit: 79 callbacks suppressed
[  215.173410][T10111] sock: sock_set_timeout: `syz.3.1710' (pid 10111) tries to set negative timeout
[  215.887980][T10136] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1721'.
[  215.893982][T10136] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1721'.
[  215.912805][T10136] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1721'.
[  216.053696][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'.
[  216.142630][T10143] netlink: 'syz.4.1724': attribute type 1 has an invalid length.
[  216.319459][T10153] netlink: 'syz.4.1730': attribute type 21 has an invalid length.
[  216.322891][T10153] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1730'.
[  216.329359][T10153] netlink: 'syz.4.1730': attribute type 5 has an invalid length.
[  216.332898][T10153] netlink: 'syz.4.1730': attribute type 6 has an invalid length.
[  216.378422][T10162] netlink: 'syz.0.1734': attribute type 10 has an invalid length.
[  216.378439][T10162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1734'.
[  216.400908][T10163] netlink: 'syz.3.1733': attribute type 10 has an invalid length.
[  216.403514][T10153] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1730'.
[  216.439734][T10159] netlink: 'syz.3.1733': attribute type 29 has an invalid length.
[  216.500890][T10165] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1736'.
[  216.709830][T10179] netlink: 'syz.3.1740': attribute type 4 has an invalid length.
[  216.903240][T10191] netlink: 'syz.3.1746': attribute type 6 has an invalid length.
[  216.910050][T10191] netlink: 'syz.3.1746': attribute type 1 has an invalid length.
[  216.992186][T10192] openvswitch: netlink: Flow actions attr not present in new flow.
[  219.102778][T10337] openvswitch: netlink: IPv6 tunnel dst address is zero
[  219.693766][T10372] netlink: 'syz.4.1790': attribute type 3 has an invalid length.
[  219.696900][T10372] __nla_validate_parse: 7 callbacks suppressed
[  219.696917][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1790'.
[  219.738164][T10378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.952503][T10388] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  220.080849][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1800'.
[  220.124147][T10395] : renamed from bond0
[  220.826785][T10425] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1815'.
[  221.089437][T10435] IPv6: NLM_F_CREATE should be specified when creating new route
[  221.299182][T10453] netlink: 'syz.3.1828': attribute type 16 has an invalid length.
[  221.302627][T10453] netlink: 'syz.3.1828': attribute type 3 has an invalid length.
[  221.306311][T10453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1828'.
[  221.723795][T10454] netlink: 'syz.0.1827': attribute type 10 has an invalid length.
[  221.782889][T10460] netlink: 'syz.0.1827': attribute type 11 has an invalid length.
[  221.787796][T10460] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1827'.
[  222.132121][T10450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.508884][T10454] : (slave wlan1): Releasing backup interface
[  225.549286][T10454] team0: Port device wlan1 added
[  225.664201][T10466] bridge0: port 1(ip6gretap0) entered blocking state
[  225.667478][T10466] bridge0: port 1(ip6gretap0) entered disabled state
[  225.670286][T10466] ip6gretap0: entered allmulticast mode
[  225.674181][T10466] ip6gretap0: entered promiscuous mode
[  227.337520][T10473] netlink: 'syz.0.1838': attribute type 2 has an invalid length.
[  227.340864][T10473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1838'.
[  227.956466][T10514] netlink: 'syz.4.1856': attribute type 1 has an invalid length.
[  227.998815][T10519] netlink: 'syz.0.1859': attribute type 9 has an invalid length.
[  228.002070][T10519] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1859'.
[  228.195526][T10529] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  228.198702][T10529] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  228.264716][T10532] siw: device registration error -23
[  229.554133][T10571] netlink: 'syz.4.1876': attribute type 10 has an invalid length.
[  229.561284][T10571] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1876'.
[  229.585563][T10571] ipvlan1: entered promiscuous mode
[  229.588897][T10571] ipvlan1: entered allmulticast mode
[  229.591339][T10571] veth0_vlan: entered allmulticast mode
[  229.608131][T10571] bridge0: port 1(ipvlan1) entered blocking state
[  229.612398][T10571] bridge0: port 1(ipvlan1) entered disabled state
[  229.619661][T10571] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  229.913914][T10589] netlink: 'syz.4.1885': attribute type 6 has an invalid length.
[  229.919075][T10589] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1885'.
[  230.408706][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'.
[  230.554160][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'.
[  230.555251][T10610] netlink: 'syz.4.1893': attribute type 10 has an invalid length.
[  230.619364][T10611] netlink: 'syz.4.1893': attribute type 10 has an invalid length.
[  230.722577][T10611] team0: Device hsr_slave_0 failed to register rx_handler
[  231.591754][T10638] netlink: 'syz.3.1903': attribute type 9 has an invalid length.
[  231.597299][T10638] netlink: 211924 bytes leftover after parsing attributes in process `syz.3.1903'.
[  232.370363][T10660] netlink: 'syz.3.1913': attribute type 7 has an invalid length.
[  233.758728][T10721] netlink: 'syz.3.1932': attribute type 39 has an invalid length.
[  233.811462][T10725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1932'.
[  234.132344][T10737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1940'.
[  234.136542][T10737] tc_dump_action: action bad kind
[  234.259379][T10743] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1943'.
[  234.431152][T10754] netlink: 'syz.4.1949': attribute type 21 has an invalid length.
[  234.736702][T10767] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1955'.
[  234.753868][T10776] siw: device registration error -23
[  234.769813][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1957'.
[  235.278238][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'.
[  235.282322][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'.
[  235.286858][T10797] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1966'.
[  235.373124][T10803] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1969'.
[  235.450705][T10810] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1972'.
[  235.456557][T10807] erspan0 speed is unknown, defaulting to 1000
[  235.658096][T10807] lo speed is unknown, defaulting to 1000
[  237.347509][ T5886] Bluetooth: hci1: command 0x0406 tx timeout
[  239.005276][T10838] netlink: 'syz.4.1982': attribute type 12 has an invalid length.
[  239.008382][T10838] __nla_validate_parse: 2 callbacks suppressed
[  239.008395][T10838] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1982'.
[  239.147878][T10840] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1981'.
[  240.054325][T10855] netlink: 'syz.3.1990': attribute type 2 has an invalid length.
[  240.057277][T10855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1990'.
[  240.652169][T10857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1991'.
[  240.664847][T10857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1991'.
[  241.723475][T10876] netlink: 'syz.3.1999': attribute type 10 has an invalid length.
[  241.732074][T10876] batman_adv: batadv0: Adding interface: netdevsim0
[  241.734891][T10876] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.746634][T10876] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  242.166603][T10906] netlink: 'syz.4.2005': attribute type 6 has an invalid length.
[  242.169489][T10906] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2005'.
[  242.961592][T10923] netlink: 64019 bytes leftover after parsing attributes in process `syz.3.2017'.
[  243.616292][T10939] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2024'.
[  244.006842][T10954] netlink: 'syz.0.2030': attribute type 10 has an invalid length.
[  244.009887][T10954] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2030'.
[  244.288338][T10967] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  244.292529][T10967] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  244.692306][ T5879] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  244.827456][T10996] syzkaller0: entered promiscuous mode
[  244.832712][T10996] syzkaller0: entered allmulticast mode
[  245.238391][T11002] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2050'.
[  247.142135][T11008] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2052'.
[  247.223186][T11011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.662756][T11041] netlink: 825 bytes leftover after parsing attributes in process `syz.3.2068'.
[  247.669222][T11041] netlink: 130144 bytes leftover after parsing attributes in process `syz.3.2068'.
[  247.699300][T11043] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2069'.
[  248.897463][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'.
[  249.226505][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'.
[  249.317992][T11075] netlink: 'syz.3.2082': attribute type 10 has an invalid length.
[  249.354697][T11078] syzkaller0: entered promiscuous mode
[  249.360888][T11078] syzkaller0: entered allmulticast mode
[  251.919966][T11120] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.2099'.
[  252.264615][ T5879] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  252.938157][T11156] x_tables: ip_tables: udp match: only valid for protocol 17
[  253.194011][T11166] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2120'.
[  253.458912][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'.
[  253.472026][T11178] netlink: 'syz.4.2126': attribute type 40 has an invalid length.
[  253.514132][T11178] siw: device registration error -23
[  253.709879][T11187] netlink: 'syz.4.2130': attribute type 5 has an invalid length.
[  253.713313][T11187] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2130'.
[  253.912769][T11192] nbd: must specify an index to disconnect
[  254.004019][T11197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.553460][T11206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.209487][T11216] netlink: 'syz.4.2140': attribute type 4 has an invalid length.
[  255.474146][T11226] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2144'.
[  255.478953][T11225] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2144'.
[  255.673173][T11237] netlink: 'syz.0.2149': attribute type 1 has an invalid length.
[  255.733907][T11239] netlink: 'syz.3.2150': attribute type 2 has an invalid length.
[  255.766891][T11239] netlink: 'syz.3.2150': attribute type 1 has an invalid length.
[  255.770001][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'.
[  255.775176][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.778018][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.939211][T11251] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2157'.
[  256.042854][T11258] xt_l2tp: invalid flags combination: 8
[  257.265278][ T5879] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  258.181069][T11321] erspan0 speed is unknown, defaulting to 1000
[  258.420133][ T5879] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  258.473535][T11321] lo speed is unknown, defaulting to 1000
[  258.808866][T11350] netlink: 'syz.0.2197': attribute type 10 has an invalid length.
[  258.815680][T11350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2197'.
[  258.857900][T11350] batman_adv: batadv0: Adding interface: virt_wifi0
[  258.860839][T11350] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.876413][T11350] batman_adv: batadv0: Interface activated: virt_wifi0
[  258.988330][T11356] netlink: 'syz.4.2199': attribute type 39 has an invalid length.
[  259.108422][T11361] can: request_module (can-proto-5) failed.
[  259.154514][T11361] can: request_module (can-proto-3) failed.
[  259.228792][T11366] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2202'.
[  259.632137][T11356] hsr_slave_0 (unregistering): left promiscuous mode
[  260.048269][T11378] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2208'.
[  261.150757][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'.
[  261.412634][T11408] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  261.417976][T11408] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  262.079013][T11435] netlink: 'syz.4.2232': attribute type 21 has an invalid length.
[  262.082699][T11435] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2232'.
[  262.343503][T11443] netlink: 'syz.4.2237': attribute type 3 has an invalid length.
[  262.346642][T11443] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2237'.
[  263.022534][T11452] netlink: 'syz.3.2241': attribute type 2 has an invalid length.
[  263.025862][T11452] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2241'.
[  263.029513][T11452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  263.071624][T11454] netlink: 'syz.3.2242': attribute type 9 has an invalid length.
[  263.074372][T11454] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2242'.
[  263.287407][T11459] sctp: [Deprecated]: syz.0.2244 (pid 11459) Use of struct sctp_assoc_value in delayed_ack socket option.
[  263.287407][T11459] Use struct sctp_sack_info instead
[  263.907582][   T26] wlan1: Trigger new scan to find an IBSS to join
[  265.420831][T11499] netlink: 'syz.3.2261': attribute type 12 has an invalid length.
[  265.424463][T11499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2261'.
[  265.470724][T11507] netlink: 'syz.0.2263': attribute type 10 has an invalid length.
[  265.534285][T11510] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  265.680785][T11525] netlink: 'syz.0.2268': attribute type 21 has an invalid length.
[  265.683631][T11525] IPv6: NLM_F_CREATE should be specified when creating new route
[  265.803794][T11534] netlink: 'syz.3.2275': attribute type 3 has an invalid length.
[  265.807875][T11534] netlink: 201332 bytes leftover after parsing attributes in process `syz.3.2275'.
[  266.945422][ T1019] wlan1: Trigger new scan to find an IBSS to join
[  267.170003][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'.
[  267.497700][T11562] delete_channel: no stack
[  267.799264][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'.
[  267.803018][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'.
[  267.830165][T11575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2294'.
[  267.928716][T11578] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2296'.
[  267.931953][T11578] openvswitch: netlink: Missing key (keys=40, expected=100)
[  268.788197][ T6866] wlan1: Creating new IBSS network, BSSID 6e:e8:4b:43:36:6a
[  269.089905][T11617] netlink: 'syz.4.2311': attribute type 29 has an invalid length.
[  269.095965][T11617] netlink: 'syz.4.2311': attribute type 29 has an invalid length.
[  269.101172][T11617] netlink: 'syz.4.2311': attribute type 29 has an invalid length.
[  269.118357][T11617] netlink: 'syz.4.2311': attribute type 29 has an invalid length.
[  269.296255][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2318'.
[  269.300389][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2318'.
[  269.304339][T11629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2318'.
[  271.873427][T11652] __nla_validate_parse: 1 callbacks suppressed
[  271.873739][T11652] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2329'.
[  271.980403][T11652] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2329'.
[  273.146972][T11684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2341'.
[  273.163494][T11688] netlink: 'syz.0.2342': attribute type 1 has an invalid length.
[  273.398006][T11699] netlink: 'syz.4.2347': attribute type 1 has an invalid length.
[  274.732868][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'.
[  274.891267][T11732] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2360'.
[  275.209986][T11747] netlink: 'syz.4.2367': attribute type 10 has an invalid length.
[  275.301538][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2370'.
[  275.308998][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2370'.
[  275.313567][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2370'.
[  275.332678][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2370'.
[  275.640121][T11782] delete_channel: no stack
[  275.642041][T11782] delete_channel: no stack
[  275.693662][T11789] netlink: 'syz.0.2387': attribute type 27 has an invalid length.
[  275.697513][T11789] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2387'.
[  275.778450][T11798] netlink: 'syz.3.2391': attribute type 29 has an invalid length.
[  275.782321][T11798] netlink: 'syz.3.2391': attribute type 29 has an invalid length.
[  275.787191][T11798] netlink: 'syz.3.2391': attribute type 29 has an invalid length.
[  276.177082][T11834] netlink: 'syz.3.2409': attribute type 2 has an invalid length.
[  276.298724][T11846] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  276.587227][T11866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.801719][T11908] syzkaller0: entered promiscuous mode
[  277.803608][T11908] syzkaller0: entered allmulticast mode
[  278.596137][T11916] __nla_validate_parse: 4 callbacks suppressed
[  278.596177][T11916] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2444'.
[  278.601700][T11916] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  279.008074][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'.
[  279.449524][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2449'.
[  279.582662][T11936] netlink: 'syz.0.2453': attribute type 5 has an invalid length.
[  279.587115][T11936] netlink: 'syz.0.2453': attribute type 7 has an invalid length.
[  279.590255][T11936] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2453'.
[  279.862172][T11955] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2461'.
[  280.533014][T11998] sit0: entered allmulticast mode
[  280.584469][T11998] sit0: entered promiscuous mode
[  281.499753][T12014] syzkaller0: entered promiscuous mode
[  283.100381][T12035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.130122][T12037] netlink: 'syz.3.2495': attribute type 21 has an invalid length.
[  283.142449][T12039] netlink: 'syz.0.2496': attribute type 21 has an invalid length.
[  283.180509][T12043] netlink: 495 bytes leftover after parsing attributes in process `syz.3.2498'.
[  284.097396][T12066] siw: device registration error -23
[  284.588126][T12098] nftables ruleset with unbound chain
[  284.632474][T12103] netlink: 'syz.3.2525': attribute type 41 has an invalid length.
[  284.638499][T12103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2525'.
[  284.747512][T12111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2529'.
[  284.869592][T12123] netlink: 'syz.3.2535': attribute type 8 has an invalid length.
[  284.949915][T12127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2537'.
[  284.980609][T12133] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.2540'.
[  285.182685][T12154] netlink: 'syz.4.2549': attribute type 7 has an invalid length.
[  285.272990][T12157] netlink: 'syz.4.2550': attribute type 2 has an invalid length.
[  285.277881][T12157] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2550'.
[  285.281204][T12157] nbd: must specify a device to reconfigure
[  285.393836][T12165] netlink: 'syz.3.2554': attribute type 16 has an invalid length.
[  285.399916][T12165] netlink: 'syz.3.2554': attribute type 3 has an invalid length.
[  285.403079][T12165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2554'.
[  285.608993][T12178] netlink: 'syz.4.2560': attribute type 49 has an invalid length.
[  285.813519][T12182] netlink: 'syz.4.2562': attribute type 21 has an invalid length.
[  290.514343][T12287] validate_nla: 3 callbacks suppressed
[  290.514362][T12287] netlink: 'syz.4.2607': attribute type 27 has an invalid length.
[  290.520261][T12287] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2607'.
[  291.528484][T12312] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2618'.
[  291.651077][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'.
[  291.654897][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'.
[  291.672661][T12318] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2620'.
[  292.864362][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2635'.
[  292.876844][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2635'.
[  292.997100][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'.
[  293.094091][T12361] netlink: 'syz.3.2640': attribute type 13 has an invalid length.
[  293.099723][T12361] netlink: 'syz.3.2640': attribute type 17 has an invalid length.
[  293.141535][T12361] sit0: left promiscuous mode
[  293.153454][T12361] bridge0: port 1(ip6gretap0) entered blocking state
[  293.155606][T12361] bridge0: port 1(ip6gretap0) entered forwarding state
[  293.161095][T12361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.510257][T12389] netlink: 'syz.3.2653': attribute type 29 has an invalid length.
[  293.514782][T12389] netlink: 'syz.3.2653': attribute type 29 has an invalid length.
[  293.646835][T12400] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2659'.
[  293.721589][T12411] netlink: 'syz.3.2664': attribute type 12 has an invalid length.
[  293.724119][T12411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2664'.
[  293.877236][T12429] netlink: 'syz.4.2672': attribute type 5 has an invalid length.
[  294.036072][T12443] netlink: 'syz.4.2679': attribute type 1 has an invalid length.
[  294.482185][T12462] netlink: 'syz.4.2688': attribute type 11 has an invalid length.
[  294.586960][T12470] netlink: 'syz.4.2692': attribute type 1 has an invalid length.
[  294.759404][T12477] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  294.764385][T12477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.091191][T12498] netlink: zone id is out of range
[  295.110933][T12498] netlink: zone id is out of range
[  295.112899][T12498] netlink: zone id is out of range
[  295.330294][T12498] netlink: set zone limit has 4 unknown bytes
[  295.729526][T12515] __nla_validate_parse: 6 callbacks suppressed
[  295.729544][T12515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2711'.
[  296.566738][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2724'.
[  296.570813][T12542] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  297.240382][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'.
[  297.245326][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'.
[  298.319961][T12579] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2739'.
[  298.324392][T12581] validate_nla: 1 callbacks suppressed
[  298.324407][T12581] netlink: 'syz.3.2740': attribute type 21 has an invalid length.
[  298.330155][T12581] netlink: 'syz.3.2740': attribute type 1 has an invalid length.
[  298.332493][T12581] netlink: 15202 bytes leftover after parsing attributes in process `syz.3.2740'.
[  298.337079][T12579] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2739'.
[  298.717071][T12612] netlink: 'syz.4.2756': attribute type 21 has an invalid length.
[  299.642668][T12627] netlink: 'syz.0.2763': attribute type 1 has an invalid length.
[  299.646294][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'.
[  299.738927][T12629] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2764'.
[  300.537195][T12638] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2767'.
[  300.950429][T12650] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component
[  301.022801][T12664] netlink: 'syz.3.2779': attribute type 39 has an invalid length.
[  302.040584][T12680] netlink: 'syz.3.2785': attribute type 21 has an invalid length.
[  302.333050][T12696] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2792'.
[  302.367844][T12689] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode
[  302.371414][T12689] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  302.594653][T12712] netlink: 'syz.3.2799': attribute type 21 has an invalid length.
[  302.604832][T12712] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2799'.
[  302.612063][T12712] netlink: 'syz.3.2799': attribute type 4 has an invalid length.
[  302.615785][T12712] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2799'.
[  302.619973][T12714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2801'.
[  302.691541][T12716] erspan0 speed is unknown, defaulting to 1000
[  302.825481][T12716] lo speed is unknown, defaulting to 1000
[  303.162567][T12745] syz.4.2814: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  303.171408][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.4.2814 Not tainted syzkaller #0 PREEMPT(full) 
[  303.171433][T12745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.171445][T12745] Call Trace:
[  303.171455][T12745]  <TASK>
[  303.171465][T12745]  dump_stack_lvl+0x189/0x250
[  303.171512][T12745]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.171536][T12745]  ? __pfx__printk+0x10/0x10
[  303.171565][T12745]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  303.171588][T12745]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  303.171615][T12745]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  303.171646][T12745]  warn_alloc+0x214/0x310
[  303.171672][T12745]  ? stack_depot_save_flags+0x41b/0x860
[  303.171698][T12745]  ? __pfx_warn_alloc+0x10/0x10
[  303.171738][T12745]  ? kasan_save_track+0x4f/0x80
[  303.171763][T12745]  ? xskq_create+0x56/0x170
[  303.171780][T12745]  ? xsk_init_queue+0xb0/0x110
[  303.171795][T12745]  ? xsk_setsockopt+0x57b/0x8d0
[  303.171810][T12745]  ? do_sock_setsockopt+0x17c/0x1b0
[  303.171830][T12745]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  303.171850][T12745]  ? do_syscall_64+0xfa/0x3b0
[  303.171869][T12745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.171907][T12745]  __vmalloc_node_range_noprof+0x125/0x12f0
[  303.172030][T12745]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  303.172054][T12745]  ? xskq_create+0x56/0x170
[  303.172082][T12745]  ? __kasan_kmalloc+0x93/0xb0
[  303.172119][T12745]  vmalloc_user_noprof+0xad/0xf0
[  303.172138][T12745]  ? xskq_create+0xbf/0x170
[  303.172169][T12745]  xskq_create+0xbf/0x170
[  303.172198][T12745]  xsk_init_queue+0xb0/0x110
[  303.172227][T12745]  xsk_setsockopt+0x57b/0x8d0
[  303.172255][T12745]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.172277][T12745]  ? __pfx_aa_sk_perm+0x10/0x10
[  303.172340][T12745]  ? __fget_files+0x2a/0x420
[  303.172358][T12745]  ? aa_sock_opt_perm+0xff/0x1b0
[  303.172390][T12745]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  303.172409][T12745]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.172435][T12745]  do_sock_setsockopt+0x17c/0x1b0
[  303.172473][T12745]  __x64_sys_setsockopt+0x13f/0x1b0
[  303.172513][T12745]  do_syscall_64+0xfa/0x3b0
[  303.172533][T12745]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.172555][T12745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.172573][T12745]  ? exc_page_fault+0x9f/0xf0
[  303.172600][T12745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.172617][T12745] RIP: 0033:0x7f0e0b58eba9
[  303.172637][T12745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.172652][T12745] RSP: 002b:00007f0e0c4b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  303.172671][T12745] RAX: ffffffffffffffda RBX: 00007f0e0b7d5fa0 RCX: 00007f0e0b58eba9
[  303.172684][T12745] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  303.172695][T12745] RBP: 00007f0e0b611e19 R08: 0000000000000004 R09: 0000000000000000
[  303.172706][T12745] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  303.172716][T12745] R13: 00007f0e0b7d6038 R14: 00007f0e0b7d5fa0 R15: 00007ffde564f998
[  303.172774][T12745]  </TASK>
[  303.172937][T12745] Mem-Info:
[  303.340751][T12745] active_anon:6197 inactive_anon:0 isolated_anon:0
[  303.340751][T12745]  active_file:15649 inactive_file:38344 isolated_file:0
[  303.340751][T12745]  unevictable:1768 dirty:180 writeback:0
[  303.340751][T12745]  slab_reclaimable:10380 slab_unreclaimable:115313
[  303.340751][T12745]  mapped:18091 shmem:2426 pagetables:1175
[  303.340751][T12745]  sec_pagetables:0 bounce:0
[  303.340751][T12745]  kernel_misc_reclaimable:0
[  303.340751][T12745]  free:209006 free_pcp:25158 free_cma:0
[  303.362165][T12745] Node 0 active_anon:15656kB inactive_anon:0kB active_file:17528kB inactive_file:7468kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27232kB dirty:156kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6040kB pagetables:2464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  303.379555][T12745] Node 1 active_anon:9132kB inactive_anon:0kB active_file:45068kB inactive_file:145908kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45132kB dirty:564kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5680kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  303.409901][T12745] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  303.420955][T12745] lowmem_reserve[]: 0 811 811 811 811
[  303.422720][T12745] Node 0 DMA32 free:275272kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15588kB inactive_anon:0kB active_file:17528kB inactive_file:7468kB unevictable:3536kB writepending:156kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:44936kB local_pcp:18116kB free_cma:0kB
[  303.439128][T12745] lowmem_reserve[]: 0 0 0 0 0
[  303.440813][T12745] Node 1 DMA32 free:430924kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:27572kB local_pcp:18724kB free_cma:0kB
[  303.451933][T12745] lowmem_reserve[]: 0 0 854 854 854
[  303.453750][T12745] Node 1 Normal free:114468kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9132kB inactive_anon:0kB active_file:45068kB inactive_file:145908kB unevictable:3536kB writepending:564kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:28260kB local_pcp:12652kB free_cma:0kB
[  303.466547][T12745] lowmem_reserve[]: 0 0 0 0 0
[  303.468139][T12745] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  303.472490][T12745] Node 0 DMA32: 438*4kB (ME) 344*8kB (UM) 425*16kB (UM) 241*32kB (UME) 140*64kB (UM) 90*128kB (UM) 27*256kB (UM) 15*512kB (UM) 4*1024kB (M) 6*2048kB (ME) 50*4096kB (M) = 275272kB
[  303.482296][T12745] Node 1 DMA32: 3*4kB (U) 8*8kB (UM) 8*16kB (UM) 8*32kB (UM) 10*64kB (UM) 8*128kB (UM) 9*256kB (UM) 7*512kB (UM) 9*1024kB (UM) 6*2048kB (UM) 98*4096kB (UM) = 430924kB
[  303.490574][T12745] Node 1 Normal: 799*4kB (UME) 775*8kB (UME) 411*16kB (UME) 418*32kB (UME) 142*64kB (UME) 208*128kB (UME) 41*256kB (UME) 28*512kB (UME) 24*1024kB (UME) 0*2048kB 0*4096kB = 114468kB
[  303.497574][T12745] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  303.501036][T12745] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  303.504521][T12745] 56419 total pagecache pages
[  303.506204][T12745] 0 pages in swap cache
[  303.507496][T12745] Free swap  = 124996kB
[  303.508827][T12745] Total swap = 124996kB
[  303.510171][T12745] 786301 pages RAM
[  303.511413][T12745] 0 pages HighMem/MovableOnly
[  303.512904][T12745] 241356 pages reserved
[  303.514300][T12745] 0 pages cma reserved
[  303.601749][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2817'.
[  303.622459][T12753] netlink: 'syz.3.2818': attribute type 14 has an invalid length.
[  304.259397][T12772] netlink: 'syz.3.2826': attribute type 10 has an invalid length.
[  304.650119][T12778] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2830'.
[  305.017076][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2835'.
[  305.020700][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2835'.
[  307.968026][T12858] openvswitch: netlink: Invalid VLAN frame
[  308.135968][T12859] netlink: 'syz.3.2869': attribute type 64 has an invalid length.
[  308.450267][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'.
[  308.452997][T12874] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2877'.
[  308.456942][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'.
[  308.465317][T12874] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2877'.
[  308.470794][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'.
[  309.941154][T12881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2880'.
[  309.944539][T12881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2880'.
[  310.266591][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'.
[  310.460435][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'.
[  310.547310][T12921] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2899'.
[  310.736682][T12926] bpf: Bad value for 'mode'
[  310.992566][T12930] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  311.552784][T12947] netlink: 'syz.3.2911': attribute type 1 has an invalid length.
[  311.563973][T12947] netlink: 'syz.3.2911': attribute type 2 has an invalid length.
[  312.843525][T12989] netlink: 'syz.0.2927': attribute type 40 has an invalid length.
[  313.833100][T13011] siw: device registration error -23
[  314.199130][T13036] __nla_validate_parse: 4 callbacks suppressed
[  314.199148][T13036] netlink: 948 bytes leftover after parsing attributes in process `syz.3.2949'.
[  314.371802][T13048] tmpfs: Bad value for 'gid'
[  314.373610][T13048] tmpfs: Bad value for 'gid'
[  314.599116][T13053] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2957'.
[  314.691720][T13055] netlink: 731 bytes leftover after parsing attributes in process `syz.0.2958'.
[  315.214217][T13069] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2963'.
[  315.313124][T13075] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2966'.
[  315.369263][T13077] netlink: 'syz.3.2967': attribute type 4 has an invalid length.
[  315.909775][T13110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2983'.
[  316.554423][T13127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  316.557657][T13127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  316.681369][T13139] syzkaller0: entered promiscuous mode
[  316.683409][T13139] syzkaller0: entered allmulticast mode
[  316.788399][   T33] audit: type=1107 audit(1758474195.637:3): pid=13146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.874389][T13153] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3002'.
[  316.880024][T13153] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3002'.
[  317.250907][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.253137][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.419972][T13164] bridge0: port 3() entered blocking state
[  317.421917][T13164] bridge0: port 3() entered disabled state
[  317.423827][T13164] : entered allmulticast mode
[  317.428414][T13164] : entered promiscuous mode
[  317.454169][T13166] netlink: 'syz.0.3008': attribute type 28 has an invalid length.
[  317.458043][T13166] netlink: 'syz.0.3008': attribute type 29 has an invalid length.
[  317.461848][T13166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3008'.
[  317.676098][T13180] netlink: 'syz.3.3015': attribute type 6 has an invalid length.
[  317.679510][T13180] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3015'.
[  317.691091][T13182] netlink: 'syz.0.3016': attribute type 10 has an invalid length.
[  317.694868][T13182] team0: entered promiscuous mode
[  317.700176][T13182] C: entered promiscuous mode
[  317.701710][T13182] team_slave_1: entered promiscuous mode
[  317.703608][T13182] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  317.706322][T13182] team0: entered allmulticast mode
[  317.707861][T13182] C: entered allmulticast mode
[  317.709344][T13182] team_slave_1: entered allmulticast mode
[  317.711238][T13182] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  317.714361][T13182] 8021q: adding VLAN 0 to HW filter on device team0
[  317.717175][T13182] bridge0: port 4(team0) entered blocking state
[  317.725538][T13182] bridge0: port 4(team0) entered disabled state
[  319.031157][T13207] syzkaller0: entered promiscuous mode
[  319.033080][T13207] syzkaller0: entered allmulticast mode
[  319.506347][ T5879] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[  320.972394][T13241] netlink: 'syz.0.3039': attribute type 29 has an invalid length.
[  320.982608][T13243] __nla_validate_parse: 5 callbacks suppressed
[  320.982621][T13243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3040'.
[  320.989550][T13241] netlink: 'syz.0.3039': attribute type 29 has an invalid length.
[  321.234499][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3047'.
[  321.271460][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'.
[  321.350766][T13262] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3049'.
[  321.477274][T13268] option changes via remount are deprecated (pid=13266 comm=syz.3.3052)
[  322.837783][ T5886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  322.841695][ T5886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  322.866546][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  322.870570][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  322.933295][ T5886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  322.978282][T13303] erspan0 speed is unknown, defaulting to 1000
[  323.080677][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.127552][T13303] lo speed is unknown, defaulting to 1000
[  323.218818][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.283797][T13325] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.3072'.
[  323.289044][T13325] openvswitch: netlink: Message has 5588 unknown bytes.
[  323.291569][T13325] openvswitch: netlink: Actions may not be safe on all matching packets
[  323.303853][T13323] cgroup: fork rejected by pids controller in /syz3
[  323.372817][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.413269][T13330] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode
[  323.419649][T13330] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode
[  323.425908][T13330] team0: Port device wlan1 removed
[  323.486538][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.827145][   T13] bridge_slave_1: left allmulticast mode
[  323.829378][   T13] bridge_slave_1: left promiscuous mode
[  323.831712][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.871934][   T13] bond_slave_1: left promiscuous mode
[  324.137158][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  324.142452][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  324.146807][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  324.173654][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  324.188093][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  324.213205][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.219485][   T13] bond0 (unregistering): Released all slaves
[  324.239152][T13303] chnl_net:caif_netlink_parms(): no params data found
[  324.258144][T13343] erspan0 speed is unknown, defaulting to 1000
[  324.310652][   T13] : left promiscuous mode
[  324.413952][T13332] delete_channel: no stack
[  324.459191][T13303] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.461814][T13303] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.464513][T13303] bridge_slave_0: entered allmulticast mode
[  324.467667][T13303] bridge_slave_0: entered promiscuous mode
[  324.481525][T13303] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.484000][T13303] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.488255][T13303] bridge_slave_1: entered allmulticast mode
[  324.492568][T13303] bridge_slave_1: entered promiscuous mode
[  324.528716][T13343] lo speed is unknown, defaulting to 1000
[  324.561975][T13303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.571023][T13303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.616306][T13303] team0: Port device team_slave_0 added
[  324.657549][T13303] team0: Port device team_slave_1 added
[  324.741152][T13303] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.743308][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.767305][T13303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.779430][T13303] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.782078][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.801247][T13303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.944525][T13303] hsr_slave_0: entered promiscuous mode
[  324.949766][T13303] hsr_slave_1: entered promiscuous mode
[  324.951876][T13303] debugfs: 'hsr0' already exists in 'hsr'
[  324.953587][T13303] Cannot create hsr debugfs directory
[  325.025123][ T5879] Bluetooth: hci2: command tx timeout
[  325.383057][T13343] chnl_net:caif_netlink_parms(): no params data found
[  325.733901][T13303] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  325.759679][T13303] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  325.774453][   T13] hsr_slave_1: left promiscuous mode
[  325.779475][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.782304][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.800303][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.803070][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.831324][   T13] veth1_vlan: left promiscuous mode
[  325.832992][   T13] veth0_vlan: left promiscuous mode
[  326.168630][   T13] team0 (unregistering): Port device team_slave_1 removed
[  326.202866][   T13] team0 (unregistering): Port device team_slave_0 removed
[  326.235627][ T5879] Bluetooth: hci1: command tx timeout
[  326.502303][ T1019] smc: removing ib device syz2
[  326.543177][T13303] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  326.562613][T13343] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.565907][T13343] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.568308][T13343] bridge_slave_0: entered allmulticast mode
[  326.571140][T13343] bridge_slave_0: entered promiscuous mode
[  326.581329][T13303] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  326.618899][T13343] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.625327][T13343] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.628224][T13343] bridge_slave_1: entered allmulticast mode
[  326.648752][T13343] bridge_slave_1: entered promiscuous mode
[  326.842415][T13343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.885565][T13343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.115238][ T5879] Bluetooth: hci2: command tx timeout
[  327.923545][T13343] team0: Port device team_slave_0 added
[  327.944124][T13343] team0: Port device team_slave_1 added
[  327.989563][T13434] netlink: 'syz.0.3100': attribute type 10 has an invalid length.
[  327.992540][T13434] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3100'.
[  328.020211][T13343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.022638][T13343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.053887][T13343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.074381][   T13] ==================================================================
[  328.077665][   T13] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  328.080778][   T13] Write of size 8 at addr ffff888028eb3628 by task kworker/u8:1/13
[  328.084741][   T13] 
[  328.086120][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  328.086138][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  328.086147][   T13] Workqueue: netns cleanup_net
[  328.086168][   T13] Call Trace:
[  328.086174][   T13]  <TASK>
[  328.086182][   T13]  dump_stack_lvl+0x189/0x250
[  328.086198][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[  328.086213][   T13]  ? rcu_is_watching+0x15/0xb0
[  328.086225][   T13]  ? __kasan_check_byte+0x12/0x40
[  328.086237][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.086251][   T13]  ? rcu_is_watching+0x15/0xb0
[  328.086263][   T13]  ? lock_release+0x4b/0x3e0
[  328.086282][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[  328.086296][   T13]  ? __virt_addr_valid+0x4a5/0x5c0
[  328.086312][   T13]  print_report+0xca/0x240
[  328.086325][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  328.086340][   T13]  kasan_report+0x118/0x150
[  328.086352][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  328.086370][   T13]  __xfrm_state_delete+0x666/0xca0
[  328.086389][   T13]  xfrm_state_flush+0x45f/0x770
[  328.086425][   T13]  xfrm6_tunnel_net_exit+0x3c/0x100
[  328.086444][   T13]  ops_undo_list+0x49a/0x990
[  328.086461][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  328.086477][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  328.086494][   T13]  cleanup_net+0x4c5/0x800
[  328.086510][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  328.086525][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.086539][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  328.086551][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  328.086564][   T13]  process_scheduled_works+0xae1/0x17b0
[  328.086585][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  328.086603][   T13]  worker_thread+0x8a0/0xda0
[  328.086626][   T13]  kthread+0x711/0x8a0
[  328.086641][   T13]  ? __pfx_worker_thread+0x10/0x10
[  328.086653][   T13]  ? __pfx_kthread+0x10/0x10
[  328.086668][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.086680][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.086694][   T13]  ? __pfx_kthread+0x10/0x10
[  328.086708][   T13]  ret_from_fork+0x439/0x7d0
[  328.086722][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  328.086736][   T13]  ? __switch_to_asm+0x39/0x70
[  328.086751][   T13]  ? __switch_to_asm+0x33/0x70
[  328.086766][   T13]  ? __pfx_kthread+0x10/0x10
[  328.086780][   T13]  ret_from_fork_asm+0x1a/0x30
[  328.086802][   T13]  </TASK>
[  328.086806][   T13] 
[  328.179572][   T13] Allocated by task 11868:
[  328.181421][   T13]  kasan_save_track+0x3e/0x80
[  328.183316][   T13]  __kasan_slab_alloc+0x6c/0x80
[  328.185359][   T13]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  328.187613][   T13]  xfrm_state_alloc+0x24/0x2f0
[  328.189533][   T13]  __find_acq_core+0x8a7/0x1c00
[  328.191537][   T13]  xfrm_find_acq+0x78/0xa0
[  328.193386][   T13]  xfrm_alloc_userspi+0x6b3/0xc90
[  328.195389][   T13]  xfrm_user_rcv_msg+0x7a3/0xab0
[  328.197398][   T13]  netlink_rcv_skb+0x208/0x470
[  328.199302][   T13]  xfrm_netlink_rcv+0x79/0x90
[  328.201184][   T13]  netlink_unicast+0x82f/0x9e0
[  328.203097][   T13]  netlink_sendmsg+0x805/0xb30
[  328.204994][   T13]  __sock_sendmsg+0x21c/0x270
[  328.206890][   T13]  ____sys_sendmsg+0x505/0x830
[  328.208809][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  328.210721][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  328.212715][   T13]  do_syscall_64+0xfa/0x3b0
[  328.214545][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.216898][   T13] 
[  328.217866][   T13] Freed by task 5313:
[  328.219464][   T13]  kasan_save_track+0x3e/0x80
[  328.221334][   T13]  kasan_save_free_info+0x46/0x50
[  328.223296][   T13]  __kasan_slab_free+0x5b/0x80
[  328.225188][   T13]  kmem_cache_free+0x18f/0x400
[  328.227107][   T13]  xfrm_state_gc_task+0x52d/0x6b0
[  328.229153][   T13]  process_scheduled_works+0xae1/0x17b0
[  328.231404][   T13]  worker_thread+0x8a0/0xda0
[  328.233239][   T13]  kthread+0x711/0x8a0
[  328.234887][   T13]  ret_from_fork+0x439/0x7d0
[  328.236780][   T13]  ret_from_fork_asm+0x1a/0x30
[  328.238712][   T13] 
[  328.239674][   T13] The buggy address belongs to the object at ffff888028eb3600
[  328.239674][   T13]  which belongs to the cache xfrm_state of size 928
[  328.245218][   T13] The buggy address is located 40 bytes inside of
[  328.245218][   T13]  freed 928-byte region [ffff888028eb3600, ffff888028eb39a0)
[  328.250623][   T13] 
[  328.251583][   T13] The buggy address belongs to the physical page:
[  328.254162][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028eb3180 pfn:0x28eb0
[  328.258173][   T13] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  328.261525][   T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  328.264569][   T13] page_type: f5(slab)
[  328.266170][   T13] raw: 00fff00000000040 ffff888104b00780 dead000000000122 0000000000000000
[  328.269609][   T13] raw: ffff888028eb3180 00000000800e000b 00000000f5000000 0000000000000000
[  328.273017][   T13] head: 00fff00000000040 ffff888104b00780 dead000000000122 0000000000000000
[  328.276507][   T13] head: ffff888028eb3180 00000000800e000b 00000000f5000000 0000000000000000
[  328.280082][   T13] head: 00fff00000000002 ffffea0000a3ac01 00000000ffffffff 00000000ffffffff
[  328.283562][   T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  328.286987][   T13] page dumped because: kasan: bad access detected
[  328.289598][   T13] page_owner tracks the page as allocated
[  328.291872][   T13] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6768, tgid 6767 (syz.3.291), ts 106187201516, free_ts 88396605261
[  328.299317][   T13]  post_alloc_hook+0x240/0x2a0
[  328.301292][   T13]  get_page_from_freelist+0x21e4/0x22c0
[  328.303554][   T13]  __alloc_frozen_pages_noprof+0x181/0x370
[  328.305852][   T13]  alloc_pages_mpol+0x232/0x4a0
[  328.307896][   T13]  allocate_slab+0x8a/0x370
[  328.309750][   T13]  ___slab_alloc+0xbeb/0x1420
[  328.311666][   T13]  kmem_cache_alloc_noprof+0x283/0x3c0
[  328.313827][   T13]  xfrm_state_alloc+0x24/0x2f0
[  328.315734][   T13]  __find_acq_core+0x8a7/0x1c00
[  328.317711][   T13]  xfrm_find_acq+0x78/0xa0
[  328.319447][   T13]  xfrm_alloc_userspi+0x6b3/0xc90
[  328.321439][   T13]  xfrm_user_rcv_msg+0x7a3/0xab0
[  328.323395][   T13]  netlink_rcv_skb+0x208/0x470
[  328.325234][   T13]  xfrm_netlink_rcv+0x79/0x90
[  328.327241][   T13]  netlink_unicast+0x82f/0x9e0
[  328.329152][   T13]  netlink_sendmsg+0x805/0xb30
[  328.331061][   T13] page last free pid 5927 tgid 5927 stack trace:
[  328.333531][   T13]  __free_frozen_pages+0xbc4/0xd30
[  328.335542][   T13]  vfree+0x25a/0x400
[  328.337142][   T13]  delayed_vfree_work+0x55/0x80
[  328.339064][   T13]  process_scheduled_works+0xae1/0x17b0
[  328.341242][   T13]  worker_thread+0x8a0/0xda0
[  328.343069][   T13]  kthread+0x711/0x8a0
[  328.344645][   T13]  ret_from_fork+0x439/0x7d0
[  328.346551][   T13]  ret_from_fork_asm+0x1a/0x30
[  328.348541][   T13] 
[  328.349536][   T13] Memory state around the buggy address:
[  328.351722][   T13]  ffff888028eb3500: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  328.354930][   T13]  ffff888028eb3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  328.358147][   T13] >ffff888028eb3600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  328.361402][   T13]                                   ^
[  328.363571][   T13]  ffff888028eb3680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  328.366681][   T13]  ffff888028eb3700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  328.369915][   T13] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  328.373233][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  328.375773][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  328.378584][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  328.382260][   T13] Workqueue: netns cleanup_net
[  328.383868][   T13] Call Trace:
[  328.385107][   T13]  <TASK>
[  328.386167][   T13]  dump_stack_lvl+0x99/0x250
[  328.387680][   T13]  ? __asan_memcpy+0x40/0x70
[  328.389174][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.390847][   T13]  ? __pfx__printk+0x10/0x10
[  328.392402][   T13]  vpanic+0x281/0x750
[  328.393673][   T13]  ? __pfx_print_hex_dump+0x10/0x10
[  328.395315][   T13]  ? __pfx_vpanic+0x10/0x10
[  328.396838][   T13]  ? irqentry_exit+0x74/0x90
[  328.398315][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.399904][   T13]  panic+0xb9/0xc0
[  328.401093][   T13]  ? __pfx_panic+0x10/0x10
[  328.402708][   T13]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  328.404656][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  328.406890][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  328.408885][   T13]  check_panic_on_warn+0x89/0xb0
[  328.410738][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  328.412616][   T13]  end_report+0x78/0x160
[  328.414058][   T13]  kasan_report+0x129/0x150
[  328.415645][   T13]  ? __xfrm_state_delete+0x666/0xca0
[  328.417615][   T13]  __xfrm_state_delete+0x666/0xca0
[  328.419634][   T13]  xfrm_state_flush+0x45f/0x770
[  328.421341][   T13]  xfrm6_tunnel_net_exit+0x3c/0x100
[  328.423142][   T13]  ops_undo_list+0x49a/0x990
[  328.424669][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  328.426457][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  328.428052][   T13]  cleanup_net+0x4c5/0x800
[  328.429445][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  328.431145][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.433211][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  328.435479][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  328.437763][   T13]  process_scheduled_works+0xae1/0x17b0
[  328.440048][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  328.442461][   T13]  worker_thread+0x8a0/0xda0
[  328.444396][   T13]  kthread+0x711/0x8a0
[  328.446040][   T13]  ? __pfx_worker_thread+0x10/0x10
[  328.448073][   T13]  ? __pfx_kthread+0x10/0x10
[  328.449884][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.451961][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.454138][   T13]  ? __pfx_kthread+0x10/0x10
[  328.456033][   T13]  ret_from_fork+0x439/0x7d0
[  328.457933][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  328.460095][   T13]  ? __switch_to_asm+0x39/0x70
[  328.462047][   T13]  ? __switch_to_asm+0x33/0x70
[  328.463998][   T13]  ? __pfx_kthread+0x10/0x10
[  328.465920][   T13]  ret_from_fork_asm+0x1a/0x30
[  328.467879][   T13]  </TASK>
[  328.469807][   T13] Kernel Offset: disabled
[  328.471579][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:03:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107090
R8 =ffff88801f438237 R9 =1ffff11003e87046 R10=dffffc0000000000 R11=ffffffff855018c0
R12=dffffc0000000000 R13=ffffffff99b0390e R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550193c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3441eff8 CR3=0000000108104000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=306974765f367069 00306974765f7069
XMM02=3065726736706900 306c6e7436706900 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 ff00000000000000 XMM05=0000000000000000 00007f85ace12e53
XMM06=0000000000000000 00007f85ace12e4d XMM07=0000000000000000 00007f85ace12e61
XMM08=0000000000000000 00007f85ace12ee7 XMM09=0000000000000000 00007f85ace12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82206b7a RBX=ffffc90002fd7b80 RCX=0000000000000000 RDX=ffff888026ba1cc0
RSI=0000000000000001 RDI=00000000ffffffff RBP=0000000000000001 RSP=ffffc90002fd7ad0
R8 =ffffea0004514987 R9 =1ffffd40008a2930 R10=dffffc0000000000 R11=fffff940008a2931
R12=ffff88810e53a480 R13=0000000000000000 R14=ffff888026ba31a8 R15=0000000000000000
RIP=ffffffff81bfc5d7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555585939500 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8776d08718 CR3=000000010b720000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff000000ff0000 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000ff0000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=0000555585958e5e 0000555585958bb0
XMM06=000055558594d764 000055558594d760 XMM07=0010000fc0030010 000fb00302b4e210
XMM08=0102800404a58c08 0001000004080606 XMM09=5f2e656369766564 5f72657473696765
XMM10=6666666666666666 0a38332e79656b5f XMM11=6c5f63666e206220 3032643631306139
XMM12=2062203032326131 3061396666666666 XMM13=695f646165685f65 756575715f626b73
XMM14=6666666666660a79 656b5f5f2e74696e XMM15=5f61782062203034 3261313061396666
