last executing test programs:

1.660214624s ago: executing program 0 (id=1600):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe88a100000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c000000000000000000000000000000000000000000000000000000000000000000000000000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000a00000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000000000000000028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018"], 0x1a0}}, 0x0)

1.270534493s ago: executing program 0 (id=1603):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)

1.198606604s ago: executing program 0 (id=1606):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8)

1.02999377s ago: executing program 0 (id=1609):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)

966.696864ms ago: executing program 0 (id=1611):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1943}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0xc4}, 0x1, 0x0, 0x0, 0x20004044}, 0x2c000010)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback, 0x14, 0x1, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4110, 0x100e}], 0x1}, 0x10020)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48802)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021c080406037c09e8fe55a10a0015400200142603600e122f00160004000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ed50c3e7867a9d3026cd0a23394d78c24cbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000)

609.386351ms ago: executing program 1 (id=1626):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x11, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x14, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

500.543152ms ago: executing program 1 (id=1628):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004001)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x2, r0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000cba10000e100000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000280)=r3}, 0x20)

500.356047ms ago: executing program 1 (id=1629):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
ioctl$TUNSETIFF(r0, 0xb702, 0x0)

432.893078ms ago: executing program 1 (id=1630):
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
socket$kcm(0x21, 0x2, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000001000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

190.984235ms ago: executing program 2 (id=1634):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002180000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

190.700459ms ago: executing program 2 (id=1635):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, 0x0, 0x0)

140.358807ms ago: executing program 2 (id=1636):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a)

74.977055ms ago: executing program 1 (id=1637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13d}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

74.611187ms ago: executing program 1 (id=1638):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

73.226668ms ago: executing program 2 (id=1639):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1600000000000000080000000200000000000000", @ANYRES32], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)

3.336636ms ago: executing program 2 (id=1640):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a", 0x11}], 0x1}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x2c)

2.954028ms ago: executing program 2 (id=1641):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8, 0x1, 0x100, &(0x7f0000000000)={0x0, 0x0})

0s ago: executing program 0 (id=1642):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2292' (ED25519) to the list of known hosts.
syzkaller login: [   56.610606][ T5832] cgroup: Unknown subsys name 'net'
[   56.729815][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.734063][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.463158][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.562263][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.565534][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.605214][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.701397][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.703713][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.910771][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.916176][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.919957][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.925320][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.930784][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.933856][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.938186][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.941677][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.945208][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.957964][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.991198][ T5894] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.002077][ T5895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.003197][ T5894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.008756][ T5895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.025321][ T5895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.220202][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.222905][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.333935][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   71.499031][ T5885] chnl_net:caif_netlink_parms(): no params data found
[   71.516357][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.519187][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.521393][ T5889] bridge_slave_0: entered allmulticast mode
[   71.524194][ T5889] bridge_slave_0: entered promiscuous mode
[   71.532450][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.535254][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.539184][ T5889] bridge_slave_1: entered allmulticast mode
[   71.542753][ T5889] bridge_slave_1: entered promiscuous mode
[   71.603524][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.607433][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   71.615978][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.676323][ T5889] team0: Port device team_slave_0 added
[   71.692216][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.695126][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.698687][ T5885] bridge_slave_0: entered allmulticast mode
[   71.702443][ T5885] bridge_slave_0: entered promiscuous mode
[   71.718566][ T5889] team0: Port device team_slave_1 added
[   71.728448][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.731345][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.734245][ T5885] bridge_slave_1: entered allmulticast mode
[   71.738776][ T5885] bridge_slave_1: entered promiscuous mode
[   71.802695][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.804877][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.814190][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.821353][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.825221][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.827888][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.837094][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.852295][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.855790][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.858762][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.861248][ T5888] bridge_slave_0: entered allmulticast mode
[   71.864347][ T5888] bridge_slave_0: entered promiscuous mode
[   71.888268][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.891224][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.894028][ T5888] bridge_slave_1: entered allmulticast mode
[   71.897946][ T5888] bridge_slave_1: entered promiscuous mode
[   71.949191][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.972214][ T5889] hsr_slave_0: entered promiscuous mode
[   71.974697][ T5889] hsr_slave_1: entered promiscuous mode
[   71.979753][ T5885] team0: Port device team_slave_0 added
[   71.984340][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.997718][ T5885] team0: Port device team_slave_1 added
[   72.011799][ T5888] team0: Port device team_slave_0 added
[   72.045168][ T5888] team0: Port device team_slave_1 added
[   72.057694][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.059786][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.067998][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.095609][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.098210][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.108323][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.124427][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.127254][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.135164][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.140749][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.143050][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.153822][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.268294][ T5885] hsr_slave_0: entered promiscuous mode
[   72.271211][ T5885] hsr_slave_1: entered promiscuous mode
[   72.273968][ T5885] debugfs: 'hsr0' already exists in 'hsr'
[   72.276355][ T5885] Cannot create hsr debugfs directory
[   72.285075][ T5888] hsr_slave_0: entered promiscuous mode
[   72.289042][ T5888] hsr_slave_1: entered promiscuous mode
[   72.291903][ T5888] debugfs: 'hsr0' already exists in 'hsr'
[   72.294234][ T5888] Cannot create hsr debugfs directory
[   72.540090][ T5889] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.552790][ T5889] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.560449][ T5889] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.575133][ T5889] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.631793][ T5888] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.639223][ T5888] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.649948][ T5888] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.657913][ T5888] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.739943][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.748748][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.764169][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.771158][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.854496][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.863585][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.895173][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   72.902653][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   72.916691][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.919449][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.925560][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.927959][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.939232][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.941504][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.949266][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.968565][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.970862][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.009168][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[   73.040365][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.043365][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.057334][ T5895] Bluetooth: hci2: command tx timeout
[   73.057393][ T5894] Bluetooth: hci0: command tx timeout
[   73.057767][ T5891] Bluetooth: hci1: command tx timeout
[   73.074627][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.077327][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.141477][ T5885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.191765][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.270086][ T5888] veth0_vlan: entered promiscuous mode
[   73.280364][ T5888] veth1_vlan: entered promiscuous mode
[   73.328422][ T5888] veth0_macvtap: entered promiscuous mode
[   73.344876][ T5888] veth1_macvtap: entered promiscuous mode
[   73.355867][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.365427][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.389797][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.404862][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.424020][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.429167][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.443044][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.446213][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.458719][ T5885] veth0_vlan: entered promiscuous mode
[   73.492751][ T5885] veth1_vlan: entered promiscuous mode
[   73.507921][ T5889] veth0_vlan: entered promiscuous mode
[   73.542028][ T5889] veth1_vlan: entered promiscuous mode
[   73.573914][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.584121][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.592596][ T5885] veth0_macvtap: entered promiscuous mode
[   73.609836][ T5885] veth1_macvtap: entered promiscuous mode
[   73.633872][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.639578][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.643983][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.649641][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.658156][ T5889] veth0_macvtap: entered promiscuous mode
[   73.665128][ T5889] veth1_macvtap: entered promiscuous mode
[   73.672145][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.680563][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.706379][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.727188][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.745880][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.782991][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.821844][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.824841][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.861510][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.883822][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.887366][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.893659][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.928249][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.932305][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.011204][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.025488][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.058046][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.063521][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.174587][ T5961] netlink: 'syz.2.18': attribute type 25 has an invalid length.
[   74.182367][ T5961] netlink: 'syz.2.18': attribute type 28 has an invalid length.
[   74.630182][ T5978] can: request_module (can-proto-0) failed.
[   74.804145][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'.
[   75.137644][ T5891] Bluetooth: hci1: command tx timeout
[   75.138365][ T5895] Bluetooth: hci0: command tx timeout
[   75.147238][ T5895] Bluetooth: hci2: command tx timeout
[   75.238105][ T6010] netlink: 2 bytes leftover after parsing attributes in process `syz.1.39'.
[   75.271092][ T6010] netlink: 2 bytes leftover after parsing attributes in process `syz.1.39'.
[   75.276447][    C0] hrtimer: interrupt took 82304 ns
[   75.790017][ T6014] netlink: 'syz.1.41': attribute type 13 has an invalid length.
[   76.093656][ T6025] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   76.096355][ T6025] netlink: 'syz.2.47': attribute type 2 has an invalid length.
[   76.109006][ T6025] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.47'.
[   76.293729][ T6034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.51'.
[   76.315532][ T6038] syzkaller0: entered promiscuous mode
[   76.317544][ T6038] syzkaller0: entered allmulticast mode
[   76.322539][ T6034] unsupported nlmsg_type 40
[   76.818647][ T6050] netlink: 'syz.1.57': attribute type 21 has an invalid length.
[   76.861197][ T6052] netlink: 'syz.2.58': attribute type 16 has an invalid length.
[   76.863919][ T6052] netlink: 'syz.2.58': attribute type 3 has an invalid length.
[   76.868740][ T6052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.58'.
[   76.878892][ T6053] Zero length message leads to an empty skb
[   77.218516][ T5895] Bluetooth: hci1: command tx timeout
[   77.218592][ T5894] Bluetooth: hci0: command tx timeout
[   77.223072][ T5891] Bluetooth: hci2: command tx timeout
[   77.794409][ T6070] netlink: 'syz.2.65': attribute type 6 has an invalid length.
[   77.797974][ T6070] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.65'.
[   77.965757][ T6080] netlink: 763 bytes leftover after parsing attributes in process `syz.0.70'.
[   78.043298][ T6087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.73'.
[   78.136937][ T6094] netlink: 68 bytes leftover after parsing attributes in process `syz.1.75'.
[   78.572650][ T6121] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   79.215780][ T6187] netlink: 'syz.2.89': attribute type 2 has an invalid length.
[   79.297363][ T5894] Bluetooth: hci0: command tx timeout
[   79.299361][ T5894] Bluetooth: hci2: command tx timeout
[   79.307671][ T5891] Bluetooth: hci1: command tx timeout
[   80.401528][ T6208] C: renamed from team_slave_0 (while UP)
[   80.420085][ T6208] netlink: 'syz.1.96': attribute type 3 has an invalid length.
[   80.730710][ T6227] __nla_validate_parse: 3 callbacks suppressed
[   80.730727][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'.
[   80.974749][ T6236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.985845][ T6237] netlink: 'syz.0.107': attribute type 2 has an invalid length.
[   80.988776][ T6237] netlink: 'syz.0.107': attribute type 8 has an invalid length.
[   80.991816][ T6237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.107'.
[   81.170212][ T6241] =======================================================
[   81.170212][ T6241] WARNING: The mand mount option has been deprecated and
[   81.170212][ T6241]          and is ignored by this kernel. Remove the mand
[   81.170212][ T6241]          option from the mount to silence this warning.
[   81.170212][ T6241] =======================================================
[   81.578777][ T6253] netlink: 64 bytes leftover after parsing attributes in process `syz.2.117'.
[   81.677245][ T6261] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.101452][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   82.125622][ T6288] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.126'.
[   82.215426][ T6294] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.127'.
[   82.340842][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   82.793848][ T6340] warning: `syz.1.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.896702][ T6348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.135'.
[   82.967184][ T6354] netlink: 'syz.1.138': attribute type 5 has an invalid length.
[   82.971549][ T6354] netlink: 'syz.1.138': attribute type 5 has an invalid length.
[   83.054934][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   83.060118][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   83.195565][ T6368] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   83.198352][ T6368] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   83.392278][ T5891] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   83.392298][ T5891] Bluetooth: unknown link type 8
[   83.397449][ T5891] Bluetooth: hci0: connection err: -111
[   83.547021][ T6391] netlink: 17 bytes leftover after parsing attributes in process `syz.0.155'.
[   83.550503][ T6391] netlink: zone id is out of range
[   83.552737][ T6391] netlink: zone id is out of range
[   83.554612][ T6391] netlink: zone id is out of range
[   83.557457][ T6391] netlink: zone id is out of range
[   83.559299][ T6391] netlink: zone id is out of range
[   83.561428][ T6391] netlink: zone id is out of range
[   83.563530][ T6391] netlink: zone id is out of range
[   83.585512][ T6395] netlink: 'syz.2.158': attribute type 11 has an invalid length.
[   84.698403][ T6423] netlink: 'syz.0.170': attribute type 13 has an invalid length.
[   85.242722][ T6423] erspan0: refused to change device tx_queue_len
[   85.603505][ T6441] Driver unsupported XDP return value 0 on prog  (id 55) dev N/A, expect packet loss!
[   85.783439][ T6451] __nla_validate_parse: 2 callbacks suppressed
[   85.783453][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'.
[   86.115894][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.195'.
[   86.183720][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'.
[   86.597441][   T24] cfg80211: failed to load regulatory.db
[   86.842924][ T6505] netlink: 'syz.1.209': attribute type 11 has an invalid length.
[   86.845434][ T6505] netlink: 'syz.1.209': attribute type 11 has an invalid length.
[   86.856198][ T6505] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.209'.
[   86.975991][ T6509] netlink: 177 bytes leftover after parsing attributes in process `syz.1.211'.
[   87.054043][ T6513] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.212'.
[   92.289446][ T5256] sched: DL replenish lagged too much
[   93.464064][ T6578] netlink: 80 bytes leftover after parsing attributes in process `syz.1.239'.
[   94.439540][ T6618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.255'.
[   94.443670][ T6618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.255'.
[   94.452092][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.255'.
[   94.624774][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'.
[   94.629879][ T6632] netlink: 6 bytes leftover after parsing attributes in process `syz.0.258'.
[   94.741012][ T6640] netlink: 'syz.2.259': attribute type 10 has an invalid length.
[   94.874071][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.957032][ T6640] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   95.320281][ T6659] netlink: 'syz.2.264': attribute type 40 has an invalid length.
[   95.363582][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.562756][ T6674] netlink: 830 bytes leftover after parsing attributes in process `syz.2.270'.
[   96.536176][ T6698] netlink: 'syz.2.280': attribute type 39 has an invalid length.
[   97.638259][ T6730] netlink: 'syz.0.291': attribute type 2 has an invalid length.
[   97.642523][ T6730] netlink: 'syz.0.291': attribute type 5 has an invalid length.
[   97.645647][ T6730] netlink: 'syz.0.291': attribute type 6 has an invalid length.
[   97.648661][ T6730] netlink: 'syz.0.291': attribute type 7 has an invalid length.
[   97.651372][ T6730] netlink: 9 bytes leftover after parsing attributes in process `syz.0.291'.
[   97.654248][ T6730] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.291'.
[   97.660642][ T6730] netlink: 'syz.0.291': attribute type 2 has an invalid length.
[   97.663896][ T6730] netlink: 'syz.0.291': attribute type 5 has an invalid length.
[   97.670360][ T6730] netlink: 'syz.0.291': attribute type 6 has an invalid length.
[   97.679505][ T6730] netlink: 9 bytes leftover after parsing attributes in process `syz.0.291'.
[  101.512579][ T6758] validate_nla: 1 callbacks suppressed
[  101.512614][ T6758] netlink: 'syz.0.306': attribute type 10 has an invalid length.
[  104.162593][ T6806] syz.0.326 uses obsolete (PF_INET,SOCK_PACKET)
[  104.542592][ T6806] netlink: 14 bytes leftover after parsing attributes in process `syz.0.326'.
[  104.726885][ T6836] netlink: 'syz.1.336': attribute type 12 has an invalid length.
[  104.729854][ T6836] netlink: 132 bytes leftover after parsing attributes in process `syz.1.336'.
[  105.047499][ T6842] sctp: [Deprecated]: syz.1.340 (pid 6842) Use of int in max_burst socket option deprecated.
[  105.047499][ T6842] Use struct sctp_assoc_value instead
[  105.429976][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.347'.
[  106.241422][ T6894] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.363'.
[  106.246372][ T6890] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.363'.
[  106.250355][ T6894] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.363'.
[  106.259694][ T6896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.365'.
[  109.836345][ T6922] netlink: 124 bytes leftover after parsing attributes in process `syz.0.375'.
[  109.849967][ T6922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.132662][ T5891] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  112.482213][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'.
[  112.544100][ T7007] netlink: 17 bytes leftover after parsing attributes in process `syz.0.414'.
[  112.549060][ T7007] net_ratelimit: 81 callbacks suppressed
[  112.549072][ T7007] netlink: zone id is out of range
[  112.565833][ T7007] netlink: zone id is out of range
[  112.572101][ T7007] netlink: zone id is out of range
[  112.573742][ T7007] netlink: zone id is out of range
[  112.575355][ T7007] netlink: zone id is out of range
[  112.582171][ T7007] netlink: zone id is out of range
[  112.583860][ T7007] netlink: zone id is out of range
[  112.585453][ T7007] netlink: zone id is out of range
[  112.587522][ T7007] netlink: zone id is out of range
[  112.589202][ T7007] netlink: zone id is out of range
[  113.085692][ T5894] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  113.209450][ T7025] netlink: 'syz.2.424': attribute type 21 has an invalid length.
[  113.213433][ T7025] IPv6: NLM_F_CREATE should be specified when creating new route
[  113.223718][ T7025] IPv6: Can't replace route, no match found
[  113.253914][ T7029] netlink: 'syz.0.426': attribute type 39 has an invalid length.
[  113.768649][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[  113.774965][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[  113.981948][ T7031] netlink: 'syz.1.427': attribute type 3 has an invalid length.
[  113.986143][ T7031] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.427'.
[  114.743202][ T7058] netlink: 'syz.1.438': attribute type 21 has an invalid length.
[  114.745897][ T7058] netlink: 'syz.1.438': attribute type 6 has an invalid length.
[  114.754549][ T7058] netlink: 132 bytes leftover after parsing attributes in process `syz.1.438'.
[  114.975608][ T7062] netlink: 352 bytes leftover after parsing attributes in process `syz.1.439'.
[  116.193365][ T7094] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[  116.459309][ T7099] netlink: 182 bytes leftover after parsing attributes in process `syz.1.450'.
[  117.146216][ T7156] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.477'.
[  117.150905][ T7156] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  117.191978][ T7159] netlink: 56 bytes leftover after parsing attributes in process `syz.2.478'.
[  117.195070][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'.
[  117.961670][ T7189] netlink: 160 bytes leftover after parsing attributes in process `syz.1.492'.
[  118.061456][ T7194] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.495'.
[  118.066091][ T7195] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[  118.070183][ T7195] netlink: 5 bytes leftover after parsing attributes in process `syz.0.491'.
[  118.285530][ T7207] net_ratelimit: 74 callbacks suppressed
[  118.285588][ T7207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.804424][ T7231] netlink: 'syz.0.511': attribute type 10 has an invalid length.
[  122.003188][ T7237] netlink: 'syz.1.513': attribute type 10 has an invalid length.
[  122.288446][ T7246] veth1_macvtap: left promiscuous mode
[  122.344701][ T7246] macsec0: entered allmulticast mode
[  122.365830][ T7251] veth1_macvtap: entered promiscuous mode
[  122.375017][ T7251] veth1_macvtap: entered allmulticast mode
[  122.383830][ T7251] macsec0: entered promiscuous mode
[  122.613920][ T7270] netlink: 'syz.2.528': attribute type 10 has an invalid length.
[  122.615464][ T7268] delete_channel: no stack
[  122.617215][ T7270] netlink: 'syz.2.528': attribute type 19 has an invalid length.
[  122.617230][ T7270] netlink: 156 bytes leftover after parsing attributes in process `syz.2.528'.
[  122.627718][ T7268] delete_channel: no stack
[  122.730041][ T7268] netlink: 'syz.1.527': attribute type 6 has an invalid length.
[  122.733346][ T7268] netlink: 164 bytes leftover after parsing attributes in process `syz.1.527'.
[  123.070165][ T7295] IPv6: Can't replace route, no match found
[  123.298481][ T7310] netlink: 104 bytes leftover after parsing attributes in process `syz.0.546'.
[  124.279187][ T7325] netlink: 'syz.0.552': attribute type 29 has an invalid length.
[  124.289804][ T7325] netlink: 'syz.0.552': attribute type 29 has an invalid length.
[  124.401915][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'.
[  124.733155][ T7355] netlink: 'syz.2.566': attribute type 17 has an invalid length.
[  125.883604][ T7386] netlink: 14 bytes leftover after parsing attributes in process `syz.2.577'.
[  125.906613][ T7386] openvswitch: netlink: Message has 4 unknown bytes.
[  126.642711][ T7407] netlink: 'syz.2.585': attribute type 1 has an invalid length.
[  127.228049][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[  127.495396][ T7426] netlink: 14 bytes leftover after parsing attributes in process `syz.1.591'.
[  127.622613][ T7434] netlink: 'syz.1.592': attribute type 46 has an invalid length.
[  127.955691][ T7454] lo speed is unknown, defaulting to 1000
[  127.961390][ T7454] lo speed is unknown, defaulting to 1000
[  128.028838][ T7454] lo speed is unknown, defaulting to 1000
[  128.048785][ T7459] netlink: 316 bytes leftover after parsing attributes in process `syz.0.603'.
[  128.109713][ T7454] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  128.350503][ T7454] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  128.769110][ T7454] lo speed is unknown, defaulting to 1000
[  128.773320][ T7454] lo speed is unknown, defaulting to 1000
[  128.778919][ T7454] lo speed is unknown, defaulting to 1000
[  128.800247][ T7454] syz.2.602 (7454) used greatest stack depth: 19832 bytes left
[  129.344280][ T7501] netlink: 'syz.0.622': attribute type 29 has an invalid length.
[  129.347263][ T7501] netlink: 'syz.0.622': attribute type 29 has an invalid length.
[  129.350449][ T7501] netlink: 'syz.0.622': attribute type 29 has an invalid length.
[  129.504441][ T7514] netlink: 'syz.2.627': attribute type 3 has an invalid length.
[  129.507881][ T7514] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  129.511094][ T7514] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.627'.
[  129.720437][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.633'.
[  129.735044][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.633'.
[  130.608708][ T7554] netlink: 5 bytes leftover after parsing attributes in process `syz.0.644'.
[  130.686995][ T7559] lo: entered promiscuous mode
[  132.660613][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.663096][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  135.588360][ T7607] netlink: 'syz.0.664': attribute type 2 has an invalid length.
[  135.590980][ T7607] netlink: 'syz.0.664': attribute type 1 has an invalid length.
[  135.598458][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[  135.602669][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[  135.713552][ T7614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.668'.
[  136.532621][ T7622] netlink: 'syz.0.671': attribute type 4 has an invalid length.
[  136.535991][ T7622] netlink: 17 bytes leftover after parsing attributes in process `syz.0.671'.
[  136.600924][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'.
[  136.773582][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'.
[  136.920599][ T7639] netlink: 'syz.0.678': attribute type 4 has an invalid length.
[  139.263264][ T7671] netlink: 68 bytes leftover after parsing attributes in process `syz.1.689'.
[  140.323209][ T7700] netlink: 56 bytes leftover after parsing attributes in process `syz.0.699'.
[  141.078869][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.711'.
[  141.082414][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.711'.
[  141.399612][ T7755] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.726'.
[  141.658514][ T7766] netlink: 268 bytes leftover after parsing attributes in process `syz.1.730'.
[  141.663256][ T7766] unsupported nla_type 65024
[  141.971182][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'.
[  142.152846][ T7794] netlink: 'syz.0.743': attribute type 3 has an invalid length.
[  142.156330][ T7794] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  142.159814][ T7794] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.743'.
[  142.480826][ T7816] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  142.485185][ T7816] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  142.886523][ T7840] netlink: 260 bytes leftover after parsing attributes in process `syz.0.765'.
[  142.892887][ T7840] netlink: 260 bytes leftover after parsing attributes in process `syz.0.765'.
[  142.933711][ T7842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.936196][ T7842] IPv6: NLM_F_CREATE should be set when creating new route
[  142.938945][ T7842] IPv6: NLM_F_CREATE should be set when creating new route
[  143.332822][ T7848] netlink: 'syz.0.767': attribute type 1 has an invalid length.
[  143.367907][ T7848] netlink: 5 bytes leftover after parsing attributes in process `syz.0.767'.
[  143.950174][ T7875] netlink: 'syz.1.776': attribute type 39 has an invalid length.
[  144.730770][ T7883] openvswitch: netlink: Flow actions attr not present in new flow.
[  144.912691][ T7895] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  145.339895][ T7910] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.796'.
[  145.821696][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.851729][ T7947] bridge_slave_0 (unregistering): left allmulticast mode
[  145.854738][ T7947] bridge_slave_0 (unregistering): left promiscuous mode
[  145.859083][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.465428][ T7988] bpf: Bad value for 'mode'
[  146.697728][ T8004] netlink: 'syz.1.839': attribute type 3 has an invalid length.
[  146.700903][ T8004] netlink: 'syz.1.839': attribute type 2 has an invalid length.
[  146.709408][ T8004] __nla_validate_parse: 2 callbacks suppressed
[  146.709425][ T8004] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.839'.
[  146.839562][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'.
[  149.386615][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  150.459538][ T8050] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  150.459618][ T8049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.011284][ T8074] netlink: 'syz.1.866': attribute type 1 has an invalid length.
[  151.044121][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.867'.
[  151.140222][ T8078] netlink: 192 bytes leftover after parsing attributes in process `syz.0.869'.
[  152.185949][ T8109] netlink: 'syz.2.883': attribute type 2 has an invalid length.
[  152.189229][ T8109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.883'.
[  153.659018][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.894'.
[  153.852828][ T8140] netlink: 76 bytes leftover after parsing attributes in process `syz.0.897'.
[  154.441567][ T8128] delete_channel: no stack
[  154.549036][ T8175] netlink: 220 bytes leftover after parsing attributes in process `syz.2.913'.
[  154.648898][ T8180] netlink: 'syz.2.915': attribute type 10 has an invalid length.
[  154.679570][ T8180] veth0_vlan: left promiscuous mode
[  154.684011][ T8180] veth0_vlan: entered promiscuous mode
[  154.691250][ T8180] team0: Device veth0_vlan failed to register rx_handler
[  154.776708][ T8180] syz.2.915 (8180) used greatest stack depth: 19544 bytes left
[  154.932516][ T8199] tap0: tun_chr_ioctl cmd 1074025678
[  154.934973][ T8199] tap0: group set to 0
[  155.001428][ T8204] netlink: 'syz.0.926': attribute type 4 has an invalid length.
[  155.004006][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'.
[  155.926129][ T8246] netlink: 'syz.0.945': attribute type 1 has an invalid length.
[  156.185796][ T8260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.950'.
[  158.241761][ T8284] netlink: 'syz.0.962': attribute type 10 has an invalid length.
[  158.374052][ T8301] netlink: 'syz.1.965': attribute type 10 has an invalid length.
[  158.377722][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.965'.
[  158.380712][ T8301] dummy0: entered promiscuous mode
[  158.401119][ T8301] bridge0: port 3(dummy0) entered blocking state
[  158.406046][ T8301] bridge0: port 3(dummy0) entered disabled state
[  158.411040][ T8301] dummy0: entered allmulticast mode
[  158.442964][ T8301] bridge0: port 3(dummy0) entered blocking state
[  158.445953][ T8301] bridge0: port 3(dummy0) entered forwarding state
[  159.378501][ T8331] sock: sock_set_timeout: `syz.1.981' (pid 8331) tries to set negative timeout
[  159.580106][ T8350] netlink: 180 bytes leftover after parsing attributes in process `syz.2.990'.
[  159.611899][ T8344] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.987'.
[  159.615314][ T8344] openvswitch: netlink: Message has 6 unknown bytes.
[  159.822785][ T8361] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  159.829461][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'.
[  159.833194][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'.
[  159.902032][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  159.961210][ T8365] netlink: 'syz.0.996': attribute type 21 has an invalid length.
[  160.526133][ T8378] netlink: 'syz.0.1002': attribute type 11 has an invalid length.
[  161.005350][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'.
[  162.536038][ T8398] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1011'.
[  162.694266][ T8404] syzkaller0: entered promiscuous mode
[  162.696609][ T8404] syzkaller0: entered allmulticast mode
[  164.475366][ T8450] netlink: 'syz.0.1032': attribute type 29 has an invalid length.
[  164.512936][ T8447] netlink: 'syz.0.1032': attribute type 10 has an invalid length.
[  164.921730][ T8447] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  165.162596][ T8447] syz.0.1032 (8447) used greatest stack depth: 18616 bytes left
[  165.346672][ T8465] netlink: 'syz.1.1038': attribute type 6 has an invalid length.
[  165.349387][ T8465] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1038'.
[  165.761539][ T8474] sit0: entered allmulticast mode
[  165.767125][ T8474] sit0: entered promiscuous mode
[  166.303490][ T8476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1042'.
[  166.317656][ T8478] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1043'.
[  166.404860][ T8486] openvswitch: netlink: Message has 4 unknown bytes.
[  166.475328][ T8496] netlink: 'syz.1.1052': attribute type 5 has an invalid length.
[  166.654388][ T8515] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1061'.
[  166.742529][ T8519] netlink: 'syz.0.1063': attribute type 21 has an invalid length.
[  166.747799][ T8519] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1063'.
[  166.752225][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'.
[  167.316221][ T8546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.311143][ T8568] netlink: 'syz.2.1083': attribute type 12 has an invalid length.
[  168.313914][ T8568] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1083'.
[  168.394966][ T8573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.542251][ T8581] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1088'.
[  168.545716][ T8581] hsr_slave_0: left promiscuous mode
[  168.549920][ T8581] hsr_slave_1: left promiscuous mode
[  168.991524][ T8592] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1093'.
[  170.043101][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1096'.
[  170.336333][ T8620] netlink: 'syz.0.1105': attribute type 2 has an invalid length.
[  170.339869][ T8620] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  170.343357][ T8620] nbd: must specify at least one socket
[  170.393651][ T8618] __nla_validate_parse: 1 callbacks suppressed
[  170.393707][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'.
[  170.822285][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1110'.
[  170.880939][ T8646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'.
[  170.935064][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'.
[  170.956596][ T8647] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  171.004471][ T8653] syzkaller1: tun_chr_ioctl cmd 1074025677
[  171.019495][ T8653] syzkaller1: linktype set to 823
[  171.036586][ T8652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1119'.
[  171.074823][ T8652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1119'.
[  171.519330][ T8652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1119'.
[  171.647361][ T8680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1130'.
[  171.650362][ T8680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1130'.
[  172.053779][ T8693] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  172.065294][ T8693] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  172.124767][ T8697] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1138'.
[  172.190445][ T8701] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  172.196376][ T8701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.220045][ T8700] netlink: 'syz.0.1139': attribute type 10 has an invalid length.
[  172.232042][ T8700] netlink: 'syz.0.1139': attribute type 10 has an invalid length.
[  172.239318][ T8700] team0: Device hsr_slave_0 failed to register rx_handler
[  172.485339][ T8719] netlink: 'syz.0.1144': attribute type 4 has an invalid length.
[  172.959270][ T5894] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[  173.249846][ T8744] : entered promiscuous mode
[  173.282078][ T8747] netlink: 'syz.2.1161': attribute type 10 has an invalid length.
[  173.320581][ T8738] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  173.324839][ T8738] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  174.998853][ T8790] netlink: 'syz.0.1179': attribute type 29 has an invalid length.
[  175.003546][ T8790] netlink: 'syz.0.1179': attribute type 29 has an invalid length.
[  175.243422][ T8800] netlink: 'syz.2.1184': attribute type 13 has an invalid length.
[  175.416534][ T8816] __nla_validate_parse: 10 callbacks suppressed
[  175.416551][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'.
[  175.577967][ T8826] netlink: 'syz.0.1194': attribute type 10 has an invalid length.
[  175.581479][ T8826] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1194'.
[  176.581203][ T8838] netlink: 'syz.1.1199': attribute type 10 has an invalid length.
[  176.584903][ T8838] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1199'.
[  177.614630][ T8862] netlink: 'syz.2.1209': attribute type 1 has an invalid length.
[  177.851225][ T8878] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1217'.
[  178.465203][ T8902] netlink: 'syz.2.1227': attribute type 15 has an invalid length.
[  178.468522][ T8902] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.1227'.
[  178.689022][ T8920] netlink: 'syz.2.1236': attribute type 21 has an invalid length.
[  178.804323][ T8926] lo speed is unknown, defaulting to 1000
[  178.956377][ T8941] TCP: TCP_TX_DELAY enabled
[  179.056072][ T8947] bridge_slave_1: left allmulticast mode
[  179.082187][ T8947] bridge_slave_1: left promiscuous mode
[  179.084674][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.832950][ T8974] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1257'.
[  179.933061][ T8989] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1264'.
[  179.938769][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'.
[  179.941845][ T8989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'.
[  180.143431][ T8997] syzkaller0: entered promiscuous mode
[  180.145800][ T8997] syzkaller0: entered allmulticast mode
[  180.325506][ T9001] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1268'.
[  180.331665][ T9002] netlink: 'syz.1.1269': attribute type 1 has an invalid length.
[  180.367085][ T9004] netlink: 'syz.2.1270': attribute type 39 has an invalid length.
[  180.791461][ T9022] netlink: 'syz.1.1278': attribute type 17 has an invalid length.
[  180.914051][ T9034] netlink: 'syz.0.1284': attribute type 3 has an invalid length.
[  180.942153][ T9031] netlink: 'syz.1.1283': attribute type 39 has an invalid length.
[  181.124331][ T9046] netlink: 'syz.0.1290': attribute type 21 has an invalid length.
[  181.126908][ T9046] __nla_validate_parse: 1 callbacks suppressed
[  181.126917][ T9046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1290'.
[  181.182292][ T9046] netlink: 'syz.0.1290': attribute type 4 has an invalid length.
[  181.185177][ T9046] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1290'.
[  181.371071][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'.
[  182.613622][ T9094] ref_ctr_offset mismatch. inode: 0x8f8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  183.005051][ T9110] netlink: 'syz.2.1316': attribute type 23 has an invalid length.
[  183.343353][ T9141] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1326'.
[  183.389638][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1328'.
[  183.448082][ T9153] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1332'.
[  183.450893][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'.
[  183.551052][ T5894] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  184.473073][ T9169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.812510][ T9191] sit0: entered promiscuous mode
[  184.918026][ T9195] netlink: 'syz.1.1351': attribute type 10 has an invalid length.
[  184.920547][ T9195] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1351'.
[  185.569275][ T9224] netlink: 'syz.2.1365': attribute type 1 has an invalid length.
[  185.611858][ T9227] openvswitch: netlink: IPv4 tun info is not correct
[  185.923181][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'.
[  185.930490][ T9239] netlink: 'syz.2.1372': attribute type 1 has an invalid length.
[  186.072200][ T9251] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1377'.
[  186.109395][ T9231] netlink: 'syz.1.1368': attribute type 10 has an invalid length.
[  186.153299][ T9253] lo speed is unknown, defaulting to 1000
[  186.693701][ T9285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.703678][ T9285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.717080][ T9285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.719644][ T9285] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.748853][ T9285] bond0: (slave batadv0): Releasing backup interface
[  186.754675][ T9288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.108936][ T9327] netlink: 'syz.0.1411': attribute type 1 has an invalid length.
[  188.112011][ T9327] netlink: 'syz.0.1411': attribute type 2 has an invalid length.
[  188.246237][ T9329] __nla_validate_parse: 2 callbacks suppressed
[  188.246301][ T9329] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1412'.
[  188.300740][ T9335] netlink: 'syz.0.1415': attribute type 27 has an invalid length.
[  188.303883][ T9335] netlink: 'syz.0.1415': attribute type 3 has an invalid length.
[  188.309239][ T9335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1415'.
[  188.634710][ T9344] netlink: 'syz.0.1418': attribute type 29 has an invalid length.
[  188.686099][ T9349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1420'.
[  188.731202][ T9344] netlink: 'syz.0.1418': attribute type 29 has an invalid length.
[  188.772642][ T9344] netlink: 'syz.0.1418': attribute type 29 has an invalid length.
[  188.811352][ T9354] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1422'.
[  188.816369][ T9344] netlink: 'syz.0.1418': attribute type 29 has an invalid length.
[  188.885360][ T9356] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1423'.
[  189.843937][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'.
[  189.857281][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'.
[  189.990642][ T9395] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1438'.
[  189.995135][ T9395] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1438'.
[  190.755426][ T9412] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1446'.
[  191.124065][ T9436] validate_nla: 8 callbacks suppressed
[  191.124081][ T9436] netlink: 'syz.0.1458': attribute type 1 has an invalid length.
[  192.633480][ T9493] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  194.140293][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.143132][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.439217][ T9523] netlink: 'syz.0.1495': attribute type 29 has an invalid length.
[  195.446017][ T9523] netlink: 'syz.0.1495': attribute type 29 has an invalid length.
[  195.465327][ T9523] netlink: 'syz.0.1495': attribute type 29 has an invalid length.
[  195.905373][ T9557] __nla_validate_parse: 9 callbacks suppressed
[  195.905393][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'.
[  196.189592][ T5234] Bluetooth: hci0: command 0x0406 tx timeout
[  196.191828][ T5894] Bluetooth: hci2: command 0x0406 tx timeout
[  196.192416][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  196.630157][ T9581] netlink: 'syz.0.1520': attribute type 10 has an invalid length.
[  196.954550][ T9596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'.
[  197.086052][   T33] audit: type=1107 audit(1756130965.371:2): pid=9597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  198.175115][ T9615] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1535'.
[  199.320958][ T9671] netlink: 'syz.0.1559': attribute type 1 has an invalid length.
[  201.744910][   T33] audit: type=1107 audit(1756130970.031:3): pid=9693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  202.621405][ T9710] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  202.787903][ T9719] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1577'.
[  202.815126][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'.
[  202.828914][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'.
[  202.888281][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1579'.
[  203.299688][ T9730] netlink: 'syz.0.1581': attribute type 2 has an invalid length.
[  203.303939][ T9730] netlink: 'syz.0.1581': attribute type 3 has an invalid length.
[  203.311680][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1581'.
[  203.463085][ T9730] netlink: 'syz.0.1581': attribute type 2 has an invalid length.
[  203.474849][ T9730] netlink: 'syz.0.1581': attribute type 8 has an invalid length.
[  203.492554][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1581'.
[  204.033905][ T9753] netlink: 'syz.2.1593': attribute type 4 has an invalid length.
[  204.092789][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'.
[  204.103362][ T9755] : entered promiscuous mode
[  204.259100][ T9765] netlink: 'syz.1.1599': attribute type 160 has an invalid length.
[  204.403139][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'.
[  204.698263][ T5887] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  204.784452][ T9787] sctp: [Deprecated]: syz.0.1606 (pid 9787) Use of struct sctp_assoc_value in delayed_ack socket option.
[  204.784452][ T9787] Use struct sctp_sack_info instead
[  205.099654][ T9808] netlink: 'syz.0.1611': attribute type 21 has an invalid length.
[  205.102175][ T9808] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1611'.
[  205.113069][ T9808] netlink: 'syz.0.1611': attribute type 4 has an invalid length.
[  205.165651][ T9814] netlink: 'syz.1.1619': attribute type 1 has an invalid length.
[  205.322295][ T9832] netlink: 'syz.2.1627': attribute type 3 has an invalid length.
[  205.325311][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'.
Connection to localhost closed by remote host.
[  206.511439][ T5934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.594074][ T5934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.673567][ T5934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.752455][ T5934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.840061][ T5934] bridge_slave_1: left allmulticast mode
[  206.842508][ T5934] bridge_slave_1: left promiscuous mode
[  206.845814][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.853737][ T5934] bridge_slave_0: left allmulticast mode
[  206.856193][ T5934] bridge_slave_0: left promiscuous mode
[  206.859540][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.198919][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.205785][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.212982][ T5934] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  207.228627][ T5934] bond0 (unregistering): Released all slaves
[  207.578015][ T5934] hsr_slave_0: left promiscuous mode
[  207.580228][ T5934] hsr_slave_1: left promiscuous mode
[  207.582312][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.584524][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.588251][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.590520][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.786595][ T5934] team0 (unregistering): Port device team_slave_1 removed
[  207.822392][ T5934] team0 (unregistering): Port device team_slave_0 removed
[  208.442677][ T5934] ------------[ cut here ]------------
[  208.445127][ T5934] WARNING: CPU: 0 PID: 5934 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  208.449206][ T5934] Modules linked in:
[  208.450987][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  208.456041][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.460669][ T5934] Workqueue: netns cleanup_net
[  208.462737][ T5934] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  208.465541][ T5934] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 98 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 fa e1 f7 e8 c1 c8 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b3 c8 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  208.474195][ T5934] RSP: 0018:ffffc9000469f898 EFLAGS: 00010293
[  208.477076][ T5934] RAX: ffffffff8a21e38f RBX: ffff888028ddc880 RCX: ffff888109140000
[  208.480337][ T5934] RDX: 0000000000000000 RSI: ffffffff8dba5cca RDI: ffff888109140000
[  208.483598][ T5934] RBP: ffffc9000469f9b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  208.487091][ T5934] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffffffff8f630c20
[  208.490441][ T5934] R13: 1ffff920008d3f40 R14: ffff888028dddd00 R15: dffffc0000000000
[  208.493689][ T5934] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  208.497586][ T5934] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.500297][ T5934] CR2: 00007fe65be330d0 CR3: 000000010ba0c000 CR4: 00000000000006f0
[  208.503591][ T5934] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  208.507014][ T5934] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  208.510296][ T5934] Call Trace:
[  208.511720][ T5934]  <TASK>
[  208.513001][ T5934]  xfrm_net_exit+0x2d/0x70
[  208.514871][ T5934]  ops_undo_list+0x49a/0x990
[  208.516903][ T5934]  ? __pfx_ops_undo_list+0x10/0x10
[  208.518997][ T5934]  ? do_raw_spin_unlock+0x4d/0x240
[  208.521111][ T5934]  cleanup_net+0x4c5/0x800
[  208.523022][ T5934]  ? __pfx_cleanup_net+0x10/0x10
[  208.525109][ T5934]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.527454][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  208.529844][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  208.532212][ T5934]  process_scheduled_works+0xae1/0x17b0
[  208.534555][ T5934]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.537163][ T5934]  worker_thread+0x8a0/0xda0
[  208.539076][ T5934]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.541637][ T5934]  ? __kthread_parkme+0x7b/0x200
[  208.543669][ T5934]  kthread+0x711/0x8a0
[  208.545354][ T5934]  ? __pfx_worker_thread+0x10/0x10
[  208.547594][ T5934]  ? __pfx_kthread+0x10/0x10
[  208.549535][ T5934]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.551676][ T5934]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.553819][ T5934]  ? __pfx_kthread+0x10/0x10
[  208.555734][ T5934]  ret_from_fork+0x3fc/0x770
[  208.557815][ T5934]  ? __pfx_ret_from_fork+0x10/0x10
[  208.559920][ T5934]  ? __switch_to_asm+0x39/0x70
[  208.561887][ T5934]  ? __switch_to_asm+0x33/0x70
[  208.563849][ T5934]  ? __pfx_kthread+0x10/0x10
[  208.565733][ T5934]  ret_from_fork_asm+0x1a/0x30
[  208.567935][ T5934]  </TASK>
[  208.569198][ T5934] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  208.572147][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  208.575937][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.580144][ T5934] Workqueue: netns cleanup_net
[  208.582178][ T5934] Call Trace:
[  208.583536][ T5934]  <TASK>
[  208.584741][ T5934]  dump_stack_lvl+0x99/0x250
[  208.586654][ T5934]  ? __asan_memcpy+0x40/0x70
[  208.588515][ T5934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.590637][ T5934]  ? __pfx__printk+0x10/0x10
[  208.592529][ T5934]  vpanic+0x281/0x750
[  208.594295][ T5934]  ? __pfx__printk+0x10/0x10
[  208.596182][ T5934]  ? __pfx_vpanic+0x10/0x10
[  208.598045][ T5934]  ? is_bpf_text_address+0x292/0x2b0
[  208.600244][ T5934]  panic+0xb9/0xc0
[  208.601804][ T5934]  ? __pfx_panic+0x10/0x10
[  208.603750][ T5934]  __warn+0x31b/0x4b0
[  208.605406][ T5934]  ? xfrm_state_fini+0x270/0x2f0
[  208.607401][ T5934]  ? xfrm_state_fini+0x270/0x2f0
[  208.609440][ T5934]  report_bug+0x2be/0x4f0
[  208.611207][ T5934]  ? xfrm_state_fini+0x270/0x2f0
[  208.613234][ T5934]  ? xfrm_state_fini+0x270/0x2f0
[  208.615251][ T5934]  ? xfrm_state_fini+0x272/0x2f0
[  208.617282][ T5934]  handle_bug+0x84/0x160
[  208.619018][ T5934]  exc_invalid_op+0x1a/0x50
[  208.620863][ T5934]  asm_exc_invalid_op+0x1a/0x20
[  208.622820][ T5934] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  208.625102][ T5934] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 98 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 fa e1 f7 e8 c1 c8 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b3 c8 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  208.632719][ T5934] RSP: 0018:ffffc9000469f898 EFLAGS: 00010293
[  208.635180][ T5934] RAX: ffffffff8a21e38f RBX: ffff888028ddc880 RCX: ffff888109140000
[  208.638402][ T5934] RDX: 0000000000000000 RSI: ffffffff8dba5cca RDI: ffff888109140000
[  208.641527][ T5934] RBP: ffffc9000469f9b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  208.644678][ T5934] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffffffff8f630c20
[  208.648204][ T5934] R13: 1ffff920008d3f40 R14: ffff888028dddd00 R15: dffffc0000000000
[  208.651732][ T5934]  ? xfrm_state_fini+0x26f/0x2f0
[  208.653929][ T5934]  ? xfrm_state_fini+0x26f/0x2f0
[  208.656081][ T5934]  xfrm_net_exit+0x2d/0x70
[  208.658043][ T5934]  ops_undo_list+0x49a/0x990
[  208.660062][ T5934]  ? __pfx_ops_undo_list+0x10/0x10
[  208.662306][ T5934]  ? do_raw_spin_unlock+0x4d/0x240
[  208.664512][ T5934]  cleanup_net+0x4c5/0x800
[  208.666441][ T5934]  ? __pfx_cleanup_net+0x10/0x10
[  208.668608][ T5934]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.670870][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  208.673390][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  208.675865][ T5934]  process_scheduled_works+0xae1/0x17b0
[  208.678269][ T5934]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.680860][ T5934]  worker_thread+0x8a0/0xda0
[  208.682867][ T5934]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.685602][ T5934]  ? __kthread_parkme+0x7b/0x200
[  208.687746][ T5934]  kthread+0x711/0x8a0
[  208.689532][ T5934]  ? __pfx_worker_thread+0x10/0x10
[  208.691787][ T5934]  ? __pfx_kthread+0x10/0x10
[  208.693807][ T5934]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.696079][ T5934]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.698338][ T5934]  ? __pfx_kthread+0x10/0x10
[  208.700347][ T5934]  ret_from_fork+0x3fc/0x770
[  208.702344][ T5934]  ? __pfx_ret_from_fork+0x10/0x10
[  208.704582][ T5934]  ? __switch_to_asm+0x39/0x70
[  208.706653][ T5934]  ? __switch_to_asm+0x33/0x70
[  208.708790][ T5934]  ? __pfx_kthread+0x10/0x10
[  208.710783][ T5934]  ret_from_fork_asm+0x1a/0x30
[  208.712859][ T5934]  </TASK>
[  208.714888][ T5934] Kernel Offset: disabled
[  208.716789][ T5934] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:09:36  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000469f030
R8 =ffff8880202c8237 R9 =1ffff11004059046 R10=dffffc0000000000 R11=ffffffff854efa70
R12=dffffc0000000000 R13=ffffffff99af98db R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe65be330d0 CR3=000000010ba0c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=bcebf25b4a5c1f00 RBX=ffffffff819683a8 RCX=bcebf25b4a5c1f00 RDX=0000000000000001
RSI=ffffffff8d9b6a28 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556605c2ca30 CR3=000000001f780000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000ffff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=000000ff00000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
