last executing test programs:

2m52.535100396s ago: executing program 2 (id=163):
r0 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x86, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x14}}], 0x38}, 0x0)

2m52.403416804s ago: executing program 2 (id=165):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018010000756c6c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb7020000080000000400000000000000850000007600000095"], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x10082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89f6, &(0x7f0000000900)={'wlan0\x00', @random})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x2, 0x40}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32=r4, @ANYBLOB="0000e0ffff"], 0x48)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33)
r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x100242, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000000)=0x8ce)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xb, 0x0, &(0x7f00000006c0)="00000000000000c88526fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x14, &(0x7f0000000040), 0x3b)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
setsockopt$sock_attach_bpf(r9, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r10 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r10, 0x0, 0x0)

2m52.156462479s ago: executing program 2 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x200c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x2006, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1fe8, 0x2, 0x0, 0x1, [@nested={0x1fe4, 0x115, 0x0, 0x1, [@nested={0x1fdd, 0x10e, 0x0, 0x1, [@typed={0xc, 0x115, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x1}, @nested={0x1119, 0xe2, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @fd=r0}, @generic="acf44b554d9b4946631486311e7cf55903dc4342ecc48c6e536faf0b233b86386dab4aba9b6c2722b464136d272253011e629a65890de367b9be618e046aa004d3335ec0858487ffdb92", @generic="4c2d861129f1728ae2b70961013a62b71d72e8788ee9886f32fb227d6e06a595141687f1d405213c1f149a2d2c4e0b83d1be08d95a240150429ed96e8618b7aab279dfb101e343fc95", @generic="dbbfd1d0e04335f9c7f5da8093ee588dab2553115d88160f1220d84eb55b51ad8cdeb863a459e0fba04a31b1fffafd1806a8a8e770a1cd5ea6e381ce3134c477af74718ea659c7be463902a7da720d3a23f847e1c268ee1c3fd593b7fbc35936e758363348d4c8702afb99147d04e391e8", @typed={0xc, 0xdf, 0x0, 0x0, @u64=0xec9}, @generic="d681c3553c368e0e106a37b6e9405f057a2da2b74b0e69f7310c8ae482e4c71350251776cf813bf077a9fec5d3b8c15b0fbc82c73b7a6201421ab3470e70e210468113c89a63b77c4bf59deadb0a07ce652501ed54aa6453debd948cead8ae219f89e2e965ed7c44e3c5472726dd912eb88b3467f8c071936f5ffc012570fa363150c134f726bf320f080c6b1486820a361442db1bf1b29226a318f9f1a72c5006040504b9cb7cadda6958e5df52f82984a5dd645fb19a6db067f07f137abb49192095410e06dba935f73f8f5fecea18a646ae261b994ab7c49551e90f9bdef6eb2968dacaaef18ed3d98a816e67137900beeb272c556221c5266f349339e802330e0dfcd50b3cd0b7cff7f69ae40970e71633532a3815226808ce49b9f6bda1a1f5483c431730760b84718673bf5f1c9e90701f16966dc44400a416451e65b5a665091e1082de76887338303c6774bf54896dd75509b6262c5618d9701477b31820c16e15775fc9674ce4b7dfecf610bb0512f0cccda63aa571cab2c72bb0c58c7811b9eef89b03d175a9492fab812327a3daa4eb0188c06c72bf2addfcff10f4bf8474d63e6f2198cc382c0f799801562741241853f9a9fce5ec29a3e72b534e86f61f02392020866812a3f9f32bbd2d5d1c2b29f178b76807c720d394e6b10e80c642157327f6dd17a7ae7225abf016c4781d351b5b7d6c8b3c2edb4f63b3c4316fea22296d68ca6e0ee0d660988fe6b4dd3e309a83ec44285d9d5062a350a9e9be0ec53872381bafea91b1a813fc7634ac43ff9d4d18ce42b8b95b3c308a1738a5ee24f9285668130e70b42d3522863a59f3c02c42c9deba300ff3cf564b4017deaa0ee417c791630c0119cf1af2e0bbd80d7d7e6f91d6f230669ca6ff4736d27be17108bd1de4a3379e6a8886bf810f3f4d3350fadd1e85bdb7b911bbc7a53b6c7407a37dd3b5095c9b34e5cb6435f6acd91f3b924edf2d582305bd9a388a3810a7129497dc6f440c12063515e3df82edeedf74cd8f8083693713f32a5d0def921352e82388bf7572dba7559f1dc6505be234c8064e99f51098559e76b1f51cc931e8b1c936e7c5711c80d378e759a196cf9bbc971ed0bbed225a92aab1af7bf6ec450c43b9e384b8bc8a3b7a49965810d9a810f036ce6c99f92d8f9eff26df0e77f1f02b20f258c326216eb63048035fd143861bee7dd847a2aa9d2f693193372efefdfdf999d5b0caf4fd403d61746a09e2240780d060adc6f8d671bbe728f71c24aef57a164779a426fcc29ed7a7f29278dfcd011e88ba7cbdcf3e2c248b2e50cf12c7825156b6fa1e2dd010501313c17dbecaa929cde3ccafac98e485f765c1507f04f99bc3e5380ffbce563d9d29dd74b8cf3c4e39f6d43eb7faa25cf03bdce77b779e0429cc98e295175200e7937d15daa990fa7f9f4fd8a66693dc4bc53220a4e99e1ad2221f11ee9fccd93741e284e15bc61bd3ef1503ac27c76d4fc19809bcdd1e86e25fe715864fd70fcba61fddbec3abc0aaa48c5170ec89ca5c9b264dcf06ce4e751b0b1fd880b5c39efc43934d6e98ab2e879e7584227a62b8ed81fbb1efe65c8bb91e02422d151e0ed268c982e94121f773012c974dea271f822f42545d2230baf15f6e0bd3e7f0946bf7b971c6c3bcce01d4e05786dad77c95178ca13635152df96ea9f3f2c4677e7fee7c11dca63c8166a9c9757811272fbd21a595865b0d36cffc9cca9e789f5d04e240c010daebcb2a81de0f420429b87e9be532d6b3e085d8615cc4767cb29c3e6f2de1599524c1e186aa9e5dbd8d6d5c9a2192ae5e9a561ad434a40a9b8a8825e56db2f2c8cc73f527dcac262a05eade53761bbeca0b28e6f54b199006495b3da10cd64b5da1ef1972da3fe35cc6a2dff8080147822033864be2f08db3da263ecfee531e9fc45e0e70a9958a76d18ccfe5f55c83555e1d4b0872ee6c7b1cf887893e93cfbfa24aad14b0adf4dc9114fb18740c3bccc6dab4fd3ca7e1e44238f92a40328b2b8ec9b41eef0d0bf9c6ff0b5de7e591b81c80f523439688cedd374ed99ea88fb30e5ccfa40cd85c23589fad7eeb790b757bed4c5aa70ab2da859139a045ad1557bbbafcc7d30d8686a197792890353a26226570517ea1ad1aac1b4af77ab334f43c9a0195319bf19b08e0ec0d82f563abecdabbffb47aaeaed0a02fd959eb3cd82c7d23ca80cd889092ef4a756472ac8e8cb1ab0523aa0263c72ec7530b46580c0401fd24ad45bbedf78537251c84754f876e88fc07f291e4435920f4d3b1914101c0835ff1488469ffa0585f73d7f23871e77e1f5f496263ad126e53c750239f294d324eb599b5dacade9190451bb255a20131c39aff8404a83734d9d738b8fb776a66056e2930ab41dd5e46fa4601d9a1a9d4d3f76fc3ce97c3439eaa567e3de7a41e6aa86511ea87cbb94a8a8d8eec3fc77bd2e739ee7a322b077600d4bb2d6deeee79f2f5f4dafa08c17cf5a3cf4611ac196bd3a6f5761a0d8e339a57f9f7f5243951a8047c85974133d798b1e949213609ab892360591a87ce691f5e9ba02d528385752d8bd5dd8ec2d56fe046490efc79bf941f4627ee97d28a35754d9859b7338a1566af2b1c45c9ad85e2fa3892dc6359e924c26e8935f46406761a991168f5329b64b01f529ff4418781102c981c94b803fce30ef22485c61266a0beac670e5acb8573674d8c66e56f851b2ec80f437d6845a0ff35087f9d6790795445bb740c037e5c4ba687303dda1fbbd92ffeb648f5fbdc0bd180ad4c9a18e6c538af1a7e6981e6955b67a939fb2eacdc5a32ad915914e02ee30e54f7de5a4d3136eddb2b7fdb167f8f2d447b823ba1810721ec2a20d3d93612f33201ae80ce5d0fc5cb0879dea0bc76256a76182b101578ea477ce730d359bce61bd17f2864f7a6f1db1583e546b8f8c705bae22bd4168d79ad2b8f27081167172e0782853702040ac34dcd1aa5e7be68c063c0709c6ffdca08b12bc3805b47673d4461bad637d2937294f4dabfcb4e754376596a210673cd68a9ad491380bf81794e2cc4593ca9bbe714858b8d76fe3c9aea38bef42c6f576d3205cee93a9615df712cc7921f30c534f0c3243298856d2d9c22dce001c2ceb87cff95639fa5c67c04ee6c61bd99b25da8907a65dcab2adf21238c5158acb6ce79c8cbe593a8cabb708a1ecdd6298d81622a0fefab0c749f9a1290b0ef3268b0762b04e0beb7c3061cb43b3719ec6e275a53517f1a14703a2d48b05a6f07e499c2783cad3880b9c415cd9769f7ba9655f0e2f91b5a247530a65e0d14a4be21c3c24f726079e4ff3d068f9e5841057bf29f2084020219289323ab51cb48ae1e7697f4c291c0f44d9b5abab9689193371bb1b5a748179d7a3ed5f54a03f86ddb3ffbb85434da521ddf63d5f40a4e59f753ddd7391ff00f8156e82e730d6839237a7b34cbb27b0ed1c7d06085574ee4a2e18298b5f905805fc3655327ff24fb931f1d148592bcce7ad133123c76f269b80153e1afb4b53f9a070386ff98f9d92d6a60a57488580031f0f287c44afdbfbb119aff3c3333200eb02af6a54d95e66c0ae9a8cb0f25b38b12072b8ce4f6aba774b4f587508646e701e13b6f146617a3b71d56305d509bc2bcd4452e75921e226302435fd2099f29f2bf437973c32a6727ae05c327fe69796c0f00ac3f4b919a4d429e66f1efa6297bc04130206063f1a61372fabb14f64c2a42a479afda0e7a26ef76947f07e55ec3b486cbcfe07cdbb403e2880104feb94bbdfe5a41a9e948f1c2e0ff0d2ca158d7c28ea90b98c80622e305df4b87083d89d86d66751273fc704796dab271e3ce348740fcf55418ed540d451911406cbda4241f2a5ed2b86d2813f8d451e03111f12b9d3443e9bfd262ae9df4307336b9e934c7df3c42b4c042efec33eb87949a1b29b07cf1b9552ced1768e876c948ff80ddf288c47d5a1a5dce0edb639492e12834e30c8da7c4642373495827f54dc2ecf04d9c2cad18744b4897bb0c087b7ae3e06097862149ed9c2bce29f27ad35a9a7cde104f9d51acca52bef46e337309147fa0b09b72b3421179477e24a8b3ac462ffb78490cce8a4bf965f115cf85307972f2fee9b6bea83d9f2c23ccffc0a974904befc38977d1cb96fcfde326792f5faacb13fe00caac0b40354178f22cdf5e6660e7ea1013bba5436707e164b09c61342938af2430e994650a279aa7be7f29ef41a98e898c349e09b58d30afbbaa939a6e2222ccadf768e1682daea3fe1175c620a8829ce112b039e8bde53ff58ca217a7d54775662f3c77bb9faef9585c6a7bae07cbd55c37af86cc62edf7290c65d404f2adbf1079387153a097310e64153a715afef75fc5b70422fd0d679055c572efe69605db83d5f1bc20130d396b6c6ba4aa9546dc5a889b67015c1389848590212ba5350a5b96721dcd1922bf8510400b84a6471928f6060197056a90b48e829e10de61b085a8a12ac242b0914105bea1689108d921ab80feff2d6c29b369b70abfb3edf19f80d05924fb4ca0e53e60570a5e909b18efa9a626311f1ca89fa09780474e01bace183d221cd8b0dadf05aed913bd9e57d90af9892f80068233afba10890a6440378092b7912f68076892f4b0cc0b159eba49e076594ffcd5d3046f2c404ba204f5b5183344ed7d7e650f7d1de7bb72d677d2516e1092c88ce3ab78a35ce3c2b045f49fdda35ab5cd3184fe62c4662d398d3145a481c943ff90b26fb443bec9c27455f95271442179898d522b294bc61d73c124a8a7a8a755941de79664ea73ca71f183decaa51209617819e6a800506729a44d8161ab03e7baf44c992c6bab3c9b3f5e288d522c7ca4dc1fcabdf7d5fbcd3f5c36cbbd2b752265562789daf5754d79aaf17a01c6c33047c75a5d049abbf13ec5c8586e55b465de11f37c12d2ac913627cbcfe4cb63d79b18e18d16d84cb4340a53f2a108294dd204978fd266dbf6062ec689f0297a127f9f7d9a01dc30d6337e75dd0a5ec7b133a5f3b197b820dfef8a5969862f5b3c33eb5a3c540648475dbdfa97f48adeb38f482c4118a4063b81faeb15cf11f17c2454062de81861bafa82d08d5e054968a0a7202f725e961af65ef4487fdab8c5b05bf15025d17afb5d12de9266d1c39131639aa18f7a02942e60d3a2ff0412d14325b26bc12122503e5371d6f3b178dd656ac7a5b97a89d97d44e5b26f0f18222b4e4b908c316341be3d6c901da8f2ee94c2b5d0997aaaed8a5f7043042998e0c710eb6e66357e10b47b060403854c5351726d906860302e0f0bdeea17f465f47063b73a953ac9b292cd2d355f995ae576abf7423d9b80eedef74d0384e30de8ee3a959f68f3115cf5055b32b2a393311c3f526b8ca05c01305879c27df09c27093d03844cafa7c98616bb78862ecffbd3b432a83e0ed560857fd9d248cf69e461685ceae06f7e11350b296c1b5145a03635de1192294fe14db213fff5656ddb5c50742c441118dffb6db8434555adbc35dd9b3df329c730139056cc0fe536d30f4e4b551366f2d5e69c70656a8ce8be49e782962e726616ef1cf6cb8bc1e2fddbc82f2dd3f207ba1e22c6aef66f9fcb91df92095a4ea5b83a11aeb1b197318040c0eb0097b6ed6b12320619eb59beb5c85d75d5e130a76f949345ab170de7c46d371b6de0cf8ad47c906c8aeeffae59400a8f23e6d2d60910bb5b8062dc3e36044169ef183969c04b15c20a2ef905733e16c37095dd418b06e7805df975d3daf8779d570548919ac6f8"]}, @nested={0x4, 0xb1}, @generic="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"]}]}]}]}, 0x200c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

2m51.995752394s ago: executing program 2 (id=171):
syz_clone(0x6000c600, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)="ad914cede5b9cf")

2m51.456777586s ago: executing program 2 (id=176):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000000)={&(0x7f0000000080), 0x6e, 0x0, 0x0, 0x0, 0x1d}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x4c00, 0x0}, 0x0)

2m51.051374903s ago: executing program 2 (id=181):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

2m50.820798868s ago: executing program 32 (id=181):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

2m48.722255839s ago: executing program 1 (id=201):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800034000000000080001400000000005000200000000000800064000000002080004400000000008000540000019000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)

2m48.642814336s ago: executing program 1 (id=203):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x6, &(0x7f0000000740)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044441)

2m48.562766344s ago: executing program 1 (id=204):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000027c0000040042800c0001800600060086"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

2m48.467744883s ago: executing program 1 (id=207):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m48.382420044s ago: executing program 1 (id=208):
socketpair(0xa, 0x4, 0x80000001, &(0x7f0000000080))

2m47.643244107s ago: executing program 1 (id=209):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xfc}]}]}, 0x16c}}, 0x0)

2m47.642962394s ago: executing program 3 (id=182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0)

2m47.434613837s ago: executing program 33 (id=209):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xfc}]}]}, 0x16c}}, 0x0)

2m47.38309345s ago: executing program 34 (id=182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0)

1.391032368s ago: executing program 5 (id=2108):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x23, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ef, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x39ff, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)='@', 0x1}, {0x0}, {0x0}], 0x3}, 0x80)

1.281261747s ago: executing program 0 (id=2109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.188422014s ago: executing program 0 (id=2110):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
close(r1)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r4 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4)

1.186148957s ago: executing program 5 (id=2111):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.124469253s ago: executing program 5 (id=2112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000711029000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.123983467s ago: executing program 5 (id=2113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x24000000)

1.059158618s ago: executing program 5 (id=2115):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)

739.486301ms ago: executing program 5 (id=2117):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="111100000002"})
close(0x3)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020500030a0000002dbd7000fcdbdf25030006000000000002004e23ac1414bb0000000000000000020001000000000008803f02010000a0030005003200000002004e23450101010000000000000000"], 0x50}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

480.401992ms ago: executing program 4 (id=2120):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

479.747214ms ago: executing program 0 (id=2121):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0x7, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5}, 0x94)
write$cgroup_subtree(r1, 0x0, 0xfe33)
socket$kcm(0x10, 0x2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x45)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20008804)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)

270.070353ms ago: executing program 4 (id=2122):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x162b3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

269.536513ms ago: executing program 4 (id=2123):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x3, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x3, 0x0, 0x2, 0xffffffffffffffff}, {0x7ff, 0x9ff, 0x6, 0x800000004000000}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x200400c5}, 0x0)
close(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0xffca}, 0x164)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef)

208.684218ms ago: executing program 4 (id=2124):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1180015000600149b000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

201.990861ms ago: executing program 0 (id=2125):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)

121.133894ms ago: executing program 4 (id=2126):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

120.706108ms ago: executing program 0 (id=2127):
socket$kcm(0x28, 0x5, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80)

4.186594ms ago: executing program 4 (id=2128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x30, 0x3e, 0xd07, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x15}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)

0s ago: executing program 0 (id=2129):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020035000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49875' (ED25519) to the list of known hosts.
syzkaller login: [   56.356171][ T5821] cgroup: Unknown subsys name 'net'
[   56.465925][ T5821] cgroup: Unknown subsys name 'cpuset'
[   56.480676][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.282001][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.359043][ T5859] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.229579][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.240475][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.299709][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.305809][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.309213][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.313509][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.322113][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.337789][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.369781][ T5885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.373679][ T5885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.377681][ T5885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.381429][ T5885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.477971][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.486165][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.489533][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.493865][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.497075][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.724485][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   71.774419][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   71.913641][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.917327][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.920826][ T5879] bridge_slave_0: entered allmulticast mode
[   71.924786][ T5879] bridge_slave_0: entered promiscuous mode
[   71.946661][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.949480][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.954233][ T5881] bridge_slave_0: entered allmulticast mode
[   71.958537][ T5881] bridge_slave_0: entered promiscuous mode
[   71.963290][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.966161][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.969001][ T5881] bridge_slave_1: entered allmulticast mode
[   71.973797][ T5881] bridge_slave_1: entered promiscuous mode
[   71.977823][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.980310][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.983290][ T5879] bridge_slave_1: entered allmulticast mode
[   71.986182][ T5879] bridge_slave_1: entered promiscuous mode
[   72.036712][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.056952][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.077279][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.096474][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.103146][ T5879] team0: Port device team_slave_0 added
[   72.106233][ T5886] chnl_net:caif_netlink_parms(): no params data found
[   72.128821][ T5879] team0: Port device team_slave_1 added
[   72.184229][ T5881] team0: Port device team_slave_0 added
[   72.199714][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.202505][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.214510][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.221001][ T5881] team0: Port device team_slave_1 added
[   72.223875][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.226493][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.239406][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.288026][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.290114][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.299311][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.304370][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.306943][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.315376][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.381133][ T5879] hsr_slave_0: entered promiscuous mode
[   72.384046][ T5879] hsr_slave_1: entered promiscuous mode
[   72.398776][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.402762][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.405549][ T5886] bridge_slave_0: entered allmulticast mode
[   72.409140][ T5886] bridge_slave_0: entered promiscuous mode
[   72.429293][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.432739][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.435542][ T5886] bridge_slave_1: entered allmulticast mode
[   72.439242][ T5886] bridge_slave_1: entered promiscuous mode
[   72.496495][ T5881] hsr_slave_0: entered promiscuous mode
[   72.499526][ T5881] hsr_slave_1: entered promiscuous mode
[   72.503194][ T5881] debugfs: 'hsr0' already exists in 'hsr'
[   72.505434][ T5881] Cannot create hsr debugfs directory
[   72.548233][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.559740][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.628516][ T5886] team0: Port device team_slave_0 added
[   72.637299][ T5886] team0: Port device team_slave_1 added
[   72.702765][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.704922][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.714618][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.729235][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.731943][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.739997][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.829719][ T5886] hsr_slave_0: entered promiscuous mode
[   72.834277][ T5886] hsr_slave_1: entered promiscuous mode
[   72.836953][ T5886] debugfs: 'hsr0' already exists in 'hsr'
[   72.839166][ T5886] Cannot create hsr debugfs directory
[   72.914785][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.924519][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.953916][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.967881][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.026003][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.034666][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.049950][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.057761][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.142935][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.162441][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.169645][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.178754][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.292406][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.327689][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   73.338320][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.348045][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.351199][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.374145][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.376753][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.381817][ T5237] Bluetooth: hci0: command tx timeout
[   73.393700][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.407771][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   73.429041][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.431384][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.447628][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   73.461588][ T5237] Bluetooth: hci1: command tx timeout
[   73.466282][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.469030][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.487555][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.490481][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.516800][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.519526][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.541898][ T5237] Bluetooth: hci2: command tx timeout
[   73.765710][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.818961][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.843095][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.863300][ T5879] veth0_vlan: entered promiscuous mode
[   73.883795][ T5879] veth1_vlan: entered promiscuous mode
[   73.936027][ T5881] veth0_vlan: entered promiscuous mode
[   73.949365][ T5886] veth0_vlan: entered promiscuous mode
[   73.964869][ T5881] veth1_vlan: entered promiscuous mode
[   73.972535][ T5879] veth0_macvtap: entered promiscuous mode
[   73.977655][ T5886] veth1_vlan: entered promiscuous mode
[   73.986037][ T5879] veth1_macvtap: entered promiscuous mode
[   74.032144][ T5881] veth0_macvtap: entered promiscuous mode
[   74.036362][ T5886] veth0_macvtap: entered promiscuous mode
[   74.041138][ T5881] veth1_macvtap: entered promiscuous mode
[   74.046219][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.053193][ T5886] veth1_macvtap: entered promiscuous mode
[   74.065758][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.085881][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.089353][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.095785][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.103332][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.107619][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.124220][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.132556][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.145011][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.153669][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.174233][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.184507][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.187835][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.211128][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.237346][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.242203][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.245837][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.335634][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.339060][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.401884][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.406435][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.422125][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.425453][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.456095][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.458416][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.486220][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.496618][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.554697][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.565485][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.577764][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.868883][ T5954] netlink: 'syz.0.17': attribute type 3 has an invalid length.
[   75.472414][ T5237] Bluetooth: hci0: command tx timeout
[   75.541590][ T5237] Bluetooth: hci1: command tx timeout
[   75.620831][ T5237] Bluetooth: hci2: command tx timeout
[   75.984898][ T5998] Zero length message leads to an empty skb
[   76.005138][    C0] hrtimer: interrupt took 66063 ns
[   76.054856][ T6000] netlink: 'syz.0.40': attribute type 21 has an invalid length.
[   76.080094][ T6002] netlink: 830 bytes leftover after parsing attributes in process `syz.1.39'.
[   76.366225][ T5237] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   76.366259][ T5237] Bluetooth: unknown link type 110
[   76.371844][ T5237] Bluetooth: hci0: connection err: -111
[   76.479833][ T6013] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.46'.
[   76.488466][ T6013] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.46'.
[   76.618795][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'.
[   76.624587][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   76.856345][ T6026] : renamed from wg2 (while UP)
[   76.915709][ T6032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.046544][ T6040] netlink: 'syz.2.59': attribute type 13 has an invalid length.
[   77.982979][ T5237] Bluetooth: hci0: command tx timeout
[   78.048522][ T5237] Bluetooth: hci1: command tx timeout
[   78.051483][ T5237] Bluetooth: hci2: command tx timeout
[   78.257060][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'.
[   78.325665][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.424070][ T6068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.224151][ T6124] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET)
[   79.252585][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   79.320627][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   80.089482][ T5885] Bluetooth: hci0: command tx timeout
[   80.101433][ T5885] Bluetooth: hci2: command tx timeout
[   80.103817][ T5237] Bluetooth: hci1: command tx timeout
[   80.139011][ T6149] netlink: 'syz.2.107': attribute type 13 has an invalid length.
[   80.863969][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.867195][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.969717][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.977617][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.095059][ T6165] Driver unsupported XDP return value 0 on prog  (id 41) dev N/A, expect packet loss!
[   81.250852][ T6156] netlink: 'syz.1.109': attribute type 10 has an invalid length.
[   81.255166][ T5892] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.270443][ T5892] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.274060][ T5892] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.277927][ T5892] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.674432][ T6184] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.122'.
[   81.723849][ T6184] warning: `syz.2.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.151537][ T6204] netlink: 'syz.0.131': attribute type 13 has an invalid length.
[   82.154754][ T6204] netlink: 'syz.0.131': attribute type 17 has an invalid length.
[   82.168864][ T6206] netlink: 'syz.1.132': attribute type 17 has an invalid length.
[   82.172915][ T6206] netlink: 'syz.1.132': attribute type 16 has an invalid length.
[   82.176334][ T6206] netlink: 152 bytes leftover after parsing attributes in process `syz.1.132'.
[   82.223628][ T6204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.162940][ T6222] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   83.399748][ T6234] delete_channel: no stack
[   83.413616][ T6234] delete_channel: no stack
[   83.788863][ T6246] netlink: 'syz.1.150': attribute type 10 has an invalid length.
[   83.812270][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.824517][ T6246] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   83.906596][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz.2.156'.
[   83.913456][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz.2.156'.
[   83.917693][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz.2.156'.
[   86.590695][    T9] cfg80211: failed to load regulatory.db
[   86.691115][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1040452939 wd_nsec: 1040438142
[   91.304890][ T6278] netlink: 68 bytes leftover after parsing attributes in process `syz.1.164'.
[   91.343277][ T6280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.165'.
[   91.424298][ T6283] netlink: 'syz.1.164': attribute type 10 has an invalid length.
[   91.504712][ T6288] netlink: 'syz.2.168': attribute type 2 has an invalid length.
[   91.509954][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[   91.728087][ T6288] : entered promiscuous mode
[   92.136201][ T6305] wlan1 speed is unknown, defaulting to 1000
[   92.149719][ T6305] wlan1 speed is unknown, defaulting to 1000
[   92.154776][ T6305] wlan1 speed is unknown, defaulting to 1000
[   92.164937][ T6305] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   92.178213][ T6305] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   92.224915][ T6305] wlan1 speed is unknown, defaulting to 1000
[   92.231738][ T6305] wlan1 speed is unknown, defaulting to 1000
[   92.234859][ T6305] wlan1 speed is unknown, defaulting to 1000
[   92.237521][ T6305] wlan1 speed is unknown, defaulting to 1000
[   92.498056][ T6314] netlink: 200 bytes leftover after parsing attributes in process `syz.1.178'.
[   92.624107][ T6314] wlan1 speed is unknown, defaulting to 1000
[   93.104179][ T6330] nftables ruleset with unbound set
[   93.112515][ T6332] netlink: 'syz.0.186': attribute type 2 has an invalid length.
[   93.126362][ T6332] netlink: 'syz.0.186': attribute type 1 has an invalid length.
[   93.129084][ T6332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.186'.
[   93.172109][ T6332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'.
[   93.180014][ T6332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'.
[   93.184400][ T6332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'.
[   93.198315][   T12] bridge_slave_1: left allmulticast mode
[   93.200943][   T12] bridge_slave_1: left promiscuous mode
[   93.204289][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.227050][   T12] bridge_slave_0: left allmulticast mode
[   93.229174][   T12] bridge_slave_0: left promiscuous mode
[   93.232603][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.349784][ T5885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.354259][ T5885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.358419][ T5885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.363513][ T5885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.368404][ T5885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.158180][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.164127][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.168934][   T12] bond0 (unregistering): Released all slaves
[   94.253871][   T12] : left promiscuous mode
[   94.296342][ T6341] wlan1 speed is unknown, defaulting to 1000
[   94.556740][ T6341] chnl_net:caif_netlink_parms(): no params data found
[   94.734568][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.736764][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.739536][ T6341] bridge_slave_0: entered allmulticast mode
[   94.760262][ T6341] bridge_slave_0: entered promiscuous mode
[   94.764927][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.767419][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.770231][ T6341] bridge_slave_1: entered allmulticast mode
[   94.774968][ T6341] bridge_slave_1: entered promiscuous mode
[   94.848299][   T12] hsr_slave_0: left promiscuous mode
[   94.881035][   T12] hsr_slave_1: left promiscuous mode
[   94.884077][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.897700][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.188727][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'.
[   95.216846][ T6405] openvswitch: netlink: Flow key attr not present in new flow.
[   95.470556][ T5885] Bluetooth: hci2: command tx timeout
[   95.504015][   T12] team0 (unregistering): Port device team_slave_1 removed
[   95.535795][   T12] team0 (unregistering): Port device team_slave_0 removed
[   96.392497][   T12] bridge_slave_1: left allmulticast mode
[   96.394797][   T12] bridge_slave_1: left promiscuous mode
[   96.397160][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.441237][   T12] bridge_slave_0: left allmulticast mode
[   96.451597][   T12] bridge_slave_0: left promiscuous mode
[   96.453348][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.476675][ T5885] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[   96.614723][   T12] bond0 (unregistering): Released all slaves
[   96.736880][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.745229][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.748905][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.749723][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.760291][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.770934][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.774418][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.778180][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.782348][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.786681][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.867751][ T6426] wlan1 speed is unknown, defaulting to 1000
[   97.064950][ T6430] wlan1 speed is unknown, defaulting to 1000
[   97.378529][ T6426] chnl_net:caif_netlink_parms(): no params data found
[   97.449331][ T6430] chnl_net:caif_netlink_parms(): no params data found
[   97.526734][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.529336][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.532792][ T6426] bridge_slave_0: entered allmulticast mode
[   97.535716][ T6426] bridge_slave_0: entered promiscuous mode
[   97.576011][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.578700][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.582358][ T6426] bridge_slave_1: entered allmulticast mode
[   97.585262][ T6426] bridge_slave_1: entered promiscuous mode
[   97.610918][ T6452] netlink: 'syz.0.221': attribute type 10 has an invalid length.
[   97.614334][ T6452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.221'.
[   97.626050][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.632367][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.682037][ T6452] team0: entered promiscuous mode
[   97.684368][ T6452] team_slave_0: entered promiscuous mode
[   97.688653][ T6452] team_slave_1: entered promiscuous mode
[   97.695657][ T6452] team0: entered allmulticast mode
[   97.698208][ T6452] team_slave_0: entered allmulticast mode
[   97.703505][ T6452] team_slave_1: entered allmulticast mode
[   97.720489][ T6452] bridge0: port 3(team0) entered blocking state
[   97.724351][ T6452] bridge0: port 3(team0) entered disabled state
[   97.763399][ T6452] bridge0: port 3(team0) entered blocking state
[   97.767038][ T6452] bridge0: port 3(team0) entered forwarding state
[   97.782444][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.784775][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.787058][ T6430] bridge_slave_0: entered allmulticast mode
[   97.790033][ T6430] bridge_slave_0: entered promiscuous mode
[   97.794391][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.797243][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.800131][ T6430] bridge_slave_1: entered allmulticast mode
[   97.804780][ T6430] bridge_slave_1: entered promiscuous mode
[   97.809694][ T6426] team0: Port device team_slave_0 added
[   97.846051][ T6426] team0: Port device team_slave_1 added
[   97.887318][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.915922][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.924337][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.927184][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.941586][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.974933][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.977541][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.988476][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.034285][ T6430] team0: Port device team_slave_0 added
[   98.039019][ T6430] team0: Port device team_slave_1 added
[   98.052133][ T6465] =======================================================
[   98.052133][ T6465] WARNING: The mand mount option has been deprecated and
[   98.052133][ T6465]          and is ignored by this kernel. Remove the mand
[   98.052133][ T6465]          option from the mount to silence this warning.
[   98.052133][ T6465] =======================================================
[   98.129781][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.132600][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.145333][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.156530][ T6426] hsr_slave_0: entered promiscuous mode
[   98.159556][ T6426] hsr_slave_1: entered promiscuous mode
[   98.165689][ T6426] debugfs: 'hsr0' already exists in 'hsr'
[   98.168046][ T6426] Cannot create hsr debugfs directory
[   98.173988][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.176452][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.191256][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.296707][ T6430] hsr_slave_0: entered promiscuous mode
[   98.299823][ T6430] hsr_slave_1: entered promiscuous mode
[   98.304075][ T6430] debugfs: 'hsr0' already exists in 'hsr'
[   98.306420][ T6430] Cannot create hsr debugfs directory
[   98.578403][ T6426] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   98.587988][ T6426] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   98.616000][ T6426] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   98.637755][ T6426] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   98.676659][ T6430] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   98.684236][ T6430] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   98.693407][ T6430] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   98.703914][ T6430] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   98.805493][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.808945][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.813038][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.816446][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.819556][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.823429][   T54] Bluetooth: hci2: command tx timeout
[   98.825949][ T5885] Bluetooth: hci1: command tx timeout
[   98.843953][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.879667][ T6430] 8021q: adding VLAN 0 to HW filter on device team0
[   98.895988][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.912158][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.915126][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.928852][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.931877][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.936854][ T6479] wlan1 speed is unknown, defaulting to 1000
[   98.963099][ T6426] 8021q: adding VLAN 0 to HW filter on device team0
[   98.989233][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.991607][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.997646][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.000611][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.192781][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.212179][ T6479] chnl_net:caif_netlink_parms(): no params data found
[   99.367952][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.373507][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.376557][ T6479] bridge_slave_0: entered allmulticast mode
[   99.382552][ T6479] bridge_slave_0: entered promiscuous mode
[   99.391902][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.394850][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.402999][ T6479] bridge_slave_1: entered allmulticast mode
[   99.407146][ T6479] bridge_slave_1: entered promiscuous mode
[   99.453513][ T6479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.465382][ T6479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.504159][ T6479] team0: Port device team_slave_0 added
[   99.509018][ T6479] team0: Port device team_slave_1 added
[   99.559186][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.565995][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.568735][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.579425][ T6479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.594732][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.597629][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.609011][ T6479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.635866][ T6430] veth0_vlan: entered promiscuous mode
[   99.681854][ T6430] veth1_vlan: entered promiscuous mode
[   99.709335][ T6479] hsr_slave_0: entered promiscuous mode
[   99.715197][ T6479] hsr_slave_1: entered promiscuous mode
[   99.718134][ T6479] debugfs: 'hsr0' already exists in 'hsr'
[   99.723347][ T6479] Cannot create hsr debugfs directory
[   99.803046][ T6430] veth0_macvtap: entered promiscuous mode
[   99.831159][ T6430] veth1_macvtap: entered promiscuous mode
[   99.867140][ T6426] veth0_vlan: entered promiscuous mode
[   99.894317][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.907784][ T6426] veth1_vlan: entered promiscuous mode
[   99.917130][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.951553][ T5892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.966552][ T5892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.969956][ T5892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.997736][ T6479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.018572][ T5892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.048109][ T6426] veth0_macvtap: entered promiscuous mode
[  100.093448][ T6479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.104218][ T6426] veth1_macvtap: entered promiscuous mode
[  100.135528][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.143938][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.148074][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.149475][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.176874][ T6479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.210899][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.227610][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.235553][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.239100][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.254344][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.258750][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.283189][ T6479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.455783][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.458875][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.498960][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.504016][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.520150][ T6479] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  100.528994][ T6479] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  100.553161][ T6479] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  100.579086][ T6479] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  100.715461][   T54] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  100.768599][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.803594][ T6479] 8021q: adding VLAN 0 to HW filter on device team0
[  100.815582][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.818143][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.849929][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.852683][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.906183][   T54] Bluetooth: hci0: command tx timeout
[  100.908812][   T54] Bluetooth: hci2: command tx timeout
[  100.911409][   T54] Bluetooth: hci1: command tx timeout
[  101.045721][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.235'.
[  101.097406][ T6479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.126574][ T6479] veth0_vlan: entered promiscuous mode
[  101.135760][ T6479] veth1_vlan: entered promiscuous mode
[  101.207250][ T6479] veth0_macvtap: entered promiscuous mode
[  101.216306][ T6479] veth1_macvtap: entered promiscuous mode
[  101.252058][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.276564][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.289472][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.314807][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.318589][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.339397][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.385953][ T6542] netlink: 830 bytes leftover after parsing attributes in process `syz.4.238'.
[  101.424245][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.429558][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.488033][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.493445][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.608217][ T6549] netlink: 104 bytes leftover after parsing attributes in process `syz.0.241'.
[  101.858898][ T6557] netlink: 'syz.0.244': attribute type 29 has an invalid length.
[  101.906652][ T6560] netlink: 'syz.0.244': attribute type 29 has an invalid length.
[  102.051493][ T6564] netlink: 'syz.0.244': attribute type 29 has an invalid length.
[  102.094219][ T6560] netlink: 'syz.0.244': attribute type 29 has an invalid length.
[  102.159450][ T6572] netlink: 'syz.5.250': attribute type 23 has an invalid length.
[  102.163487][ T6572] netlink: 'syz.5.250': attribute type 6 has an invalid length.
[  102.596230][ T6592] netlink: 10 bytes leftover after parsing attributes in process `syz.0.259'.
[  102.734433][ T6596] netlink: 'syz.0.261': attribute type 23 has an invalid length.
[  102.980848][ T5237] Bluetooth: hci1: command tx timeout
[  102.983124][ T5237] Bluetooth: hci2: command tx timeout
[  102.985296][ T5237] Bluetooth: hci0: command tx timeout
[  103.393220][ T6611] netlink: 'syz.5.268': attribute type 21 has an invalid length.
[  103.396133][ T6611] netlink: 156 bytes leftover after parsing attributes in process `syz.5.268'.
[  103.679250][ T6619] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.272'.
[  104.115053][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.273'.
[  104.151855][ T6624] netlink: 56 bytes leftover after parsing attributes in process `syz.5.273'.
[  105.060672][ T5237] Bluetooth: hci0: command tx timeout
[  105.062678][ T5883] Bluetooth: hci2: command tx timeout
[  105.064465][   T54] Bluetooth: hci1: command tx timeout
[  107.140877][ T5237] Bluetooth: hci0: command tx timeout
[  108.520345][ T6689] netlink: 1018 bytes leftover after parsing attributes in process `syz.4.300'.
[  109.468511][ T6426] cgroup: fork rejected by pids controller in /syz5
[  109.628292][ T6711] netlink: 'syz.0.310': attribute type 25 has an invalid length.
[  109.638134][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.308'.
[  109.748940][ T6714] netlink: 'syz.0.311': attribute type 21 has an invalid length.
[  109.883865][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.884159][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'.
[  109.986135][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.068011][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.163505][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.449071][   T13] bridge_slave_1: left allmulticast mode
[  110.451759][   T13] bridge_slave_1: left promiscuous mode
[  110.454872][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.513311][   T13] bridge_slave_0: left allmulticast mode
[  110.515631][   T13] bridge_slave_0: left promiscuous mode
[  110.517963][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.539108][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.547867][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.555166][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.559888][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.564759][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.024998][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.030325][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.034835][   T13] bond0 (unregistering): Released all slaves
[  111.073758][ T6737] wlan1 speed is unknown, defaulting to 1000
[  111.255819][ T6757] netlink: 201660 bytes leftover after parsing attributes in process `syz.4.329'.
[  111.348029][   T13] hsr_slave_0: left promiscuous mode
[  111.353883][   T13] hsr_slave_1: left promiscuous mode
[  111.357085][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.363273][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.368159][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.373346][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.396555][   T13] veth1_macvtap: left promiscuous mode
[  111.400060][   T13] veth0_macvtap: left promiscuous mode
[  111.402785][   T13] veth1_vlan: left promiscuous mode
[  111.405033][   T13] veth0_vlan: left promiscuous mode
[  111.885563][   T13] team0 (unregistering): Port device team_slave_1 removed
[  111.932785][   T13] team0 (unregistering): Port device team_slave_0 removed
[  112.671500][ T5237] Bluetooth: hci1: command tx timeout
[  112.764653][ T6737] chnl_net:caif_netlink_parms(): no params data found
[  112.778589][ T6772] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.336'.
[  112.945314][ T6782] netlink: 'syz.0.338': attribute type 39 has an invalid length.
[  112.962594][ T6782] veth0_macvtap: left promiscuous mode
[  113.034969][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.038091][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.041535][ T6737] bridge_slave_0: entered allmulticast mode
[  113.045620][ T6737] bridge_slave_0: entered promiscuous mode
[  113.053072][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.056072][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.059080][ T6737] bridge_slave_1: entered allmulticast mode
[  113.064698][ T6737] bridge_slave_1: entered promiscuous mode
[  113.118867][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.138642][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.325043][ T6737] team0: Port device team_slave_0 added
[  113.327853][ T6794] netlink: 152 bytes leftover after parsing attributes in process `syz.0.342'.
[  113.332231][ T6794] tc_dump_action: action bad kind
[  113.336858][ T6737] team0: Port device team_slave_1 added
[  113.390764][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.393572][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.408002][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.414216][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.416925][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.428969][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.467395][ T6798] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.344'.
[  113.554978][ T6737] hsr_slave_0: entered promiscuous mode
[  113.558248][ T6737] hsr_slave_1: entered promiscuous mode
[  113.566889][ T6737] debugfs: 'hsr0' already exists in 'hsr'
[  113.570524][ T6737] Cannot create hsr debugfs directory
[  113.747010][ T6804] netlink: 72 bytes leftover after parsing attributes in process `syz.0.347'.
[  113.787177][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.929451][ T6804] netlink: 72 bytes leftover after parsing attributes in process `syz.0.347'.
[  114.488422][ T6804] netlink: 72 bytes leftover after parsing attributes in process `syz.0.347'.
[  114.625941][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'.
[  114.660088][ T6737] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.696916][ T6737] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  114.712383][ T6737] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  114.723277][ T6737] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  114.742662][ T5237] Bluetooth: hci1: command tx timeout
[  114.826003][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.855788][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'.
[  114.882498][ T6737] 8021q: adding VLAN 0 to HW filter on device team0
[  114.887871][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.890194][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.906401][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.909258][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.153775][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.386238][ T6737] veth0_vlan: entered promiscuous mode
[  115.401429][ T6737] veth1_vlan: entered promiscuous mode
[  115.439371][ T6737] veth0_macvtap: entered promiscuous mode
[  115.459390][ T6737] veth1_macvtap: entered promiscuous mode
[  115.487752][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.507105][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.517114][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.524763][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.527434][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.530011][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.659953][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.668645][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.738609][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.744234][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.945820][ T5237] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  116.088370][ T6874] netlink: zone id is out of range
[  116.102018][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'.
[  116.118566][ T6874] netlink: zone id is out of range
[  116.178699][ T6881] netlink: del zone limit has 4 unknown bytes
[  116.195336][ T6874] netlink: set zone limit has 4 unknown bytes
[  116.362209][ T6885] : renamed from team_slave_1 (while UP)
[  116.820660][ T5237] Bluetooth: hci1: command tx timeout
[  117.400012][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.375'.
[  117.607690][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.5.378'.
[  117.626466][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.378'.
[  117.629999][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.5.378'.
[  117.750934][ T6905] netlink: 'syz.4.381': attribute type 21 has an invalid length.
[  117.754236][ T6905] IPv6: NLM_F_CREATE should be specified when creating new route
[  119.040598][ T5237] Bluetooth: hci1: command tx timeout
[  119.437439][ T6929] __nla_validate_parse: 1 callbacks suppressed
[  119.437456][ T6929] netlink: 324 bytes leftover after parsing attributes in process `syz.5.391'.
[  120.151594][ T6943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.156533][ T6943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.780130][ T6970] netlink: 'syz.5.410': attribute type 29 has an invalid length.
[  120.849269][ T6970] netlink: 'syz.5.410': attribute type 29 has an invalid length.
[  122.103003][ T5883] Bluetooth: hci0: command 0x0406 tx timeout
[  122.122711][ T6992] netlink: 'syz.4.417': attribute type 32 has an invalid length.
[  122.414648][ T7004] C: renamed from team_slave_0 (while UP)
[  122.419064][ T7004] netlink: 'syz.5.422': attribute type 3 has an invalid length.
[  122.424966][ T7004] netlink: 'syz.5.422': attribute type 1 has an invalid length.
[  122.430046][ T7004] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  122.843194][ T7016] syzkaller0: entered promiscuous mode
[  122.845553][ T7016] syzkaller0: entered allmulticast mode
[  123.332468][ T7036] netlink: 64 bytes leftover after parsing attributes in process `syz.5.437'.
[  124.794794][ T7063] netlink: 'syz.4.450': attribute type 3 has an invalid length.
[  124.797932][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'.
[  125.074324][ T7074] netlink: 'syz.4.455': attribute type 1 has an invalid length.
[  125.077449][ T7074] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.455'.
[  125.266128][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'.
[  125.475863][ T7097] nftables ruleset with unbound chain
[  125.595879][ T7101] netlink: 64 bytes leftover after parsing attributes in process `syz.4.467'.
[  127.557659][ T7162] netlink: 'syz.4.492': attribute type 2 has an invalid length.
[  127.561464][ T7162] netlink: 51 bytes leftover after parsing attributes in process `syz.4.492'.
[  127.657901][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.494'.
[  127.661527][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.494'.
[  127.666816][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.494'.
[  129.447514][ T7191] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  129.497494][ T7193] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  129.625203][ T7203] netlink: 104 bytes leftover after parsing attributes in process `syz.4.509'.
[  130.254095][ T7236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.523'.
[  130.257856][ T7236] unsupported nlmsg_type 40
[  130.461137][ T7247] sctp: [Deprecated]: syz.0.527 (pid 7247) Use of int in maxseg socket option.
[  130.461137][ T7247] Use struct sctp_assoc_value instead
[  131.565581][ T7293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.550'.
[  131.755324][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.559'.
[  131.756780][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'.
[  131.869897][ T7323] netlink: 60 bytes leftover after parsing attributes in process `syz.4.564'.
[  132.668702][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.671732][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.377148][   T33] audit: type=1107 audit(1757979373.421:2): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  144.340600][ T7362] netlink: 14 bytes leftover after parsing attributes in process `syz.4.579'.
[  144.456124][ T7368] netlink: 'syz.0.582': attribute type 12 has an invalid length.
[  144.459413][ T7368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.582'.
[  144.715267][ T7386] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.590'.
[  145.050023][ T7400] siw: device registration error -23
[  145.123285][ T7410] netlink: 6 bytes leftover after parsing attributes in process `syz.0.602'.
[  145.357793][ T7422] xt_time: invalid argument - start or stop time greater than 23:59:59
[  145.464038][ T7429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.611'.
[  145.504026][ T7431] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  145.895466][ T7446] netlink: 'syz.0.618': attribute type 21 has an invalid length.
[  145.897910][ T7446] netlink: 168 bytes leftover after parsing attributes in process `syz.0.618'.
[  145.916486][ T7454] netlink: 200 bytes leftover after parsing attributes in process `syz.5.621'.
[  146.039214][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.623'.
[  146.187158][ T7463] netlink: 182 bytes leftover after parsing attributes in process `syz.5.625'.
[  146.200051][ T7463] netlink: 14 bytes leftover after parsing attributes in process `syz.5.625'.
[  146.209300][ T7463] netlink: 'syz.5.625': attribute type 10 has an invalid length.
[  146.557041][ T7463] veth0_vlan: left promiscuous mode
[  146.575758][ T7463] veth0_vlan: entered promiscuous mode
[  146.630035][ T7463] team0: Device veth0_vlan failed to register rx_handler
[  146.737543][ T7463] syz.5.625 (7463) used greatest stack depth: 16784 bytes left
[  146.913737][ T7482] netlink: 'syz.0.632': attribute type 1 has an invalid length.
[  147.119640][ T7499] netlink: 'syz.0.640': attribute type 3 has an invalid length.
[  149.957753][ T7519] netlink: 'syz.5.646': attribute type 11 has an invalid length.
[  149.961195][ T7519] __nla_validate_parse: 4 callbacks suppressed
[  149.961208][ T7519] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.646'.
[  149.968099][ T7518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.988410][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'.
[  150.083962][ T7530] netlink: 184 bytes leftover after parsing attributes in process `syz.0.650'.
[  150.240185][ T7539] netlink: 7 bytes leftover after parsing attributes in process `syz.4.655'.
[  150.252756][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'.
[  150.287354][ T7541] netlink: 'syz.5.656': attribute type 6 has an invalid length.
[  150.291321][ T7541] netlink: 164 bytes leftover after parsing attributes in process `syz.5.656'.
[  150.525874][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.858757][ T7571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.670'.
[  151.118537][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.668'.
[  152.293773][ T7604] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.683'.
[  152.345680][ T7606] netlink: 'syz.5.684': attribute type 10 has an invalid length.
[  153.017389][ T7618] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.688'.
[  153.256780][ T7627] wlan1 speed is unknown, defaulting to 1000
[  153.437174][ T7639] pim6reg1: entered allmulticast mode
[  154.079747][ T7659] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.100663][ T7659] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.294570][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.297313][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.305120][ T7674] bridge0: entered allmulticast mode
[  154.379897][ T7674] bridge_slave_1: left allmulticast mode
[  154.399661][ T7674] bridge_slave_1: left promiscuous mode
[  154.445624][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.595656][ T7674] bridge_slave_0: left allmulticast mode
[  154.599703][ T7674] bridge_slave_0: left promiscuous mode
[  154.610422][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.189263][ T7702] __nla_validate_parse: 2 callbacks suppressed
[  155.189274][ T7702] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.721'.
[  155.759709][ T7730] netlink: 'syz.5.734': attribute type 27 has an invalid length.
[  155.762811][ T7730] netlink: 152 bytes leftover after parsing attributes in process `syz.5.734'.
[  155.782357][ T7730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  155.940019][ T7746] netlink: 'syz.4.742': attribute type 10 has an invalid length.
[  155.947010][ T7746] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  156.006664][ T7749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.743'.
[  156.211096][ T7749] hsr_slave_0: left promiscuous mode
[  156.229032][ T7749] hsr_slave_1: left promiscuous mode
[  156.535654][ T7768] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.752'.
[  156.539391][ T7768] netlink: zone id is out of range
[  156.554664][ T7768] netlink: zone id is out of range
[  156.556849][ T7768] netlink: get zone limit has 8 unknown bytes
[  156.841067][ T7775] netlink: 763 bytes leftover after parsing attributes in process `syz.4.755'.
[  157.108341][ T7796] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  157.111987][ T7796] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  162.716808][ T7816] netlink: 'syz.4.773': attribute type 12 has an invalid length.
[  162.719966][ T7816] netlink: 132 bytes leftover after parsing attributes in process `syz.4.773'.
[  162.841687][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'.
[  163.007709][ T7820] netlink: 'syz.5.775': attribute type 10 has an invalid length.
[  163.429303][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'.
[  163.828744][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'.
[  163.922017][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  163.924891][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'.
[  163.933998][ T7876] netlink: 33 bytes leftover after parsing attributes in process `syz.0.801'.
[  163.939377][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'.
[  163.952633][ T7876] netlink: 33 bytes leftover after parsing attributes in process `syz.0.801'.
[  164.159689][ T7902] netlink: 'syz.4.814': attribute type 10 has an invalid length.
[  164.172844][ T7902] bond0: (slave bond_slave_0): Releasing backup interface
[  164.795431][ T7933] netlink: 348 bytes leftover after parsing attributes in process `syz.0.828'.
[  165.395722][ T7951] netlink: 'syz.4.836': attribute type 10 has an invalid length.
[  165.407897][ T7951] 8021q: adding VLAN 0 to HW filter on device team0
[  165.416877][ T7951] bond0: (slave team0): Enslaving as an active interface with an up link
[  165.524583][ T7954] netlink: 'syz.4.837': attribute type 1 has an invalid length.
[  168.317263][ T7978] syzkaller0: entered promiscuous mode
[  168.319551][ T7978] syzkaller0: entered allmulticast mode
[  169.717331][ T8005] __nla_validate_parse: 6 callbacks suppressed
[  169.717347][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'.
[  169.807416][ T8009] netlink: 'syz.4.862': attribute type 37 has an invalid length.
[  169.897125][ T8011] netlink: 763 bytes leftover after parsing attributes in process `syz.4.863'.
[  170.203428][ T8021] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.868'.
[  170.603562][ T8031] netlink: 160 bytes leftover after parsing attributes in process `syz.4.873'.
[  170.646203][ T8031] netlink: 'syz.4.873': attribute type 10 has an invalid length.
[  170.762607][ T8031] batman_adv: batadv0: Adding interface: netdevsim0
[  170.765600][ T8031] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.779770][ T8031] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  170.838010][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'.
[  171.066849][ T8058] netlink: 68 bytes leftover after parsing attributes in process `syz.5.879'.
[  171.164085][ T8062] netlink: 'syz.0.884': attribute type 39 has an invalid length.
[  172.378923][ T8077] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.891'.
[  172.567383][ T8088] netlink: 13 bytes leftover after parsing attributes in process `syz.5.894'.
[  172.714790][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.897'.
[  173.027735][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'.
[  173.603807][ T8130] netlink: 'syz.0.913': attribute type 10 has an invalid length.
[  173.782544][ T8130] team0 (unregistering): Port device team_slave_0 removed
[  173.794419][ T8130] team0 (unregistering): Port device 26 removed
[  174.457119][ T8153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.856475][ T8210] __nla_validate_parse: 3 callbacks suppressed
[  175.856539][ T8210] netlink: 830 bytes leftover after parsing attributes in process `syz.4.942'.
[  176.100308][ T8224] openvswitch: netlink: Multiple metadata blocks provided
[  176.665750][ T8238] netlink: 830 bytes leftover after parsing attributes in process `syz.4.957'.
[  176.857270][ T8264] netlink: 72 bytes leftover after parsing attributes in process `syz.0.968'.
[  177.286568][ T8280] netlink: 'syz.4.975': attribute type 7 has an invalid length.
[  177.965280][ T8314] IPv6: NLM_F_CREATE should be specified when creating new route
[  177.999583][ T8318] netlink: 277 bytes leftover after parsing attributes in process `syz.0.992'.
[  178.167589][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'.
[  178.194953][ T8325] netlink: 356 bytes leftover after parsing attributes in process `syz.4.994'.
[  178.297630][ T8329] netlink: 'syz.4.995': attribute type 29 has an invalid length.
[  178.302061][ T8329] netlink: 'syz.4.995': attribute type 29 has an invalid length.
[  178.305507][ T8329] netlink: 'syz.4.995': attribute type 29 has an invalid length.
[  178.346648][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'.
[  181.819073][ T8346] netlink: 'syz.4.1003': attribute type 32 has an invalid length.
[  181.823450][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'.
[  181.888962][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'.
[  181.966092][ T8358] netlink: 'syz.4.1009': attribute type 21 has an invalid length.
[  181.969088][ T8358] netlink: 'syz.4.1009': attribute type 15 has an invalid length.
[  181.980250][ T8358] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1009'.
[  181.989113][ T8358] IPv6: NLM_F_CREATE should be specified when creating new route
[  181.997241][ T8358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  182.000204][ T8358] IPv6: NLM_F_CREATE should be set when creating new route
[  182.002955][ T8358] IPv6: NLM_F_CREATE should be set when creating new route
[  182.005861][ T8358] IPv6: NLM_F_CREATE should be set when creating new route
[  182.031574][ T8364] netlink: 'syz.5.1012': attribute type 41 has an invalid length.
[  182.035955][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.118164][ T8372] netlink: 'syz.5.1016': attribute type 2 has an invalid length.
[  183.123991][ T8383] delete_channel: no stack
[  183.733008][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1040'.
[  183.813524][ T8434] netlink: 'syz.5.1042': attribute type 8 has an invalid length.
[  183.816546][ T8434] netlink: 'syz.5.1042': attribute type 6 has an invalid length.
[  183.819459][ T8434] netlink: 144448 bytes leftover after parsing attributes in process `syz.5.1042'.
[  183.887892][ T8436] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  183.888671][ T8436] netlink: 'syz.5.1043': attribute type 10 has an invalid length.
[  183.897354][ T8436] veth0_vlan: left promiscuous mode
[  183.899563][ T8436] veth0_vlan: entered promiscuous mode
[  183.904344][ T8436] team0: Device veth0_vlan failed to register rx_handler
[  184.118500][ T8445] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1047'.
[  184.164893][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'.
[  184.272666][ T8457] netlink: 'syz.0.1053': attribute type 22 has an invalid length.
[  184.328947][ T8461] sit0: entered allmulticast mode
[  184.347208][ T8461] sit0: entered promiscuous mode
[  184.939546][ T5237] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  185.218952][ T8474] netlink: 'syz.4.1060': attribute type 1 has an invalid length.
[  185.362865][ T5237] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  185.363536][ T5237] Bluetooth: hci0: unexpected event for opcode 0x1004
[  185.486655][ T8474] netlink: 'syz.4.1060': attribute type 2 has an invalid length.
[  185.620160][ T8487] netlink: 'syz.0.1064': attribute type 21 has an invalid length.
[  186.299663][ T8520] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1078'.
[  186.980760][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  187.965650][ T8577] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1103'.
[  187.968831][ T8577] bond_slave_0: entered promiscuous mode
[  187.971283][ T8577] bond_slave_1: entered promiscuous mode
[  188.088323][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'.
[  188.607109][ T8610] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  189.395329][ T5883] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  189.399720][ T5883] Bluetooth: hci0: Injecting HCI hardware error event
[  189.403944][ T5237] Bluetooth: hci0: hardware error 0x00
[  189.484832][ T8623] netlink: 'syz.5.1122': attribute type 29 has an invalid length.
[  189.488170][ T8623] netlink: 'syz.5.1122': attribute type 29 has an invalid length.
[  189.493566][ T8623] netlink: 'syz.5.1122': attribute type 29 has an invalid length.
[  192.420753][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.686544][ T8642] netlink: 'syz.5.1132': attribute type 2 has an invalid length.
[  193.688995][ T8642] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1132'.
[  194.018329][ T8670] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1143'.
[  194.107635][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.110295][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.136331][   T12] bridge0: port 3(team0) entered disabled state
[  194.153565][   T12] bridge_slave_1: left allmulticast mode
[  194.155288][   T12] bridge_slave_1: left promiscuous mode
[  194.157096][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.166169][   T12] bridge_slave_0: left allmulticast mode
[  194.171518][   T12] bridge_slave_0: left promiscuous mode
[  194.174038][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.279419][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.285129][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.289630][   T12] bond0 (unregistering): Released all slaves
[  195.526567][ T8692] netlink: 'syz.0.1152': attribute type 10 has an invalid length.
[  195.560120][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1152'.
[  195.580887][ T8692] batadv0: entered promiscuous mode
[  195.582821][ T8692] batadv0: entered allmulticast mode
[  195.625629][ T8692] bridge0: port 3(batadv0) entered blocking state
[  195.630301][ T8692] bridge0: port 3(batadv0) entered disabled state
[  195.666301][ T8692] bridge0: port 3(batadv0) entered blocking state
[  195.671116][ T8692] bridge0: port 3(batadv0) entered forwarding state
[  195.849346][ T5892] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  195.854160][ T5892] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  196.073025][   T12] hsr_slave_0: left promiscuous mode
[  196.076289][   T12] hsr_slave_1: left promiscuous mode
[  196.079451][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.082457][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.085311][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.087902][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.120093][   T12] veth1_macvtap: left promiscuous mode
[  196.124982][   T12] veth0_macvtap: left promiscuous mode
[  196.126824][   T12] veth1_vlan: left promiscuous mode
[  196.128491][   T12] veth0_vlan: left promiscuous mode
[  196.867271][   T12] team_slave_1 (unregistering): left promiscuous mode
[  196.869576][   T12] team_slave_1 (unregistering): left allmulticast mode
[  196.873233][   T12] team0 (unregistering): Port device team_slave_1 removed
[  196.903855][   T12] team_slave_0 (unregistering): left promiscuous mode
[  196.906190][   T12] team_slave_0 (unregistering): left allmulticast mode
[  196.909081][   T12] team0 (unregistering): Port device team_slave_0 removed
[  197.267015][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1170'.
[  197.278942][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1170'.
[  197.282303][ T8734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1170'.
[  197.366568][ T8740] netlink: 'syz.4.1173': attribute type 2 has an invalid length.
[  197.369712][ T8740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1173'.
[  199.360678][ T8797] netlink: 'syz.4.1198': attribute type 3 has an invalid length.
[  199.364400][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'.
[  199.368540][ T8797] netlink: 'syz.4.1198': attribute type 3 has an invalid length.
[  199.375147][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'.
[  199.378815][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'.
[  199.637788][ T8809] netlink: 'syz.5.1203': attribute type 31 has an invalid length.
[  199.903278][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'.
[  199.906850][ T8822] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1209'.
[  200.117940][ T8837] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1214'.
[  200.441736][ T8859] netlink: 'syz.0.1226': attribute type 19 has an invalid length.
[  200.735658][ T8869] tc_dump_action: action bad kind
[  200.848878][ T8875] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1233'.
[  201.344877][ T8894] netlink: 'syz.0.1241': attribute type 3 has an invalid length.
[  201.347885][ T8894] netlink: 'syz.0.1241': attribute type 1 has an invalid length.
[  201.350805][ T8894] netlink: 191264 bytes leftover after parsing attributes in process `syz.0.1241'.
[  201.844999][ T8907] netlink: 'syz.5.1248': attribute type 21 has an invalid length.
[  201.847780][ T8907] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1248'.
[  202.110999][ T8907] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1248'.
[  202.153210][ T8909] netlink: 'syz.5.1249': attribute type 4 has an invalid length.
[  202.163220][ T8909] bond_slave_0: left promiscuous mode
[  202.165004][ T8909] bond_slave_1: left promiscuous mode
[  202.168281][ T8909] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  202.496138][ T8929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.478545][ T8960] netlink: 'syz.5.1271': attribute type 21 has an invalid length.
[  203.865461][ T8978] netlink: 'syz.0.1279': attribute type 21 has an invalid length.
[  204.247281][ T5237] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  204.467339][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.602185][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.717349][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.829903][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.083598][   T12] bridge_slave_1: left allmulticast mode
[  205.097345][   T12] bridge_slave_1: left promiscuous mode
[  205.099512][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.142371][   T12] bridge_slave_0: left allmulticast mode
[  205.144307][   T12] bridge_slave_0: left promiscuous mode
[  205.151419][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.299357][ T9054] __nla_validate_parse: 4 callbacks suppressed
[  205.299368][ T9054] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1312'.
[  205.566907][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.574324][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.579951][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  205.585464][   T12] bond0 (unregistering): Released all slaves
[  205.594118][ T9054] netlink: 'syz.0.1312': attribute type 3 has an invalid length.
[  205.597414][ T9056] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1310'.
[  205.670513][ T9058] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1310'.
[  207.573750][  T973] wlan1 speed is unknown, defaulting to 1000
[  207.576088][  T973] infiniband syz0: ib_query_port failed (-19)
[  207.785146][   T12] hsr_slave_0: left promiscuous mode
[  207.799677][   T12] hsr_slave_1: left promiscuous mode
[  207.806089][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.813317][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.820184][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.825855][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.836133][   T12] veth1_macvtap: left promiscuous mode
[  207.837894][   T12] veth0_macvtap: left promiscuous mode
[  207.839697][   T12] veth1_vlan: left promiscuous mode
[  207.844392][   T12] veth0_vlan: left promiscuous mode
[  208.468854][   T12] team0 (unregistering): Port device team_slave_1 removed
[  208.524454][   T12] team0 (unregistering): Port device team_slave_0 removed
[  209.107751][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'.
[  209.372093][ T9143] netlink: 'syz.4.1348': attribute type 1 has an invalid length.
[  209.394086][ T9146] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1349'.
[  209.916365][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'.
[  211.064092][ T9195] netlink: 'syz.4.1372': attribute type 21 has an invalid length.
[  211.323318][ T9202] netlink: 'syz.5.1375': attribute type 1 has an invalid length.
[  211.326597][ T9202] netlink: 'syz.5.1375': attribute type 3 has an invalid length.
[  211.329848][ T9202] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1375'.
[  212.039775][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'.
[  212.306440][ T9249] vcan0 speed is unknown, defaulting to 1000
[  212.345213][ T9249] vcan0 speed is unknown, defaulting to 1000
[  212.358287][ T9249] vcan0 speed is unknown, defaulting to 1000
[  212.457658][ T9255] netlink: 'syz.0.1400': attribute type 2 has an invalid length.
[  212.572712][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'.
[  212.575369][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'.
[  213.288493][ T9249] infiniband syz1: set active
[  213.291915][ T5913] vcan0 speed is unknown, defaulting to 1000
[  213.295078][ T9249] infiniband syz1: added vcan0
[  213.322477][ T9249] RDS/IB: syz1: added
[  213.325081][ T9249] smc: adding ib device syz1 with port count 1
[  213.327828][ T9249] smc:    ib device syz1 port 1 has pnetid 
[  213.333418][ T5913] vcan0 speed is unknown, defaulting to 1000
[  213.337992][ T9249] vcan0 speed is unknown, defaulting to 1000
[  213.567417][ T9249] vcan0 speed is unknown, defaulting to 1000
[  213.809614][ T9249] vcan0 speed is unknown, defaulting to 1000
[  213.963678][ T9308] netlink: 'syz.4.1416': attribute type 1 has an invalid length.
[  214.292279][ T9321] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1421'.
[  214.326013][ T9328] xt_policy: too many policy elements
[  214.396457][ T9333] netlink: 'syz.5.1427': attribute type 21 has an invalid length.
[  214.900054][ T9338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.985514][ T9345] netlink: 'syz.4.1432': attribute type 10 has an invalid length.
[  214.989125][ T9345] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1432'.
[  215.197036][ T9358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.209531][ T9360] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1439'.
[  215.764971][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'.
[  216.368576][ T9410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.595167][ T9425] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1468'.
[  216.648634][ T9431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1470'.
[  216.657662][ T9430] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1471'.
[  216.723666][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1472'.
[  217.088982][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1487'.
[  217.094742][ T9467] netlink: 'syz.4.1488': attribute type 2 has an invalid length.
[  217.097740][ T9467] netlink: 'syz.4.1488': attribute type 1 has an invalid length.
[  217.105456][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1488'.
[  217.222878][ T9475] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1490'.
[  217.347091][ T9480] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1486'.
[  218.137849][ T9493] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  218.141131][ T9493] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  218.795166][ T9508] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1502'.
[  219.420753][ T9535] netlink: 'syz.4.1511': attribute type 21 has an invalid length.
[  219.584222][ T9544] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  219.587603][ T9544] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.677607][ T9551] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1518'.
[  220.343878][ T9567] netlink: 'syz.0.1525': attribute type 1 has an invalid length.
[  220.528096][ T9581] openvswitch: netlink: Missing key (keys=40, expected=100)
[  220.620221][ T9584] netlink: 'syz.5.1533': attribute type 2 has an invalid length.
[  220.623475][ T9584] netlink: 'syz.5.1533': attribute type 8 has an invalid length.
[  220.934401][ T9601] netlink: 'syz.0.1540': attribute type 1 has an invalid length.
[  220.937823][ T9601] netlink: 'syz.0.1540': attribute type 2 has an invalid length.
[  221.326788][ T9615] netlink: 'syz.0.1546': attribute type 29 has an invalid length.
[  221.770323][ T9643] __nla_validate_parse: 5 callbacks suppressed
[  221.779854][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'.
[  221.784678][ T5883] Bluetooth: hci2: command 0x0406 tx timeout
[  221.828761][ T9649] netlink: 'syz.0.1563': attribute type 21 has an invalid length.
[  221.836946][ T9649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1563'.
[  221.888521][ T9651] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1561'.
[  221.893755][ T9645] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1561'.
[  221.898042][ T9651] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1561'.
[  222.014643][ T9655] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1565'.
[  222.018128][ T9655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1565'.
[  222.109974][ T9663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1569'.
[  222.268195][ T9677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1576'.
[  222.271504][ T9677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1576'.
[  222.586859][ T9705] netlink: 'syz.0.1589': attribute type 2 has an invalid length.
[  222.639226][ T9707] netlink: 'syz.0.1590': attribute type 19 has an invalid length.
[  224.553106][ T9800] validate_nla: 2 callbacks suppressed
[  224.553158][ T9800] netlink: 'syz.5.1630': attribute type 39 has an invalid length.
[  225.029398][ T5237] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  228.423594][ T9862] openvswitch: netlink: IP tunnel TTL not specified.
[  228.479721][ T9866] tmpfs: Bad value for 'gid'
[  228.487773][ T9866] tmpfs: Bad value for 'gid'
[  228.724012][ T9887] __nla_validate_parse: 6 callbacks suppressed
[  228.724023][ T9887] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1663'.
[  228.729998][ T9887] netlink: zone id is out of range
[  228.733482][ T9887] netlink: zone id is out of range
[  228.735214][ T9887] netlink: zone id is out of range
[  228.736877][ T9887] netlink: zone id is out of range
[  228.738546][ T9887] netlink: zone id is out of range
[  228.740280][ T9887] netlink: zone id is out of range
[  228.743098][ T9887] netlink: zone id is out of range
[  228.745967][ T9887] netlink: zone id is out of range
[  228.747545][ T9887] netlink: zone id is out of range
[  228.881418][ T9894] netlink: 'syz.0.1666': attribute type 3 has an invalid length.
[  228.884314][ T9894] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1666'.
[  228.914736][ T9897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1668'.
[  229.048047][ T9910] netlink: 'syz.0.1673': attribute type 9 has an invalid length.
[  229.245127][ T9927] netlink: 208128 bytes leftover after parsing attributes in process `syz.4.1681'.
[  229.254377][ T9931] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1683'.
[  229.578490][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1693'.
[  229.589006][ T9956] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1693'.
[  229.654600][ T9960] xt_time: invalid argument - start or stop time greater than 23:59:59
[  236.241317][ T9973] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1703'.
[  236.586943][ T9998] netlink: 'syz.0.1715': attribute type 4 has an invalid length.
[  236.589324][ T9998] netlink: 'syz.0.1715': attribute type 2 has an invalid length.
[  236.594624][ T9998] netlink: 199408 bytes leftover after parsing attributes in process `syz.0.1715'.
[  236.692042][T10005] netlink: 'syz.0.1718': attribute type 21 has an invalid length.
[  236.693748][T10006] netlink: 'syz.5.1719': attribute type 1 has an invalid length.
[  236.745010][T10009] sit0: entered allmulticast mode
[  236.750153][T10010] netlink: 'syz.0.1720': attribute type 10 has an invalid length.
[  236.759899][T10009] sit0: entered promiscuous mode
[  237.136839][T10028] tun0: tun_chr_ioctl cmd 1074025675
[  237.138711][T10028] tun0: persist enabled
[  237.143943][T10028] tun0: tun_chr_ioctl cmd 1074025675
[  237.146007][T10028] tun0: persist disabled
[  237.208070][ T5883] Bluetooth: hci1: command 0x0406 tx timeout
[  237.529794][T10039] syzkaller0: entered promiscuous mode
[  237.532146][T10039] syzkaller0: entered allmulticast mode
[  237.778137][T10044] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1735'.
[  237.866312][T10054] netlink: 'syz.5.1739': attribute type 1 has an invalid length.
[  237.951547][T10062] netlink: 'syz.5.1743': attribute type 2 has an invalid length.
[  237.954577][T10062] netlink: 'syz.5.1743': attribute type 8 has an invalid length.
[  237.957567][T10062] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1743'.
[  238.193959][T10081] netlink: 'syz.0.1752': attribute type 4 has an invalid length.
[  238.197506][T10081] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1752'.
[  238.276524][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1754'.
[  238.280095][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'.
[  238.333338][T10088] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  238.338450][T10091] netlink: 'syz.4.1756': attribute type 10 has an invalid length.
[  238.344675][T10091] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1756'.
[  240.998944][T10149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1781'.
[  241.003938][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'.
[  241.217404][T10155] syz.4.1782 (10155) used obsolete PPPIOCDETACH ioctl
[  241.294727][T10157] syz.0.1784: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  241.303034][T10157] CPU: 0 UID: 0 PID: 10157 Comm: syz.0.1784 Not tainted syzkaller #0 PREEMPT(full) 
[  241.303056][T10157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.303068][T10157] Call Trace:
[  241.303076][T10157]  <TASK>
[  241.303085][T10157]  dump_stack_lvl+0x189/0x250
[  241.303132][T10157]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.303155][T10157]  ? __pfx__printk+0x10/0x10
[  241.303183][T10157]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  241.303204][T10157]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  241.303229][T10157]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  241.303256][T10157]  warn_alloc+0x214/0x310
[  241.303276][T10157]  ? stack_depot_save_flags+0x40/0x860
[  241.303317][T10157]  ? __pfx_warn_alloc+0x10/0x10
[  241.303342][T10157]  ? kasan_save_track+0x4f/0x80
[  241.303365][T10157]  ? xskq_create+0x56/0x170
[  241.303380][T10157]  ? xsk_init_queue+0xb0/0x110
[  241.303391][T10157]  ? xsk_setsockopt+0x57b/0x8d0
[  241.303410][T10157]  ? do_sock_setsockopt+0x17c/0x1b0
[  241.303427][T10157]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  241.303443][T10157]  ? do_syscall_64+0xfa/0x3b0
[  241.303459][T10157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.303491][T10157]  __vmalloc_node_range_noprof+0x125/0x12f0
[  241.303574][T10157]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  241.303599][T10157]  ? xskq_create+0x56/0x170
[  241.303622][T10157]  ? __kasan_kmalloc+0x93/0xb0
[  241.303681][T10157]  vmalloc_user_noprof+0xad/0xf0
[  241.303708][T10157]  ? xskq_create+0xbf/0x170
[  241.303728][T10157]  xskq_create+0xbf/0x170
[  241.303754][T10157]  xsk_init_queue+0xb0/0x110
[  241.303778][T10157]  xsk_setsockopt+0x57b/0x8d0
[  241.303809][T10157]  ? __pfx_xsk_setsockopt+0x10/0x10
[  241.303835][T10157]  ? __pfx_aa_sk_perm+0x10/0x10
[  241.303860][T10157]  ? __fget_files+0x2a/0x420
[  241.303873][T10157]  ? aa_sock_opt_perm+0xff/0x1b0
[  241.303898][T10157]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  241.303916][T10157]  ? __pfx_xsk_setsockopt+0x10/0x10
[  241.303945][T10157]  do_sock_setsockopt+0x17c/0x1b0
[  241.303975][T10157]  __x64_sys_setsockopt+0x13f/0x1b0
[  241.304008][T10157]  do_syscall_64+0xfa/0x3b0
[  241.304026][T10157]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.304044][T10157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.304059][T10157]  ? exc_page_fault+0x9f/0xf0
[  241.304082][T10157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.304098][T10157] RIP: 0033:0x7f3ee658eba9
[  241.304117][T10157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.304130][T10157] RSP: 002b:00007f3ee74e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  241.304145][T10157] RAX: ffffffffffffffda RBX: 00007f3ee67d5fa0 RCX: 00007f3ee658eba9
[  241.304156][T10157] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  241.304165][T10157] RBP: 00007f3ee6611e19 R08: 0000000000000004 R09: 0000000000000000
[  241.304175][T10157] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  241.304183][T10157] R13: 00007f3ee67d6038 R14: 00007f3ee67d5fa0 R15: 00007ffdb39b10f8
[  241.304230][T10157]  </TASK>
[  241.304238][T10157] Mem-Info:
[  241.435118][T10157] active_anon:13315 inactive_anon:0 isolated_anon:0
[  241.435118][T10157]  active_file:13762 inactive_file:38322 isolated_file:0
[  241.435118][T10157]  unevictable:1768 dirty:227 writeback:0
[  241.435118][T10157]  slab_reclaimable:10136 slab_unreclaimable:57686
[  241.435118][T10157]  mapped:18075 shmem:2415 pagetables:938
[  241.435118][T10157]  sec_pagetables:0 bounce:0
[  241.435118][T10157]  kernel_misc_reclaimable:0
[  241.435118][T10157]  free:271610 free_pcp:18048 free_cma:0
[  241.457580][T10157] Node 0 active_anon:22700kB inactive_anon:0kB active_file:6888kB inactive_file:50856kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29660kB dirty:896kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4120kB pagetables:1688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.478264][T10157] Node 1 active_anon:30560kB inactive_anon:0kB active_file:48160kB inactive_file:102432kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42640kB dirty:12kB writeback:0kB shmem:4652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7084kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.495414][T10157] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.507080][T10157] lowmem_reserve[]: 0 811 811 811 811
[  241.509315][T10157] Node 0 DMA32 free:381820kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22700kB inactive_anon:0kB active_file:6888kB inactive_file:50856kB unevictable:3536kB writepending:896kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:49052kB local_pcp:16968kB free_cma:0kB
[  241.527776][T10157] lowmem_reserve[]: 0 0 0 0 0
[  241.529604][T10157] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  241.542739][T10157] lowmem_reserve[]: 0 0 854 854 854
[  241.544964][T10157] Node 1 Normal free:230768kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30628kB inactive_anon:0kB active_file:48160kB inactive_file:102432kB unevictable:3536kB writepending:12kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:22560kB local_pcp:16592kB free_cma:0kB
[  241.555132][T10157] lowmem_reserve[]: 0 0 0 0 0
[  241.556595][T10157] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  241.587307][T10145] __nla_validate_parse: 3 callbacks suppressed
[  241.587365][T10145] netlink: 196896 bytes leftover after parsing attributes in process `syz.5.1780'.
[  241.593225][T10157] Node 0 DMA32: 421*4kB (U) 583*8kB (UME) 433*16kB (UME) 501*32kB (UME) 258*64kB (UME) 121*128kB (UME) 54*256kB (UME) 16*512kB (UME) 1*1024kB (E) 1*2048kB (M) 72*4096kB (M) = 381308kB
[  241.599200][T10157] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  241.634078][T10157] Node 1 Normal: 67*4kB (UME) 63*8kB (UE) 3*16kB (UM) 311*32kB (UME) 109*64kB (UME) 100*128kB (UME) 28*256kB (UM) 19*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 43*4096kB (UME) = 230740kB
[  241.640183][T10157] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.656804][T10157] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.659963][T10157] 54499 total pagecache pages
[  241.672184][T10157] 0 pages in swap cache
[  241.673733][T10157] Free swap  = 124996kB
[  241.675157][T10157] Total swap = 124996kB
[  241.676453][T10157] 786301 pages RAM
[  241.677709][T10157] 0 pages HighMem/MovableOnly
[  241.679553][T10157] 241348 pages reserved
[  241.688357][T10157] 0 pages cma reserved
[  241.992822][T10176] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1791'.
[  241.996288][T10176] net_ratelimit: 15 callbacks suppressed
[  241.996320][T10176] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  242.001495][T10176] openvswitch: netlink: Duplicate key (type 0).
[  242.253953][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1797'.
[  242.256842][T10190] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1797'.
[  242.528356][T10208] validate_nla: 4 callbacks suppressed
[  242.528372][T10208] netlink: 'syz.5.1805': attribute type 3 has an invalid length.
[  242.534112][T10208] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1805'.
[  242.634933][T10215] netlink: 'syz.4.1808': attribute type 11 has an invalid length.
[  242.637471][T10215] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1808'.
[  242.658097][T10215] mac80211_hwsim hwsim11 .3c: renamed from wlan1 (while UP)
[  242.821766][T10218] netlink: 'syz.4.1809': attribute type 10 has an invalid length.
[  242.856751][T10218] netdevsim netdevsim4 : renamed from netdevsim0
[  242.900885][T10218] can: request_module (can-proto-0) failed.
[  243.462649][T10236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.632970][T10246] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1822'.
[  244.323310][T10257] netlink: 'syz.4.1828': attribute type 6 has an invalid length.
[  244.325828][T10257] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1828'.
[  244.482353][T10267] blkio.reset_stats is deprecated
[  245.667467][T10288] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1841'.
[  245.681579][T10288] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1841'.
[  245.750180][T10292] netlink: 'syz.0.1842': attribute type 62 has an invalid length.
[  245.985432][   T33] audit: type=1107 audit(1757979486.031:3): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  246.277202][T10320] netlink: get zone limit has 8 unknown bytes
[  246.646072][T10348] __nla_validate_parse: 3 callbacks suppressed
[  246.646083][T10348] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1868'.
[  246.781065][T10358] netlink: 'syz.5.1873': attribute type 21 has an invalid length.
[  246.783930][T10358] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1873'.
[  246.787298][T10358] netlink: 'syz.5.1873': attribute type 3 has an invalid length.
[  246.791577][T10358] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1873'.
[  246.876208][T10361] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1871'.
[  246.879642][T10361] bond_slave_0: entered promiscuous mode
[  246.881865][T10361] bond_slave_1: entered promiscuous mode
[  246.929675][T10361] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1871'.
[  246.961028][T10365] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1876'.
[  247.704269][T10391] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  247.724345][T10391] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  248.197047][T10426] netlink: 'syz.0.1904': attribute type 9 has an invalid length.
[  248.200206][T10426] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1904'.
[  248.442758][T10439] netlink: 15478 bytes leftover after parsing attributes in process `syz.4.1910'.
[  248.663960][T10450] netlink: 'syz.0.1915': attribute type 10 has an invalid length.
[  248.674336][T10450] veth1_vlan: entered allmulticast mode
[  248.704086][T10452] syzkaller0: entered promiscuous mode
[  248.705874][T10452] syzkaller0: entered allmulticast mode
[  248.991361][T10459] netlink: 'syz.4.1918': attribute type 10 has an invalid length.
[  249.176482][T10465] netlink: 'syz.0.1923': attribute type 1 has an invalid length.
[  249.179664][T10465] netlink: 'syz.0.1923': attribute type 2 has an invalid length.
[  249.187426][T10465] netlink: 'syz.0.1923': attribute type 4 has an invalid length.
[  249.200673][T10465] netlink: 'syz.0.1923': attribute type 1 has an invalid length.
[  249.207043][T10465] netlink: 'syz.0.1923': attribute type 2 has an invalid length.
[  249.220133][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'.
[  249.229855][T10465] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.1923'.
[  249.356632][T10480] netlink: 'syz.4.1927': attribute type 1 has an invalid length.
[  249.359789][T10480] netlink: 'syz.4.1927': attribute type 3 has an invalid length.
[  251.369581][T10585] bond0: (slave bond_slave_0): Releasing backup interface
[  252.253693][T10612] __nla_validate_parse: 12 callbacks suppressed
[  252.253710][T10612] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1987'.
[  253.534903][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'.
[  254.360139][T10664] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  254.379952][T10666] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2008'.
[  254.408436][T10669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'.
[  254.412472][T10663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'.
[  254.436556][T10671] _Z`Ԁ@S!: entered promiscuous mode
[  254.906028][T10686] validate_nla: 7 callbacks suppressed
[  254.906072][T10686] netlink: 'syz.4.2017': attribute type 29 has an invalid length.
[  254.956580][T10689] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2019'.
[  255.582095][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.584594][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  257.242917][T10795] sit0: left promiscuous mode
[  258.247284][T10815] bond_slave_1: entered promiscuous mode
[  258.249625][T10815] bond0: entered promiscuous mode
[  258.260895][T10815] bond0: entered allmulticast mode
[  258.265896][T10815] bond_slave_1: entered allmulticast mode
[  258.272842][T10815] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.320634][T10808] netlink: 'syz.4.2044': attribute type 15 has an invalid length.
[  258.528320][T10819] netlink: 'syz.4.2049': attribute type 1 has an invalid length.
[  258.535877][T10819] netlink: 'syz.4.2049': attribute type 2 has an invalid length.
[  258.547510][T10819] netlink: 'syz.4.2049': attribute type 7 has an invalid length.
[  258.557777][T10819] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2049'.
[  258.570023][T10819] netlink: 101636 bytes leftover after parsing attributes in process `syz.4.2049'.
[  258.579757][T10819] netlink: 'syz.4.2049': attribute type 1 has an invalid length.
[  258.589325][T10819] netlink: 'syz.4.2049': attribute type 2 has an invalid length.
[  258.596199][T10822] netlink: 'syz.5.2050': attribute type 39 has an invalid length.
[  258.602784][T10819] netlink: 'syz.4.2049': attribute type 7 has an invalid length.
[  258.615195][T10819] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2049'.
[  259.163786][T10830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.166586][T10830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.175349][T10830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.187996][T10830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.408088][T10863] netlink: 'syz.4.2068': attribute type 2 has an invalid length.
[  260.411589][T10863] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2068'.
[  260.606330][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'.
[  260.834670][ T5237] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  260.953597][T10889] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2080'.
[  261.021209][T10893] netlink: 'syz.5.2082': attribute type 21 has an invalid length.
[  261.745438][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'.
[  261.808844][T10921] netlink: 'syz.5.2095': attribute type 21 has an invalid length.
[  261.906937][T10928] netlink: 'syz.0.2098': attribute type 1 has an invalid length.
[  261.909557][T10928] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2098'.
[  262.605659][T10955] warn_alloc: 1 callbacks suppressed
[  262.605712][T10955] syz.0.2110: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  262.631751][T10955] CPU: 1 UID: 0 PID: 10955 Comm: syz.0.2110 Not tainted syzkaller #0 PREEMPT(full) 
[  262.631778][T10955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.631784][T10955] Call Trace:
[  262.631789][T10955]  <TASK>
[  262.631793][T10955]  dump_stack_lvl+0x189/0x250
[  262.631810][T10955]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.631823][T10955]  ? __pfx__printk+0x10/0x10
[  262.631835][T10955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  262.631846][T10955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  262.631856][T10955]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  262.631867][T10955]  warn_alloc+0x214/0x310
[  262.631876][T10955]  ? stack_depot_save_flags+0x40/0x860
[  262.631890][T10955]  ? __pfx_warn_alloc+0x10/0x10
[  262.631898][T10955]  ? kasan_save_track+0x4f/0x80
[  262.631909][T10955]  ? xskq_create+0x56/0x170
[  262.631917][T10955]  ? xsk_init_queue+0xb0/0x110
[  262.631924][T10955]  ? xsk_setsockopt+0x57b/0x8d0
[  262.631935][T10955]  ? do_sock_setsockopt+0x17c/0x1b0
[  262.631945][T10955]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  262.631954][T10955]  ? do_syscall_64+0xfa/0x3b0
[  262.631963][T10955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.631975][T10955]  __vmalloc_node_range_noprof+0x125/0x12f0
[  262.632001][T10955]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  262.632017][T10955]  ? __kasan_kmalloc+0x93/0xb0
[  262.632029][T10955]  vmalloc_user_noprof+0xad/0xf0
[  262.632041][T10955]  ? xskq_create+0xbf/0x170
[  262.632049][T10955]  xskq_create+0xbf/0x170
[  262.632058][T10955]  xsk_init_queue+0xb0/0x110
[  262.632075][T10955]  xsk_setsockopt+0x57b/0x8d0
[  262.632103][T10955]  ? __pfx_xsk_setsockopt+0x10/0x10
[  262.632117][T10955]  ? __pfx_aa_sk_perm+0x10/0x10
[  262.632127][T10955]  ? __fget_files+0x2a/0x420
[  262.632134][T10955]  ? aa_sock_opt_perm+0xff/0x1b0
[  262.632145][T10955]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  262.632155][T10955]  ? __pfx_xsk_setsockopt+0x10/0x10
[  262.632193][T10955]  do_sock_setsockopt+0x17c/0x1b0
[  262.632205][T10955]  __x64_sys_setsockopt+0x13f/0x1b0
[  262.632219][T10955]  do_syscall_64+0xfa/0x3b0
[  262.632229][T10955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.632237][T10955]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  262.632248][T10955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.632256][T10955] RIP: 0033:0x7f3ee658eba9
[  262.632265][T10955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.632272][T10955] RSP: 002b:00007f3ee74e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  262.632282][T10955] RAX: ffffffffffffffda RBX: 00007f3ee67d5fa0 RCX: 00007f3ee658eba9
[  262.632289][T10955] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  262.632294][T10955] RBP: 00007f3ee6611e19 R08: 0000000000000004 R09: 0000000000000000
[  262.632298][T10955] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  262.632304][T10955] R13: 00007f3ee67d6038 R14: 00007f3ee67d5fa0 R15: 00007ffdb39b10f8
[  262.632318][T10955]  </TASK>
[  262.632460][T10955] Mem-Info:
[  262.816981][T10955] active_anon:13298 inactive_anon:0 isolated_anon:0
[  262.816981][T10955]  active_file:13762 inactive_file:38332 isolated_file:0
[  262.816981][T10955]  unevictable:1768 dirty:145 writeback:0
[  262.816981][T10955]  slab_reclaimable:10181 slab_unreclaimable:56520
[  262.816981][T10955]  mapped:18038 shmem:2423 pagetables:980
[  262.816981][T10955]  sec_pagetables:0 bounce:0
[  262.816981][T10955]  kernel_misc_reclaimable:0
[  262.816981][T10955]  free:276662 free_pcp:14816 free_cma:0
[  262.844886][T10955] Node 0 active_anon:22600kB inactive_anon:0kB active_file:6872kB inactive_file:50856kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29496kB dirty:548kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4236kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  262.893042][T10968] netlink: 'syz.4.2116': attribute type 21 has an invalid length.
[  262.904115][ T5883] Bluetooth: hci1: command 0x0406 tx timeout
[  262.911582][T10955] Node 1 active_anon:30592kB inactive_anon:0kB active_file:48176kB inactive_file:102472kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42656kB dirty:32kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7140kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  262.924388][T10955] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  262.936882][T10955] lowmem_reserve[]: 0 811 811 811 811
[  262.939688][T10955] Node 0 DMA32 free:378912kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22600kB inactive_anon:0kB active_file:6872kB inactive_file:50856kB unevictable:3536kB writepending:616kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:39100kB local_pcp:18032kB free_cma:0kB
[  262.966182][T10955] lowmem_reserve[]: 0 0 0 0 0
[  262.968776][T10955] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  262.981003][T10955] lowmem_reserve[]: 0 0 854 854 854
[  262.989135][T10955] Node 1 Normal free:253884kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30660kB inactive_anon:0kB active_file:48176kB inactive_file:102472kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:19992kB local_pcp:2368kB free_cma:0kB
[  263.028229][T10955] lowmem_reserve[]: 0 0 0 0 0
[  263.089298][T10955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  263.103205][T10955] Node 0 DMA32: 268*4kB (UM) 308*8kB (UME) 420*16kB (UME) 253*32kB (UME) 219*64kB (UM) 146*128kB (UME) 58*256kB (UME) 22*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 72*4096kB (M) = 378224kB
[  263.131325][T10955] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  263.141242][T10955] Node 1 Normal: 351*4kB (UME) 748*8kB (UME) 280*16kB (UME) 203*32kB (UM) 196*64kB (UM) 172*128kB (UME) 33*256kB (UM) 18*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 43*4096kB (UME) = 253884kB
[  263.152038][T10955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  263.160615][T10955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  263.164656][T10955] 54517 total pagecache pages
[  263.167067][T10955] 0 pages in swap cache
[  263.169108][T10955] Free swap  = 124996kB
[  263.171304][T10955] Total swap = 124996kB
[  263.172994][T10955] 786301 pages RAM
[  263.174822][T10955] 0 pages HighMem/MovableOnly
[  263.177149][T10955] 241348 pages reserved
[  263.179391][T10955] 0 pages cma reserved
[  263.207601][T10973] netlink: 'syz.5.2117': attribute type 10 has an invalid length.
[  263.220163][T10973] netlink: 'syz.5.2117': attribute type 11 has an invalid length.
[  263.229531][T10973] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2117'.
[  263.539510][T10987] C: renamed from team_slave_0 (while UP)
[  263.547084][T10987] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2124'.
[  263.668071][T10993] netlink: 'syz.0.2127': attribute type 10 has an invalid length.
[  263.672710][T10993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.683629][T10993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.692449][T10993] batadv_slave_0: entered promiscuous mode
[  263.699054][T10993] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  263.723818][T10995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.766602][T10998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2129'.
[  263.772359][T10998] ==================================================================
[  263.775067][T10998] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  263.777793][T10998] Read of size 2 at addr ffff8881113f17c2 by task syz.0.2129/10998
[  263.780927][T10998] 
[  263.782061][T10998] CPU: 1 UID: 0 PID: 10998 Comm: syz.0.2129 Not tainted syzkaller #0 PREEMPT(full) 
[  263.782079][T10998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.782121][T10998] Call Trace:
[  263.782129][T10998]  <TASK>
[  263.782137][T10998]  dump_stack_lvl+0x189/0x250
[  263.782159][T10998]  ? __kasan_check_byte+0x12/0x40
[  263.782177][T10998]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.782187][T10998]  ? lock_release+0x4b/0x3e0
[  263.782202][T10998]  ? __virt_addr_valid+0x4a5/0x5c0
[  263.782213][T10998]  print_report+0xca/0x240
[  263.782222][T10998]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  263.782231][T10998]  kasan_report+0x118/0x150
[  263.782243][T10998]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  263.782254][T10998]  __xfrm_state_lookup+0x6ad/0x8d0
[  263.782266][T10998]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  263.782277][T10998]  ? xfrm_state_lookup+0x45/0x1e0
[  263.782288][T10998]  xfrm_state_lookup+0x11e/0x1e0
[  263.782301][T10998]  ipcomp4_init_state+0x205/0xb20
[  263.782312][T10998]  ? __xfrm_init_state+0x7ef/0x13f0
[  263.782325][T10998]  __xfrm_init_state+0xa76/0x13f0
[  263.782336][T10998]  ? __xfrm_init_state+0x7ef/0x13f0
[  263.782348][T10998]  xfrm_add_sa+0x2f5b/0x4070
[  263.782362][T10998]  ? __pfx_xfrm_add_sa+0x10/0x10
[  263.782372][T10998]  ? apparmor_capable+0x137/0x1b0
[  263.782383][T10998]  ? __nla_parse+0x40/0x60
[  263.782392][T10998]  xfrm_user_rcv_msg+0x7a3/0xab0
[  263.782405][T10998]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.782423][T10998]  ? __pfx___mutex_trylock_common+0x10/0x10
[  263.782433][T10998]  ? rcu_is_watching+0x15/0xb0
[  263.782441][T10998]  ? trace_contention_end+0x39/0x120
[  263.782449][T10998]  ? __mutex_lock+0x335/0x1350
[  263.782462][T10998]  netlink_rcv_skb+0x208/0x470
[  263.782478][T10998]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.782498][T10998]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.782516][T10998]  ? netlink_deliver_tap+0x2e/0x1b0
[  263.782529][T10998]  ? netlink_deliver_tap+0x2e/0x1b0
[  263.782545][T10998]  xfrm_netlink_rcv+0x79/0x90
[  263.782563][T10998]  netlink_unicast+0x82f/0x9e0
[  263.782578][T10998]  ? __pfx_netlink_unicast+0x10/0x10
[  263.782591][T10998]  ? netlink_sendmsg+0x642/0xb30
[  263.782606][T10998]  ? skb_put+0x11b/0x210
[  263.782624][T10998]  netlink_sendmsg+0x805/0xb30
[  263.782643][T10998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.782658][T10998]  ? aa_sock_msg_perm+0xf1/0x1d0
[  263.782671][T10998]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.782681][T10998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.782691][T10998]  __sock_sendmsg+0x21c/0x270
[  263.782705][T10998]  ____sys_sendmsg+0x505/0x830
[  263.782718][T10998]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.782730][T10998]  ? import_iovec+0x74/0xa0
[  263.782741][T10998]  ___sys_sendmsg+0x21f/0x2a0
[  263.782751][T10998]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.782768][T10998]  ? __fget_files+0x2a/0x420
[  263.782775][T10998]  ? __fget_files+0x3a0/0x420
[  263.782784][T10998]  __x64_sys_sendmsg+0x19b/0x260
[  263.782794][T10998]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.782806][T10998]  ? rcu_is_watching+0x15/0xb0
[  263.782815][T10998]  ? do_syscall_64+0xbe/0x3b0
[  263.782825][T10998]  do_syscall_64+0xfa/0x3b0
[  263.782834][T10998]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.782844][T10998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.782852][T10998]  ? exc_page_fault+0x9f/0xf0
[  263.782860][T10998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.782868][T10998] RIP: 0033:0x7f3ee658eba9
[  263.782877][T10998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.782885][T10998] RSP: 002b:00007f3ee74e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.782894][T10998] RAX: ffffffffffffffda RBX: 00007f3ee67d5fa0 RCX: 00007f3ee658eba9
[  263.782900][T10998] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  263.782906][T10998] RBP: 00007f3ee6611e19 R08: 0000000000000000 R09: 0000000000000000
[  263.782911][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.782916][T10998] R13: 00007f3ee67d6038 R14: 00007f3ee67d5fa0 R15: 00007ffdb39b10f8
[  263.782926][T10998]  </TASK>
[  263.782929][T10998] 
[  263.924974][T10998] Allocated by task 10167:
[  263.926404][T10998]  kasan_save_track+0x3e/0x80
[  263.928200][T10998]  __kasan_slab_alloc+0x6c/0x80
[  263.929989][T10998]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  263.932180][T10998]  xfrm_state_alloc+0x24/0x2f0
[  263.934113][T10998]  xfrm_add_sa+0x17d1/0x4070
[  263.935967][T10998]  xfrm_user_rcv_msg+0x7a3/0xab0
[  263.937942][T10998]  netlink_rcv_skb+0x208/0x470
[  263.939833][T10998]  xfrm_netlink_rcv+0x79/0x90
[  263.941704][T10998]  netlink_unicast+0x82f/0x9e0
[  263.943605][T10998]  netlink_sendmsg+0x805/0xb30
[  263.945521][T10998]  __sock_sendmsg+0x21c/0x270
[  263.947408][T10998]  ____sys_sendmsg+0x505/0x830
[  263.949306][T10998]  ___sys_sendmsg+0x21f/0x2a0
[  263.951202][T10998]  __x64_sys_sendmsg+0x19b/0x260
[  263.952911][T10998]  do_syscall_64+0xfa/0x3b0
[  263.954735][T10998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.957016][T10998] 
[  263.957823][T10998] Freed by task 973:
[  263.959147][T10998]  kasan_save_track+0x3e/0x80
[  263.960747][T10998]  kasan_save_free_info+0x46/0x50
[  263.962488][T10998]  __kasan_slab_free+0x5b/0x80
[  263.964047][T10998]  kmem_cache_free+0x18f/0x400
[  263.965701][T10998]  xfrm_state_gc_task+0x52d/0x6b0
[  263.967285][T10998]  process_scheduled_works+0xae1/0x17b0
[  263.969044][T10998]  worker_thread+0x8a0/0xda0
[  263.970593][T10998]  kthread+0x711/0x8a0
[  263.971895][T10998]  ret_from_fork+0x439/0x7d0
[  263.973671][T10998]  ret_from_fork_asm+0x1a/0x30
[  263.975335][T10998] 
[  263.976190][T10998] The buggy address belongs to the object at ffff8881113f1680
[  263.976190][T10998]  which belongs to the cache xfrm_state of size 928
[  263.980700][T10998] The buggy address is located 322 bytes inside of
[  263.980700][T10998]  freed 928-byte region [ffff8881113f1680, ffff8881113f1a20)
[  263.985199][T10998] 
[  263.986145][T10998] The buggy address belongs to the physical page:
[  263.988646][T10998] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881113f3600 pfn:0x1113f0
[  263.992110][T10998] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  263.994851][T10998] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  263.997484][T10998] page_type: f5(slab)
[  263.998699][T10998] raw: 057ff00000000040 ffff888104697c80 dead000000000122 0000000000000000
[  264.001585][T10998] raw: ffff8881113f3600 00000000800e0005 00000000f5000000 0000000000000000
[  264.004887][T10998] head: 057ff00000000040 ffff888104697c80 dead000000000122 0000000000000000
[  264.008211][T10998] head: ffff8881113f3600 00000000800e0005 00000000f5000000 0000000000000000
[  264.011015][T10998] head: 057ff00000000002 ffffea000444fc01 00000000ffffffff 00000000ffffffff
[  264.014339][T10998] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  264.017446][T10998] page dumped because: kasan: bad access detected
[  264.019497][T10998] page_owner tracks the page as allocated
[  264.021209][T10998] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6553, tgid 6552 (syz.0.242), ts 101665231322, free_ts 72055858781
[  264.027552][T10998]  post_alloc_hook+0x240/0x2a0
[  264.029169][T10998]  get_page_from_freelist+0x21e4/0x22c0
[  264.031171][T10998]  __alloc_frozen_pages_noprof+0x181/0x370
[  264.033493][T10998]  alloc_pages_mpol+0x232/0x4a0
[  264.035469][T10998]  allocate_slab+0x8a/0x370
[  264.037309][T10998]  ___slab_alloc+0xbeb/0x1420
[  264.038937][T10998]  kmem_cache_alloc_noprof+0x283/0x3c0
[  264.040890][T10998]  xfrm_state_alloc+0x24/0x2f0
[  264.042502][T10998]  xfrm_add_sa+0x17d1/0x4070
[  264.044294][T10998]  xfrm_user_rcv_msg+0x7a3/0xab0
[  264.046044][T10998]  netlink_rcv_skb+0x208/0x470
[  264.047879][T10998]  xfrm_netlink_rcv+0x79/0x90
[  264.049600][T10998]  netlink_unicast+0x82f/0x9e0
[  264.051502][T10998]  netlink_sendmsg+0x805/0xb30
[  264.053399][T10998]  __sock_sendmsg+0x21c/0x270
[  264.055225][T10998]  ____sys_sendmsg+0x505/0x830
[  264.056860][T10998] page last free pid 5881 tgid 5881 stack trace:
[  264.058926][T10998]  __free_frozen_pages+0xbc4/0xd30
[  264.060617][T10998]  __slab_free+0x303/0x3c0
[  264.062122][T10998]  qlist_free_all+0x97/0x140
[  264.063593][T10998]  kasan_quarantine_reduce+0x148/0x160
[  264.065561][T10998]  __kasan_slab_alloc+0x22/0x80
[  264.067233][T10998]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  264.069149][T10998]  __alloc_skb+0x112/0x2d0
[  264.070910][T10998]  netlink_ack+0x146/0xa50
[  264.072674][T10998]  netlink_rcv_skb+0x28c/0x470
[  264.074542][T10998]  netlink_unicast+0x82f/0x9e0
[  264.076440][T10998]  netlink_sendmsg+0x805/0xb30
[  264.078311][T10998]  __sock_sendmsg+0x21c/0x270
[  264.079971][T10998]  __sys_sendto+0x3bd/0x520
[  264.081672][T10998]  __x64_sys_sendto+0xde/0x100
[  264.083344][T10998]  do_syscall_64+0xfa/0x3b0
[  264.085123][T10998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.087507][T10998] 
[  264.088474][T10998] Memory state around the buggy address:
[  264.090344][T10998]  ffff8881113f1680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.092876][T10998]  ffff8881113f1700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.096153][T10998] >ffff8881113f1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.098693][T10998]                                            ^
[  264.100690][T10998]  ffff8881113f1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.103316][T10998]  ffff8881113f1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.106199][T10998] ==================================================================
[  264.123851][T10998] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  264.126591][T10998] CPU: 0 UID: 0 PID: 10998 Comm: syz.0.2129 Not tainted syzkaller #0 PREEMPT(full) 
[  264.130195][T10998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.134044][T10998] Call Trace:
[  264.135364][T10998]  <TASK>
[  264.136496][T10998]  dump_stack_lvl+0x99/0x250
[  264.138304][T10998]  ? __asan_memcpy+0x40/0x70
[  264.140087][T10998]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.142099][T10998]  ? __pfx__printk+0x10/0x10
[  264.143892][T10998]  vpanic+0x281/0x750
[  264.145422][T10998]  ? preempt_schedule+0xae/0xc0
[  264.147279][T10998]  ? __pfx_vpanic+0x10/0x10
[  264.149085][T10998]  ? preempt_schedule_common+0x83/0xd0
[  264.151191][T10998]  ? preempt_schedule+0xae/0xc0
[  264.153011][T10998]  ? __pfx_preempt_schedule+0x10/0x10
[  264.155158][T10998]  panic+0xb9/0xc0
[  264.156673][T10998]  ? __pfx_panic+0x10/0x10
[  264.158394][T10998]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  264.160659][T10998]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  264.162658][T10998]  check_panic_on_warn+0x89/0xb0
[  264.164561][T10998]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  264.166586][T10998]  end_report+0x78/0x160
[  264.168213][T10998]  kasan_report+0x129/0x150
[  264.170029][T10998]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  264.172098][T10998]  __xfrm_state_lookup+0x6ad/0x8d0
[  264.174118][T10998]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  264.176316][T10998]  ? xfrm_state_lookup+0x45/0x1e0
[  264.178278][T10998]  xfrm_state_lookup+0x11e/0x1e0
[  264.180190][T10998]  ipcomp4_init_state+0x205/0xb20
[  264.182116][T10998]  ? __xfrm_init_state+0x7ef/0x13f0
[  264.184155][T10998]  __xfrm_init_state+0xa76/0x13f0
[  264.186114][T10998]  ? __xfrm_init_state+0x7ef/0x13f0
[  264.188154][T10998]  xfrm_add_sa+0x2f5b/0x4070
[  264.189973][T10998]  ? __pfx_xfrm_add_sa+0x10/0x10
[  264.191908][T10998]  ? apparmor_capable+0x137/0x1b0
[  264.193856][T10998]  ? __nla_parse+0x40/0x60
[  264.195569][T10998]  xfrm_user_rcv_msg+0x7a3/0xab0
[  264.197512][T10998]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  264.199630][T10998]  ? __pfx___mutex_trylock_common+0x10/0x10
[  264.201904][T10998]  ? rcu_is_watching+0x15/0xb0
[  264.203748][T10998]  ? trace_contention_end+0x39/0x120
[  264.205774][T10998]  ? __mutex_lock+0x335/0x1350
[  264.207631][T10998]  netlink_rcv_skb+0x208/0x470
[  264.209490][T10998]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  264.211596][T10998]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  264.213640][T10998]  ? netlink_deliver_tap+0x2e/0x1b0
[  264.215762][T10998]  ? netlink_deliver_tap+0x2e/0x1b0
[  264.217813][T10998]  xfrm_netlink_rcv+0x79/0x90
[  264.219644][T10998]  netlink_unicast+0x82f/0x9e0
[  264.221485][T10998]  ? __pfx_netlink_unicast+0x10/0x10
[  264.223483][T10998]  ? netlink_sendmsg+0x642/0xb30
[  264.225371][T10998]  ? skb_put+0x11b/0x210
[  264.226994][T10998]  netlink_sendmsg+0x805/0xb30
[  264.228821][T10998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.230884][T10998]  ? aa_sock_msg_perm+0xf1/0x1d0
[  264.232764][T10998]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  264.234794][T10998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.236872][T10998]  __sock_sendmsg+0x21c/0x270
[  264.238712][T10998]  ____sys_sendmsg+0x505/0x830
[  264.240571][T10998]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.242634][T10998]  ? import_iovec+0x74/0xa0
[  264.244424][T10998]  ___sys_sendmsg+0x21f/0x2a0
[  264.246272][T10998]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.248325][T10998]  ? __fget_files+0x2a/0x420
[  264.250141][T10998]  ? __fget_files+0x3a0/0x420
[  264.251955][T10998]  __x64_sys_sendmsg+0x19b/0x260
[  264.253955][T10998]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  264.256163][T10998]  ? rcu_is_watching+0x15/0xb0
[  264.258095][T10998]  ? do_syscall_64+0xbe/0x3b0
[  264.259970][T10998]  do_syscall_64+0xfa/0x3b0
[  264.261801][T10998]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.263877][T10998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.266294][T10998]  ? exc_page_fault+0x9f/0xf0
[  264.268177][T10998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.270541][T10998] RIP: 0033:0x7f3ee658eba9
[  264.272336][T10998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.279829][T10998] RSP: 002b:00007f3ee74e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.283150][T10998] RAX: ffffffffffffffda RBX: 00007f3ee67d5fa0 RCX: 00007f3ee658eba9
[  264.286327][T10998] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  264.289362][T10998] RBP: 00007f3ee6611e19 R08: 0000000000000000 R09: 0000000000000000
[  264.292444][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.295431][T10998] R13: 00007f3ee67d6038 R14: 00007f3ee67d5fa0 R15: 00007ffdb39b10f8
[  264.298377][T10998]  </TASK>
[  264.300187][T10998] Kernel Offset: disabled
[  264.301823][T10998] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:38:23  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff821a8374 RBX=0000000000000014 RCX=ffff888107e33980 RDX=0000000000000000
RSI=0000000000000014 RDI=000000000000001f RBP=ffffc9000f47f328 RSP=ffffc9000f47f098
R8 =ffffea0004335107 R9 =1ffffd4000866a20 R10=dffffc0000000000 R11=fffff94000866a21
R12=1ffff11004729092 R13=dffffc0000000000 R14=0000000000000015 R15=0000000000000090
RIP=ffffffff81bfc137 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb6010066c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31421ffc CR3=000000003596e000 CR4=000006f0
DR0=ffffffffffffffff DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=c182350500000400 00020c1060fc2401
XMM02=bdd10017f0008007 4802373e1537c182 XMM03=3505000004000002 0c1060fc2401f994
XMM04=0000000000000000 01010145234e0002 XMM05=0000003200050003 a0000001023f8008
XMM06=0000000000010002 0000000000000000 XMM07=bb1414ac234e0002 0000000000060003
XMM08=0000000000000000 00007f5bee012ee7 XMM09=0000000000000000 00007f5bee012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001af9 RDI=0000000000001afa RBP=00000000000003f8 RSP=ffffc9000f06e930
R8 =ffff888107bc0237 R9 =1ffff11020f78046 R10=dffffc0000000000 R11=ffffffff854fa080
R12=dffffc0000000000 R13=ffffffff99b028d2 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa0fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3ee74e46c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e01eff8 CR3=000000010f40a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c59e ffffffff8133c59e
XMM02=00007fb6003a7498 ffffffff8133c59e XMM03=00007fb6003a74a8 00007fb6003a74a0
XMM04=00007fb600f0d100 00007fb6003a7460 XMM05=00007fb6003a7478 00007fb6003a74c0
XMM06=00007fb6003a74b8 00007fb6003a74b0 XMM07=00007fb6003a74a8 00007fb6003a74a0
XMM08=0000000000000000 00007fb600212ee7 XMM09=0000000000000000 00007fb600212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
