last executing test programs:

40.674309499s ago: executing program 0 (id=1325):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x80}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94)

40.627311333s ago: executing program 0 (id=1327):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x2, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r5=>0x0, 0x0})
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401"], 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44004)

39.574637086s ago: executing program 0 (id=1348):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x1, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x30008001}, 0x4044)

39.494338243s ago: executing program 0 (id=1350):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

38.575897193s ago: executing program 0 (id=1362):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

37.354052691s ago: executing program 0 (id=1366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0x2, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r0}, 0x38)

22.309231367s ago: executing program 32 (id=1366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0x2, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r0}, 0x38)

1.819628014s ago: executing program 1 (id=1794):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.68341645s ago: executing program 1 (id=1796):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="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", 0x58b}], 0x1}, 0x4c080)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x7eae}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.600760671s ago: executing program 3 (id=1798):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0xff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2, 0x5, 0x84)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

1.43602697s ago: executing program 3 (id=1799):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x27, 0xfffffffffffffda9, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair(0x8, 0x1, 0x21, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4)

772.185268ms ago: executing program 1 (id=1807):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r0, 0x0, 0x70, 0x0, &(0x7f0000001000)="c70dca88f2910db23f6f568df134b0b23456e9176a7a3f34343e754d1832cc11408b9777b33d17151d8c510b3f9b34363ef9aad186e11688c043454041422be09c0f6a3972901aacc8e678709d4e06748770794eac62418a1a0b43809760ffa742e6baf4de2875b966672c9c03fa20e0", &(0x7f0000000080), 0xffff8000, 0x0, 0x28, 0x7e, &(0x7f0000000100)="aec78d581d8b97a0a5b4fa22c73e0806348257fc16ed5b355e0a58d97fd748400f0e652bc1a3e037", &(0x7f0000000140)="f5c235679c93386ff3aaf43ecf4497d5ca20feaa406c3ae26ce0683059b862247708cdc595f33cee8496174ddab2f350c0639e2d213c50d540327190e3ffcf16b0b746cb63198c3023885bd23502aaf5c9d3968eb21678623353d14463682211ef89649ede2913082125c4aa9be687f0030e0d640df7bf8f8ef6e1b07b71", 0x4, 0x0, 0x9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000001080)=r1}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075e, 0x80}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000010000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={0x1, 0x58, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f0000001880)=ANY=[@ANYBLOB="a0010000130002002cbd7000fddbdf2523f806004e204e2300000100040000000800000000000000020000008000000008000000fffffeff", @ANYRES32=r6, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x20002885}, 0x20014080)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001200)=0xffffffffffffffff, 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0600"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001300)={0x0, r2}, 0x8)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001340)='cgroup.events\x00', 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000013c0)='syzkaller\x00', 0x7, 0x27, &(0x7f00000011c0)=""/39, 0x41100, 0x29, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000001240)={0x807, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[r9, r9, r9, r8, r8, r2, r9], 0x0, 0x10, 0xffffffff}, 0x94)

599.210491ms ago: executing program 2 (id=1809):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x5}, 0x28)

570.651621ms ago: executing program 2 (id=1810):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@rfm={0x25, 0x8, "5bf7602c15edec42f02899f9e69719f1"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06", 0x29}], 0x1}, 0x4008001)

424.478536ms ago: executing program 2 (id=1811):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x37, 0x1, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="785b254001"]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

409.863846ms ago: executing program 3 (id=1812):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28)

324.267996ms ago: executing program 3 (id=1813):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000640)}, 0x20)

324.032878ms ago: executing program 3 (id=1814):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0x20000000)

204.540399ms ago: executing program 2 (id=1815):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)

144.043214ms ago: executing program 2 (id=1816):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0)

133.81099ms ago: executing program 1 (id=1817):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0)

54.233434ms ago: executing program 1 (id=1818):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f00000005c0)=""/172, 0xac}], 0x5}, 0x0)

53.917591ms ago: executing program 3 (id=1819):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$kcm(r0, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001100)="ebb28f7fab10e643c0a56b5b8e343e18682962867a4af0ca2a3c261fe42309c51759fc7281c8e44b4f93", 0x2a}, {&(0x7f0000000040)="2de6", 0x2}], 0x2}, 0x4000)

373.777µs ago: executing program 2 (id=1820):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000009c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@empty, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0xc, 0x7f7, 0xaaf0, 0xfffffffffffffffe}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x21272688, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x8880}, 0x48000)

0s ago: executing program 1 (id=1821):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37004' (ED25519) to the list of known hosts.
syzkaller login: [   56.059777][ T5789] cgroup: Unknown subsys name 'net'
[   56.169117][ T5789] cgroup: Unknown subsys name 'cpuset'
[   56.173714][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.025786][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.962583][ T5868] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.135661][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.250323][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.252640][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.873733][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.880763][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.916326][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.927053][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.931985][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.932405][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.939469][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.939499][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.948173][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.951551][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.059957][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.070588][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.074306][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.079390][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.082284][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.353979][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   72.459968][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   72.556540][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.559649][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.562126][ T5877] bridge_slave_0: entered allmulticast mode
[   72.565334][ T5877] bridge_slave_0: entered promiscuous mode
[   72.592395][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.595273][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.599205][ T5877] bridge_slave_1: entered allmulticast mode
[   72.604349][ T5877] bridge_slave_1: entered promiscuous mode
[   72.619187][ T5884] chnl_net:caif_netlink_parms(): no params data found
[   72.659008][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.661757][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.663974][ T5880] bridge_slave_0: entered allmulticast mode
[   72.667532][ T5880] bridge_slave_0: entered promiscuous mode
[   72.670932][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.673124][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.675872][ T5880] bridge_slave_1: entered allmulticast mode
[   72.680179][ T5880] bridge_slave_1: entered promiscuous mode
[   72.701013][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.707415][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.767081][ T5877] team0: Port device team_slave_0 added
[   72.788115][ T5877] team0: Port device team_slave_1 added
[   72.799314][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.824588][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.882806][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.885557][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.898798][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.914807][ T5880] team0: Port device team_slave_0 added
[   72.918637][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.921301][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.932038][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.937729][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.940493][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.943319][ T5884] bridge_slave_0: entered allmulticast mode
[   72.947915][ T5884] bridge_slave_0: entered promiscuous mode
[   72.952520][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.955211][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.958968][ T5884] bridge_slave_1: entered allmulticast mode
[   72.962260][ T5884] bridge_slave_1: entered promiscuous mode
[   72.965543][ T5880] team0: Port device team_slave_1 added
[   73.028397][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.032213][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.034627][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.047065][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.055247][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.059639][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.062073][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.072583][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.159304][ T5884] team0: Port device team_slave_0 added
[   73.168081][ T5880] hsr_slave_0: entered promiscuous mode
[   73.171208][ T5880] hsr_slave_1: entered promiscuous mode
[   73.180172][ T5884] team0: Port device team_slave_1 added
[   73.188091][ T5877] hsr_slave_0: entered promiscuous mode
[   73.190707][ T5877] hsr_slave_1: entered promiscuous mode
[   73.193408][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   73.195372][ T5877] Cannot create hsr debugfs directory
[   73.233443][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.236669][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.245164][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.290662][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.293523][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.303847][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.438506][ T5884] hsr_slave_0: entered promiscuous mode
[   73.441605][ T5884] hsr_slave_1: entered promiscuous mode
[   73.444316][ T5884] debugfs: 'hsr0' already exists in 'hsr'
[   73.447456][ T5884] Cannot create hsr debugfs directory
[   73.662458][ T5880] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.682604][ T5880] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.703782][ T5880] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.721681][ T5880] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.759637][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.769000][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.791562][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.817632][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.868524][ T5884] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.878558][ T5884] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.887995][ T5884] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.907804][ T5884] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.967410][ T5882] Bluetooth: hci1: command tx timeout
[   74.033942][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.046819][ T5882] Bluetooth: hci0: command tx timeout
[   74.057651][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.089542][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   74.111313][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.114645][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.124593][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   74.127193][ T5882] Bluetooth: hci2: command tx timeout
[   74.134223][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.148997][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.151887][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.157815][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.160607][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.189831][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.192537][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.208272][ T5884] 8021q: adding VLAN 0 to HW filter on device team0
[   74.231956][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.234613][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.251139][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.254133][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.515474][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.551812][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.571525][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.609864][ T5880] veth0_vlan: entered promiscuous mode
[   74.637663][ T5880] veth1_vlan: entered promiscuous mode
[   74.653761][ T5884] veth0_vlan: entered promiscuous mode
[   74.677363][ T5877] veth0_vlan: entered promiscuous mode
[   74.681055][ T5884] veth1_vlan: entered promiscuous mode
[   74.700407][ T5877] veth1_vlan: entered promiscuous mode
[   74.740162][ T5884] veth0_macvtap: entered promiscuous mode
[   74.745446][ T5880] veth0_macvtap: entered promiscuous mode
[   74.757165][ T5884] veth1_macvtap: entered promiscuous mode
[   74.762270][ T5880] veth1_macvtap: entered promiscuous mode
[   74.772214][ T5877] veth0_macvtap: entered promiscuous mode
[   74.788192][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.801252][ T5877] veth1_macvtap: entered promiscuous mode
[   74.810167][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.814480][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.833528][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.841331][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.851137][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.860721][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.875021][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.879485][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.885574][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.903779][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.907908][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.936115][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.940295][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.965005][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.968944][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.984832][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.989090][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.071094][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.074201][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.125873][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.128998][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.141206][ T4039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.144245][ T4039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.156384][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.162962][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.198332][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.202305][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.231255][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.240332][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.047672][ T5882] Bluetooth: hci1: command tx timeout
[   76.137226][ T5882] Bluetooth: hci0: command tx timeout
[   76.176666][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   76.208985][ T5882] Bluetooth: hci2: command tx timeout
[   76.334694][ T5989] netlink: 17 bytes leftover after parsing attributes in process `syz.0.29'.
[   76.346334][ T5989] netlink: zone id is out of range
[   76.348433][ T5989] netlink: zone id is out of range
[   76.351569][ T5989] netlink: zone id is out of range
[   76.353650][ T5989] netlink: zone id is out of range
[   76.355626][ T5989] netlink: zone id is out of range
[   76.384702][ T5989] netlink: zone id is out of range
[   76.388607][ T5989] netlink: zone id is out of range
[   76.397084][ T5989] netlink: zone id is out of range
[   76.399283][ T5989] netlink: zone id is out of range
[   76.402633][ T5989] netlink: zone id is out of range
[   76.540238][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'.
[   76.732910][ T6006] netlink: 'syz.0.38': attribute type 5 has an invalid length.
[   76.744848][ T6006] netlink: 'syz.0.38': attribute type 15 has an invalid length.
[   77.181111][ T6026] netlink: 13 bytes leftover after parsing attributes in process `syz.0.47'.
[   77.559336][ T6047] netlink: 'syz.0.57': attribute type 8 has an invalid length.
[   77.681597][ T6040] netlink: 72 bytes leftover after parsing attributes in process `syz.1.53'.
[   77.724157][ T6053] netlink: 'syz.0.60': attribute type 29 has an invalid length.
[   77.913541][ T6059] : entered promiscuous mode
[   78.206418][ T5882] Bluetooth: hci0: command tx timeout
[   78.267554][ T5882] Bluetooth: hci1: command tx timeout
[   78.286311][ T5882] Bluetooth: hci2: command tx timeout
[   78.682618][    C1] hrtimer: interrupt took 20894 ns
[   78.763500][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.932980][ T6083] =======================================================
[   78.932980][ T6083] WARNING: The mand mount option has been deprecated and
[   78.932980][ T6083]          and is ignored by this kernel. Remove the mand
[   78.932980][ T6083]          option from the mount to silence this warning.
[   78.932980][ T6083] =======================================================
[   79.840272][ T6107] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[   79.845759][ T6107] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.82'.
[   80.094696][ T6125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.91'.
[   80.101516][ T6125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.91'.
[   80.119073][ T6125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.91'.
[   80.290800][ T5882] Bluetooth: hci1: command tx timeout
[   80.293052][ T5882] Bluetooth: hci0: command tx timeout
[   80.293764][ T6134] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.96'.
[   80.366315][   T54] Bluetooth: hci2: command tx timeout
[   80.880379][ T6158] netlink: 'syz.1.100': attribute type 10 has an invalid length.
[   80.884241][ T6158] ipvlan1: entered promiscuous mode
[   80.910165][ T6158] ipvlan1: entered allmulticast mode
[   80.912312][ T6158] veth0_vlan: entered allmulticast mode
[   80.919838][ T6158] bridge0: port 3(ipvlan1) entered blocking state
[   80.943268][ T6158] bridge0: port 3(ipvlan1) entered disabled state
[   81.393932][ T6183] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[   82.334487][ T6203] __nla_validate_parse: 3 callbacks suppressed
[   82.334508][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.119'.
[   82.632513][ T6219] netlink: 'syz.2.127': attribute type 26 has an invalid length.
[   82.644562][ T6221] netlink: 'syz.1.129': attribute type 2 has an invalid length.
[   82.649150][ T6221] netlink: 51 bytes leftover after parsing attributes in process `syz.1.129'.
[   82.963527][ T6243] net_ratelimit: 76 callbacks suppressed
[   82.963560][ T6243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.175377][ T6247] Zero length message leads to an empty skb
[   83.201052][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'.
[   83.228364][ T6250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.761313][ T6260] netlink: 26 bytes leftover after parsing attributes in process `syz.2.145'.
[   83.852430][ T6264] warning: `syz.1.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.045384][ T6266] netlink: 763 bytes leftover after parsing attributes in process `syz.2.146'.
[   84.080061][ T6269] sctp: [Deprecated]: syz.0.148 (pid 6269) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.080061][ T6269] Use struct sctp_sack_info instead
[   84.162541][ T6273] netlink: 'syz.2.150': attribute type 21 has an invalid length.
[   84.165278][ T6273] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   84.170111][ T6273] netlink: 15202 bytes leftover after parsing attributes in process `syz.2.150'.
[   85.241681][ T6314] netlink: 'syz.0.168': attribute type 3 has an invalid length.
[   85.245187][ T6314] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[   85.248825][ T6314] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.168'.
[   86.638120][   T10] cfg80211: failed to load regulatory.db
[   87.402501][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.184'.
[   87.722479][ T6375] netlink: 'syz.0.193': attribute type 21 has an invalid length.
[   87.726761][ T6375] netlink: 152 bytes leftover after parsing attributes in process `syz.0.193'.
[   87.998083][ T6392] option changes via remount are deprecated (pid=6388 comm=syz.2.202)
[   88.299717][ T6398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.323720][ T6398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.618344][ T6420] netlink: 830 bytes leftover after parsing attributes in process `syz.0.211'.
[   89.136881][ T6433] netlink: 'syz.1.218': attribute type 40 has an invalid length.
[   89.150033][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.384436][ T6444] netlink: 'syz.1.223': attribute type 2 has an invalid length.
[   89.394350][ T6444] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.223'.
[   89.435213][ T6444] nbd: must specify a device to reconfigure
[   89.492154][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'.
[   89.608217][ T6453] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   89.874962][ T6460] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.231'.
[   89.938993][ T6462] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   89.956605][ T6462] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   90.243723][ T6479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.658881][ T6503] syzkaller0: entered promiscuous mode
[   92.661575][ T6503] syzkaller0: entered allmulticast mode
[   92.867842][ T6505] wg0 speed is unknown, defaulting to 1000
[   92.870625][ T6505] wg0 speed is unknown, defaulting to 1000
[   93.230586][ T6505] wg0 speed is unknown, defaulting to 1000
[   93.335002][ T6518] netlink: 'syz.1.256': attribute type 21 has an invalid length.
[   93.344001][ T6518] netlink: 144 bytes leftover after parsing attributes in process `syz.1.256'.
[   93.448345][ T6505] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.821113][ T6505] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   93.864485][ T6505] wg0 speed is unknown, defaulting to 1000
[   93.869504][ T6505] wg0 speed is unknown, defaulting to 1000
[   93.877187][ T6505] wg0 speed is unknown, defaulting to 1000
[   93.891038][ T6530] sctp: [Deprecated]: syz.1.260 (pid 6530) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.891038][ T6530] Use struct sctp_sack_info instead
[   94.229692][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'.
[   94.257672][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'.
[   94.347002][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'.
[   94.678665][ T6561] netlink: 'syz.0.273': attribute type 21 has an invalid length.
[   94.681456][ T6561] netlink: 'syz.0.273': attribute type 20 has an invalid length.
[   95.535482][ T6582] svc: failed to register nfsdv3 RPC service (errno 111).
[   95.542943][ T6582] svc: failed to register nfsaclv3 RPC service (errno 111).
[   95.801427][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   95.911476][ T6582] syz.0.282 (6582) used greatest stack depth: 19920 bytes left
[   96.626336][ T6603] netlink: 14 bytes leftover after parsing attributes in process `syz.2.291'.
[  100.359818][ T6663] netlink: 'syz.2.315': attribute type 21 has an invalid length.
[  100.887474][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1201434851 wd_nsec: 1201434817
[  101.563095][ T6698] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.331'.
[  101.770014][ T6706] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.333'.
[  101.779847][ T6706] netlink: zone id is out of range
[  101.782822][ T6706] netlink: zone id is out of range
[  101.787537][ T6706] netlink: zone id is out of range
[  101.831170][ T6706] netlink: get zone limit has 8 unknown bytes
[  101.964072][ T6712] xt_time: invalid argument - start or stop time greater than 23:59:59
[  102.759412][ T6738] delete_channel: no stack
[  102.943265][ T6743] Illegal XDP return value 4294967274 on prog  (id 123) dev N/A, expect packet loss!
[  103.174742][ T6749] netlink: 'syz.1.352': attribute type 17 has an invalid length.
[  103.341280][ T6753] netlink: 'syz.0.354': attribute type 10 has an invalid length.
[  103.350275][ T6753] veth1_macvtap: left promiscuous mode
[  103.642130][ T6765] veth1_macvtap: left promiscuous mode
[  103.709342][ T6765] veth1_macvtap: entered promiscuous mode
[  103.713395][ T6765] macsec0: entered promiscuous mode
[  103.718915][ T6765] macsec0: entered allmulticast mode
[  103.721793][ T6765] veth1_macvtap: entered allmulticast mode
[  103.814849][ T6777] netlink: 'syz.1.364': attribute type 14 has an invalid length.
[  104.082018][ T6783] netlink: 830 bytes leftover after parsing attributes in process `syz.1.366'.
[  105.039964][ T6808] netlink: 'syz.2.372': attribute type 21 has an invalid length.
[  105.043573][ T6808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.372'.
[  105.047659][ T6808] netlink: 'syz.2.372': attribute type 1 has an invalid length.
[  105.422325][ T6829] netlink: 6 bytes leftover after parsing attributes in process `syz.1.379'.
[  105.720322][ T6841] netlink: 'syz.2.383': attribute type 23 has an invalid length.
[  108.061369][ T6867] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.395'.
[  108.094921][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'.
[  108.302655][ T6881] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  108.381334][ T6883] netlink: 830 bytes leftover after parsing attributes in process `syz.2.403'.
[  108.481311][ T6892] openvswitch: netlink: EtherType 50a is less than min 600
[  112.349318][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'.
[  113.189607][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'.
[  113.194468][ T6968] option changes via remount are deprecated (pid=6967 comm=syz.1.438)
[  114.381115][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'.
[  114.468272][ T6997] netlink: 'syz.0.451': attribute type 1 has an invalid length.
[  114.873801][ T7009] syz.0.457 uses obsolete (PF_INET,SOCK_PACKET)
[  115.135232][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.458'.
[  115.389215][ T7025] netlink: 'syz.0.464': attribute type 3 has an invalid length.
[  115.538880][ T7032] netlink: 104 bytes leftover after parsing attributes in process `syz.0.467'.
[  116.433048][ T7051] netlink: 'syz.0.475': attribute type 21 has an invalid length.
[  116.448821][ T7051] netlink: 128 bytes leftover after parsing attributes in process `syz.0.475'.
[  116.452819][ T7051] netlink: 'syz.0.475': attribute type 4 has an invalid length.
[  116.457287][ T7051] netlink: 3 bytes leftover after parsing attributes in process `syz.0.475'.
[  116.562622][ T7050] delete_channel: no stack
[  117.028641][ T7065] tap0: tun_chr_ioctl cmd 1074025680
[  117.728832][ T7082] netlink: 'syz.2.489': attribute type 21 has an invalid length.
[  117.732267][ T7082] netlink: 'syz.2.489': attribute type 15 has an invalid length.
[  117.735490][ T7082] netlink: 156 bytes leftover after parsing attributes in process `syz.2.489'.
[  117.741492][ T7082] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.744902][ T7082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  117.748214][ T7082] IPv6: NLM_F_CREATE should be set when creating new route
[  117.751139][ T7082] IPv6: NLM_F_CREATE should be set when creating new route
[  117.754053][ T7082] IPv6: NLM_F_CREATE should be set when creating new route
[  118.322690][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.325812][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.341186][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.344262][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.534846][ T7111] netlink: 220 bytes leftover after parsing attributes in process `syz.0.501'.
[  118.832233][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'.
[  119.624367][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'.
[  120.031404][ T7166] netlink: 'syz.2.525': attribute type 2 has an invalid length.
[  120.033962][ T7166] netlink: 'syz.2.525': attribute type 8 has an invalid length.
[  120.038579][ T7166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.525'.
[  120.171805][ T7164] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[  120.174640][ T7164] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[  120.202923][ T7164] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  121.264034][ T7183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.533'.
[  121.868212][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[  121.872821][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'.
[  121.904941][ T7212] netlink: 'syz.0.545': attribute type 29 has an invalid length.
[  121.909952][ T7212] netlink: 'syz.0.545': attribute type 29 has an invalid length.
[  122.062512][ T7221] netlink: 'syz.2.549': attribute type 11 has an invalid length.
[  122.229454][ T7223] netlink: 'syz.0.550': attribute type 2 has an invalid length.
[  122.233054][ T7223] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  122.238315][ T7225] netlink: 'syz.2.551': attribute type 29 has an invalid length.
[  122.241749][ T7223] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.550'.
[  122.249085][ T7223] block nbd5: not configured, cannot reconfigure
[  122.257884][ T7225] netlink: 'syz.2.551': attribute type 29 has an invalid length.
[  122.457108][ T7227] team0: Port device geneve1 added
[  124.565178][ T7277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.142257][ T7296] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.582'.
[  125.145449][ T7296] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  125.177260][ T7302] validate_nla: 4 callbacks suppressed
[  125.177287][ T7302] netlink: 'syz.0.584': attribute type 29 has an invalid length.
[  125.182734][ T7302] netlink: 'syz.0.584': attribute type 3 has an invalid length.
[  125.186168][ T7302] netlink: 132 bytes leftover after parsing attributes in process `syz.0.584'.
[  125.731434][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.749853][ T7319] bridge0: entered allmulticast mode
[  128.485037][ T7342] netlink: 'syz.1.601': attribute type 13 has an invalid length.
[  128.650452][ T7356] C: renamed from team_slave_0 (while UP)
[  128.655580][ T7356] netlink: 'syz.1.607': attribute type 3 has an invalid length.
[  128.659205][ T7356] netlink: 152 bytes leftover after parsing attributes in process `syz.1.607'.
[  128.662724][ T7356] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  128.724481][ T7362] netlink: 200 bytes leftover after parsing attributes in process `syz.0.611'.
[  129.315884][ T7404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.625'.
[  129.842427][ T7427] netlink: 'syz.2.633': attribute type 2 has an invalid length.
[  129.854412][ T7427] netlink: 119 bytes leftover after parsing attributes in process `syz.2.633'.
[  130.122235][ T7432] netlink: 'syz.2.636': attribute type 8 has an invalid length.
[  131.165350][ T7477] netlink: 'syz.2.654': attribute type 29 has an invalid length.
[  131.391632][ T7488] netlink: 'syz.0.659': attribute type 9 has an invalid length.
[  131.394252][ T7488] netlink: 'syz.0.659': attribute type 11 has an invalid length.
[  131.397214][ T7488] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.659'.
[  132.292650][ T7503] netlink: 160 bytes leftover after parsing attributes in process `syz.0.666'.
[  132.418666][ T7508] netlink: 'syz.0.666': attribute type 10 has an invalid length.
[  132.691931][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.694223][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.983359][ T7529] netlink: 'syz.2.677': attribute type 2 has an invalid length.
[  135.409468][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'.
[  135.413124][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'.
[  135.419078][ T7553] netlink: 19 bytes leftover after parsing attributes in process `syz.2.685'.
[  135.553070][ T7563] netlink: 'syz.1.690': attribute type 280 has an invalid length.
[  135.664394][ T7571] netlink: 188 bytes leftover after parsing attributes in process `syz.1.694'.
[  135.854869][ T7581] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.698'.
[  135.863606][ T7581] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  136.396934][ T7587] syz.0.700 (7587) used greatest stack depth: 18168 bytes left
[  136.537409][ T7594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.703'.
[  136.662480][ T7599] netlink: 'syz.1.705': attribute type 2 has an invalid length.
[  136.665603][ T7599] netlink: 'syz.1.705': attribute type 1 has an invalid length.
[  136.669858][ T7599] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.705'.
[  136.673325][ T7599] nbd: must specify at least one socket
[  136.725720][ T7596] netlink: 'syz.0.704': attribute type 10 has an invalid length.
[  136.755464][ T7596] bond0: (slave bond_slave_0): Releasing backup interface
[  136.875240][ T7605] netlink: 'syz.1.708': attribute type 9 has an invalid length.
[  136.925108][ T7609] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.709'.
[  136.928445][ T7607] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.709'.
[  137.759892][ T7623] netlink: 'syz.0.713': attribute type 29 has an invalid length.
[  138.088579][ T7629] netlink: 'syz.0.716': attribute type 13 has an invalid length.
[  138.285138][ T7641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.408640][ T7645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.723'.
[  138.876375][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'.
[  138.969045][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.972399][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.336169][   T24] syz2: Port: 1 Link DOWN
[  139.452096][ T5940] wg0 speed is unknown, defaulting to 1000
[  139.454119][ T5940] syz0: Port: 1 Link DOWN
[  139.456601][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.466967][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.470391][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.473779][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.525192][ T7664] netlink: 'syz.1.732': attribute type 21 has an invalid length.
[  139.528839][ T7664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.732'.
[  139.900730][ T7670] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  139.905196][ T7670] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  139.947212][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'.
[  140.003622][ T7690] netlink: 148 bytes leftover after parsing attributes in process `syz.2.742'.
[  140.090372][ T7694] netlink: 144 bytes leftover after parsing attributes in process `syz.2.744'.
[  142.132644][   T54] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[  142.499202][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'.
[  142.666873][ T7749] netlink: 'syz.1.769': attribute type 39 has an invalid length.
[  142.778371][ T7742] netlink: 188 bytes leftover after parsing attributes in process `syz.2.765'.
[  142.869474][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'.
[  142.991181][ T7755] netlink: 830 bytes leftover after parsing attributes in process `syz.1.771'.
[  143.164320][ T7761] netlink: 'syz.2.773': attribute type 21 has an invalid length.
[  143.177281][ T7761] netlink: 'syz.2.773': attribute type 1 has an invalid length.
[  143.297297][ T7766] netlink: 'syz.1.775': attribute type 10 has an invalid length.
[  143.300723][ T7766] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.775'.
[  147.701333][ T7814] netlink: 'syz.0.791': attribute type 2 has an invalid length.
[  147.704325][ T7814] netlink: 164 bytes leftover after parsing attributes in process `syz.0.791'.
[  147.711601][ T7814] netlink: 'syz.0.791': attribute type 2 has an invalid length.
[  147.714260][ T7814] netlink: 164 bytes leftover after parsing attributes in process `syz.0.791'.
[  147.978458][ T7830] rdma_rxe: rxe_newlink: failed to add lo
[  148.275900][   T54] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  149.238304][ T7872] netlink: 112 bytes leftover after parsing attributes in process `syz.2.818'.
[  149.378892][ T7880] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.820'.
[  149.830384][ T7896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.827'.
[  149.884755][ T7896] netlink: 'syz.0.827': attribute type 11 has an invalid length.
[  149.887976][ T7896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.827'.
[  149.895616][ T7895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.958521][ T7898] netlink: 'syz.0.828': attribute type 1 has an invalid length.
[  149.965081][ T7898] netlink: 'syz.0.828': attribute type 2 has an invalid length.
[  150.104130][ T7900] xt_socket: unknown flags 0x20
[  150.128305][ T7901] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.828'.
[  150.775500][   T54] Bluetooth: hci1: Malformed LE Event: 0x1d
[  151.472154][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'.
[  151.475556][ T7952] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  151.480581][ T7952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.661203][ T7960] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'.
[  151.704334][ T7962] netlink: 'syz.0.855': attribute type 4 has an invalid length.
[  151.707949][ T7962] netlink: 17 bytes leftover after parsing attributes in process `syz.0.855'.
[  151.795112][ T7966] netlink: 'syz.0.857': attribute type 13 has an invalid length.
[  152.418481][ T7979] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  152.421279][ T7979] netlink: 'syz.1.860': attribute type 2 has an invalid length.
[  153.000058][ T8004] netlink: 'syz.2.873': attribute type 2 has an invalid length.
[  153.003802][ T8004] netlink: 'syz.2.873': attribute type 8 has an invalid length.
[  153.014633][ T8004] netlink: 'syz.2.873': attribute type 9 has an invalid length.
[  153.024803][ T8004] netlink: 'syz.2.873': attribute type 10 has an invalid length.
[  153.030348][ T8004] netlink: 'syz.2.873': attribute type 11 has an invalid length.
[  153.033578][ T8004] __nla_validate_parse: 1 callbacks suppressed
[  153.033593][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'.
[  153.083065][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'.
[  153.393544][ T8024] netlink: 196 bytes leftover after parsing attributes in process `syz.2.881'.
[  153.499038][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'.
[  154.212708][ T8075] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.899'.
[  154.392636][ T8090] ksmbd: Unknown IPC event: 1, ignore.
[  154.670390][ T8110] netlink: 'syz.1.914': attribute type 10 has an invalid length.
[  154.672887][ T8110] bridge0: left allmulticast mode
[  154.674907][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.677582][ T8110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.705892][ T8110] team0: Port device bridge0 added
[  156.194721][ T8155] netlink: 64 bytes leftover after parsing attributes in process `syz.0.934'.
[  156.804805][ T8178] netlink: 'syz.1.945': attribute type 10 has an invalid length.
[  156.814743][ T8178] netlink: 55 bytes leftover after parsing attributes in process `syz.1.945'.
[  157.435209][ T8200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.058757][ T8240] netlink: 182 bytes leftover after parsing attributes in process `syz.2.971'.
[  158.064371][ T8240] netlink: 'syz.2.971': attribute type 10 has an invalid length.
[  158.084620][ T8240] veth0_vlan: left promiscuous mode
[  158.088820][ T8240] veth0_vlan: entered promiscuous mode
[  158.094834][ T8240] team0: Device veth0_vlan failed to register rx_handler
[  158.176908][ T8240] netlink: 216 bytes leftover after parsing attributes in process `syz.2.971'.
[  158.192247][ T8240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.971'.
[  158.747530][ T8256] raw_sendmsg: syz.0.977 forgot to set AF_INET. Fix it!
[  158.779072][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.977'.
[  158.841440][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.977'.
[  159.115612][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.977'.
[  159.264386][ T8274] netlink: 'syz.1.984': attribute type 4 has an invalid length.
[  159.268522][ T8274] netlink: 152 bytes leftover after parsing attributes in process `syz.1.984'.
[  159.309383][ T8274] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  159.385015][ T8287] netlink: 'syz.2.991': attribute type 4 has an invalid length.
[  161.074193][ T8313] netlink: 'syz.2.1000': attribute type 1 has an invalid length.
[  164.858949][ T8329] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1008'.
[  164.893654][ T8329] openvswitch: netlink: Message has 6 unknown bytes.
[  164.920997][ T8334] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  164.924180][ T8334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1010'.
[  164.936331][ T8334] dummy0: entered promiscuous mode
[  164.940009][ T8334] bridge0: port 3(dummy0) entered blocking state
[  164.942177][ T8334] bridge0: port 3(dummy0) entered disabled state
[  164.944330][ T8334] dummy0: entered allmulticast mode
[  164.949585][ T8334] bridge0: port 3(dummy0) entered blocking state
[  164.951808][ T8334] bridge0: port 3(dummy0) entered forwarding state
[  164.976220][ T8336] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  164.980082][ T8336] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  165.053589][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.382477][ T8353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1018'.
[  167.133316][ T8389] tap0: tun_chr_ioctl cmd 2147767507
[  167.380778][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'.
[  167.386342][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'.
[  167.643073][ T8418] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1049'.
[  167.798050][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  168.153433][ T8448] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1063'.
[  168.220226][ T8446] netlink: 'syz.1.1062': attribute type 1 has an invalid length.
[  168.800898][ T8462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.804818][ T8464] netlink: 'syz.1.1070': attribute type 3 has an invalid length.
[  168.809002][ T8464] netlink: 'syz.1.1070': attribute type 10 has an invalid length.
[  168.857776][ T8464] veth1_macvtap (unregistering): left allmulticast mode
[  169.099645][ T8469] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1072'.
[  169.500469][   T54] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  169.696742][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'.
[  169.812107][ T8507] netlink: 'syz.1.1089': attribute type 21 has an invalid length.
[  170.894418][ T8548] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1107'.
[  170.897568][ T8548] netlink: zone id is out of range
[  170.899324][ T8548] netlink: zone id is out of range
[  170.901294][ T8548] netlink: zone id is out of range
[  170.903125][ T8548] netlink: zone id is out of range
[  170.905001][ T8548] netlink: zone id is out of range
[  170.911269][ T8548] netlink: zone id is out of range
[  170.913261][ T8548] netlink: zone id is out of range
[  170.915010][ T8548] netlink: zone id is out of range
[  170.917034][ T8548] netlink: zone id is out of range
[  170.919189][ T8548] netlink: zone id is out of range
[  171.692571][   T54] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4
[  173.449654][ T8623] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1140'.
[  173.544950][ T8625] syz.2.1140 (8625) used obsolete PPPIOCDETACH ioctl
[  173.899983][ T8630] netlink: 'syz.0.1142': attribute type 10 has an invalid length.
[  174.336859][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'.
[  175.462622][ T8691] wg0 speed is unknown, defaulting to 1000
[  177.096349][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'.
[  177.100039][ T8708] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1176'.
[  177.701405][ T8722] netlink: 'syz.2.1182': attribute type 1 has an invalid length.
[  177.704592][ T8722] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1182'.
[  177.804413][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'.
[  177.822187][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'.
[  178.030424][ T8737] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1189'.
[  178.142787][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'.
[  178.156156][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'.
[  178.160203][ T8743] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1192'.
[  178.164237][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'.
[  178.403206][ T8765] net_ratelimit: 12 callbacks suppressed
[  178.403225][ T8765] openvswitch: netlink: Message has 5588 unknown bytes.
[  178.409391][ T8765] openvswitch: netlink: Actions may not be safe on all matching packets
[  178.734738][ T8794] dummy0: mtu less than device minimum
[  179.733319][ T8808] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  180.792979][ T8856] netlink: 'syz.0.1245': attribute type 28 has an invalid length.
[  181.029580][ T8862] syzkaller0: entered promiscuous mode
[  181.031848][ T8862] syzkaller0: entered allmulticast mode
[  181.337406][ T8883] netlink: 'syz.2.1257': attribute type 13 has an invalid length.
[  181.341155][ T8881] openvswitch: netlink: IP tunnel dst address not specified
[  182.506188][ T8883] gretap0: refused to change device tx_queue_len
[  182.509132][ T8883] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  182.738074][ T8895] netlink: 'syz.1.1262': attribute type 2 has an invalid length.
[  182.741755][ T8895] netlink: 'syz.1.1262': attribute type 8 has an invalid length.
[  182.745584][ T8895] __nla_validate_parse: 7 callbacks suppressed
[  182.745721][ T8895] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1262'.
[  182.782297][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'.
[  182.788216][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1262'.
[  183.880905][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'.
[  183.957676][ T8920] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1272'.
[  185.097915][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'.
[  185.929417][ T8944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.013311][ T8952] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1289'.
[  186.099131][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'.
[  187.015894][ T8985] netlink: 'syz.2.1302': attribute type 1 has an invalid length.
[  187.021310][ T8985] netlink: 376 bytes leftover after parsing attributes in process `syz.2.1302'.
[  187.131787][ T8987] netlink: 'syz.2.1303': attribute type 12 has an invalid length.
[  187.135155][ T8987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1303'.
[  187.618367][ T9020] netlink: 'syz.0.1317': attribute type 5 has an invalid length.
[  187.620967][ T9020] netlink: 'syz.0.1317': attribute type 7 has an invalid length.
[  188.221509][ T9049] __nla_validate_parse: 1 callbacks suppressed
[  188.221557][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'.
[  188.259275][ T9053] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1332'.
[  188.263004][ T9053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1332'.
[  188.904231][ T9083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.400481][ T9142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'.
[  192.404199][ T9142] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1373'.
[  192.898570][ T9153] netlink: 'syz.2.1378': attribute type 10 has an invalid length.
[  193.281285][ T9166] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1384'.
[  194.135520][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.141461][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.363484][ T9224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.814789][ T9242] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1420'.
[  195.829341][ T9244] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1421'.
[  196.065718][ T9250] rdma_rxe: rxe_newlink: failed to add erspan0
[  196.210001][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  196.212731][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  196.216594][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[  196.352014][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'.
[  201.138356][ T9321] netlink: 'syz.2.1452': attribute type 2 has an invalid length.
[  201.667373][ T9331] netlink: 'syz.1.1457': attribute type 3 has an invalid length.
[  201.675631][ T9331] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1457'.
[  201.824552][ T9333] nftables ruleset with unbound chain
[  202.622691][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'.
[  204.089346][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'.
[  204.140466][ T9380] netlink: 'syz.1.1479': attribute type 2 has an invalid length.
[  204.143067][ T9380] netlink: 'syz.1.1479': attribute type 1 has an invalid length.
[  204.288225][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1482'.
[  204.292848][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1482'.
[  204.720399][ T9402] openvswitch: netlink: Missing key (keys=40, expected=80)
[  205.101147][ T9413] syzkaller1: tun_chr_ioctl cmd 1074812118
[  205.115004][ T9409] netlink: 'syz.1.1493': attribute type 3 has an invalid length.
[  205.123161][ T9409] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1493'.
[  205.209388][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'.
[  205.218184][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'.
[  205.991132][ T9438] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1506'.
[  206.331476][ T9458] netlink: 'syz.2.1516': attribute type 2 has an invalid length.
[  206.517511][ T9462] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  206.536602][ T9465] netlink: 'syz.1.1519': attribute type 8 has an invalid length.
[  206.539575][ T9465] netlink: 'syz.1.1519': attribute type 6 has an invalid length.
[  206.553096][ T9465] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1519'.
[  206.870545][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.879001][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.884235][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.885901][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1522'.
[  206.899355][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.903485][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.930406][ T9471] netlink: 'syz.2.1522': attribute type 7 has an invalid length.
[  206.934047][ T9471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1522'.
[  207.098719][ T9475] wg0 speed is unknown, defaulting to 1000
[  207.424807][ T9475] chnl_net:caif_netlink_parms(): no params data found
[  207.749220][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.752373][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.761406][ T9475] bridge_slave_0: entered allmulticast mode
[  207.767397][ T9475] bridge_slave_0: entered promiscuous mode
[  207.774044][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.779837][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.782980][ T9475] bridge_slave_1: entered allmulticast mode
[  207.787735][ T9475] bridge_slave_1: entered promiscuous mode
[  207.832802][ T9496] tmpfs: Bad value for 'gid'
[  207.834498][ T9496] tmpfs: Bad value for 'gid'
[  207.903143][ T9475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.913386][ T9475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.925391][   T13] bridge_slave_1: left allmulticast mode
[  207.928028][   T13] bridge_slave_1: left promiscuous mode
[  207.931737][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.948055][   T13] bridge_slave_0: left promiscuous mode
[  207.950462][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.214213][ T9509] netlink: 'syz.1.1535': attribute type 3 has an invalid length.
[  208.219647][ T9509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1535'.
[  208.353758][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.359473][ T9513] netlink: 'syz.1.1537': attribute type 21 has an invalid length.
[  208.359528][   T13] bond0 (unregistering): Released all slaves
[  208.362973][ T9513] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1537'.
[  208.423842][ T9475] team0: Port device team_slave_0 added
[  208.438910][ T9475] team0: Port device team_slave_1 added
[  208.482984][   T13] : left promiscuous mode
[  208.513208][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.515652][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.527665][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.535224][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.546064][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.555173][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.576184][ T9522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1541'.
[  208.598322][ T9522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1541'.
[  208.611922][ T9522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1541'.
[  208.629494][ T9475] hsr_slave_0: entered promiscuous mode
[  208.631805][ T9475] hsr_slave_1: entered promiscuous mode
[  208.633931][ T9475] debugfs: 'hsr0' already exists in 'hsr'
[  208.635758][ T9475] Cannot create hsr debugfs directory
[  208.948949][ T9475] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  208.971024][ T9475] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  208.989173][   T13] hsr_slave_0: left promiscuous mode
[  208.992420][   T13] hsr_slave_1: left promiscuous mode
[  209.006193][ T5878] Bluetooth: hci0: command tx timeout
[  209.339383][   T13] team0 (unregistering): Port device team_slave_1 removed
[  209.419143][   T13] team0 (unregistering): Port device team_slave_0 removed
[  209.448843][ T9533] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1546'.
[  209.893499][ T9475] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  209.901766][ T9475] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  209.937980][ T9533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1546'.
[  209.955464][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  210.112542][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'.
[  210.132449][ T9475] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.175557][ T9475] 8021q: adding VLAN 0 to HW filter on device team0
[  210.184223][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.186846][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.204889][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.208008][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.462036][ T9475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.505062][ T9566] netlink: 'syz.2.1555': attribute type 10 has an invalid length.
[  210.505313][ T9475] veth0_vlan: entered promiscuous mode
[  210.517826][ T9475] veth1_vlan: entered promiscuous mode
[  210.558824][ T9566] batman_adv: batadv0: Adding interface: 
[  210.561185][ T9566] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.572981][ T9566] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  210.599472][ T9475] veth0_macvtap: entered promiscuous mode
[  210.608226][ T9475] veth1_macvtap: entered promiscuous mode
[  210.631763][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.649662][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.670547][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.679634][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.683465][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.694794][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.784944][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.787857][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.817951][  T613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.821838][  T613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.086548][ T5878] Bluetooth: hci0: command tx timeout
[  212.039717][ T9610] GPL: port 1(gretap0) entered blocking state
[  212.042866][ T9610] GPL: port 1(gretap0) entered disabled state
[  212.045894][ T9610] gretap0: entered allmulticast mode
[  212.063875][ T9610] gretap0: entered promiscuous mode
[  212.111520][ T9614] netlink: 'syz.3.1578': attribute type 1 has an invalid length.
[  212.114590][ T9614] netlink: 'syz.3.1578': attribute type 2 has an invalid length.
[  212.247953][ T9623] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  212.430458][ T9631] openvswitch: netlink: IP tunnel dst address not specified
[  212.570539][ T9642] netlink: 'syz.2.1591': attribute type 29 has an invalid length.
[  212.582678][ T9642] netlink: 'syz.2.1591': attribute type 29 has an invalid length.
[  212.617924][ T9639] syzkaller0: entered promiscuous mode
[  212.620189][ T9639] syzkaller0: entered allmulticast mode
[  212.626077][ T9642] netlink: 'syz.2.1591': attribute type 29 has an invalid length.
[  212.706073][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'.
[  213.179298][ T5878] Bluetooth: hci0: command tx timeout
[  214.203739][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'.
[  214.389337][ T9669] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1602'.
[  214.392827][ T9669] netlink: 'syz.3.1602': attribute type 1 has an invalid length.
[  214.553828][ T9672] netlink: 'syz.3.1603': attribute type 21 has an invalid length.
[  214.558042][ T9672] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1603'.
[  215.428480][ T9726] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1628'.
[  215.547805][ T5878] Bluetooth: hci0: command tx timeout
[  216.985115][ T5878] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  217.014401][ T9747] netlink: 'syz.1.1638': attribute type 1 has an invalid length.
[  217.025199][ T9747] netlink: 'syz.1.1638': attribute type 1 has an invalid length.
[  217.135367][ T9757] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.1642'.
[  217.141536][ T9757] openvswitch: netlink: Message has 6 unknown bytes.
[  217.380331][ T9772] netlink: 'syz.2.1649': attribute type 6 has an invalid length.
[  217.384450][ T9776] netlink: 'syz.1.1652': attribute type 6 has an invalid length.
[  217.388028][ T9776] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1652'.
[  217.464969][ T9782] netlink: 'syz.1.1655': attribute type 1 has an invalid length.
[  217.712209][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'.
[  217.979466][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1662'.
[  218.036855][ T9780] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  218.228311][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'.
[  218.600427][ T5878] Bluetooth: hci2: unexpected event 0x01 length: 151 > 1
[  218.830584][ T9837] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1678'.
[  219.200549][ T9857] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1683'.
[  220.692448][ T9901] netlink: 'syz.2.1707': attribute type 12 has an invalid length.
[  220.695731][ T9901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1707'.
[  220.799924][ T9908] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1711'.
[  220.861448][ T9913] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  222.868317][ T9967] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1737'.
[  223.008081][ T9975] netlink: 'syz.1.1741': attribute type 7 has an invalid length.
[  223.425147][ T9989] netlink: 'syz.2.1748': attribute type 21 has an invalid length.
[  223.685352][ T9999] x_tables: ip_tables: udp match: only valid for protocol 17
[  224.105750][T10017] netlink: 'syz.1.1761': attribute type 4 has an invalid length.
[  227.076528][ T5878] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  227.491975][T10110] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1801'.
[  227.654265][T10116] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1804'.
[  228.473069][T10141] tap0: tun_chr_ioctl cmd 1074025677
[  228.475499][T10141] tap0: linktype set to 6
[  228.703869][T10152] ==================================================================
[  228.707120][T10152] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  228.710428][T10152] Read of size 4 at addr ffff888030dec0c4 by task syz.2.1820/10152
[  228.715208][T10152] 
[  228.716415][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.2.1820 Not tainted syzkaller #0 PREEMPT(full) 
[  228.716435][T10152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.716446][T10152] Call Trace:
[  228.716455][T10152]  <TASK>
[  228.716465][T10152]  dump_stack_lvl+0x189/0x250
[  228.716501][T10152]  ? __kasan_check_byte+0x12/0x40
[  228.716524][T10152]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.716549][T10152]  ? lock_release+0x4b/0x3e0
[  228.716573][T10152]  ? __virt_addr_valid+0x4a5/0x5c0
[  228.716593][T10152]  print_report+0xca/0x240
[  228.716607][T10152]  ? xfrm_alloc_spi+0x570/0xf30
[  228.716625][T10152]  kasan_report+0x118/0x150
[  228.716647][T10152]  ? xfrm_alloc_spi+0x570/0xf30
[  228.716669][T10152]  xfrm_alloc_spi+0x570/0xf30
[  228.716688][T10152]  ? xfrm_alloc_spi+0x2a0/0xf30
[  228.716732][T10152]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  228.716751][T10152]  ? xfrm_find_acq+0x87/0xa0
[  228.716773][T10152]  xfrm_alloc_userspi+0x70b/0xc90
[  228.716792][T10152]  ? apparmor_capable+0x137/0x1b0
[  228.716810][T10152]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  228.716822][T10152]  ? __nla_parse+0x40/0x60
[  228.716839][T10152]  xfrm_user_rcv_msg+0x7a3/0xab0
[  228.716860][T10152]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  228.716889][T10152]  ? __pfx___mutex_trylock_common+0x10/0x10
[  228.716907][T10152]  ? rcu_is_watching+0x15/0xb0
[  228.716922][T10152]  ? trace_contention_end+0x39/0x120
[  228.716936][T10152]  ? __mutex_lock+0x335/0x1350
[  228.716954][T10152]  netlink_rcv_skb+0x208/0x470
[  228.716971][T10152]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  228.717024][T10152]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  228.717044][T10152]  ? netlink_deliver_tap+0x2e/0x1b0
[  228.717060][T10152]  ? netlink_deliver_tap+0x2e/0x1b0
[  228.717077][T10152]  xfrm_netlink_rcv+0x79/0x90
[  228.717098][T10152]  netlink_unicast+0x82f/0x9e0
[  228.717113][T10152]  ? __pfx_netlink_unicast+0x10/0x10
[  228.717128][T10152]  ? netlink_sendmsg+0x642/0xb30
[  228.717143][T10152]  ? skb_put+0x11b/0x210
[  228.717160][T10152]  netlink_sendmsg+0x805/0xb30
[  228.717179][T10152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.717196][T10152]  ? aa_sock_msg_perm+0xf1/0x1d0
[  228.717210][T10152]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  228.717226][T10152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.717242][T10152]  __sock_sendmsg+0x21c/0x270
[  228.717257][T10152]  ____sys_sendmsg+0x505/0x830
[  228.717276][T10152]  ? __pfx_____sys_sendmsg+0x10/0x10
[  228.717296][T10152]  ? import_iovec+0x74/0xa0
[  228.717316][T10152]  ___sys_sendmsg+0x21f/0x2a0
[  228.717334][T10152]  ? __pfx____sys_sendmsg+0x10/0x10
[  228.717361][T10152]  ? __fget_files+0x2a/0x420
[  228.717375][T10152]  ? __fget_files+0x3a0/0x420
[  228.717391][T10152]  __x64_sys_sendmsg+0x19b/0x260
[  228.717409][T10152]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  228.717430][T10152]  ? rcu_is_watching+0x15/0xb0
[  228.717445][T10152]  ? do_syscall_64+0xbe/0x3b0
[  228.717464][T10152]  do_syscall_64+0xfa/0x3b0
[  228.717479][T10152]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.717494][T10152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.717507][T10152]  ? exc_page_fault+0x9f/0xf0
[  228.717522][T10152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.717543][T10152] RIP: 0033:0x7fc6c038eba9
[  228.717559][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.717572][T10152] RSP: 002b:00007fc6c120b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  228.717590][T10152] RAX: ffffffffffffffda RBX: 00007fc6c05d5fa0 RCX: 00007fc6c038eba9
[  228.717601][T10152] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000004
[  228.717610][T10152] RBP: 00007fc6c0411e19 R08: 0000000000000000 R09: 0000000000000000
[  228.717620][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.717628][T10152] R13: 00007fc6c05d6038 R14: 00007fc6c05d5fa0 R15: 00007fff876f0558
[  228.717644][T10152]  </TASK>
[  228.717650][T10152] 
[  228.872218][T10152] Allocated by task 10021:
[  228.874059][T10152]  kasan_save_track+0x3e/0x80
[  228.875950][T10152]  __kasan_slab_alloc+0x6c/0x80
[  228.877953][T10152]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  228.880290][T10152]  xfrm_state_alloc+0x24/0x2f0
[  228.882244][T10152]  xfrm_add_sa+0x17d1/0x4070
[  228.883812][T10152]  xfrm_user_rcv_msg+0x7a3/0xab0
[  228.885365][T10152]  netlink_rcv_skb+0x208/0x470
[  228.886896][T10152]  xfrm_netlink_rcv+0x79/0x90
[  228.888403][T10152]  netlink_unicast+0x82f/0x9e0
[  228.890035][T10152]  netlink_sendmsg+0x805/0xb30
[  228.891632][T10152]  __sock_sendmsg+0x21c/0x270
[  228.893412][T10152]  ____sys_sendmsg+0x505/0x830
[  228.895171][T10152]  ___sys_sendmsg+0x21f/0x2a0
[  228.896550][T10152]  __x64_sys_sendmsg+0x19b/0x260
[  228.898098][T10152]  do_syscall_64+0xfa/0x3b0
[  228.899514][T10152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.901361][T10152] 
[  228.902116][T10152] Freed by task 792:
[  228.903336][T10152]  kasan_save_track+0x3e/0x80
[  228.904800][T10152]  kasan_save_free_info+0x46/0x50
[  228.906791][T10152]  __kasan_slab_free+0x5b/0x80
[  228.908740][T10152]  kmem_cache_free+0x18f/0x400
[  228.910699][T10152]  xfrm_state_gc_task+0x52d/0x6b0
[  228.912700][T10152]  process_scheduled_works+0xae1/0x17b0
[  228.914624][T10152]  worker_thread+0x8a0/0xda0
[  228.916367][T10152]  kthread+0x711/0x8a0
[  228.917870][T10152]  ret_from_fork+0x439/0x7d0
[  228.919712][T10152]  ret_from_fork_asm+0x1a/0x30
[  228.921692][T10152] 
[  228.922680][T10152] The buggy address belongs to the object at ffff888030dec000
[  228.922680][T10152]  which belongs to the cache xfrm_state of size 928
[  228.928229][T10152] The buggy address is located 196 bytes inside of
[  228.928229][T10152]  freed 928-byte region [ffff888030dec000, ffff888030dec3a0)
[  228.933547][T10152] 
[  228.934389][T10152] The buggy address belongs to the physical page:
[  228.936521][T10152] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030ded680 pfn:0x30dec
[  228.939932][T10152] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  228.943288][T10152] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  228.946245][T10152] page_type: f5(slab)
[  228.947752][T10152] raw: 00fff00000000040 ffff88801bfb0c80 dead000000000122 0000000000000000
[  228.950625][T10152] raw: ffff888030ded680 00000000800e000b 00000000f5000000 0000000000000000
[  228.954215][T10152] head: 00fff00000000040 ffff88801bfb0c80 dead000000000122 0000000000000000
[  228.957910][T10152] head: ffff888030ded680 00000000800e000b 00000000f5000000 0000000000000000
[  228.961656][T10152] head: 00fff00000000002 ffffea0000c37b01 00000000ffffffff 00000000ffffffff
[  228.965462][T10152] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  228.969202][T10152] page dumped because: kasan: bad access detected
[  228.971395][T10152] page_owner tracks the page as allocated
[  228.973678][T10152] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6595, tgid 6594 (syz.2.288), ts 95674147773, free_ts 95623572072
[  228.981242][T10152]  post_alloc_hook+0x240/0x2a0
[  228.983359][T10152]  get_page_from_freelist+0x21e4/0x22c0
[  228.985676][T10152]  __alloc_frozen_pages_noprof+0x181/0x370
[  228.988099][T10152]  alloc_pages_mpol+0x232/0x4a0
[  228.989881][T10152]  allocate_slab+0x8a/0x370
[  228.991407][T10152]  ___slab_alloc+0xbeb/0x1420
[  228.992982][T10152]  kmem_cache_alloc_noprof+0x283/0x3c0
[  228.994806][T10152]  xfrm_state_alloc+0x24/0x2f0
[  228.996415][T10152]  xfrm_add_sa+0x17d1/0x4070
[  228.997895][T10152]  xfrm_user_rcv_msg+0x7a3/0xab0
[  228.999490][T10152]  netlink_rcv_skb+0x208/0x470
[  229.001021][T10152]  xfrm_netlink_rcv+0x79/0x90
[  229.002660][T10152]  netlink_unicast+0x82f/0x9e0
[  229.004729][T10152]  netlink_sendmsg+0x805/0xb30
[  229.006803][T10152]  __sock_sendmsg+0x21c/0x270
[  229.008786][T10152]  ____sys_sendmsg+0x505/0x830
[  229.010878][T10152] page last free pid 5856 tgid 5856 stack trace:
[  229.013645][T10152]  __free_frozen_pages+0xbc4/0xd30
[  229.015850][T10152]  stack_depot_save_flags+0x436/0x860
[  229.018173][T10152]  kasan_save_track+0x4f/0x80
[  229.020216][T10152]  __kasan_slab_alloc+0x6c/0x80
[  229.022067][T10152]  kmem_cache_alloc_bulk_noprof+0x4e0/0x790
[  229.024477][T10152]  mas_alloc_nodes+0x447/0x8e0
[  229.026467][T10152]  mas_erase+0x4c2/0x890
[  229.028193][T10152]  mtree_erase+0xf0/0x150
[  229.029988][T10152]  simple_offset_remove+0x58/0x90
[  229.032032][T10152]  shmem_unlink+0x177/0x2d0
[  229.033748][T10152]  vfs_unlink+0x394/0x650
[  229.035398][T10152]  do_unlinkat+0x345/0x560
[  229.037117][T10152]  __x64_sys_unlink+0x47/0x50
[  229.038902][T10152]  do_syscall_64+0xfa/0x3b0
[  229.040732][T10152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.043162][T10152] 
[  229.044160][T10152] Memory state around the buggy address:
[  229.046387][T10152]  ffff888030debf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  229.049559][T10152]  ffff888030dec000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.052755][T10152] >ffff888030dec080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.055983][T10152]                                            ^
[  229.058439][T10152]  ffff888030dec100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.061526][T10152]  ffff888030dec180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.064658][T10152] ==================================================================
[  229.068081][T10152] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  229.070938][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.2.1820 Not tainted syzkaller #0 PREEMPT(full) 
[  229.074731][T10152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.078525][T10152] Call Trace:
[  229.079831][T10152]  <TASK>
[  229.081053][T10152]  dump_stack_lvl+0x99/0x250
[  229.082744][T10152]  ? __asan_memcpy+0x40/0x70
[  229.084283][T10152]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.085982][T10152]  ? __pfx__printk+0x10/0x10
[  229.087490][T10152]  vpanic+0x281/0x750
[  229.088765][T10152]  ? __pfx_vpanic+0x10/0x10
[  229.090203][T10152]  ? irqentry_exit+0x74/0x90
[  229.091664][T10152]  panic+0xb9/0xc0
[  229.092860][T10152]  ? __pfx_panic+0x10/0x10
[  229.094614][T10152]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  229.096703][T10152]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  229.098691][T10152]  ? xfrm_alloc_spi+0x570/0xf30
[  229.100216][T10152]  check_panic_on_warn+0x89/0xb0
[  229.101771][T10152]  ? xfrm_alloc_spi+0x570/0xf30
[  229.103350][T10152]  end_report+0x78/0x160
[  229.104683][T10152]  kasan_report+0x129/0x150
[  229.106126][T10152]  ? xfrm_alloc_spi+0x570/0xf30
[  229.107735][T10152]  xfrm_alloc_spi+0x570/0xf30
[  229.109237][T10152]  ? xfrm_alloc_spi+0x2a0/0xf30
[  229.110817][T10152]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  229.112453][T10152]  ? xfrm_find_acq+0x87/0xa0
[  229.114153][T10152]  xfrm_alloc_userspi+0x70b/0xc90
[  229.116176][T10152]  ? apparmor_capable+0x137/0x1b0
[  229.117833][T10152]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  229.119587][T10152]  ? __nla_parse+0x40/0x60
[  229.121029][T10152]  xfrm_user_rcv_msg+0x7a3/0xab0
[  229.122631][T10152]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  229.124617][T10152]  ? __pfx___mutex_trylock_common+0x10/0x10
[  229.126467][T10152]  ? rcu_is_watching+0x15/0xb0
[  229.128037][T10152]  ? trace_contention_end+0x39/0x120
[  229.129645][T10152]  ? __mutex_lock+0x335/0x1350
[  229.131062][T10152]  netlink_rcv_skb+0x208/0x470
[  229.132454][T10152]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  229.134465][T10152]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  229.136737][T10152]  ? netlink_deliver_tap+0x2e/0x1b0
[  229.138848][T10152]  ? netlink_deliver_tap+0x2e/0x1b0
[  229.141009][T10152]  xfrm_netlink_rcv+0x79/0x90
[  229.143139][T10152]  netlink_unicast+0x82f/0x9e0
[  229.145118][T10152]  ? __pfx_netlink_unicast+0x10/0x10
[  229.147294][T10152]  ? netlink_sendmsg+0x642/0xb30
[  229.149326][T10152]  ? skb_put+0x11b/0x210
[  229.151089][T10152]  netlink_sendmsg+0x805/0xb30
[  229.152838][T10152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.154783][T10152]  ? aa_sock_msg_perm+0xf1/0x1d0
[  229.156757][T10152]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  229.158643][T10152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.160687][T10152]  __sock_sendmsg+0x21c/0x270
[  229.162571][T10152]  ____sys_sendmsg+0x505/0x830
[  229.164481][T10152]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.166544][T10152]  ? import_iovec+0x74/0xa0
[  229.168368][T10152]  ___sys_sendmsg+0x21f/0x2a0
[  229.169915][T10152]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.172181][T10152]  ? __fget_files+0x2a/0x420
[  229.174035][T10152]  ? __fget_files+0x3a0/0x420
[  229.175830][T10152]  __x64_sys_sendmsg+0x19b/0x260
[  229.177398][T10152]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.179272][T10152]  ? rcu_is_watching+0x15/0xb0
[  229.180801][T10152]  ? do_syscall_64+0xbe/0x3b0
[  229.182230][T10152]  do_syscall_64+0xfa/0x3b0
[  229.183771][T10152]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.185374][T10152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.187255][T10152]  ? exc_page_fault+0x9f/0xf0
[  229.188987][T10152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.190847][T10152] RIP: 0033:0x7fc6c038eba9
[  229.192347][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.199177][T10152] RSP: 002b:00007fc6c120b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.202237][T10152] RAX: ffffffffffffffda RBX: 00007fc6c05d5fa0 RCX: 00007fc6c038eba9
[  229.205467][T10152] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000004
[  229.208702][T10152] RBP: 00007fc6c0411e19 R08: 0000000000000000 R09: 0000000000000000
[  229.211976][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.214970][T10152] R13: 00007fc6c05d6038 R14: 00007fc6c05d5fa0 R15: 00007fff876f0558
[  229.217507][T10152]  </TASK>
[  229.219216][T10152] Kernel Offset: disabled
[  229.220568][T10152] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:09:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001486 RDI=0000000000001487 RBP=00000000000003f8 RSP=ffffc9000394e9f0
R8 =ffff8880210d8237 R9 =1ffff1100421b046 R10=dffffc0000000000 R11=ffffffff85500300
R12=dffffc0000000000 R13=ffffffff99b03903 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550037c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc6c120b6c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000014800 CR3=000000001f744000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=000400019bc20800 06800401c7080008 XMM03=8382e0d208000100 0000080606012186
XMM04=0000000000000000 0000000000000000 XMM05=000055557ddc409c 000055557ddc4000
XMM06=0000000000000000 0000000000000000 XMM07=6e6576652e79726f 6d656d01ffffffff
XMM08=b00303f010000a9f 9003108080808408 XMM09=666e206220303631 3731306139666666
XMM10=61636f6c6c615f6c 6174696769645f63 XMM11=2e79656b5f5f2e65 63697665645f6574
XMM12=6374706d20622030 6139613130613966 XMM13=6c5f657461657263 5f6c6e5f6d705f70
XMM14=6b5f5f2e74656b63 6f735f6e65747369 XMM15=6139666666666666 66660a31322e7965
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffc9000321f380 RCX=8cb8e58494c49900 RDX=dffffc0000000000
RSI=ffffffff8b7aa1dd RDI=ffffc9000321f2c8 RBP=ffffc9000321f350 RSP=ffffc9000321f2c0
R8 =ffffc9000321f390 R9 =000000000000000c R10=ffffc9000321f318 R11=ffffffff81ac4c50
R12=ffff8881001dd640 R13=1ffff92000643edc R14=ffffffff81ac4c50 R15=ffffc9000321f2c8
RIP=ffffffff8172d0f0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558986c808 CR3=000000000df36000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f47eeba7498 00007f47eeba7470 XMM03=00007f47eeba74a8 00007f47eeba74a0
XMM04=00007f47ef70d100 00007f47eeba7460 XMM05=00007f47eeba7478 00007f47eeba74c0
XMM06=00007f47eeba74b8 00007f47eeba74b0 XMM07=00007f47eeba74a8 00007f47eeba74a0
XMM08=0000000000000000 00007f47eea12ee7 XMM09=0000000000000000 00007f47eea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
